{
  "resultsPerPage" : 5053,
  "startIndex" : 0,
  "totalResults" : 5053,
  "format" : "NVD_CVE",
  "version" : "2.0",
  "timestamp" : "2026-05-07T03:02:16.2313949",
  "vulnerabilities" : [ {
    "cve" : {
      "id" : "CVE-2009-0022",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-01-05T20:30:02.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root filesystem via a crafted connection request that specifies a blank share name."
      }, {
        "lang" : "es",
        "value" : "Samba v3.2.0 hasta v3.2.6, cuando el registro de acciones está habilitado, permite a usuarios autenticados remotamente acceder al sistema de ficheros raíz a través de una petición de conexión manipulada que especifica un nombre de recurso compartido en blanco."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44746973-3CFD-4808-9545-755E296EFF6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E4627C-5D19-4599-B304-D0E4D4193170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE162A7-969D-44D5-B9ED-764F20F19C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DF45AE-DF03-4321-A019-D3BBC16433B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D87AD2-89F2-455F-916E-D404E6BD02C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6218AB51-DE71-40F3-8CBC-AF33586D36EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02F8427-0DCC-48A9-A04F-939571D511E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://master.samba.org/samba/ftp/patches/security/samba-3.2.6-CVE-2009-0022.patch",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/51152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33379",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33392",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33431",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.samba.org/samba/security/CVE-2009-0022.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33118",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021513",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0017",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47733",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/702-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00309.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://master.samba.org/samba/ftp/patches/security/samba-3.2.6-CVE-2009-0022.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/51152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.samba.org/samba/security/CVE-2009-0022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/702-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00309.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Patch Information - http://www.samba.org/samba/history/security.html",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of samba as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.",
        "lastModified" : "2009-01-07T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0021",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-01-07T17:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077."
      }, {
        "lang" : "es",
        "value" : "NTP versiones 4.2.4 anteriores a 4.2.4p5 y versiones 4.2.5 anteriores a 4.2.5p150, no comprueba apropiadamente el valor devuelto de la función EVP_VerifyFinal de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados por medio de una firma de SSL/TLS malformada para las claves DSA y ECDSA, una vulnerabilidad similar a CVE-2008-5077."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.4p4",
            "matchCriteriaId" : "94D9BEE4-25C2-4147-B075-50F46113F59E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088BFFA4-1AAB-4699-9793-F731A81B296A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3475779-383A-4128-9145-474EC08030FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B980A178-2958-4B36-8AD8-3932B12C5A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D65210A-F80E-4019-91DA-49838369E03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4p3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29FAB224-3493-4273-A655-10BE44F5B5BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33406",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33558",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33648",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34642",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.531177",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2008-016.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0046.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499827/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021533",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0042",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.ntp.org/pipermail/announce/2009-January/000055.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10035",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.531177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2008-016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0046.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499827/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.ntp.org/pipermail/announce/2009-January/000055.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Note that versions 4.2.5 before 4.2.5p150 are development versions and not production versions.  Development versions are not included in the CPE configuration for CVEs."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0025",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-01-07T17:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."
      }, {
        "lang" : "es",
        "value" : "BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3 y versiones anteriores no comprueba adecuadamente el valor de retorno de la función OpenSSL DSA_verify, lo que permite a atacantes remotos eludir la validación de la cadena del certificado a través de una firma SSL/TLS mal formada, una vulnerabilidad similar a CVE-2008-5077."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52373DC-3E05-424B-9C78-4092A75C75A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE06E29-0A16-4034-A2BB-696A49798F00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "75CECA87-F721-429B-8062-D3297233C14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2F1447B1-A25F-45CC-B721-3204D7107999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "C61FB240-C932-4A3A-874D-5872F01EB352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.0.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "999AF289-8D73-4648-ABCB-4853B9B1F230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.0.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6743968D-DDB2-4478-867A-642CCC492B96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098633E6-88F0-4DBC-986F-D11EDA29877F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.0.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "78725CCE-C153-4B00-8E76-ED6DFC1C86A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.0.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1950F046-FBD4-4A92-BA70-5E80374A12AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1861756C-CC81-4EAB-8427-57A3C62BFF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E53EFD9-16B8-457D-8C27-7771018EA524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD642FC-1764-4090-A32D-830CEAE69E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "79503328-9EE2-414E-A6E8-B3BABA0D6CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2ABA5AA3-8951-4158-A4C6-64BE2010D39B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "77A2D767-8E2D-4D65-ACF3-634B055023CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.1:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "D28C3D4C-5C3B-4686-9F67-6379C2AC338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.1:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "543DE620-09A2-4055-B30C-803C714237B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.1:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "2C16513C-48A1-4FB6-AB11-F844ABC4BB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.1:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "607BF60B-27F1-4C85-BB5F-D66FEA05CD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE954FD0-56AF-4757-BAA8-B0C64703F6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC243E5-D80C-43A8-AD12-5DA0FA442086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF891263-4ACE-47C3-83F3-C06E49F32451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "01C3704B-8328-46C3-ACB1-D27FD7DED508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9000CE-EB3A-4194-84D1-4BB4C5010D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "19A4E6C3-CF69-4A81-B179-EB8F656E72AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6520F4-B203-400A-8629-8A40B739DB11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "55D7907A-46D1-4F7D-8B2F-321214204704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:a2:*:*:*:*:*:*",
            "matchCriteriaId" : "B06686CF-0FFD-45D8-A9F6-D13DCF3E6EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:a3:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF04613-7F33-4A63-A776-47C9A0BDBF1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3C3939-2065-4A8C-99F8-BE44D1D2ABA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "DEE416F3-CDAE-4285-9EC7-F3E161EDCA0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "365BFA38-A0F6-4D48-A6B5-E534F88516DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:rc10:*:*:*:*:*:*",
            "matchCriteriaId" : "CF2F3360-F5C2-47C1-B2E7-935CDB47407A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "52FBAE24-C9F7-4756-A7A0-A877ABFC3444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A7230CE4-CD95-484C-A004-457FD4484403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BB3172-BFBC-4F56-8116-6EEC30FD566F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D40FB919-A955-419D-9BEC-835F93E4FEF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8A8F48-A890-4837-8C76-1A690523B39B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "399D70C9-8E61-4624-A7AD-9410AA7641B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB2F03D-96C6-49CD-80FA-570FF72B493F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "60DC3DF4-4B36-4AA8-8561-C4255A8C4E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF07E87-B109-4B15-A358-7A454502E077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E5D0852-413F-4875-93F5-64DDBCA6E85E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "301BF336-6AF6-4705-9BF1-00ED6608F572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614C9459-D526-4880-AE03-4A1558CB941F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.2:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B15E71-656A-4EB7-96B2-2CC9A2C19DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.2:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "A969C3E7-9E4F-4767-86D1-7E6B3970A7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "34B56EBF-6218-46B7-A9F2-288E40635FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFA05CD-0BE4-4E85-A3DE-8B3E2622159F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A10ACCBC-6697-4BCB-9748-B966D83E0C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "719382EA-7D4E-46F2-92ED-DCA83AE685BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9EDF0B51-76D3-4BD8-A2C7-6F21153CB886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "2D800F08-9B7A-4284-B2EF-DCDF60DEEC04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D43375C5-0736-43DE-99B5-B75719D0AD0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E492452-CBDB-43BC-A9AD-21AA84EA0653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D5BD68D9-6CD9-48A7-A242-38B9ADD420BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.4:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "65C15AB2-DCA7-4983-A741-3CA1D4A391A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.4:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6DB780-C075-462C-B426-1917A020C4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.4:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4FD922-49B2-4953-8EF2-9018B104BC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.4:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "367DC15C-7174-4463-8D4B-B3E43AC0A57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.4:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "CAEC7B62-DBBF-4ADD-81F7-8AD1F3642E92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4360536-0BA6-41DB-AA87-45AFB51562CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.5:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CBD1CC-14DF-4F00-9A5E-6D7A6604A8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93C5ED24-5A13-4F06-BC9F-B8B8F46C1888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438AEC8C-DD71-4A25-9E9D-A89415F7EC83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "36A47938-C5AC-4471-A791-6F21AE20B85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDF6B08-6BA8-400C-BF01-ABD2306FE0D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "AFEDAAA4-AB94-43C6-97AE-B6E87D8E81B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF29410-5230-42F9-BC07-B940FC66DA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "82068202-DF42-4808-A5C7-1A68B05EA1C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8B18D7-4D15-46A7-8013-E6267127A427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D7C7524-6943-4D94-8835-0221F0F0CD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B45FE3-307E-4599-B2CF-5203FA606469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:a2:*:*:*:*:*:*",
            "matchCriteriaId" : "F12E3841-1CF0-4969-A286-50769BAE31EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:a3:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B11586-1274-422D-873A-25DF193FB0C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:a4:*:*:*:*:*:*",
            "matchCriteriaId" : "87D61CDA-BB78-4957-A502-6D77B567B3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:a5:*:*:*:*:*:*",
            "matchCriteriaId" : "5A31533C-BD6E-4EB4-8047-3257BF51F592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:a6:*:*:*:*:*:*",
            "matchCriteriaId" : "D8537C88-4F73-43DD-9BDC-AF470882EED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D7D1A96-0A8E-4E3A-9442-701E3D1A1F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "93C23313-817F-4AB5-9058-31B0C7F954A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "FA9F93EC-1AA2-43A6-9869-8974C819370A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "726720E2-4B59-4665-A72E-E2E996957EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8F0AA9D0-9657-4E18-BF8B-45284C2D40A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "32E4FEA8-A654-4E9F-8948-5878E7C427C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916D4013-27A5-4688-A985-A9B77F90AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8583B8D-54A4-4064-810B-34F4F5A33A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "932E3F02-DD98-43FC-8077-50506E512989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "63C2A2FD-7AE7-462A-99B2-809BE1F35C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A12DF-E94B-426E-8751-96FC56105D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.3:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "7717B1A2-CAF5-49F3-AC73-273074BBEE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.3:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "F037EE61-50D6-4C1E-B24B-25A6D212E7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.3:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "5140F118-BC25-43CB-B19C-0885A44D6646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "19ADAB10-BDD0-409E-93C2-9E7223464131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CEF8AD-9EE7-4ADA-888E-883751962529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F592D0F-095C-4F3B-97E7-E92C259D0CD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42F7AF7-D37C-4213-B2BC-D2B9FE725BDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=141879471518471&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33494",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33546",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33551",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33559",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33683",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33882",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-09:04.bind.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-250846-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-045.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0009",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2008-016.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openbsd.org/errata44.html#008_bind",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499827/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500207/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502322/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33151",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0043",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0366",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0904",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-2938",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10879",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5569",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.isc.org/software/bind/advisories/cve-2009-0025",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00393.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=141879471518471&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-09:04.bind.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-250846-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-045.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2008-016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/errata44.html#008_bind",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499827/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500207/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502322/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-2938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.isc.org/software/bind/advisories/cve-2009-0025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00393.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-07T18:30:01.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun GridEngine 5.3 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077."
      }, {
        "lang" : "es",
        "value" : "Sun GridEngine versión 5.3 y anteriores, no comprueba apropiadamente el valor devuelto de la función EVP_VerifyFinal de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados mediante una firma de SSL/TLS malformada para las claves DSA y ECDSA, una vulnerabilidad similar a CVE-2008-5077."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:grid_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3",
            "matchCriteriaId" : "2A4ACBF8-8D20-43CA-84FA-6E30EFBAF0AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:grid_engine:5.3:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "61B5F93D-E636-401A-8341-05565E7F798D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:grid_engine:5.3:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB37AF4-2262-431F-B36A-31F96E0FCA83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ocert.org/advisories/ocert-2008-016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499827/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0045",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2008-016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499827/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-07T18:30:13.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gale 0.99 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077."
      }, {
        "lang" : "es",
        "value" : "Gale versión 0.99 y anteriores, no comprueba apropiadamente el valor devuelto de la función EVP_VerifyFinal de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados mediante una firma de SSL/TLS malformada para las claves DSA y ECDSA, una vulnerabilidad similar a CVE-2008-5077."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.99",
            "matchCriteriaId" : "B7E884BE-3B56-4CC1-BE9B-2F4604AB8150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1287BEFC-BF7E-4C5C-AC50-22F3301C2DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.15b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88DD905A-4DFF-4EA1-96F2-894145916197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.15c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E14E9CB4-55A5-4914-AA0B-79938149590A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407DE223-5C67-4F10-8B98-750D1FBE4F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.16a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93715E6-9528-4922-A049-119418DC7254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BA200F-0BD1-48B1-A91F-26F0128FF4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.17a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DCE57E-D944-4329-977B-12A76853D3F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A76AC49-2A31-404D-BE12-4B795B388116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.18b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469CB01B-318D-407E-BB38-6B2F6AB4D3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.18c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9EC778-2D17-4F1C-9DBE-74461A379EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B351A3DE-3D31-4B94-A1EA-04AFA98D00C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.19a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165C0D9D-D0A4-4ECF-B4F7-5A3E621F6B8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.19b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921BA5E1-2469-42D3-8228-BC122C8CED39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.20a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53F8F572-DE5A-45ED-8A90-B6C888026100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314A3314-5968-4F24-9958-E1997C20EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.90a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A84B5B-8864-4E1C-95C1-18BCCCC8CFF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.90b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB50FB6-E388-4735-B0D5-0875479281E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.90c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1090853-1367-4B94-BC3C-4CCFB5A43CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "028853B7-2544-4010-A71F-D8CF78B01AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8B4AE9-0142-4405-8201-039A332A0EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gale:gale:0.91b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C319A57-C69D-4786-9232-8E5278C03AD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ocert.org/advisories/ocert-2008-016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499827/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0046",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2008-016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499827/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-07T18:30:15.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEvidence 1.0.6 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077."
      }, {
        "lang" : "es",
        "value" : "OpenEvidence versión 1.0.6 y anteriores, no comprueba apropiadamente el valor devuelto de la función EVP_VerifyFinal de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados por medio de una firma de SSL/TLS malformada para las claves DSA y ECDSA, una vulnerabilidad similar a CVE-2008-5077."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openevidence:openevidence:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.6",
            "matchCriteriaId" : "B42046E9-EE96-4144-AF85-56D3F7DA9067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openevidence:openevidence:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38B2F54F-A344-4E6B-9404-76E50F047EAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ocert.org/advisories/ocert-2008-016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499827/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0047",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2008-016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499827/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-07T18:30:15.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Belgian eID middleware (eidlib) 2.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077."
      }, {
        "lang" : "es",
        "value" : "Belgian eID middleware (eidlib) versión 2.6.0 y anteriores, no comprueba apropiadamente el valor devuelto de la función EVP_VerifyFinal de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados por medio de una firma de SSL/TLS malformada para las claves DSA y ECDSA, una vulnerabilidad similar a CVE-2008-5077."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eid:eidlib:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.0",
            "matchCriteriaId" : "97B6B61D-A6E5-4586-A799-66581D1E5109"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2008-016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499827/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2008-016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499827/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-07T18:30:15.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."
      }, {
        "lang" : "es",
        "value" : "Lasso versión 2.2.1 y anteriores, no comprueba apropiadamente el valor devuelto de la función DSA_verify de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados mediante una firma de SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entrouvert:lasso:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1-0",
            "matchCriteriaId" : "47688EC4-E2DC-407D-8F2F-EDCFA685C4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entrouvert:lasso:1.9.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4249DB70-1CB9-45F6-9E2B-476BF8DA3E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entrouvert:lasso:2.0.0-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62798EAF-07A6-49F3-8C9A-D90694AE32FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ocert.org/advisories/ocert-2008-016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499827/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2008-016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499827/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-07T18:30:15.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZXID 0.29 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."
      }, {
        "lang" : "es",
        "value" : "ZXID versión 0.29 y anteriores, no comprueba apropiadamente el valor devuelto de la función DSA_verify de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados por medio de una firma de SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.29",
            "matchCriteriaId" : "5FBF13B6-C08F-4B37-852A-CFA68C2493FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BEB522C-2349-4297-AF71-2263968BAEB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25720EAB-8656-45CB-983F-458782A44B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "764ACFF4-BFD6-4FFE-81F3-30092E4023D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8198CC-A1C6-49CB-B473-6C5CEF92BB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20660655-9FD4-4264-A689-4D722B16661D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75A1370-596D-45A2-A4E2-218717498F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255CCFCC-98B5-466F-9463-0E386C5B8FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3821FD3-3F2B-43F3-A089-94EE7F60BCFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83DF2771-1B0E-4AB4-8F1C-32D6365B7A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C538E3-BF56-41A8-BD71-6988CF935505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A7E3CA-8AC2-4382-8D77-325B1B12418C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "850DE94C-34DF-4C46-8383-2A544B71C5A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D00FA7-822A-4743-84C2-7FA4F120F865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AAC7BD0-7771-4511-BC69-7A9EB43A8139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14410832-E77B-4644-B561-B1158DD3BE22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "037D3B59-2688-4A4E-A328-426B12F97684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A0E88B-09C6-4533-9409-9498E170C10E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CAB4BF-2D00-461A-B906-547560CFA965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133EDD59-49D9-4FDC-8833-420F3E6B8211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DD6C71-8661-44B4-98B9-71E5181D999D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2596C783-B061-45A1-9C75-4A02FDF5D004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2590DB77-E5C0-4C5A-B1B3-6488F2EEC8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA74ED53-DF05-46A6-9B76-80A9BB40CC57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90A5D7D-A08B-46BF-A9A8-18EEADE63284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70E439D0-A0A9-417F-9DC4-C02BC52589C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zxid:zxid:0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FD0D74-FC99-4E2A-BF8B-59B0A485575D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ocert.org/advisories/ocert-2008-016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499827/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2008-016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499827/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-07T19:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en net/sctp/sm_statefuns.c en la implementación del \"Stream Control Transmission Protocol (sctp)\" (Protocolo de Tansmisión de Control de Flujo) en el kernel de Linux antes de v2.6.28-git8 permite a atacantes remotos tener un impacto desconocido mediante un fragmento WD-TSN (también conocido como FORWARD-TSN) con un flujo ID grande."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.27",
            "matchCriteriaId" : "518BA987-F4B1-44F3-B329-D17E5A9B0D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F9DBB0-8AF7-42CA-95DD-68A344E9D549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD00664-A27C-4514-A2A4-079E8F9B0251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E336C792-B7A1-4318-8050-DE9F03474CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D0159-1A05-4628-9C1C-360DED0F438C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6654B9-42EB-4C2C-8F71-710D50556180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FDF616-E410-4540-B377-98D1FB88CE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5313B736-9904-442A-84D6-8FC7B9AC2059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3069324C-28FB-4BB6-9451-F3AC6A8DA64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3D19AD-4268-45E7-B13D-BC93ABDF2226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E619E6-A515-43BC-B371-C1FF6DAA6CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "388414A1-C9B4-41BA-AD35-6501A463A095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FDBA01DD-C129-48F1-800B-838418F4A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "185F1EF8-04EB-43ED-B909-8BDF60F23E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "3483FAFA-353C-498F-AF68-8F5B84A0F30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6B11A9E1-9D90-46DC-81B5-17A137205AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "07EEC559-9240-46BE-9057-0F17D1F61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BBBC127F-D67E-43FE-BCFE-606C200084F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "42B18945-EE09-4E6B-8C11-E382E5F8F850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9fcb95a105758b81ef0131cd18e2db5149f13e95",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://patchwork.ozlabs.org/patch/15024/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0264.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/05/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0053.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0331.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1055.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=478800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01045.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9fcb95a105758b81ef0131cd18e2db5149f13e95",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://patchwork.ozlabs.org/patch/15024/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0264.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/05/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0053.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0331.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1055.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=478800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01045.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-07T19:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Intel system software for Trusted Execution Technology (TXT) allow attackers to bypass intended loader integrity protections, as demonstrated by exploitation of tboot.  NOTE: as of 20090107, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades sin especificar en Intel system software para Trusted Execution Technology (TXT) permite a atacantes remotos evitar las protecciones de integridad del cargador previstas, como se demostró con la explotación de tboot. NOTA: a fecha de 07-01-2009, la única revelación es un pre-aviso impreciso sin información de uso inmediato. De todos modos, ya que viene de un investigador bien conocido, se le ha asignado un identificador CVE por motivos de seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:trusted_execution_technology:_nil_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB11A019-9ACB-41CB-8236-8B56D7E9C4DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Wojtczuk",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://invisiblethingslab.com/press/itl-press-2009-01.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://theinvisiblethings.blogspot.com/2009/01/attacking-intel-trusted-execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Wojtczuk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://invisiblethingslab.com/press/itl-press-2009-01.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://theinvisiblethings.blogspot.com/2009/01/attacking-intel-trusted-execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0068",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-01-07T19:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox sends to xdg-open, which causes xdg-open to process the dangerous file type through automatic type detection, as demonstrated by overwriting the .desktop file."
      }, {
        "lang" : "es",
        "value" : "Error de interacción en xdg-open permite a atacantes remotos ejecutar código de su elección enviando un archivo con un tipo MIME peligroso pero utilizando un tipo seguro que Firefox envía a xdg-open, lo que provoca que xdg-open procese el archivo de tipo peligroso mediante una detección de tipo automática, como se demostró sobrescribiendo el archivo .desktop."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:xdg-utils:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BD904-E0D0-4B42-A654-DB7C620C33DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6A30E-7577-4569-9309-53A0AF7FE3AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/06/1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=19377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=19377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-07T20:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the nfs4rename_persistent_fh function in the NFS 4 (aka NFSv4) client in the kernel in Sun Solaris 10 and OpenSolaris before snv_102 allows local users to cause a denial of service (recursive mutex_enter and panic) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la función nfs4rename_persistent_fh en el cliente NFS 4 (también conocido como NFSv4) en el kernel en Sun Solaris 10 y OpenSolaris antes de snv_102 permite a usuarios locales provocar una denegación de servicio (mutex_enter recursivo y panic) mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_101",
            "matchCriteriaId" : "9A105714-2EC3-4DB8-9F2D-4013FBAC1EE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_101",
            "matchCriteriaId" : "E42FF239-1E5F-4AF0-92FD-0AE90B00133D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail.opensolaris.org/pipermail/onnv-notify/2008-October/015342.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33361",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139466-02-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-248566-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mail.opensolaris.org/pipermail/onnv-notify/2008-October/015342.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139466-02-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-248566-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-08T19:30:11.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El servicio smmsnmpd en CA Service Metric Analysis r11.0 hasta r11.1 SP1 y Service Level Management v3.5 no restringe el acceso adecuadamente, lo cual permite a atacantes remotos ejecutar comandos de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:service_level_management:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EDC9EFE-8401-4A6C-9C7F-0E6945839406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:service_metric_analysis:r11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F66415-014D-4F3B-97AD-87189E100CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:service_metric_analysis:r11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07202650-A1D8-4235-9C2B-9EB480205E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:service_metric_analysis:r11.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "291902E2-F337-41C5-B570-4E8C959002BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499857/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33161",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499857/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-08T19:30:11.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in Apple Safari allows remote attackers to read the contents of arbitrary memory locations, cause a denial of service (application crash), and probably have unspecified other impact via the array index of the arguments array in a JavaScript function, possibly a related issue to CVE-2008-2307."
      }, {
        "lang" : "es",
        "value" : "Error de presencia de signo en entero en Apple Safari permite a atacantes remotos leer los contenidos de localizaciones de memoria de su elección, provocar una denegación de servicio (caída de aplicación), y posiblemente tener otro impacto desconocido a través del índice del array del array de los argumentos en una función JavaScript, posiblemente relacionado con la cuestión CVE-2008-2307."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE370CAA-04B3-434E-BD5B-1D87DE596C10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-08T19:30:11.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3.0.5 and earlier 3.0.x versions, when designMode is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a certain (a) replaceChild or (b) removeChild call, followed by a (1) queryCommandValue, (2) queryCommandState, or (3) queryCommandIndeterm call.  NOTE: it was later reported that 3.0.6 and 3.0.7 are also affected."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox versión 3.0.5 y anteriores de 3.0.x, cuando designMode está habilitado, permite a atacantes remotos causar una denegación de servicio (desreferencia de un puntero NULL y bloqueo de aplicación) por medio de cierta llamada de (a) replaceChild o (b) removeChild, seguida por una llamada de (1) queryCommandValue, (2) queryCommandState, o (3) queryCommandIndeterm. NOTA: más tarde se informó que las versiones 3.0.6 y 3.0.7 también están afectadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0220.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0223.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0224.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33154",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=448329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=456727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=472507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0220.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0223.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0224.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=448329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=456727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=472507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat does not consider a crash of a client application such as Firefox to be a security issue.",
        "lastModified" : "2009-01-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-08T19:30:11.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of service (application crash) via an onload=screen[\"\"] attribute value in a BODY element."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6.0 hasta 8.0 beta2 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través del valor del atributo onload=screen[\"\"] en un elemento \"BODY\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "59159262-BA89-46B9-B16F-0CC6A5502C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "06E95EE4-23D8-40F7-9DFF-6C835AB62AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AC575C-3505-460F-8BB5-3ADA1F149E8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://skypher.com/index.php/2009/01/07/msie-screen-null-ptr-dos-details/",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33149",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://skypher.com/index.php/2009/01/07/msie-screen-null-ptr-dos-details/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-09T18:30:03.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) apps_path[plug] parameter to plugin/gateway/gnokii/init.php, the (2) apps_path[themes] parameter to plugin/themes/default/init.php, and the (3) apps_path[libs] parameter to lib/function.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivos en PHP en playSMS v0.9.3 permiten a atacantes remotos ejecutar código PHP de su elección a través una URL en el parámetro (1) apps_path[plug] de plugin/gateway/gnokii/init.php, el parámetro (2) apps_path[themes] de plugin/themes/default/init.php, y el parámetro (3) apps_path[libs] de lib/function.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:playsms:playsms:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27627EBF-A5E7-4E93-9267-10A01792485C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33386",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-09T18:30:03.063",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in EZpack 4.2b2 allows remote attackers to execute arbitrary SQL commands via the qType parameter in a webboard prog action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en EZpack v4.2b2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"qType\" en una acción \"webboard prog\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:se-ed:ezpack:4.2:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "C4160650-0CD2-4371-8587-B45519FACB18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/4890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33131",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/4890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-09T18:30:03.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in EZpack 4.2b2 allows remote attackers to inject arbitrary web script or HTML via the mdfd parameter in a prog action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en EZpack v4.2b2 permite a atacantes remotos inyectar web script o HTML a través del parámetro \"mdfd\" en una acción \"prog\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:se-ed:ezpack:4.2:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "C4160650-0CD2-4371-8587-B45519FACB18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/4890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33131",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/4890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-09T18:30:03.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to execute arbitrary SQL commands via the user_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en profile.php en PHPAuctions (también conocido como PHPAuctionSystem) permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"user_id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpauctions:phpauctions:_nil_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F1BCB1-F069-48FA-8EFA-FC4BA2CA4703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51144",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33331",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33115",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-09T18:30:03.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to inject arbitrary web script or HTML via the user_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en profile.php en PHPAuctions (también conocido como PHPAuctionSystem) permite a atacantes remotos inyectar web script o HTML a través del parámetro \"user_id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpauctions:phpauctions:_nil_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F1BCB1-F069-48FA-8EFA-FC4BA2CA4703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51145",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33331",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33115",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-09T18:30:03.140",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHPAuctions (aka PHPAuctionSystem) allows remote attackers to bypass authentication and gain administrative access via modified (1) PHPAUCTION_RM_ID, (2) PHPAUCTION_RM_NAME, (3) PHPAUCTION_RM_USERNAME, and (4) PHPAUCTION_RM_EMAIL cookies."
      }, {
        "lang" : "es",
        "value" : "PHPAuctions (también conocido como PHPAuctionSystem) permite a atacantes remotos evitar la autenticación y conseguir acceso de administrador a través de las cookies modificadas (1) PHPAUCTION_RM_ID, (2) PHPAUCTION_RM_NAME, (3) PHPAUCTION_RM_USERNAME, y (4) PHPAUCTION_RM_EMAIL"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpauctions:phpauctions:_nil_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F1BCB1-F069-48FA-8EFA-FC4BA2CA4703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51146",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33331",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33120",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-09T18:30:03.157",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en RiotPix v0.61 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"username\".\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:riotpix:riotpix:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.61",
            "matchCriteriaId" : "579A8B17-A387-456B-B69B-E61C8AF494A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:riotpix:riotpix:.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37D890AB-C2E9-4EB8-B93B-8049268AF18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:riotpix:riotpix:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E2F6D77-C16A-41D3-A310-8F791DEE374B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:riotpix:riotpix:0.51:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D5D5F6-955C-4B13-85DA-430CCB3F9B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:riotpix:riotpix:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D4B3E4-FFA6-4113-91D1-3A7AB06BB4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:riotpix:riotpix:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364B2C1A-621D-402F-9C95-C6102D5DBC9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33395",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33132",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-09T18:30:03.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in read.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en read.php en RiotPix v0.61 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"forumid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:riotpix:riotpix:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.61",
            "matchCriteriaId" : "579A8B17-A387-456B-B69B-E61C8AF494A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:riotpix:riotpix:.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37D890AB-C2E9-4EB8-B93B-8049268AF18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:riotpix:riotpix:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E2F6D77-C16A-41D3-A310-8F791DEE374B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:riotpix:riotpix:0.51:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D5D5F6-955C-4B13-85DA-430CCB3F9B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:riotpix:riotpix:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D4B3E4-FFA6-4113-91D1-3A7AB06BB4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:riotpix:riotpix:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "364B2C1A-621D-402F-9C95-C6102D5DBC9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33395",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33129",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-09T18:30:03.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en frontpage.php en Goople CMS v1.8.2 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"username\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goople_cms:goople_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "A7031286-EAF1-42D9-87D2-F5BECF7E6ADA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33393",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33135",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-09T18:30:03.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in admin/agent_edit.asp in PollPro 3.0 allows remote attackers to create or modify accounts as administrators via the username, password, and name parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en admin/agent_edit.asp en PollPro v3.0 permite a atacantes remotos crear o modificar cuentas de aministrador a través del nombre de usuario, contraseña y parámetros \"name\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expinion:poll_pro:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08751AE7-FE07-498F-8562-2A9F9A030533"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=123117044713213&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33319",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=123117044713213&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-09T18:30:03.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla! 1.5.8 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the X_CMS_LIBRARY_PATH HTTP header."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en attachmentlibrary.php en el componente XStandard para Joomla! v1.5.8 y versiones anteriores permite a atacantes remotos listar directorios de su elección a través de .. (punto punto) en la cabecera HTTP X_CMS_LIBRARY_PATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:xstandard:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79D9A84-FC8C-41EB-80EF-FC08108FF518"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.8",
            "matchCriteriaId" : "0BC66D33-2642-464D-B7B4-4809F09B33A9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9709F901-EDD2-4369-89F0-8AF3A63655E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC268591-FDFD-42A2-887F-4F1639CAB73C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89946AA1-0694-44A5-962E-ED36B4BFCE9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6024ABB5-0CB7-4874-8758-CC6FBF3073D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C21464-3FD4-4528-A512-7C0DE70E331C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663EE640-2BE7-42FC-B848-7379C6DADA60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B64E85-CA80-46A6-9E62-B1F28CBED5CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4007FCB-589A-413D-8009-64404926CA7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B0B037-5E62-4069-AF35-F05A777E05D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314E12E1-107E-4AB3-8092-9F6C2C5FA11B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65860314-7B34-46B4-BA29-1A8EA715BF00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A235591C-1860-4877-8B61-7390EE359E12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D9FB89-D522-410F-8E68-763E9931E955"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9C4B0-5B4B-4103-AA4E-419E08C22306"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2017D307-89B3-4D94-A266-C7D8D45960A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D548B3C9-483F-492C-A6BB-694B7217FEE8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9813E813-2983-4471-9E56-6F254810A66B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F4F9E7-BA44-4235-A246-DB6C432C3873"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "495BD724-45BE-4214-B120-3A83BD9AD11B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCDBF4D-A797-4828-A084-8C775FA94BDF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1B7CF2-B717-4F37-A923-0E188FF3C47F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3333C204-A022-4B53-B61F-3C5601F21FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2752717-AA95-4398-8091-24FD5925C4F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B3B3FB-E67D-4D9A-BE01-855FA2545772"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33377",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33143",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0024",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-01-13T17:00:01.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sys_remap_file_pages function in mm/fremap.c in the Linux kernel before 2.6.24.1 allows local users to cause a denial of service or gain privileges via unspecified vectors, related to the vm_file structure member, and the mmap_region and do_munmap functions."
      }, {
        "lang" : "es",
        "value" : "La función sys_remap_file_pages en mm/fremap.c del kernel de Linux anterior a la versión v2.6.24.1 permite a usuarios locales provocar una denegación de servicio o ganar privilegios mediante vectores de ataque no especificados, relacionados con un miembro de la estructura de vm_file, y las funciones mmap_region y do_munmap."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.24",
            "matchCriteriaId" : "3902B4CD-3000-4E95-8B99-07D8CE27676B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F9DBB0-8AF7-42CA-95DD-68A344E9D549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD00664-A27C-4514-A2A4-079E8F9B0251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E336C792-B7A1-4318-8050-DE9F03474CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D0159-1A05-4628-9C1C-360DED0F438C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6654B9-42EB-4C2C-8F71-710D50556180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FDF616-E410-4540-B377-98D1FB88CE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5313B736-9904-442A-84D6-8FC7B9AC2059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D42BA44-C69B-4170-9867-CABF93CA9BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.24.y.git%3Ba=commit%3Bh=8a459e44ad837018ea5c34a9efe8eb4ad27ded26",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/12/1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33211",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.24.y.git%3Ba=commit%3Bh=8a459e44ad837018ea5c34a9efe8eb4ad27ded26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/12/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 and Red Hat Enterprise MRG.",
        "lastModified" : "2009-01-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-14T23:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x before B.2.5.7, C.1.x.x before C.1.10.4, and C.2.x.x before C.2.1.2.1; and s800i 1.2.x before 1.3.0 responds differently to a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames."
      }, {
        "lang" : "es",
        "value" : "IAX2 en Asterisk Open Source v1.2.x anterior a v1.2.31, v1.4.x anterior a v1.4.23-rc4, y v1.6.x anterior a v1.6.0.3-rc2; Business Edition A.x.x, B.x.x anterior a B.2.5.7, C.1.x.x anterior a C.1.10.4, y C.2.x.x anterior a C.2.1.2.1; y s800i 1.2.x anterior a v1.3.0 responden de manera distinta ante un intento de acceso fallido  dependiendo de si la cuenta de usuario existe, lo que permite a atacantes remotos listar nombres de usuario válidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk_business_edition:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "b.2.5.2",
            "matchCriteriaId" : "24A5B8FE-5EB4-4EFD-957D-D0B7AADC55E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk_business_edition:*:beta8:*:*:*:*:*:*",
            "versionEndIncluding" : "c.1.0",
            "matchCriteriaId" : "5E583AB0-6127-4C34-B6C6-1837F5D0C2D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk_business_edition:a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313B3A38-8DEA-4D62-A1A4-0B6011E81870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802F8680-AB38-41AF-BFC8-F6927F6B1626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAE8D90-B032-4C60-B487-BE655D00FFAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB64A872-B7B8-46A8-81E4-49EDAC160531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21000270-C9B9-430C-A252-763887A15835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12F7CF45-5482-4947-8F1D-48C746987475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B64995D-7892-49AB-A89D-A5D15615C5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0397DBD4-EA00-444A-9008-4932F99DF325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FCD865F-BC39-4255-A797-6E5945773337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB3C2CF4-4A4B-4398-92DC-EAE43801D08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7203093-7209-4184-92CB-08AD73FAC379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4956871-4DD3-4299-8BEB-9D98A4449A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F796D547-034A-46FB-B245-3863C198AA84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F04F844-79C4-41F3-9671-8B46460D0AAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "F981A428-E7F3-4DE5-91DC-60A1C5C6C6EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.30.4",
            "matchCriteriaId" : "BC6254A9-FDE8-4167-9B8F-BA387A813DCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:*:rc3:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.23",
            "matchCriteriaId" : "FD73983B-7A1A-4016-B5D6-EA1019CC8D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:*:rc1:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0.3",
            "matchCriteriaId" : "8E0B464C-075E-4B62-B00A-53AA2613B619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7971E1-F136-4ADC-95EC-BC4F92E838CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E62D108C-862D-4BDB-BE37-285AA4C9C59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "CF1422F3-829D-498C-83A6-02989DFB70A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEB9D69-A404-4053-92F9-CAC3481AFF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E816CCDB-4169-4F09-AE87-E467F4BE7685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.0beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7435F043-F92B-4635-93CC-A2C39AAE1BCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.0beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B2F43B-8B69-4BF6-86B7-A225175FF068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27202966-2C41-4964-9497-1887D2A834C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1471B5A2-15BE-4E7C-BA49-2E6002F7C8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.2:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "65223182-1675-462C-AF67-4A48760A63F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7108D72F-5AFD-4EEF-B2A9-CA4FA792E193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.3:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EB4CD-6436-4E0B-A620-9DF2AC8A3C66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E79CCE5-C29B-4726-8D2F-BC20F70959BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.10:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF6584D-A7BB-4BD5-8232-9293FEE4A971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29C13DB-6F04-4B41-90A2-2408D70F3641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.11:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "174D6B56-7D0F-46F0-849A-FD05CB348FAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4F734E-0E78-4957-B323-8E9FBA7FF15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.12:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "938F545A-F8A7-455E-8E5A-2B5454B6CE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4B117B-E945-4033-A79D-10DFAA3DF18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.12.1:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C0897A-C841-4AAB-A6B3-1FCF7A99A60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6D866F-8189-4FFD-AA24-47C0A015C246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.13:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BAA1B3-7DD3-4248-915D-2BCC0ACFA2C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4EBFB79-C269-4132-BFAB-451F66CE8289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.14:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "21612C17-7368-4108-B55B-5AB5CA6733E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E1028E-2C07-4BA3-B891-FA853A87B280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.15:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0D57D7-15AD-4CDF-A5A7-AB83F8E6154E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E74F577-70BD-4FAF-BCFD-10CD21FC5601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.16:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "06DB25C8-4EA5-465F-8EFA-BCA8D40F1795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BB03E2-E61C-4A94-82DF-8720698CE271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.17:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "A149F8C2-3DA5-44B2-A288-3482F3975824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B30A36F-5CE6-4246-8752-176FB5999C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.18:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "9462B320-B69D-409D-8DCC-D8D6CA1A757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F76DFD-4DAC-4B02-8967-B242CDEEF6C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.19:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCCBAE9-8FD4-43F0-9EF8-56E9BBA3D8C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A59BC20-3217-4584-9196-D1CD9E0D6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.20:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA0014A-659B-4533-A393-6D4ADC80EB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56F728BA-FC9E-4EEE-9A08-C9C7433BD8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.21:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1621F9-7C84-4CF0-BBCD-CEAEE8683BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C64DF29-5B3D-401E-885E-8E37FD577254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.21.1:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "346C9F65-B5FB-4A75-8E1B-137112F270D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7BF52A-2FF8-40ED-B757-28A1101DE8F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.22:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFEE380-0C64-4413-AF3A-45ABC8833500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A321C2D-852B-4498-ADD6-79956410AB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.23:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA18FC6-1480-400E-A885-8CDAE45AA7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5F0DCF-C6A2-4A09-90C9-D70F174FDEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.24:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "93741261-378B-4C02-8D68-0E5F39128375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C820538E-14EC-43C1-80DB-6AAE4905EF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.25:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "07CF9DD6-B624-49F0-A8E4-7EBCE7932BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9562112-2505-4F78-86DE-F30EFAEE47D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.26:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "9EEA1E9C-C1FB-4EFD-86EA-DCF78C57FC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6D8FD0-C8C1-4868-9AF1-96B1949C18AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.26.1:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "5E20FAF7-9031-478E-A89C-D6FB3B5FDE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A840B4-216B-4063-997F-791FBC8C8658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.26.2:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "72375576-F857-4585-A677-A326D89A65B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE47A547-26E7-48F9-B0A6-2F65E04A1EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AEB744-FCF2-4A41-8866-9D1D20E6C6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E5EB34-30AD-4E81-8BD4-4AB905E52B82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4359322B-08D0-4710-A9C3-54BD4A17B800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F84DF4-DBA7-430C-AF17-F52024EF80D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.30.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34266614-3588-485C-A609-37823F8499AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967DF432-DEF4-4FA2-8C8D-19A7FB663A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "40850BF4-E252-4667-9B46-9B6FEF6E997D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB01DD1-B29B-4210-88CC-9ADB3148A410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "5C0FA6A3-BFA9-4397-B75B-75C8357C36B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295D4042-2D3C-481B-B969-2DDAC1161198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E9EE2A-56AD-42BC-8CB0-D34091849B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96877A3E-B54B-4F31-B281-76CDC98B2D02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0B4503-42A6-4D88-954E-A662E91EC204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B73813-BCD8-429E-B9B9-D6665E026BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBA3ECC-4F40-41CD-A6D7-BBD680DDBACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBE2156-AF86-4C72-B33D-3FF83930F828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61408884-FBBF-4D94-A552-F99AB46DCED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A527277-D97D-4B74-906F-7481BDBD96D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B57A32-7B83-4783-A244-C26301970444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044FD0D0-FC92-4A01-B0D4-11A703EF21FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3477EC1A-9634-492C-B052-35770A9C9F4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C90F104-FA2C-4091-B149-1774AC982C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9328768-7C08-4143-B5F8-F5C2D735D21A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C04E2B3-094B-4828-A2FC-BB66244A9F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDE3D31-4BB2-45A3-B085-8C91152A3152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0107D4-395E-45F1-B963-7618CCC007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53B8E11B-4984-45A8-A107-D276205988B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2495DB98-F923-4E60-86EC-2DBB7A98C90C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E186D125-996E-4900-A2B8-5CDC8B5D5136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27DC6CF7-4DF8-4472-A684-8CCB5E26FCFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88576385-EF03-408B-9775-B52E6AFFE48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A838577-2BA1-4792-8B69-6FB07FFD7727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDEED3E1-13E0-46E6-8AAB-D24D2D04AE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED2BF36F-CF10-4F24-970B-3D0BB7561C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC1BB05-15C6-4829-86EB-5B1BFA4B5B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AB77E88B-7233-4979-914E-24E671C1FB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C4FF0F09-0268-480F-A2F3-6F8C3F323EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCF9CAE-674A-4833-9D5C-FCBD865BE9F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1593E1-BF21-4DB9-A18E-9F221F3F9022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC8E9FE3-FA25-4054-876E-4A3CE6E71AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBAEADC-D1DE-46EF-808C-2F6D2A74D988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF8EB4B-2947-4BD3-ADF3-345AEFE85B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E4476FB3-A759-49F5-ABDE-6D2A321B61BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.20:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC109C3-2F52-48BE-B07E-3D65F31C1012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54101A9-3967-4111-8A03-DA1BB23141BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.21:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B00600-1D45-41F7-9A10-97FB39012FDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.21:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D8CB2331-0F95-45E0-AF5B-0B9C74C5BA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4ADB6A7-76AC-4AE3-B1AA-9F8DFA635418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776BC35C-CF37-4F4E-9FD5-EC351D4C2C2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10DAABC-FF06-44FB-98EC-B6AD17C03FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.22:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA8AFD5-4C7C-4876-93CA-C5B3E881C455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.22:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "547EEB2B-2ECA-4B00-83BB-CFAA11BE0145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83829E0F-C24B-4BD6-88EA-98898A9AD86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C19141-823E-4057-A699-FD1DFF92DF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE7FE41-E749-49B8-99DF-19F9E7C4827A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E78234B-39B6-4DB4-A10F-AA55F174D4F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3984CF42-2431-4661-B333-C6721DF7123A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4_revision_95946:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C6272B-D0C4-4EA5-AEE4-5A45DAA2DDE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A8012CE-4D4B-4131-87E7-16D7907E3BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F88914-6097-4AF1-8337-DCF062EB88AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDB49DC-5344-451E-B8D6-D02C3431CE78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "B1FDA8D3-5082-479B-BA0A-F1E83D750B5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "7305910F-42BA-44CE-A7AC-B6F74200B68D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "B93EB4D6-3375-44BC-870F-714A3BC00C2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "52F60D6E-64EB-4223-8A79-595693B444C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta7.1:*:*:*:*:*:*",
            "matchCriteriaId" : "37CF29B9-4397-4298-9326-0443E666CDC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "7D85DA34-A977-4A82-8E79-7BFE064DE9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta9:*:*:*:*:*:*",
            "matchCriteriaId" : "1476EF7B-A6F8-4B10-AF0F-986EA6BA3116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "98E222F0-4CAA-4247-A00D-C6CEC2E55198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "63744245-6126-47F6-B9F5-E936538140C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "C8805BEE-A4CF-45C2-B948-F1E8EF0A0886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E474C33-B42A-4BB8-AC57-8A9071316240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83B3132-7D78-4AC3-B83A-A6A20AA28993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0147FCED-AE75-4945-B76E-33F2AA764B9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:asterisk:s800i_appliance:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE03C02-BE4A-47B6-A2B4-68DAEC5AA47F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.digium.com/pub/security/AST-2009-001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-01.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/4910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499884/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33174",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.digium.com/pub/security/AST-2009-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/4910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499884/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Vendor Advisory: http://downloads.digium.com/pub/security/AST-2009-001.html"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-14T23:30:04.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .chm file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Microsoft Windows XP SP3 , permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente la ejecución de código de su elección a través de un archivo .chm manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/4912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33204",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/4912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-15T00:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote attackers to cause a denial of service (device reboot) by sending data over an established SSL connection, as demonstrated by the abc\\r\\n\\r\\n string data."
      }, {
        "lang" : "es",
        "value" : "El IBM WebSphere DataPower XML Security Gateway XS40 con firmware 3.6.1.5, permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) mediante el envío de información sobre una conexión SSL, como se ha demostrado mediante la cadena de datos abc\\r\\n\\r\\n."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E365BA2-946C-429E-A732-A9E13EED79E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/4911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499870/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33169",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/4911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499870/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0121",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-15T00:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 allows remote attackers to execute arbitrary SQL commands via the password parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en frontpage.php en Goople CMS CMS v1.8.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"password\". NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goople_cms:goople_cms:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B30CEFA6-0167-4BDC-8326-90BD57A104B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33393",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0029",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-01-15T17:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ABI in the Linux kernel 2.6.28 and earlier on s390, powerpc, sparc64, and mips 64-bit platforms requires that a 32-bit argument in a 64-bit register was properly sign extended when sent from a user-mode application, but cannot verify this, which allows local users to cause a denial of service (crash) or possibly gain privileges via a crafted system call."
      }, {
        "lang" : "es",
        "value" : "ABI en el kernel de Linux v2.6.28 y anteriores sobre las plataformas s390, powerpc, sparc64, y mips 64-bit requiere que un argumento de 32-bit en un registro de 64-bit sea firmado adecuadamente cuando se envía una aplicación en modo de usuario, pero esto no lo puede realizar, lo que permitiría a usuarios locales producir una denegación de servicio (caída) o ganar privilegios a través de una llamada al sistema manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.28",
            "matchCriteriaId" : "9B5B312F-E76A-43E1-A73F-31535848D55B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=123155111608910&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33477",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33674",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33275",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479969",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01045.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=123155111608910&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01045.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This flaw affects most 64-bit architectures, including IBM S/390 and 64-bit PowerPC, but it does not affect x86_64 or Intel Itanium. The risks associated with fixing this flaw are greater than the security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 3, 4, or 5. Red Hat Enterprise MRG is not affected as it is not supported on 64-bit architectures other than x86_64.",
        "lastModified" : "2009-06-09T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-15T17:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hplip.postinst in HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership of its configuration files within home directories."
      }, {
        "lang" : "es",
        "value" : "hplip.postinst en HP Linux Imaging and Printing (HPLIP) v2.7.7 y v2.8.2 en Ubuntu permite a usuarios locales cambiar la propiedad de ficheros a su elección a través de manipulaciones inespecificadas de manera previa a la instalación o mejora del HPLIP por parte del administrador, relacionado con los intentos de corrección de propietario en sus ficheros de configuración en los directorios locales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:hplip:2.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED2C0484-7995-488C-BF9D-61A4EC318F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:hplip:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205AA0F1-796F-49EA-933F-245B558F4C3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33249",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-708-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://launchpad.net/bugs/191299",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-708-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/191299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of hplip as shipped with Red Hat Enterprise Linux 5.\n",
        "lastModified" : "2009-01-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-15T17:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Apple Safari on Mac OS X 10.5 and Windows allows remote attackers to read arbitrary files on a client machine via vectors related to the association of Safari with the (1) feed, (2) feeds, and (3) feedsearch URL types for RSS feeds.  NOTE: as of 20090114, the only disclosure is a vague pre-advisory. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en Apple Safari en Mac OS X v10.5 y Windows permitiría a atacantes remotos leer ficheros de su elección en un cliente a través de vectores relacionados con la asociación de Safari con (1) suscripción (2) suscripciones y (3) búsqueda de suscripciones de tipo URL para suscripción de RSS. NOTA: Hasta el 14-01-2009 solo se ha revelado un preaviso vago. Sin embargo, debido a que proviene de un conocido desarrollador se le esta asignando un identificador CVE con la finalidad de su seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE370CAA-04B3-434E-BD5B-1D87DE596C10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://brian.mastenbrook.net/display/27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=5689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://brian.mastenbrook.net/display/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=5689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-15T17:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tqsl_verifyDataBlock function in openssl_cert.cpp in American Radio Relay League (ARRL) tqsllib 2.0 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."
      }, {
        "lang" : "es",
        "value" : "La función tqsl_verifyDataBlock en American Radio Relay League (ARRL) tqsllib v2.0 no comprueba adecuadamente el valor de retorno de la función OpenSSL EVP_VerifyFinal, lo que permitiría a atacantes remotos evitar la cadena de validación de certificado a través de una firma SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arrl:tqsllib:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C502AE9C-127A-4E16-A442-306C4FE00796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511509",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/12/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00557.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/12/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00557.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-15T17:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NOTE: this issue has been disputed by the upstream vendor. nasl/nasl_crypto2.c in the Nessus Attack Scripting Language library (aka libnasl) 2.2.11 does not properly check the return value from the OpenSSL DSA_do_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.  NOTE: the upstream vendor has disputed this issue, stating \"while we do misuse this function (this is a bug), it has absolutely no security ramification."
      }, {
        "lang" : "es",
        "value" : "** DISPUTADA ** NOTA: este problema ha sido disputado por el proveedor de origen. nasl/nasl_crypto2.c en la librería Nessus Attack Scripting Language (también conocida como libnasl) 2.2.11 no comprueba correctamente el valor de retorno de la función DSA_do_verify function de OpenSSL, lo que permite a atacantes remotos evadir la validación de una cadena de certificados a través de una firma SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077. NOTA: el proveedor de origen ha disputado este problema, diciendo que 'aunque hacemos un uso indebido de esta función (se trata de un bug), no tiene ninguna ramificación de seguridad.'"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finkproject:libnasl:2.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21F62BE-A2DD-4FAB-9745-8BB7B6AF255D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511517",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://cvs.fedoraproject.org/viewvc/rpms/libnasl/F-10/libnasl.spec?r1=1.16&r2=1.17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/12/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-January/002133.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479655",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://cvs.fedoraproject.org/viewvc/rpms/libnasl/F-10/libnasl.spec?r1=1.16&r2=1.17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/12/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-January/002133.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-15T17:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The decrypt_public function in lib/crypt.cpp in the client in Berkeley Open Infrastructure for Network Computing (BOINC) 6.2.14 and 6.4.5 does not check the return value from the OpenSSL RSA_public_decrypt function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."
      }, {
        "lang" : "es",
        "value" : "La función decrypt_public en lib/crypt.cpp en el cliente Berkeley Open Infrastructure for Network Computing (BOINC) v6.2.14 y v6.4.5, no comprueba adecuadamente el valor de retorno de la función OpenSSL RSA_public_decrypt, lo que permitiría a atacantes remotos evitar la validación en cadena de los certificados a través de una firma SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:berkeley:boinc_client:6.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53F44CB8-229D-4295-AA10-818D4039B259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:berkeley:boinc_client:6.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43504B16-DE5D-4D14-8B69-CDDD3125134C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://boinc.berkeley.edu/trac/changeset/16883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://boinc.berkeley.edu/trac/ticket/823",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511521",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/12/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479664",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00034.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://boinc.berkeley.edu/trac/changeset/16883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://boinc.berkeley.edu/trac/ticket/823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/12/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00034.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-15T17:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "M2Crypto does not properly check the return value from the OpenSSL EVP_VerifyFinal, DSA_verify, ECDSA_verify, DSA_do_verify, and ECDSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.  NOTE: a Linux vendor disputes the relevance of this report to the M2Crypto product because \"these functions are not used anywhere in m2crypto."
      }, {
        "lang" : "es",
        "value" : "** CUESTIONADA ** M2Crypto no comprueba adecuadamente el valor de retorno de las funciones OpenSSL EVP_VerifyFinal, DSA_verify, ECDSA_verify, DSA_do_verify y ECDSA_do_verify, lo que permitiria a atacantes remotos evitar la validacion del certificado en cadena a traves de una firma SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077. NOTE: Un fabricante de Linux cuestiona la relevancia de este informe en el producto M2Crypto debido a que \"esas funciones no se utilizan en ningun sitio de m2crypto\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heikkitoivonen:m2crypto:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FDB41E1-9DB5-4F02-AAA3-8CB475EE073F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511515",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/12/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479676",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/12/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat does not consider this to be a security issue.  M2Crypto provides python interfaces to multiple OpenSSL functions.  Neither of those interfaces is further used by M2Crypto in an insecure way.  Additionally, no application shipped in Red Hat Enterprise Linux is known to use affected interfaces provided by M2Crypto.\n\nFurther details can be found in the following bug report: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0127#c1",
        "lastModified" : "2009-01-21T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-15T17:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "plugins/crypto/openssl/crypto_openssl.c in Simple Linux Utility for Resource Management (aka SLURM or slurm-llnl) does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."
      }, {
        "lang" : "es",
        "value" : "plugins/crypto/openssl/crypto_openssl.c en Simple Linux Utility for Resource Management (anteriormente conocido como SLURM o slurm-llnl) no comprueba adecuadamente los valores de retorno de la funcion OpenSSL EVP_VerifyFinal, lo que permite a atacantes remotos evitar la validacion de la cadena de certificados a traves de una firma SSL/TLS malformada, una vulneribilidad similar a CVE-2008-5077."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:llnl:slurm:_nil_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7A3D60-1294-43AF-87BC-42885726B9B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511511",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/12/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/12/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-15T17:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libcrypt-openssl-dsa-perl does not properly check the return value from the OpenSSL DSA_verify and DSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."
      }, {
        "lang" : "es",
        "value" : "libcrypt-openssl-dsa-perl no comprueba adecuadamente el valor de retorno de las funciones OpenSSL_DSA_verify y DSA_do_verify, lo que permitiria a atacantes remotos evitar la validacion de la cadena de certificados a traves de una firma SSL/TLS malformada, similar a la vulnerabilidad CVE-2008-5077."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perl-openssl:libcrypt-openssl-dsa-perl:_nil_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C330D871-2AA0-4722-93D0-D7010AF81701"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511519",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/12/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/12/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-15T17:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lib/crypto/c_src/crypto_drv.c in erlang does not properly check the return value from the OpenSSL DSA_do_verify function, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.  NOTE: a package maintainer disputes this issue, reporting that there is a proper check within the only code that uses the applicable part of crypto_drv.c, and thus \"this report is invalid."
      }, {
        "lang" : "es",
        "value" : "** CUESTIONADA ** lib/crypto/c_src/crypto_drv.c  en erlang no comprueba adecuadamente el retorno del valor de la función OpenSSL DSA_do_verify, esto permitiría a atacantes remotos eludir la validación de la cadena de certificados a través de una firma SSL/TLS, una vulnerabilidad similar a CVE-2008-5077. NOTA: Un desarrollador del paquete cuestiona los hechos, reportando que existe una comprobación adecuada dentro del unico codigo que utiliza la parte aplicable de crypto_drv.c, por lo que \"este informe es invalido\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:erlang:erlang:_nil_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E9C67B-2EFC-457D-B426-92A10165C55F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511520",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/12/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/12/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-15T17:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UFS implementation in the kernel in Sun OpenSolaris snv_29 through snv_90 allows local users to cause a denial of service (panic) via the single posix_fallocate test in the SUSv3 POSIX test suite, related to an F_ALLOCSP fcntl call."
      }, {
        "lang" : "es",
        "value" : "La implementacion UFS en el Kernel de Sun OpenSolaris snv_29 hasta la snv_90 permite a usuarios locales producir una denegacion de servicio (produciendo un panic) a traves de la prueba unica posix_fallocate en el conjunto de pruebas SUSv3 POSIX, relacionado con una llamada F_ALLOCSP fcntl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.opensolaris.org/view_bug.do?bug_id=6711995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239188-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.opensolaris.org/view_bug.do?bug_id=6711995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239188-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-15T17:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the aio_suspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32-bit mode is enabled, allows local users to cause a denial of service (panic) via a large integer value in the second argument (aka nent argument)."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función aio_suspend en Sun Solaris v8 hasta la v10 y OpenSolaris cuando el modo 32-bit esta activado, permitiendo a usuarios locales causar una denegación de servicio (causando un panic) a través de un valor de entero largo en el segundo argumento (anteriormente conocido como argumento \"nent\")."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "097D3A0C-8C75-4951-94C7-4C444DE2B0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F8222C41-435E-4017-A8C7-D7AB624A6D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DBDFD8C-371E-42D2-9635-D8CDD1775984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-59-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-247986-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33188",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2009-001.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-59-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-247986-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2009-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-15T17:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long \"Index file\" field, possibly a related issue to CVE-2006-0564."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Microsoft HTML Help Workshop v4.74 y anteriores permite a atacantes dependientes del contexto ejecutar codigo a su elección a través del un fichero .hhp con un campo \"Index file\" largo, posiblemente relacionado con CVE-2006-0564."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:html_help_workshop:4.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA210410-9163-457A-A792-E64D905E817B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/4914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/4914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-16T18:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1 in AAA EasyGrid ActiveX 3.51 allows remote attackers to create and overwrite arbitrary files via the (1) DoSaveFile or (2) DoSaveHtmlFile method.  NOTE: vector 1 could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de método inseguro en el Control ActiveX EasyGrid.SGCtrl.32 en EasyGrid.ocx v1.0.0.1 en AAA EasyGrid ActiveX v3.51, permite a atacantes remotos crear y sobrescribir ficheros de su elección a través del método (1) DoSaveFile o (2) DoSaveHtmlFile. Nota: vector 1 esto se podrá utilizar para ejecución de código creando archivos ejecutables en carpetas Startup o accediendo a archivos utilizando URLs hcp://. NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:share2:easy_grid_control:3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C432689-B2FA-42E4-B7F9-5C1C7E640E22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33537",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33272",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-16T18:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to execute arbitrary code via an Audible Audio (.aa) file with a large (1) nlen or (2) vlen Tag value, each of which triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de entero en la función Audible::Tag::readTag en metadata/audible/audibletag.cpp en Amarok v1.4.10 hasta v2.0.1 permite a atacantes remotos ejecutar código de su elección mediante el fichero Audible Audio (.aa) con un valor largo (1) nlen o (2) vlen Tag, cada uno de los cuales provoca un desbordamiento de búfer basado en pila."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amarok:amarok:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C802191-CC41-4E8A-BC22-EC3F278610C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amarok:amarok:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF11E67A-C23B-402E-9FB5-86CED4A40749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amarok:amarok:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D526340C-ED92-4A12-BCAC-2FEADBC8900A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://amarok.kde.org/en/releases/2.0.1.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=254896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/14/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33505",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-34.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/4915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trapkit.de/advisories/TKADV2009-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=908391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=908401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=908415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499984/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-739-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00708.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://amarok.kde.org/en/releases/2.0.1.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=254896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/14/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-34.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/4915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trapkit.de/advisories/TKADV2009-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=908391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=908401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=908415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499984/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-739-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00708.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-16T18:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via an Audible Audio (.aa) file with a crafted (1) nlen or (2) vlen Tag value, each of which can lead to an invalid pointer dereference, or the writing of a 0x00 byte to an arbitrary memory location, after an allocation failure."
      }, {
        "lang" : "es",
        "value" : "Múltiples errores de índice de array en la función Audible::Tag::readTag en metadata/audible/audibletag.cpp en Amarok v1.4.10 hasta v2.0.1, permiten a los atacantes remotos causar una denegación de servicios (caída de la aplicación) o ejecutar código de su elección mediante un archivo Audible Audio (.aa) con un valor (1) nlen o (2) vlen Tag manipulado, cda uno de los cuales puede provocar un puntero de referencia inválido, o la escritura de un byte 0x00 a una localización de memoria de su elección, tras un fallo de asignación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amarok:amarok:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C802191-CC41-4E8A-BC22-EC3F278610C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amarok:amarok:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF11E67A-C23B-402E-9FB5-86CED4A40749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amarok:amarok:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D526340C-ED92-4A12-BCAC-2FEADBC8900A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://amarok.kde.org/en/releases/2.0.1.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=254896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/14/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33505",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-34.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/4915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trapkit.de/advisories/TKADV2009-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=908391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=908401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=908415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499984/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-739-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00708.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://amarok.kde.org/en/releases/2.0.1.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=254896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/14/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-34.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/4915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trapkit.de/advisories/TKADV2009-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=908391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=908401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=908415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499984/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-739-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00708.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0053",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-01-16T21:30:03.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to obtain the decryption key via unspecified vectors, related to a \"logic error.\""
      }, {
        "lang" : "es",
        "value" : "Cifrado PXE en Cisco IronPort Encryption Appliance v6.2.4 anterior a v6.2.4.1.1, v6.2.5, v6.2.6, v6.2.7 anterior a v6.2.7.7, v6.3 anterior a v6.3.0.4, y v6.5 anterior a v6.5.0.2; y Cisco IronPort PostX v6.2.1 anterior a v6.2.1.1 y v6.2.2 anterior a v6.2.2.3; permite a atacantes remotos obtener la clave de descifrado mediante vectores no especificados, relacionados con un \"error lógico\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DF7FFA-66B5-45E8-B57E-FB307E4DB8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CAA06A-C849-49B9-B6B7-7E3BF41F705C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6539D9D7-E3DF-475C-B53D-CF11220FBA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7486F8C6-F2E5-4790-BA3A-FA36CF7A8704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1262F096-DB00-4D52-894D-3BA812AEF570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097FCF52-65CF-4AF5-97BC-8B310610DFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8A0A514-959C-4017-B0AB-AFC9D0A979E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06BEC91-C3A6-4590-94A7-EA783A12ABF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9BCDE5-CEF8-4D25-AE6A-D4AF2B2DFBD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90A1B821-0FDD-40C8-93FA-06BB895E83D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF0B9B-B5D9-4F2D-A4E9-24349747435A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E081B0DF-DBD9-4640-92CC-29920E2A50BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC79D-E974-4881-81E5-335FF216DFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7E4C7E-DECE-40B5-AAA4-15964F4EC762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4686D0A4-85B4-4236-B09A-DA8B554A0523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF6D489-B7EA-4705-B136-6B96CC179046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "391503D9-FE43-4A34-A67D-AB3B52996FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_postx:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACB1F5F-542E-44B2-AF54-6D61294E57A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_postx:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA0DB42-01D6-4B14-934B-23C11CB8D062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_postx:6.2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66E714E-6414-4B3F-ABFB-8DE44F3E7065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_postx:6.2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0BE0FF-376B-4BA4-8CEF-EFCF3BDC1D4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51395",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/33479",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://securitytracker.com/id?1021593",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33268",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0140",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/51395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0054",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-01-16T21:30:03.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to capture credentials by tricking a user into reading a modified or crafted e-mail message."
      }, {
        "lang" : "es",
        "value" : "Cifrado PXE en Cisco IronPort Encryption Appliance v6.2.4 anterior a v6.2.4.1.1, v6.2.5, v6.2.6, v6.2.7 anterior a v6.2.7.7, v6.3 anterior a v6.3.0.4, y v6.5 anterior a v6.5.0.2; y Cisco IronPort PostX v6.2.1 anterior a v6.2.1.1 y v6.2.2 anterior a v6.2.2.3; permite a atacantes remotos capturar credenciales engañando al usuario para leer un mensaje de correo electrónico modificado o manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DF7FFA-66B5-45E8-B57E-FB307E4DB8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CAA06A-C849-49B9-B6B7-7E3BF41F705C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6539D9D7-E3DF-475C-B53D-CF11220FBA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7486F8C6-F2E5-4790-BA3A-FA36CF7A8704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1262F096-DB00-4D52-894D-3BA812AEF570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097FCF52-65CF-4AF5-97BC-8B310610DFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8A0A514-959C-4017-B0AB-AFC9D0A979E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06BEC91-C3A6-4590-94A7-EA783A12ABF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9BCDE5-CEF8-4D25-AE6A-D4AF2B2DFBD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90A1B821-0FDD-40C8-93FA-06BB895E83D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF0B9B-B5D9-4F2D-A4E9-24349747435A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E081B0DF-DBD9-4640-92CC-29920E2A50BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC79D-E974-4881-81E5-335FF216DFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7E4C7E-DECE-40B5-AAA4-15964F4EC762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4686D0A4-85B4-4236-B09A-DA8B554A0523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF6D489-B7EA-4705-B136-6B96CC179046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "391503D9-FE43-4A34-A67D-AB3B52996FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_postx:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACB1F5F-542E-44B2-AF54-6D61294E57A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_postx:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA0DB42-01D6-4B14-934B-23C11CB8D062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_postx:6.2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66E714E-6414-4B3F-ABFB-8DE44F3E7065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_postx:6.2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0BE0FF-376B-4BA4-8CEF-EFCF3BDC1D4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51396",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/33479",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://securitytracker.com/id?1021593",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33268",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0140",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/51396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0055",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-01-16T21:30:03.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to modify appliance preferences as arbitrary users via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el interfaz de administración en Cisco IronPort Encryption Appliance v6.2.4 anterior a v6.2.4.1.1, v6.2.5, v6.2.6, v6.2.7 anterior a v6.2.7.7, v6.3 anterior a v6.3.0.4, y v6.5 anterior a v6.5.0.2; y Cisco IronPort PostX v6.2.1 anterior a v6.2.1.1 y v6.2.2 anterior a v6.2.2.3; permite a atacantes remotos modificar preferencias del dispositivo como usuarios de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DF7FFA-66B5-45E8-B57E-FB307E4DB8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CAA06A-C849-49B9-B6B7-7E3BF41F705C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6539D9D7-E3DF-475C-B53D-CF11220FBA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7486F8C6-F2E5-4790-BA3A-FA36CF7A8704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1262F096-DB00-4D52-894D-3BA812AEF570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097FCF52-65CF-4AF5-97BC-8B310610DFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8A0A514-959C-4017-B0AB-AFC9D0A979E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06BEC91-C3A6-4590-94A7-EA783A12ABF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9BCDE5-CEF8-4D25-AE6A-D4AF2B2DFBD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90A1B821-0FDD-40C8-93FA-06BB895E83D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF0B9B-B5D9-4F2D-A4E9-24349747435A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E081B0DF-DBD9-4640-92CC-29920E2A50BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC79D-E974-4881-81E5-335FF216DFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7E4C7E-DECE-40B5-AAA4-15964F4EC762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4686D0A4-85B4-4236-B09A-DA8B554A0523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF6D489-B7EA-4705-B136-6B96CC179046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "391503D9-FE43-4A34-A67D-AB3B52996FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_postx:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACB1F5F-542E-44B2-AF54-6D61294E57A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_postx:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA0DB42-01D6-4B14-934B-23C11CB8D062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_postx:6.2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66E714E-6414-4B3F-ABFB-8DE44F3E7065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_postx:6.2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0BE0FF-376B-4BA4-8CEF-EFCF3BDC1D4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51397",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/33479",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://securitytracker.com/id?1021594",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33268",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0140",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/51397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0056",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-01-16T21:30:03.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to execute commands and modify appliance preferences as arbitrary users via a logout action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el interfaz de administración en Cisco IronPort Encryption Appliance v6.2.4 anterior a v6.2.4.1.1, v6.2.5, v6.2.6, v6.2.7 anterior a v6.2.7.7, v6.3 anterior a v6.3.0.4, y v6.5 anterior a v6.5.0.2; y Cisco IronPort PostX v6.2.1 anterior a v6.2.1.1 y v6.2.2 anterior a v6.2.2.3; permite a atacantes remotos ejecutar comandos y modificar preferencias del dispositivo como usuarios de su elección mediante una acción logout."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DF7FFA-66B5-45E8-B57E-FB307E4DB8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CAA06A-C849-49B9-B6B7-7E3BF41F705C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6539D9D7-E3DF-475C-B53D-CF11220FBA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7486F8C6-F2E5-4790-BA3A-FA36CF7A8704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1262F096-DB00-4D52-894D-3BA812AEF570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097FCF52-65CF-4AF5-97BC-8B310610DFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8A0A514-959C-4017-B0AB-AFC9D0A979E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06BEC91-C3A6-4590-94A7-EA783A12ABF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9BCDE5-CEF8-4D25-AE6A-D4AF2B2DFBD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90A1B821-0FDD-40C8-93FA-06BB895E83D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF0B9B-B5D9-4F2D-A4E9-24349747435A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E081B0DF-DBD9-4640-92CC-29920E2A50BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56BC79D-E974-4881-81E5-335FF216DFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7E4C7E-DECE-40B5-AAA4-15964F4EC762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4686D0A4-85B4-4236-B09A-DA8B554A0523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF6D489-B7EA-4705-B136-6B96CC179046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "391503D9-FE43-4A34-A67D-AB3B52996FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_postx:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACB1F5F-542E-44B2-AF54-6D61294E57A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_postx:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA0DB42-01D6-4B14-934B-23C11CB8D062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_postx:6.2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66E714E-6414-4B3F-ABFB-8DE44F3E7065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_postx:6.2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0BE0FF-376B-4BA4-8CEF-EFCF3BDC1D4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51398",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/33479",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://securitytracker.com/id?1021594",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33268",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0140",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/51398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-16T21:30:03.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to cause a denial of service via unspecified vectors, related to enumeration of \"wrong printers,\" aka a \"Temporary file vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en lpadmin en Sun Solaris v10 y OpenSolaris snv_61 hasta snv_106, permite a usuarios locales provocar una denegación de servicio a través de vectores no especificados, relacionados con enumeración de  \"impresiones erróneas\", también llamado \"Vulnerabilidad de ficheros temporales\".\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://opensolaris.org/os/bug_reports/request_sponsor/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139390-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-249306-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-026.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://opensolaris.org/os/bug_reports/request_sponsor/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139390-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-249306-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-026.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0168",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-16T21:30:03.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in ppdmgr in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to cause a denial of service via unspecified vectors, related to a failure to \"include all cache files,\" and improper handling of temporary files."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en ppdmgr en Sun Solaris v10 y OpenSolaris snv_61 hasta snv_106, permite a usuarios locales provocar una denegación de servicio a través de vectores no especificados, relacionados con el fallo \"incluir todos los ficheros cache\", y un inapropiado manejo de ficheros temporales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://opensolaris.org/os/bug_reports/request_sponsor/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139390-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-249306-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-026.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://opensolaris.org/os/bug_reports/request_sponsor/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139390-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-249306-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-026.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0169",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-16T21:30:03.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm."
      }, {
        "lang" : "es",
        "value" : "Sun Java System Access Manager v7.1 permite a administradores autenticados sub-realm obtener privilegios, como se ha demostrado mediante la creación de una cuenta amadmin en el sub-realm, y entonces entran como amadmin en la raíz realm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "4CCDA95C-0EFF-4CF4-8CC6-EF110F0DAE76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_sparc:*:*:*:*:*",
            "matchCriteriaId" : "F73D1848-D765-46B8-9B61-4A7A351CA6A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_x86:*:*:*:*:*",
            "matchCriteriaId" : "51834E30-6780-433E-9146-C4B8DEFF7CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "36C5F1CB-FEDE-4C19-B056-C846C86FDE8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-249106-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33266",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-249106-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0170",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-16T21:30:03.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other \"access to resources,\" by visiting the Configuration Items component in the console."
      }, {
        "lang" : "es",
        "value" : "Sun Java System Access Manager v6.3 2005Q1, v7 2005Q4, y v7.1 permite a atacantes remotos autenticar usuarios con privilegios de consola para descubrir contraseñas, y obtener otros \"accesos a recursos\" no especificados, visitando el componente Configuration Items en la consola."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        }, {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DEED4B-0AFF-49A2-9DDA-B4D74E3B29A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AB4CE2-6C95-4969-A989-F38C7129F22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5B089E-62AC-44E5-9462-DC439C7AA8A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-242166-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33265",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-242166-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0171",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-16T21:30:03.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to use the manufacturing root password, perform a root login to the eXtended System Control Facility Unit (aka XSCFU or Service Processor), and have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Los servidores Sun SPARC Enterprise M4000 y M5000, dentro de un cierto rango de números de serie, permite a los atacantes remotos utilizar la contraseña root de fabricación, realizar un inicio de sesión root en eXtended System Control Facility Unit (también se conoce como XSCFU o procesador de servicios), y tener otro impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sun:sparc_enterprise_server:m4000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B468360C-95CA-4352-85A7-01C1C305A8F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sun:sparc_enterprise_server:m5000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C3786A-174C-408A-A2C6-0EE7515BCF30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-249126-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0207",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-249126-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0172",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-16T21:30:03.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to cause a denial of service (infinite loop) via a crafted CONNECT data stream."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en IBM DB2 v9.1 anterior a FP6a y 9.5 anterior a FP3a permite a atacantes remotos causar denegación de servicio a través de una secuencia de datos CONNECT manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "0D925911-6225-4B31-9C19-EF40360A9FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "A96437C6-D2C6-46BC-BC2D-078F6131E8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "806CC0EE-9779-4676-A1FB-13878BAE42F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "C31FA827-1D6D-471A-8246-D39AF6AD0F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "9446F75C-BE15-4DAE-9B96-E80F0EF24C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "06EA7251-AF53-4A63-B469-97A1316FCFFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:*",
            "matchCriteriaId" : "640F9988-7F33-4440-AB63-2743237BF2B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "C6F52E0B-24A2-4942-9256-ADBBEE3C1BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:*",
            "matchCriteriaId" : "627E56A7-98F1-4A94-9F76-4C6A9365616B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:*",
            "matchCriteriaId" : "9DBCE5C1-CE78-4DEA-A6E7-35B2525052E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:windows:*:*:*:*:*",
            "matchCriteriaId" : "CC92F759-749C-4E6A-83B3-C8ADB333054F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:*",
            "matchCriteriaId" : "30FD4DEA-CB8C-4E90-BE9E-B5C6225371A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "24FE6316-E7FB-474B-B61B-38F72D6EE632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:*",
            "matchCriteriaId" : "D16FC5E6-87A6-4594-8E1F-8DEBA7A7326B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9595EC-7222-4737-96B8-80847399CFF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:aix:*:*:*:*:*",
            "matchCriteriaId" : "3F54309A-BA0E-447A-A115-DDBC20F6B2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "55F55D9D-3016-4AB1-84B3-20FEE3CD0A98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:*",
            "matchCriteriaId" : "C518666C-29DE-45C0-A68D-74B5E2CEBBBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:windows:*:*:*:*:*",
            "matchCriteriaId" : "A3BD177C-6CF6-463D-8999-830DA1BF3E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:*:*:*:*:*:*",
            "matchCriteriaId" : "74479A15-2388-4FBA-AE83-1692F22122E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "7D21AED3-42E7-4C07-8DD3-4DFCC40E1460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:linux:*:*:*:*:*",
            "matchCriteriaId" : "240239CD-9E05-46E0-A42C-13DB5EE8F436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:windows:*:*:*:*:*",
            "matchCriteriaId" : "77828856-BFE6-4D31-90C1-CDB189BA95AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:ga:*:*:*:*:*:*",
            "matchCriteriaId" : "E3422821-0C01-4502-AD99-0AFE73751B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F01421A6-B4B4-4F86-87D3-B11AEC1258CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "55D8F159-5A2D-4CB6-A7B9-7DCF8A9B82C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "F7E8AA7B-4E40-41B9-8940-95B5F00E11DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C91A9870-C75D-4B49-B1F5-E9CF054D3CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "B7C7E16D-AC11-4FC0-9534-799926E525EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "C1B953D1-0B8F-4C6F-8485-E5E942593015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:aix:*:*:*:*:*",
            "matchCriteriaId" : "2098CCDC-1F4B-44AC-976E-E31FED8AD976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "87FFA2D9-8544-4B12-B02E-8B2198CB3621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:linux:*:*:*:*:*",
            "matchCriteriaId" : "BDDEF993-94F0-431F-AC23-86EE3089F61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:solaris:*:*:*:*:*",
            "matchCriteriaId" : "652E829C-0886-4FD6-9513-C1AD844E30AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:windows:*:*:*:*:*",
            "matchCriteriaId" : "99A3B7D1-8467-4B9B-ACAC-2D265386F2D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33529",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ37696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21363936",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ36534",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ37697",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33258",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ37696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21363936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ36534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ37697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-16T21:30:03.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the server in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote authenticated users to cause a denial of service (trap) via a crafted data stream."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el servidor en IBM DB2 v9.1 anterior  a FP6 y v9.5 anterior a FP3a permite a atacantes remotos causar denegación de servicio (trampa) a través de una secuencia de datos manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "0D925911-6225-4B31-9C19-EF40360A9FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "A96437C6-D2C6-46BC-BC2D-078F6131E8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "806CC0EE-9779-4676-A1FB-13878BAE42F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "C31FA827-1D6D-471A-8246-D39AF6AD0F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "9446F75C-BE15-4DAE-9B96-E80F0EF24C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "06EA7251-AF53-4A63-B469-97A1316FCFFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:*",
            "matchCriteriaId" : "640F9988-7F33-4440-AB63-2743237BF2B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "C6F52E0B-24A2-4942-9256-ADBBEE3C1BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:*",
            "matchCriteriaId" : "627E56A7-98F1-4A94-9F76-4C6A9365616B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:*",
            "matchCriteriaId" : "9DBCE5C1-CE78-4DEA-A6E7-35B2525052E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:windows:*:*:*:*:*",
            "matchCriteriaId" : "CC92F759-749C-4E6A-83B3-C8ADB333054F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:*",
            "matchCriteriaId" : "30FD4DEA-CB8C-4E90-BE9E-B5C6225371A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "24FE6316-E7FB-474B-B61B-38F72D6EE632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:*",
            "matchCriteriaId" : "D16FC5E6-87A6-4594-8E1F-8DEBA7A7326B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9595EC-7222-4737-96B8-80847399CFF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:aix:*:*:*:*:*",
            "matchCriteriaId" : "3F54309A-BA0E-447A-A115-DDBC20F6B2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "55F55D9D-3016-4AB1-84B3-20FEE3CD0A98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:*",
            "matchCriteriaId" : "C518666C-29DE-45C0-A68D-74B5E2CEBBBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:windows:*:*:*:*:*",
            "matchCriteriaId" : "A3BD177C-6CF6-463D-8999-830DA1BF3E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:*:*:*:*:*:*",
            "matchCriteriaId" : "74479A15-2388-4FBA-AE83-1692F22122E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "7D21AED3-42E7-4C07-8DD3-4DFCC40E1460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:linux:*:*:*:*:*",
            "matchCriteriaId" : "240239CD-9E05-46E0-A42C-13DB5EE8F436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:windows:*:*:*:*:*",
            "matchCriteriaId" : "77828856-BFE6-4D31-90C1-CDB189BA95AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.1:ga:*:*:*:*:*:*",
            "matchCriteriaId" : "E3422821-0C01-4502-AD99-0AFE73751B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F01421A6-B4B4-4F86-87D3-B11AEC1258CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "55D8F159-5A2D-4CB6-A7B9-7DCF8A9B82C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "F7E8AA7B-4E40-41B9-8940-95B5F00E11DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C91A9870-C75D-4B49-B1F5-E9CF054D3CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "B7C7E16D-AC11-4FC0-9534-799926E525EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "C1B953D1-0B8F-4C6F-8485-E5E942593015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:aix:*:*:*:*:*",
            "matchCriteriaId" : "2098CCDC-1F4B-44AC-976E-E31FED8AD976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "87FFA2D9-8544-4B12-B02E-8B2198CB3621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:linux:*:*:*:*:*",
            "matchCriteriaId" : "BDDEF993-94F0-431F-AC23-86EE3089F61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:solaris:*:*:*:*:*",
            "matchCriteriaId" : "652E829C-0886-4FD6-9513-C1AD844E30AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:windows:*:*:*:*:*",
            "matchCriteriaId" : "99A3B7D1-8467-4B9B-ACAC-2D265386F2D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33529",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ39652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21363936",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ39373",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ39653",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ39652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21363936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ39373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ39653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-20T16:00:08.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of a REF element in a .asx file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en VUPlayer v2.49 permite a atacantes remotos ejecutar código de su elección a través de un URI largo .asf en el atributo HREF del elemento REF en un fichero .asx"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vuplayer:vuplayer:2.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B82C2B0E-D985-4C48-90F7-91C3D3C14888"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/4918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/4918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-20T16:00:08.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Heathco Software MP3 TrackMaker 1.5 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string in an invalid .mp3 file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Heathco Software MP3 TrackMaker v1.5 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) y posiblemente ejecutar código de su elección a través de una cadena larga en un fichero .mp3 inválido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heathcosoft:mp3_trackmaker:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FD990A-7129-4F91-9901-6516AD333333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/4920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33183",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/4920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-20T16:00:09.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in the PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 allow user-assisted remote attackers to execute arbitrary code via (1) a crafted stream in a .pdf file, related to \"symWidths\"; or (2) a crafted data stream in a .pdf file, related to \"bitmaps.\""
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en montículo en PDF distiller en el Servicio de Adjuntar en Research in Motion (RIM) Blackberry Enterprise Server (BES) v4.1.3 hasta 4.1.6, Blackberry Professional Software v4.1.4, y blackberry Unite! anteriores a v1.0.3 bundle 28, permite a atacantes remotos asistidos por usuarios, ejecutar código de su elección a a través (1)cadena manípulada en un fichero .PDF, relativo a \"symWidths\"; o (2) a cadenas de datos manipulada en un fichero .PDF, relativo a \"bitmaps\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DDE9EAC-D9FF-47C2-A830-0316F74D822E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B71789-C43D-4D75-9C49-71D9347EF321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C67945-B4C6-4159-8FF0-05227D46E282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_enterprise_server:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2FE657D-6988-4A19-B0EC-8D9413AB7A5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_professional_software:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3AB6DC-0733-4683-B495-2FF85923ACB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_unite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "9DC011EA-0F76-4554-B19D-3B93F7C1D774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_unite:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D4FFD7E-241B-458A-AB88-C4C06E47C017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_unite:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6120B4-CEE1-412B-9EE3-9F2B0BE690A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_unite:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A748FD0-2FED-4C8F-9693-ED16095E917A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33534",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17118",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17119",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-20T16:00:09.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 2.0.x before 2.0.1 build 156745; and VMware Fusion before 2.0.2 build 147997 allows remote attackers to cause a denial of service (daemon crash) via a long (1) USER or (2) PASS command."
      }, {
        "lang" : "es",
        "value" : "En la biblioteca vmwarebase.dll, tal y como es usado en el servicio vmware-authd (también se conoce como vmware-authd.exe), en VMware Workstation versión  6.5.1 build 126130, versión 6.5.1 y anteriores; VMware Player versión  2.5.1 build 126130, versión 2.5.1 y anteriores; VMware ACE versión 2.5.1 y anteriores; VMware Server versiones 2.0.x anteriores a 2.0.1 build 156745; y VMware Fusion anterior a versión 2.0.2 build 147997, permite a atacantes remotos causar una denegación de servicio (bloqueo del demonio) por medio de un comando largo (1) USUARIO o (2) PASS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "8D249F86-E463-4AB1-BEEE-0828D5A2D761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71537AE-346D-4BA9-90E7-EA0AB0CD0886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "4004A38A-01A6-41BE-84EB-1D7C7FAD0214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A2543D5-AE09-4E90-B27E-95075BE4ACBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "318D5F4B-48C5-4214-B60C-9A2EEEF44835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3771AFCF-E247-427A-8076-9E36EA457658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C124AC-C421-459E-8251-E7B3BD33874B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65DD6966-72EA-4C4D-BC90-B0D534834BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBFC9B7A-8A40-467B-9102-EE5259EC4D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E684965-43F7-4A51-850F-4C88F42940E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "357B60EC-C5F1-4FA4-B4AF-F81298479D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "933562E3-B6D5-4250-A07B-AB8437ED4D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F23F68-6853-4862-99CB-4F214816358F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFBF6B0-5E0A-4F62-82C7-D9861D0F5F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43282BF6-665C-4F77-8E95-487523863965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4FFF490-8AA9-4296-99F0-DC57E5D4F56C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC850AB-7728-4EE3-9EB5-E1E4D7338202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B1CA212-4114-4D45-B746-9C2AAF60CFCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5085E31D-7472-408B-A85D-90337407A24F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D57F024-3484-4EEA-8F9E-08A1AE5E3D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13D82E91-181E-4E7D-943D-6FC74D40CEB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_player:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21C496BC-404A-4C23-A0CB-DEE8BB8550A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.51",
            "matchCriteriaId" : "A8EF66E7-ECDA-40F9-9070-5857D2DEF818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0790DFEB-3ADE-4057-BA9D-025BD5F5B477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433C05BD-1CAC-4F40-9F69-D0333C5F0E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270D5FAD-A226-4F6F-BF0B-2C6D91C525D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6811B662-07E0-4B95-BFC6-C87C02110C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504CD24F-2EC6-45C0-8E46-69BAE8483521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0EAB3D2-79EE-43A3-8A08-3E8140C1B1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE15637B-FAE4-4FC7-8F45-B3B1554F8F3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBD26B9-60A6-4D6B-B031-0DA8A9F3323F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B32C157-020F-400B-970C-B93CF573EB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E1F0A2-8791-4627-8583-55B2A67D2F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:5.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3767CDDC-DF72-4AAE-B544-D2DFE02A199D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "640130AA-C905-4DD6-97BD-ABA90705F0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B7632A4-D120-434D-B35A-303640DB37AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DFFE01E-BD0A-432E-B47C-D68DAADDD075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EBBFDD-AC46-481A-8DA7-64619B447637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC0B1FF0-80DC-433B-9298-346225060808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECA0396-CBCA-4D21-BD9A-EFCE24D616D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_workstation:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94533C3D-8767-44DB-ABF7-B991C3E47858"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/51180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/33372",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34601",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34373",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0024",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0944",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/51180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/33372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-20T16:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 has unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en IBM Hardware Management Console (HMC) 7 release v3.2.0 SP1 tiene un impacto y vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:hardware_management_console:7.3.2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B7A7BA-455F-4956-9C70-68EC338626FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33518",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1MB02834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1MB02834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-20T16:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libmikmod 3.1.11 through 3.2.0, as used by MikMod and possibly other products, allows user-assisted attackers to cause a denial of service (application crash) by loading an XM file."
      }, {
        "lang" : "es",
        "value" : "libmikmod v3.1.11 hasta v3.2.0, como el utilizado por MikMod y posiblemente otros productos, permite a atacantes ayudados por el usuario provocar una denegación de servicio (caida de aplicación) cargando un fichero XM."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.9-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "436CE81E-616B-40E4-825A-961EC9672896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.9-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C4E395-10DE-42A4-830C-803CE1F79F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.9-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4593CEA9-5661-4F3C-B38B-369FD2043D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.9-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05D8EDA-FE5E-483A-AC78-DAFE129705C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.9-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA7EDD1-5C30-41E8-B93A-F2C5FA754F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.9-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F92EE1-D5F8-47A3-B674-A593A7829DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.10-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1448EB-FDFC-434A-ACE9-F6CC52B523E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.10-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B9F0C8-15C0-47BF-AE69-2216A65D1D48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.10-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0524F58-BC45-4A81-BB99-F09F03047665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.10-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA48214A-CF42-4378-A422-803EDE5632CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.10-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F08B9B6-0CCD-4388-B33A-98F6A65FAEF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.11-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0D92BE-E4F7-42CF-AA61-71CD46319E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.11-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563D3D39-DAFB-4F0C-BCBB-917C5082137F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.11-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA98B82C-B0BD-4546-8047-63ECDCA27B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.11-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE994EED-EA67-4A52-9AAD-30259DCD8C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.11-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB091C37-6020-4202-AC51-B597C2890E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.11-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88BF46A-B01D-4D8E-8BFF-6E864EBA5FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31AA2232-8FB5-4BA3-BBB1-B54443C2D57C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igno_saitz:libmikmod:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B88DA6E-D815-4904-AE07-5C54E72057AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/13/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01305.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01312.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/01/13/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01305.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01312.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0179\n\nThe Red Hat Security Response Team has rated this issue as having low security\nimpact, a future update may address this flaw. More information regarding\nissue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/",
        "lastModified" : "2009-01-21T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-20T16:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376."
      }, {
        "lang" : "es",
        "value" : "Algunos Fedora crean secuencias de comando para nfs-utils anteriores a v1.1.2-9.fc9 en Fedora 9, y anteriores a v1.1.4-6.fc10 en Fedora 10, no da soporte a TCP Wrapper, lo que podría permitir a atacantes remotos evitar \r\nlas restricciones de acceso previstas, posiblemente esté relacionado con el caso CVE-2008-1376."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "45AEA724-343E-4806-ACCE-2AA5F8F8BAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "025FEFFD-12DD-4D29-A0FA-93DF96AFCFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474B82D5-5D48-41ED-B2C1-68907A27491F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A6C9CB-446C-4ACF-B2CA-41A1BD5F229A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E68D7A7-DCEA-417D-AA56-D7B2EB410CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813B76CA-5083-4697-A484-435113B7FF88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0964EDA2-D86C-4189-9B03-61A292601649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83865C7-D7A1-4357-8C15-9865BDECD98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFD8CFB-A24A-49F0-856C-4B985E203C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4645DF7-A5C2-4E8D-A07F-22F77670D68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8616115-30AC-4160-B196-D417AF32C7C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1234E468-8DC6-4474-8B3D-DB550AA801B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-1:*:*:*:*:*:*",
            "matchCriteriaId" : "58FA0EE6-7DBD-4105-B70A-1E04E0CC4FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-2:*:*:*:*:*:*",
            "matchCriteriaId" : "63515439-6FCC-43D7-B8DD-D14DD4D7878E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38E96A1E-5A28-4177-A26F-F19573A17775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A54F7D1-A1CD-4804-B962-BC536602F6B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-2:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1E56AB-B263-42AF-9034-D20AD604E50D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-3:*:*:*:*:*:*",
            "matchCriteriaId" : "0D76C312-3E5D-4176-8691-DD8C21C6A5E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-4:*:*:*:*:*:*",
            "matchCriteriaId" : "D39D0EDE-8D14-42F7-BAEF-A64D559DE495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDF2DB8-0570-43C1-9206-14CDD027EBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18EC9F4-50E7-4974-906E-09533BC7722C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A4A1D1B-639F-467E-BE62-1BDDDCC9671A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A54C8D7-D142-4DB5-8453-57E8612BFFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CED17F-B9CE-46D2-8F00-8419451E51FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.1.0:rc-1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0571302-7EC5-41D3-BBAE-821657A56BED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E6F15C5-4D7E-499C-84F3-777F8C4C0B49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:fedora:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32A30CD-EA21-4AA6-868F-3448AA50B70D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.4",
            "matchCriteriaId" : "6D7165E8-FC10-4A4F-9B58-49CA830D2DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "025FEFFD-12DD-4D29-A0FA-93DF96AFCFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474B82D5-5D48-41ED-B2C1-68907A27491F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A6C9CB-446C-4ACF-B2CA-41A1BD5F229A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E68D7A7-DCEA-417D-AA56-D7B2EB410CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813B76CA-5083-4697-A484-435113B7FF88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0964EDA2-D86C-4189-9B03-61A292601649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83865C7-D7A1-4357-8C15-9865BDECD98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFD8CFB-A24A-49F0-856C-4B985E203C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4645DF7-A5C2-4E8D-A07F-22F77670D68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8616115-30AC-4160-B196-D417AF32C7C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1234E468-8DC6-4474-8B3D-DB550AA801B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-1:*:*:*:*:*:*",
            "matchCriteriaId" : "58FA0EE6-7DBD-4105-B70A-1E04E0CC4FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-2:*:*:*:*:*:*",
            "matchCriteriaId" : "63515439-6FCC-43D7-B8DD-D14DD4D7878E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38E96A1E-5A28-4177-A26F-F19573A17775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A54F7D1-A1CD-4804-B962-BC536602F6B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-2:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1E56AB-B263-42AF-9034-D20AD604E50D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-3:*:*:*:*:*:*",
            "matchCriteriaId" : "0D76C312-3E5D-4176-8691-DD8C21C6A5E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-4:*:*:*:*:*:*",
            "matchCriteriaId" : "D39D0EDE-8D14-42F7-BAEF-A64D559DE495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDF2DB8-0570-43C1-9206-14CDD027EBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18EC9F4-50E7-4974-906E-09533BC7722C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A4A1D1B-639F-467E-BE62-1BDDDCC9671A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A54C8D7-D142-4DB5-8453-57E8612BFFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CED17F-B9CE-46D2-8F00-8419451E51FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.1.0:rc-1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0571302-7EC5-41D3-BBAE-821657A56BED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E6F15C5-4D7E-499C-84F3-777F8C4C0B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F202B0A0-9EDE-4311-88E5-DC4411034457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfs:nfs-utils:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F632663-FAAF-4780-9225-DEF175B803FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA70E035-8475-4046-ABD7-5AE59F874EBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33545",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=477864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=477864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-20T16:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in VUPlayer allows user-assisted attackers to have an unknown impact via a long file, as demonstrated by a file composed entirely of 'A' characters."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en VUPlayer permite a atacantes ayudados por el usuario tener un impacto desconocido mediante un archivo largo, como se demostró con un archivo compuesto completamente por caracteres 'A'."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vuplayer:vuplayer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A2C57D5-AF2F-4971-A05C-386EBF527D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/4921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499810/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/4921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499810/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-20T16:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en VUPlayer v2.49 y anteriores permite a atacantes asistidos por el usuario la ejecución de código de su elección a través de una URL larga en una línea File en un fichero .pls, como se ha demostrado mediante una URL http sobre una línea File1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vuplayer:vuplayer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.49",
            "matchCriteriaId" : "8FAC3BA1-0315-4312-98F9-A5E019187818"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/165489/VUPlayer-2.49-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4923",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48170",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7695",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/165489/VUPlayer-2.49-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-21T01:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 performs delete operations on uninitialized pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted data stream in a .pdf file."
      }, {
        "lang" : "es",
        "value" : "El PDF distiller en el servicio Attachment en Research in Motion (RIM) BlackBerry Enterprise Server (BES) v4.1.3 hasta v4.1.6, BlackBerry Professional Software v4.1.4, y BlackBerry Unite! anteriores a v1.0.3 bundle 28 realiza operaciones de borrado en punteros sin inicializar, lo que permite a atacantes remotos ayudados por el usuario ejecutar código de su elección a través de una secuencia de datos manipulada en un fichero .pdf."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DDE9EAC-D9FF-47C2-A830-0316F74D822E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B71789-C43D-4D75-9C49-71D9347EF321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C67945-B4C6-4159-8FF0-05227D46E282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_enterprise_server:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2FE657D-6988-4A19-B0EC-8D9413AB7A5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_professional_software:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3AB6DC-0733-4683-B495-2FF85923ACB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_unite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "9DC011EA-0F76-4554-B19D-3B93F7C1D774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_unite:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D4FFD7E-241B-458A-AB88-C4C06E47C017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_unite:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6120B4-CEE1-412B-9EE3-9F2B0BE690A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_unite:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A748FD0-2FED-4C8F-9693-ED16095E917A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33534",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17118",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17119",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0031",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-01-21T02:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of service (kernel memory consumption) via unknown vectors related to a \"missing kfree.\""
      }, {
        "lang" : "es",
        "value" : "Fuga de memoria en la función keyctl_join_session_keyring (security/keys/keyctl.c) en el kernel de Linux 2.6.29-rc2 y anteriores permite a usuarios locales provocar una denegación de servicio(agotamiento de memoria del núcleo) a través de vectores desconocidos relacionados con \"kfree perdido.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.28.1",
            "matchCriteriaId" : "4755B044-8D0F-4236-9EE4-70973A66E4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F9DBB0-8AF7-42CA-95DD-68A344E9D549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD00664-A27C-4514-A2A4-079E8F9B0251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E336C792-B7A1-4318-8050-DE9F03474CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D0159-1A05-4628-9C1C-360DED0F438C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6654B9-42EB-4C2C-8F71-710D50556180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FDF616-E410-4540-B377-98D1FB88CE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5313B736-9904-442A-84D6-8FC7B9AC2059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3069324C-28FB-4BB6-9451-F3AC6A8DA64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3D19AD-4268-45E7-B13D-BC93ABDF2226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E619E6-A515-43BC-B371-C1FF6DAA6CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "388414A1-C9B4-41BA-AD35-6501A463A095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FDBA01DD-C129-48F1-800B-838418F4A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "185F1EF8-04EB-43ED-B909-8BDF60F23E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "3483FAFA-353C-498F-AF68-8F5B84A0F30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6B11A9E1-9D90-46DC-81B5-17A137205AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "07EEC559-9240-46BE-9057-0F17D1F61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BBBC127F-D67E-43FE-BCFE-606C200084F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "42B18945-EE09-4E6B-8C11-E382E5F8F850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git2.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0d54ee1c7850a954026deec4cd4885f331da35cc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/51501",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0264.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33858",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34252",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34502",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34762",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/19/4",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0331.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0360.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11386",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git2.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0d54ee1c7850a954026deec4cd4885f331da35cc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/51501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0264.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/19/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0331.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0360.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-21T02:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "listing.php in WebSVN 2.0 and possibly 1.7 beta, when using an SVN authz file, allows remote authenticated users to read changelogs or diffs for restricted projects via a modified repname parameter."
      }, {
        "lang" : "es",
        "value" : "listing.php en WebSVN 2.0 y posiblemente 1.7 beta, cuando utilizan un fichero SVN authz, permite a usuarios autenticados remotamente leer changelogs o diffs para proyectos restringidos a través del parámetro modificado \"repname\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigris:websvn:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F686556C-9E63-48A6-A497-FC0103FFEA27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/32338",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200903-20.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/18/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/32338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200903-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/18/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-21T11:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the process_path function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service (crash) via a request to the gmetad service with a long pathname."
      }, {
        "lang" : "es",
        "value" : "desbordamiento de búfer basado en pila en la función process_path en gmetad/server.c en Ganglia v3.1.1 permite a atacantes remotos provocar una denegación de servicio (caida) a través de un petición al servicio gmetad con un nombre de ruta largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ganglia:ganglia:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B92DC96-8FD2-463A-A7AA-6B570249C588"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.ganglia.info/cgi-bin/bugzilla/show_bug.cgi?id=223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33506",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-22.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mail-archive.com/ganglia-developers%40lists.sourceforge.net/msg04929.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.ganglia.info/cgi-bin/bugzilla/show_bug.cgi?id=223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-22.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mail-archive.com/ganglia-developers%40lists.sourceforge.net/msg04929.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0241\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact, a future update of Red Hat HPC Solution may address this flaw.  More information regarding\nissue severity can be found here: http://www.redhat.com/security/updates/classification/\n",
        "lastModified" : "2009-01-23T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-21T11:30:04.233",
      "lastModified" : "2023-11-07T02:03:36.253",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: gmetad in Ganglia 3.1.1, when supporting multiple requests per connection on an interactive port, allows remote attackers to cause a denial of service via a request to the gmetad service with a path that does not exist, which causes Ganglia to (1) perform excessive CPU computation and (2) send the entire tree, which consumes network bandwidth.  NOTE: the vendor and original researcher have disputed this issue, since legitimate requests can generate the same amount of resource consumption.  CVE concurs with the dispute, so this identifier should not be used"
      } ],
      "metrics" : { },
      "references" : [ ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat does not consider this to be a security issue.  For more information, please see the following bug:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0242",
        "lastModified" : "2009-01-22T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-21T20:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted RTSP URL."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Apple QuickTime anterior a v7.6 permite a atacantes remotos provocar una denegación de servicio (cierre de aplicación) y posiblemente ejecutar código de su elección a través de una URL RTSP manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5.5",
            "matchCriteriaId" : "26878E5F-2CE4-4867-A33F-3E531802EABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "786BB737-EA99-4EC6-B742-0C35BF2453F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-022A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-022A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-21T20:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QTVR movie file with crafted THKD atoms."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en QuickTime de Apple antes de v7.6 permite a atacantes remotos provocar una denegación de servicio (cierre de la aplicación)y posiblemente ejecutar código de su elección mediante un archivo de vídeo QTVR con átomos THKD manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5.5",
            "matchCriteriaId" : "26878E5F-2CE4-4867-A33F-3E531802EABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "786BB737-EA99-4EC6-B742-0C35BF2453F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-01/0210.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-022A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-005/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-01/0210.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-022A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-21T20:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via an AVI movie file with an invalid nBlockAlign value in the _WAVEFORMATEX structure."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región heap de la memoria en Apple QuickTime anterior a la versión 7.6 permite a los atacantes remotos causar una denegación de servicio (terminación de aplicación) y ejecutar código arbitrario por medio de un archivo de película AVI con un valor nBlockAlign no válido en la estructura _WAVEFORMATEX."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5.5",
            "matchCriteriaId" : "26878E5F-2CE4-4867-A33F-3E531802EABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "786BB737-EA99-4EC6-B742-0C35BF2453F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33632",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-022A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-006/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-022A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-21T20:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted MP3 audio file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Apple QuickTime anterior a v7.6 permite a atacantes remotos provocar una denegación de servicio (cierre de aplicación) y posiblemente ejecutar código de su elección a través de un fichero de audio MP3 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5.5",
            "matchCriteriaId" : "26878E5F-2CE4-4867-A33F-3E531802EABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "786BB737-EA99-4EC6-B742-0C35BF2453F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33632",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3403",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-022A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-022A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-21T20:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted H.263 encoded movie file that triggers memory corruption."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en QuickTime de Apple antes de v7.6 permite a atacantes remotos provocar una denegación de servicio (cierre de aplicación) y posiblemente ejecutar código de su elección mediante un archivo de vídeo con codificación H.263 manipulado que dispara una corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5.5",
            "matchCriteriaId" : "26878E5F-2CE4-4867-A33F-3E531802EABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "786BB737-EA99-4EC6-B742-0C35BF2453F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-022A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-022A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-21T20:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a Cinepak encoded movie file with a crafted MDAT atom that triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "El error en la propiedad signedness de enteros en Apple QuickTime en versiones anteriores 7.6, permite a los atacantes remotos causar una denegación de servicio (terminación de aplicación) y posiblemente ejecutar código arbitrario por medio de un archivo de película codificado de Cinepak con un átomo MDAT diseñado que desencadena un desbordamiento del búfer en la región heap de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5.5",
            "matchCriteriaId" : "26878E5F-2CE4-4867-A33F-3E531802EABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ADED98-62C6-4961-894C-1D26E3B3EE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F522CEA4-B3BB-4C94-B070-6679EEA43439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B630944-F838-4C02-90D4-F5EB2A073CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9066C81B-A69F-450D-8606-5E29AF1AD286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71285AD2-3966-4817-B630-8335BE985D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458480E-F222-452A-AB21-933F924F8F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C83A78-6BB9-443E-B508-CC6F8D157A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61463F4F-BBE0-42AA-AC22-8F39E94EB520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FEBA83-C845-4334-9B9A-921BA0F44DE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-01/0215.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33632",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500391/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-022A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-007/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-01/0215.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500391/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-022A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-21T20:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QuickTime movie file containing invalid image width data in JPEG atoms within STSD atoms."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer en la región heap de la memoria en Apple QuickTime  en versiones anteriores a 7.6, permite a los atacantes remotos causar una denegación de servicio (terminación de aplicación) y posiblemente ejecutar código arbitrario por medio de un archivo de película QuickTime que contiene datos de ancho de imagen no válidos en átomos JPEG dentro de átomos STSD."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5.5",
            "matchCriteriaId" : "26878E5F-2CE4-4867-A33F-3E531802EABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ADED98-62C6-4961-894C-1D26E3B3EE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F522CEA4-B3BB-4C94-B070-6679EEA43439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B630944-F838-4C02-90D4-F5EB2A073CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9066C81B-A69F-450D-8606-5E29AF1AD286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71285AD2-3966-4817-B630-8335BE985D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458480E-F222-452A-AB21-933F924F8F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C83A78-6BB9-443E-B508-CC6F8D157A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61463F4F-BBE0-42AA-AC22-8F39E94EB520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FEBA83-C845-4334-9B9A-921BA0F44DE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33632",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3403",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-022A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-008/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-022A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0026",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-01-21T20:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to (1) search.jsp or (2) swr.jsp."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Apache Jackrabbit anterior a v1.5.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parametro \"q\" a (1) search.jsp o (2) swr.jsp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:jackrabbit:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFB91B7-F3A0-4C57-86B6-03E93B11FF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:jackrabbit:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0BCD7D-8C64-49D4-B2E6-FC4C9F702483"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33576",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4942",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.apache.org/dist/jackrabbit/RELEASE-NOTES-1.5.2.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500196/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33360",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0177",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48110",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.apache.org/jira/browse/JCR-1925",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.apache.org/dist/jackrabbit/RELEASE-NOTES-1.5.2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500196/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.apache.org/jira/browse/JCR-1925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0030",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-01-21T20:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID cookie value for all sessions, which allows remote authenticated users to access other users' folder lists and configuration data in opportunistic circumstances by using the standard webmail.php interface.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3663."
      }, {
        "lang" : "es",
        "value" : "Un parche para Red Hat SquirrelMail v1.4.8 establece el mismo valor de la cookie SQMSESSID para todas las sesiones, lo que permite a usuarios autenticados remotamente acceder a las listas de carpetas  y datos de configuración de otros usuarios en circunstancias oportunas utilizando la interfaz estándar de webmail.php. NOTA: esta vulnerabilidad existe debido a un parche incorrecto para CVE-2008-3663."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796C453E-D59A-4988-BD91-24F31646D8FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33611",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021611",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33354",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=480224",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=480488",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48115",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10366",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0057.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=480224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=480488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-21T20:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by (1) inserting CD-ROM media, (2) inserting DVD media, (3) connecting a USB device, and (4) connecting a Firewire device; (5) allows user-assisted remote attackers to execute arbitrary code by mapping a network drive; and allows user-assisted attackers to execute arbitrary code by clicking on (6) an icon under My Computer\\Devices with Removable Storage and (7) an option in an AutoPlay dialog, related to the Autorun.inf file.  NOTE: vectors 1 and 3 on Vista are already covered by CVE-2008-0951."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows no respeta correctamente los valores del registro Autorun y NoDriveTypeAutoRun, lo que permite a atacantes físicamente próximos ejecutar código de su elección (1) introduciendo un CD-ROM, (2) introduciendo un DVD, (3) conectando un dispositivo USB y (4) conectando un dispositivo Firewire; (5) permite a atacantes remotos ayudados por el usuario ejecutar código de su elección mapeando un dispositivo de red; y permite a atacantes ayudados por el usuario ejecutar código de su elección haciendo click en (6) un icono en Mi PC\\Dispositivos con almacenamiento extraíble  y (7) una opción en un diálogo AutoPlay, relacionado con el archivo Autorun.inf.  NOTA: los vectores 1 y 3 en Vista ya están cubiertos por CVE-2008-0951."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "E0BBA081-24D5-4990-882F-69CB05CC28CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isc.sans.org/diary.html?storyid=5695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-020A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=5695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-020A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-21T20:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0 for Pocket PC and 5.0 for Pocket PC Phone Edition, allows remote authenticated users to list arbitrary directories, and create or read arbitrary files, via a .. (dot dot) in a pathname.  NOTE: this can be leveraged for code execution by writing to a Startup folder."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el Servicio OBEX FTP en la pila de Microsoft Bluetooth en Windows Mobile 6 Professional, y probablemente Windows Mobile 5.0 para Pocket PC y 5.0 para Pocket PC Phone Edition, permite a usuarios remotamente autentificados listar directorios de su elección y crear o leer archivos de su elección mediante .. (punto punto) en un nombre de ruta. NOTA: esto se puede utilizar para ejecución de código escribiendo en una carpeta de Inicio (Startup)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_mobile:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188596B9-7646-4841-B684-B224B48B3F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_mobile:5.0:*:pocket_pc:*:*:*:*:*",
            "matchCriteriaId" : "923D7E31-E220-41C5-A8CE-2E9B5D1592A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_mobile:5.0:*:smartphone:*:*:*:*:*",
            "matchCriteriaId" : "92EDBE39-3281-4CD0-9D33-1588C5D0A8A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_mobile:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F2E86B-81CA-45D7-94B4-048F0A01650C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_mobile:6.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "CFEFCF17-883B-4BCC-B507-389D1C58F454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_mobile:6.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "E8239CB3-919E-4EEE-A694-DED5CCBA1F5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33598",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4938",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500199/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33359",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.seguridadmobile.com/windows-mobile/windows-mobile-security/Microsoft-Bluetooth-Stack-Directory-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48124",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/33598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500199/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.seguridadmobile.com/windows-mobile/windows-mobile-security/Microsoft-Bluetooth-Stack-Directory-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "evaluatorImpact" : "per: http://www.seguridadmobile.com/windows-mobile/windows-mobile-security/Microsoft-Bluetooth-Stack-Directory-Traversal.html\n\n\"Non vulnerable products: Windows Mobile devices 5.0 and 6 not using Microsoft Bluetooth Stack (for example: ASUS P525, ASUS P535, ... using Widcomm/Broadcom Bluetooth Stack)\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-22T02:30:01.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Usagi Project MyNETS 1.2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4629."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Usagi Project MyNETS v1.2.0.1 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores sin especificar, un caso diferente a CVE-2008-4629."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usagi:mynets:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0.1",
            "matchCriteriaId" : "53FC7B73-A129-419D-902F-FECF98A30BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usagi:mynets:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "001A5E27-2F13-41C0-8769-C1262DE3CB5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usagi:mynets:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EDF429A-B5AF-4B0B-887B-7009B310AAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usagi:mynets:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41627062-FB62-47E2-8C1E-F0CFAE97504F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usagi:mynets:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C4E8-02E8-469A-B50A-E3B922AB440A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN36802959/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33409",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://usagi-project.org/PRESS/archives/57",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN36802959/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://usagi-project.org/PRESS/archives/57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-22T16:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Radiance RGBE (aka .hdr) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en easyHDR PRO v1.60.2 permite a atacantes asistidos por el usuario la ejecución de código de su elección a través de un fichero Radiance RGBE (también conocido como .hdr)no válido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easyhdr:easyhdr:1.60.2:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "496F7608-C065-4033-99B3-74EB14D07D5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://easyhdr.com/version.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33468",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2008-61/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500192/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://easyhdr.com/version.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2008-61/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500192/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-22T16:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The server for 53KF Web IM 2009 Home, Professional, and Enterprise editions relies on client-side protection mechanisms against cross-site scripting (XSS), which allows remote attackers to conduct XSS attacks by using a modified client to send a crafted IM message, related to the msg variable."
      }, {
        "lang" : "es",
        "value" : "El servidor para ediciones 53KF Web IM 2009 Home, Professional, y Enterprise se basa en mecanismos de protección en sitios de cliente a través de secuencias de comandos en sitios cruzados (XSS), lo cual permite a atacantes remotos llevar a cabo ataques XSS utilizando un cliente modificado para enviar un mensaje IM manipulado, relacionado con la variabl \"msg\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:53kf:web_im_2009:_nil_:enterprise:*:*:*:*:*:*",
            "matchCriteriaId" : "95D5DAB0-C3DD-47C0-9E7F-12DE6848AC36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:53kf:web_im_2009:_nil_:home:*:*:*:*:*:*",
            "matchCriteriaId" : "5512CEBE-777E-479F-B949-B99CA42386CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:53kf:web_im_2009:_nil_:professional:*:*:*:*:*:*",
            "matchCriteriaId" : "632F457F-EFE1-41BE-993C-A2BDB2265F44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500169/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500169/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-22T16:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitrary web script or HTML via the siteID parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en rankup.asp in Katy Whitton RankEm permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro siteID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:katywhitton:rankem:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDD735F-165E-43E7-B227-3BEC885654B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33324",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-22T16:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Katy Whitton RankEm stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for database/topsites.mdb."
      }, {
        "lang" : "es",
        "value" : "Katy Whitton RankEm almacena información sensible en la raíz web con un control de acceso insuficiente, lo que permite a atacantes remotos descargar una base de datos que contiene credenciales mediante una petición directa a database/topsites.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:katywhitton:rankem:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDD735F-165E-43E7-B227-3BEC885654B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-22T16:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the file containing the administrator's password hash via a direct request for config/password."
      }, {
        "lang" : "es",
        "value" : "Ryneezy phoSheezy v0.2 almace información sensible en la raíz web con un control de acceso insuficiente, lo que permite a atacantes remotos descargar el fichero que contiene el hash de la contraseña de administrador a través de una petición a config/password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryneezy:phosheezy:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F8DE0D9-CDC3-4447-8897-5C74247CC6FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33531",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-22T16:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter.  NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático en admin.php en Ryneezy phoSheezy v0.2 permite a administradores remotos autenticados inyectar código PHP de su elección en config/footer a través del parámetro footer.\r\nNOTA: esto puede ser explotado por atacantes sin autenticación utilizando CVE-2009-0250.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryneezy:phosheezy:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F8DE0D9-CDC3-4447-8897-5C74247CC6FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33531",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/4935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-22T16:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arbitrary SQL commands via the (1) Login parameter (aka username field) or the (2) Password parameter (aka password field).  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en default.asp en Enthrallweb eReservations, permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) \"Login\" (alias campo username) o el parámetro (2) \"Password\" (alias campo password). NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enthrallweb:ereservations:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7999D016-295C-4A8C-A4D3-202862F4390C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33578",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-22T18:30:03.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Apple QuickTime MPEG-2 Playback Component before 7.60.92.0 on Windows allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted MPEG-2 movie."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Apple QuickTime MPEG-2 Playback Component antes de v7.60.92.0 en Windows, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o ejecutar código de su elección mediante una película MPEG-2 manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime_mpeg-2_playback_component:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A597C3FD-4C3D-4979-9BF9-AE897575413E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce//2009/Jan/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33642",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3404",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2009/Jan/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "per http://lists.apple.com/archives/security-announce//2009/Jan/msg00001.html\r\n\r\n\"This issue does not\r\naffect systems running Mac OS X.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0057",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-01-22T18:30:03.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x before 5.1(3e) and 6.x before 6.1(3) allows remote attackers to cause a denial of service (voice service outage) by sending malformed input over a TCP session in which the \"client terminates prematurely.\""
      }, {
        "lang" : "es",
        "value" : "El servicio Certificate Authority Proxy Function (CAPF) en Cisco Unified Communications Manager 5.x antes de 5.1(3e) y 6.x antes de 6.1(3) permite a atacantes remotos provocar una denegación de servicio (parada del servicio de voz) mediante el envío de entradas malformadas sobre una sesión TCP en la que el \"cliente termina prematuramente.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AF68FA-433F-46F2-B309-B60A108BECFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.0_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE62DB5-943D-43B5-BD13-D74DAA122578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.0_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D76BC6-1A59-4D74-A7C9-8C05D96E01F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.0_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "788BDB54-0970-468F-9713-14B097E1A863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.0_3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CAE1371-F46C-4DFD-A4A4-D609E93C4740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.0_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7AC2F39-C029-4FAB-A963-0C7F1D5A8067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.0_4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62781360-15FC-4E40-AEF8-BF01606A671B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.0_4a_su1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E03DCC-4DCB-4830-943F-05F7E3BB49EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "640BFEE2-B364-411E-B641-7471B88ED7CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(1\\):*:*:*:*:*:*",
            "matchCriteriaId" : "B860F1E1-E295-4B71-B396-14286611EA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(2\\):*:*:*:*:*:*",
            "matchCriteriaId" : "E194E6EC-282D-4C8E-96E3-00D64FCD8C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(2a\\):*:*:*:*:*:*",
            "matchCriteriaId" : "5B2EA451-EE18-440A-924A-556A2EC74300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(2b\\):*:*:*:*:*:*",
            "matchCriteriaId" : "8950C510-38F3-4040-8871-C085DDECF5B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(3a\\):*:*:*:*:*:*",
            "matchCriteriaId" : "7101A008-3F3C-4ABB-B4FC-25BDA8809C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1:5.1\\(1\\):*:*:*:*:*:*",
            "matchCriteriaId" : "CDEF7B2B-66CB-4C92-B678-859693C8C890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1:5.1_\\(2a\\):*:*:*:*:*:*",
            "matchCriteriaId" : "8AA0378D-5EE0-4BD6-BB33-7DF01F830DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9FDFF3-2E60-4E41-9251-93283D945D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "239510AD-8BB0-4515-B1DA-80DE696D25DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A49932-1E22-4BE0-8195-926D44F65AAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E51D8BF-12BB-4DD1-9232-1D066889B30F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1_\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2935E2-7340-4B49-8B5D-C7801FD605C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2740B5E5-E8D2-491E-B174-A1A9DF812418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60D93DAA-0ED6-4DA5-B7A5-50D5567A6178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1_2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA1ABD3-D076-4CA6-A12D-3C3BB5080B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1_2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B14EC5-4391-4698-BF6F-2726FD28D318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1_3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F1270F-DBF6-4938-A1A0-732EE52C83E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819AE879-5BF9-494E-8905-1E1E867EB5A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.0:\\(1\\):*:*:*:*:*:*",
            "matchCriteriaId" : "156F822A-08CB-4EE2-9054-18F649D96C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.0:\\(1a\\):*:*:*:*:*:*",
            "matchCriteriaId" : "53CBD1E5-46C6-4F31-867A-118227EB0473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.0_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05F443F9-B454-42B3-8464-ACEA40066DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.0_1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBF1FDC-7096-4EE6-B9A2-0C9971F407D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC6EF34-D23D-45CA-A907-A47993CC061E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1:\\(1a\\):*:*:*:*:*:*",
            "matchCriteriaId" : "8E8F77F9-05C3-4B66-9022-7B227F97978C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "597D9674-F44D-4A31-A2F2-2790ED698A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F3870B-5DE9-4E3E-BEA7-863916DD45DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1_1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047E45A0-C0F0-4900-B5FB-8F0A5852732D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33588",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a61928.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33379",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021620",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0213",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48139",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/33588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a61928.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-22T18:30:03.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3.0.5 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a \"Status Bar Obfuscation\" and \"Clickjacking\" attack."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox v3.0.5 permite a atacantes remotos inducir a un usuario a visitar una URL de su elección a través de una acción onclick que mueve un elemento manipulado a la posición actual del ratón, en relación con un ataque de \"Ofuscación de la barra de estado\" y \"Clickjacking\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/4936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/4936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-22T18:30:03.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System (FITS) file.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en easyHDR PRO v1.60.2 permite a atacantes remotos ayudados por el usuario ejecutar código de su elección a través de un fichero Flexible Image Transport System (FITS) inválido. NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easyhdr:easyhdr:1.60.2:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "496F7608-C065-4033-99B3-74EB14D07D5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://easyhdr.com/version.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33468",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://easyhdr.com/version.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-22T23:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random seed, which makes it easier for attackers to crack the key."
      }, {
        "lang" : "es",
        "value" : "La herramienta de instalación de extensiones del sistema en TYPO3 v4.0.9 a v4.0.0, v4.1.0 a v4.1.7, v4.2.0 y v4.2.3 crea la clave de encriptación con una insuficiente aleatoriedad en la semilla, lo que facilita craquear la clave a los atacantes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0.10",
            "matchCriteriaId" : "FCD45EC2-1866-4CFC-B841-8B0B879B5565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.8",
            "matchCriteriaId" : "EB66C8C2-1FAE-4C54-9284-A940CBEDBC00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.4",
            "matchCriteriaId" : "BBFEC718-5811-4B4D-96CF-A37488974D4A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33617",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33679",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1711",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33376",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48132",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/33617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-22T23:30:04.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authentication."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de fijación de sesión en la librería de autenticación en TYPO3 v4.0.0 a v4.0.9, v4.1.0 a v4.1.7 y v4.2.0 a v4.2.3, permite a atacantes remotos secuestrar sesiones web mediante vectores no especificados, en relación con (1) el interfaz externo y (2) la autenticación del interfaz interno."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EAE65C-1E17-48CD-B48C-E0BC09FB6596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501A9157-044A-4856-8092-418D7329EED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA47174-9BC4-4B74-8618-6A7B0773553B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A13146E-EC04-4354-9123-BC7CB292C66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F27B173-8D10-47F7-8450-F8808A918295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1FAD0A-6B98-476B-BCD2-361996CA1C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE992D57-AF82-4BF0-96E8-98110C0AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9A484F-C34D-4885-8125-D9C8725EEB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCB2DE6-4407-4E40-8574-9C813183565B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19647A4-C422-42D0-863B-5B6E0B08BFAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "273F2E33-0655-46DE-9397-E16658B4BD8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F7039-4117-4D53-ABE8-99C10518D351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161E310F-F2D8-40B3-8390-8C52ACDD0B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D69530-AE74-4012-B522-01D0B6B01662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5514D17F-95A5-48C5-9F91-554F8D3C3DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46E35EC-FF7B-4510-A5F2-FC230B7477B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A671ED2-91AA-4447-8996-A8A16FE753A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93919E9-B3E8-483E-A701-D87570127207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDEAF6A-8A99-4872-98CC-12BD54515B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8185B9-D244-43B3-9DF1-FF137A2108DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33617",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-22T23:30:04.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) content of indexed files to the (a) Indexed Search Engine (indexed_search) system extension; (b) unspecified test scripts in the ADOdb system extension; and (c) unspecified vectors in the Workspace module."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en TYPO3 v4.0.0 a v4.0.9, v4.1.0 a 4.1.7 y v4.2.0 a v4.2.3, permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el (1) nombre y (2) el contenido de ficheros indexados para (a) la extensión del sistema Indexed Search Engine (indexed_search), (b) comandos de prueba no especificados en la extensión del sistema ADOb y (c) vectores no especificados en el módulo Workspace."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EAE65C-1E17-48CD-B48C-E0BC09FB6596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501A9157-044A-4856-8092-418D7329EED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA47174-9BC4-4B74-8618-6A7B0773553B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A13146E-EC04-4354-9123-BC7CB292C66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F27B173-8D10-47F7-8450-F8808A918295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1FAD0A-6B98-476B-BCD2-361996CA1C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE992D57-AF82-4BF0-96E8-98110C0AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9A484F-C34D-4885-8125-D9C8725EEB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCB2DE6-4407-4E40-8574-9C813183565B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19647A4-C422-42D0-863B-5B6E0B08BFAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "273F2E33-0655-46DE-9397-E16658B4BD8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F7039-4117-4D53-ABE8-99C10518D351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161E310F-F2D8-40B3-8390-8C52ACDD0B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D69530-AE74-4012-B522-01D0B6B01662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5514D17F-95A5-48C5-9F91-554F8D3C3DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46E35EC-FF7B-4510-A5F2-FC230B7477B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A671ED2-91AA-4447-8996-A8A16FE753A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93919E9-B3E8-483E-A701-D87570127207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDEAF6A-8A99-4872-98CC-12BD54515B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8185B9-D244-43B3-9DF1-FF137A2108DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33617",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-22T23:30:04.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by the command-line indexer."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la extensión del sistema de la Indexed Search Engine (indexed_search) en TYPO3 v4.0.0 a v4.0.9, v4.1.0 a 4.1.7 y v4.2.0 a v4.2.3 permite a atacantes remotos ejecutar comandos de su elección mediante vectores desconocidos relacionados con la la línea de comandos indexer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EAE65C-1E17-48CD-B48C-E0BC09FB6596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501A9157-044A-4856-8092-418D7329EED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA47174-9BC4-4B74-8618-6A7B0773553B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A13146E-EC04-4354-9123-BC7CB292C66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F27B173-8D10-47F7-8450-F8808A918295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1FAD0A-6B98-476B-BCD2-361996CA1C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE992D57-AF82-4BF0-96E8-98110C0AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9A484F-C34D-4885-8125-D9C8725EEB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCB2DE6-4407-4E40-8574-9C813183565B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19647A4-C422-42D0-863B-5B6E0B08BFAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "273F2E33-0655-46DE-9397-E16658B4BD8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F7039-4117-4D53-ABE8-99C10518D351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161E310F-F2D8-40B3-8390-8C52ACDD0B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D69530-AE74-4012-B522-01D0B6B01662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5514D17F-95A5-48C5-9F91-554F8D3C3DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46E35EC-FF7B-4510-A5F2-FC230B7477B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A671ED2-91AA-4447-8996-A8A16FE753A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93919E9-B3E8-483E-A701-D87570127207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDEAF6A-8A99-4872-98CC-12BD54515B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8185B9-D244-43B3-9DF1-FF137A2108DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33617",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/23/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/23/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-22T23:30:04.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) .doc, (2) .wri, or (3) .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008, as demonstrated by 2008-crash.doc.rar, and a similar issue to CVE-2008-4841."
      }, {
        "lang" : "es",
        "value" : "El procesador de textos en OpenOffice.org v1.1.2 a v1.1.5 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario a través de un fichero (1).doc, (2).wri, o (3) .rtf de Word 97 manipulado que provoca una corrupción de memoria, como se ha explotado libremente en diciembre de 2008 y como ha sido demostrado por 2008-crash.doc.rar y una cuestión similar a CVE-2008-4841."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3CA2D68-D190-43B7-93CD-266EEAA9E5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A1204A-BA46-46BF-9E1F-BACFA84D3761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738D5F15-A9D2-4CB3-8D78-685AB805DD7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E697B8A3-447B-4D7B-A02B-191119453CCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://milw0rm.com/sploits/2008-crash.doc.rar",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/21/9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/6560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://milw0rm.com/sploits/2008-crash.doc.rar",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/21/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/6560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue can only result in an OpenOffice.org crash, not allowing arbitrary code execution.  Red Hat does not consider a crash of a client application such as OpenOffice.org to be a security issue.",
        "lastModified" : "2009-01-23T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-23T19:00:05.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin before 1.8.1 allow remote attackers to inject arbitrary web script or HTML via an AttachFile action to the WikiSandBox component with (1) the rename parameter or (2) the drawing parameter (aka the basename variable)."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en action/AttachFile.py en MoinMoin antes de v1.8.1, permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante una acción AttachFile a el componente WikiSandBox con los parámetros (1) rename o (2) drawing (alias la variable basename)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "9CF9B689-609F-4BDA-AD95-BB43EA4A436C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D2866E-A684-4EB7-A127-5FEC934945E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D41FDF8-B8BD-43D9-8D53-ADCF15F7E16B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BDC4AB6-39BF-4444-9CFE-B654A19814C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD78CAE-9A9D-40AA-AD1F-C124A8315714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8673FFE8-349E-4412-9913-1145DFA1EC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24271A6D-21D9-4E8D-997F-0EC132518FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3072B82-3D5C-46DF-8869-08FAAC5C70DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93508FCF-7852-4CB9-AD91-AB0FCD61BE43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B83ACA6-5C3C-46E3-805C-EE1E759B7331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7EF155-C5E0-4473-B635-C551BF3F8EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFA7F26-835B-4454-91A2-1DBB80C53492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C92D8510-CA34-4E6D-B432-997860C63B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB2354B8-9A1A-4E75-92AC-F16CFDF91761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B44C24B-013E-4769-A200-D59752E0A041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB8DB90E-BEE5-447E-9F78-A96634343815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84317439-A287-4897-9608-65095860AB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FB70477-B0F2-44D6-92A8-0F42F890CF99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013FBB75-8B01-4249-9C6C-5E27964ED2D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361C37DC-CB43-4E6A-A198-313A9D62CD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F3D66C-3D24-41D0-9E4B-BB458DD5517D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4C9F85-C5EF-4991-A005-5839951B9843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690F09A1-6195-404D-BDC3-5F02A4A201C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C82F62-DFBB-4499-8C6D-27DA49A00F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57003BFE-8FB2-480A-AFA1-63817B608F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FD9248-1E4B-46DC-9F78-20787F56D50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23539FCA-FF83-46E5-A9E2-5051D975DC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CFA717-B536-46CF-8D96-B850EB4C6F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FBCD1B-2D05-4C17-B41C-CF8DA75BB05D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51DF4CAC-EDD8-4C71-BC77-0F516692B5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1CAAA6-8D33-4901-88E2-120AB7B4CD53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F89B87E-70F6-4B3C-B684-BE2666342F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33BA7179-8A11-41C1-8F54-AC9316E8330D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C423EE-D9F5-4570-A5E8-1AA34F05E0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B12CADC-8939-462C-8D40-DD56B13773AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19C0F96-9054-4DE9-92AD-A9DAF03B4960"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.moinmo.in/moin/1.8/rev/8cb4d34ccbc1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moinmo.in/SecurityFixes#moin1.8.1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33593",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500197/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33365",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/716-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2009/dsa-1715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.moinmo.in/moin/1.8/rev/8cb4d34ccbc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://moinmo.in/SecurityFixes#moin1.8.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/51485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500197/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/716-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2009/dsa-1715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-23T19:00:05.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in EffectMatrix Total Video Player 1.31 allows user-assisted attackers to execute arbitrary code via a Skins\\DefaultSkin\\DefaultSkin.ini file with a large ColumnHeaderSpan value."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en EffectMatrix Total Video Player 1.31 permite a atacantes asistidos por el usuario la ejecución de código de su elección a través de un fichero Skins\\DefaultSkin\\DefaultSkin.ini con un valor ColumnHeaderSpan largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:effectmatrix:total_video_player:1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C890FFCA-620F-4097-BA6F-5041D5E1C2C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-23T19:00:05.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Triologic Media Player 7 and 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3u playlist file.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Triologic Media Player v7 y v8.0.0.0 permite a atacantes asistidos por el usuario la ejecución de código de su elección a través de un fichero .m3u con una cadena larga. NOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trilogic:media_player:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B45648D-0823-44B1-A376-79562441BA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trilogic:media_player:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "017AFB30-3D7A-42BE-9095-81794D2F9F91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-23T19:00:05.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a large Common Chunk (COMM) header value in an AIFF file and (2) a large invalid value in an MP3 file."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en Winamp v5.541 y anteriores, permiten a atacantes remotos provocar una denegación de servicio y posiblemente ejecución código de su eledcción a través de (1) un valor de cabecera Common Chunk (COMM) largo en un fichero AIFF y (2) un valor inválido largo en un fichero MP3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.541",
            "matchCriteriaId" : "9872304B-8AEB-4EF5-A0C8-73722CEE0368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAFFD8E7-A443-4131-9CFB-67AA9739E6E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2787A5F-5B74-4691-A2AD-BA5038D14784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5217B6-B543-4F2C-89DF-CE986AE0BADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.6x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5E3DB21-0E4F-409E-A60B-CBFFD71BBB1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.7x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F7F13A-D45B-4AA9-9CD3-D4E285791E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0581F9-9B99-43F6-852E-BD28BB47B169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95EA0F31-8818-434C-9965-78764D00F148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C999742-75BD-463F-865F-93662B17330F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDFC131-873D-4564-B342-569DF45F31F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.60:*:full:*:*:*:*:*",
            "matchCriteriaId" : "30C29FDB-A37E-4126-BE1B-DB32F38DC75F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.60:*:lite:*:*:*:*:*",
            "matchCriteriaId" : "E7254BFD-8301-4E99-AB73-7D1D9E7939FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEBD661-3253-47CC-91D9-B8F8E1211014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.61:*:full:*:*:*:*:*",
            "matchCriteriaId" : "27826A30-3E5C-4B7D-B86B-8B0A68D2F944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45D7DD1-AFF9-441D-ABF1-A62FA0A9E05B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.62:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "665C2A54-AF79-4315-BFEF-FA44E015B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AE4866-33D1-4596-BA42-E70ABD0CDC6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.64:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0DB02A8B-71ED-4FBF-9D01-D16F1351E702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D708182-E39F-44E4-9C67-52A85ACBA43C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053A71B1-EF83-4750-ACCD-7ABEFF593BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.70:*:full:*:*:*:*:*",
            "matchCriteriaId" : "F07CC71D-A616-483B-ABCB-AA6DDCE3531F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5286A1-C8ED-4783-9278-D30D9B1C588A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3513F3C2-CDD6-461C-985E-E06151AEA804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6CB5C4-0FEC-4F85-B874-E06229265457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.73:*:full:*:*:*:*:*",
            "matchCriteriaId" : "C700DFBF-9B22-4633-947C-840CF01423C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6E478F-D058-482B-B027-605B7A769900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D8698A-B1AE-4041-9055-B6690F671E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2CC66AF-0CB8-4E15-98A3-4704CB2AD78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E36F70C-F578-425E-A97F-1BD196F7F08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEDAD5F1-5B42-40ED-919C-65343567261C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAC79237-791C-4830-BC81-D534FA537D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AFA764-16B4-4E5E-8F9C-46098E758CC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F260E7-5145-4FDC-9759-67EA27CEFC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD15C7B-64FF-42CF-ABD7-8973DDE89FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEA7967-D737-4B46-9382-A391DF832219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "830610D8-1B42-4560-ABB4-BA79DD145110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF89B4A2-37A6-4702-A057-7B70C6157A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19C64AF2-CF9D-4052-85E9-BAFF713382F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13EFF2D1-D88F-436F-8E82-EAE681DE7AA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F898DA-A260-4A81-8E94-DE85154B88DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4510C850-49A0-4082-81CF-333829FE8639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828226F9-29AA-437F-8385-B75A6F4F3B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8A3244-F6FF-4865-BCAD-EAF784AE93DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD7DE0D-1018-4E04-A771-B2C619E95C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798885D9-B518-4C10-81B9-32AEB512C14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5EF1ED-9AA1-41D0-8781-619F8F50F4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D38D15-3588-49E4-9396-11DB96FBD448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.03a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF39A44-528E-4BE8-A923-FFB53C2378F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED120987-6F27-4D8E-95DF-E19EBCB0B8D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF40252-7E87-4EE6-B2C7-19E8D78C4025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E02CCF2-2335-4F08-8061-6CFD7C8B265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48A746C-1020-4A9C-A9D4-94B6FFFA1FDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF272FF7-68ED-4D8B-9C17-D9D46AA33335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D8C02C8-508A-4A6C-8911-12FB9B183C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08:c:*:*:*:*:*:*",
            "matchCriteriaId" : "5785692F-D8FA-4D49-8872-CB8B2F173557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08:d:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E85C52-1974-4F83-89AE-BB29FC897E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08:e:*:*:*:*:*:*",
            "matchCriteriaId" : "CB082F8B-A052-4D82-9D73-2BB35FBA19F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FAD29A-6A61-4201-A0E6-1F04BF093600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EE09C3-B49C-4D7D-BCD1-2AA2104A271A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4497A5-6E95-4CB3-999E-53BF890A23F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057B033C-7836-41E0-B184-F9D5DFC42C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20168350-2AD1-4AF4-B0AA-4C2EBF616259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39A6931-A3CD-44A7-B170-53B803F321AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A651DB07-0A59-41C5-8788-6A3594A5023C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199953E2-C5A4-4D7B-9BB4-EF0B1364F117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE765893-71E4-4945-891C-976B97762CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF245AA-7038-4BD4-B2CB-8B0E59200875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DEF8714-56FC-4D6C-AE87-072ADD7698A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E808BCEF-FE45-44D3-B22B-404BC97B89C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6E29C6-CDC9-4C0B-8D79-8A5A11B563CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14B9D39-BF74-4C69-92BF-DE6E71FDD911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD83F571-1A58-4159-AC2F-7261F135EF45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB054736-2F91-4EF3-B04F-80403676374F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E954F-6A04-442A-B93E-CDD2ABEB357E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FEE5A4C-770A-458B-AC1A-8F1F99A0951A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58E9493-556E-4085-B337-AE211A28DA6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4F66E7-7F61-4F59-9213-21598A3DFD50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6E95D5-D855-4CD4-B44B-66FF029EC823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.091:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6A1F15-A3FA-40FB-980A-569F77E1D104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.093:*:*:*:*:*:*:*",
            "matchCriteriaId" : "684ABC3F-57CB-490B-ADCB-501E0D234E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.094:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB30030-A195-4626-AAED-D421454D911D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.111:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB3FCB9-6CF4-4513-9FB9-D01C58079060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.112:*:*:*:*:*:*:*",
            "matchCriteriaId" : "913962D9-84AA-4474-800E-5DABF37D52A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-26T15:30:04.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Registry Setting Tool in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier has unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Registry Setting Tool en Fujitsu SystemcastWizard Lite v2.0A, v2.0, v1.9, y anteriores tienen, tanto vectores de ataque como impactos no determinados.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0a",
            "matchCriteriaId" : "11D8AB23-D9AD-4CA8-97E6-356AEBF265EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB61C15C-E8E1-4CAF-AA3A-15324CDB40C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480C0061-C897-48BD-88E0-1924CB5CD702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:1.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83F23D0-E114-4D28-9FDC-9F7E5567A697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ED3CA6-9635-432B-8001-41AB64A1CD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B81C753-B760-415C-8F7C-2770DED8285F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-26T15:30:04.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077 and CVE-2009-0025."
      }, {
        "lang" : "es",
        "value" : "Internet Systems Consortium (ISC) BIND en versiones 9.6.0 y anteriores no comprueba adecuadamente el valor de retorno de la función EVP_VerifyFinal de OpenSSL, lo cual permite a atacantes remotos eludir la validación del certificado a través de una firma SSL/TLS malformada, se trata de una vulnerabilidad similar a CVE-2008-5077 y CVE-2009-0025."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        }, {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.6.0",
            "matchCriteriaId" : "3EFE1A82-B875-4840-A5C0-5A2189D73606"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/33559",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:037",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0043",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.isc.org/node/373",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/33559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.isc.org/node/373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of BIND as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.",
        "lastModified" : "2009-01-26T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-26T15:30:04.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Triologic Media Player 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3l playlist file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de pila basado en búfer en  Triologic Media Player 8.0.0.0 permite a atacantes remotos con la ayuda de usuarios locales ejecutar código arbitrario a través de una cadena larga en un archivo .m3l de lista de reproduccion. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trilogic:media_player:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "017AFB30-3D7A-42BE-9095-81794D2F9F91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33496",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-26T15:30:04.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libike in Sun Solaris 9 and 10, and OpenSolaris before snv_100, does not properly check packets, which allows remote attackers to cause a denial of service (in.iked daemon crash) via an unspecified IKE packet, a different vulnerability than CVE-2007-2989."
      }, {
        "lang" : "es",
        "value" : "libike en Sun Solaris v9 y v10, y OpenSolaris anteriores a snv_100, no chequean los paquetes de forma apropiada, lo que permite a atacantes remotos provocar una denegación de servicio (caída del demonio in.iked) a través de paquetes IKE no especificados, es una vulnerabilidad distinta a CVE-2007-2989"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_99",
            "matchCriteriaId" : "CA715852-C3CF-4BC5-B4F8-E4C07AA4E920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_99",
            "matchCriteriaId" : "E15C0530-3DB0-437D-8503-531125CF219F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-113451-15-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-247406-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-032.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33407",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-113451-15-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-247406-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-032.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0268",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-26T15:30:04.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the pseudo-terminal (aka pty) driver module in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows local users to cause a denial of service (panic) via unspecified vectors related to lack of \"properly sequenced code\" in ptc and ptsl."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en el pseudo-terminal (alias PTY) en el módulo controlador de Sun Solaris 8 a 10, y OpenSolaris en versiones anteriores a la snv_103, permite a usuarios locales provocar una denegación de servicio (con un panic del kernel) a través de vectores no especificados relacionados con la falta de \"código correctamente secuenciado\" en PTC y PTSL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_102",
            "matchCriteriaId" : "8E0AC41F-C2F5-47DA-AF64-2960CFD265F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_102",
            "matchCriteriaId" : "EF6D0E27-D990-423C-98D2-920BD3BDB43F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DBDFD8C-371E-42D2-9635-D8CDD1775984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-113685-07-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-249586-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-034.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33406",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-113685-07-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-249586-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-034.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-26T15:30:04.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return value as an array index."
      }, {
        "lang" : "es",
        "value" : "El codigo fuente del fichero fs/ecryptfs/inode.c en el subsistema eCryptfs de versiones del kernel de Linux anteriores a la 2.6.28.1 permite a usuarios locales provocar una denegación de servicio (con fallo o corrupción de memoria), o posiblemente tener algún otro impacto no especificado, a través de una llamada a readlink que resulta en un error que provoca un valor de retorno -1 en el indice de un array."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.28.1",
            "matchCriteriaId" : "284B0272-0D61-492A-8899-1A3BED5D2E35"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B68DF-1440-4587-8458-9C5F4D1E43F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "823BF8BE-2309-4F67-A5E2-EAD98F723468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0507E91-567A-41D6-A7E5-5088A39F75FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=a17d5232de7b53d34229de79ec22f4bb04adb7e4",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/33758",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34502",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:118",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0326.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0360.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33412",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48188",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "VDB Entry" ]
      }, {
        "url" : "https://lists.launchpad.net/ecryptfs-devel/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.launchpad.net/ecryptfs-devel/msg00011.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8169",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8944",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=a17d5232de7b53d34229de79ec22f4bb04adb7e4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/33758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0326.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0360.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "VDB Entry" ]
      }, {
        "url" : "https://lists.launchpad.net/ecryptfs-devel/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.launchpad.net/ecryptfs-devel/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0270",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-26T19:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to execute arbitrary code via a large PXE protocol request in a UDP packet."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de pila basado en búfer en la ejecución de PXEService.exe en Fujitsu SystemcastWizard Lite 2.0a, 2.0, 1.9, y anteriores permite a atacantes remotos ejecutar código arbitrario a través de una petición de protocolo PXE demasiado larga en un paquete UDP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0a",
            "matchCriteriaId" : "11D8AB23-D9AD-4CA8-97E6-356AEBF265EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB61C15C-E8E1-4CAF-AA3A-15324CDB40C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480C0061-C897-48BD-88E0-1924CB5CD702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:1.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83F23D0-E114-4D28-9FDC-9F7E5567A697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ED3CA6-9635-432B-8001-41AB64A1CD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B81C753-B760-415C-8F7C-2770DED8285F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33594",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500172/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wintercore.com/advisories/advisory_W010109.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500172/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wintercore.com/advisories/advisory_W010109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-26T19:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the TFTP service in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en el servicio TFTP de Fujitsu SystemcastWizard Lite 2.0a, 2.0, 1.9, y anteriores permite a atacantes remotos leer ficheros arbitrarios a través de secuencias de salto de directorio en vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB61C15C-E8E1-4CAF-AA3A-15324CDB40C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480C0061-C897-48BD-88E0-1924CB5CD702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:1.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83F23D0-E114-4D28-9FDC-9F7E5567A697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ED3CA6-9635-432B-8001-41AB64A1CD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B81C753-B760-415C-8F7C-2770DED8285F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:systemcastwizard_lite:2.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05F0BEA-6B33-423A-AD85-00C93CAA8FD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33594",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33344",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-26T20:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/header via the header parameter.  NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de código estático en admin.php en Ryneezy phoSheezy 0.2 permite a los administradores remotos autenticados inyectar código PHP arbitrario en config/header a través del parámetro header. NOTA: esto puede ser explotado por atacantes no autenticados utilizando CVE-2009-0250. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de información aportada por terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryneezy:phosheezy:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F8DE0D9-CDC3-4447-8897-5C74247CC6FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33531",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/51412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/51412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0277",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T02:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the kernel in OpenSolaris snv_100 through snv_102 on the Sun UltraSPARC T2 and T2+ sun4v platforms allows local users to cause a denial of service (panic) via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad no especificada en el núcleo del kernel de OpenSolaris snv_100 a snv_102 en las plataformas Sun UltraSPARC T2 y T2 + sun4v , permite a usuarios locales provocar una denegación de servicio (con un panic del sistema) a través de vectores desconocidos.\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sun:ultrasparc:t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CB5927-7D1E-4960-A8F1-F8CCE14908FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sun:ultrasparc:t2_plus:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22C6D951-AA5D-490B-963D-13E0E9F00711"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-250066-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-250066-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T02:30:04.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java System Application Server (AS) 8.1 and 8.2 allows remote attackers to read the Web Application configuration files in the (1) WEB-INF or (2) META-INF directory via a malformed request."
      }, {
        "lang" : "es",
        "value" : "Sun Java System Application Server (AS) 8.1 y 8.2 permite a atacantes remotos leer los ficheros de configuración de las aplicaciones Web en los directorios (1) WEB-INF o (2) META-INF mediante una solicitud mal formada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:8.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "B916CF5C-CF2C-48FA-B00B-7453DED400B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:8.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E30D3A0A-BE19-422D-B3AE-11521EB479C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:8.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "07CAE8DE-6AC0-4119-AAEA-2B8C073E2FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:8.1:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6CB78C86-84B2-4893-ACFF-05A9FE5D14DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:8.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "A44CDE82-4AAF-4259-903D-A6284C79913D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:8.2:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B3EDF3-B8C8-4F5D-AB34-F940B91062B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:8.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "71A68D2D-0DC4-49DA-A082-1919752061AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:8.2:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D061EE51-08EF-4CB5-8916-8196560458FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-119166-35-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-245446-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-119166-35-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-245446-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T18:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en comentar.php en Pardal CMS v0.2.0 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pardalcms:pardalcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.0",
            "matchCriteriaId" : "E656CEFE-1DF6-4101-8D7B-93279612682D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pardalcms:pardalcms:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88907AEB-36C0-490F-8E32-4F19421ED189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pardalcms:pardalcms:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A4B22AB-19BA-4868-A511-9EDA0C488B82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pardalcms:pardalcms:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC2DC07-04A1-4739-8A8C-803889323D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pardalcms:pardalcms:0.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FFC34AE-C12F-4C4E-954C-38D856D1AAB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pardalcms:pardalcms:0.01b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4C4F7E-A8FD-48B8-9453-958B59CB8DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pardalcms:pardalcms:0.01c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5BE298-B0F5-41DA-B5E9-55538764DAE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33404",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T18:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Asp Project Management 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the crypt cookie to 1."
      }, {
        "lang" : "es",
        "value" : "Asp Project Management 1.0 permite a los atacantes remotos eludir la autenticación y obtener acceso administrativos, estableciendo la cookie crypt a 1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp-project:asp-project:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E92DEF1-4F29-4BF4-9545-C1ED32E7E853"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500292/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33401",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500292/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T18:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.aspx in WarHound Walking Club allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en login.aspx en WarHound Walking Club, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"username\" y (2) \"password\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:warhound:walking_club:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DFF15A-09E9-4915-8813-DCCD9AD08432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33317",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T18:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Ralink Technology USB wireless adapter (RT73) 3.08 for Windows, and other wireless card drivers including rt2400, rt2500, rt2570, and rt61, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Probe Request packet with a long SSID, possibly related to an integer signedness error."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en el adaptador inalámbrico USB (RT73) de Ralink Technology versión 3.08 para Windows, y otros controladores de tarjetas inalámbricas como rt2400, rt2500, rt2570 y rt61, permite a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de un paquete Probe Request  con un SSID largo, posiblemente relacionado con un error en la propiedad signedness de un entero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ralinktech:rt73:3.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE68EA94-42A4-4C44-AF1B-D5ECB3BAC76A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685F1981-EA61-4A00-89F8-A748A88962F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33592",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33699",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35743",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500168/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500168/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5, and Red Hat Enterprise MRG.",
        "lastModified" : "2009-02-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T18:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in err.asp in Oblog allows remote attackers to inject arbitrary web script or HTML via the message parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en err.asp en Oblog, permite a atacantes remotos injectar secuencias de comandos web o HTML de su elección a través del parámetro \"message\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aobosoft:oblog:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F47662-3862-4216-A86E-EBCC59C11293"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500349/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500397/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33416",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500349/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500397/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T18:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in category.php in Flax Article Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en category.php en Flax Article Manager v1.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat_id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flaxweb:flax_article_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C33BEFD-DAD1-4AEF-9945-0317BB651804"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33625",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.flaxweb.com/products/articles",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33422",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.flaxweb.com/products/articles",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T18:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in error.asp in BBSXP 5.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el archivo error.asp en BBSXP 5.13 y versiones anteriores que permites a los atacantes remotos, inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bbsxp:bbsxp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.13",
            "matchCriteriaId" : "BD5B5C2E-970B-4735-869E-0D33410283B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500336/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33411",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500336/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T18:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in upgrade/index.php in OpenGoo 1.1, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the form_data[script_class] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en upgrade/index.php en OpenGoo v1.1, cuando \"register_globals\" está activado y \"magic_quotes_gpc\" está desactivado, permite a atacantes remotos leer ficheros de su elección a través de ..(punto punto) en el parámetro form_data[script_class]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC6587D-86F4-441A-B6CA-9603956C9B74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33421",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T18:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in lib/patUser.php in KEEP Toolkit before 2.5.1 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en lib/patUser.php de KEEP Toolkit anterior a 2.5.1; permite a atacantes remotos ejecutar comandos SQL de su elección a través de (1)nombre de usuario y (2) contraseña."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keep_toolkit:keep_toolkit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "2F2ECC92-743E-4254-BA83-3B3C7DD6F4BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keep_toolkit:keep_toolkit:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834CDFE1-945C-4D3D-84AF-FA4F92A4E678"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://keeptoolkit.svn.sourceforge.net/viewvc/keeptoolkit?view=rev&revision=56",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33652",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=655845&group_id=227492",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33425",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://keeptoolkit.svn.sourceforge.net/viewvc/keeptoolkit?view=rev&revision=56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/51623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=655845&group_id=227492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T19:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to read arbitrary files outside the TFTP root directory via directory traversal sequences in a GET request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en k23productions TFTPUtil GUI 1.2.0 y 1.3.0, que permite a los atacantes remotos leer arbitrariamente archivos fuera del directorio raíz TFTP a través de una secuencia de salto de directorio en una petición GET."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:windows_tftp_utility:tftputil:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF86969A-769C-4E7C-A022-3FFAD262E183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:windows_tftp_utility:tftputil:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B12A3E-5F44-4AAE-9AFC-9520010249F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33561",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=894598",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.princeofnigeria.org/blogs/index.php/2009/01/14/tftputil-gui-tftp-directory-traversal",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500106/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33287",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=894598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.princeofnigeria.org/blogs/index.php/2009/01/14/tftputil-gui-tftp-directory-traversal",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500106/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T19:30:02.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to cause a denial of service (service crash) via a long filename in a crafted request."
      }, {
        "lang" : "es",
        "value" : "k23productions TFTPUtil GUI v1.2.0 y v1.3.0; permite a atacantes remotos provocar una denegación de servicio (caída del servicio) a través de un nombre de fichero largo en una solicitud manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:windows_tftp_utility:tftputil:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF86969A-769C-4E7C-A022-3FFAD262E183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:windows_tftp_utility:tftputil:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B12A3E-5F44-4AAE-9AFC-9520010249F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=894598",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.princeofnigeria.org/blogs/index.php/2009/01/14/tftputil-gui-tftp-server-denial-of-servi?blog=1",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500107/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33289",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=894598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.princeofnigeria.org/blogs/index.php/2009/01/14/tftputil-gui-tftp-server-denial-of-servi?blog=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500107/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T19:30:02.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in common.php in SIR GNUBoard 4.31.03 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the g4_path parameter.  NOTE: in some environments, this can be leveraged for remote code execution via a data: URI or a UNC share pathname."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en common.php en SIR GNUBoard v4.31.03, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de ..(punto punto) en el parámetro g4_path. NOTA: en algunos entorno, esto puede ser aprovechado para ejecutar código remotamente a través de datos como una URI o un UNC con nombre de ruta compartido (share pathname)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sir:gnuboard:4.31.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35CB85DC-978C-430A-8BD7-4E770E177853"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33564",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33304",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0032",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-01-27T20:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file."
      }, {
        "lang" : "es",
        "value" : "CUPS sobre  Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) v3.0 y v4.0, y Multi Network Firewall (MNF) v2.0, permite a usuarios locales sobrescribir archivos de su elección a través de un ataque de enlace simbólico sobre el archivo temporal /tmp/pdf.log."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772C32A8-A958-47B3-855D-116B0A7E9E5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:mandriva:corporate_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "694A745A-7CE4-460E-9637-5689ED6CCC95"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:mandriva:corporate_server:3.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "7D0156D0-33E6-48DE-80B9-75CBA1EB4D61"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:mandriva:corporate_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35578C7D-7F96-420A-B60E-2940F7E43E28"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:mandriva:corporate_server:4.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "18FE4BDE-1B2F-4DC5-AC33-A4A938762C04"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:mandriva:linux:2008.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "107F6BEE-C3CB-460A-B574-16D031D823AE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:mandriva:linux:2008.0:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B9B78F34-9775-4851-A489-30CEBE3BEE34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:mandriva:linux:2008.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E024B17-9AEE-40AD-9EDC-3BC0FBB53BE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:mandriva:linux:2008.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FEC2E723-BC31-4E05-BF8E-FE460C32DD93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:mandriva:linux:2009.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F90D927-CBCD-4432-9C04-A5F040D8F337"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:mandriva:multi_network_firewall:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3891CA-CBFC-45FD-967E-03B3AF3CF1DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1021637",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:027",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:028",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:029",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33418",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1021637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. Red Hat does not ship the vulnerable backend that causes this flaw.",
        "lastModified" : "2009-01-27T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T20:30:04.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in fc.php in OpenX 2.6.3 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the MAX_type parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el archivo fc.php en OpenX 2.6.3, permite a los atacantes remotos incluir y ejecutar arbitrariamente archivos a través de .. (punto punto) en el parámetro MAX_type."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openx:openx:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39E8AB7C-CCC8-4C5E-8E42-C57C81C5EE16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500411/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33458",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500411/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T20:30:04.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in show_cat2.php in SHOP-INET 4 allows remote attackers to execute arbitrary SQL commands via the grid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el archivo show_cat2.php en SHOP-INET 4, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro grid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shop-inet:shop-inet:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EBE474C-8665-46D1-9D42-AC0E57675961"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33660",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T20:30:05.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in profile_view.php in Wazzum Dating Software, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the userid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el archivo profile_view.php en Wazzum Dating Software, posiblemente 2.0, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro userid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wazzum:wazzum_dating_software:_nil_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F05F57A-22F6-4D79-998F-63CB7712AEF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33654",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33461",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T20:30:05.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the config[installdir] parameter to (1) search.php, (2) archive.php, (3) comments.php, and (4) news.php; (5) News.php, (6) SendFriend.php, (7) Archive.php, and (8) Comments.php in base/; and possibly other components, different vectors than CVE-2007-1288."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo PHP en WB News v2.0.1, cuando \"register_globals\" está activado, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro config[installdir] a (1) search.php, (2) archive.php, (3) comments.php, y (4) news.php; (5) News.php, (6) SendFriend.php, (7) Archive.php, y (8) Comments.php en base/; y posiblemente otros componentes. Vector distinto del CVE-2007-1288."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmobo:wbnews:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B6EEDA7-058F-4C0E-9005-21E325B5641E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33691",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500398/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33434",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500398/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T20:30:05.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Information Technology Light Poll Information (ITLPoll) 2.7 Stable 2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el archivo index.php en Information Technology Light Poll Information (ITLPoll) 2.7 Stable 2, cuando magic_quotes_gpc es deshabilitada, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itlpoll:itpoll:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA528EA-F662-4F86-BA7A-010CA149D090"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33666",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33452",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T20:30:05.063",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in shop_display_products.php in Script Toko Online 5.01 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en shop_display_products.php en Script Toko Online v5.01 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat_id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gempar:script_toko_online:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20326DB0-4FD6-4E70-B0CC-109358B9A0D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33661",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T20:30:05.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login_check.asp in ClickAuction allows remote attackers to execute arbitrary SQL commands via the (1) txtEmail and (2) txtPassword parameters.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades de inyección SQL en login_check.asp en ClickAuction permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) txtEmail y (2) txtPassword. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clicktech:clickauction:_nil_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFA22E3-C1C8-48F0-9D19-59D7F7DAE2AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33647",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T20:30:05.110",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in MW6 Technologies Barcode ActiveX control (Barcode.MW6Barcode.1, Barcode.dll) 3.0.0.1 allows remote attackers to execute arbitrary code via a long Supplement property."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el control ActiveX MW6 Technologies Barcode (Barcode.MW6Barcode.1, Barcode.dll) 3.0.0.1 que permite a los atacantes remotos ejecutar arbitrariamente código a través de la propiedad larga Supplement."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mw6_technologies:barcode_activex:3.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6E6501-48A3-405A-805B-92F7626C45D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33663",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33451",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0299",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T20:30:05.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en ndex.php en Groone GLinks v2.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groonesworld:glinks:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D96758-FA87-4E9B-9F38-05EDD93CAB3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33649",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33460",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T20:30:05.140",
      "lastModified" : "2023-11-07T02:03:36.840",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2636.  Reason: This candidate is a duplicate of CVE-2006-2636.  Notes: All CVE users should reference CVE-2006-2636 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0301",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T20:30:05.157",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple insecure method vulnerabilities in the FlexCell.Grid ActiveX control (FlexCell.ocx) in FlexCell Grid Control 5.6.9 allow remote attackers to create and overwrite arbitrary files via the (1) SaveFile and (2) ExportToXML methods."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de método inseguro en el control ActiveX FlexCell.Grid (FlexCell.ocx) en FlexCell Grid Control v5.6.9, permite a atacantes remotos crear y sobrescribir archivos de su elección a través de los métodos (1) SaveFile y (2) ExportToXML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grid2000:flexcell_grid_control:5.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED66658-42A9-4EB2-A7FE-4E7A594B4F2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33664",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33453",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T20:30:05.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arbitrary SQL commands via the url parameter in the Add operation to modules.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el módulo Downloads 8.0 para PHP-Nuke, cuando \"register_globals\" está activado y \"magic_quotes\" está desactivado, permite a usuarios autenticados remotamente ejecutar comandos SQL de su elección a través del parámetro \"url\" en una operación Add (Añadir) a modules.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-nuke:downloads_module:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07D2A85-87B9-4993-83C9-A70394A10129"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://1337day.com/exploits/15481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/77349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/18148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500335/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33410",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/50770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/71475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://1337day.com/exploits/15481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/51633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/77349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/18148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500335/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/50770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/71475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T20:30:05.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Web Help Desk before 9.1.18 allows remote attackers to inject arbitrary web script or HTML via vectors related to \"encoded JavaScript\" and Helpdesk.woa."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Web Help Desk anterior a v9.1.18; permite a atacantes remotos inyectar secuencias de comandos Web o HTML mediante vectores relacionados con \"JavaScript codificado\" y Helpdesk.woa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.17",
            "matchCriteriaId" : "C28473A9-ACE1-49A8-814A-E00DE0EC944E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1328847-67FB-44F4-80AE-865248B1DE61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA1161E-4B40-4E1C-9318-BC7E31B7F827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE68630-39F6-4B3B-93A0-45A71CF585C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F44BB6D9-4D13-4F92-B8BB-89950F1E2C32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE519283-C41C-420C-A48F-D197E6C80BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D0BB5F2-0DBE-4292-A324-D6158C8C9271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAEA6AD6-8CC5-4141-9F40-214D64848E50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A71EC4-7BC3-43E8-A128-5F0E31426040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B3939FA-2F84-4EB2-B4A1-E3A0FC326DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690B68E2-3C4D-4CB5-8C14-FC18A17FDE6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0AC7529-8D6B-4EC4-82C5-8E9352BBED4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A565DD83-8B04-4F28-8916-7C7301E6ED83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7E0886-E234-4A66-B481-330A5A15BF26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8D3489-C243-43B2-A261-D91EC6BFFD2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8714786-45EA-4216-BB2A-D15A813407D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CB3E8F-AACA-4E60-827E-0DDACAC0A3FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A3026C-A534-4480-AD8A-F8838727870D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFC1CC0-D11C-4FE3-B4D8-09230C4B51C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78FF029-AB4B-4723-80B8-ABF925FF1FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD413A14-48CE-464A-8A42-D20DAE909FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A1759B-0FDD-467C-B7CE-E13C4305F335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724E7052-C656-44C0-B6D5-B19405710D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F48EBF3F-25FD-4949-A99E-01908197A9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387B28B3-9695-4187-9CE7-4FE0128FD480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E45F4F-C94F-4C96-90E8-E7D4506FA931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC16F1-3623-490E-859B-E78498D6F213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB053A8-5D3D-4AC1-BBA1-B97CE544EFC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8292D500-D7D9-42E9-8192-B68940DE89CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2971936-5362-4FBB-94E6-16751D0C965F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9BAEB95-44FD-4E20-AD17-189CA9C85BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE71C538-DCD4-4462-8F57-9B37576BAB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08B6CE0-548D-4AD0-A688-79D8A4B93B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B38145-C30F-425C-8F05-A294C4CF9596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A08DB3-E88E-49E3-A078-223B744C03AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E69332CF-B1CE-402B-9B4B-E700832B7C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97DCEC9-FCBB-4F49-ADB6-991AE07C5B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BAE16C-250E-4113-8CC1-85EE50861EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2994C680-51DF-40A7-BD55-F46A88177682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C70389C9-29BE-4280-BAA2-11CE92963182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F52A9A4-BBB7-4DBE-9C42-75E40C93B1B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BBAB8-9FEC-4E4B-9A7F-7BED6C66826C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5485F714-8DC3-4A08-A3C7-B1DD39343541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13197CC1-A0EC-4F69-BD8A-D166E6EDC057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE092D2-803A-4526-B105-490C403C6DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2C50FE-0CF1-440D-A1FD-DB2BD0035B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D79DEC-9D35-45F5-AE63-2C082743313F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F6E1F3F-F9CC-41C5-B299-717F282B702C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C9C3D52-5877-4056-8E43-F1440AFC6548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E7DE30-F5BF-4EB0-A4A9-34AC3D23368D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4F5121-75D2-44BD-8A02-EF6B4CB79D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4D8F40-2385-4A79-A974-38570446AB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09113E7F-813A-41BE-98AE-F4AD52FA71C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0152F2-8D61-46AB-86E7-5F8017D19760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2787D92B-E999-448E-8DAD-C2AEF441D53C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F31B5536-17E3-458B-ACFD-5D13AD3F4048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F87D05-191E-47E6-9F18-D99E8021AD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E1A48E-EA5E-448A-B10B-1B38581F035F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CDF10F8-736D-4DA0-AF27-51A4DEC17C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30905135-2195-43B3-A1CC-C5A0AA49B36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302BD2F7-E5B2-4829-B8CC-B56F117E3B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A564289-47F8-4734-AA7D-A5BE8D823483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32385AAC-1DE8-4C42-915E-1079AAC24EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1931031C-FEE1-4DBE-88F5-A1EBA8903FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "753DFAFF-5A88-45FB-8FFE-C69162AB277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B345B2CE-A7EB-4FA5-98F7-860AD7A123B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE8893D-5C41-424C-AF9A-5902105E27CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15632ED5-E61D-4CDB-ADF3-B1A001E1D9C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68081CD9-61CF-413D-A65A-46F62B0DDC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC5D7EA-D910-4696-8ADF-2B2FBC6099A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A45C916-E6FE-46F3-801E-AAD11FE8AE67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D412765-1A93-4671-981B-F1581637E9AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A2CAC5-1A06-45CB-A1CD-22695ECCD890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08B2B873-BCB9-4E67-B8D6-FD3EA5843E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCBDA84-3A4F-43B6-A537-12245A5457FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B1973F-2B37-4AC6-94AA-09DDAD2ADC9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E23538F-AD1C-40FE-B470-07421C3EE0B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8F06C4-2146-4DA0-95B2-128DFBE5F46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4942C9C8-8F3C-4358-BEA3-BF4448F0FA64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2620D16D-A5B7-4F64-A281-7DA2CEEB8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6CAF14-C14E-49F1-9896-C44AEEB636F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA41D09-CC32-4F40-AA0E-68842E0150C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693964C9-7426-4E64-894F-8C52A8B0E457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A159266A-AB40-4234-9B2A-9CAD2BA389CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8B9E06-EB6B-4474-B6F5-3E8517746D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D863419-963F-4F77-B04B-99300AA46A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02B543E5-F27A-4F16-A1BE-72EEB04F4436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC40A17-D7BA-4E40-BB45-5A359B9A32B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E673C67-4229-4EA7-B385-18EA52902E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B17EBBD4-07E9-443E-8A61-15EFF9B3D5D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F370C4B6-8FE8-461D-BBF7-AE0B34E91178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAE7066-7BE3-4114-B226-59F22DC2F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1550F286-842E-4333-89CE-8F2669D46C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "060CF412-6108-49AA-8C1F-0ECECB57D3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381E431B-A680-4E43-83E8-014D37B6E999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DB6CD-9ECF-48DB-B429-E81ACC5BF169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:9.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA0A376F-E5AA-408D-A50D-CB455DA3478C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:9.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C320685-7824-49E9-8CB6-D915A1EFA6DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:9.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A83B6C4-163D-4823-BA0A-EA989588257A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:9.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C17E29EF-F14A-4805-8F24-DB9FD3778DCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:9.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9887BA24-DD3D-4A96-8C67-7C72A2DBC408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:9.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB770E9-8F78-4645-9CD6-AA6AC8DF8D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:9.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A03065A8-EFA9-4D87-A276-583E01258339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:9.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313EB62B-D7B3-4830-A33E-5A6907B0D277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:9.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8394894-8625-42EF-91DA-3A8472ADDC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:9.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF90AF5-F4FC-49FE-B5AA-7FF51FD59418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:9.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0A4F7C-E39A-4F3A-9F37-90BC92CC2D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:9.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E762A08-C30B-4257-91ED-DA4BED018B62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33651",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://updates.webhelpdesk.com/weblog/updates/StableReleases/2009/01/23/911812309.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://updates.webhelpdesk.com/weblog/updates/StableReleases/2009/01/23/911812309.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T20:30:05.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Sun Solaris 10 and 11 snv_101b, and OpenSolaris before snv_108, allows remote attackers to cause a denial of service (system crash) via a crafted IPv6 packet, related to an \"insufficient validation security vulnerability,\" as demonstrated by SunOSipv6.c."
      }, {
        "lang" : "es",
        "value" : "El kernel en Sun Solaris versiones 10 y 11 snv_101b, y OpenSolaris anterior a snv_108, permite a los atacantes remotos causar una denegación de servicio (bloqueo del sistema) por medio de un paquete IPv6 diseñado, relacionado con una \"insufficient validation security vulnerability,\" como es demostrado mediante el archivo SunOSipv6.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_107",
            "matchCriteriaId" : "193ABD0A-63E6-40C2-83B8-28DD57578CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_107",
            "matchCriteriaId" : "2828BBD2-339D-4EBC-9C91-DAB0D78BD3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86931B59-DAD2-474B-B030-3B1389278C49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2009-January/067709.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33605",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-251006-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0232",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2009-January/067709.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-251006-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0311",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-27T22:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Backbone service (ftbackbone.exe) in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer."
      }, {
        "lang" : "es",
        "value" : "El servicio Backbone (ftbackbone.exe) en EMC AutoStart en versiones anteriores a 5.3 SP2, permite a los atacantes remotos ejecutar arbitrariamente código a través de un paquete con un valor manipulado que está desreferenciado como puntero a una función."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:autostart:*:sp1:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3",
            "matchCriteriaId" : "FD8ED01E-0450-42C5-867C-EAD2848DAD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:autostart:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7410C-E530-48F5-8C72-AE0822F233E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33667",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500350/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-09-009/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500350/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-09-009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-28T01:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades sin especificar en la bilioteca Arclib (arclib.dll) anterior a v 7.3.0.15 en el motor de  CA Anti-Virus para CA Anti-Virus  Enterprise v7.1, r8, y r8.1; Anti-Virus 2007 v8 y 2008; Internet Security Suite 2007 v3 y 2008; y otros productos CA, permite a atacantes remotos evitar la detección de virus a través de un fichero mal formado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-spyware:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "385B8B52-F5EA-4E13-A7EE-C2D1B694C785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-spyware:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145A8680-6EDC-47CB-9754-F29D45251E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-spyware_for_the_enterprise:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89F14F0B-C67C-4EF4-81DE-A5DB9A607CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-spyware_for_the_enterprise:r8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB09F459-B652-4C6F-B481-89E73D750BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-virus:2007:8:*:*:*:*:*:*",
            "matchCriteriaId" : "C469EBBE-EE96-4CED-BD8C-36461750C6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-virus:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C5E892B-0EE8-4B76-97B8-0BAF17E83F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607CCBDA-7288-4496-A7ED-EF6DED40CA21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE175BB8-DF9B-4DA0-AD2F-885CC13BB812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:r8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11BCD267-E8CE-4A97-B769-5F4CAF9830D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-virus_sdk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "865B7BD2-3AD1-41CA-842B-47BC4F1426DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:antivirus_gateway:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E779636-EBB1-4A8A-BB87-E6759E92BE6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:arcserve_client_agent:-:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "8E8F42A2-E1D8-4224-8D3F-EA644D490347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:common_services:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2FA702-184A-44FF-8DEA-7811804EE175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:common_services:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D301B65D-A20B-4991-A0D8-DFE3363F162B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_ez_antivirus:r6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C94D2000-2B28-4055-B528-437E2399F2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_ez_antivirus:r7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8741DC0-CCDD-456D-B155-24A4A447A2CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DDF2EE3-753B-4C7E-84EF-144FA5986A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_intrusion_detection:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D703BC4-2604-415D-ABA7-E2ED92B82FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:network_and_systems_management:r3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF55705-42ED-4503-8534-FDEA365E84E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:network_and_systems_management:r3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB548763-E1A7-4DB1-BE86-ED5AA1CA81BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:network_and_systems_management:r11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B28429A-F343-4BE8-A94D-5A5AC3F6258C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:network_and_systems_management:r11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF64064-1C35-4888-BBC2-52F68EF9517F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:secure_content_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E02DA21-B25B-4626-BFDC-61AA8AF3537E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:secure_content_manager:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77203D28-404B-464B-A444-6D17C91517FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:arcserve_backup:r11.1:_nil_:linux:*:*:*:*:*",
            "matchCriteriaId" : "7B114475-CA4D-49CB-BAC5-D7282CB3E870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:arcserve_backup:r11.1:_nil_:windows:*:*:*:*:*",
            "matchCriteriaId" : "69135166-4E5A-4D22-9EB7-B052D5B5D751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:arcserve_backup:r11.5_nil_:linux:*:*:*:*:*:*",
            "matchCriteriaId" : "585DAE6C-4516-4D00-987F-4BCE3D68190C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:arcserve_backup:r11.5_nil_:windows:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC0D532-65D5-491A-A0F3-1FFA1C95F0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:arcserve_backup:r12.0_nil_:windows:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBFEC61-C17D-4A3F-A7EA-1F45E729172A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_intrusion_detection:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "29FEABEE-DC17-4620-B088-B24249865931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_intrusion_detection:3.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D10B864B-AA39-4702-A42B-F33BAF2D8059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:internet_security_suite_2007:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636F7EE3-22C6-4400-AE70-E8AFA0B9E2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:internet_security_suite_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0281F80B-CF9C-482D-B7A9-3B2651BD0567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:internet_security_suite_plus_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F7E184-EA23-487C-83ED-65CF8DD2DB18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:protection_suites:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C10BA4-B241-4F65-8FA1-AD88266C03B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:protection_suites:r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253A8082-9AE4-4049-A1D0-B7ACB5C2E8D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:protection_suites:r3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC845898-3D77-4793-971E-5E1555ED9CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:threat_manager_for_the_enterprise:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7FA3811-B3C7-4CD5-A399-EB427BDB50DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:threat_manager_for_the_enterprise:r8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E7E12A7-F92F-47E3-B810-4019FD885B60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/26/ca20090126-01-ca-anti-virus-engine-detection-evasion-multiple-vulnerabilities.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500417/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/26/ca20090126-01-ca-anti-virus-engine-detection-evasion-multiple-vulnerabilities.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500417/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-28T01:30:03.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the antispam feature (security/antispam.py) in MoinMoin 1.7 and 1.8.1 allows remote attackers to inject arbitrary web script or HTML via crafted, disallowed content."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la característica antispam (security/antispam.py) en MoinMoin 1.7 y 1.8.1, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de un contenido rechazado, manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33BA7179-8A11-41C1-8F54-AC9316E8330D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E706F537-8473-4E45-9165-CA502263DC2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.moinmo.in/moin/1.7/rev/89b91bf87dad",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.moinmo.in/moin/1.8/rev/89b91bf87dad",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moinmo.in/SecurityFixes#moin1.8.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/27/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/716-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2009/dsa-1715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.moinmo.in/moin/1.7/rev/89b91bf87dad",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://hg.moinmo.in/moin/1.8/rev/89b91bf87dad",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://moinmo.in/SecurityFixes#moin1.8.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/27/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/716-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2009/dsa-1715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-28T02:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "winetricks before 20081223 allows local users to overwrite arbitrary files via a symlink attack on the x_showmenu.txt temporary file."
      }, {
        "lang" : "es",
        "value" : "winetricks, versiones anteriores a 20081223 que permite a los usuarios locales, sobrescribir arbitrariamente ficheros a través de un ataque de enlace simbólico en el fichero temporal x_showmenu.txt."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kegel:winetricks:20081127:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA29237E-D8F1-4DAC-A87E-70ADF52FCFF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code.google.com/p/winezeug/source/detail?r=253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/winezeug/source/detail?r=253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/51619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-28T11:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in the Python module in gedit allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en el módulo Python en gedit; permite a usuarios locales ejecutar código de su elección a través de un fichero Python caballo de troya en el directorio de trabajo actual. Está relacionado con la vulnerabilidad en la función PySys_SetArgv (CVE-2008-5983)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:libpeas:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.5.3",
            "matchCriteriaId" : "D0F316A0-65A7-451F-A688-CD4AD23401A8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "743CBBB1-C140-4FEF-B40E-FAE4511B1140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=569214",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33759",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33769",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34522",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-41.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:039",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/26/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33445",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=481556",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48271",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01195.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=569214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-41.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/26/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=481556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01195.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-28T11:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en el módulo Python en xchat permite a usuarios locales ejecutar código arbitrario a través de un troyano en un fichero Python en el directorio de trabajo activo, relativo a la vulnerabilidad de la función PySys_SetArgv (CVE-2008-5983)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xchat:xchat:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA25432-EBEC-42F3-A220-C830A13A3971"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/26/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=481560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/26/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=481560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0316",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-28T11:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no confiable en el archivo src/if_python.c en la interfaz de Python en Vim en versiones anteriores a 7.2.045, permite a los usuarios locales ejecutar código arbitrario por medio de un archivo Python de tipo caballo de Troya en el directorio de trabajo actual, relacionado con una vulnerabilidad en la función PySys_SetArgv (CVE- 2008-5983), como es demostrado por una ruta de búsqueda errónea para el archivo plugin/bike.vim en bicyclerepair."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2",
            "matchCriteriaId" : "DC771166-EF16-4755-ABD4-9390F366FE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEC67AF-3A8F-421E-BC74-16DA592DAC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E7C9C8A-CA6F-4781-98EE-03B78A91D860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B91822-8DC4-471C-B6D4-EC7F114914B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12B90731-2B67-4859-A873-EFEFE4A66CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F325C23E-BFBC-4371-AF74-E189FC2515F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2527B955-E25A-4A33-A6F4-27DEDA99C7F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA82FC2-F2A3-4BE2-8EE2-5A3BC3555401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "808C36C4-0523-4FBC-B3B7-3E6E29FF24EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "404E256E-B823-4BC4-8F29-C3724604F474"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F0563C-7156-4166-87AA-4C122F26CABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CDFBFEB-D79E-4CEB-905E-FA89A0F0D494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC13F6-0526-47FB-BF98-D864CE297D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477A2C0C-5229-4A08-8AB1-B9C8C2D4F3FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FE70D0-5931-49D1-A750-7D03C8C28228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A08C510-8774-4FEB-BCA3-1868F692BF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "464D5E9A-EB5A-47AB-8657-15A68AD30D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4F51CA-18C1-4043-B4E6-F1AD9D3C1346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BAA6B0-4956-4D98-872A-BCCBD0D4CE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97CCAA40-55CE-4AB9-9268-AADA06E29B9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C5B265-A7DD-4D24-864C-BF1FEEF8F138"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nabble.com/Bug-484305%3A-bicyclerepair%3A-bike.vim-imports-untrusted-python-files-from-cwd-td18848099.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/26/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=481565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://svn.pardus.org.tr/pardus/2008/applications/editors/vim/files/official/7.2.045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nabble.com/Bug-484305%3A-bicyclerepair%3A-bike.vim-imports-untrusted-python-files-from-cwd-td18848099.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/26/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=481565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://svn.pardus.org.tr/pardus/2008/applications/editors/vim/files/official/7.2.045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-28T11:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in the Python language bindings for Nautilus (nautilus-python) allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en la vinculación del lenguaje Python con Nautilus (nautilus-python) permite a usuarios locales ejecutar código arbitrario a través de un troyano en un fichero Python en el directorio de trabajo actual, relativo a la vulnerabilidad en la función PySys_SetArgv (CVE-2008-5983)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:nautilus-python:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B383B9-D771-47E6-AD23-20682D8E7A59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/26/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=481570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/26/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=481570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-28T11:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in the GObject Python interpreter wrapper in Gnumeric allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en el intérprete rapper de GObject Python en Gnumeric permite a usuarios locales ejecutar código de su elección a través de un troyano en un fichero Python en el directorio de trabajo actual, relativo a la vulnerabilidad cve-2008-5983 en la función PySys_SetArgv."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gnumeric:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FF4623-A5E0-41C8-BE1B-2F0F291BFC46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=569648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-03.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/26/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=481572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00211.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=569648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/26/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=481572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00211.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-28T18:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the autofs module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_108, allows local users to cause a denial of service (autofs mount outage) or possibly gain privileges via vectors related to \"xdr processing problems.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el módulo autofs en el kernel en Sun Solaris 8 a la 10, y OpenSolaris anterior a snv_108, permite a usuarios locales provocar una denegación de servicio (parada del montaje autofs) o posiblemente la obtención de privilegios a través de vectores relacionados con \"problemas de procesado xdr (xdr processing problems).\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_107",
            "matchCriteriaId" : "193ABD0A-63E6-40C2-83B8-28DD57578CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_107",
            "matchCriteriaId" : "2828BBD2-339D-4EBC-9C91-DAB0D78BD3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DBDFD8C-371E-42D2-9635-D8CDD1775984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-128624-09-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-249966-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-041.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-128624-09-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-249966-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-041.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-28T18:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all processes, which allows local users to obtain sensitive information, as demonstrated by reading the I/O Other Bytes column in Task Manager (aka taskmgr.exe) to estimate the number of characters that a different user entered at a runas.exe password prompt, related to a \"benchmarking attack.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows XP, Server 2003 y 2008, y Vista expone las mediciones de la actividad de I/O (entrada/salida) de todos los procesos, lo que permite a usuarios locales obtener información sensible, como se ha demostrado mediante la lectura de las I/O en la columna Other Bytes en el Administrador de tareas (Task Manager) para estimar el número de caracteres que ha introducido (en el runas.exe - ejecutar como) un usuario (distinto del de la sesion actual) en la ventana que solicita la contraseña, relacionado con un \"benchmarking attack\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500393/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500393/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-28T18:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari 3.2.1 (aka AppVer 3.525.27.1) on Windows allows remote attackers to cause a denial of service (infinite loop or access violation) via a link to an http URI in which the authority (aka hostname) portion is either a (1) . (dot) or (2) .. (dot dot) sequence."
      }, {
        "lang" : "es",
        "value" : "Apple Safari v3.2.1 (también conocido como AppVer 3.525.27.1) sobre Windows, permite a atacantes remotos provocar una denegación de servicio (bucle infinito o violación de acceso) a través de un enlace a una URI http en la que la \"porción de autoridad\" (también conocido como hostname) es cualquier secuencia (1) . (punto) o (2) .. (punto punto)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA1A4C8-9F87-449F-A11F-52E5D52247E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2009/01/safari-for-windows-321-remote-http-uri.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33481",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2009/01/safari-for-windows-321-remote-http-uri.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-28T18:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "drivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to cause a denial of service (system crash) via a read system call that specifies zero bytes from the (1) image_type or (2) packet_size file in /sys/devices/platform/dell_rbu/."
      }, {
        "lang" : "es",
        "value" : "drivers/firmware/dell_rbu.c en el Kernel  Linux anterior a v2.6.27.13 y v2.6.28.x anterior a v2.6.28.2, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de una llamada al sistema de lectura que especifica cero bytes desde el archivo (1) image_type o (2) packet_size en /sys/devices/platform/dell_rbu/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        }, {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.27.13",
            "matchCriteriaId" : "A20015B1-9C8E-4789-94AC-6CFAC0D50654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.28",
            "versionEndExcluding" : "2.6.28.2",
            "matchCriteriaId" : "91F889A5-9C20-4495-91F7-A0EADC48E736"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "823BF8BE-2309-4F67-A5E2-EAD98F723468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=81156928f8fe31621e467490b9d441c0285998c3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.13",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33656",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33758",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34252",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34502",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34680",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34762",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0326.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0331.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0360.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33428",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10163",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7734",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=81156928f8fe31621e467490b9d441c0285998c3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0326.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0331.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0360.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-28T20:30:03.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type parameter in an input tag, which is not properly handled by the EndOfXmlAttributeValue function; (2) an \"HTML GI\" in a start tag, which is not properly handled by the ProcessStartGI function; and unspecified vectors in (3) html2thot.c and (4) xml2thot.c, related to the msgBuffer variable.  NOTE: these are different vectors than CVE-2008-6005."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en pila en W3C Amaya Web Browser v10.0 y 11.0,  permite a atacantes remotos la ejecución de código de su elección a través de  (1)un parámetro \"type\" largo en una etiqueta \"input\" que no está manejado adecuadamente por la función EndOfXmlAttributeValue; (2) un \"HTML GI\" en una etiqueta  \"start\" que no está manejada adecuadamente por la función  ProcessStartGI; y vectores sin especificar en (3) html2thot.c y (4) xml2thot.c, relacionados con la variable msgBuffer. NOTA: estos son vectores distintos del CVE-2008-6005."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0",
            "matchCriteriaId" : "10F5498C-E640-415B-A030-1698AACAC550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0076E2-ACB6-4D43-8F87-0D47F30F0FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:0.95b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE2E2CAC-B42A-42F3-808A-F308B07446AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26102C9D-C33A-4B03-B589-3403A2CD71C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:1.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5DCB81-1A30-41C3-88B8-ADF2EF03170D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8BD1E8-F3B1-43BB-9D32-BF75070A53C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74397EFA-DD02-47E0-BEFB-252BC877254C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:1.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C40B64C3-1125-4B6D-8420-5ED9497C7516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C60E70-625E-4FAE-A569-E806675E5FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:1.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DDB2BA-96A2-4C79-BDE1-132C42FB66B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F385316-397E-4BFC-AAD7-7B118AA63395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:1.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1AD6ADA-23CA-4C3E-8D25-DCBE5B102554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:1.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24332794-9A8C-466A-B048-83F67D8FEB36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D497951-AA71-4850-8798-EF6371B9B2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:1.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4485E4-591A-451C-9FD1-70511C80193E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0A3F2D-F1F0-4FAE-9A5F-F8EF3CB341C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2F97D4-55E7-4453-BD63-080A289E5C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "769C175F-E485-4DE0-8117-A6C3A895BCAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297C2EA2-D79B-40B7-8CA3-501013ECDF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5724EBC-50EA-482C-95F1-42A92432146C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779B0489-3AC7-445F-BB39-AFAEF1455725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC794402-F101-4EF0-8689-B7D66FCC5156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D02AD8-AFF9-4064-B0E8-B038211DAA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3E48DB-B0E1-4905-8D5B-B65FAAFC9783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7582E16-CAEF-4502-8CB3-DBACE070E018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B4F310-3837-4AC6-8482-38FF60112E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78CF3CDD-AB7B-4BAF-B9FC-39CCA259036E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348FE1BD-7ABB-44DB-8658-18130EFDF01B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE152FE-3E04-45AA-B9A9-BE1CFBDEA81B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D4DCC7-8F75-4851-9CCA-A05994EDADD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F25D02-AEED-42F1-A4DC-ADF8F8B407A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7216EC40-6279-4334-8B72-F9267F141A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB3531DE-02F3-43B9-BCBC-42E18F3863FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367E0B6D-0413-4A39-8A44-CF70C2E74C27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "791D4C0F-A609-4222-BB45-E1D985DA0267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EF84E2-528B-4656-8513-3FEC78BEB891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAA349F-96B1-4CA0-99E1-3F03BB2053E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1D46D2-DB03-463E-908A-4F70AB08ABF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A45CB9-22BA-417A-80BD-8B958393F25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0523C9B-9F37-46DA-8618-922D689BD3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1148A4A4-456B-42B8-8755-0476F562EC95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D48084-7C8C-4D29-85F4-FA6916C9CBB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02066018-3831-47A7-AA14-236E6563B6B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7B5160E-14DF-4E70-B3D7-D67A24A7EB85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42857F17-C2EF-4DC9-A8B8-4ACA1A93F2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:8.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6477EF95-78B3-4F93-8EE4-4E094C053B5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:8.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133C3E0A-7503-4B68-B4F0-68AA06A9301B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A2152F-F0F4-4F3E-953B-68D482A77477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77B551D8-CFD1-4384-BF7A-6B836E0A014D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC10B72-FD6D-41C0-BEF3-540EC32B0936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41C0BCCE-6B68-468D-A560-37B347D6B953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9AAE22-8A80-4E8F-A504-75E2685442A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7991719B-1FBC-4635-AB99-0C895D3300D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:8.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65942C27-C185-4255-90BE-32DAC4B51A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:8.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CB09AB-D704-4DF6-89A4-1D61BF6A09BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:8.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6696ACD-755E-4B89-BAB8-3548460CA447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:8.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A01925-D5E8-487B-88DE-A50FE33424B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:8.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB97BA7-1C6E-4EB1-9D2F-7A7923153B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:8.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2181216-E954-431B-9503-FFAF8A6E12BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA624B7-D7F5-4828-A514-A974616F15C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D18DBAC-B24D-4B14-AABE-B0885D17E063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65D0B1D5-1045-4308-A3E3-57B94266CBBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE83CCFD-4909-4708-9FB4-37C1D8A0F8D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61387B05-F417-46F3-8D6B-A86526C31632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA9E3A2-E76F-444C-ABA8-9A3213C0BA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C569CD7D-A80D-4318-9DB6-4D30F7F2B667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:9.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A1C8E7-EB1B-42FF-921E-3C87D5BDB874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:9.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A5E886-00CF-40CF-B1A2-50611F16D90B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:9.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F0B08E-F2C0-496B-A665-9D431ED1CB29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:9.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC15E2C-CF4F-4F50-9C6B-A4A53E36B444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EAE8C2-F544-436E-AD9E-AE873CBCFA67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.coresecurity.com/content/amaya-buffer-overflows",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500492/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/content/amaya-buffer-overflows",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500492/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T18:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in BibCiter 1.4 allow remote attackers to execute arbitrary SQL commands via the (1) idp parameter to reports/projects.php, the (2) idc parameter to reports/contacts.php, and the (3) idu parameter to reports/users.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en BibCiter v1.4 que permitiría a atacantes remotos ejecutar comandos SQL a través (1) del parámetro \"idp\" en reports/projects.php y (2) el parametro \"idc\" a reports/contacts.php y el parametro \"idu\" a reports/users.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bibciter:bibciter:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6667ECA9-E01F-43E9-81D0-FE0FC58650AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bibciter.sourceforge.net/?p=35",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33555",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33329",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bibciter.sourceforge.net/?p=35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T18:30:02.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the cat parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en entries/index.php en Ninja Blog v4.8, cuando magic_quotes esta desactivado, lo que permitiría a atacantes remotos leer ficheros a su elección a través de ..(punto punto) en el parámetro \"cat\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ninjadesigns:ninja_blog:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B03256-6FAF-4396-837F-FA08C05B3686"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33573",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.push55.co.uk/index.php?s=ad&id=6",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33351",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.push55.co.uk/poclibrary/ninjadesignscouk-1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/33573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.push55.co.uk/index.php?s=ad&id=6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.push55.co.uk/poclibrary/ninjadesignscouk-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T18:30:02.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in Dark Age CMS 0.2c beta allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en login.php en Dark Age CMS v0.2c beta permitiría a atacantes remotos ejecutar comandos SQL a su elección a través de los parámetros (1) username and (2) password. NOTA: La procedencia de esta información es desconocida, lo detalles fueron obtenidos unicamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dark_age_cms:dark_age_cms:0.2c:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "12ED8129-8206-4498-8122-DEE9BDE56F4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33271",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T18:30:02.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in readbible.php in Free Bible Search PHP Script 1.0 allows remote attackers to execute arbitrary SQL commands via the version parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en readbible.php en Free Bible Search PHP Script v1.0 que permitiría a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro \"version\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seraphimtech:free_bible_search_php_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32867C99-F9D6-44DE-A248-EC112F0D2D97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freshmeat.net/projects/freebiblesearch/?branch_id=77256&release_id=292446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33595",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33301",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.seraphimtech.net/repository/Changes.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freshmeat.net/projects/freebiblesearch/?branch_id=77256&release_id=292446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.seraphimtech.net/repository/Changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T18:30:02.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ROBS-PROJECTS Digital Sales IPN (aka DS-IPN.NET or DS-IPN Paypal Shop) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb."
      }, {
        "lang" : "es",
        "value" : "ROBS-PROJECTS Digital Sales IPN (también conocido como DS-IPN.NET o DS-IPN Paypal Shop) guarda información sensible bajo la raíz de la web con insuficientes controles de acceso, lo que permitiría atacantes remotos descargar el fichero de la base de datos que contienen las credenciales de usuario a través de una petición directa a Database/Sales.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:robs-projects:digital_sales_ipn:_nil_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0B64FF-1C1B-4DFE-A3AB-BEB06078EDDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33602",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T18:30:02.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the PcCookBook (com_pccookbook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the recipe_id parameter in a viewrecipe action to index.php, a different vector than CVE-2008-0844."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente para Joomla! PcCookBook (com_pccookbook) que permitiría a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro \"recipe_id\" en una acción viewrecipe en index.php, un vector diferente que CVE-2008-0844."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_pccookbook:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AF98B2-364F-436D-B299-172E324C150B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33346",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T18:30:02.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Simple Content Management System (SCMS) 1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php en Simple Content Management System (SCMS) permitiría a atacantes remotos incluir y ejecutar ficheros locales a través de secuencias de salto de directorio en el parámetro \"p\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wss-pro:scms:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1412723-601A-43EC-A4B0-F3007CF9B72F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33330",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T18:30:02.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in gallery/comment.php in Enhanced Simple PHP Gallery (ESPG) 1.72 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.  NOTE: the vulnerability may be in my little homepage Comment script. If so, then this should not be treated as a vulnerability in ESPG."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en gallery/comment.php en Enhanced Simple PHP Gallery (ESPG) v1.72 permitiria a atacantes remotos leer ficheros de su eleccion a traves de ..(punto punto) en el parametro \"file\". NOTA: La vulnerabilidad podria estar en la secuencia de comandos del comentario de mi pequeña pagina web. Si es asi no deberia ser tratada como una vulnerabilidad en ESPG."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quirm:espg:1.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "928D1FF8-96FE-4985-BEFB-BBC7BC1E923F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33335",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T18:30:02.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) admin/edit.php, (2) admin/add.php, (3) lib/book_search.php, and possibly other components."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en AV Book Library anteriores a v1.1 permitiría a atacantes remotos ejecutar comandos SQL a su elección a través de parámetros sin especificar a (1) admin/edit.php, (2) admin/add.php, (3) lib/book_search.php y posiblemente otros componentes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avbooklibrary:avbooklibrary:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "08AECA27-DC93-4E67-87A3-435B999B6565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avbooklibrary:avbooklibrary:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7932F779-3A59-493C-8D95-7671E6E52990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avbooklibrary:avbooklibrary:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FF569D-CD6A-47A7-BE96-F389049AA0F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33583",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=654214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=2219743&group_id=209711&atid=1010816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=654214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=2219743&group_id=209711&atid=1010816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T18:30:02.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the WebAmoeba (WA) Ticket System (com_waticketsystem) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente WebAmoeba (WA) Ticket System (com_waticketsystem) para Joomla! que permitiría atacantes remotos ejecutar comandos SQL a través del parámetro \"catid\" en la acción category a index.php"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_waticketsystem:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882DEC2A-F32F-4033-9C3D-169948673401"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33577",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T18:30:02.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the day parameter in an archive action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.asp en Katy Whitton BlogIt! que permite a atacantes remotos ejecutar comandos SQL a traves del parametro \"day\" en la accion archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:katywhitton:blogit\\!:_nil_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9F41AB-5E33-4785-8869-0FCF9E991776"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33572",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33325",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T18:30:02.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitrary web script or HTML via the view parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.asp en Katy Whitton BlogIt! permitiría a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"view\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:katywhitton:blogit\\!:_nil_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9F41AB-5E33-4785-8869-0FCF9E991776"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33572",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33325",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0336",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T18:30:02.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for database/Blog.mdb.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Katy Whitton BlogIt! almacena información sensible bajo la raíz de la web con insuficientes controles de acceso, lo que permitiría a atacantes remotos descargar el fichero de la base de datos que contiene las credenciales de usuario a traves de una petición para database/Blog.mdb. NOTA: Algunos de los detalles se obtuvieron a través de una tercera parte."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:katywhitton:blogit\\!:_nil_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9F41AB-5E33-4785-8869-0FCF9E991776"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T18:30:02.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyeccion SQL en index.asp en Katy Whitton BlogIt! permite a atacantes remotos ejecutar comandos SQL a su eleccion a traves de los parametros (1) \"month\" y (2) \"year\". NOTA: Se desconoce la procedencia de la informacion; los detalles fueron obtenidos unicamente de una tercera parte."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:katywhitton:blogit\\!:_nil_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9F41AB-5E33-4785-8869-0FCF9E991776"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33572",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T18:30:02.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in inc_webblogmanager.asp in DMXReady Blog Manager allows remote attackers to inject arbitrary web script or HTML via the CategoryID parameter in a refer action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en inc_webblogmanager.asp en DMXReady Blog Manager permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"CategoryID\" en una acción refer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmxready:blog_manager:_nil:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F08BD2AC-475B-4C9E-947E-30897ECB45B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33601",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500146/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33314",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500146/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T18:30:02.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in inc_webblogmanager.asp in DMXReady Blog Manager allows remote attackers to execute arbitrary SQL commands via the itemID parameter in a view action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en inc_webblogmanager.asp en DMXReady Blog Manager permite a atacantes remotos ejecutar comandos SQL a su elección a través de el parámetro \"itemID\" en una acción view."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmxready:blog_manager:_nil_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E327EB16-FF96-4653-9B8A-79AD132EBF0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33601",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500146/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33314",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500146/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T18:30:02.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Simple PHP Newsletter 1.5 allow remote attackers to read arbitrary files via a .. (dot dot) in the olang parameter to (1) mail.php and (2) mailbar.php."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de salto de directorio en Simple PHP Newsletter v1.5 que permitiria a atacantes remotos leer ficheros a traves de ..(punto punto) en el parametro \"olang\" en (1)mail.php y (2) mailbar.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quirm:simple_php_newsletter:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFBEE988-83B6-4AC5-90EB-DBE4202574DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33327",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T19:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The shell32 module in Microsoft Internet Explorer 7.0 on Windows XP SP3 might allow remote attackers to execute arbitrary code via a long VALUE attribute in an INPUT element, possibly related to a stack consumption vulnerability."
      }, {
        "lang" : "es",
        "value" : "El módulo shell32 en Microsoft Internet Explorer v7.0 en Windows XP SP3 permitiría a atacantes remotos ejecutar código a su elección a través de un atributo largo VALUE en un elemento INPUT, relacionado posiblemente con la vulnerabilidad de vaciado de pila."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500472/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500472/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T19:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Niels Provos Systrace before 1.6f on the x86_64 Linux platform allows local users to bypass intended access restrictions by making a 64-bit syscall with a syscall number that corresponds to a policy-compliant 32-bit syscall."
      }, {
        "lang" : "es",
        "value" : "Niels Provos Systrace anteriores a v1.6f en las plataformas Linux x86_64 permite a usuarios locales evitar las restricciones de acceso previstas mediante una syscal de 64 bit  con un número de llamada correspondiente a una llamada de 32 bit."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:provos:systrace:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6e",
            "matchCriteriaId" : "01CBABB4-4603-447B-A036-22926AA4CC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:provos:systrace:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF23E751-38C8-4B5F-8527-D20E3ADEB723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:provos:systrace:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D036342-98D8-460F-B9B9-1434BF85A961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:provos:systrace:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C991DB0D-062B-4FBF-A65C-2490F0056767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:provos:systrace:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCBB458-F90F-4914-944C-4BD3EAAA9935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:provos:systrace:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B1E4B1-7B7D-40D8-9069-F58FED95CFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:provos:systrace:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E3362A-01FA-4574-AF91-DD5D3272F703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:provos:systrace:1.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "272209F6-64EE-408D-9F14-5CDBD36758D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:provos:systrace:1.6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0FB4779-B9F2-4667-8551-90C092FDE668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:provos:systrace:1.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE7BAF1-E06E-4B77-B71E-9EFE7D48D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:provos:systrace:1.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A139ACF1-554C-40D1-A68B-D1A278F706A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:_nil_:_nil_:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FA8AA941-3B59-458D-8C3F-EBB79B754F8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://scary.beasts.org/security/CESA-2009-001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://scarybeastsecurity.blogspot.com/2009/01/bypassing-syscall-filtering.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.citi.umich.edu/u/provos/systrace/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500377/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33417",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://scarybeastsecurity.blogspot.com/2009/01/bypassing-syscall-filtering.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.citi.umich.edu/u/provos/systrace/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500377/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T19:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Niels Provos Systrace 1.6f and earlier on the x86_64 Linux platform allows local users to bypass intended access restrictions by making a 32-bit syscall with a syscall number that corresponds to a policy-compliant 64-bit syscall, related to race conditions that occur in monitoring 64-bit processes."
      }, {
        "lang" : "es",
        "value" : "Niels Provos Systrace v1.6f y anteriores en las plataformas Linux x86_64 permite a usuarios locales evitar las restricciones de acceso previstas, mediante una syscal de 32 bit, con un número correspondiente a una llamada de 64 bit. Relacionada con las condiciones de carrera en la monitorización de procesos de 64 bit."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:systrace:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6e",
            "matchCriteriaId" : "8C778AF1-B380-4456-8C6B-BDBFD7C31860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:systrace:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A786ED-B9C9-41EE-99E6-30BFA0DD984A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:systrace:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D872DA-238E-4DA5-8187-4FEE1A63AC08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:systrace:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66D4199A-72A3-4EBE-919D-4366520E7848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:systrace:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE73152-5620-44A2-B09B-66CDBBAD1F41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:systrace:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B210A03B-A13E-4F48-B5DA-D8D4EA3A2C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:systrace:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDF7BA51-FD3D-4FFF-B5AC-DB2CE6EDF5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:systrace:1.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5300D33-C8AF-4389-8309-B375C36FC794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:systrace:1.6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F316742F-6281-4749-AAA3-338B64042714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:systrace:1.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DBB4B24-0570-47F4-ABF6-73C83BCD710F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:systrace:1.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A484409A-8DD4-4CDE-A179-CAFDCB20AF3E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:_nil_:_nil_:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FA8AA941-3B59-458D-8C3F-EBB79B754F8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://scary.beasts.org/security/CESA-2009-001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://scarybeastsecurity.blogspot.com/2009/01/bypassing-syscall-filtering.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.citi.umich.edu/u/provos/systrace/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500377/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33417",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://scarybeastsecurity.blogspot.com/2009/01/bypassing-syscall-filtering.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.citi.umich.edu/u/provos/systrace/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500377/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T19:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Embedded Lights Out Manager (ELOM) on the Sun Fire X2100 M2 and X2200 M2 x86 platforms before SP/BMC firmware 3.20 allows remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor (SP) commands via unknown vectors, aka Bug ID 6633175, a different vulnerability than CVE-2007-5717."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en Embedded Lights Out Manager (ELOM) en las plataformas Sun Fire X2100 M2 y X2200 M2 x86 anteriores al firmware SP/BMC v3.20 permitiría a atacantes remotos obtener acceso con privilegios o ejecutar comandos a su elección en el procesador de servicios (SP) a través de vectores desconocidos, también conocido como el fallo ID 6633175, una vulnerabilidad diferente de CVE-2007-5717."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sun:fire_x2100_m2:*:-:x86:*:*:*:*:*",
            "versionEndIncluding" : "3.19",
            "matchCriteriaId" : "1FEDF8B3-8BF5-477F-B98D-2551620F80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sun:fire_x2200_m2:*:-:x86:*:*:*:*:*",
            "versionEndIncluding" : "2.19",
            "matchCriteriaId" : "B3FC7B9D-8410-4A13-8AF0-8AE786EA3A37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-239886-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-239886-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T19:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Embedded Lights Out Manager (ELOM) on the Sun Fire X2100 M2 and X2200 M2 x86 platforms before SP/BMC firmware 3.20 allows remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor (SP) commands via unknown vectors, aka Bug ID 6648082, a different vulnerability than CVE-2007-5717."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecifica en Embedded Lights Out Manager (ELOM) en las plataformas Sun Fire X2100 M2 y X2200 M2 x86 anteriores a el firmware SP/BMC v3.20 permitiría a atacantes remotos conseguir acceso con privilegios a ELOM o ejecutar comandos a su elección en el procesador de servicios (SP) a través de vectores desconocidos, también conocido como el fallo con ID 6648082, una vulnerabilidad diferente de CVE-2007-5717."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sun:fire_x2100_m2:*:-:x86:*:*:*:*:*",
            "versionEndIncluding" : "3.19",
            "matchCriteriaId" : "1FEDF8B3-8BF5-477F-B98D-2551620F80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sun:fire_x2200_m2:*:-:x86:*:*:*:*:*",
            "versionEndIncluding" : "2.19",
            "matchCriteriaId" : "B3FC7B9D-8410-4A13-8AF0-8AE786EA3A37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-239886-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-239886-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T19:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IP-in-IP packet processing implementation in the IPsec and IP stacks in the kernel in Sun Solaris 9 and 10, and OpenSolaris snv_01 though snv_85, allows local users to cause a denial of service (panic) via a self-encapsulated packet that lacks IPsec protection."
      }, {
        "lang" : "es",
        "value" : "La implementacion del procesado del paquete IP-en-IP en la pila de IPsec e IP en Sun Solaris v9 y v10, y OpenSolaris desde snv_01 hasta snv_85, permite a usuarios locales producir una denegacion de servicio (panic) a traves de un paquete autoencapsulado que carece de proteccion IPsec."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-114344-38-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-240086-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-043.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-114344-38-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-240086-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-043.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T19:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open redirect vulnerability in cs.html in the Autonomy (formerly Verity) Ultraseek search engine allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de redirección abierta en cs.html en el motor de busqueda Autonomy (anteriormente Verity) Ultraseek que permite a atacantes remotos redirigir a los usuarios a páginas web de su elección y producir ataques de phising a través del parámetro \"url\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autonomy:ultraseek:_nil_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB6CE359-BDFF-4BA3-8D5C-C44BD522CE74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunbeltblog.blogspot.com/2009/01/constant-stream-of-ultraseek-redirects.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/202753",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ultraseek.com/forums/thread.jspa?messageID=9818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunbeltblog.blogspot.com/2009/01/constant-stream-of-ultraseek-redirects.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/202753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ultraseek.com/forums/thread.jspa?messageID=9818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T19:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The login module in Sun Java System Access Manager 6 2005Q1 (aka 6.3), 7 2005Q4 (aka 7.0), and 7.1 responds differently to a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames."
      }, {
        "lang" : "es",
        "value" : "El módulo de ingreso en Sun Java System Access Manager v6 2005Q1 (antes conocido como v6.3), v7 2005Q4 (antes conocido como v7.0), y v7.1. responde de manera diferente dependiendo de si la cuenta existe o no, lo que permite a atacantes remotos averiguar nombres de usuario válidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_linux:*:*:*:*:*",
            "matchCriteriaId" : "B9D7AA3C-6565-4291-A76F-3BE9311B77F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_sparc:*:*:*:*:*",
            "matchCriteriaId" : "8ED84EE5-2C53-4A8E-98B7-4F9181D4E192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_windows:*:*:*:*:*",
            "matchCriteriaId" : "FB62C071-74F8-4642-938A-E529CBB2396B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_x86:*:*:*:*:*",
            "matchCriteriaId" : "B0617E1B-FE70-442E-AEE6-BACC8515F005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_linux:*:*:*:*:*",
            "matchCriteriaId" : "95ADB790-EF2D-4613-9F69-F37401518511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF718ABC-42C7-4FE1-82A0-00F3506F1D42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_windows:*:*:*:*:*",
            "matchCriteriaId" : "11EEDFB5-CDB0-4A7F-A14B-FFF37FBFB927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_x86:*:*:*:*:*",
            "matchCriteriaId" : "D2BC5828-0EF1-4640-91BF-9CC1E5FC6243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_linux:*:*:*:*:*",
            "matchCriteriaId" : "9E64CD07-4AF7-49C4-A3C0-EE2BF9E067A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_sparc:*:*:*:*:*",
            "matchCriteriaId" : "F590A1DC-7E1B-44CF-83D2-3FEDA91765C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_windows:*:*:*:*:*",
            "matchCriteriaId" : "56368A15-6067-4041-B949-50B856B93D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_x86:*:*:*:*:*",
            "matchCriteriaId" : "9096D748-9527-4061-8106-526741831F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_linux:*:*:*:*:*",
            "matchCriteriaId" : "D8C9CC43-EFB5-4192-81F2-0373961A7078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F24915-078C-4E4B-B173-671F0ABF9656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_windows:*:*:*:*:*",
            "matchCriteriaId" : "48131043-49E3-495E-8868-38D3ACC0D402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_x86:*:*:*:*:*",
            "matchCriteriaId" : "AD06B92E-C23C-4648-A585-14FC54538FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_linux:*:*:*:*:*",
            "matchCriteriaId" : "479657F1-8950-4C6C-9CD2-5FE3DF235E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_sparc:*:*:*:*:*",
            "matchCriteriaId" : "CAABA44E-5FD1-4B71-A4DE-9DC671DD8223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_windows:*:*:*:*:*",
            "matchCriteriaId" : "1C311222-6DD5-4C31-BCB9-4ED895281831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_x86:*:*:*:*:*",
            "matchCriteriaId" : "4930E838-993A-4DA1-B504-4675EE20CF69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_linux:*:*:*:*:*",
            "matchCriteriaId" : "6F238642-873A-4A50-BF14-6B173A20A36D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_sparc:*:*:*:*:*",
            "matchCriteriaId" : "2A857F82-4146-48E9-8568-19393AC3856B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_windows:*:*:*:*:*",
            "matchCriteriaId" : "77DFF3D0-BBD2-4B06-9B4E-CA8FCA1BAC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_x86:*:*:*:*:*",
            "matchCriteriaId" : "2D28C8EF-7525-48A0-A13A-EA95479A3B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_linux:*:*:*:*:*",
            "matchCriteriaId" : "3DA96674-2050-4686-A592-F450655073E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_sparc:*:*:*:*:*",
            "matchCriteriaId" : "B56B9BD3-2708-46C3-850D-865599F88BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_windows:*:*:*:*:*",
            "matchCriteriaId" : "22C1CF79-9D5D-4AF6-96C3-F029522D3DD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_x86:*:*:*:*:*",
            "matchCriteriaId" : "207157F9-0AE4-45FB-A3DC-90C1F6E5376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_linux:*:*:*:*:*",
            "matchCriteriaId" : "5382933D-E32D-47F5-8892-65B94E06BD15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_sparc:*:*:*:*:*",
            "matchCriteriaId" : "B6391170-5831-4303-85E5-A51BB431E788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_windows:*:*:*:*:*",
            "matchCriteriaId" : "8FB6B9F1-EBE4-4820-98F3-E6F41A99B504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_x86:*:*:*:*:*",
            "matchCriteriaId" : "9E8B1333-125A-44F7-A6C3-4B04D3FC9A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_linux:*:*:*:*:*",
            "matchCriteriaId" : "644C3EA4-607C-42E7-805B-8F2EF6AF694E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_sparc:*:*:*:*:*",
            "matchCriteriaId" : "745D8651-B97C-48A9-AE4F-603A34516919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_windows:*:*:*:*:*",
            "matchCriteriaId" : "BBC9D038-3428-440F-8BD7-06B103019BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_x86:*:*:*:*:*",
            "matchCriteriaId" : "92BC8B61-3F58-43B3-9756-616376D4D2DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33688",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-119465-15-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-242026-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-119465-15-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-242026-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T19:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in FTPShell Server 4.3 allows user-assisted remote attackers to cause a denial of service (persistent daemon crash) and possibly execute arbitrary code via a long string in a licensing key (aka .key) file."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de pila basado en búfer en FTPShell Server v4.3 permite a atacantes remotos asistidos por un usuario producir una denegación de servicio (caída persistente de demonio) y la posibilidad de ejecutar código a su elección a través de una cadena larga en un fichero de clave de licencia (antes conocido como .key)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ftpshell:ftpshell_server:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723443E5-049F-49D4-A52C-D2A300D6EC3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33597",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T19:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file, related to the status bar icon's tooltip.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de pila basado en búfer en Merak Media Player v3.2 permite a atacantes remotos ejecutar codigo de su eleccion a traves de una cadena larga en un fichero de lista de reproduccion .m3u, relacionado con el icono de ayuda de la barra de estado. NOTA: Algunos de estos detalles han sido obtenidos mediante informacion de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:merak:media_player:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E82838-522C-4594-A514-E3D9F3D2DC8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33645",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-29T19:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in WFTPSRV.exe in WinFTP 2.3.0 allows remote authenticated users to execute arbitrary code via a long LIST argument beginning with an * (asterisk) character."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de pila basado en búfer en WFTPSRV.exe en WinFTP 2.3.0 permite a usuarios remotos autenticados ejecutar codigo a su eleccion a traves del argumento LIST largo iniciandolo con un caracter * (asterisco)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wftpserver:winftp_ftp_server:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9874136D-8345-49BD-AC8D-86E50DF4C023"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33454",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0034",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-01-30T19:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command."
      }, {
        "lang" : "es",
        "value" : "parse.c de sudo v1.6.9p17 hasta v1.6.9p19, no interpreta correctamente un grupo del sistema (también conocido como %group) en el fichero sudoers durante la decisión de autorización para un usuario que pertenezca a ese grupo. Esto permite a usuarios locales utilizar un fichero sudoers y obtener privilegios de root (administrador) a través de un comando sudo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gratisoft:sudo:1.6.9:p17:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0E731C-EDB7-45A2-87BB-2ED72E9A3D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gratisoft:sudo:1.6.9:p18:*:*:*:*:*:*",
            "matchCriteriaId" : "9FD0FEDA-E9A9-458C-8B45-0D1118433D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gratisoft:sudo:1.6.9:p19:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D9940B-77D2-49F0-A758-C0B2D2BA096C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC337BB7-9A45-4406-A783-851F279130EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000060.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/51736",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/33753",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/33840",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/33885",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/35766",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0021",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.gratisoft.us/bugzilla/show_bug.cgi?id=327",
        "source" : "secalert@redhat.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0267.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500546/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504849/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33517",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021688",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.sudo.ws/cgi-bin/cvsweb/sudo/parse.c.diff?r1=1.160.2.21&r2=1.160.2.22&f=h",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0009.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1865",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=468923",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-2954",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10856",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6462",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/51736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/33753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/33840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/33885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/35766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.gratisoft.us/bugzilla/show_bug.cgi?id=327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0267.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500546/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504849/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.sudo.ws/cgi-bin/cvsweb/sudo/parse.c.diff?r1=1.160.2.21&r2=1.160.2.22&f=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=468923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-2954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-30T19:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in HP Select Access 6.1 and 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Select Access de HP v6.1 y v6.2 que permite a atacantes remotos inyectar scripts web o código HTML de su elección a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:select_access:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4E2F7A-6EE0-4057-994D-002E627DA4DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:select_access:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A992571-8730-413F-9EBC-5EF07FCB5CAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=123324765514459&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33713",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=123324765514459&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-30T19:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 7 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a \"Clickjacking\" vulnerability."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 7 permite a los atacantes remotos engañar a los usuarios que visitan arbitrariamente una URL a través de una acción onclick que mueva un elemento manipulado a la posición actual del ratón, en relación a una vulnerabilidad \"Clickjacking\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-30T19:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in IBM AIX 5.2.0 through 6.1.2 allow local users to append data to arbitrary files, related to (1) rmsock and (2) rmsock64 not creating \"secure log files.\""
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en IBM AIX v5.2.0 hasta v6.1.2; permiten a usuarios locales incluir datos en ficheros arbitrarios. Está relacionado con (1) rmsock y (2) rmsock64 que no crean \"ficheros de log seguros.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD01F19-4B30-4147-AC48-7F5C64EE80CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104E5C14-6D87-494B-8D60-0443ADDCD31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B11497-5622-4759-906A-A93A3E815584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F9CD013-D904-45DF-AD43-493A22D5744B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "307B47F5-D903-4763-A353-2538AFD6C9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435340B0-AD02-4174-BC7F-6A7C222A7F6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD518B94-9CD7-4C45-8766-578CF427B4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362CFB2F-817A-4E55-A315-86B6243E3F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53544921-1C1A-4382-99D7-0F3011BA76DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/rmsock_advisory.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ40386",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ41510",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ41593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ41599",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ42785",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ42786",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ42787",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ42788",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/rmsock_advisory.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ40386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ41510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ41593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ41599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ42785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ42786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ42787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ42788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-30T19:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in post.php in SiteXS CMS 0.1.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the type parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en post.php en SiteXS CMS v0.1.1 y anteriores permite a atacantes remotos incluir y ejecutar ficheros de su elección mediante un .. (punto punto) en el parámetro type.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitexs_cms:sitexs_cms:*:pre-alpha:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.1",
            "matchCriteriaId" : "69AE8D93-D48A-4E74-8A1E-D895C73F2F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitexs_cms:sitexs_cms:0.1:pre-alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "D38D4A9B-9E4D-4C6B-8E9C-FF3E9B025EF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33457",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-30T19:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in index.php in Miltenovik Manojlo MemHT Portal 4.0.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and an image content type via a users editProfile action, then accessing this file via a direct request to the file in images/avatar/uploaded/."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de actualización de archivo en index.php en Miltenovik Manojlo MemHT Portal v4.0.1 y versiones anteriores permite a usuarios remotos autenticados ejecutar código de su elección subiendo un fichero con una extensión ejecutable y un tipo de contenido imagen a través de usuarios con una acción \"editProfile\", entonces accede a este fichero a través de una petición directa al fichero images/avatar/uploaded/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.1",
            "matchCriteriaId" : "752F46CE-C02E-46E0-8836-47057FA618A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:1.0:final:*:*:*:*:*:*",
            "matchCriteriaId" : "52701B65-E8C2-47B0-83B7-B283A019FBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:1.5:full:*:*:*:*:*:*",
            "matchCriteriaId" : "281AF81D-989F-4C69-9E41-F8B4C66E3584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:1.5:update:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4DC033-7838-4FF5-914C-6691EB0D32F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:2.0:full:*:*:*:*:*:*",
            "matchCriteriaId" : "249573E7-7C14-4CAF-AE2B-A09392E143D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:2.0:update:*:*:*:*:*:*",
            "matchCriteriaId" : "093E3EE8-8524-4709-BC67-EFBFFD8D2EA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:2.5:full:*:*:*:*:*:*",
            "matchCriteriaId" : "54141E05-C819-4AF7-A31A-01C78AE24CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:2.5:update:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA8EE80-FBF3-48E3-B08A-D4DA95FFB866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:2.9:full:*:*:*:*:*:*",
            "matchCriteriaId" : "214C8095-C406-464E-8CA8-7929BF04CE15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:2.9:update:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE3B714-5407-4B46-94AD-A05B4F86C51E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.0:full:*:*:*:*:*:*",
            "matchCriteriaId" : "263FB9C1-20F0-48EA-B6C3-2D9237114609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.0:update:*:*:*:*:*:*",
            "matchCriteriaId" : "94E57AFB-F4CE-4107-92FC-4860B90479B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68C9DAD4-3EC1-4EAF-9615-12D74D8B2249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.1:full:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF2D662-CDDA-40E2-A7B9-C2492279263E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.1:update:*:*:*:*:*:*",
            "matchCriteriaId" : "74CFAFEB-90A3-4091-A35A-3BA9E8A04AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.2:update:*:*:*:*:*:*",
            "matchCriteriaId" : "99B71D89-51E2-43F2-94C0-A7701A279C2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.3:full:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6816A8-7785-4727-859A-60A913028D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.3:update:*:*:*:*:*:*",
            "matchCriteriaId" : "74679D05-32CF-45B3-8ACC-284B13D4A894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC849C-194B-4F34-BAC8-448E0BF9AB1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.4:full:*:*:*:*:*:*",
            "matchCriteriaId" : "DE18ED97-FF4B-4815-B530-7070C3051A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.4:update:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB926F8-8C1D-40B2-919A-BB6A5315FD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4563E7A1-66B4-425B-8AEC-3F7C222BCA50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.4.5:full:*:*:*:*:*:*",
            "matchCriteriaId" : "6C148B4A-6160-4922-BE7A-622AEA5F9A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.4.5:update:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB51BE2-50DC-45E5-A745-7D077C0D0674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.5.0:full:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7FF087-80B1-467B-B85D-F89ED702A504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB08C1CB-F9AB-456D-981D-23F1EC87030C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D84840-5F56-4608-8CFF-295E8D24D67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE033096-92CA-4116-9CFE-DF76E77CC8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD8EF5F-79DE-4050-A04A-DE113E54916F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD347869-E32D-45D1-997A-724FDD72A046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A6B772F-CE04-44D4-876A-7DC0C7C23294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F80D85-2857-4653-97B7-0DA5127364AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memht:memht_portal:3.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D72D56EB-39D7-42C5-B838-0CC99D9FD016"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33626",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33424",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-30T19:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the ElearningForce Flash Magazine Deluxe (com_flashmagazinedeluxe) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mag_id parameter in a magazine action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente componente ElearningForce Flash Magazine Deluxe (com_flashmagazinedeluxe) de Joomla!. Permite a los usuarios remotos ejecutar comandos SQL de su elección a través del parámetro \"mag_id\" en una acción de tipo \"magazine action \" en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elearningforce:flash_magazine_deluxe:_nil_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4004BC5E-4138-42F9-A40C-437B7A98D2BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33646",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33455",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-01-30T21:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome 1.0.154.43 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a \"Clickjacking\" vulnerability.  NOTE: a third party disputes the relevance of this issue, stating that \"every sufficiently featured browser is and likely will remain susceptible to the behavior known as clickjacking,\" and adding that the exploit code \"is not a valid demonstration of the issue."
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA **  Google Chrome v1.0.154.43 permite a atacantes remotos engañar a un usuario para que visite una URL de su elección mediante una acción \"onclick\" que mueve un elemento modificado a la posición actual del ratón, relacionado con la vulnerabilidad \"Clickjacking\". NOTA: una tercera parte cuestiona la relevancia de este asunto, exponiendo que \"cualquier navegador suficientemente expuesto es y probablemente continuará siendo susceptible del comportamiento conocido como clickjacking\", y añade que el código que explota esta vulnerabilidad no es una demostración válida de la misma."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.secniche.org/gcr_clkj/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500499/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500533/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.secniche.org/gcr_clkj/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500499/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500533/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-02T19:00:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the beamospetition (com_beamospetition) 1.0.12 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mpid parameter in a sign action to index.php, a different vector than CVE-2008-3132."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente beamospetition (com_beamospetition) v1.0.12 para Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"mpid\" en una acción \"sign\" de index.php, un vector diferente a CVE-2008-3132."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_beamospetition:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2D98D3-5A32-4C1E-9329-EF36A6E3AFAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500250/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33391",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500250/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-02T19:00:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in the beamospetition (com_beamospetition) 1.0.12 component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the pet parameter in a sign action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el archivo index.php en el componente beamospetition (com_beamospetition) 1.0.12 para Joomla! que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro pet en una acción sign."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_beamospetition:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2D98D3-5A32-4C1E-9329-EF36A6E3AFAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500250/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33391",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500250/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-02T19:00:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Prince Clan Chess Club (com_pcchess) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the game_id parameter in a showgame action to index.php, a different vector than CVE-2008-0761."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Inyección SQL en Prince Clan Chess Club (com_pcchess), componente para Joomla!, permite a atacantes remotos ejecutar código de su elección a través del parámetro \"game_id\" en una acción showgame sobre index.php, es un vector diferente a CVE-2008-0761."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_pcchess:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F200A0D1-9020-4817-8A90-29D74AF70CF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33394",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-02T19:00:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Sigsiu Online Business Index 2 (SOBI2, com_sobi2) RC 2.8.2 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the bid parameter in a showbiz action to index.php, a different vector than CVE-2008-0607.  NOTE: CVE disputes this issue, since neither \"showbiz\" nor \"bid\" appears in the source code for SOBI2"
      }, {
        "lang" : "es",
        "value" : "** CUESTIONADA ** Una vulnerabilidad de inyección de SQL en el componente de Joomla! y Mambo Sigsiu Online Business Index 2 (SOBI2, com_sobi2) RC 2.8.2 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de parámetro bid en una acción showbiz a index.php, un vector diferente que CVE-2008-0607. NOTA: CVE discute de este problema, ya que ni \"showbiz\" ni \"bid\" aparece en el código fuente de SOBI2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sigsiu.net:sobi2:2.8.2:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5745C6-DD84-413D-A4A2-72F298FE21A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2E211C-AE77-44E1-9BC3-6CE796B8751E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.attrition.org/pipermail/vim/2009-January/002136.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33378",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-January/002136.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-02T19:00:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart (com_prod) 5.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a products action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente BazaarBuilder Ecommerce Shopping Cart (com_prod) v5.0 del gestor de contenidos Joomla!. Permite a los usuarios remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\" en una acción de tipo \"products action\" (acción de producto) en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bazaarbuilder:ecommerce_shopping_cart:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B78F87EF-A586-4902-8BDC-F5EDA87D7F74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33612",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33380",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-02T19:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Internationalization (i18n) Translation 5.x before 5.x-2.5, a module for Drupal, allows remote attackers with \"translate node\" permissions to bypass intended access restrictions and read unpublished nodes via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Internationalization (i18n) Translation 5.x versiones anteriores a 5.x-2.5, un módulo de Drupal, permite a atacantes remotos con permisos \"traducir nodo\" evitar restricciones de acceso y leer nodos no públicos a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:internationalization:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.x-2.3",
            "matchCriteriaId" : "531C796C-EC39-4619-8E5A-2F08B85772B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:internationalization:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D842B791-E9F1-4F9E-81B2-D3A370E8BEDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/358958",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33549",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/358958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-02T19:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to delete arbitrary blog posts via a direct request."
      }, {
        "lang" : "es",
        "value" : "El fichero delete.php de Max.Blog 1.0.6 no restringe apropiadamente el acceso, lo cual permite a atacantes remotos borrar entradas arbitrarias del blog a través de una petición directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mzbservices:max.blog:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC29ECF9-9353-49F6-A1F5-6255E8ECEA20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33590",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mzbservices.com/show_post.php?id=72",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mzbservices.com/show_post.php?id=72",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-02T19:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in autor.php in OwnRS CMS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL in el archivo autor.php en OwnRS CMS 1.2 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adam_tomecek:ownrs:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0DFC5EE-20AE-47CC-959B-48576FC63782"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/7849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0385",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-02T19:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in the fourxm_read_header function in libavformat/4xm.c in FFmpeg before revision 16846 allows remote attackers to execute arbitrary code via a malformed 4X movie file with a large current_track value, which triggers a NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "Error de presencia de signo en entero en la función fourxm_read_header en libavformat/4xm.c en FFmpeg versiones anteriores a revision 16846 permite a atacantes remotos ejecutar código de su elección a través de un fichero de vídeo 4X malformado con un valor largo current_track, lo cual dispara un puntero de referencia NULL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.6.3",
            "matchCriteriaId" : "B10E38AD-49F8-4667-9104-A25CC0E9BA8C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E8A89-7A16-411F-9D31-676313BB7244"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "823BF8BE-2309-4F67-A5E2-EAD98F723468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "743CBBB1-C140-4FEF-B40E-FAE4511B1140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ffmpeg.org/?p=ffmpeg%3Ba=commitdiff%3Bh=72e715fb798f2cb79fd24a6d2eaeafb7c6eeda17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51643",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/33711",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34296",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34385",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34712",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34845",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34905",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-33.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://svn.mplayerhq.hu/ffmpeg/trunk/libavformat/4xm.c?r1=16838&r2=16846&pathrev=16846",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://svn.mplayerhq.hu/ffmpeg?view=rev&revision=16846",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1781",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1782",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:297",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500514/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33502",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2009-004.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-734-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0277",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48330",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00210.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00215.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.ffmpeg.org/?p=ffmpeg%3Ba=commitdiff%3Bh=72e715fb798f2cb79fd24a6d2eaeafb7c6eeda17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/51643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/33711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-33.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://svn.mplayerhq.hu/ffmpeg/trunk/libavformat/4xm.c?r1=16838&r2=16846&pathrev=16846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://svn.mplayerhq.hu/ffmpeg?view=rev&revision=16846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500514/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2009-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-734-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00210.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00215.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0386",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-02T19:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample (ctts) atom data in a malformed QuickTime media .mov file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en la función qtdemux_parse_samples de gst/qtdemux/qtdemux.c de GStreamer Good Plug-ins (conocido como gst-plugins-good) v0.10.9 hasta v0.10.11 podría permitir a atacantes remotos ejecutar código de su elección mediante un dato básico Composition Time To Sample (ctts) manipulado, en un fichero .mov de QuickTime deformado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer:good_plug-ins:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "762FB2B0-CC29-4422-A675-CC2555A2B314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer:good_plug-ins:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C8ECF4-F1BE-44D2-BB20-2EE557DEDF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer:good_plug-ins:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69917C72-DD63-48D8-A268-6452F50484DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33650",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trapkit.de/advisories/TKADV2009-003.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/29/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0271.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500317/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33405",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-736-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=481267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trapkit.de/advisories/TKADV2009-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/29/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0271.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500317/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-736-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=481267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-02T19:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Array index error in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted Sync Sample (aka stss) atom data in a malformed QuickTime media .mov file, related to \"mark keyframes.\""
      }, {
        "lang" : "es",
        "value" : "Un error de indice en vector en la funcion qtdemux_parse_samples de gst/qtdemux/qtdemux.c en GStreamer Good Plug-ins (también conocido como gst-plugins-good) en sus versiones 0.10.9 a 0.10.11 permite a atacantes remotos provocar una denegación de servicio (que genera un fallo en la aplicación) y posiblemente ejecutar código arbitrario a través de los datos modificados de una Sync Sample (también conocido como STSS) en un fichero .mov de vídeo/audio de Quicktime debidamente modificado en relación  con los \"mark keyframes\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer:good_plug-ins:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "762FB2B0-CC29-4422-A675-CC2555A2B314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer:good_plug-ins:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C8ECF4-F1BE-44D2-BB20-2EE557DEDF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer:good_plug-ins:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69917C72-DD63-48D8-A268-6452F50484DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer:plug-ins:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541159E6-630D-4A63-8FC3-A10816B1B4C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33650",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trapkit.de/advisories/TKADV2009-003.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/29/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0271.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500317/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-736-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=481267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trapkit.de/advisories/TKADV2009-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/29/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0271.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500317/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-736-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=481267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0389",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-02T22:00:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple insecure method vulnerabilities in the Web On Windows (WOW) ActiveX control in WOW ActiveX 2 allow remote attackers to (1) create and overwrite arbitrary files via the WriteIniFileString method, (2) execute arbitrary programs via the ShellExecute method, (3) read from the registry via unspecified vectors, and (4) write to the registry via unspecified vectors.  NOTE: vectors 1 and 2 can be used together to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de método inseguro en el control ActiveX Web On Windows (WOW) en WOW ActiveX 2 permiten a atacantes remotos (1) crear y sobreescribir archivos arbitrarios a través del método WriteIniFileString, (2) ejecutar programas a través del método ShellExecute, (3) leer el registro a través de vectores no especificados, y (4) escribir en el registro a través de vectores no especificados. NOTA: los vectores de 1 y 2 se pueden utilizar juntos para ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eztools-software:web_on_windows_activex:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E01EAC-8BD1-4F83-8811-4A5182851171"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33515",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-02T22:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allows remote attackers to insert e-mail forwarding rules, and modify unspecified other configuration settings, as arbitrary users via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Novell GroupWise WebAccess 6.5X, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, y 8.0 permite a atacantes remotos insertar reglas de correo y modificar otros ajustes de configuración de usuarios aleatorios a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD18143-9962-4C0D-AD3D-66C0CF3FB5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE640E9A-762B-4AF4-8677-818CBF16EA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DB474F-D101-4210-9DC1-7230E9CAE80D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.02x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D861C5BE-825C-4EED-994A-9DE38AB6EA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D75C8A8-8162-4160-9295-2DA4D710AD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*",
            "matchCriteriaId" : "84293DF8-D11D-4CB4-99EC-EB60AF027B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E2ABC-20AE-437A-83B0-2E0753787FB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/support/search.do?usemicrosite=true&searchString=7002319",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-21",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500569/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/support/search.do?usemicrosite=true&searchString=7002319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500569/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-02T22:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allow remote attackers to inject arbitrary web script or HTML via the (1) User.id and (2) Library.queryText parameters to gw/webacc, and other vectors involving (3) HTML e-mail and (4) HTML attachments."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en WebAccess de GroupWise de Novell v6.5x, v7.0, v7.01, v7.02x, v7.03, v7.03HP1a y v8.0. Permite a atacantes remotos inyectar web script o HTML de su elección a través de los parámetros \"User.id\" y \"Library.queryText\" de gw/webacc y a través de otros vectores de ataque relacionados con el e-mail HTML y adjuntos HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD18143-9962-4C0D-AD3D-66C0CF3FB5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE640E9A-762B-4AF4-8677-818CBF16EA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DB474F-D101-4210-9DC1-7230E9CAE80D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.02x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D861C5BE-825C-4EED-994A-9DE38AB6EA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D75C8A8-8162-4160-9295-2DA4D710AD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*",
            "matchCriteriaId" : "84293DF8-D11D-4CB4-99EC-EB60AF027B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E2ABC-20AE-437A-83B0-2E0753787FB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/support/search.do?usemicrosite=true&searchString=7002320",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/search.do?usemicrosite=true&searchString=7002321",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-22",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500572/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500575/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/support/search.do?usemicrosite=true&searchString=7002320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/search.do?usemicrosite=true&searchString=7002321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500572/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500575/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-02T22:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in Enomaly Elastic Computing Platform (ECP), formerly Enomalism, before 2.1.1 allows local users to send signals to arbitrary processes by populating the /tmp/enomalism2.pid file with command-line arguments for the kill program."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de argumento en Enomaly Elastic Computing Platform (ECP), anteriormente Enomalism, en versiones anteriores a la 2.1.1 permite a los usuarios locales a enviar señales arbitrarias a los procesos en ejecución rellenando el fichero /tmp/enomalism2.pid con argumentos de línea de comandos para el kill."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enomaly:elastic_computing_platform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "43350655-1196-4654-B78E-56C571571F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enomaly:elastic_computing_platform:2.1:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "39B772C3-E0CC-4DE4-B028-445B4F29F36C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500573/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500573/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-02T22:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.0.1 on z/OS allows attackers to read arbitrary files via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad sin especificar en el IBM WebSphere Application Server (WAS) 6.0.1 en z/OS permite a los atacantes leer ficheros arbitrarios a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE27E903-6D65-4D29-9583-43FB4CB473B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:zos:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D60057-94B9-40DB-927D-953703552B2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33729",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK72036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK79232",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK72036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK79232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T01:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the page parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en sysconf.cgi en los drivers del módem Motorola Wimax CPEi300 permite a los usuarios remotos autenticados leer archivos arbitrarios a través de un .. (punto punto) en el parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:motorola:cpei300:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0148A0D3-68D5-4476-8775-C28E8CD3D816"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500545/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33519",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500545/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0393",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T01:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated users to inject arbitrary web script or HTML via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en sysconf.cgi en los driver del módem Motorola CPEi300 Wimax permite a los usuarios remotos autenticados inyectar HTML o scripts web arbitrarios a través del parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:motorola:cpei300:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0148A0D3-68D5-4476-8775-C28E8CD3D816"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500545/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33519",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500545/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T01:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in Pre Lecture Exercises (PLEs) CMS 1.0 beta 4.2 allows remote attackers to execute arbitrary SQL commands via the school parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en login.php en Pre Lecture Exercises (PLEs) CMS 1.0 beta 4.2 permite a atacantes remotos ejecutar secuencias SQL a través del parámetro school."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ple_cms:ple_cms:1.0:beta_4.2:*:*:*:*:*:*",
            "matchCriteriaId" : "83E9F828-8525-48D5-A937-D0E0F0F4D52C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33524",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T01:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the login feature in NetArt Media Car Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el \"login\" (autenticación) del portal de automóviles v1.0 de netArtMedia, que permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de los parámetros \"username\" (nombre de usuario) y \"password\" (contraseña)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netartmedia:car_portal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF8DBCB-1AD8-41DD-93C3-71B2A11E04AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33521",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T01:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, and K530i phones allow remote attackers to cause a denial of service (device reboot or hang-up) via a malformed WAP Push packet to (1) SMS or (2) UDP port 2948."
      }, {
        "lang" : "es",
        "value" : "Los teléfonos Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, y K530i permite a los atacantes remotos causar una denegación de servicios (el dispositivo se reinicia o cuelgue) a través de paquetes mal formados WAP Push para (1) SMS o (2) puerto UDP 2948."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony_ericsson:k530i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BC04A9-3C41-46F3-AEE6-7D6B044DD39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony_ericsson:k610i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21053C01-D59F-4828-959E-8F361C8A93F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony_ericsson:k618i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F964C80-4E77-4CFA-AD90-B9A5DB03C10E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony_ericsson:k660i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A90D412-AE46-4309-8C4C-AECB0CC006B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony_ericsson:k810i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4AFD064-4E66-422E-AB68-EE0156C48472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony_ericsson:w660i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17B4356D-9FD2-4F13-8D9E-6A23889F383F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony_ericsson:w880i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DABE12-6BC4-444B-A9DE-D0EBE88F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony_ericsson:w910i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "095FA09A-1FC5-4583-94B9-C3FD558889C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony_ericsson:z610i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C32A769A-6737-4CFC-BE1D-2AE368FF3D53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33616",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mseclab.com/index.php?page_id=123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500382/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mseclab.com/index.php?page_id=123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500382/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T11:30:00.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11, and GStreamer Plug-ins (aka gstreamer-plugins) 0.8.5, might allow remote attackers to execute arbitrary code via crafted Time-to-sample (aka stts) atom data in a malformed QuickTime media .mov file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de búfer basado en montículo en la función qtdemux_parse_samples de gst/qtdemux/qtdemux.c de los \"Plug-ins\" (complementos) Good de GStreamer (también conocido como gst-plugins-good) en las versiones desde v0.10.9 a v0.10.11 y en los \"Plug-ins\" (complementos) (también conocido como gstreamer-plugins)  de GStremaer v0.8.5. Permite a atacantes remotos la ejecución de código de su elección a través de la modificación del \"atom data\" (unidad básica de información en QuickTime) Time-to-sample (también conocido como stts) en un archivo mal formado de QuickTime media de extensión \".mov\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer:good_plug-ins:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "762FB2B0-CC29-4422-A675-CC2555A2B314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer:good_plug-ins:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C8ECF4-F1BE-44D2-BB20-2EE557DEDF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer:good_plug-ins:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69917C72-DD63-48D8-A268-6452F50484DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer:plug-ins:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541159E6-630D-4A63-8FC3-A10816B1B4C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33650",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-052.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trapkit.de/advisories/TKADV2009-003.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/29/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0270.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0271.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500317/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33405",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-736-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=481267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-052.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trapkit.de/advisories/TKADV2009-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/29/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0270.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0271.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500317/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-736-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=481267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0398",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T11:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Array index error in the gst_qtp_trak_handler function in gst/qtdemux/qtdemux.c in GStreamer Plug-ins (aka gstreamer-plugins) 0.6.0 allows remote attackers to have an unknown impact via a crafted QuickTime media file."
      }, {
        "lang" : "es",
        "value" : "Error de indice de selección en la función gst_qtp_trak_handler en gst/qtdemux/qtdemux.c en GStreamer Plug-ins (conocido como gstreamer-plugins) v0.6.0 permite a atacantes remotos provocar un impacto desconocido mediante un fichero multimedia de QuickTime manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer:plug-ins:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2CD7A95-2365-43AF-B6CE-FC315BF32899"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/29/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0269.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/29/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0269.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0183",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-02-03T19:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento del búfer basado en pila en Remote Control Server de Free Download Manager (FDM) v2.5 Build 758 y v3.0 Build 844; permite a atacantes remotos ejecutar código de su elección a través de una cabecera larga Authorization en una petición HTTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_download_manager:free_download_manager:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7336EE4-8DA5-4BE6-8190-75D937D15585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_download_manager:free_download_manager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F378BC9-CFC7-4A01-AAF2-3A37EC62ED9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51745",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/33524",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-3/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500604/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33554",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0302",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7986",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://osvdb.org/51745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500604/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0184",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-02-03T19:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent file, (2) a long tracker URL in a torrent file, or (3) a long comment in a torrent file."
      }, {
        "lang" : "es",
        "value" : "Múltiple desbordamiento de búfer en la implementación del torrent parsing en Free Download Manager (FDM) v2.5 Build 758 y v3.0 Build 844 permite a atacantes remotos ejecutar código de su elección  a través de (1) un nombre de fichero largo sin un fichero torrent, (2) una dirección de tracker URL larga en un fichero torrent, o (3) un comentario largo en un fichero torrent."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_download_manager:free_download_manager:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7336EE4-8DA5-4BE6-8190-75D937D15585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_download_manager:free_download_manager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F378BC9-CFC7-4A01-AAF2-3A37EC62ED9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33524",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-5/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500605/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33555",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0302",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/33524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500605/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T19:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in WebAccess in Novell GroupWise 6.5, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 might allow remote attackers to obtain sensitive information via a crafted URL, related to conversion of POST requests to GET requests."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en WebAccess en Novell GroupWise 6.5, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, y 8.0 debería permitir a los atacantes remotos obtener información confidencial a través de una URL manipulada, en relación a la conversión de la petición POST a GET."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD18143-9962-4C0D-AD3D-66C0CF3FB5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE640E9A-762B-4AF4-8677-818CBF16EA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DB474F-D101-4210-9DC1-7230E9CAE80D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.02x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D861C5BE-825C-4EED-994A-9DE38AB6EA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D75C8A8-8162-4160-9295-2DA4D710AD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*",
            "matchCriteriaId" : "84293DF8-D11D-4CB4-99EC-EB60AF027B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E2ABC-20AE-437A-83B0-2E0753787FB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33744",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7002322",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7002322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T19:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-domain vulnerability in the V8 JavaScript engine in Google Chrome before 1.0.154.46 allows remote attackers to bypass the Same Origin Policy via a crafted script that accesses another frame and reads its full URL and possibly other sensitive information, or modifies the URL of this frame."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de dominio cruzado en la V8 del motor JavaScript en Google Chrome anterior a 1.0.154.46, permite a atacantes remotos evitar la Política del Mismo Origen (Same Origin Policy) a través de una secuencia de comandos que accede a otro marco (frame) y lee su URL completa y probablemente otra información sensible, o modifica la URL de ese marco (frame)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.154.43",
            "matchCriteriaId" : "F3D8C988-6C80-4627-BE11-72304CDE0AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://codereview.chromium.org/18531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/01/stable-beta-update-yahoo-mail-and.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33754",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://src.chromium.org/viewvc/chrome?view=rev&revision=8524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://codereview.chromium.org/18531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/01/stable-beta-update-yahoo-mail-and.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://src.chromium.org/viewvc/chrome?view=rev&revision=8524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T19:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.php.  NOTE: this is only a vulnerability when the administrator does not properly follow installation directions."
      }, {
        "lang" : "es",
        "value" : "Chipmunk Blogger Script permite a atacantes remotos obtener privilegios de administrador a través de una petición directa a admin/reguser.php. NOTA: esto es sólo una vulnerabilidad cuando el administrador no sigue las directivas de instalación adecuadamente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        }, {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chipmunk_scripts:chipmunk_blogger:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C6D65E-3C20-4CBD-B78D-B35687505763"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/7894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T19:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL commands via the category_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyeccción SQL en blog.php en SocialEngine v3.06 trial, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"category_id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:socialengine:socialengine:3.06:*:trial:*:*:*:*:*",
            "matchCriteriaId" : "D3BBFA9E-9D22-43A3-92F4-6EA0AC4DE36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33701",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33495",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T19:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en browsecats.php de E-Php CMS; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ephpscripts:e-php_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675A49D6-6B77-455F-88C7-2A86032CBD3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0901-exploits/ephpcmscid-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/31923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33470",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0901-exploits/ephpcmscid-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/31923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T19:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in client/new_account.php in Domain Technologie Control (DTC) before 0.29.16 allows remote attackers to execute arbitrary SQL commands via the (1) familyname, (2) christname, (3) company_name, (4) is_company, (5) email, (6) phone, (7) fax, (8) addr1, (9) addr2, (10) addr3, (11) zipcode, (12) city, (13) state, (14) country, and (15) vat_num parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el archivo client/new_account.php en Domain Technologie Control (DTC) anteriores a v0.29.16 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de los parámetros (1) familyname, (2) christname, (3) company_name, (4) is_company, (5) email, (6) phone, (7) fax, (8) addr1, (9) addr2, (10) addr3, (11) zipcode, (12) city, (13) state, (14) country, y (15) vat_num."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gplhost:domain_technologie_control:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.29.8",
            "matchCriteriaId" : "DFB07760-4780-40D5-94F8-A7E323AC05B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gplhost:domain_technologie_control:0.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48453D15-9383-453A-80DE-CBA330DF43EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gplhost:domain_technologie_control:0.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECDD453-4477-4567-85EC-9FBB777577C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gplhost:domain_technologie_control:0.26.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F470F49-27DE-49D8-95B6-0BF562A5AFC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gplhost:domain_technologie_control:0.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9623CC23-64B9-408E-9BFD-E5A6A2498D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gplhost:domain_technologie_control:0.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E38991-255F-4590-9D1B-EDC9965D4745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gplhost:domain_technologie_control:0.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BAB9EE-D86A-4AC7-85D0-711B755F63DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gplhost:domain_technologie_control:0.28.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3722E5B8-F002-4E81-A7A1-370D53EBFDC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gplhost:domain_technologie_control:0.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A5B9D8-5268-4C34-943E-AEA918855EDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freshmeat.net/projects/dtc/?branch_id=22759&release_id=292973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commitdiff%3Bh=056e1d1849ff3aa183a410e2aab1c1c3e969247d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33698",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freshmeat.net/projects/dtc/?branch_id=22759&release_id=292973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commitdiff%3Bh=056e1d1849ff3aa183a410e2aab1c1c3e969247d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/51631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T19:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/authenticate.php in Chipmunk Blogger Script allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/authenticate.php de Chipmunk Blogger Script; permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetro (1)username -nombre de usuario- y (2) password -contraseña-."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chipmunk_scripts:chipmunk_blogger:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C6D65E-3C20-4CBD-B78D-B35687505763"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2009/0267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T19:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Bioinformatics htmLawed 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via invalid Cascading Style Sheets (CSS) expressions in the style attribute, which is processed by Internet Explorer 7."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Bioinformatics htmLawed v1.1.3 y v1.1.4, permite a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través de expresiones incorrectas en el atributo \"style\" en hojas de estilo en cascada (CSS), como ha sido procesado por el Internet Explorer 7."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bioinformatics:htmlawed:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.3",
            "matchCriteriaId" : "F8345A3E-5371-49B8-A3B1-24BAF4F6533A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bioinformatics:htmlawed:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4355C5-3B19-4D13-9BF6-CE518AE3B0FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bioinformatics:htmlawed:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC72F66-5FFB-4A3E-B9F7-9F532D6AEBC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bioinformatics:htmlawed:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB256C-001B-447E-9645-95152210209C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bioinformatics:htmlawed:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9603EFF-1817-4D94-8E7D-D0FEA53DC331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bioinformatics:htmlawed:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB0A491-5A67-4631-8DFB-77B5DA0F2D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bioinformatics:htmlawed:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7CADAB-1F7D-46EE-BB7E-4B7C6356A8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bioinformatics:htmlawed:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83C0099-9CC6-4877-82B9-028277560A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bioinformatics:htmlawed:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8414F133-251F-4782-9FFC-0E034D86D140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bioinformatics:htmlawed:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5350C55C-17F0-4CC2-9928-01A7C9F55DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bioinformatics:htmlawed:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E68938-9392-4CD0-AC81-310E0F6DE02C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bioinformatics:htmlawed:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6D86A1-0371-49B8-BACC-A1932104F82C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bioinformatics:htmlawed:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1A7EC86-7120-4865-BB3C-C7F6ED743B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bioinformatics:htmlawed:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF5441EA-9AF1-4C98-A06D-A16B1E0C3F0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freshmeat.net/projects/htmlawed/?branch_id=74760&release_id=293026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freshmeat.net/projects/htmlawed/?branch_id=74760&release_id=293090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33655",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bioinformatics.org/phplabware/forum/viewtopic.php?id=85",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bioinformatics.org/phplabware/internal_utilities/htmLawed/htmLawed_README.htm#s4.3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freshmeat.net/projects/htmlawed/?branch_id=74760&release_id=293026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://freshmeat.net/projects/htmlawed/?branch_id=74760&release_id=293090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/51650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bioinformatics.org/phplabware/forum/viewtopic.php?id=85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bioinformatics.org/phplabware/internal_utilities/htmLawed/htmLawed_README.htm#s4.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T19:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in articles.php in smartSite CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the var parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en articles.php de smartSite CMS v1.0; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro var."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartsitecms:smartsitecms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDE7DB3-099C-4940-8A46-F15FBC171624"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33497",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T19:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Community CMS v0.4 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:community_cms:community_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4",
            "matchCriteriaId" : "22100159-038A-4778-97A6-46A721B800D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:community_cms:community_cms:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779F3959-D36D-4A2E-8946-0E2C41028ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:community_cms:community_cms:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF82DC4-9DDB-4BBC-BDFB-02CC66137428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:community_cms:community_cms:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01821B1-2063-4D30-B455-DA5F04A5A6FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:community_cms:community_cms:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CB7DD47-13B0-417A-898F-0E7337FCCF32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33484",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T19:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/login.php in PHP-CMS Project 1 allows remote attackers to execute arbitrary SQL commands via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/login.php de PHP-CMS Project 1; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro username (nombre de usuario)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:humayun_shabbir:php-cms_project:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C13D08-6FC9-41E9-84A4-C1694211C4C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33473",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T19:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site request forgery (CSRF) en osCommerce versión 2.2 RC 2a, permite a los atacantes remotos secuestrar la autenticación de los administradores."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:2.2:rc_2a:*:*:*:*:*:*",
            "matchCriteriaId" : "FF757944-C09B-4B03-9453-72ACB917E124"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://holisticinfosec.org/content/view/97/45/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://holisticinfosec.org/content/view/97/45/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/51605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T19:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in offline_auth.php in Max.Blog 1.0.6 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en offline_auth.php de Max.Blog v1.0.6 y anteriores, cuando está deshabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro username (nombre de usuario)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mzbservices:max.blog:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC29ECF9-9353-49F6-A1F5-6255E8ECEA20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33658",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500470/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33493",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500470/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T19:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Error Off-by-one en el demonio SMTP en GroupWise Internet Agent (GWIA) en Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, y 8.0 que permite a los atacantes remotos ejecutar arbitrariamente código a través de una dirección larga de e-mail en un comando malformado RCPT, conduciendo a un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD18143-9962-4C0D-AD3D-66C0CF3FB5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE640E9A-762B-4AF4-8677-818CBF16EA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DB474F-D101-4210-9DC1-7230E9CAE80D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.02x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D861C5BE-825C-4EED-994A-9DE38AB6EA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D75C8A8-8162-4160-9295-2DA4D710AD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*",
            "matchCriteriaId" : "84293DF8-D11D-4CB4-99EC-EB60AF027B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E2ABC-20AE-437A-83B0-2E0753787FB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.novell.com/Download?buildid=GjZRRdqCFW0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/33744",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7002502",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500609/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-010/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://download.novell.com/Download?buildid=GjZRRdqCFW0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/33744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7002502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500609/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T19:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome before 1.0.154.46 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls and other web script."
      }, {
        "lang" : "es",
        "value" : "Google Chrome anterior a v1.0.154.46 no restringe adecuadamente el acceso de las páginas Web a las cabeceras de respuesta HTTP (1) Set-Cookie y (2) Set-Cookie2. Esto permite a atacantes remotos obtener información sensible de la cookies a través de llamadas XMLHttpRequest y otras secuencias de comandos web."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.154.43",
            "matchCriteriaId" : "F3D8C988-6C80-4627-BE11-72304CDE0AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://codereview.chromium.org/11264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://codereview.chromium.org/18533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://src.chromium.org/viewvc/chrome?view=rev&revision=8529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://codereview.chromium.org/11264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://codereview.chromium.org/18533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://src.chromium.org/viewvc/chrome?view=rev&revision=8529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T20:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ProcessLogin function in class.auth.php in Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition allows remote attackers to bypass authentication and obtain administrative access by reusing the RememberToken cookie after a failed admin login attempt."
      }, {
        "lang" : "es",
        "value" : "La función ProcessLogin en el archivo class.auth.php en Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition que permite a los atacantes remotos evitar la autenticación y obtener acceso administrativo reutilizando la cookie RememberToken depués de un fallo en el intento del login admin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interspire:shopping_cart:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7378C7C8-F612-4CDD-8E27-99A525FAA3AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/499967/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499967/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T23:30:00.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in RoundCube Webmail (roundcubemail) 0.2 stable allows remote attackers to inject arbitrary web script or HTML via the background attribute embedded in an HTML e-mail message."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en RoundCube Webmail (roundcubemail) v0.2 stable, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través de un atributo oculto incrustado en un correo electrónico HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83FF6973-9BAC-4DF2-BACE-42F0D9340A27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33622",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trac.roundcube.net/changeset/2245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00082.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trac.roundcube.net/changeset/2245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T23:30:01.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Tor before 0.2.0.33 has unspecified impact and remote attack vectors that trigger heap corruption."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Tor anterior a v0.2.0.33 tiene un impacto y vectores de ataque desconocidos que lanzan una corrupción de montículo (heap)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30E2B05-BD01-4F0B-9EDF-7701B6A14848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:*:alpha:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.0.32",
            "matchCriteriaId" : "821649FD-593C-47B8-874E-C3F8F6BC6E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4490AC9B-E8D8-4C97-866B-AB76AB2536F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2A2B60-8D31-4B59-8407-9CE62709906A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE02B1D-AA25-4364-8E54-583A0304FA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3AB095-3F57-4922-BC12-0842FA158555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811FD436-8BD2-463A-8072-A915FFCA33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F107CD-7334-4D9D-AEFF-FA5F8DE72576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EB2211-D97D-47EF-94D1-01E7A3879BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DC8889-4E65-46D0-AA68-6390757862D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4C7373-82F1-49E6-90D6-7A02AC52F255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3D847A-D8F1-40CE-AE33-A397654C55B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7301BA35-2522-4144-83C2-6A3A6D329A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37993416-D81F-4F6B-AB2C-16F351BE68D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C826F-CBEB-4BA2-A760-22D58D231BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D230B213-4A35-488F-A4B5-87F77BD65E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF88062-8726-4C1D-8F93-ABA0B1654656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A710565-6960-4D46-A1EB-86FE0927A66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6C954-7C0A-41E5-9719-26082E40C5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43784D06-2D2A-46D1-ADE2-B947B3F10F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196BF37C-CD62-4D4C-A716-827B0E6A5065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20076B65-48E6-4DA2-BDA1-AC4F904B449D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2CCAD-397B-4037-B99B-F0A622FAF8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E74056-DD32-49E6-808A-5A9B755F1DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490AB18-A839-400D-88E2-D918B1EEFA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBED980F-A8B9-4C44-957C-FD18867B1799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E033E0C-C7F6-4910-A795-28BA60E9431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAAACA5-F431-4D83-B04D-EC9A81C96184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5B46C-E7D3-495F-861C-12324F09EC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E3063-34CC-4AE2-B055-92D36ECAADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33928D26-39DF-4E15-9979-F9484913C219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B978E3E-69D7-46BD-BD88-1409A546FF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FED829-128A-4F87-9838-AD0C9C11E458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A39B543-5978-46FC-AF85-D635D87E3B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803498D9-C750-4D16-8ADF-2F98E71888A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7D396C-36CA-4579-BCA0-672440CB5CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE716BE-10CE-49EB-9CC4-068584CD3357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5662F3D8-754D-43E3-8EE0-3DF4B0180E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811CE708-CEE6-4B0F-98E5-E138C06EA382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F0F837E-12E5-4332-9823-8B1F764042E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6860F802-FEC2-449A-A5FC-AFACCA8633CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF80379-BD68-4E3B-A7CC-57B51619A0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57DAA48C-4B3B-4665-87AB-38ACFD6C757C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9E677-01D2-4800-82AA-F5585475D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CF2822-88B6-41F2-B10A-A8B09B27245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C589D4F-60B3-450B-860A-9975BB47BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B300C56E-7DF5-4B24-84D1-A4732515325E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA331167-6A2F-402F-A28F-9EE7B6F20207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13846571-C84A-43D6-9970-444E6B4DB0C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35EB5E0E-EAF1-41C1-808D-BD1ABDE8110D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4740B10-EFB8-4F79-88C1-9B6F5897A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D881C4-0302-44E9-A3C5-A23EFD681B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7556-D132-4E81-8E13-C7E025AF20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8219F1A-D6F5-4D6E-B10D-4C455073520C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D224FA8D-4C5A-48BE-92F2-1EC57782046D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB37BCB-63F0-4CC7-B98D-7048D3E18BEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB701014-7980-4BBE-8BD9-3FD2A0AF6941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D68C31D4-9478-4EB6-B160-E9970ADA785D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "872F7B10-30EA-4945-99BC-9EC1C09D6D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBC3EFD-7F03-4DC1-988C-22007216F9F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7898C5-9450-41FD-B45D-7504D97B4CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A247E8-F22B-4639-96D2-9BC01C904D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1233504-041A-454E-9F2E-6E2A4207879D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC39C113-6A7B-4152-8EBA-87A2B64D0F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "342D2B8A-A832-4CAB-9389-93764B0DE241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D44F099-7BC3-45C4-9DB3-03A7E40BC548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A79A0CD-7B81-417E-8DE3-0D61006003FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0A70AA-931A-4906-B4AD-D56E90683716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD4450F-6E15-40CD-94CA-63F70A3EC354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB51EE46-D720-4C1F-8992-67F4422E43CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197BFA5D-8C65-4F59-B4A0-B6AB7B11EC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4340AB16-25B5-4371-B490-6F2563268358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA145B1E-674C-4C79-93C0-BC24EC5F8CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD8B5C4-C680-4DE2-9245-0A8F380C15E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "9B671031-08A4-4B9D-B3DA-7D074D8BFAC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2098AF-763E-4F62-BBD9-A4C9AC411C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3C6BA8-9ED9-42F8-9054-F94840E653E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.8:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "27D917E6-7E71-4B14-8881-C22755C6899B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22F7D60-BBAE-4951-B84C-C70BEB88B6F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B2E210-F46F-4A86-A923-82599D0CFF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0372D0-8181-4812-9741-70DC4C0AEA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E983BF-8D3F-4B20-A89A-BC324C5AD150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4EC417-80F8-4B04-9176-3B9199662D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFC7477A-5DDA-42A6-828E-A818CCF208B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "963FD695-512A-45A8-A60D-887D93FBBD1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A38CD7-4201-4E41-8C11-51A4DEEDDB3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65ABF89E-4814-44D3-A1AD-3B7A4F876A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F69A35-225C-41FF-A32B-AE53096516EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B218F1A-C04D-40B3-A6BE-86DA04E47D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D575EF-37BA-4E69-BDD2-B99680D2CEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E600CF30-7D23-4F41-BCB7-26631B33A1F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5CEE9D-FE82-4E87-AEA0-9A2D8186E522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3729DD-BFCC-4293-9DE7-B02588753F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5D08533D-A187-4C0E-AD4C-41061FB42413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7EADACB1-31D9-4297-A1C3-7F281A0AF154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "D560434E-2636-4C7B-AC6B-A5952123B8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3334C5-92F3-403D-9116-4559D18F677F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7B173DF1-D506-47F4-8F13-18026BF7A974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.8:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4462DB3B-BF33-4BFA-A9C9-CF674A18D24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.9:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5E666EDB-F72C-4B14-8FF4-95B082BB38EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.10:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "96BCAA3F-EF7F-457B-8468-A736527A4F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.11:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4D706AEC-0814-4706-BA4C-6FED01AA4D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.12:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "53FCE242-9B64-4D71-BBB3-8085F7FBA8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.13:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FD6A26-7219-4958-B959-C6365193F839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.14:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "F6307EF6-1449-43B2-A3B8-DF0EA3A6985F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.15:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78C0FF05-0E18-4C48-BE3E-FBC881F468D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.16:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C32845-BAB4-422A-B1BA-568793B4E935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.17:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "0159DCD6-3C52-4B4C-82EC-4E699366E917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.18:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "9E245295-3EF6-4E6D-8D44-D45B8A198E61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.19:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "38DA0AF4-C053-4EEC-AA37-5089C9E6C778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.20:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8EE453-2FAC-4927-AC89-C92B2A947E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.21:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE434E6-63E1-44B0-AA79-BBDABC040234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.22:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC742E5-CA75-43E4-BCD5-54B712CF205E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.23:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "DADA7B77-7DBE-4A62-BE4A-83975D4D7311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.24:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "30D57B03-30FE-48E8-B6BA-77538F067D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.25:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E6BD04-775B-4EDE-BF3E-2896BB59F895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.26:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7900A51A-4E1E-412C-945E-DAB21078BD4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.27:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2B68CEAF-2287-4C1B-A147-DD718E7C6418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.28:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3CE396-518B-465F-AB91-6572601F0C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.29:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B70887CA-5A54-410D-B9B4-84EE31899FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.30:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C538F301-D9A9-48CC-AB77-AD073935D1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.31:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC42FE4-48BE-4EF2-900F-401CF34F113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.1.1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "67AF751E-3C14-4B67-9E24-DBD14E00D72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.1.1.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "02525A8C-2384-409C-8D94-13D8E30904EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.1.1.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "04955D07-0755-473C-AD6A-1AC5B158E387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.1.1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "810D53DA-CACC-4432-B8E5-C42464B316C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.1.1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "334049F0-332B-4736-B0C9-45B0C1289F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.1.1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "9F8D1841-FDBB-4507-B092-F41C49285B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.1.1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "02937401-0114-4D9C-9FDE-E299CC55FC9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.1.1.8:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "59C66307-DB75-40C2-8AB6-538C9E35E141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.1.1.9:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF6A17-43CC-4E14-AC2F-DC6C46B98A41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.1.1.10:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "E511EB2D-7E75-45BC-B446-4CD0FFB7016E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.1.1.11:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC7FC78-6BD8-427E-937D-BD6B4ED7FADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.1.1.12:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9D629C-8D14-490B-A7FA-E765F51226EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.seul.org/or/announce/Jan-2009/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://blog.torproject.org/blog/tor-0.2.0.33-stable-released",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33635",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33399",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00902.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.seul.org/or/announce/Jan-2009/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://blog.torproject.org/blog/tor-0.2.0.33-stable-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00902.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T23:30:01.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in trickle 1.07 allows local users to execute arbitrary code via a Trojan horse trickle-overload.so in the current working directory, which is referenced in the LD_PRELOAD path."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en trickle v1.07, permite a usuarios locales ejecutar código de su elección a través de un caballo de troya trickle-overload.so en el directorio de trabajo actual, que se referencia  en la ruta LD_PRELOAD."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monkey:trickle:1.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D337AC-A414-4781-83E5-FE95A3C971AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=513456",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/29/5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=513456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/29/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-03T23:30:01.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SSL certificate setup program (genSslCert.sh) in Standards Based Linux Instrumentation for Manageability (SBLIM) sblim-sfcb 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /var/tmp/key.pem, (2) /var/tmp/cert.pem, and (3) /var/tmp/ssl.cnf temporary files."
      }, {
        "lang" : "es",
        "value" : "El programa de instalación de certificados SSL (genSslCert.sh) en Standards Based Linux Instrumentation for Manageability (SBLIM)sblim-sfcb v1.3.2 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico sobre los ficheros temporales 1) /var/tmp/key.pem, (2) /var/tmp/cert.pem, and (3) /var/tmp/ssl.cnf"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:standards_based_linux_instrumentation:sblim-sfcb:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFBBE04-40EA-4117-A01F-CE98D4B3447E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=874261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=2561165&group_id=128809&atid=712784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/51783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=874261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=2561165&group_id=128809&atid=712784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0352",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-02-04T19:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and destruction of arbitrary layout objects by the nsViewManager::Composite function."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Mozilla Firefox 3.x antes de  3.0.6, Thunderbird antes de 2.0.0.21, y SeaMonkey antes de 1.1.15, permiten a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código de su elección mediante vectores relacionados con el diseño del motor y la destrucción arbitraria de objetos de diseño por la función nsViewManager::Composite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.13",
            "matchCriteriaId" : "547B206A-36E7-4602-8046-8366BC556AA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.19",
            "matchCriteriaId" : "850345D6-2085-4EC4-AE47-FC8E265C61D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F0C73F-291F-4A92-87B8-2269B5C1516D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938B1260-74A7-4CFF-8086-415DCC284430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28672BA-E3C2-40C3-80E1-95B7CDD089E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9308147C-0A23-48BC-BFA9-A49B9D73014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD8DCC-DBB4-40EE-927C-7B0969700077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F9CE47-E3AA-49D7-AEC9-447951AC31E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581615BB-C781-42CA-836E-0E0EAB8C4504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257F43FA-D22C-4BF0-A02E-261A54142BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D291234-D64A-4E8A-A7CD-08BB980E1CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0256.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33799",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33802",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33808",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33809",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33816",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33831",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33841",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33846",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33869",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34324",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34387",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34464",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0257.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0258.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33598",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021663",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-717-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0313",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=331088",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=401042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=416461",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=420697",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=421839",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=422283",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=422301",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=431705",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=437142",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=449006",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=461027",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10699",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/741-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0256.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0257.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0258.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-717-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=331088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=401042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=416461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=420697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=421839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=422283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=422301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=431705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=437142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=449006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=461027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/741-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0353",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-02-04T19:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Mozilla Firefox v3.x anterior a v3.0.6, Thunderbird anterior a v2.0.0.21, y SeaMonkey anterior a v1.1.15 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación)o posiblemente ejecutar código de su elección a través de vectores relacionados con el motor JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.13",
            "matchCriteriaId" : "547B206A-36E7-4602-8046-8366BC556AA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.19",
            "matchCriteriaId" : "850345D6-2085-4EC4-AE47-FC8E265C61D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F0C73F-291F-4A92-87B8-2269B5C1516D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938B1260-74A7-4CFF-8086-415DCC284430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28672BA-E3C2-40C3-80E1-95B7CDD089E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9308147C-0A23-48BC-BFA9-A49B9D73014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD8DCC-DBB4-40EE-927C-7B0969700077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F9CE47-E3AA-49D7-AEC9-447951AC31E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581615BB-C781-42CA-836E-0E0EAB8C4504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257F43FA-D22C-4BF0-A02E-261A54142BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D291234-D64A-4E8A-A7CD-08BB980E1CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0256.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33799",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33802",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33808",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33809",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33816",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33831",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33841",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33846",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33869",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34324",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34464",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0257.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0258.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33598",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021663",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-717-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0313",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=452913",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11193",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0256.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0257.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0258.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-717-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=452913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0354",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-02-04T19:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote attackers to bypass the Same Origin Policy, and access the properties of an arbitrary window and conduct cross-site scripting (XSS) attacks, via vectors involving a chrome XBL method and the window.eval function."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de dominio cruzado en js/src/jsobj.cpp en Mozilla Firefox v3.x anterior a v3.0.6 permite a atacantes remotos evitar la Política de Mismo Origen (Same Origin Policy) , acceder a las propiedades de cualquier ventana de su elección y llevar a cabo ataques de ejecución de secuencias de comandos en sitios cruzados (XSS) a través de vectores que involucran al método Chrome XBL y a la función window.eval."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0256.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33799",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33809",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33831",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33841",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33846",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33869",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-02.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33598",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021664",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-717-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0313",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=468581",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9796",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0256.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-717-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=468581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0355",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-02-04T19:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type=\"file\" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element."
      }, {
        "lang" : "es",
        "value" : "components/sessionstore/src/nsSessionStore.js en Mozilla Firefox anterior a v3.0.6 no bloquea los cambios de los elementos INPUT al tyoe=\"file\" durante la restauración de pestañas, lo que permite a atacantes asistidos por el usuario leer archivos de su elección en un ordenador cliente mediante elementos INPUT manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:N/A:N",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.5",
            "matchCriteriaId" : "EAF11F35-A1E8-452C-8EC8-58C7B41617D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0256.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33799",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33808",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33809",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33816",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33831",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33841",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33846",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33869",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34324",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34417",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-03.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0257.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0258.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33598",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021665",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-717-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-717-2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0313",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=466937",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9161",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0256.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0257.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0258.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-717-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-717-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=466937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0356",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-02-04T19:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.6 and SeaMonkey do not block links to the (1) about:plugins and (2) about:config URIs from .desktop files, which allows user-assisted remote attackers to bypass the Same Origin Policy and execute arbitrary code with chrome privileges via vectors involving the URL field in a Desktop Entry section of a .desktop file, related to representation of about: URIs as jar:file:// URIs.  NOTE: this issue exists because of an incomplete fix for CVE-2008-4582."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox en versiones anteriores a v3.0.6 y SeaMonkey no bloquean enlaces a las URIs (1) about:plugins y (2) about:config desde ficheros .desktop, lo que permite a atacantes remotos eludir la Same Origin Policy y ejecutar código de su elección con privilegios chrome mediante vectores relacionados con el campo URL en una sección Desktop Entry de un fichero .desktop, en relación con una representación de: URIs como jar:file:// URIs. NOTA: este problema existe debido a una resolución incompleta de CVE-2008-4582."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.5",
            "matchCriteriaId" : "EAF11F35-A1E8-452C-8EC8-58C7B41617D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138701FB-929A-4683-B41F-CB014ACFE44A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0256.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33799",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33809",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33831",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33841",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33846",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-04.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33598",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021666",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0313",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=460425",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9922",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0256.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=460425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0357",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-02-04T19:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox  anterior a v3.06 y SeaMonkey anterior a v1.1.15 no restringe adecuadamente el acceso desde las páginas web a las cabeceras de respuesta HTTP (1) Set-Cookie y (2) Set-Cookie2, lo que permite a atacantes remotos obtener información sensible de las cookies a través de llamadas XMLHttpRequest, relacionado con el mecanismo de protección HTTPOnly."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.5",
            "matchCriteriaId" : "EAF11F35-A1E8-452C-8EC8-58C7B41617D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.13",
            "matchCriteriaId" : "547B206A-36E7-4602-8046-8366BC556AA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4A97B6E1-EABA-4977-A3FC-64DF0392AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D33486-4956-4E2C-BA16-FA269A9D02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ha.ckers.org/blog/20070511/bluehat-errata/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0256.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33799",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33808",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33809",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33816",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33831",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33841",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33846",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33869",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-05.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0257.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33598",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021668",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-717-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-717-2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0313",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=380418",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9459",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://ha.ckers.org/blog/20070511/bluehat-errata/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0256.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0257.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-717-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-717-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=380418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0358",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-02-04T19:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache Cache-Control directives, which allows local users to obtain sensitive information by using the (a) back button or (b) history list of the victim's browser, as demonstrated by reading the response page of an https POST request."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox 3.x anterior a 3.0.6 no implementa adecuadamente las directivas de (1) no-store y (2) no-cache Cache-Control, lo que permite a usuarios locales obtener información sensible usando el (1) botón volver o el (2) historial del navegador de la víctima, como se ha demostrado mediante la lectura de la página de respuesta de una petición http POST."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.imeta.co.uk/JDeabill/archive/2008/07/14/303.aspx",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0256.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33799",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33809",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33831",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33841",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33846",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33869",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-06.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33598",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021667",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-717-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0313",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=441751",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10610",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://blogs.imeta.co.uk/JDeabill/archive/2008/07/14/303.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0256.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-06.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-717-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=441751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0388",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-04T19:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code via a large length value in a message, related to the (a) ClientConnection::CheckBufferSize and (b) ClientConnection::CheckFileZipBufferSize functions in ClientConnection.cpp."
      }, {
        "lang" : "es",
        "value" : "Errores múltiples de signo de entero en (1) UltraVNC v1.0.2 y v1.0.5 y (2) TightVnc v1.3.9 permiten a atacantes remotos provocar una denegación de servicio (corrupción de la cabecera y caída de la aplicación) o posiblemente ejecutar codigo de su elección mediante un valor de gran longitud en un mensaje, en relación con las funciones (a) ClientConnection::CheckBufferSize y (b) ClientConnection::CheckFileZipBufferSize en ClientConnection.cpp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tightvnc:tightvnc:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E472222-224B-41BD-A788-F6D6AF96430B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultravnc:ultravnc:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C556A1A6-30ED-4988-B66B-CF823B297CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultravnc:ultravnc:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "835FD162-1BE0-43C6-93A5-1E450505D2A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.ultravnc.info/viewtopic.php?t=14654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://vnc-tight.svn.sourceforge.net/viewvc/vnc-tight?view=rev&revision=3564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/content/vnc-integer-overflows",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500632/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33568",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.ultravnc.info/viewtopic.php?t=14654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://vnc-tight.svn.sourceforge.net/viewvc/vnc-tight?view=rev&revision=3564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/content/vnc-integer-overflows",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500632/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-04T19:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IPv6 Neighbor Discovery Protocol (NDP) implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity), read private network traffic, and possibly execute arbitrary code via a spoofed message that modifies the Forward Information Base (FIB), a related issue to CVE-2008-2476."
      }, {
        "lang" : "es",
        "value" : "La implementación IPv6 Neighbor Discovery Protocol (NDP) en HP HP-UX B.11.11, B.11.23 y B.11.31, no valida el origen de los mensajes Neighbor Discovery -Descubrimiento de Vecinos-, esto permite a atacantes remotos provocar una denegación de servicio (pérdida de conectividad), leer el tráfico privado de redes  y puede que ejecutar código de su elección a través de un mensaje falso que modifica el FIB (Forward Information Base). Está relacionado con la vulnerabilidad CVE-2008-2476."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "972D4ABF-2E80-4902-910D-5BD0CBEC9765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C73959-3E02-4847-8962-651D652800EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64BBA96-FB3C-46AC-9A29-50EE02714FE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=123368621330334&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=123368621330334&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-04T19:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft XML Core Services, as used in Microsoft Expression Web, Office, Internet Explorer 6 and 7, and other products, does not properly restrict access from web pages to Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-4033."
      }, {
        "lang" : "es",
        "value" : "Microsoft XML Core Services, como el utilizado en Microsoft Expression Web, Office, Internet Explorer 6 y 7 y otros productos; no restringe adecuadamente el acceso de las páginas Web a las cabeceras de respuesta HTTP Set-Cookie2; esto permite a atacantes remotos obtener información sensible de las cookies a través de llamadas XMLHttpRequest. Relacionado con el mecanismo de protección HTTPOnly. NOTA: este problema existe debido a una modificación inicial incompleta de CVE-2008-4033."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:xml_core_services:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F692D96C-E46C-4731-AE2D-359CBEA67B03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=380418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=380418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0058",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-02-05T00:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.2 allow remote attackers to cause a denial of service (web authentication outage or device reload) via unspecified network traffic, as demonstrated by a vulnerability scanner."
      }, {
        "lang" : "es",
        "value" : "Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), y Cisco Catalyst 3750 Integrated Wireless LAN Controller con software v4.x antes de v4.2.176.0 y v5.x antes de v5.2, permiten a atacantes remotos provocar una denegación de servicio (caída del servicio de autenticación web) mediante tráfico de red no especificado, como ha demostrado un escáner de vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:4400_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB886E18-A1F0-4A05-AFBF-FFC4FA72373C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:4400_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5561784-ACF8-4CCD-94FA-AAA17AC8363E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:4400_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5830E746-BD5C-43A6-914F-1D8411E235E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DECEDD-4D87-455B-BC28-6227ABC49714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D797EE92-8C85-4C83-A96A-DF1922712742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1C016C-30FA-4F76-883B-12712316F750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FFC9F3-8342-4A71-9731-14EF90C8E678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E82E205F-2FA0-4030-8BC9-D622FCF015BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A95FA8-80E7-4995-ABE8-86326E698017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB9B9EF-1ADF-4C04-A9C4-EF87EF999D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59B5CEE-8756-4A42-B9BA-489CE0DE5AA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F21CDB-2DFE-4781-8FC6-DF449FB6FA64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3A8DBB-9E82-4428-9034-391F662DFA0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC1E1F40-ECB6-42FB-838E-998B1893D5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1511CA9-B471-49D6-9BEE-1BADE6EC61E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33749",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33608",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021679",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/33749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0059",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-02-05T00:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.2.x before 5.2.157.0 allow remote attackers to cause a denial of service (device reload) via a web authentication (aka WebAuth) session that includes a malformed POST request to login.html."
      }, {
        "lang" : "es",
        "value" : "El Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), y Cisco Catalyst 3750 Integrated Wireless LAN Controller con software v4.x anterior a v4.2.176.0 y v5.2.x anterior a 5.2.157.0; permiten a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) a través de una sesión de autenticación Web (también conocido WebAuth) que incluye una solicitud POST mal formada a login.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:4400_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB886E18-A1F0-4A05-AFBF-FFC4FA72373C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:4400_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5561784-ACF8-4CCD-94FA-AAA17AC8363E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:4400_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5830E746-BD5C-43A6-914F-1D8411E235E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DECEDD-4D87-455B-BC28-6227ABC49714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D797EE92-8C85-4C83-A96A-DF1922712742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1C016C-30FA-4F76-883B-12712316F750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FFC9F3-8342-4A71-9731-14EF90C8E678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E82E205F-2FA0-4030-8BC9-D622FCF015BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A95FA8-80E7-4995-ABE8-86326E698017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB9B9EF-1ADF-4C04-A9C4-EF87EF999D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59B5CEE-8756-4A42-B9BA-489CE0DE5AA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F21CDB-2DFE-4781-8FC6-DF449FB6FA64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3A8DBB-9E82-4428-9034-391F662DFA0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC1E1F40-ECB6-42FB-838E-998B1893D5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1511CA9-B471-49D6-9BEE-1BADE6EC61E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33749",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33608",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021679",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/33749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0061",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-02-05T00:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Wireless LAN Controller (WLC) TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.1 allows remote attackers to cause a denial of service (device crash or hang) via unknown IP packets."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el dispositivo Wireless LAN Controller (WLC) TSEC en Cisco 4400 WLC, Cisco Catalyst 6500 y 7600 Wireless Services Module (WiSM), y Cisco Catalyst 3750 Integrated Wireless LAN Controller con software 4.x versiones anteriores a 4.2.176.0 y 5.x versiones anteriores a 5.1 permite a atacantes remotos provocar una denegación de servicio (cuelgue o caída del servicio) a través de paquetes IPs desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:4400_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB886E18-A1F0-4A05-AFBF-FFC4FA72373C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:4400_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5561784-ACF8-4CCD-94FA-AAA17AC8363E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:4400_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555E98AF-5A93-461B-AE99-40E49089BFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DECEDD-4D87-455B-BC28-6227ABC49714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D797EE92-8C85-4C83-A96A-DF1922712742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8A48A9-1D3C-4A17-A438-7A133ED332A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FFC9F3-8342-4A71-9731-14EF90C8E678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E82E205F-2FA0-4030-8BC9-D622FCF015BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311E5C0C-B065-48EB-B9F8-DD85EA958E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB9B9EF-1ADF-4C04-A9C4-EF87EF999D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59B5CEE-8756-4A42-B9BA-489CE0DE5AA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59C908A-C6B0-471A-88EA-DA28CCBE19B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3A8DBB-9E82-4428-9034-391F662DFA0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC1E1F40-ECB6-42FB-838E-998B1893D5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA75092-5306-45F5-AEB5-67A2224FFDCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33749",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33608",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021679",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/33749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0062",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-02-05T00:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.2.173.0 allows remote authenticated users to gain privileges via unknown vectors, as demonstrated by escalation from the (1) Lobby Admin and (2) Local Management User privilege levels."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), y Cisco Catalyst 3750 Integrated Wireless LAN Controller con software v4.2.173.0, permite a usuarios remotos autenticados obtener privilegios mediante vectores desconocidos, como es demostrado por la escalada de privilegios desde los niveles (1) Lobby Admin y (2) Local Management User."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D797EE92-8C85-4C83-A96A-DF1922712742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.2.173.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7116274D-F131-42CC-99DA-F22CC39E4525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_wireless_services_modules:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E96B28A-CF63-48C9-8B8E-8BC432A6A5EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500_wireless_services_modules:4.2.173.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E04EA5-F134-4930-97CB-BD68484403FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC1E1F40-ECB6-42FB-838E-998B1893D5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_lan_controller_software:4.2.173.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57C6B8CB-9277-463B-84EB-AEF36EE40E7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33749",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33608",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021678",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/33749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-05T00:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the RD-Autos (com_rdautos) 1.5.5 Stable component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente RD-Autos (com_rdautos) v1.5.5 Stable para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id de index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rd-media:rd-autos:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A750E26F-AE7E-4453-9BDE-AEAFD23266C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33562",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33297",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-05T00:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Eventing (com_eventing) 1.6.x component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente para Joomla! Eventing (com_eventing) v1.6.x; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro catid de index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_eventing:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7218E008-3683-462F-8C78-1801E760AF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_eventing:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D5C57BB-4B30-4D68-9883-AF05293A915E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_eventing:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F30303-6BF7-434C-9523-CF86A9667E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_eventing:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8644DE-A709-4B8A-9342-A1308252BB8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_eventing:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D3D750-53E0-4873-9CB7-0FF6D0808724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_eventing:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C57FD836-1A66-47BE-BC7B-BEB59843E899"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33563",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33296",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-05T00:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when register_globals is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the _SERVER[ConfigFile] parameter to admin/index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de evaluación de variable dinámica en lists/admin.php en phpList v2.10.8 y versiones anteriores, cuando register_globals no está activa, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de secuencias de salto de directorio en el parámetro \"_SERVER[ConfigFile]\" de admin/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.8",
            "matchCriteriaId" : "8052E3D1-2F21-4C5D-894F-03BAB03887B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC454AF-1B16-4448-9F5A-80D656F9551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F08591B-A066-40F4-97A4-F7EF1FE40FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.1.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "994CBD86-E713-458E-AD7B-5357BD747319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.1.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0394F819-8734-4418-A5D9-081B0ABED9AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.1.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F1E692-B80F-4F45-A694-F620B928F2DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53EF60DE-FA1D-4F0E-80D8-EE87041741C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.1.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9F1619-4300-4674-AB7F-3B6C182C1A1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B923032-FB9C-42EB-AAF3-0AFC40690121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5CEA44B-B45D-46E6-9740-7AFCAD676C33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B52E71-CB78-438F-913B-3B49BA135F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BE05C7-CFB0-48E8-999B-5B4B39D0E16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648BE81A-7987-491C-8ED6-E737D83D3D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE9D9D96-AB9E-4938-80AD-4F012894067F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7F2489-59E1-4676-A46B-FC94DBA011D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EDB2B3-985E-4B26-95E8-5B179810AB30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFCDC95D-E5CC-4A62-B0CA-85252F880005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80875CA-261C-4B66-8A8B-5007CD645230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93584A2D-F093-4691-9A56-0B7CF9B82D27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF7994C-A3BF-4846-A598-69E5FAA410E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D20C18F5-0D20-488E-A685-95537825F631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DAFAD62-46AE-4C2B-8338-9F01468C4D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571DA919-BEA6-4033-B1A6-5B0305281135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7825E3FF-BD5C-466B-9D68-ABC269229DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84DF3E96-8035-4290-9B29-5C3795A04852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE1716C-536C-426C-BF26-55CBEC445485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A661DEE-0AF7-4CA1-9BDD-A8E3C34D293D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2D6C9F-9700-4C81-B3D5-0FCAC1E6CA09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D86B15-1F3A-4EFA-8D7F-7ECD8F26C2ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE1CA9D6-E9C5-4C61-AB58-850A785C58EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B5358C-53BA-4A63-8EB4-72F86B67F023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "154AECE5-DC59-49B9-A756-36B0049A0C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0755ABE4-C9A4-477F-AC0C-03655F4A2505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FC17BA8-6FEA-40B2-8734-9DD873E6FC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D1B20B-7120-4F12-AA3F-775952F9F315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8434A23C-F4EB-4F3B-BE55-BBC599E3FC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A63F9ADB-90D7-49E3-ABDF-C75B218486C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CDBD10-EE7A-4185-BCCB-85AB0D9BDD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F52B116-6306-4620-B3DE-C77129DEBC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA9A72F-C975-4CAC-B63B-BD74CCF97640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B355BF6-DDAB-4643-8480-9B850418121D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8F9F34-7F4B-4B08-80A0-7495AE30F8F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D04A86-5992-469E-BECB-341BB659EB10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55656478-6680-4FD2-B322-0C73DD2380BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34F3DD54-BCEC-433B-9434-2129A967B234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABABD5C-624A-4ABC-9265-C2BBC6435BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2381905B-8532-4E67-ADAB-78321D153AED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD67705B-7589-4E4E-85BF-1C1EC7001052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE10CFB-A604-4C6E-ACE6-FD441C47D296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1EC7F51-B790-4333-9A2F-44693B3A7E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784C97D4-740E-4C65-98ED-FA03EC3EFAA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94101A7-419E-4ACF-AB75-F0B0DA6E7021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F52B3C-7925-4970-AA84-732B34DD2FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140DBAC-6AF0-41D0-972C-4F97BA06F488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2A6FB5-0CE1-4952-9763-7AA0E605A7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665AC8D2-D3E6-470C-800B-0FD5AACE77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2FFBB2-E4C0-4F16-90D6-9D3FB2105C35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15C06CBF-3F4B-4D10-9FF4-21985354ED3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018BA2DC-D1F7-4995-9D72-C38A2B087F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516EB08E-F724-4638-8174-1FB527CE8E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B0EA29-302E-4FFB-88E2-5A4CDF195BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048787BE-1E97-40B1-94F3-ADA674207396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB56F18-A63B-4557-AB5E-E83BFEDED0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BAFF48D-67A7-40DA-9762-DB416E1442C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D12DE2-9CCA-4670-B119-8BF02A48453D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56C8952-210A-4B93-8EC9-E0FDA9D606C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37308B67-FA64-4858-AC66-EBC339180E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B089E7-A9E4-4184-8AE3-3FE7D0E1A92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8685E03D-8377-4B30-9D41-DB6B926DC14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD34671-A2FF-4CCD-AE77-23FF323520E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33533",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugreport.ir/index_60.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500057/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugreport.ir/index_60.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500057/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Register Globals are disabled by default, so this will not increase access complexity."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-05T00:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Php Photo Album (PHPPA) 0.8 BETA allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the preview parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php de Php Photo Album (PHPPA) v0.8 BETA, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un .. (punto punto) en el parámetro preview -vista previa-."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_walker:php_photo_album:0.8:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "5D30FBF7-6B73-46C7-909F-D9BF7E6C5D1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33277",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-05T00:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in sign1.php in AN Guestbook (ANG) before 0.7.7 allows remote attackers to inject arbitrary web script or HTML via the country parameter, which is not properly handled in (1) administrator/manage.php or (2) administrator/trash.php.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en AN Guestbook (ANG) antes de v0.7.7, permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro country, el cual no se maneja adecuadamente en (1) administrator/manage.php o (2) administrator/trash.php. NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.6",
            "matchCriteriaId" : "549A87F8-85AB-4118-B2D1-FBA0EF7C99AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22AB4055-8383-4BAF-9838-DC8D8BCD19A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B44B5986-126D-4902-AD57-9BAA50278E33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C9527B-EF66-42A1-AFD0-35C2CFFD14A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "457BA8EF-64AD-477C-A4A8-A1F3961C2339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0158BE8-54E0-4AB7-8BA4-0E95A2B22C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A587CA-564F-4CDB-B65B-F1DB3B40EEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA1FCA7-E6D2-44F4-AF35-AC6EFB1ACA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B21E8D94-04BE-4F76-BB55-9F398197F2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31423D65-B142-4F18-BAFB-2D097A2D8967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE5DFC6-8B2E-44B9-9A0C-27E3BBE5E488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B468B2A9-464F-4ACF-BB9F-909E4F136245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D7B247-8322-4787-BE94-6F55C4937F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA474D78-8749-4801-933F-94240CC2CED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AA55F57-50D1-45E7-90DF-947C683C675D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E094E87-1B17-4AEB-B23D-984818533B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91A8A0F-0B59-44B1-9243-3BE07C453359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDCC557F-2686-4F2C-AF12-E6EA0B17148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D85DF228-FE7B-4108-A71C-F557FF1630C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A304300-3065-4D10-8E7B-8D9634A8C5E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C1D17E-AB2D-4C27-A17D-8D4761A7E4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:2.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A7A68B-EDD3-4883-9E5F-5B6166F2AED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97953D86-46EE-45FD-B41F-330B65BB88FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33490",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=907703",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=653720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33292",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=907703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=653720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-05T00:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the clanek parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Blue Eye CMS v1.0.0 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"clanek\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_eye_cms:blue_eye_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "0FF9E578-17C6-4F95-BD94-2C69051C946C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33303",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-05T00:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Classified Listings Manager 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en CategoryManager/upload_image_category.asp en DMXReady Classified Listings Manager v1.1 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmxready:classified_listings_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C326D635-5B8A-41C2-A069-E27C04195968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33482",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33253",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-05T00:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Member Directory Manager 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en iCategoryManager/upload_image_category.asp en DMXReady Member Directory Manager v1.1 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmxready:member_directory_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F16C8BC6-9AB3-4EF9-8202-B51A7953463E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dmxready.helpserve.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=93",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33482",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33253",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dmxready.helpserve.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=93",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-05T00:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Secure Document Library 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en CategoryManager/upload_image_category.asp en DMXReady Secure Document Library v1.1 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmxready:secure_document_library:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "626DE60F-97A9-473E-8138-53D4A532D70E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmxready:secure_document_library:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC18A51C-94A3-4B39-822E-842E175088A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dmxready.helpserve.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=93",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33482",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33253",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dmxready.helpserve.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=93",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-05T00:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to search.asp, (2) SortDir parameter to auctionsended.asp, and the (3) catid parameter to wishlist.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Active Bids, permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) \"search\" a search.asp, (2) \"SortDir\" a auctionsended.asp y el parámetro (3) \"catid\" a wishlist.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activewebsoftwares:active_bids:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5FB492B-4A43-4727-A6D1-601C312B14BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500144/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33306",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500144/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-05T00:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to search.asp and the (2) URL parameter to tellafriend.asp."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Active Bids permiten a atacantes remotos inyectar web script o HTML a través de (1) el parámetro \"search\" de search.asp y el(2) parámetro \"URL\" de tellafriend.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activewebsoftwares:active_bids:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5FB492B-4A43-4727-A6D1-601C312B14BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500144/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33306",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500144/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-05T00:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Default.asp in LinksPro Standard Edition allows remote attackers to execute arbitrary SQL commands via the OrderDirection parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Default.asp en LinksPro Standard Edition, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"OrderDirection\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codefixer:linkspro:_nil_:_nil_:standard:*:*:*:*:*",
            "matchCriteriaId" : "FB5DB7F7-B9BF-48D2-AEDE-62FF22255F60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0901-exploits/linkspro-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33305",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0901-exploits/linkspro-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-06T19:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 12.4(23) allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under (1) level/15/exec/-/ or (2) exec/, a different vulnerability than CVE-2008-3821."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el servidor HTTP en Cisco IOS v12.4(23) permite a atacantes remotos inyectar secuencias de comando web o HTML de su elección a través de PATH_INFO a la URI por defecto bajo (1)level/15/exec/-/ o (2)una vulnerabilidad diferente de CVE-2008-3821."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(23\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3B5CC3-A83E-4241-ACE1-0FFEE8A5EFE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500674/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33625",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500674/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-06T19:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in the HTTP server in Cisco IOS 12.4(23) allows remote attackers to execute arbitrary commands, as demonstrated by executing the hostname command with a level/15/configure/-/hostname request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el servidor HTTP en in Cisco IOS v12.4(23) permite a atacantes remotos ejecutar comandos de su elección, como se demostró ejecutando el comando hostname con una petición level/15/configure/-/hostname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(23\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3B5CC3-A83E-4241-ACE1-0FFEE8A5EFE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500674/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500674/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-06T19:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de ejecución de comandos en sitios cruzados en el interfaz web en el módulo Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:controllogix_1756-enbt\\/a_ethernet\\/_ip_bridge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CFDA18-F8F0-4FD9-B1C3-45832E897DAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/882619",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/882619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-06T19:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de redirección abierta en el interfaz web en el módulo Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge permite a atacantes remotos redireccionar a usuarios a sitios web de su elección y llevar a cabo ataques de phishing a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:controllogix_1756-enbt\\/a_ethernet\\/_ip_bridge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CFDA18-F8F0-4FD9-B1C3-45832E897DAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/619499",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/619499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-06T19:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain \"internal web page information\" and \"internal information about the module\" via unspecified vectors.  NOTE: this may overlap CVE-2002-1603."
      }, {
        "lang" : "es",
        "value" : "El interfaz web en el módulo Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge permite a atacantes remotos obtener \"información de la pagina web interna\" y \"información interna del módulo\" a través de vectores desconocidos. NOTA: esta vulnerabilidad puede solaparse con CVE-2002-1603."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:controllogix_1756-enbt\\/a_ethernet\\/_ip_bridge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CFDA18-F8F0-4FD9-B1C3-45832E897DAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/124059",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/RGII-7MWKZ3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/124059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/RGII-7MWKZ3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-08T21:30:09.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in NFS in HP ONCplus B.11.31.05 and earlier for HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en NFS en HP ONCplus B.11.31.05 y anteriores para HP-UX B.11.31, permite a usuarios locales provocar una denegación de servicio a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oncplus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "b.11.31_05",
            "matchCriteriaId" : "F2354EA2-3F33-4FA8-BEF7-1203A6B53D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oncplus:b.11.31_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AFB6E25-120A-473B-9ECD-0B1F18E88947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oncplus:b.11.31_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F3FE14-EC1C-40CB-881B-D435AEA9D975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oncplus:b.11.31_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6965559A-0400-4B74-B867-9DAA639D339B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oncplus:b.11.31_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F966DA-FBC8-4708-8806-F44910BEFCB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64BBA96-FB3C-46AC-9A29-50EE02714FE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=123394068325944&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33860",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=123394068325944&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-08T21:30:09.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in a DLL file in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to execute arbitrary code via a crafted Internet Video Recording (IVR) file with a filename length field containing a large integer, which triggers overwrite of an arbitrary memory location with a 0x00 byte value, related to use of RealPlayer through a Windows Explorer plugin."
      }, {
        "lang" : "es",
        "value" : "Archivo dll en RealNetworks RealPlayer 11, permite a atacantes remotos ejecutar código de su elección a través de un archivo Internet Video Recording (IVR) manipulado con un campo con un nombre de archivo largo que contiene un entero largo, lo que provoca la sobreescritura de una región de memoria con un valor en bytes de 0x00, relacionado con el uso de RealPlayer a través del componente de Windows Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A94395-4F1A-4310-85A8-F46A76EE3A12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/38218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://service.real.com/realplayer/security/01192010_player/en/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fortiguardcenter.com/advisory/FGA-2009-04.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500722/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://service.real.com/realplayer/security/01192010_player/en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fortiguardcenter.com/advisory/FGA-2009-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500722/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Per http://www.fortiguardcenter.com/advisory/FGA-2009-04.html:\r\n\r\n\"It should be noted that the victim does not necessarily have to open the malicious file for exploitation to occur: the vulnerabilities lie in a DLL that is also used as a plugin for the Windows Explorer shell. A successful attack could take place by merely previewing the IVR file through Windows Explorer. \""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-08T21:30:09.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in a DLL file in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to execute arbitrary code via a crafted Internet Video Recording (IVR) file with a modified field that controls an unspecified structure length and triggers heap corruption, related to use of RealPlayer through a Windows Explorer plugin."
      }, {
        "lang" : "es",
        "value" : "Archivo dll en RealNetworks RealPlayer 11, permite a atacantes remotos ejecutar código de su elección a través de un archivo Internet Video Recording (IVR) manipulado con un campo modificado que controla el tamaño de una estructura sin especificar y lanza una corrupción en el montículo (heap), relacionado con el uso de RealPlayer a través del componente de Windows Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A94395-4F1A-4310-85A8-F46A76EE3A12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/38218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://service.real.com/realplayer/security/01192010_player/en/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fortiguardcenter.com/advisory/FGA-2009-04.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500722/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/509097/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-009/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://service.real.com/realplayer/security/01192010_player/en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fortiguardcenter.com/advisory/FGA-2009-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500722/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/509097/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-08T21:30:09.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedia Soft audio components for .NET, allows remote attackers to execute arbitrary code via a long string in a playlist (.pls) file, as originally reported for Euphonics Audio Player 1.0.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en AdjMmsEng.dll v7.11.1.0 y v7.11.2.7 distribuido para múltiples componentes de audio  de MultiMedia Soft para .NET, permite a atacantes remotos ejecutar código de su elección a través de una cadena larga en un archivo de \"lista de reproducción\" (.pls), reportado inicialmente por Euphonics Audio Player v1.0.NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multimediasoft:audio_dj_studio_for_.net:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5636AC-D0E1-4390-93B2-E3ADCC471A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multimediasoft:audio_sound_editer_for_.net:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4D4B16-2810-48EA-B8EB-A1359AD1BD15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multimediasoft:audio_sound_recorder_for_.net:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BA5495-6851-4CD6-A4E3-EB37B0B7E246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multimediasoft:audio_sound_studio_for_.net:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF14BA0A-66B3-4DA2-8989-D7F988DAD4A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multimediasoft:audio_sound_suite_for_.net:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B49DAC-FE92-491A-998F-B3A75B4EAC6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33791",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33817",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500652/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500652/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-08T21:30:09.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the process (aka proc) filesystem in Sun OpenSolaris snv_85 through snv_100 allows local users to gain privileges via vectors related to the contract filesystem."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en \"process filesystem\" (también conocido como proc) en Sun OpenSolaris de la v.snv_85 a la v.snv_100, permite a usuarios locales obtener privilegios a través de vectores relacionados con el \"contract filesystem\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-244026-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ioactive.com/pdfs/OpenSolarisUPtrDeref.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-244026-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ioactive.com/pdfs/OpenSolarisUPtrDeref.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0210",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-02-08T22:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the MLF application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to execute arbitrary commands or cause a denial of service (system crash) via unspecified vectors, aka PD28578."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la aplicación MLF en AREVA e-terrahabitat v5.7 y anteriores, permite a atacantes remotos ejecutar comandos de su elección o provocar una denegación de servicio (caída del sistema) a través de vectores no especificados. También conocidos como PD28578."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:areva:e-terrahabitat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7",
            "matchCriteriaId" : "81433ED5-61A7-406A-BCEA-C0FB80B4B374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:areva:e-terrahabitat:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C5CBA7-E0D6-4C2B-AD9F-16707B084C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:areva:e-terrahabitat:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DA6AF7-707F-476F-B204-B6BD870762D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33837",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/337569",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.scada-security.com/vulnerabilities/areva1.html",
        "source" : "cret@cert.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500689/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33637",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/33837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/337569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.scada-security.com/vulnerabilities/areva1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500689/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per http://www.kb.cert.org/vuls/id/337569 \r\n\r\n\"III. Solution \r\n\r\nApply Patch Users of e-terrahabitat version 5.5, 5.6, and 5.7 should apply the e-terrahabitat_560_P20081030_SEC patch immediately.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0211",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-02-08T22:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the WebFGServer application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to cause a denial of service (system crash) via unknown vectors, aka PD32018."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en la aplicación WebFGServer en AREVA e-terrahabitat v5.7 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída del sistema) a través de vectores no especificados. También conocidos como PD32018."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:areva:e-terrahabitat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7",
            "matchCriteriaId" : "81433ED5-61A7-406A-BCEA-C0FB80B4B374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:areva:e-terrahabitat:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C5CBA7-E0D6-4C2B-AD9F-16707B084C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:areva:e-terrahabitat:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DA6AF7-707F-476F-B204-B6BD870762D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33837",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/337569",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.scada-security.com/vulnerabilities/areva1.html",
        "source" : "cret@cert.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500689/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33637",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/33837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/337569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.scada-security.com/vulnerabilities/areva1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500689/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0212",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-02-08T22:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the WebFGServer application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to cause a denial of service (system crash) via unknown vectors, aka PD32020."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en la aplicación WebFGServer en AREVA e-terrahabitat v5.7 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída del sistema) a través de vectores no especificados. También conocidos como PD32020."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:areva:e-terrahabitat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7",
            "matchCriteriaId" : "81433ED5-61A7-406A-BCEA-C0FB80B4B374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:areva:e-terrahabitat:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C5CBA7-E0D6-4C2B-AD9F-16707B084C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:areva:e-terrahabitat:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DA6AF7-707F-476F-B204-B6BD870762D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33837",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/337569",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.scada-security.com/vulnerabilities/areva1.html",
        "source" : "cret@cert.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500689/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33637",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/33837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/337569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.scada-security.com/vulnerabilities/areva1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500689/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per http://www.kb.cert.org/vuls/id/337569 \r\n\r\n\"III. Solution\r\n\r\n Apply Patch Users of e-terrahabitat version 5.5, 5.6, and 5.7 should apply the e-terrahabitat_560_P20081030_SEC patch immediately.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0213",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-02-08T22:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the NETIO application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to cause a denial of service (system crash) via unknown vectors, aka PD32021."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en la aplicación NETIO en AREVA e-terrahabitat v5.7 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída del sistema) a través de vectores no especificados. También conocidos como PD32021."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:areva:e-terrahabitat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7",
            "matchCriteriaId" : "81433ED5-61A7-406A-BCEA-C0FB80B4B374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:areva:e-terrahabitat:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C5CBA7-E0D6-4C2B-AD9F-16707B084C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:areva:e-terrahabitat:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DA6AF7-707F-476F-B204-B6BD870762D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33837",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/337569",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.scada-security.com/vulnerabilities/areva1.html",
        "source" : "cret@cert.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500689/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33637",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/33837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/337569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.scada-security.com/vulnerabilities/areva1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500689/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per http://www.kb.cert.org/vuls/id/337569\r\n\r\n\r\n\"III. Solution\r\nApply Patch\r\n\r\n\r\nUsers of e-terrahabitat version 5.5, 5.6, and 5.7 should apply the e-terrahabitat_560_P20081030_SEC patch immediately.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0214",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-02-08T22:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the WebFGServer application in AREVA e-terrahabitat 5.7 and earlier allows remote authenticated users to gain privileges via unknown vectors, aka PD32022."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en la aplicación WebFGServer en AREVA e-terrahabitat v5.7 y anteriores, permite a usuarios autenticados remotamente obtener privilegios a través de vectores no especificados. También conocidos como PD32022."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:areva:e-terrahabitat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7",
            "matchCriteriaId" : "81433ED5-61A7-406A-BCEA-C0FB80B4B374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:areva:e-terrahabitat:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C5CBA7-E0D6-4C2B-AD9F-16707B084C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:areva:e-terrahabitat:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DA6AF7-707F-476F-B204-B6BD870762D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33837",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/337569",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.scada-security.com/vulnerabilities/areva1.html",
        "source" : "cret@cert.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500689/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33637",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/33837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/337569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.scada-security.com/vulnerabilities/areva1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500689/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per http://www.kb.cert.org/vuls/id/337569 \r\n\r\n\"III. Solution \r\n\r\nApply Patch Users of e-terrahabitat version 5.5, 5.6, and 5.7 should apply the e-terrahabitat_560_P20081030_SEC patch immediately.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-08T22:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in (1) HttpMsg.c and (2) HttpStatusLine.c."
      }, {
        "lang" : "es",
        "value" : "Squid versiones 2.7 hasta 2.7.STABLE5, versiones 3.0 hasta 3.0.STABLE12 y versiones 3.1 hasta 3.1.0.4, permiten a los atacantes remotos causar una denegación de servicio por medio de una petición HTTP con un número de versión no válido, lo que desencadena una aserción accesible en los archivos (1) HttpMsg.c y (2) HttpStatusLine.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.7.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CDD4129-3F89-4833-8789-4568CAE3B646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.7.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF2ED3A-B88A-49EE-9565-56C726447882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.7.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42579A3F-EDD8-44F7-9436-1B386FDC604E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.7.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C689CFA4-A9F3-4B8B-80CB-F948E8C32C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:2.7.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E503C019-4E96-4D4F-B9BD-327E3C22DE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:3.0.stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D53774A-4523-4C9F-8FDF-BF39C4F32C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:3.0.stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA0CA70-79A0-4AC6-ADE3-99DCE8FB09BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:3.0.stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4048B18-219C-4D23-979B-C32A4F84E088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:3.0.stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBD6F80-63F1-4B6D-BBCD-240D8A18C429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:3.0.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A83314-4628-4352-BE10-89ED4B228E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:3.0.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81FD6F1C-ECE2-4ADA-8230-49500AE0AB32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:3.0.stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7A5792-DAD0-4E84-90EB-E92873DB763C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:3.0.stable8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F2786AA-F9B6-4825-9C2E-9548D6D2A3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:3.0.stable9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB49168-03B3-43D5-9076-6FE206EF42A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:3.0.stable10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6CF222F-1A8E-4351-BBD4-5BC39B5BF2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:3.0.stable11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38092277-47D4-4B83-BF32-DE595CDE7B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:3.0.stable12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6ED346B-D762-481D-92FA-260C2C5A915A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73060F28-ABCE-4428-8F12-772E4D312DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:3.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A006818-7901-4391-BFF7-9AD1AF8DAFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:3.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF28EA4-2847-4176-81C1-C7A2007D14E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:3.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAD9B4B-0856-458B-AB21-15D0420A7F67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid:3.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54E9F64C-363B-4702-996F-14F66450D6B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33731",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34467",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-38.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500653/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33604",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squid-cache.org/Advisories/SQUID-2009_1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.7/changesets/12432.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=484246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-38.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500653/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Advisories/SQUID-2009_1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v2/2.7/changesets/12432.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=484246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the version of Squid as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.",
        "lastModified" : "2009-02-09T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-09T01:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in admin/admin_login.php in Online Grades 3.2.4 allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pword parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades SQL en admin/admin_login.php en Online Grades v3.2.4, permite a atacantes remotos la ejecución de comandos SQL de su elección a través de los parámetros (1)\"uname\" o(2)\"pword\". NOTA: el origen de esta información es desconocido; los detalles han sido obtenidos a partir de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlinegrades:online_grades:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7852F48-E340-4582-A818-44179F683A65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33767",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-09T16:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_82, uses an improper arena when allocating minor numbers for sockets, which allows local users to cause a denial of service (32-bit application failure and login outage) by opening a large number of sockets."
      }, {
        "lang" : "es",
        "value" : "La  implementación IP en Sun Solaris v8 a la v10 y OpenSolaris anterior a snv_82, emplea una arena inadecuada cuando al asignar números secundarios para sockets, lo que permite a usuarios locales provocar una denegación de servicio (fallo en la aplicación 32-bit o parada de login) mediante la apertura de un gran número de sockets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_81",
            "matchCriteriaId" : "BCD3ED13-F6CB-49D7-8A6D-5DEE4F3E6E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_81",
            "matchCriteriaId" : "82C626F1-9D96-48BE-BF2B-8F146EFE6118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DBDFD8C-371E-42D2-9635-D8CDD1775984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail.opensolaris.org/pipermail/onnv-notify/2008-January/013262.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33751",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-116965-34-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-248026-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-042.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mail.opensolaris.org/pipermail/onnv-notify/2008-January/013262.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-116965-34-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-248026-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-042.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-09T17:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bugzilla 2.x before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote authenticated users to conduct cross-site scripting (XSS) and related attacks by uploading HTML and JavaScript attachments that are rendered by web browsers."
      }, {
        "lang" : "es",
        "value" : "Bugzilla v2.x anterior a v2.22.7, v3.0 anterior a v3.0.7, v3.2 anterior a v3.2.1 y v3.3 anterior a v3.3.2 ; permite a usuarios autenticados en remoto provocar una secuencia de comandos en sitios cruzados (XSS) y ataques relacionados al subir adjuntos HTML y JavaScript que son interpretados por los navegadores Web."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893741D3-062B-45F9-B5A3-1B81058E7FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D53B5F-6AEE-4192-B838-E1DA92C59285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1883A98C-E595-4F3C-87BF-A63393F9F561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A4B035-B73E-48E9-BBB9-83219F5D2A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9452C271-2812-4775-8396-394C642EACFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D351AF2-C0AB-4BB3-8692-677A3025A615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B900D9A7-913A-4176-90CF-C7C3B09A4261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B692910E-633D-4A88-B245-56A2B58DD4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86EE5DB-442B-4C78-8152-AF1048C6A974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B82A1A-56EB-41D5-8619-2A717E3A6ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A0406C-AAF2-4A4C-9567-E21DF1B6C46E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64434BFC-DDC0-4C7D-B578-472B0610C89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30F28D9-B000-4C26-A911-5E1B8A867BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A123F78-A671-4FB5-AE78-83762E9323C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28C34288-A326-4B71-99B0-DA9FFD28160F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73648879-BB08-4BE4-A7FF-1E8DF4E264B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4CC7E4-617D-498E-A367-374478158FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2FC5C7-B218-4B87-9805-F90AC0E7A281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCDA64F-C49A-4F5B-B285-4079D8E3A499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930AF809-CA52-41CB-985A-066B8239C7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ED3457-CC21-4DB3-931F-677F723E1B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8711D3-55CF-4131-BBAC-6BE07068219F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D7EA7C-B401-4F5A-AC08-2199DD117403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2DDC7C-CD2B-4597-A5E0-266A884958FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4869A709-AF79-49BD-A7D2-D48A8D79A085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC72143-27C3-498F-AFAB-98AE043C0545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5E8E72-D493-460D-B5A0-F90C291398A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04885D31-09F3-455F-A1A9-815E182ABCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92BCD546-2A50-4F43-935C-B68459EE894E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C535BAB7-6146-440B-ADBD-51007585CFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6BA7E8-DEC7-4D94-B9F9-B70EC39FD892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9130B6B-764B-4B83-A2BD-E16013682875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7A5111-8729-48DF-B308-7A489BEFA6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E24C39-0E61-4A57-B93F-F0ABF4CEAEEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725BD7BE-1769-4032-ADA8-9ED15528C770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239D70F4-7D86-4A57-ACEF-440F68994FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEE2C94-DA69-4A78-A15F-538383A7460E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CD64E-7FAA-40DC-B36E-8B7EB9D620FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A749C7AB-6F60-469C-BD95-759205DDA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "196B7CD8-D721-4CFB-B126-78758128E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA9DE63-9951-4FE0-80BE-0F6F197303D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0CEDD02-1CB8-4D5B-B82B-E300B4E39065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E27101B-7985-4412-A14F-9ED11E4C874C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A74E8A2-223E-4877-989E-494362B513E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CAFB45-B115-4492-9919-60223304BB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3F7C44-C734-419B-AB62-3AD52554FC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2053CFB4-602E-4141-BB3D-A440E2A31D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31ACBA13-AC13-4469-862F-B3DD2327B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9EC243-3E25-4234-A88A-FDD5B594BFBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2969731-8256-431B-9356-4BC873D98F6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1C166E42-9B36-4883-B738-EEBEF3056D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5177876-0FEC-481B-815F-84AF53968644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38566A-07F1-4F21-BAC1-259F844DC15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1684B8-3060-4139-BC06-707F27A05958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF32C74C-3EA3-4E1F-BADA-BB4A92068266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D569A750-C649-4D40-89AB-D29773E66F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B69FA8-1182-46F1-952F-4610288ED409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C36666-518F-4956-816A-940930425955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF2DF96F-E45E-45AF-85E5-E939F923EC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C6713F-01ED-4AE9-AE42-89926067E6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB5010D-37A3-4B6E-92B6-6F41A3708851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB09719-122F-4D25-B680-18029D5D9DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF585D92-9FAF-4858-A956-68AF77227333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F248EA4D-1A39-40FD-8D3C-9701D36FD6B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2962084-F778-4574-8105-8C5A260CCBD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bugzilla.org/security/2.22.6/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bugzilla.org/security/2.22.6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-09T17:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote attackers to perform bug updating activities as other users via a link or IMG tag to process_bug.cgi."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Bugzilla v3.2 anteriores a v3.2.1, v3.3 anteriores a 3.3.2 y otras versiones anteriores a v3.2 que permite a los atacantes remotos desarrollar un fallo actualizando actividades como otros usuarios a través de un enlace o etiqueta IMG a process_bug.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893741D3-062B-45F9-B5A3-1B81058E7FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D53B5F-6AEE-4192-B838-E1DA92C59285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1883A98C-E595-4F3C-87BF-A63393F9F561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A4B035-B73E-48E9-BBB9-83219F5D2A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9452C271-2812-4775-8396-394C642EACFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D351AF2-C0AB-4BB3-8692-677A3025A615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B900D9A7-913A-4176-90CF-C7C3B09A4261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B692910E-633D-4A88-B245-56A2B58DD4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86EE5DB-442B-4C78-8152-AF1048C6A974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B82A1A-56EB-41D5-8619-2A717E3A6ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A0406C-AAF2-4A4C-9567-E21DF1B6C46E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64434BFC-DDC0-4C7D-B578-472B0610C89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30F28D9-B000-4C26-A911-5E1B8A867BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A123F78-A671-4FB5-AE78-83762E9323C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28C34288-A326-4B71-99B0-DA9FFD28160F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73648879-BB08-4BE4-A7FF-1E8DF4E264B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4CC7E4-617D-498E-A367-374478158FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2FC5C7-B218-4B87-9805-F90AC0E7A281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCDA64F-C49A-4F5B-B285-4079D8E3A499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930AF809-CA52-41CB-985A-066B8239C7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ED3457-CC21-4DB3-931F-677F723E1B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8711D3-55CF-4131-BBAC-6BE07068219F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D7EA7C-B401-4F5A-AC08-2199DD117403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2DDC7C-CD2B-4597-A5E0-266A884958FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4869A709-AF79-49BD-A7D2-D48A8D79A085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC72143-27C3-498F-AFAB-98AE043C0545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5E8E72-D493-460D-B5A0-F90C291398A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04885D31-09F3-455F-A1A9-815E182ABCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92BCD546-2A50-4F43-935C-B68459EE894E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C535BAB7-6146-440B-ADBD-51007585CFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6BA7E8-DEC7-4D94-B9F9-B70EC39FD892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9130B6B-764B-4B83-A2BD-E16013682875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7A5111-8729-48DF-B308-7A489BEFA6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E24C39-0E61-4A57-B93F-F0ABF4CEAEEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725BD7BE-1769-4032-ADA8-9ED15528C770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239D70F4-7D86-4A57-ACEF-440F68994FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEE2C94-DA69-4A78-A15F-538383A7460E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CD64E-7FAA-40DC-B36E-8B7EB9D620FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A749C7AB-6F60-469C-BD95-759205DDA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "196B7CD8-D721-4CFB-B126-78758128E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA9DE63-9951-4FE0-80BE-0F6F197303D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0CEDD02-1CB8-4D5B-B82B-E300B4E39065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E27101B-7985-4412-A14F-9ED11E4C874C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A74E8A2-223E-4877-989E-494362B513E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CAFB45-B115-4492-9919-60223304BB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3F7C44-C734-419B-AB62-3AD52554FC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2053CFB4-602E-4141-BB3D-A440E2A31D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31ACBA13-AC13-4469-862F-B3DD2327B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9EC243-3E25-4234-A88A-FDD5B594BFBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2969731-8256-431B-9356-4BC873D98F6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1C166E42-9B36-4883-B738-EEBEF3056D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5177876-0FEC-481B-815F-84AF53968644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38566A-07F1-4F21-BAC1-259F844DC15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1684B8-3060-4139-BC06-707F27A05958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF32C74C-3EA3-4E1F-BADA-BB4A92068266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D569A750-C649-4D40-89AB-D29773E66F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B69FA8-1182-46F1-952F-4610288ED409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C36666-518F-4956-816A-940930425955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF2DF96F-E45E-45AF-85E5-E939F923EC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C6713F-01ED-4AE9-AE42-89926067E6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB5010D-37A3-4B6E-92B6-6F41A3708851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB09719-122F-4D25-B680-18029D5D9DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF585D92-9FAF-4858-A956-68AF77227333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F248EA4D-1A39-40FD-8D3C-9701D36FD6B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2962084-F778-4574-8105-8C5A260CCBD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bugzilla.org/security/2.22.6/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bugzilla.org/security/2.22.6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-09T17:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Bugzilla 2.22 before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete keywords and user preferences via a link or IMG tag to (1) editkeywords.cgi or (2) userprefs.cgi."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Bugzilla v2.22 antes de v2.22.7, v3.0 antes de v3.0.7, 3.2 antes de v3.2.1 y v3.3 antes de v3.3.2, permite a atacantes remotos borrar las palabras clave y las preferencias de usuario mediante un enlace o una etiqueta IMG a (1) editkeywords.cgi o (2) userprefs.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893741D3-062B-45F9-B5A3-1B81058E7FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D53B5F-6AEE-4192-B838-E1DA92C59285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1883A98C-E595-4F3C-87BF-A63393F9F561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A4B035-B73E-48E9-BBB9-83219F5D2A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9452C271-2812-4775-8396-394C642EACFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D351AF2-C0AB-4BB3-8692-677A3025A615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B900D9A7-913A-4176-90CF-C7C3B09A4261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B692910E-633D-4A88-B245-56A2B58DD4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86EE5DB-442B-4C78-8152-AF1048C6A974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B82A1A-56EB-41D5-8619-2A717E3A6ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A0406C-AAF2-4A4C-9567-E21DF1B6C46E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64434BFC-DDC0-4C7D-B578-472B0610C89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30F28D9-B000-4C26-A911-5E1B8A867BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A123F78-A671-4FB5-AE78-83762E9323C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28C34288-A326-4B71-99B0-DA9FFD28160F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73648879-BB08-4BE4-A7FF-1E8DF4E264B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4CC7E4-617D-498E-A367-374478158FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2FC5C7-B218-4B87-9805-F90AC0E7A281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCDA64F-C49A-4F5B-B285-4079D8E3A499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930AF809-CA52-41CB-985A-066B8239C7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ED3457-CC21-4DB3-931F-677F723E1B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8711D3-55CF-4131-BBAC-6BE07068219F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D7EA7C-B401-4F5A-AC08-2199DD117403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2DDC7C-CD2B-4597-A5E0-266A884958FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4869A709-AF79-49BD-A7D2-D48A8D79A085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC72143-27C3-498F-AFAB-98AE043C0545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5E8E72-D493-460D-B5A0-F90C291398A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04885D31-09F3-455F-A1A9-815E182ABCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92BCD546-2A50-4F43-935C-B68459EE894E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C535BAB7-6146-440B-ADBD-51007585CFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6BA7E8-DEC7-4D94-B9F9-B70EC39FD892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9130B6B-764B-4B83-A2BD-E16013682875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7A5111-8729-48DF-B308-7A489BEFA6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E24C39-0E61-4A57-B93F-F0ABF4CEAEEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725BD7BE-1769-4032-ADA8-9ED15528C770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239D70F4-7D86-4A57-ACEF-440F68994FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEE2C94-DA69-4A78-A15F-538383A7460E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CD64E-7FAA-40DC-B36E-8B7EB9D620FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A749C7AB-6F60-469C-BD95-759205DDA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "196B7CD8-D721-4CFB-B126-78758128E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA9DE63-9951-4FE0-80BE-0F6F197303D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0CEDD02-1CB8-4D5B-B82B-E300B4E39065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E27101B-7985-4412-A14F-9ED11E4C874C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A74E8A2-223E-4877-989E-494362B513E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CAFB45-B115-4492-9919-60223304BB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3F7C44-C734-419B-AB62-3AD52554FC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2053CFB4-602E-4141-BB3D-A440E2A31D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31ACBA13-AC13-4469-862F-B3DD2327B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9EC243-3E25-4234-A88A-FDD5B594BFBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2969731-8256-431B-9356-4BC873D98F6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1C166E42-9B36-4883-B738-EEBEF3056D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5177876-0FEC-481B-815F-84AF53968644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38566A-07F1-4F21-BAC1-259F844DC15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1684B8-3060-4139-BC06-707F27A05958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF32C74C-3EA3-4E1F-BADA-BB4A92068266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D569A750-C649-4D40-89AB-D29773E66F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B69FA8-1182-46F1-952F-4610288ED409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C36666-518F-4956-816A-940930425955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF2DF96F-E45E-45AF-85E5-E939F923EC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C6713F-01ED-4AE9-AE42-89926067E6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB5010D-37A3-4B6E-92B6-6F41A3708851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB09719-122F-4D25-B680-18029D5D9DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF585D92-9FAF-4858-A956-68AF77227333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F248EA4D-1A39-40FD-8D3C-9701D36FD6B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2962084-F778-4574-8105-8C5A260CCBD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bugzilla.org/security/2.22.6/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=466692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=472362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bugzilla.org/security/2.22.6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=466692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=472362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-09T17:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Bugzilla 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete shared or saved searches via a link or IMG tag to buglist.cgi."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en versiones de Bugzilla 3.0 anteriores a 3.0.7, 3.2 antes de 3.2.1, y 3.3 antes de 3.3.2 permite a atacantes remotos eliminar búsquedas guardadas o compartidas a través de un enlace o una etiqueta IMG a buglist.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C36666-518F-4956-816A-940930425955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF2DF96F-E45E-45AF-85E5-E939F923EC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C6713F-01ED-4AE9-AE42-89926067E6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB5010D-37A3-4B6E-92B6-6F41A3708851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB09719-122F-4D25-B680-18029D5D9DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF585D92-9FAF-4858-A956-68AF77227333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F248EA4D-1A39-40FD-8D3C-9701D36FD6B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2962084-F778-4574-8105-8C5A260CCBD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bugzilla.org/security/2.22.6/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=466748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bugzilla.org/security/2.22.6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=466748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-09T17:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Bugzilla 2.17 to 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete unused flag types via a link or IMG tag to editflagtypes.cgi."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Bugzilla v2.17 hasta v2.22.7, v3.0 anterior a v3.0.7, v3.2 anterior a v3.2.1, y v3.3 anterior a v3.3.2 permite a atacantes remotos eliminar tipos de banderas no utilizadas a través de un enlace o una etiqueta IMG a editflagtypes.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2FC5C7-B218-4B87-9805-F90AC0E7A281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCDA64F-C49A-4F5B-B285-4079D8E3A499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ED3457-CC21-4DB3-931F-677F723E1B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8711D3-55CF-4131-BBAC-6BE07068219F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D7EA7C-B401-4F5A-AC08-2199DD117403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2DDC7C-CD2B-4597-A5E0-266A884958FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4869A709-AF79-49BD-A7D2-D48A8D79A085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC72143-27C3-498F-AFAB-98AE043C0545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5E8E72-D493-460D-B5A0-F90C291398A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04885D31-09F3-455F-A1A9-815E182ABCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92BCD546-2A50-4F43-935C-B68459EE894E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C535BAB7-6146-440B-ADBD-51007585CFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6BA7E8-DEC7-4D94-B9F9-B70EC39FD892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.6\\+:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E6F17A-7292-4640-A5E6-59865D1CDD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725BD7BE-1769-4032-ADA8-9ED15528C770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239D70F4-7D86-4A57-ACEF-440F68994FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEE2C94-DA69-4A78-A15F-538383A7460E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CD64E-7FAA-40DC-B36E-8B7EB9D620FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A749C7AB-6F60-469C-BD95-759205DDA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "196B7CD8-D721-4CFB-B126-78758128E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA9DE63-9951-4FE0-80BE-0F6F197303D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0CEDD02-1CB8-4D5B-B82B-E300B4E39065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E27101B-7985-4412-A14F-9ED11E4C874C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A74E8A2-223E-4877-989E-494362B513E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CAFB45-B115-4492-9919-60223304BB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3F7C44-C734-419B-AB62-3AD52554FC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695036D1-994C-451E-8D53-0A345702E4D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2053CFB4-602E-4141-BB3D-A440E2A31D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31ACBA13-AC13-4469-862F-B3DD2327B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2969731-8256-431B-9356-4BC873D98F6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1C166E42-9B36-4883-B738-EEBEF3056D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5177876-0FEC-481B-815F-84AF53968644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38566A-07F1-4F21-BAC1-259F844DC15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1684B8-3060-4139-BC06-707F27A05958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF32C74C-3EA3-4E1F-BADA-BB4A92068266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D569A750-C649-4D40-89AB-D29773E66F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B69FA8-1182-46F1-952F-4610288ED409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9F54A-15A7-4899-B695-D9D8B96C4A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BD56D9C0-38C6-4679-8104-1A0B88B71C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF2DF96F-E45E-45AF-85E5-E939F923EC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C6713F-01ED-4AE9-AE42-89926067E6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB5010D-37A3-4B6E-92B6-6F41A3708851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB09719-122F-4D25-B680-18029D5D9DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF585D92-9FAF-4858-A956-68AF77227333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F248EA4D-1A39-40FD-8D3C-9701D36FD6B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "170EB43B-9488-4E25-9401-B84DE838247B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B1ED7682-A315-4F92-9F9F-38290BCC058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2962084-F778-4574-8105-8C5A260CCBD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bugzilla.org/security/2.22.6/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=466692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bugzilla.org/security/2.22.6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=466692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-09T17:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bugzilla 3.2.1, 3.0.7, and 3.3.2, when running under mod_perl, calls the srand function at startup time, which causes Apache children to have the same seed and produce insufficiently random numbers for random tokens, which allows remote attackers to bypass cross-site request forgery (CSRF) protection mechanisms and conduct unauthorized activities as other users."
      }, {
        "lang" : "es",
        "value" : "Bugzilla v3.2.1, v3.0.7 y v3.3.2, cuando se ejecuta bajo mod_perl, llama a la función srand en momento de iniciarse, lo que provoca que los hijos de Apache tengan la misma \"semilla\"  y produzca insuficientes números aleatorios para los elementos aleatorios, lo que permite a atacantes remotos saltarse el mecanismo de protección \"cross-site request forgery\" (CSRF) y realizar actividades no autorizadas como si fuéramos otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA67823-C9D9-4C5B-A4ED-669E6F1851C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B5A433-526F-436E-9FCD-B71E661180FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF288A74-070E-4EB4-BB92-7D4D41635DD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bugzilla.org/security/3.0.7/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bugzilla.org/security/3.0.7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-09T20:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Mahara before 1.0.9 allows remote attackers to inject arbitrary web script or HTML via a crafted forum post."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Mahara anterior a v1.0.9, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de un mensaje manipulado en el foro."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.8",
            "matchCriteriaId" : "4837AA98-82C6-4F5A-B02E-B89B1E08ADE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D7FB07-E62A-40FE-A7BE-C809E6460585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62BA0A1B-26BB-47B0-AA9E-5730E433675A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3362126C-F6CB-4AB8-9490-C19E43D509D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B49D797-AF1B-4F7E-A71D-AABD0F802912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18048333-3E64-4AB4-9F20-2B1B8E7AB9FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68167317-977B-48EE-9320-2A4539A93B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB25DF09-D88F-4633-9956-D64E3497153F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32430EE-5F2B-4936-A297-2DF55CC22937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC0259C-E628-4BBA-9D97-41A130B1E741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "974F2D63-488C-41D7-A627-BF9B085A8D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26420D4-20D8-4D6D-88B5-C74F39B88720"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mahara.org/interaction/forum/topic.php?id=198",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mahara.org/interaction/forum/topic.php?id=198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-09T20:30:02.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Phorum before 5.2.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Phorum anterior a v5.2.10 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:*:rc1:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.10",
            "matchCriteriaId" : "2536ED84-80A0-44D3-B16C-DBF47B901C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "740F974F-D679-472C-966A-3E4C334E3C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D7E47E-10F5-4F50-8940-951B2C0011CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16042FAE-7370-425C-8810-4F9363B7CAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.1_pre:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A25A6F-62CA-4C76-9D4C-821B1E15FB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6247DB0C-37B6-44EF-8B92-8CFCDA537039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C46298C-2492-4102-A264-E2A1D45AD423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2AD59F-42DF-407A-8FCA-E6E0067A2B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E1044B-2101-4719-8749-17DD22F46055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E17261-A010-4929-99E5-A2511F205B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A461E2EB-9964-44DE-9C25-562D239201F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB6A4EC-D351-4EF8-8C6A-294A47DDCCC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B10230A-7D72-418E-8A29-E9F20762C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "368C8142-836A-4FDB-9CD8-385FE06B9A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1470761E-DA6E-4D2A-B226-1ED782FB3654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB3ED23-821D-42FA-A24F-F2EDDA43D7B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88BA8736-5998-42E0-81E4-76E3669F8112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9811C9-EE92-4115-B81F-7A3030390BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A196AD2-7E48-40F4-923E-437FA76C97D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D147F0-FF83-4FF4-AEF1-71366E874876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D87C46-D9EC-418B-9C8C-71E7149C72D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F6BE0A-7E2F-457D-B4BA-6BAE1B44E7D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.2b3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C990B390-4768-41B0-BB8B-A56C2524623F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6650BE9D-5F4B-4B22-BD7E-ABCC067D5455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8E0CA9-F6D4-4DD3-A3EA-F3A40965261B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F67B233-3087-43E6-94F2-5DF39FAA36B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7725AEF3-1C47-46B4-A35E-97152A84E731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F6C52C-F602-4C2A-8C8F-4A19DA41186F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F290E5-6508-4F62-8572-31B33750D341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D941B5F-B704-4596-8739-BFE34225DBA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF13359B-162A-41DF-BB4F-DDD6CA2752F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1AE057-A85C-49D9-981A-3314BD945D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC1F375-34EF-4FEC-B0F4-6A081B6A3B53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E532A66-A12D-48DD-B405-2345E5B715C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26E2C5A7-8B52-4BDF-80F1-5D45AEBE6E25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8DF602-0A22-45A9-A286-C237180701C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB109C36-BF0F-41E3-A1F4-0DB264BD4A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A31EA2D-2B01-4928-9B3E-9D666FD2758B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87DE16C-7C68-4DA8-9BD9-C61D74E61D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.4a_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5001527E-FE93-4BE7-BF79-7717D64CAF2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15ED599-6B84-4E03-8BA4-36E1D55F1F75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.6_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D491A2B9-949A-4A56-A41F-23A222C03BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.7_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CFDB0B-6FBD-49F3-8238-81E92661297E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.7a_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC73A23F-2399-41B0-B6BD-289DF63F2C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.8_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD59DD99-1FC7-498B-9EA1-1AA8FE132EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1655572D-7D56-4D9D-9E0F-A67DF23FC934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387E0B83-B240-4922-8C57-CE0CDB000888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5B09FF-92DF-4F8D-9A7B-E5086E2B954D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02321D7-2F3E-40F9-9A76-CFF339C93199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B908D49-F64A-488F-95F3-163AB9DAB02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.13a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A26F8E5-0FFE-473D-BDA1-2D5340B5A4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF0655C-7C83-4363-A444-993B35D7A7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.14a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D0F7C4-902D-4186-8EFF-3876D6D6633E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F87C476-6A55-4B19-97B0-24204E96A63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.15a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F8F544-1B09-4B22-B1F3-2CD1E8D7AECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACC6DD4-384B-44DE-9BC7-6F1DD374E6B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D0AC3E-97F7-4A13-8E65-7E424D055E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.17a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D184385A-763A-4971-8051-20564D020787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B508F8-CFCC-4841-BF70-1ABB28EB1ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C365D62D-ACB1-44D3-935D-F79A79642684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B45305-FF8B-42F8-A726-F8604BADC323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F4AB87-2D63-4208-8982-BBF978392285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149A6B5A-84FC-4B6F-B053-0AC881BC03D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375346D4-CEA4-4BAE-83DF-639E86C3DECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6E0429-3241-47B0-B853-66D3167CE4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "121F0F96-F901-479F-A64F-3DAE1AC0AFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F837829B-28E5-41B3-9A23-C4D4A7FE636A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700B9165-B956-4CAB-B980-42885FFA418F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C4E79D-EBE6-456C-A74F-B94F32736383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3596808-8399-4EA9-B885-5443CA91C3C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.2.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B5409C8A-8B57-48FB-B01E-411C00153E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.2.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "74DB422C-E79C-46B2-BB52-8C457822A0BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.2.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "37881B2C-0CD0-4E2A-A11D-9758772640E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE61C7-E1DD-4DA9-B433-0C698C482C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5E063A-F59F-4CEB-9950-2FE8D25FF9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A35F3F-6BBF-4B84-AE19-870F03C1E9DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.phorum.org/phorum5/read.php?64%2C136129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phorum.org/phorum5/read.php?64%2C136129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-09T20:30:02.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon, which allows local users to receive messages that were intended for the Wicd daemon, possibly including credentials."
      }, {
        "lang" : "es",
        "value" : "El fichero de configuración DBus de Wicd anteriores a v1.5.9 permite a cualquier usuario tomar posesión del fichero org.wicd.daemon, lo que permite a usuarios locales recibir mensajes que estaban destinados al demonio Wicd, posiblemente incluso credenciales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_paleino:wicd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.8",
            "matchCriteriaId" : "DA9F8B78-6C51-4F0C-965E-831C81977BFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_paleino:wicd:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06AFC460-E683-4047-8C2A-1E9AC377917B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_paleino:wicd:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D411ED-67BF-45A0-BE8A-E981CAB0F4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_paleino:wicd:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45632B83-B5C7-42AC-9B8B-031AB0D6417A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_paleino:wicd:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52DCBA8B-FD94-4184-985A-E054DEC04671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_paleino:wicd:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F48E42D-AEEA-41EC-BCFB-5581CEA05B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_paleino:wicd:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "288E7A59-D1BA-45D7-A30A-9F5F56E5A192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_paleino:wicd:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2265EFEA-CEF9-42E0-A538-8D8FAE5F351C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_paleino:wicd:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7769F3E0-EF1A-480C-845E-7178F2939ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_paleino:wicd:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A39899-C5D7-47D0-9B9C-6ADD1F756B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_paleino:wicd:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27ED667E-BD1E-4352-A5F0-DB70B86D600D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_paleino:wicd:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B74048-746F-4DF7-913D-3F0163FC8FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_paleino:wicd:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9E268AD-D2A5-48DD-A311-6C2CD8A67149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_paleino:wicd:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5FE6B55-58EA-403E-AA60-2079A559D2CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bazaar.launchpad.net/~wicd-devel/wicd/trunk/revision/222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=194573&release_id=659059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/06/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bazaar.launchpad.net/~wicd-devel/wicd/trunk/revision/222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=194573&release_id=659059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/06/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T01:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions before 1.3.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a .gro file containing a long string."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de pila basado en búfer en la función String_parse::get_nonspace_quoted en lib-src/allegro/strparse.cpp en Audacity 1.2.6 y otras versiones anteriores a 1.3.6 permite a atacantes remotos provocar una denegación de servicio (provocando una caída de la aplicación) y, posiblemente, ejecutar código arbitrario a través de un archivo .GRO que contenga una cadena excesivamente larga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audacityteam:audacity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.6",
            "matchCriteriaId" : "926F0875-225C-4BCA-BB60-23914F145448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=253493",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://n2.nabble.com/Audacity-%22String_parse::get_nonspace_quoted%28%29%22-Buffer-Overflow-td2139537.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51070",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/33356",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33090",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0008",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7634",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=253493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://n2.nabble.com/Audacity-%22String_parse::get_nonspace_quoted%28%29%22-Buffer-Overflow-td2139537.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/51070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/33356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T01:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Elecard MPEG Player 5.5 build 15884.081218 allows remote attackers to execute arbitrary code via a M3U file containing a long URL."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Elecard MPEG Player v5.5 Build 15884.081218; permite a atacantes remotos ejecutar código de su elección a través de un fichero M3U que contiene una URL larga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elecard:elecard_mpeg_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "E001E11B-B481-41FD-A0B5-B23367346AC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33355",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T01:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in SimpleIrcBot before 1.0 Stable has unknown impact and attack vectors related to an \"auth vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en SimpleIrcBot anterior a v1.0 Stable, tiene un impacto y vectores de ataques desconocidos relacionados con una \"auth vulnerability\" (vulnerabilidad de autenticación)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simpleircbot:simpleircbot:1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3861C62C-4FC0-4ECC-85F5-7C9A6FBCBA0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=249202&release_id=650796",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33127",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=249202&release_id=650796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T01:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in IT!CMS 2.1a and earlier allows remote attackers to execute arbitrary SQL commands via the Username."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en IT!CMS v2.1a y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través de Username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:martin_unzner:it\\!cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.21-alpha",
            "matchCriteriaId" : "5B8F714F-03F2-4D83-B927-0098EF3D478A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33139",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T01:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Portfol (com_portfol) 1.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the vcatid parameter in a viewcategory action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente Portfol (com_portfol) v1.2 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro vcatid en una acción viewcategory en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mivaco:com_portfol:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32AD197-0B74-4CC2-9195-D1924E89AC65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33218",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T01:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include/define.php in REALTOR 747 4.11 allows remote attackers to execute arbitrary PHP code via a URL in the INC_DIR parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivos PHP en include/define.php en REALTOR 747 v4.11 permite a atacantes remotos ejecutar código PHP de su elección a través de una dirección URL en el parámetro \"INC_DIR\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:it747:realtor_747:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE734A9-586F-4E74-A615-14FECCC0B23F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33227",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T01:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) log parameter to (a) logviewer.jsp and (b) log.jsp; (2) search parameter to (c) group-summary.jsp; (3) username parameter to (d) user-properties.jsp; (4) logDir, (5) maxTotalSize, (6) maxFileSize, (7) maxDays, and (8) logTimeout parameters to (e) audit-policy.jsp; (9) propName parameter to (f) server-properties.jsp; and the (10) roomconfig_roomname and (11) roomconfig_roomdesc parameters to (g) muc-room-edit-form.jsp.  NOTE: this can be leveraged for arbitrary code execution by using XSS to upload a malicious plugin."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos cruzados en Ignite Realtime Openfire  v3.6.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"log\" a (a) logviewer.jsp y (b) log.jsp; (2) \"search\" a (c) group-summary.jsp; (3) \"username\" a (d) user-properties.jsp; (4) \"logDir\", (5) \"maxTotalSize\", (6) \"maxFileSize\", (7) \"maxDays\", y (8) \"logTimeout\" a (e) audit-policy.jsp; (9) \"propName\" a (f) server-properties.jsp; y (10) \"roomconfig_roomname\" y (11) \"roomconfig_roomdesc\" a (g) muc-room-edit-form.jsp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ignite_realtime:openfire:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1D3E68-2F5C-4706-9677-8AD9FD964EC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33452",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/openfire-multiple-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.igniterealtime.org/issues/browse/JM-1506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499880/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/32935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/32937",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/32938",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/32939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/32940",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/32943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/32944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=254309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/openfire-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.igniterealtime.org/issues/browse/JM-1506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499880/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/32935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/32937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/32938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/32939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/32940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/32943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/32944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=254309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T01:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\\ (dot dot backslash) in the log parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en log.jsp en Ignite Realtime Openfire v3.6.2, permite a atacantes remotos leer ficheros de su elección a través de \"..\\\" en el parámetro \"log\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8691783F-7F3C-4264-9030-F89B607C35A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33452",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.igniterealtime.org/svn/repos/openfire/trunk/src/web/log.jsp",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.coresecurity.com/content/openfire-multiple-vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499880/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/32945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=257585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.igniterealtime.org/svn/repos/openfire/trunk/src/web/log.jsp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.coresecurity.com/content/openfire-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499880/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/32945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=257585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T01:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Virtual GuestBook (vgbook) 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to guestbook.mdb."
      }, {
        "lang" : "es",
        "value" : "Virtual GuestBook (vgbook) v2.1 almacena información sensible bajo el directorio raíz con un control de acceso insuficiente, lo que permite a atacantes remotos descargar el archivo de base de datos a través de una petición directa a guestbook.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minitdesign:virtual_guestbook:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "642EC70B-04D9-41E7-9DEF-AF610B0220C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/7744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T02:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to delete unauthorized forum posts via a link or IMG tag to post.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el código del foro de Moodle v1.7 anterior a v1.7.7, v1.8 anterior a v1.8.8 y v1.9 anterior a v1.9.4; permite a atacantes remotos eliminar los mensajes del foro no autorizados a través de un enlace o etiqueta IMG en post.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB16198E-A32D-4CFA-9CCE-65871596E6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFE9D24-24DB-49EA-B59E-AF9B47D46EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56551145-5213-4165-88C9-C351DACDD1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A589727E-92BB-40DA-8172-89279EB9B73C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E97539-A7CC-48D3-A897-ADE4BC194B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D19C1954-6330-449D-9101-378D5DBD122C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4A3A5D9-D96E-46B3-AC22-25045564EB96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF91F8EA-1737-4E11-9931-ACAFB4BC0018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E81E148-5710-439C-8A1A-884D27640AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B70465-F734-4C65-9790-0D83D03B7A16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F2602B-8ED3-4026-A9A4-31BE8BDC7724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F24649-B67F-4809-9F54-7B623AEF5A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.moodle.org/moodle/mod/forum/post.php?r1=1.154.2.14&r2=1.154.2.15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moodle.org/security/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/04/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.moodle.org/moodle/mod/forum/post.php?r1=1.154.2.14&r2=1.154.2.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://moodle.org/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/04/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T02:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in course/lib.php in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to inject arbitrary web script or HTML via crafted log table information that is not properly handled when it is displayed in a log report."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el archivo course/lib.php en Moodle v1.6 anteriores a la v1.6.9, v1.7 anteriores a v1.7.7, v1.8 anteriores a v1.8.8, y v1.9 anteriores a v1.9.4, que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de una tabla de información log manipulada que no está manejada adecuadamente cuando es mostrada en un informe log."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680CE396-5F61-409C-A152-4D1E1CB44EA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A0F31A-BB19-4B2C-A2CD-1DFA5FDF1C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98CA6482-0B84-463D-9C81-A92FFC06C9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794B997-0793-4465-B9BA-5BFF254D600A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06F4A1D8-65C5-4EDA-BCEC-CD267DE5C4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2A20C9-5FEF-4D91-AFA0-B49672CC8B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFEA024-4CA7-4975-802C-1BB9C099C164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E5E19D-BC58-478E-A584-6D260A5C5265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6C092A-2871-475E-AE53-DC02EB9C3FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB16198E-A32D-4CFA-9CCE-65871596E6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFE9D24-24DB-49EA-B59E-AF9B47D46EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56551145-5213-4165-88C9-C351DACDD1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A589727E-92BB-40DA-8172-89279EB9B73C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E97539-A7CC-48D3-A897-ADE4BC194B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D19C1954-6330-449D-9101-378D5DBD122C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4A3A5D9-D96E-46B3-AC22-25045564EB96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF91F8EA-1737-4E11-9931-ACAFB4BC0018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E81E148-5710-439C-8A1A-884D27640AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B70465-F734-4C65-9790-0D83D03B7A16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F2602B-8ED3-4026-A9A4-31BE8BDC7724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F24649-B67F-4809-9F54-7B623AEF5A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moodle.org/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/04/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://moodle.org/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/04/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T02:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Calendar export feature in Moodle 1.8 before 1.8.8 and 1.9 before 1.9.4 allows attackers to obtain sensitive information and conduct \"brute force attacks on user accounts\" via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la característica de exportar el Calendario (Calendar) de Moodle v1.8 anterior a v1.8.8 y v1.9 anterior a v1.9.4; permite a atacantes obtener información sensible y provocar \"ataques por fuerza bruta en las cuentas de los usuarios\" a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4A3A5D9-D96E-46B3-AC22-25045564EB96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF91F8EA-1737-4E11-9931-ACAFB4BC0018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E81E148-5710-439C-8A1A-884D27640AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B70465-F734-4C65-9790-0D83D03B7A16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F2602B-8ED3-4026-A9A4-31BE8BDC7724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F24649-B67F-4809-9F54-7B623AEF5A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moodle.org/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/04/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://moodle.org/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/04/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T02:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4, allows remote attackers to inject arbitrary web script or HTML via an HTML block, which is not properly handled when the \"Login as\" feature is used to visit a MyMoodle or Blog page."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en blocks/html/block_html.php en Snoopy v1.2.3, como la utilizada en el Moodle v1.6 anterior a v1.6.9, v1.7 anterior a v1.7.7, v1.8 anterior a v1.8.8, y v1.9 anterior a v1.9.4, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un bloqueo HTML que no es manejado correctamente cuando la característica \"Login as\" es utilizada para visitar una página MyMoodle o Blog."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snoopy:snoopy:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4635C311-F808-474C-BD91-36F1C1C7D3E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC97F31-15F5-48D9-8768-D3FE5C0BD6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB16198E-A32D-4CFA-9CCE-65871596E6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFE9D24-24DB-49EA-B59E-AF9B47D46EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56551145-5213-4165-88C9-C351DACDD1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A589727E-92BB-40DA-8172-89279EB9B73C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E97539-A7CC-48D3-A897-ADE4BC194B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D19C1954-6330-449D-9101-378D5DBD122C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4A3A5D9-D96E-46B3-AC22-25045564EB96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF91F8EA-1737-4E11-9931-ACAFB4BC0018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E81E148-5710-439C-8A1A-884D27640AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B70465-F734-4C65-9790-0D83D03B7A16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F2602B-8ED3-4026-A9A4-31BE8BDC7724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F24649-B67F-4809-9F54-7B623AEF5A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moodle.org/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/04/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://moodle.org/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/04/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:20.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the AgaviWebRouting::gen(null) method in Agavi 0.11 before 0.11.6 and 1.0 before 1.0.0 beta 8 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with certain characters that are not properly handled by web browsers that do not strictly follow RFC 3986, such as Internet Explorer 6 and 7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el método AgaviWebRouting::gen(null) en Agavi 0.11 anterior a v0.11.6  y v1.0 anterior v1.0.0 beta 8, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de una URL manipulada con ciertos caracteres que no son manejados adecuadamente por navegadores web que no siguen estrictamente el RFC 3986, como Internet Explorer 6 y 7."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5632C8D-6BE4-4EA1-A195-75B65D6CCCD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5298F6FA-FFB1-44F1-AA53-526A0A46AD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0920DDAB-14CE-482E-BE51-4CBC9A2FC5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "AE9D3982-0B46-4D99-8B3C-61174EE1CD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "AF58F03B-C62D-4173-815B-39FCBF3A6364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "355EE49E-DD95-4EE9-A988-7161C4F79738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "D9410CE4-5BB2-49F1-A996-9FBE4326D9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.0:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E18D45-843B-4BB8-9BF7-5C2FC67B0CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2CED3C5-8A5D-4FA3-BE30-CAEDB8BB1029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D4127B-31C7-43E5-83F7-B2857CB7EA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1F1800B4-62E0-4B2E-99D7-F1A6C4E68D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5BCA3D-7642-4D3D-8FAB-980CCC23D199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE90C4D-F2A8-4317-BB92-F7885A125672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1D60E305-C39C-4982-9E9A-52E6DA872BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F465C91A-EDEB-4F81-8564-415041FAEB4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD6A720-337D-4AD7-BB51-3F02124BF2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8B70F-B03C-4F6D-ACCA-F7C5D716C202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3B4E76-BF86-45BD-8EC6-B5614FACF3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD7CE36-8319-432A-98F5-CA014C577023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04A8EBEF-1312-487B-B90E-75967FD011DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "376968EF-1EBE-406D-8D59-CE280A39CF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8294A9-32C1-4234-BE11-6C06C8C4E885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC2DA0DA-0424-41E8-B999-FDE8034A2443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFF8A61-0ADC-499C-968A-154F38904D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:0.11.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "25C9BC9D-8FB5-460F-8C9E-472B7AB2F57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:1.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "3525B59A-F7B3-4D56-B2C0-5FE8AAA8F3CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:1.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CBA3F9-043B-4F8C-89C6-834179ECBD70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:1.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "E3D141D7-4714-4E86-AE15-12331BF50DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:1.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B9937A6-37EF-43D4-877E-FBDDF3AF8BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:1.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "C162718B-8F33-49F6-B0E2-C1A2561C239C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:1.0.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D29B16-C1EF-46C9-8C1E-0A76D62849D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agavi:agavi:1.0.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "B8769C6D-3C4F-4DC1-8A9D-B9430FA46F77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.agavi.org/post/75829956/agavi-0-11-6-released-fixes-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://blog.agavi.org/post/75830918/agavi-1-0-0-beta-8-released-fixes-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://trac.agavi.org/ticket/1019",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.agavi.org/post/75829956/agavi-0-11-6-released-fixes-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://blog.agavi.org/post/75830918/agavi-1-0-0-beta-8-released-fixes-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://trac.agavi.org/ticket/1019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:22.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in skin_shop/standard/2_view_body/body_default.php in TECHNOTE 7.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the shop_this_skin_path parameter, a different vector than CVE-2008-4138."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de archivo remoto PHP en skin_shop/standard/2_view_body/body_default.php en TECHNOTE 7.2, cuando está habilitado register_globals, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro shop_this_skin_path, un vector diferente a CVE-2008-4138."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:technote:technote:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A2DED9-58F5-4239-8931-D61A0B2CBDB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33732",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33592",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:22.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in bbcode.php in PHPbbBook 1.3 and 1.3h allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the l parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el archivo bbcode.php en PHPbbBook 1.3 y 1.3h que permite a los atacantes remotos incluir y ejecutar arbitrariamente archivos locales a través de ..(punto punto) en el parámetro l."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbbbook:phpbbbook:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139CAF78-EF69-45C7-A122-681F3477A589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbbbook:phpbbbook:1.3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "091ECD0F-BE6C-45F0-992D-70010C39D69A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33811",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33603",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:22.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an M3U file containing a long string in a URL."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Elecard AVC HD PLAYER v5.5.90116, permite a atacantes remotos ejecutar código de su elección a través de un fichero M3U que contiene una cadena larga en una URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elecard:elecard_avc_hd_player:5.5.90116:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C150976A-D90B-4485-AB87-DBF5F1B8AD28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33742",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33089",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:22.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in GRBoard 1.8, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) theme parameter to (a) 179_squarebox_pds_list/view.php, (b) 179_squarebox_minishop_expand/view.php, (c) 179_squarebox_gallery_list_pds/view.php, (d) 179_squarebox_gallery_list/view.php, (e) 179_squarebox_gallery/view.php, (f) 179_squarebox_board_swfupload/view.php, (g) 179_squarebox_board_expand/view.php, (h) 179_squarebox_board_basic_with_grcode/view.php, (i) 179_squarebox_board_basic/view.php, (j) 179_simplebar_pds_list/view.php, (k) 179_simplebar_notice/view.php, (l) 179_simplebar_gallery_list_pds/view.php, (m) 179_simplebar_gallery/view.php, and (n) 179_simplebar_basic/view.php in theme/; the (2) path parameter to (o) latest/sirini_gallery_latest/list.php; and the (3) grboard parameter to (p) include.php and (q) form_mail.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo PHP en GRBoard v1.8, cuando reguister_globals está activado y magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en los parámetros: (1) \"theme\" en (a) 179_squarebox_pds_list/view.php, (b) 179_squarebox_minishop_expand/view.php, (c) 179_squarebox_gallery_list_pds/view.php, (d) 179_squarebox_gallery_list/view.php, (e) 179_squarebox_gallery/view.php, (f) 179_squarebox_board_swfupload/view.php, (g) 179_squarebox_board_expand/view.php, (h) 179_squarebox_board_basic_with_grcode/view.php, (i) 179_squarebox_board_basic/view.php, (j) 179_simplebar_pds_list/view.php, (k) 179_simplebar_notice/view.php, (l) 179_simplebar_gallery_list_pds/view.php, (m) 179_simplebar_gallery/view.php, and (n) 179_simplebar_basic/view.php in theme/; (2) \"path\" en (o) latest/sirini_gallery_latest/list.php; y (3) \"grboard\" a (p) include.php y (q) form_mail.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sirini:grboard:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51DADED1-3A3E-456B-BD01-1B7B46A30601"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33812",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:23.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Dreampics Gallery Builder allows remote attackers to execute arbitrary SQL commands via the exhibition_id parameter in a gallery.viewPhotos action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Dreampics Gallery Builder permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"exhibition_id\" en una acción gallery.viewPhotos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dreampics:gallery_builder:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA47D07-227A-44F4-A3AA-B1D9D006433D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33730",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33596",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:23.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in photo.php in WEBalbum 2.4b allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el archivo photo.php en WEBalbum 2.4b que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-album:webalbum:2.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1389DDF-FE4C-4D41-A1F0-94FC873B846E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33590",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:23.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the user parameter (aka UserName field) or (2) the pass parameter (aka Pass field) to (a) admin/admin.asp or (b) the default URI under admin/.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en default.asp en MyDesign Sayac v2.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"user\" parameter (también conocido como campo UserName) o (2) \"pass\" (también conocido como campo Pass) a (a) admin/admin.asp o(b) la URI por defecto bajo admin/. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspindir:mydesign_sayac:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A40275-D28F-4F51-ACEC-5DD05D9BD3A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33771",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33593",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:23.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in admin/modules/aa/preview.php in Syntax Desktop 2.7 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the synTarget parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en admin/modules/aa/preview.php de Syntax Desktop v2.7, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un .. (punto punto) en el parámetro synTarget."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:syntax_desktop:syntax_desktop:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0B3FF8-8BA5-4AF8-A4DD-BB2D2BAC29EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33601",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:23.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in klim5.sys in Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008 allows local users to gain privileges via an IOCTL 0x80052110 call."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en klim5.sys de Kaspersky Anti-Virus for Workstations v6.0 y Anti-Virus 2008, permite a usuarios locales obtener privilegios a través de una llamada IOCTL 0x80052110."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:6.0:*:workstations:*:*:*:*:*",
            "matchCriteriaId" : "53049BB1-486B-4C01-A3F5-F900FAD33024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D2326C-7F5E-42DC-9C2C-216726D85924"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kartoffel.reversemode.com/downloads/kaspersky_klim5_plugin.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33788",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.reversemode.com/index.php?option=com_content&task=view&id=60&Itemid=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500606/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33561",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wintercore.com/advisories/advisory_W020209.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kartoffel.reversemode.com/downloads/kaspersky_klim5_plugin.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.reversemode.com/index.php?option=com_content&task=view&id=60&Itemid=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500606/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wintercore.com/advisories/advisory_W020209.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:23.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in BlazeVideo HDTV Player 3.5 and earlier allows remote attackers to execute arbitrary code via a long string in a playlist (aka .plf) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento del búfer basado en pila en BlazeVideo HDTV Player v3.5 y anteriores, permite a atacantes remotos ejecutar código de su elección a través de una cadena larga en el fichero playlist (también conocido como .plf)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blazevideo:hdtv_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "2D889D80-CA48-47F8-A8D9-1CE62CDC19B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blazevideo:hdtv_player:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278E480C-A195-497E-BCE3-9ABC43B76AA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:23.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Skalfa SkaLinks 1.5 allows remote attackers to execute arbitrary SQL commands via the Admin name field to the default URI under admin/."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Skalfa SkaLinks 1.5, permite a atacantes remotos ejecutar comandos SQL de su elección a través del campo Admin en la dirección URI que está en admin/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skalinks:skalinks:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC66BBC4-52DD-464A-AF57-456A7A0DC96F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33546",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:23.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pass parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en parents/login.php de Online Grades v3.2.4, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) uname o (2) pass."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlinegrades:online_grades:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7852F48-E340-4582-A818-44179F683A65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33767",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33576",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:23.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Grades 3.2.4 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function."
      }, {
        "lang" : "es",
        "value" : "CVE-2009-0453 v3.2.4, permite a atacantes remotos obtener información de la configuración a través de una petición directa a phpinfo.php, que llama a la función phpinfo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlinegrades:online_grades:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7852F48-E340-4582-A818-44179F683A65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33767",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:23.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in DMXReady Online Notebook Manager 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field.  NOTE: some third parties report inability to verify this issue."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en DMXReady Online Notebook Manager v1.1, permite a atacantes remos ejecutar comandos SQL de su elección a través de los campos (1)username o (2) password. NOTA: terceras partes han reportado la incapacidad para verificar esta cuestión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmxready:online_notebook_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EEBAFD8-3E33-4078-B5E1-894893E1BEE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33600",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:23.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in examples/example_clientside_javascript.php in patForms, as used in Sourdough 0.3.5, allows remote attackers to execute arbitrary PHP code via a URL in the neededFiles[patForms] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en examples/example_clientside_javascript.php de patForms, como se utiliza en Sourdough v0.3.5; permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro neededFiles[patForms]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourdough:sourdough:0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF579E3-A19F-4760-ADF1-14AB925A5900"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33569",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:23.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in AJA Portal 1.2 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter to admin/case.php in the (1) Contact_Plus and (2) Reviews modules, and (3) the module_name parameter to admin/includes/FANCYNLOptions.php in the Fancy_NewsLetter module."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en AJA Portal 1.2 que permite a los atacantes remotos incluir y ejecutar arbitrariamente archivos locales a través de una secuencia de salto de directorio en el parámetro currentlang para el archivo admin/case.php en los módulos (1) Contact_Plus y (2) Reviews, y (3) el parámetro module_name para el archivo admin/includes/FANCYNLOptions.php en el módulo Fancy_NewsLetter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magtrb:aja_portal:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEDBCE4-55BD-4C18-9951-840B1622AAC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33735",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33565",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/51709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:24.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Ware Support 1.x allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter (aka Username field) or (2) the pwd parameter (aka Password field).  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades SQL en admin/login_submit.php de Whole Hog Ware Support v1.x, permite a atacantes remotos la ejecución de comandos SQL de su elección a través de los parámetros (1)\"uid\" (también conocido como campo nombre de usuario) o(2)\"pwd\" (también conocido como campo password). NOTA: Algunos detalles han sido obtenidos a partir de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wholehogsoftware:ware_support:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BC1693-6008-46BA-A13B-E5FAECA7C94D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33777",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33564",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:24.063",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Password Protect: Enhanced 1.x allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter (aka Username field) or (2) the pwd parameter (aka Password field).  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en el archivo admin/login_submit.php en Whole Hog Password Protect: Enhanced 1.x, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del (1) parámetro uid (alias campo Username) o (2) el parámetro pwd (alias campo Password). NOTA: algunos de estos detalles ha sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wholehogsoftware:password_protect:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FB3BB5-35A5-4424-A2FA-C387559A5A0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33777",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0460",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:24.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie."
      }, {
        "lang" : "es",
        "value" : "Whole Hog Ware Support v1.x, permite a atacantes remotos evitar la autenticación y obtener acceso de administrador a través de un valor entero en la cookie adminid -identificador de administrador-."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wholehogsoftware:ware_support:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BC1693-6008-46BA-A13B-E5FAECA7C94D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33777",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33577",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:24.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie."
      }, {
        "lang" : "es",
        "value" : "Whole Hog Password Protect: Enhanced v1.x permite a atacantes remotos, saltarse la autenticación y obtener acceso administrativo a través de un valor entero en la cookie \"adminid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wholehogsoftware:password_protect:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FB3BB5-35A5-4424-A2FA-C387559A5A0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33777",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33577",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:24.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in customer_login_check.asp in ClickTech ClickCart 6.0 allow remote attackers to execute arbitrary SQL commands via (1) the txtEmail parameter (aka E-MAIL field) or (2) the txtPassword parameter (aka password field) to customer_login.asp. NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en el archivo customer_login_check.asp en ClickTech ClickCart 6.0 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del (1) parámetro txtEmail (alias campo E-MAIL) o (2) el parámetro txtPassword (alias campo password) para el archivo customer_login.asp. NOTA: algunos de estos detalles han sido obtenidos de información de terceros"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clicktech:clickcart:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A190DD-F722-421D-80B3-69B1ABCDAC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33774",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33575",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:24.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/header.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivos PHP en includes/header.php de Groone GLinks v2.1 permite a atacantes remotos ejecutar código PHP de su elección a través de una direccion URL en el parámetro \"abspath \"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groonesworld:glinks:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D96758-FA87-4E9B-9F38-05EDD93CAB3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33649",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33578",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:24.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en includes/header.php de Groone GBook v2.0, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro abspath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groonesworld:gbook:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFAC59B9-33E7-4524-A8C7-F3EDF89527DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33768",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:24.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SaveDoc method in the All_In_The_Box.AllBox ActiveX control in ALL_IN_THE_BOX.OCX in Synactis ALL In-The-Box ActiveX 3 allows remote attackers to create and overwrite arbitrary files via an argument ending in a '\\0' character, which bypasses the intended .box filename extension, as demonstrated by a C:\\boot.ini\\0 argument."
      }, {
        "lang" : "es",
        "value" : "El método SaveDoc en el control ActiveX  the All_In_The_Box.AllBox en ALL_IN_THE_BOX.OCX in Synactis ALL In-The-Box ActiveX 3, permite a atacantes remotos crear y sobrescribir archivos de su elección a través de un argumento con un carácter final '\\0', lo que evita los nombres de archivo con extensiones .box, como se ha demostrado con el argumento C:\\boot.ini\\0."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synactis:all_in_the_box.ocx:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6632DAA2-39AF-4B87-90C3-9360DF3651F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33728",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dsecrg.com/pages/vul/show.php?id=62",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33535",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dsecrg.com/pages/vul/show.php?id=62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0466",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:24.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Vivvo CMS before 4.1.1 allows remote attackers to inject arbitrary web script or HTML via a URI that triggers a 404 Page Not Found response."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Vivvo CMSanterior a v4.1.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de una URI que lanza un error 404 de página no encontrada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vivvo:vivvo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.0",
            "matchCriteriaId" : "2A334F2D-7DED-4C9D-965C-7351868F234E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vivvo:vivvo:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "629A0AD1-3F22-4491-A97C-D55BC77A29F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vivvo:vivvo:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B456221-5438-4008-9B0B-9EBC7E429461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vivvo:vivvo:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A98FF1A-EDD8-49F3-A268-DE559C74F6D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vivvo:vivvo:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2FB6FA-B889-416F-BBF8-80F07A0F125F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33368",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vivvo.net/changelog.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vivvo.net/changelog.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0467",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:24.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a deny_log manage action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Profense Web Application Firewall v2.6.2 y v2.6.3 permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del parámetro \"proxy\" en una acción de gestión \"deny_log\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armorlogic:profense_web_application_firewall:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7652A0-5B0C-481B-95E5-577D26590D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armorlogic:profense_web_application_firewall:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D2FE52-2198-4F06-A733-C9157501BDA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33739",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33523",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:24.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown the server, (2) send ping packets, (3) enable network services, (4) configure a proxy server, and (5) modify other settings via parameters in the query string."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo cross-site request forgery (CSRF) en el archivo ajax.html en Profense Web Application Firewall versiones 2.6.2 y 2.6.3, permiten a los atacantes remotos secuestrar la autenticación de administradores para peticiones que (1) apagan el servidor, (2) envían paquetes de ping, (3) habilitan servicios de red, (4) configuran un servidor proxy y (5) modifican otras configuraciones por medio de parámetros en la cadena de consulta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armorlogic:profense_web_application_firewall:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7652A0-5B0C-481B-95E5-577D26590D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armorlogic:profense_web_application_firewall:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D2FE52-2198-4F06-A733-C9157501BDA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33739",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33523",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T07:00:24.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in futomi's CGI Cafe Fulltext search CGI 1.1.2 allows remote attackers to gain administrative privileges via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en futomi's CGI Cafe Fulltext search CGI, permite a atacantes remotos obtener privilegios de administrador a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomis_cgi_cafe:fulltext_search_cgi:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA4126D-3EDB-49B5-A674-6F06E0FAE7D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN80771386/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000008.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.futomi.com/library/info/2009/20090123.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN80771386/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.futomi.com/library/info/2009/20090123.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0075",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-02-10T22:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka \"Uninitialized Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 7 no maneja adecuadamente los errores durante un intento de acceso a los objetos eliminados, esto permite a atacantes remotos ejecutar código de su elección a través de un documento HTML manipulado; está relacionado con CFunctionPointer y la inclusión de objetos de documentos. También se conoce como \"Vulnerabilidad de Corrupción de Memoria no Iniciada\"\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3527F41-A6ED-437D-9833-458A2C60C2A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "43D64F8D-975A-4A5B-BEDF-D27D65C96A29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "9012FF99-B2F1-42F5-8366-D5071B66F42D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "DBE4A4EA-A0DE-4FDE-B9EC-D8729E17A1F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "51160A46-6768-44D5-89CD-6DB9D2268A2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7211B5C5-6B6E-4A33-88BC-1D64CD684204"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:*:professional:*:*:*:x64:*",
            "matchCriteriaId" : "39DC2489-8FB9-4301-A966-268DE7D0A503"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:professional:*:*:*:x64:*",
            "matchCriteriaId" : "C551BCF9-358A-46F5-8592-E309D3EBC5F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51839",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33627",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-041A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0389",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-011/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6000",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8077",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8079",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8080",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8082",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://osvdb.org/51839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-041A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-011/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0076",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-02-10T22:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 7, when XHTML strict mode is used, allows remote attackers to execute arbitrary code via the zoom style directive in conjunction with unspecified other directives in a malformed Cascading Style Sheets (CSS) stylesheet in a crafted HTML document, aka \"CSS Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 7, cuando usamos  XHTML en modo estricto, permite a atacantes remotos ejecutar código de su elección a través de la directiva \"zoom style\" en conjunción con otras directivas no especificadas en una hoja de estilo en cascada (CSS)en un documento HTML manipulado, también conocido como \"Vulnerabilidad de Corrupción de Memoria CSS\". \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "E0BBA081-24D5-4990-882F-69CB05CC28CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-041A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0389",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-012/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6081",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-041A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-012/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0095",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-02-10T22:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka \"Memory Validation Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Office Visio 2002 SP2, 2003 SP3 y 2007 SP1 no valida adecuadamente los datos Object de los ficheros Visio, esto permite a atacantes remotos ejecutar código de su elección a través de un fichero manipulado. También se conoce como \"Vulnerabilidad de Validación de Memoria\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "553ADEFC-11EC-4E29-8A95-4AF59DB6CEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C98FD6E-B9EA-4231-8127-31A8D2D25040"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-041A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0391",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6179",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-041A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0096",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-02-10T22:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remote attackers to execute arbitrary code via a crafted Visio document, aka \"Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Office Visio 2002 SP2, 2003 SP3, y 2007 SP1 no realiza correctamente la copia de memoria para los datos de objetos, lo que permite a atacantes remotos ejecutar código a su elección a través de un documento de Visio manipulado, también conocido como \"Vulnerabilidad de corrupción de memoria\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "553ADEFC-11EC-4E29-8A95-4AF59DB6CEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C98FD6E-B9EA-4231-8127-31A8D2D25040"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-041A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0391",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6172",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-041A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0097",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-02-10T22:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka \"Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Office Visio v2002 SP2 and v2003 SP3 no valida de forma adecuada el posicionamiento en memoria de los ficheros Visio, lo que permite a atacantes remotos ejecutar código de su elección a través de un fichero manipulado, también conocido como  \"Memory Corruption Vulerability\"\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "553ADEFC-11EC-4E29-8A95-4AF59DB6CEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C98FD6E-B9EA-4231-8127-31A8D2D25040"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-041A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0391",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6188",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-041A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0098",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-02-10T22:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation (TNEF) properties, which allows remote attackers to execute arbitrary code via a crafted TNEF message, aka \"Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2 y Exchange Server 2007 SP1; no interpreta adecuadamente las propiedades de Transport Neutral Encapsulation (TNEF), esto permite a atacantes remotos ejecutar código de su elección a través de un mensaje TNEF manipulado. También se conoce como \"Vulnerabilidad de Corrupción de Memoria\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "E88E31D4-1120-4A18-BA65-E2C96B35E599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "71A2E549-5F21-4842-BEB3-380CD4029C16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C218952-1BB8-4915-B31F-9D23543FC83E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51837",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/33838",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-041A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-003",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6114",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/51837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-041A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0099",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-02-10T22:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service (application outage) via a malformed MAPI command, aka \"Literal Processing Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El proveedor Electronic Messaging System Microsoft Data Base (EMSMDB32) en Microsoft Exchange 2000 Server SP3 y Exchange Server 2003 SP2, utilizado como Exchange System Attendant, permite a atacantes remotos producir una denegación de servicio (caída de la aplicación) a través de una comando MAPI malformado, también conocido como \"vulnerabilidad de procesado literal\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "E88E31D4-1120-4A18-BA65-E2C96B35E599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "71A2E549-5F21-4842-BEB3-380CD4029C16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C218952-1BB8-4915-B31F-9D23543FC83E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51838",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/33838",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-041A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-003",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6159",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/51838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-041A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T22:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoader.dll in BlackBerry Application Web Loader 1.0 allow remote attackers to execute arbitrary code via unspecified use of the (1) load or (2) loadJad method."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en la región stack de la memoria en el control ActiveX de Research in Motion RIM AxLoader en el archivo AxLoader.ocx y la biblioteca AxLoader.dll en BlackBerry Application Web Loader versión 1.0 permiten a los atacantes remotos ejecutar código arbitrario mediante el uso no especificado de la (1) carga o (2) loadJad."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:research_in_motion_limited:blackberry_application_web_loader:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3018F34-2088-4F41-B83E-C80D5912CC40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blackberry.com/btsc/KB16248",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33847",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/131100",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/960715.mspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blackberry.com/btsc/KB16248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/131100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/960715.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T22:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installation process for the File Transfer servlet in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.19 does not enable the secure version, which allows remote attackers to obtain sensitive information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El proceso de instalación en File Transfer servlet en el componente System Management/Repository en IBM WebSphere Application Server (WAS) v6.1.x anteriores a v6.1.0.19 no activa la versión segura, lo que permite a atacantes remotos obtener información sensible a través de vectores inespecificos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK59108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK59108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T22:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1.x before 5.1.1.19, 6.0.x before 6.0.2.29, and 6.1.x before 6.1.0.19, when Web Server plug-in content buffering is enabled, allows attackers to cause a denial of service (daemon crash) via unknown vectors, related to a mishandling of client read failures in which clients receive many 500 HTTP error responses and backend servers are incorrectly labeled as down."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en IBM WebSphere Aplication Server (WAS) v5.1.x anteriores a v5.1.1.19, v6.1.0.19, cuando el pluging buffering_content de Web Server está activo está disponible, permite a atacantes provocar una denegación de servicio (caída de demonio) a través de vectores no definidos, relativo a un mal manejo o fallos en la lectura del cliente, en los cuales un cliente recibe muchas respuestas error 500 de HTTP y los servidores bacjend son etiquetados como caídos de forma errónea.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66DB2053-6DFD-4FF6-A6E9-444281531E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A7DAA3-2FFC-4AA3-AEB9-9ADF4A10AC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6453897-CA51-4143-B58D-689E0B69CE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72DB3E62-C18C-440D-B2C8-E14122D2EEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B95B55-7A5E-4504-B5B5-B7B03403E3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31419896-89F7-43A2-8B7C-3B92744BBC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA0FE3E-2FB7-415D-BC64-4B5157EABB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8219D5-94D7-4E1B-BFA9-EF786FFD2C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0C57F6-D011-47C1-B9DC-B1C3083FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F8AFDEA-237C-40CA-AFC1-ED8D212FF867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3067F0B0-2DCD-49EB-9727-7C3C7C99A11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F215B48-7ED5-45EB-BD26-3D3EAD01506F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47D1C56-238B-414B-B2D2-D7069E42D001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "625B5901-B0AF-4D00-BC56-525A6F72943D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA32E836-172D-45BF-B911-9EA2B026E76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79307DAB-2195-4324-AA40-A4AE98D01513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A580AA9B-CE1A-4F21-9FAB-5DFC4FCB34E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F45BA3-6504-47AF-B757-7B6D3526FBF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E6D6AF-0D69-4605-B871-6DAE01CF08EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5EE7744-4584-4AE4-9F27-11EFAA002E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE0C501-4062-49D0-8983-5E92765C7181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE27E903-6D65-4D29-9583-43FB4CB473B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A754DD5-585B-4E89-9C01-2B47D2F5F6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D40DEF90-CE7F-46BB-A6FF-50C1797866B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5AAA544-D3F8-4AE2-BB2D-A64CB86EC988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7D4ECD-8787-4F9B-B81C-C0DFD8DD20EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C43D3515-D9F5-4DC8-A030-9F97593495F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1968803-FF03-477C-81FE-87528FC6DF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C1CA3B-E575-4531-A336-8BFC9F5DEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C130982-8C6E-413E-8296-C9C277FCBE6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E1790E4-073A-4666-80CB-4D967928A0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6239EEAE-5852-4DF7-8627-87139BBB03B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2604E01-E43E-4882-8896-5E646E850286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B68EE27-CC4F-4530-9DFE-D94171C45F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E5AEC-5C35-4962-B9BB-32D66290D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521DB050-3C94-49BF-8666-6EC2C358AA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4AB6BD-4439-4100-A3CE-4600AED10B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BEDD70-B6DB-448F-A998-3E8774B0DB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4421929D-C4B9-43C5-BE61-E68484D3B198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB622117-C91F-47D2-9832-B7DB340796E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D87691D-0719-4447-B258-5FA2BD10F11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95255265-6D69-46D3-9FFA-8EDB1734375C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4191D3-64AB-482C-9DEF-DD04C4C942CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD75308-7F21-4DDF-AD66-C155CF4B721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C250D-8279-4071-871C-1C7C4DE09B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC300B03-7A8F-4E96-B55D-18CC258BBFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C8054A-8581-4936-AF94-291AE56EB4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026EBFCD-0BC1-404B-BC14-292F35BE667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D74F8-4321-48B3-A33E-FCCFA93013CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK67161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006879",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007033",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK63499",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33700",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK67161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK63499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T22:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.31, 6.1.x before 6.1.0.21, and 7.0.x before 7.0.0.1, when Performance Monitoring Infrastructure (PMI) is enabled, allows local users to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files.  NOTE: this is probably a duplicate of CVE-2008-5413."
      }, {
        "lang" : "es",
        "value" : "PerfServlet en el componente PMI/Performance Tools de IBM WebSphere Application Server (WAS) v6.0.x anterior a v6.0.2.31, v6.1.x anterior a v6.1.0.21 y v7.0.x anterior a v7.0.0.1, cuando está habilitado Performance Monitoring Infrastructure (PMI), permite a usuarios locales obtener información sensible leyendo los ficheros (1) systemout.log y (2) ffdc. NOTA: Puede que esta vulnerabilidad sea la misma que CVE-2008-5413."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F45BA3-6504-47AF-B757-7B6D3526FBF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E6D6AF-0D69-4605-B871-6DAE01CF08EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5EE7744-4584-4AE4-9F27-11EFAA002E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE0C501-4062-49D0-8983-5E92765C7181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE27E903-6D65-4D29-9583-43FB4CB473B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A754DD5-585B-4E89-9C01-2B47D2F5F6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D40DEF90-CE7F-46BB-A6FF-50C1797866B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5AAA544-D3F8-4AE2-BB2D-A64CB86EC988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7D4ECD-8787-4F9B-B81C-C0DFD8DD20EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C43D3515-D9F5-4DC8-A030-9F97593495F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1968803-FF03-477C-81FE-87528FC6DF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C1CA3B-E575-4531-A336-8BFC9F5DEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C130982-8C6E-413E-8296-C9C277FCBE6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E1790E4-073A-4666-80CB-4D967928A0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6239EEAE-5852-4DF7-8627-87139BBB03B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2604E01-E43E-4882-8896-5E646E850286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B68EE27-CC4F-4530-9DFE-D94171C45F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E5AEC-5C35-4962-B9BB-32D66290D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521DB050-3C94-49BF-8666-6EC2C358AA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4AB6BD-4439-4100-A3CE-4600AED10B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BEDD70-B6DB-448F-A998-3E8774B0DB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4421929D-C4B9-43C5-BE61-E68484D3B198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB622117-C91F-47D2-9832-B7DB340796E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D87691D-0719-4447-B258-5FA2BD10F11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5594891-E790-44E7-BC9E-0A413B385E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C286007A-361F-47BB-A099-E041D5CF6E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95255265-6D69-46D3-9FFA-8EDB1734375C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4191D3-64AB-482C-9DEF-DD04C4C942CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C8054A-8581-4936-AF94-291AE56EB4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026EBFCD-0BC1-404B-BC14-292F35BE667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D74F8-4321-48B3-A33E-FCCFA93013CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2043B836-3950-46A1-89E4-08985DEA0D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK63886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK79230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK63886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK79230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T22:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the IBM Asynchronous I/O (aka AIO or libibmaio) library in the Java Message Service (JMS) component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.17 on AIX 5.3 allows attackers to cause a denial of service (daemon crash) via vectors related to the aio_getioev2 and getEvent methods."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecifica en la libreria IBM Asynchronous I/O (tambien conocido como AIO o libibmaio) en el componente Java Message Service (JMS) en IBM WebSphere Application Server (WAS) v6.1.x anteriores a v6.1.0.7 en AIX v5.3 permite a los atacantes producir una denegacion de servicio (caida de demonio) a traves de vectores relacionados con los metodos \"aio_getioev2\" y \"getEvent\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95255265-6D69-46D3-9FFA-8EDB1734375C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4191D3-64AB-482C-9DEF-DD04C4C942CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD75308-7F21-4DDF-AD66-C155CF4B721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C250D-8279-4071-871C-1C7C4DE09B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC300B03-7A8F-4E96-B55D-18CC258BBFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C8054A-8581-4936-AF94-291AE56EB4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026EBFCD-0BC1-404B-BC14-292F35BE667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFCD0A1-64B4-4AE7-8161-D8A71F9D6904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C086B402-55AC-4913-A929-380EBC438988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FC14C3-5BFF-4F56-BBD2-3219E7151BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D5CB7D-BD01-4EF3-AF8B-100C200A4C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "736A02C8-784F-4CEE-BACF-C5C37E8930C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200B6A88-EFBD-4935-9596-D8EF3BC24D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20131F92-09B2-41D8-B5D9-38EFE6883EC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?rs=0&uid=swg24019205",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?rs=0&uid=swg24019205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T22:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) mod_ibm_ssl and (2) mod_cgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server (WAS), set incorrect permissions for AF_UNIX sockets, which has unknown impact and local attack vectors."
      }, {
        "lang" : "es",
        "value" : "Los módulos (1) mod_ibm_ssl y (2) mod_cgid en IBM HTTP Server v6.0.x anteriores a v6.0.2.31 y v6.1.x anteriores a v6.1.0.19, tal y como se utiliza en WebSphere Application Server (WAS), ajusta incorrectamente los permisos para los sockets AF_UNIX, lo que tiene un impacto desconocido y vectores de ataque locales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F45BA3-6504-47AF-B757-7B6D3526FBF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E6D6AF-0D69-4605-B871-6DAE01CF08EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5EE7744-4584-4AE4-9F27-11EFAA002E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE0C501-4062-49D0-8983-5E92765C7181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE27E903-6D65-4D29-9583-43FB4CB473B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A754DD5-585B-4E89-9C01-2B47D2F5F6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D40DEF90-CE7F-46BB-A6FF-50C1797866B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5AAA544-D3F8-4AE2-BB2D-A64CB86EC988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7D4ECD-8787-4F9B-B81C-C0DFD8DD20EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C43D3515-D9F5-4DC8-A030-9F97593495F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1968803-FF03-477C-81FE-87528FC6DF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C1CA3B-E575-4531-A336-8BFC9F5DEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C130982-8C6E-413E-8296-C9C277FCBE6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E1790E4-073A-4666-80CB-4D967928A0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6239EEAE-5852-4DF7-8627-87139BBB03B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2604E01-E43E-4882-8896-5E646E850286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B68EE27-CC4F-4530-9DFE-D94171C45F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E5AEC-5C35-4962-B9BB-32D66290D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521DB050-3C94-49BF-8666-6EC2C358AA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4AB6BD-4439-4100-A3CE-4600AED10B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BEDD70-B6DB-448F-A998-3E8774B0DB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4421929D-C4B9-43C5-BE61-E68484D3B198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB622117-C91F-47D2-9832-B7DB340796E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D87691D-0719-4447-B258-5FA2BD10F11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5594891-E790-44E7-BC9E-0A413B385E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95255265-6D69-46D3-9FFA-8EDB1734375C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4191D3-64AB-482C-9DEF-DD04C4C942CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD75308-7F21-4DDF-AD66-C155CF4B721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C250D-8279-4071-871C-1C7C4DE09B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC300B03-7A8F-4E96-B55D-18CC258BBFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C8054A-8581-4936-AF94-291AE56EB4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026EBFCD-0BC1-404B-BC14-292F35BE667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D74F8-4321-48B3-A33E-FCCFA93013CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200B6A88-EFBD-4935-9596-D8EF3BC24D32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007033",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27008517",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK66154",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27008517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK66154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T22:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Installation Factory installation process for IBM WebSphere Application Server (WAS) 6.0.2 on Windows, when WAS is registered as a Windows service, allows local users to obtain sensitive information by reading the logs/instconfigifwas6.log log file."
      }, {
        "lang" : "es",
        "value" : "El proceso de instalación de The Installation Factory en WebSphere Aplication Server (WAS) v6.0.2 en Windows, cuando WAS se registra como un servicio, permite a usuarios locales obtener información sensitiva leyendo los ficheros de registro logs/instconfigifwas6.log.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK67405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK67405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-10T22:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows allows remote attackers to bypass \"Authorization checking\" and obtain sensitive information from JSP pages via a crafted request.  NOTE: this is probably a duplicate of CVE-2008-5412."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server (WAS) 7 anterior a v7.0.0.1 para Windows; permite a atacantes remotos evitar las \"comprobaciones de Autenticación\" y obtener información sensible de páginas JSP a través de una solicitud manipulada. NOTA: Puede que esta vulnerabilidad sea la misma que CVE-2008-5412."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK75248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK75248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T00:30:02.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1, and earlier versions allows remote attackers to inject arbitrary web script or HTML via the username parameter to comment.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de sitios cruzados (XSS) en la característica de comentarios anónimos en lib-comment.php de glFusion v1.1.0, v1.1.1 y versiones anteriores; permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través del parámetro username -nombre de usuario- de comment.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "CA26CDD6-B5CF-4B20-A2F9-3BD4CE718E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80EE971-44CA-478F-88CB-A13CBDD628CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33878",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fortconsult.net/images/pdf/advisories/glFusion-xss-advisory.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.glfusion.org/article.php/xsscomments",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33683",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fortconsult.net/images/pdf/advisories/glFusion-xss-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.glfusion.org/article.php/xsscomments",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T00:30:02.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer underflow in the Huffman decoding functionality (pvmp3_huffman_parsing.cpp) in OpenCORE 2.0 and earlier allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a crafted MP3 file that triggers heap corruption."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento inferior de entero en la funcionalidad de decodificacion Huffman (pvmp3_huffman_parsing.cpp) en OpenCORE v2.0 y anteriores permite a atacantes remotos producir una denegacion de servicio (caida de proceso) y posiblemente la ejecucion de codigo a su eleccion a traves de un fichero mp3 manipulado que inicia una corrupcion de pila."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:android:opencore:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1889B66-0819-473B-9711-4C114EF5713E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://android.git.kernel.org/?p=platform/external/opencore.git%3Ba=commit%3Bh=7b466cd0ecfdba72c4cbd0f3a8c2001141376b0f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://review.source.android.com/Gerrit#change%2C8815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500750/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://android.git.kernel.org/?p=platform/external/opencore.git%3Ba=commit%3Bh=7b466cd0ecfdba72c4cbd0f3a8c2001141376b0f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://review.source.android.com/Gerrit#change%2C8815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500750/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T00:30:02.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP code via a URL in the classFiles parameter to (1) admin/doc/index.php, (2) index.php, and (3) base/menu.php in mod/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo PHP en WebFrame v0.76 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro \"classFiles\" a (1) admin/doc/index.php (2) index.php y (3) base/menu.php in mod/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webframe:webframe:0.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5C39BEE-3BAF-44EB-BE3A-679CAAD8A461"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33701",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T00:30:02.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) currentmod and (2) LANG parameters to mod/index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en WebFrame v0.76 permite a atacantes remotos incluir y ejecutar ficheros locales a través de secuencias de salto de directorio en los parametros (1) \"currentmod\" y (2) \"LANG\" en mod/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webframe:webframe:0.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5C39BEE-3BAF-44EB-BE3A-679CAAD8A461"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33701",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T00:30:02.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in check_lang.php in Yet Another NOCC (YANOCC) 0.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en check_lang.php en Yet Another NOCC (YANOCC) v0.1.0 y anteriores permite a atacantes remotos incluir y ejecutar ficheros locales a su elección a través de ..(punto punto) en el parámetro \"lang\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yanocc:yanocc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.0",
            "matchCriteriaId" : "EA1DEC30-3589-4193-82C9-A65367F6CC2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T00:30:02.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the classified page (classified.php) in BusinessSpace 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la pagina de clasificación (classified.php) en BusinessSpace v1.2 y anteriores permite a atacantes remotos ejecutar comandos SQl a su elección a través del parámetro \"id\" en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:businessspace:businessspace:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "2C483A37-D53A-4D42-8D30-E1911CFA276F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33875",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500787/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33692",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500787/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T00:30:03.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary PHP code via the fields parameter, which is supplied to an eval function call within the generic function in include/class/tz_env.class.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección Eval en phpSlash v0.8.1.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección, a través del parámetro \"fields\", el cual en enviado a una llamada a la función eval sin la función genérica en include/class/tz_env.class. NOTA: Algunos de estos detalles han sido obtenidos de información de terceras personas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpslash:phpslash:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "385ABF67-157E-4592-80E7-8399C4D72879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpslash:phpslash:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.1.1",
            "matchCriteriaId" : "9CA61227-D278-4502-92ED-24C3E900FEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpslash:phpslash:0.5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8FB8A1-BE41-4E62-88E9-AB15246AB0FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpslash:phpslash:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D5F330-5C61-4627-B925-272A357E1338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpslash:phpslash:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9493398-C12A-439A-9836-0D62F6510D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpslash:phpslash:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "506762E9-EAA6-4AFE-8F78-3FA6491C27F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpslash:phpslash:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31BDD3F6-789D-48AB-AD5C-137BB5D53BB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpslash:phpslash:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0292084B-B04A-4465-936B-51FFFE5328C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpslash:phpslash:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B370B91-6B3C-4423-ABE5-840999099D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpslash:phpslash:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703FD7D9-5D17-4C57-882A-8EF33CDE44F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpslash:phpslash:0.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4822EC-378F-44B5-90E3-5B3F82247C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpslash:phpslash:065:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BCF8850-3160-45C9-AA16-C785AFDB246C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33717",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500664/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33572",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500664/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0036",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-02-11T20:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sending the remainder of the packet with crafted values in the header, related to use of uninitialized memory in a validation check."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función proxyReadClientSocket en proxy/libvirt_proxy.c en libvirt_proxy v0.5.1, podría permitir a usuarios locales elevar sus privilegios mediante el envío de una parte de la cabecera de un paquete virProxyPacket y posteriormente enviando el resto del paquete con valores manipulados en la cabecera del mismo. Relacionado con el uso de memoria que no ha sido inicializada en un control de validación.\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libvirt:libvirt:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BA9E6F-7F06-4341-928A-5CE6C5EAAA7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.et.redhat.com/?p=libvirt.git%3Ba=commitdiff%3Bh=2bb0657e28",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/02/10/8",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34397",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0382.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33724",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=484947",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10127",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/libvir-list/2009-January/msg00699.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/libvir-list/2009-January/msg00726.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/libvir-list/2009-January/msg00728.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://git.et.redhat.com/?p=libvirt.git%3Ba=commitdiff%3Bh=2bb0657e28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/02/10/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0382.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=484947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/libvir-list/2009-January/msg00699.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/libvir-list/2009-January/msg00726.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/libvir-list/2009-January/msg00728.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T20:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the sajax_get_common_js function in php/Sajax.php in Sajax 0.12 allows remote attackers to inject arbitrary web script or HTML via the URL parameter, which is not properly handled when using browsers that do not URL-encode requests, such as Internet Explorer 6.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la función sajax_get_common_js en php/Sajax.php in Sajax v0.12, permite a atacantes remotos ejecutar secuencias de comandos web o HTML  de su elección a través del parámetro URL que no está manejado correctamente cuando es usado con navegadores que no codifica las peticiones URL, como es el caso de Internet Explorer 6. NOTA: el origen de esta información es desconocido. Los detalles se han obtenido a partir de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modernmethod:sajax:0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C5388F-83FD-4BB6-83D0-2A74BE2E09CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33894",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T20:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) url and (2) acuparam parameters, and (3) the URI."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php in AdaptCMS Lite v1.4, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"url\", (2)\"acuparam\" y (3) \"URI\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptcms:adaptcms:1.4:unknown:lite:*:*:*:*:*",
            "matchCriteriaId" : "C54A354F-9494-46D2-89A7-8884F41D4173"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33866",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33698",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T20:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in plugins/rss_importer_functions.php in AdaptCMS Lite 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en plugins/rss_importer_functions.php en AdaptCMS Lite v1.4, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro \"sitepath\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptcms:adaptcms:1.4:unknown:lite:*:*:*:*:*",
            "matchCriteriaId" : "C54A354F-9494-46D2-89A7-8884F41D4173"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33866",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33698",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T20:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in frame.php in Rhadrix If-CMS 2.07 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en frame.php en Rhadrix If-CMS v2.07 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rhadrix:if-cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.07",
            "matchCriteriaId" : "7B234B46-B489-4230-93E1-4DCD35D0D641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33883",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33697",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T20:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in SnippetMaster Webpage Editor 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the language parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en SnippetMaster Webpage Editor v2.2.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"languaje\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electrictoad:snippetmaster_webpage_editor:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F96FCE9-6039-47C3-8D1B-2DEEEF583639"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33865",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33705",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T20:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in SnippetMaster 2.2.2, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) _SESSION[SCRIPT_PATH] parameter to includes/vars.inc.php and the (2) g_pcltar_lib_dir parameter to includes/tar_lib/pcltar.lib.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo PHP en SnippetMaster v2.2.2, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en los parámetros (1) _SESSION[SCRIPT_PATH] a includes/vars.inc.php y (2) g_pcltar_lib_dir a includes/tar_lib/pcltar.lib.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electrictoad:snippetmaster_webpage_editor:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F96FCE9-6039-47C3-8D1B-2DEEEF583639"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33865",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33705",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T20:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in gallery/view.asp in A Better Member-Based ASP Photo Gallery before 1.2 allows remote attackers to execute arbitrary SQL commands via the entry parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en gallery/view.asp en A Better Member-Based ASP Photo Gallery anterior a v1.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"entry\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ontarioabandonedplaces:a_better_member-based_asp_photo_gallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "0BF9FEDC-035D-4A18-8542-7C363F31C37A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33874",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ontarioabandonedplaces.com/ipguardian/gallery/readme.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33693",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ontarioabandonedplaces.com/ipguardian/gallery/readme.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Version 1.2 released which fixed the SQL injection bug. It also properly deletes thumbnails for invalid filetypes (invalid files were removed but the thumbnails remained).\r\n\r\nhttp://www.ontarioabandonedplaces.com/ipguardian/"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T20:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in password.php in Scripts For Sites (SFS) EZ Baby allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en el  archivo password.php en Scripts For Sites (SFS) EZ Baby, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de vectores no especificados, posiblemente involucrando el parámetro u2. NOTA: la procedencia de esta información es desconocida; Los detalles son obtenidos únicamente de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scripts-for-sites:ez_baby:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E1B6FC8-7B5B-41B0-AC73-94F4567A19BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T20:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in password.php in Scripts for Sites EZ Reminder allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en archivo password.php en EZ Reminder de Scripts For Sites, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de vectores no especificados, posiblemente con el parámetro u2. NOTA: la procedencia de esta información es desconocida; Los detalles son obtenidos únicamente de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scripts-for-sites:ez_reminder:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A46FE64-BC99-4ACD-B049-F5798E24EEBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T20:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in FlexCMS allows remote attackers to execute arbitrary SQL commands via the catId parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en FlexCMS, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"catId\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexcms:flexcms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81C06590-841E-41F1-A062-DFB13B3F7302"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33696",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T20:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when register_globals is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the export_to parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en export.php en Thyme v1.3 y anteriores, cuando register_globals está desactivado, permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro \"export_to\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:extrosoft:thyme:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD11855-78B8-4138-AB8E-C261AB93B63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-11T20:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local users to read arbitrary files via unspecified vectors, related to failure to drop root privileges."
      }, {
        "lang" : "es",
        "value" : "at en bos.rte.cron sobre IBM AIX v5.2.0, v5.3.0 a la v 5.3.9 y de la v6.1.0 a la 6.1.2, permite a usuarios locales leer ficheros de su elección a través de vectores sin especificar, relacionado con el fallo al quitar privilegios de root (administrador)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A7DBFF-B11B-47EC-9E52-C12B156739D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE57C2-E728-4016-9774-28FB4B0509AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B11497-5622-4759-906A-A93A3E815584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F9CD013-D904-45DF-AD43-493A22D5744B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "307B47F5-D903-4763-A353-2538AFD6C9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF417123-CCB6-48AF-A21B-1974173D516B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362CFB2F-817A-4E55-A315-86B6243E3F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53544921-1C1A-4382-99D7-0F3011BA76DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/at_advisory.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ43452",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ43453",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ43454",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ43455",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ43456",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ43457",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ43458",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ43459",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33730",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4558",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/at_advisory.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ43452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ43453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ43454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ43455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ43456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ43457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ43458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ43459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-12T16:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a \"%\" (percent) character in the username, which introduces a \"'\" (single quote) character during variable substitution by mod_sql."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el ProFTPD Server v1.3.1 hasta v1.3.2rc2, permite a atacantes remotos ejecutar comandos SQL de su elección a través de un carácter \"%\" (porcentaje) en el nombre de usuario, esto introduce un carácter \"'\" (comilla simple) durante la sustitución de variable por mod_sql."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71965620-399A-450C-95A5-5B327438768A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A80BB64-A714-40D6-80E1-D4AAC5498289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd_project:proftpd:1.3.2_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBCEA1CC-B662-4B36-8AC3-4C3A3CE3E54C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.proftpd.org/show_bug.cgi?id=3180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-27.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/11/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/11/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/11/5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500823/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500833/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500851/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500852/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.proftpd.org/show_bug.cgi?id=3180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/11/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/11/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/11/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500823/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500833/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500851/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500852/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-12T16:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in (1) mod_sql_mysql and (2) mod_sql_postgres."
      }, {
        "lang" : "es",
        "value" : "ProFTPD Server v1.3.1, con soporte NLS habilitado, permite a atacantes remotos evitar los mecanismos de protección de inyección SQL a través de caracteres multibyte inválidos y codificados, que no son correctamente manejados en (1) mod_sql_mysql y (2) mod_sql_postgres."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd:proftpd:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0629F25F-B9C6-4FC7-B67E-E6B38E59E60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.proftpd.org/show_bug.cgi?id=3173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-27.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/11/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/11/5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.proftpd.org/show_bug.cgi?id=3173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/11/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/11/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-12T17:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the PyCrypto ARC2 module 2.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large ARC2 key length."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento del búfer en el módulo PyCrypto ARC2 v2.0.1, permite a atacantes remotos provocar una denegación de servicio y puede que ejecutar código de su elección a través de una longitud larga de clave ARC2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pycrypto:arc2:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C278C3C0-967F-4700-9D73-B6DFF1A92382"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gitweb2.dlitz.net/?p=crypto/pycrypto-2.x.git%3Ba=commitdiff%3Bh=d1c4875e1f220652fe7ff8358f56dee3b2aba31b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gitweb2.dlitz.net/?p=crypto/pycrypto-2.x.git%3Ba=commitdiff%3Bh=fd73731dfad451a81056fbb01e09aa78ab82eb5d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200903-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/07/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/12/5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33674",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gitweb2.dlitz.net/?p=crypto/pycrypto-2.x.git%3Ba=commitdiff%3Bh=d1c4875e1f220652fe7ff8358f56dee3b2aba31b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://gitweb2.dlitz.net/?p=crypto/pycrypto-2.x.git%3Ba=commitdiff%3Bh=fd73731dfad451a81056fbb01e09aa78ab82eb5d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200903-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/07/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/12/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-12T23:30:01.110",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in AFP Server in Apple Mac OS X 10.5.6 allows local users to cause a denial of service (infinite loop) via unspecified vectors related to \"file enumeration logic.\""
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en AFP Server de Apple Mac OS X v10.5.6, permite a usuarios locales provocar una denegación de servicio (bucle infinito) a través de vectores no especificados relacionados con \"lógica en la enumeración de ficheros\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-12T23:30:01.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action."
      }, {
        "lang" : "es",
        "value" : "cgi-bin/kerbynet de ZeroShell 1.0beta11 y anteriores, permite a atacantes remotos ejecutar comandos de su elección a través de metacaracteres de línea de comandos en el parámetro type -tipo- de una acción NoAuthREQ x509List."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroshell:zeroshell:1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7B176B-F51B-408F-B2A4-7E8E5BE5EC90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroshell:zeroshell:1.0:beta10:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B0BACE-C7A5-4682-AF8D-831695AAB59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroshell:zeroshell:1.0:beta11:*:*:*:*:*:*",
            "matchCriteriaId" : "AD769FAD-12CE-4BFD-BF00-6E9CD9543DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroshell:zeroshell:1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "687172D7-8322-435B-9DD2-93C4B06D89D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroshell:zeroshell:1.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "15488672-B1D0-41CC-8A4D-5EDC8BC94818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroshell:zeroshell:1.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9F5A68-47C4-404D-9FFC-45EF70D3A4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroshell:zeroshell:1.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "A57C0323-FBBF-4C7B-92C9-613594FC5726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroshell:zeroshell:1.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "AE92FEE0-E89D-481F-A818-529FF6BF1AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroshell:zeroshell:1.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "B3889F21-107B-4256-9329-EF327BBBED26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroshell:zeroshell:1.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "6F56A258-4F0F-4335-94B2-893448B3F254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroshell:zeroshell:1.0:beta9:*:*:*:*:*:*",
            "matchCriteriaId" : "176A49E5-D367-4581-9D60-DD304FE38FBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ikkisoft.com/stuff/LC-2009-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500763/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zeroshell.net/eng/announcements/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zeroshell.net/eng/patch-details/#C100",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ikkisoft.com/stuff/LC-2009-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500763/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zeroshell.net/eng/announcements/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zeroshell.net/eng/patch-details/#C100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-12T23:30:01.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbitrary code via a long text attribute in an outline element in a .opml file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en NewsGator FeedDemon v2.7 y anteriores que permiten a los atacantes remotos asistidos por el usuario ejecutar arbitrariamente código a través de un atributo de texto largo en un elemento outline en un archivo .opml."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsgator:feeddemon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7",
            "matchCriteriaId" : "A7E1AF5F-3CEC-469C-AEF0-C06C9C83CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsgator:feeddemon:2.0.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8631919E-6C04-435A-B09E-15B075B49C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsgator:feeddemon:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C646B9-6C0F-4D8F-8F11-B037F493F33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsgator:feeddemon:2.6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DCF7D23-9C4A-4DE2-A24F-633E3C433723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsgator:feeddemon:2.6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A586F3-6116-454E-9E64-360F74729BA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33718",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.bkis.vn/?p=329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500686/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33630",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.bkis.vn/?p=329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500686/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-12T23:30:01.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text displayed to the user, which allows remote attackers to spoof a signature by modifying the latter copy, a different vulnerability than CVE-2008-5077."
      }, {
        "lang" : "es",
        "value" : "Evolution v2.22.3.1, comprueba las firmas S/MIME contra una copia del texto del correo electrónico con un campo de datos firmados, la copia del texto del correo no se muestra al usuario, esto permite a atacantes remotos falsificar la firma modificando la copia posterior. Se trata de una vulnerabilidad diferente de CVE-2008-5077."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:evolution:evolution:2.22.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A5378B-3F80-4007-9284-08A790C47CFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=564465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/02/10/7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33848",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/38915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0354.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0355.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=484925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00666.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00672.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=564465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/02/10/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0354.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0355.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=484925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00666.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00672.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-12T23:30:01.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Additional Report Settings interface in ESET Remote Administrator before 3.0.105 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Secuencias de Comandos en Sitios Cruzados (XSS) en la interfaz Additional Report Settings de ESET Remote Administrator anterior a v3.0.105; permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través de vectores no especificados. NOTA: algunos de los detalles se han obtenido de fuentes de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eset:remote_administrator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.35",
            "matchCriteriaId" : "C27358BB-4D99-4A19-8391-7ECE77B524DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33805",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.eset.eu/support/changelog-eset-remote-administrator-3",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.eset.eu/support/changelog-eset-remote-administrator-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T00:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Pixlet codec in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted movie file that triggers memory corruption."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Pixlet codec en Apple Mac OS X v10.4.11 y v10.5.6 que permite a los atacantes remotos causar una denegación de servicios (terminación de la aplicación) y posiblemente una ejecución arbitraria de código a través de archivos de vídeo manipuladas que lanzan una corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2009/Feb/1021718.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/51980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/alerts/2009/Feb/1021718.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T00:30:04.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certificate Assistant in Apple Mac OS X 10.5.6 allows local users to overwrite arbitrary files via unknown vectors related to an \"insecure file operation\" on a temporary file."
      }, {
        "lang" : "es",
        "value" : "Certificate Assistant en Apple Mac OS X v10.5.6 que permite a los usuarios locales sobrescribir arbitrariamente archivos a través de vectores desconocidos en relación a una \"operación de archivo insegura\" en un fichero temporal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2009/Feb/1021720.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2009/Feb/1021720.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T00:30:04.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región heap de la memoria en CoreText en Apple Mac OS X versión 10.5.6,permite a los atacantes remotos ejecutar código arbitrario por medio de una cadena Unicode creada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T00:30:04.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dscl in DS Tools in Apple Mac OS X 10.4.11 and 10.5.6 requires that passwords must be provided as command line arguments, which allows local users to gain privileges by listing process information."
      }, {
        "lang" : "es",
        "value" : "dscl en DS Tools den Apple Mac OS X v10.4.11 y v10.5.6, requiere que la contraseña sea proporcionada como argumentos de la línea de comandos, esto permite a usuarios locales ganar privilegios al listar información de los procesos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2009/Feb/1021722.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/alerts/2009/Feb/1021722.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T00:30:04.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Folder Manager in Apple Mac OS X 10.5.6 uses insecure default permissions when recreating a Downloads folder after it has been deleted, which allows local users to bypass intended access restrictions and read the Downloads folder."
      }, {
        "lang" : "es",
        "value" : "Folder Manager en Apple Mac OS X 10.5.6 usa permisos inseguros por defecto cuando recrea un carpeta Downloads después de que ha sido borrada, lo que permite a los usuarios evitar las restricciones de acceso y lee la carpeta Downloads."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T00:30:04.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in fseventsd in the FSEvents framework in Apple Mac OS X 10.5.6 allows local users to obtain sensitive information (filesystem activities and directory names) via unknown vectors related to \"credential management.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en fseventsd en the FSEvents framework en Apple Mac OS X v10.5.6 que permite a los usuarios locales obtener información sensible (actividades de los ficheros del sistema y nombres de directorios) a través de vectores desconocidos relativos a \"gestión de credenciales\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T00:30:04.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "csregprinter in the Printing component in Apple Mac OS X 10.4.11 and 10.5.6 does not properly handle error conditions, which allows local users to execute arbitrary code via unknown vectors that trigger a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "csregprinter en el componente Printing de Apple Mac OS X v10.4.11 y v10.5.6, no maneja adecuadamente las condiciones de error, esto permite a usuarios locales ejecutar código de su elección a través de vectores desconocidos que provocan un desbordamiento del búfer basado en montículo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T00:30:04.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Remote Apple Events server in Apple Mac OS X 10.4.11 and 10.5.6 does not properly initialize a buffer, which allows remote attackers to read portions of memory."
      }, {
        "lang" : "es",
        "value" : "The Remote Apple Events server en Apple Mac OS X 10.4.11 y 10.5.6 no inicializa apropiadamente un búfer, lo cual permite a los atacantes remotos leer porciones de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T00:30:04.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Apple Events in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) or obtain sensitive information via unspecified vectors that trigger an out-of-bounds memory access."
      }, {
        "lang" : "es",
        "value" : "Remote Apple Events en Apple Mac OS X v10.4.11 y v10.5.6 que permite a los atacantes remotos causar una denegación de servicios (terminación de la aplicación) u obtener información sensible a través de vectores no especificados que lanzan un acceso a memoria fuera de rango."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T00:30:04.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted resource fork that triggers memory corruption."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en CarbonCore en Apple Mac OS X v10.4.11 y v10.5.6 que permite a los atacantes remotos causar una denegación de servicios (terminación de la aplicación) y ejecuta arbitrariamente código a través de bifurcación de recurso manipulada que lanza una corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T00:30:05.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Safari RSS in Apple Mac OS X 10.4.11 and 10.5.6, and Windows XP and Vista, allow remote attackers to execute arbitrary JavaScript in the local security zone via a crafted feed: URL, related to \"input validation issues.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades múltiples no especificadas en Safari RSS en Apple Mac OS X v10.4.11 y v10.5.6, y Windows XP y Vista, que permite a los atacantes remotos ejecutar arbitrariamente JavaScript en la zona de seguridad local a través de una suscripción manipulada: URL, relativa a \"asunto de validación de entrada\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE370CAA-04B3-434E-BD5B-1D87DE596C10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T00:30:05.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "servermgrd (Server Manager) in Apple Mac OS X 10.5.6 does not properly validate authentication credentials, which allows remote attackers to modify the system configuration."
      }, {
        "lang" : "es",
        "value" : "servermgrd (Server Manager) en Apple Mac OS X v10.5.6 no valida apropiadamente la autenticación de credenciales, el cual permite a los atacantes remotos modificar el sistema de configuración."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T00:30:05.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the SMB component in Apple Mac OS X 10.5.6 allows remote SMB servers to cause a denial of service (system shutdown) or execute arbitrary code via a crafted SMB file system that triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en el componente SMB en Apple Mac OS X v10.5.6 que permite a los servidores remotos SMB causar una denegación de servicios (caída del sistema) o ejecutar arbitrariamente código a través de archivos de sistemas SMB manipulados que lanzan un un desbordamiento de búfer basado en pila."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T00:30:05.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the SMB component in Apple Mac OS X 10.4.11 and 10.5.6 allows remote SMB servers to cause a denial of service (memory exhaustion and system shutdown) via a crafted file system name."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente SMB en Apple Mac OS X v10.4.11 y v10.5.6 que permite a los servidores SMB remotos causar una denegación de servicios (agotamiento de memoria y caída del sistema) a través de nombres de ficheros del sistema manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T00:30:05.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with insecure world-writable permissions, which allows local users to write to the Xterm of another user."
      }, {
        "lang" : "es",
        "value" : "XTerm en Apple Mac OS X v10.4.11 y v10.5.6, cuando usado con luit, crea dispositivos tty con permisos inseguros de escritura, el cual permite a los usuarios locales escribir a el Xterm de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2009/Feb/1021729.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33798",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48727",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2009/Feb/1021729.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T01:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a denial of service (forced authentication failures) via a crafted reverse-resolved DNS name (rhost) entry that contains a substring that is interpreted as an IP address, a different vulnerability than CVE-2007-4321."
      }, {
        "lang" : "es",
        "value" : "el archivo filter.d/wuftpd.conf en Fail2ban v0.8.3 utiliza una expresión regular incorrecta que permite a los atacantes remotos causar una denegación de servicio (fallos de autenticación forzados) a través de una entrada de nombre DNS de resolución reversa (rhost) manipulada que contiene una subcadena que es interpretada como una dirección IP, diferente vulnerabilidad que CVE-2007-4321."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fail2ban:fail2ban:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8CF239-5E91-4708-B594-FA825C69DFE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514163",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33890",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T01:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Becky! Internet Mail 2.48.02 and earlier allows remote attackers to execute arbitrary code via a mail message with a crafted return receipt request."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Becky!! Internet Mail v2.48.02 y anteriores, que permite a los atacantes remotos ejecutar arbitrariamente código a través de mensajes de correo electrónico con una retorno manipulado de recepción de petición."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.48.02",
            "matchCriteriaId" : "35441657-9A1E-4A77-9536-81F367C47DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:1.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDF43FF-5C93-40EA-A5BD-128E1BC7BA32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:1.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A62CEDC-A2A6-4FF6-98B4-5DD9D62CE998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:1.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80DC7CF9-2FB1-4F0F-82C0-A6A7AE375823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BB83AC-D0DD-4482-A1A5-6C86C7B6714D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645DB3EB-FE95-4FB3-8763-553ACB7E7F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB7CEFD-6E32-4335-9121-D406312A9B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7382D4FC-706A-4AE2-A05C-1D0B118EEB1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1880ED-7933-49F8-B343-C1C67B8A8FA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A72B3497-5E28-4AD6-A862-6444DA8D6009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F959DE4F-1340-473D-8D66-D5A5FAE5A149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A822625-04C7-426B-84D9-0980E9FCE3C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C638FBED-D830-4DC2-BE43-7CD7FE27BBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0EF9A6-BB23-4C45-94E1-24B5D4505CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809F7EC5-A7FE-47E2-8681-EF8DF204770B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4060C6A3-DE96-4EF8-87BB-65B0BE2E87AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A74E8D-8938-4963-A514-928FCF8A06C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21896C1E-9F29-4B27-A6E7-ACAFA53694A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29AAF319-B2B9-4CEF-ABAE-B8FE51723EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9055C591-40DE-429C-8F53-F1F6A1E421B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D805188D-6F89-4E4F-845E-FFED2D979E50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675A7B36-A89F-4FB7-A5A9-16C510BF267D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06615A8C-819F-43D8-913C-27B9EAE10F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFA543-A594-4D80-9EF5-EE4D3B918E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D98208DF-E941-4016-A2A3-75EE4B94BF92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA356BFC-31FF-4D69-A945-774E39EAD8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0415269F-2CDB-4E5D-8882-E8E90FCEF207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2D14C1-C391-4C56-BDAC-09D0ED95F223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6BD2D2-2AD7-4401-B7A4-D963408AF286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D313111-5218-4EE9-8D23-B6C769CB2F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE2F96BC-96B9-4996-AA37-724FD9166642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.06.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5476F50-5D15-4DC3-9385-FEA4977A2C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3D8D78-A47E-4E38-A64B-0FBAFBBFEF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.07.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F435683-AD92-4A93-8348-788DCCF3F31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.07.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B063DBDD-6DB1-4997-B026-3296A845A668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.07.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8184A401-D0F6-46DC-9A90-88F161DC9035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.07.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E06240-6F6F-48B3-8BDA-1B472714C851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D847B935-0A83-4B69-954C-F96AE9561FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.08.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F777BC3-020F-4FA5-8C5B-AF9A3B97E829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0802E75B-0AA7-4292-AF8C-B33B0FD370B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.09.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1AD4FC-7ABD-49A4-96E4-0EFD05D0BDBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C0F5B41-293D-4B7F-A0EA-F010DF3F56FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.10.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49633DD2-0CB2-40F4-B142-40FDB48E75E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.10.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01852229-2482-4643-ACB0-5FAC5B5EAF62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.10.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D63EEF-89F4-41AF-973B-2B7C6FB71D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.10.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EAAA6ED-F4D1-4D99-A5DA-CCA2CB67E2FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA5444C-0145-4A83-876A-37E078FF3690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.11.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E053257F-987A-46C7-86EB-5AB7DDF625D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.11.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC95A4DB-9A6B-4655-B3C2-CFD661D860D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A44287-7780-4F7E-A42A-8C84651B8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.12.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4898613-F821-4775-B6D0-3D6B74498B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5903530F-DD3A-408F-8849-7B99C62C7E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.20.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B57218-DD5E-4C71-8FFB-2089C4EE0CFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.20.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE465630-5DA4-4060-BFFA-C0041270861F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.20.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDD9D9AA-45F7-4D5B-8492-357B7AFA84FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.20.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99317BC-2B79-46EA-8CD5-75FA8F4876B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.20.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74BB72E-1FD5-4C8F-A444-1FAE385F46DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.20.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC52F17-5084-4B32-801F-89E1D2CA3109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.20.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114AFAE6-5736-4264-89C6-2DE0B0EBDDB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19C8F2E3-577C-4A57-B70A-AF3B6F42745E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.21.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2B9909-67E2-496A-BA72-8A52C9A28CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.21.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBB8734-733D-4B63-9C99-FDBD681CBA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.21.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477567A2-3C3F-46A2-865C-36DE7E7B8E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.21.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CDB46B-ABC0-4ABA-8D0A-9CFF0139359D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4054A3EE-8D3F-47B5-A92C-58D49B7C4DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.22.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8552BACC-B0D4-4BF2-82EF-241A7A1725CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.22.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D76CB5-C808-40B2-AD9B-4F62412B4EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FDEC56-D1A9-46FF-9819-38E1264EC706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C766094E-99A3-4844-86C0-FE24748FEB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.24.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9AE3D9-9744-472F-8269-6467A1E51986"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.24.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908A9307-2020-4984-BD90-B202B462B388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C613B75-DF83-4E98-9D34-9B0CEE40C5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.25.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1154A2-F41D-4BDC-9ED8-0FD1FBCBFD5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.25.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29E0FBF-F6E1-4352-8EE3-7772AFBC1FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4175B57-4513-4AFC-9E01-49EB99811188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AE8FC0-BC89-4615-A45B-40697BA82884"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "591C04BC-A493-49A5-B50D-0028323F9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.28.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1128DB6B-E007-4EC5-980D-2EB57FFA2207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBC1EAA-D3BB-42C6-A46B-97EAA12035D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "522FBEA4-456D-48B8-8F57-D0E0C7F64A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.30.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D0B203-4E36-4B44-B3DC-6C8297D5A219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.30.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23ACE386-34BC-487C-AED2-98205D533466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.30.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6096EF9A-D8B9-4EA7-A8C0-B31212FD0222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.30.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE4A278-AF8B-4838-9B30-B17E61D4C4EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.31.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B050938B-092F-4D65-A0E4-DEC3984D7D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.40.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69BD985-3861-4ABB-91EE-F712BF045D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.40.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0480A36-1D98-4B84-AED7-0F325CAD9B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.40.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75438538-6D0A-44C1-B6C5-BF592104B5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.40.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEF4651-3E29-404C-808A-B4446C5F14E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.40.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E9811A-E845-4241-A1D4-B0AF5A299DE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.41.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1B5D17-0CAC-45DE-BD74-3A34F765A609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.42.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF3F133A-8118-44F8-A2BA-0CE0437B8460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.43.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9147D46-80A5-4284-A219-52F59A2B8512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.44.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF39DB9E-D32D-4905-A135-2D5038007F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.45.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C03F7772-3FAC-4C11-8A81-248D0556E7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.45.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7C828B-625A-4CF5-A3F9-209D7B1DD896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.45.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD231B-8057-4FA3-BE48-84D6EA8DF72C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FEC070C-B2A4-4D10-90C1-89F8C1576C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D57C3E-F2AF-47C6-836F-19761D55BD68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.47.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53F66197-CD50-4794-B200-532C23BC7732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B421DA1-3C58-4224-AC1B-685DC0AB1368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rimarts:becky\\!_internet_mail:2.48.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768CB429-EE2E-4E3C-9051-3C6528A60BE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN29641290/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33892",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rimarts.jp/downloads/B2/Readme-e.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN29641290/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rimarts.jp/downloads/B2/Readme-e.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0216",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-02-13T17:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly encrypted local password file, which allows remote attackers to bypass intended access restrictions and start privileged server login sessions by recovering a password or by using a modified program module."
      }, {
        "lang" : "es",
        "value" : "GE Fanuc iFIX v5.0 y versiones anteriores utiliza una autenticación en el lado del cliente que involucra a un fichero de contraseña local con un cifrado débil, permite a atacantes remotos saltarse las restricciones de acceso implementadas e iniciar sesiones de inicio en servidores privilegiados al recuperar una contraseña o usando un módulo de programa modificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge_fanuc:ifix:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0",
            "matchCriteriaId" : "C381F126-9E7B-49B1-8A2B-E340CC7EE476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge_fanuc:ifix:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1706147A-C9BA-4A94-ACBB-E98D2CDB8F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge_fanuc:ifix:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C407081-C7C5-4E74-AE2C-F743E4765DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge_fanuc:ifix:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B464E4D-30F5-43D8-9F3B-D56ECE9AB77A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge_fanuc:ifix:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADCE493A-5938-44F9-BC8A-3EB5F1046EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge_fanuc:ifix:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6924D7-7D1F-4DE1-83CE-6547DB48D02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge_fanuc:ifix:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7A791B-8966-492B-8E28-6EADCCB45924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge_fanuc:ifix:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22011323-85E8-43D8-AD8F-3132862E1AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge_fanuc:ifix:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB61FC7-6BA4-42F0-BC20-C7A49E51B793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge_fanuc:ifix:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B053BA0C-9BA3-46B3-B178-55D495137A06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.gefanuc.com/support/index?page=kbchannel&id=S:KB13253&actp=search",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/310355",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mcgrewsecurity.com/2009/02/10/ge-fanuc-releases-info-on-ifix-vulnerabilities-vu-310355/",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33739",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48691",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://support.gefanuc.com/support/index?page=kbchannel&id=S:KB13253&actp=search",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/310355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mcgrewsecurity.com/2009/02/10/ge-fanuc-releases-info-on-ifix-vulnerabilities-vu-310355/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T17:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Russ Allbery pam-krb5 before 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos libraries for setuid use, which allows local users to gain privileges by pointing an environment variable to a modified Kerberos configuration file, and then launching a PAM-based setuid application."
      }, {
        "lang" : "es",
        "value" : "Russ Allbery pam-krb5 versiones anteriores a v3.13, cuando es enlazado a través de MIT Kerberos, no inicializa correctamente las librerías Kerberos al usarlas en la fijación de propietario, permitiendo a usuarios locales obtener privilegios al apuntar una variable de entorno a un fichero de configuración de Kerberos modificado, y después llamando a una aplicación de fijación de propietario basada en PAM."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.12",
            "matchCriteriaId" : "989241C8-BC2F-4DE2-BF9E-9CC64198AF5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E491A2-9478-4462-8BCD-6DD79954C418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4837527C-9618-412F-A8CB-87122CF35B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F20698B7-B13B-488C-A49F-90A4490DA0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81821DD4-343A-4CDE-A7A6-CA606662971C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A629B4-55FA-418E-97FC-935B022A4F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B5451CD-CDCC-4D9D-A076-45E7B14EEF76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7761042-9FFB-4235-9A34-22B91CE2CA73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633EE1E7-1B5D-4D10-BA4B-D13A15BA68B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6844EE-3552-429A-A3D8-9A6B6C3B2785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9619E40-83AA-46D6-AECF-CC7FF6B1ED1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF1D6C7-15E6-4DAA-92C1-C216905866B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0342E5-B622-4A5E-A57F-6EAF85E268C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2684C7D-B266-4460-9DAD-945B4DECF57C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC110CB-253F-44E6-8515-FC9025EBF57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78AEED8-34AB-41B7-926F-6F7995253E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB53833E-EB9E-4ED8-8BC5-B681BE0B2897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE72618-6BE5-45F3-A782-991A73C09389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315E2FB7-EEE5-48AA-B058-F53AEA210807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4421B50-CC46-4EA6-AACF-DBE0EE76A389"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33914",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33917",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-39.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1021711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-252767-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-070.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eyrie.org/~eagle/software/pam-krb5/security/2009-02-11.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500892/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-719-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-39.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-252767-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-070.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eyrie.org/~eagle/software/pam-krb5/security/2009-02-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500892/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-719-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Per vendor advisory:\r\n http://www.eyrie.org/~eagle/software/pam-krb5/security/2009-02-11.html\r\n\r\n\"This advisory is only for my pam-krb5 module, as distributed from my web site and packaged by Debian, Ubuntu, and Gentoo.\"",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of the pam_krb5 package, as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.",
        "lastModified" : "2009-02-13T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T17:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Russ Allbery pam-krb5 before 3.13, as used by libpam-heimdal, su in Solaris 10, and other software, does not properly handle calls to pam_setcred when running setuid, which allows local users to overwrite and change the ownership of arbitrary files by setting the KRB5CCNAME environment variable, and then launching a setuid application that performs certain pam_setcred operations."
      }, {
        "lang" : "es",
        "value" : "Russ Allbery pam-krb5 versiones anteriores a v3.13, como el usado por libpam-heimdal, el comando \"su\" en Solaris 10, y otros programas, no gestiona correctamente las peticiones a \"pam_setcred\" al ejecutar \"setuid\", permitiendo a usuarios locales sobreescribir y cambiar los propietarios de los ficheros que elijan al asignarle un valor a la variable de entorno \"KRB5CCNAME\", y después invocar la aplicación setuid que efectúa ciertas operaciones \"pam_setcred\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.12",
            "matchCriteriaId" : "989241C8-BC2F-4DE2-BF9E-9CC64198AF5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633EE1E7-1B5D-4D10-BA4B-D13A15BA68B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6844EE-3552-429A-A3D8-9A6B6C3B2785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9619E40-83AA-46D6-AECF-CC7FF6B1ED1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF1D6C7-15E6-4DAA-92C1-C216905866B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0342E5-B622-4A5E-A57F-6EAF85E268C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2684C7D-B266-4460-9DAD-945B4DECF57C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC110CB-253F-44E6-8515-FC9025EBF57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78AEED8-34AB-41B7-926F-6F7995253E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB53833E-EB9E-4ED8-8BC5-B681BE0B2897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE72618-6BE5-45F3-A782-991A73C09389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315E2FB7-EEE5-48AA-B058-F53AEA210807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4421B50-CC46-4EA6-AACF-DBE0EE76A389"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33914",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33917",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33918",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-39.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1021711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-252767-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-070.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eyrie.org/~eagle/software/pam-krb5/security/2009-02-11.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500892/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-719-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-39.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-252767-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-070.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eyrie.org/~eagle/software/pam-krb5/security/2009-02-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500892/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-719-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of the pam_krb5 package, as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.",
        "lastModified" : "2009-02-13T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T17:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Message Broker 6.1.x before 6.1.0.2 writes a database connection password to the Event Log and System Log during exception handling for a JDBC error, which allows local users to obtain sensitive information by reading these logs."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Message Broker v6.1.x anteriores a v6.1.0.2 escribe la contraseña de conexión a la base de datos en el registro de eventos y en el registro del sistema cuando maneja una excepción por un error JDBC, permitiendo a usuarios locales obtener información sensible al leer estos ficheros de registro."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.0.1",
            "matchCriteriaId" : "21216BC9-AB23-42FB-8FC8-290AD72CF1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_message_broker:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69C3EE89-7F3F-4578-9EC8-7E03621D0273"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27011431",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IC55298",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27011431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IC55298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T17:30:00.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the load parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en send.php en Ninja Designs Mailist v3.0, cuando está habilitado register_globals y deshabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar código de su elección utilizando los caracteres .. (punto punto) en el parámetro \"load\". NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ninjadesigns:mailist:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0BB590-4E8A-473F-95BE-0DEFE323630A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33682",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33648",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T17:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the backup directory."
      }, {
        "lang" : "es",
        "value" : "admin.php en Ninja Designs Mailist v3.0 almacena copias de seguridad de maillist.php en el directorio de publicación web con control de acceso insuficiente, permitiendo a atacantes remotos obtener información sensible mediante una petición directa al directorio de copia de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ninjadesigns:mailist:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0BB590-4E8A-473F-95BE-0DEFE323630A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33682",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T17:30:00.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS (aka Flatnuke3) 2009-01-27 and 2009-02-04, when register_globals is enabled and magic_quotes_gpc disabled, allows remote attackers to execute arbitrary PHP code via a URL in the _FNROOTPATH parameter to (1) index.php and (2) filemanager.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en include/flatnux.php en FlatnuX CMS (conocido como Flatnuke3) v2009-01-27 y v2009-02-04, cuando está habilitado register_globals y deshabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"_FNROOTPATH\" en (1) index.php y en (2) filemanager.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnux:flatnux:2009-01-27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D31E7EEA-BA49-49F3-A5E9-4A69F6CB4824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnux:flatnux:2009-02-04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0C2E60-399C-4B40-87DB-E4E7869D9BA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33721",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500663/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33599",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/51729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500663/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T17:30:00.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in FotoWeb 6.0 (Build 273) allow remote attackers to inject arbitrary web script or HTML via the (1) s parameter to cmdrequest/Login.fwx and the (2) search parameter to Grid.fwx."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en FotoWeb v6.0 (Build 273) permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro (1) \"cmdrequest/Login.fwx\" y el parámetro de búsqueda \"Grid.fwx\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fotoware:fotoweb:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D34C83B-7C28-46A1-9030-C605C45B735D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33879",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fortconsult.net/images/pdf/advisories/FotoWebXSS_final.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33677",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fortconsult.net/images/pdf/advisories/FotoWebXSS_final.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T17:30:00.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Easy CafeEngine allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-4604."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Easy CafeEngine permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"catid\", siendo un vector diferente a CVE-2008-4604."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cafeengine:easycafeengine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAE289FD-2FEB-4009-8FDB-38E578FBB162"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33655",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T17:30:00.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the theme_views_bulk_operations_confirmation function in views_bulk_operations.module in Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to node titles.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función theme_views_bulk_operations_confirmation en views_bulk_operations.module en Views Bulk Operations v5.x anteriores a v5.x-1.3 y v6.x anteriores a v6.x-1.4, un módulo para Drupal, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados relacionados con los títulos de nodo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:views_bulk_operations:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.x-1.2",
            "matchCriteriaId" : "C7F0262C-63AD-4DAA-B503-0CB6AA45F5F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:views_bulk_operations:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.x-1.3",
            "matchCriteriaId" : "2A585CB1-6A1E-4971-AB23-9D95F01824D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035F7FAA-B762-4286-8C3A-C58BD8F6D1B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD496BAC-CF8D-4912-81EA-7D36D63A2C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EBE086D-AC0D-4481-9C70-D7C267B06BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECE38B8-F35F-4441-8755-6EA82312D539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CABEE05D-8BFC-4F2A-8799-730BCA68B9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:views_bulk_operations:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D635943-C525-437E-B8AB-BC33CC9651C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:views_bulk_operations:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E73FE3-70F4-4C3C-BF4A-D0EDDE8466C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:views_bulk_operations:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B776606C-475E-48C6-9412-178CF6C1BA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:views_bulk_operations:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E68E59D7-F580-40F9-8F21-4E8E49C0A254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/369223",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33836",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33622",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/369223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-13T17:30:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Java System Directory Server 5.2 p6 and earlier, and Enterprise Edition 5, allows remote attackers to cause a denial of service (daemon crash) via crafted LDAP requests."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Sun Java System Directory Server v5.2 p6 y versiones anteriores, y Enterprise Edition v5, permite a atacantes remotos provocar una denegación de servicio (parada de demonio) mediante peticiones LDAP manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "FFB0BDAA-9E8F-46EA-AE76-25E10CA55490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:5.0:-:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "8EA36B7D-1506-4B50-B371-8CF16879A62D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33850",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-116837-04-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-250086-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-116837-04-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-250086-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-16T17:30:04.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ModName parameter to (1) admin_words.php, (2) admin_groups_reapir.php, (3) admin_smilies.php, (4) admin_ranks.php, (5) admin_styles.php, and (6) admin_users.php in admin/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en PNphpBB2 1.2i y anteriores permiten a atacantes remotos incluir y ejecutar archivos locales a través de un .. (punto punto) en el parámetro ModName de (1) admin_words.php, (2) admin_groups_reapir.php, (3) admin_smilies.php, (4) admin_ranks.php, (5) admin_styles.php, y (6) admin_users.php en admin/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnphpbb:pnphpbb2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2i",
            "matchCriteriaId" : "2D6E1E24-71C9-48E1-B656-DB49BBF6A887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnphpbb:pnphpbb2:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A2E55E0-6CDD-4FB2-9ADB-3A43628FF702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnphpbb:pnphpbb2:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992AA511-3570-4748-82A6-EAAA3731238D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnphpbb:pnphpbb2:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45054E12-C43A-4AB6-AB67-BE35476AAC1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnphpbb:pnphpbb2:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E540782B-0470-4C67-92A5-7B86BA76028C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnphpbb:pnphpbb2:1.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "983A4BDA-616F-4951-A3C6-6B82F1BEAE6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnphpbb:pnphpbb2:1.2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "721E2C38-55B7-44B1-AA66-BCE5CFB73003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnphpbb:pnphpbb2:1.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3167741F-40E9-47FE-860A-A5DB2FEA8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnphpbb:pnphpbb2:1.2f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7CFBC2-13AF-4CE6-9736-4ED74008277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnphpbb:pnphpbb2:1.2g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "346F29D0-8F6B-4263-91E5-60E8B3AF76A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnphpbb:pnphpbb2:1.2h:rc3b:*:*:*:*:*:*",
            "matchCriteriaId" : "16F3AFD4-0E91-4AC1-9C9A-1D4754704BAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33365",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33103",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-16T17:30:04.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a newar action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en members.php de plx Auto Reminder v3.7 permite a atacantes autenticados remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\" en una acción \"newar\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plxwebdev:plx_auto_reminder:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7107BCB-6980-45B2-981D-4A980CA74306"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33283",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33106",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-16T17:30:04.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in phpSkelSite 1.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en phpSkelSite 1.4 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del campo PATH_INFO."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apmuthu:phpskelsite:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D6923A-045E-4DCC-BF50-E168A1F1EFDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33382",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33092",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-16T17:30:05.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en skysilver/login.tpl.php de phpSkelSite v1.4, cuando \r\nestá habilitado register_globals y deshabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"theme\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpskelsite:phpskelsite:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196FCA34-C7EE-4285-9A17-A2E57D15504B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33382",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33092",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-16T17:30:05.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the TplSuffix parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en skysilver/login.tpl.php en phpSkelSite 1.4, cuando register_globals está activado, permite a atacantes remotos incluir y ejecutar archivos locales a través de secuencias de salto de directorio en el parámetro TplSuffix."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpskelsite:phpskelsite:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196FCA34-C7EE-4285-9A17-A2E57D15504B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33382",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33092",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-16T17:30:05.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/index.php in w3b>cms (aka w3blabor CMS) before 3.4.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the benutzername parameter (aka Username field) in a login action."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en admin/index.php en w3b>cms (alias w3blabor CMS) en las versiones anteriores a la 3.4.0, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a través del parámetro Benutzername (alias campo Nombre de usuario) en una acción de inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3b_cms:aka_w3blabor_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.0",
            "matchCriteriaId" : "CD417EFE-155B-4163-B6E9-8D4BF03CCF80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.w3bcms.de/viewtopic.php?f=5&t=256",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33364",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33082",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.w3bcms.de/viewtopic.php?f=5&t=256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-16T17:30:05.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in PhpMesFilms 1.0 and 1.8 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en index.php en PhpMesFilms 1.0 y 1.8 permite a atacantes remotos ejecutar comandos SQL a través del parámetro Id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmesfilms:phpmesfilms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A1EA2-3A1B-4484-BB55-90C195F5F905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmesfilms:phpmesfilms:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3967282-DD50-42AF-998F-40347F792DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33332",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33105",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-16T20:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed NetScreen snoop file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en wiretap/netscreen.c en Wireshark v0.99.7 hasta v1.0.5 permite a usuarios remotos asistidos por usuarios locales, provocar una denegación de servicio (caída de la aplicación) a través de un fichero snoop NetScreen mal formado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801B1795-3DC4-4BE3-A693-37B6BD116B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17808311-AC2A-428A-BB8B-B08549C5DAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978C483C-A6F7-456F-9488-833D520D4A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB94CE6-03D3-43C3-B765-AC36961CD83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FADA30-FD98-42F3-80F1-E8794C77AC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33872",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0313.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501763/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33690",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2590",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-2984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00652.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/51815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0313.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501763/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-2984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00652.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-16T20:30:03.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wireshark 0.99.6 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted Tektronix K12 text capture file, as demonstrated by a file with exactly one frame."
      }, {
        "lang" : "es",
        "value" : "Wireshark 0.99.6 a 1.0.5 permite causar, a atacantes remotos con la ayuda de usuarios, una denegación de servicio (con cuelgue de la aplicación) a través de un fichero de captura Tektronix K12 debidamente modificado, como lo demuestra un archivo con un solo marco."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB52B779-7A2D-43E0-9F12-C65053002EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A85B028-7384-403A-817C-B5001F02A8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801B1795-3DC4-4BE3-A693-37B6BD116B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17808311-AC2A-428A-BB8B-B08549C5DAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978C483C-A6F7-456F-9488-833D520D4A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB94CE6-03D3-43C3-B765-AC36961CD83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FADA30-FD98-42F3-80F1-E8794C77AC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33872",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0313.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501763/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33690",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1937",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-2984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00652.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0313.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501763/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-2984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00652.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-16T20:30:03.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service (application crash) via format string specifiers in the HOME environment variable."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de formato de cadena en Wireshark 0.99.8 a 1.0.5 sobre plataformas No-Windows permite a usuarios locales provocar una denegación de servicio (con cuelgue de la aplicacion) a través de especificadores de formato de cadena en la variable de entorno HOME."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801B1795-3DC4-4BE3-A693-37B6BD116B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978C483C-A6F7-456F-9488-833D520D4A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB94CE6-03D3-43C3-B765-AC36961CD83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FADA30-FD98-42F3-80F1-E8794C77AC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EC02F3-3905-460D-8949-3B26394215CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55E4B92-88E0-41F0-AFA7-046A8D34A2CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469B74F2-4B89-42B8-8638-731E92D463B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34264",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0040",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501763/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33690",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021697",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0370",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3150",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-2984",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501763/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-2984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "evaluatorImpact" : "Per http://www.vupen.com/english/advisories/2009/0370:\n\n\"Multiple vulnerabilities have been identified in Wireshark, which could be exploited by local or remote attackers to cause a denial of service or compromise a vulnerable system.\"",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat does not consider this to be a security issue.  For further details, see: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0601#c3",
        "lastModified" : "2009-02-17T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-16T20:30:03.140",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in upload.php in WikkiTikkiTavi 1.11 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de actualización de archivo  en upload.php de WikkiTikkiTavi v1.11, permite a atacantes ejecutar código de su elección subiendo un fichero con una extención ejecutable, entonces puede acceder a él a través de una petición directa al fichero en img/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikkitikkitavi:wikkitikkitavi:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF62676F-9541-49EE-B84B-5729B6A74508"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-16T20:30:03.157",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10 allows remote authenticated users, with \"administer content types\" privileges, to inject arbitrary web script or HTML via the description parameter (aka the Help field).  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en index.php en el módulo Link 5.x-2.5 para Drupal 5.10 permite inyectar, a los usuarios remotos autenticados (con privilegios para \"administrar los tipos de contenido\"), HTML o scripts Web arbitrarios a través del parámetro descripción (alias el campo Help). NOTA: Algunos de estos detalles se obtienen a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:link_module:5.x-2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D8F935-7197-4E70-884B-DD7021DF3EB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE4DF7-6884-49BA-99D0-FCAE6DB75242"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0036.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33835",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/51780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-16T20:30:03.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the searching parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en index.php en PHP Director 0.21 y anteriores permite a atacantes remotos ejecutar comandos SQL a través del parámetro de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_director:php_director:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.21",
            "matchCriteriaId" : "A27E0102-ACFA-404A-ADD2-F80469ED5B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_director:php_director:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "267D9358-5381-4B6B-9CB6-3F3DA277E5BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33694",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-17T17:30:05.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Samizdat before 0.6.2 allow remote authenticated users to inject arbitrary web script or HTML via the (1) message title or (2) user full name."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Samizdat anterior a v0.6.2 permite a usuarios autenticados remotamente inyectar secuencias de comando web o HTML de su elección a través del (1) título del mensaje o (2) nombre completo de usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nongnu:samizdat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.1",
            "matchCriteriaId" : "0A20C9BD-1BA7-46AB-AEF5-7BC14DD9FA11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://samizdat.nongnu.org/release-notes/samizdat-0.6.1-xss-escape-title.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00171.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nongnu.org/samizdat/release-notes/samizdat-0.6.2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500961/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33768",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/52022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://samizdat.nongnu.org/release-notes/samizdat-0.6.1-xss-escape-title.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00171.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nongnu.org/samizdat/release-notes/samizdat-0.6.2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500961/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-17T17:30:05.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en (a) BarnOwl anterior a v1.0.5 y(b) owl v2.1.11 permiten a atacantes remotos ejecutar código de su elección a través de vectores que implican (1) un mensaje zcrypt manipulado, relacionado con zcrypt.c; (2) un comando reply en un mensaje con una lista Cc: Zephyr, relacionado con zwrite.c; y  otros usos sin especificar de los productos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barnowl:barnowl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4.1",
            "matchCriteriaId" : "E8B5153B-49DF-492F-B5B0-FA1F02D47FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barnowl:barnowl:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB114CBB-A7D7-424E-A8BC-56F4BCAECEE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barnowl:barnowl:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171619E8-3E32-4929-8944-2EC4A84CA988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barnowl:barnowl:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "684E559B-F7D9-471A-909C-2C40D301D0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barnowl:barnowl:1.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E30BFA-5340-4FFA-AA0F-B4AE2F3AF366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barnowl:barnowl:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0843A975-D31A-4EB0-8864-8F06298F2AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barnowl:barnowl:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA91149-6A01-4F7A-9488-DA340A46F1FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ktools:owl:2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33155A72-9F11-41E4-B494-8FAFFC6042E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://barnowl.mit.edu/browser/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://barnowl.mit.edu/wiki/barnowl-1.0.5-announce",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/515118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00173.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://barnowl.mit.edu/browser/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://barnowl.mit.edu/wiki/barnowl-1.0.5-announce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/515118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00173.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-17T17:30:05.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WSPolicy in the Web Services component in IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.1 does not properly recognize the IDAssertion.isUsed binding property, which allows local users to discover a password by reading a SOAP message."
      }, {
        "lang" : "es",
        "value" : "WSPolicy en el componente Web Services en IBM WebSphere Application Server (WAS) v7.0.x anterior a v7.0.0.1 no reconoce adecuadamente la propiedad de vínculo IDAssertion.isUsed, lo que permite a usuarios locales descubrir una contraseña leyendo un mensaje SOAP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "231A9A45-E2FE-423E-BE5D-AA9E3AFB5982"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK73573",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK73573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-17T17:30:05.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack consumption vulnerability in the do_page_fault function in arch/x86/mm/fault.c in the Linux kernel before 2.6.28.5 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via unspecified vectors that trigger page faults on a machine that has a registered Kprobes probe."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de agotamiento de pila en la función do_page_fault en arch/x86/mm/fault.c en el kernel de Linux anterior a v2.6.28.5 permite a usuarios locales provocar una denegación de servicio (corrupción de memoria) o posiblemente obtener privilegios a través de vectores no especificados que lanza fallos de página en la máquina que ha registrado una prueba Kprobes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.28.4",
            "matchCriteriaId" : "8326D9A2-64BB-4386-997C-17DC46C7242D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F9DBB0-8AF7-42CA-95DD-68A344E9D549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD00664-A27C-4514-A2A4-079E8F9B0251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E336C792-B7A1-4318-8050-DE9F03474CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D0159-1A05-4628-9C1C-360DED0F438C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6654B9-42EB-4C2C-8F71-710D50556180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FDF616-E410-4540-B377-98D1FB88CE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5313B736-9904-442A-84D6-8FC7B9AC2059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D42BA44-C69B-4170-9867-CABF93CA9BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "085259B8-9D41-42B0-B32B-66B8D365F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A12DE15-E192-4B90-ADB7-A886B3746DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6588E7-F4FA-40F5-8945-FC7B6094376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "AE87E13E-ACF7-4F74-8938-729F3B0D694C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D4965A12-1BBA-4494-A5C1-43E0C0F48C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "388414A1-C9B4-41BA-AD35-6501A463A095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FDBA01DD-C129-48F1-800B-838418F4A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "185F1EF8-04EB-43ED-B909-8BDF60F23E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "3483FAFA-353C-498F-AF68-8F5B84A0F30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6B11A9E1-9D90-46DC-81B5-17A137205AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "07EEC559-9240-46BE-9057-0F17D1F61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BBBC127F-D67E-43FE-BCFE-606C200084F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "42B18945-EE09-4E6B-8C11-E382E5F8F850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "12D0C03A-7D30-485F-8431-638918FE9658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA311B8-D32E-4853-9B07-58EAF1019D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F0F679-43C8-426E-A97E-C3B207A3331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA40BC48-D6B5-4424-B306-F99E85EBBCB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2DF2BB-F94A-4692-AFDC-47C42F04081B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "BB286B42-E739-46CD-BC96-972CFFAECB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "7636014B-CC2A-43A3-9C9A-04B26AEB06D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ED7CE5-3388-4CB9-AF60-A2AF19611327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3463B83B-E46F-456E-98BA-801C59AEB337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "05FD0767-03F3-416C-AB6D-6BC4A12220B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8452D554-8DEB-4265-839C-6B40CCFB56B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "94F445F9-57A5-4453-BB5D-290349C04A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "62C97D20-4152-47C4-B21B-8206CF49E20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=9be260a646bf76fa418ee519afa10196b3164681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33758",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=9be260a646bf76fa418ee519afa10196b3164681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5, or Red Hat Enterprise MRG.",
        "lastModified" : "2009-02-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-17T17:30:05.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The link_image function in linker/linker.c in the dynamic linker in Bionic in Open Handset Alliance Android 1.0 on the T-Mobile G1 phone does not properly handle file descriptors 0, 1, and 2 for a setgid program, which allows local users to create arbitrary files owned by certain groups, possibly a related issue to CVE-2002-0820."
      }, {
        "lang" : "es",
        "value" : "La función link_image en linker/linker.c en the dynamic linker en Bionic en Open Handset Alliance Android v1.0 en el teléfono T-Mobile G1 no maneja adecuadamente los descriptores de fichero 0,1 y 2 para un programa setgid, lo que permite a usuarios locales crear ficheros de su elección que pertenecen a ciertos grupos, posiblemente es un caso relacionado con CVE-2002-0820."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openhandsetalliance:android_sdk:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B47286-20C6-4580-B6B4-45A61E395D47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500753/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500753/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-17T17:30:05.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in malloc_leak.c in Bionic in Open Handset Alliance Android 1.0 have unknown impact and attack vectors, related to the (1) chk_calloc and (2) leak_calloc functions."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de entero en malloc_leak.c en Bionic en Open Handset Alliance Android v1.0 tienen un impacto y vectores de ataque desconocidos, relacionado con las funciones (1)chk_calloc y (2)leak_calloc,"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openhandsetalliance:android_sdk:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B47286-20C6-4580-B6B4-45A61E395D47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500753/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500753/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-17T17:30:05.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the showLog function in fake_log_device.c in liblog in Open Handset Alliance Android 1.0 allows attackers to trigger a buffer overflow and possibly have unspecified other impact by sending a large number of input lines."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función showLog en fake_log_device.c en liblog en Open Handset Alliance Android v1.0 permite a atacantes provocar un desbordamiento de búfer y posiblemente tener otro impacto no especificado mediante el envío de de un gran número de líneas de entrada.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:android:android_sdk:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E446CC-9C57-430D-A1B0-B6DC7E1D9635"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500753/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500753/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-17T17:30:06.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3, when a JDBC data source is used, does not properly handle (1) a long value in an ADD or (2) long string attributes, which allows remote attackers to cause a denial of service (JDBC backend outage) via crafted LDAP requests."
      }, {
        "lang" : "es",
        "value" : "Sun Java System Directory Proxy Server en Sun Java System Directory Server Enterprise Edition v6.0 hasta v6.3, cuando una fuente de datos JDBC es utilizado, no se maneja adecuadamente (1) un valor largo en un ADD o (2) atributos de cadena largos, lo que permite a atacantes remotos provocar una denegación de servicio (JDBC backend outage) a través de peticiones manipulada LDAP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:6.0:enterprise:*:*:*:*:*:*",
            "matchCriteriaId" : "3F302F27-68F5-4B92-8579-8568B13D849C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:6.1:enterprise:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FDCE4B-38AC-4843-82B5-7EF85750ACFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:6.2:enterprise:*:*:*:*:*:*",
            "matchCriteriaId" : "C8490D6F-42B3-4602-84A5-BBDD4315F366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:6.3:enterprise:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE986BB-D278-4B34-9DC1-5D3102F94AF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33923",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125276-08-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-251086-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125276-08-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-251086-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-17T17:30:06.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers to inject arbitrary PHP code into news.txt via the (1) title or (2) date parameter, and then execute the code via a direct request to display.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de inyección de código estático en post.php en Simple PHP News v1.0 final permite a atacantes remotos inyectar código PHP de su elección dentro de news.txt a través de (1) title o (2) parámetro \"date\". y entonces ejecutar el código a través de una petición directa a display.php. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos exclusivamente a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dminnich:simple_php_news:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43ECAF21-1F05-4D68-A261-12A1B578F51C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33814",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-17T17:30:06.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in qfsearch/AdminServlet in QuickFinder Server in Novell Open Enterprise Server 1.x allow remote attackers to inject arbitrary web script or HTML via (1) the siteloc parameter in a displayaddsite action, the site parameter in a (2) generalproperties or (3) clusterserviceproperties action, (4) the adminurl parameter in a global action, or (5) the print-list parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en qfsearch/AdminServlet en QuickFinder Server en Novell Open Enterprise Server v1.x permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) el parámetro \"siteloc\" en un acción displayaddsite, el parámetro \"site\" en (2)generalproperties o (3)acción clusterserviceproperties, (4) el parámetro \"adminurl\" en una acción global, o (5) el parámetro \"print-list\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:open_enterprise_server:1.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "244685A2-31AA-4833-B57F-665A6F4142E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0902-exploits/nqfs-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33886",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33708",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0902-exploits/nqfs-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-17T17:30:06.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the standalone proxy, forwards the Proxy-Authorization header from Windows Media Player, which allows remote web servers to obtain credentials by offering a media stream and then capturing this header."
      }, {
        "lang" : "es",
        "value" : "Trend Micro InterScan Web Security Virtual Appliance (IWSVA) v3.x e InterScan Web Security Suite (IWSS) v3.x, cuando la autorización básica está habilitada sobre el proxy independiente, reenvía la cabecera de autorización del proxy desde Windows Media Player, lo que permite a servidores Web remotos obtener credenciales ofreciendo una secuencia \"media\" y capturando esta cabecera."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:interscan_web_security_suite:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC79C75-0540-491C-BD74-DE305CB32EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:interscan_web_security_suite:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02441701-20A1-4600-8E02-71069147BB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D189E876-B64F-4C33-978C-AE502CD9F675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33891",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500760/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500760/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-17T17:30:06.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro InterScan Web Security Suite (IWSS) 3.1 before build 1237 allows remote authenticated Auditor and Report Only users to bypass intended permission settings, and modify the system configuration, via requests to unspecified JSP pages."
      }, {
        "lang" : "es",
        "value" : "Trend Micro InterScan Web Security Suite (IWSS) v3.1 anterior a build v1237 permite a usuarios  Auditor and Report Only autenticados remotamente evitar las configuraciones de permisos previstas, y modificar la configuración del sistema, a través de peticiones a páginas JSP sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:interscan_web_security_suite:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02441701-20A1-4600-8E02-71069147BB1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33867",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/iwss_31_win_en_readme_CP_1237_EN.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/iwss_31_win_en_readme_CP_1237_EN.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-18T16:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in SUSE blinux (aka sbl) in SUSE openSUSE 10.3 through 11.0 has unknown impact and attack vectors related to \"incoming data and authentication-strings.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en SUSE blinux (alias sbl) en SUSE openSUSE 10.3 a 11.0 tiene un impacto desconocido y proporciona vectores de ataque realacionados con \"datos entrantes y cadenas de autenticación\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B68DF-1440-4587-8458-9C5F4D1E43F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Following information confirms LOCAL Access Vector reported in Hyperlink Record 1058524:\r\n\r\nhttp://xforce.iss.net/xforce/xfdb/48797\r\n\r\nThe SUSE blinux (sbl) package is vulnerable to a buffer overflow. By sending a specially-crafted request, a local attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-18T16:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in moduli/libri/index.php in phpyabs 0.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the Azione parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de fichero en moduli/libri/index.php en phpyabs v0.1.2, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"Azione\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpyabs:phpyabs:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "028ECEB1-875C-466C-A0E8-092E614F0601"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33670",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-18T19:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it easier for remote attackers to obtain privileged access."
      }, {
        "lang" : "es",
        "value" : "La interfaz HTTP en Swann DVR4-SecuraNet tiene un cierto nombre de usuario y contraseña por defecto, lo que facilita a los atacantes remotos obtener acceso privilegiado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:swannsecurity:dvr4-securanet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44955928-E58F-446A-9E7E-7DDF56B6E449"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstorm.linuxsecurity.com/0902-exploits/cctv-disclose.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500789/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0902-exploits/cctv-disclose.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500789/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-18T23:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Jaws 0.8.8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) language, (2) Introduction_complete, and (3) use_log parameters, different vectors than CVE-2004-2445."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php in Jaws 0.8.8, permite a atacantes remotos autenticados leer ficheros de su elección mediante un .. (punto punto) en los parámetros (1) language, (2) Introduction_complete, y (3) use_log, vectores diferentes a los de CVE-2004-2445."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaws:jaws:0.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "635A0626-C1B2-4C92-B69E-E3A8F3155889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.jaws-project.com/blog/show/jaws-089-released",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33607",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.jaws-project.com/blog/show/jaws-089-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Reference links indicate file inclusion and script or code execution in addition to information exposure."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-18T23:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login and (2) password parameters to pcgi/4site.pl, (3) page parameter to print/print.shtml, (4) s and (5) i parameters to portfolio/index.shtml, (6) h parameter to hotel/index.php, (7) id parameter to news/news1.shtml, and the (8) th parameter to faq/index.shtml."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en 4Site CMS 2.6 y anteriores, permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) \"login\" y (2) \"password\" a pcgi/4site.pl, (3) \"page\" a print/print.shtml, (4) \"s\" y (5) \"i\" a portfolio/index.shtml, (6) \"h\" a hotel/index.php, (7) \"id\" a news/news1.shtml y (8) \"th\" a faq/index.shtml."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4site:4site_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6",
            "matchCriteriaId" : "510AA641-9C6C-4EA3-AB3B-4524B8AAC958"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33733",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wsec.ru/wsec-09-002-4site-cms-26-multiple-sql-injections/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.htbridge.ch/advisory/sql_injection_in_4site_cms.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/51806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/51807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/51808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/51809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/514376/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33594",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wsec.ru/wsec-09-002-4site-cms-26-multiple-sql-injections/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.htbridge.ch/advisory/sql_injection_in_4site_cms.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/51806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/51807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/51808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/51809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/514376/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-19T16:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "msnmsgr.exe in Windows Live Messenger (WLM) 2009 build 14.0.8064.206, and other 14.0.8064.x builds, allows remote attackers to cause a denial of service (application crash) via a modified header in a packet, as possibly demonstrated by a UTF-8.0 value of the charset field in the Content-Type header line.  NOTE: this has been reported as a format string vulnerability by some sources, but the provenance of that information is unknown."
      }, {
        "lang" : "es",
        "value" : "El archivo msnmsgr.exe en Windows Live Messenger (WLM) 2009, build 14.0.8064.206, y otras builds 14.0.8064.x, permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) por medio de un encabezado modificado en un paquete, como posiblemente sea demostrado mediante un valor UTF-8.0 del campo charset en la línea de encabezado Content-Type. NOTA: esto ha sido reportado como una vulnerabilidad de cadena de formato por algunas fuentes, pero la procedencia de esa información es desconocida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_live_messenger:2009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6D95AB-30CF-471F-9432-4623590DA603"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33985",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501043/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0466",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501043/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-19T16:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in the manage_users handler in admin/index.php in Falt4 CMS (aka Falt4 Extreme) RC4 allow remote attackers to hijack the authentication of administrators for requests that change passwords via the (1) edit and (2) edit_now actions."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de falsificación de petición de sitios cruzados en el manipulador manage_users en admin/index.php en Falt4 CMS (también conocido como Falt4 Extreme) RC4 permite a atacantes remotos cambiar los administradores y las contraseñas a través de las acciones (1) \"edit\" y (2) \"edit_now\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:falt4:falt4_extreme:rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533679DC-C772-4848-ACAD-3EE40EFDA9DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstorm.linuxsecurity.com/0902-exploits/falt4-cms-xsrf.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33973",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0902-exploits/falt4-cms-xsrf.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-20T06:47:48.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows remote attackers to read arbitrary files via a .. (dot dot) in the URI, as demonstrated by reading the vy_netman.cfg file that contains passwords."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el servidor web administrativo en Swann DVR4-SecuraNet permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en la URI, como lo demostrado leyendo el fichero vy_netman.cfg que contiene contraseñas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:swannsecurity:dvr4-securanet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44955928-E58F-446A-9E7E-7DDF56B6E449"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0902-exploits/cctv-disclose.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33861",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500789/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33716",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/51897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0902-exploits/cctv-disclose.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500789/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-20T06:47:48.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a method that was valid only in older FreeBSD distributions, which might allow remote attackers to execute arbitrary code by passing a crafted environment variable from a telnet client, as demonstrated by an LD_PRELOAD value that references a malicious library."
      }, {
        "lang" : "es",
        "value" : "sys_term.c en telnetd en FreeBSD v7.0-RELEASE y otras v7.x borra variables de entorno peligrosas con un método que solo fue valido en distribuciones antiguas de FreeBSD, lo que permite a atacantes remotos ejecutar código de su elección a través de un cliente de telnet de una variable de entorno manipulada, como se demuestra mediante el valor LD_PRELOAD que hace referencia a una librería maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        }, {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E0A416-733A-4616-AE08-150D67FCEA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.0:beta_4:*:*:*:*:*:*",
            "matchCriteriaId" : "CDFA5AA9-E73F-448D-9754-41AF9AECB93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.0:current:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E775BA-6DC1-4006-83A4-D30EA57417FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.0-release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC290462-4364-464F-8CE9-6F5E5BE6F246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.0_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F06B831E-D8F2-4380-B279-559CE103210F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.0_releng:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACC9072-4A33-4F1F-B790-2F9D5A52F71B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803EFA9F-B7CB-4511-B1C1-381170CA9A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "52DBF406-9C77-4DDA-AB7D-40FAE40023D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2009-February/067954.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-09:05.telnetd.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33777",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2009-February/067954.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-09:05.telnetd.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-20T06:47:48.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSP_basic_verify function, which might allow remote attackers to successfully present an invalid X.509 certificate, possibly involving a revoked certificate."
      }, {
        "lang" : "es",
        "value" : "ext/openssl/ossl_ocsp.c en Ruby v1.8 y v1.9 no comprueba adecuadamente el valor de retorno de la funcion OCSP_basic_verify, lo cual permitiria a atacantes remotos tener exito en la presentacion de un certificado X.509 invalido, posiblemente utilizando un certificado revocado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA01D6F-3B61-44EC-A6EA-9E878A0D5B99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9237145-35F8-4E05-B730-77C0F386E5B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=513528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://redmine.ruby-lang.org/issues/show/1091",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1140.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-805-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=513528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://redmine.ruby-lang.org/issues/show/1091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1140.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-805-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-20T06:47:48.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject arbitrary PHP code into news.txt via the post parameter, and then execute the code via a direct request to display.php.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático en post.php en Simple PHP News v1.0 final permite a atacantes remotos inyectar código PHP a su elección en news.txt a traves del parámetro \"post\" y ejecutar el código a través de una petición directa a display.php. NOTA: Algunos detalles fueron obtenidos de una información de una tercera parte."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dminnich:simple_php_news:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43ECAF21-1F05-4D68-A261-12A1B578F51C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33814",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-20T18:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web browser in Symbian OS on the Nokia N95 cell phone allows remote attackers to cause a denial of service (crash) via JavaScript code that calls the setAttributeNode method."
      }, {
        "lang" : "es",
        "value" : "El navegador web en Symbian OS en el telefono movil Nokia N95 permite a atacantes remotos producir una denegacion de servicio (caida) a traves de codigo JavaScript que llama al metodo setAttributeNode."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nokia:n95:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49212645-371B-4B59-9456-12226083E83F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:symbian_s60_browser:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "368AB714-3DFF-4748-97B7-FFCF652C8DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/500954/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33767",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500954/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-20T18:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 and earlier, and possibly 5.02, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a STATS line with a long pwd field.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la funcion GetStatsFromLine en TPTEST v3.1.7 y anteriores, y posiblemente v5.02, lo que permite a atacantes remotos producir una denegacion de servicio (caida de aplicacion) y posiblemente ejecutar codigo a su eleccion a traves de la linea STATS con un campo largo \"pwd\". NOTA: Algunos de los detalles fueron obtenidos de una tercera parte."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tptest:tptest:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.7",
            "matchCriteriaId" : "FA3D5FA8-C3C1-4F04-9446-6A5D3E9DF3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tptest:tptest:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C10F30-986C-4C8E-9865-63C845A1007F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33972",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33785",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-20T18:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Veritas network daemon (aka vnetd) in Symantec Veritas NetBackup Server / Enterprise Server 5.x, 6.0 before MP7 SP1, and 6.5 before 6.5.3.1 allows remote attackers to execute arbitrary code via unknown vectors related to \"initial communications setup.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el demonido de red Veritas (tambien conocido como vnetd) en Symantec Veritas NetBackup Server / Enterprise Server v5.x, v6.0 anterior a MP7 SP1, y v6.5 anterior a v6.5.3.1 lo que permite a atacantes remotos ejecutar codigo a su elecciona traves de vectores desconocidos relacionados con el \"ajuste incial de comunicaciones\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:veritas_netbackup_server_\\/enterprise_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1mp7",
            "matchCriteriaId" : "14E0B342-8B4E-4E5F-842D-920C4548F20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:veritas_netbackup_server_\\/enterprise_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0mp7",
            "matchCriteriaId" : "10A86601-C514-4704-AB13-4FE761D31F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:veritas_netbackup_server_\\/enterprise_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5.2",
            "matchCriteriaId" : "4AF64488-A905-4B3C-AAB2-48286D49B98F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:veritas_netbackup_server_\\/enterprise_server:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A665E030-ACF2-46F3-8C91-DEC109BEF062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:veritas_netbackup_server_\\/enterprise_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3C740C-0C65-4E83-B5F0-CB9A6A74E2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:veritas_netbackup_server_\\/enterprise_server:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F574AF2F-7336-4BA4-946D-C58DD225DA72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33953",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2009.02.17.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seer.entsupport.symantec.com/docs/317828.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253287-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2009.02.17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seer.entsupport.symantec.com/docs/317828.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253287-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0577",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-02-20T19:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the WriteProlog function in texttops in CUPS 1.1.17 on Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow.  NOTE: this issue exists because of an incorrect fix for CVE-2008-3640."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la funcion WriteProlog en texttops en CUPS v1.1.17 en Red Hat Enterprise Linux (RHEL) v3 lo que permite atacantes remotos ejecutar codigo a su eleccion a traves de un fichero PostScript manipulado que dispara un desbordamiento de bufer basado en monticulo. NOTA: Esto existe debido a un arreglo incompleto de CVE-2008-3640."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8335D4E3-563D-4288-B708-A9635BCA595F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444EBE64-D3C8-41E9-8E02-22C6BDA2876B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33995",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-064.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0308.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=486052",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48977",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9968",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-064.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0308.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=486052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-20T19:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by homoglyphs of the / (slash) and ? (question mark) characters in a subdomain of a .cn domain name, a different vulnerability than CVE-2005-0233.  NOTE: some third parties claim that 3.0.6 is not affected, but much older versions perhaps are affected."
      }, {
        "lang" : "es",
        "value" : "La lista negra de Internationalized Domain Names (IDN) en Mozilla Firefox versión 3.0.6 y otras versiones anteriores a 3.0.9; Thunderbird anterior a versión 2.0.0.21; y SeaMonkey anterior a versión 1.1.15, no incluye caracteres box-drawing, lo que permite a los atacantes remotos falsificar URL y conducir ataques de phishing, como es demostrado por homoglifos de / (barra lateral) y caracteres ? (signo de interrogación) en un subdominio de un nombre de dominio .cn, una vulnerabilidad diferente de CVE-2005-0233. NOTA: algunos terceros afirman que la versión 3.0.6 no está afectada, pero las versiones mucho más antiguas tal vez estén afectadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.6",
            "matchCriteriaId" : "63B35DF5-2532-4BB3-9A0B-1388320FD7A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.14",
            "matchCriteriaId" : "A757D692-B21F-4768-BB9C-7B2AF2B274FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.20",
            "matchCriteriaId" : "28E241C3-B460-44AA-9716-1537ACC1686D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF479C3-95A0-414F-B47B-C94BE95713D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2009-February/005556.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2009-February/005563.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0437.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34844",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Marlinspike",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-15.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2009-February/005556.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2009-February/005563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Marlinspike",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-20T19:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970."
      }, {
        "lang" : "es",
        "value" : "OpenSSL, probablemente v0.9.6, no verifica las limitacion basicas para un certificado de autoridad certificadora intermedia, lo que permite a atacantes remotos falsificar lo certificados de sitios de confianza, a traves de un ataque de hombre en el medio, relacionada con CVE-2002-0970."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E4742C-A983-4F00-B24F-AB280C0E876D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Marlinspike",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Marlinspike",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue was addressed in upstream OpenSSL prior to 0.9.6 and therefore does not affect the versions of OpenSSL as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.",
        "lastModified" : "2009-03-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-20T19:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor 0.2.0.28, and probably 0.2.0.34 and earlier, allows remote attackers, with control of an entry router and an exit router, to confirm that a sender and receiver are communicating via vectors involving (1) replaying, (2) modifying, (3) inserting, or (4) deleting a single cell, and then observing cell recognition errors at the exit router.  NOTE: the vendor disputes the significance of this issue, noting that the product's design \"accepted end-to-end correlation as an attack that is too expensive to solve.\""
      }, {
        "lang" : "es",
        "value" : "Tor v0.2.0.28, y posiblemente v0.2.0.34 y anteriores, permite a atacantes remotos, con el control de un enrutador de salida y otro de entrada, confirmar que un receptor y un remitente estan comunicandose a traves de los vectores (1) replaying, (2) modifying, (3) inserting, or (4) deleting a single cell, y despues observar los errores de reconocimiento de celula en el enrutador de salida. NOTA: El vendedor no esta de acuerda con la importancia de este hecho."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:*:alpha:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.0.34",
            "matchCriteriaId" : "95A5691B-621A-4B7D-8F83-2C95DF30EF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5CEE9D-FE82-4E87-AEA0-9A2D8186E522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3729DD-BFCC-4293-9DE7-B02588753F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5D08533D-A187-4C0E-AD4C-41061FB42413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7EADACB1-31D9-4297-A1C3-7F281A0AF154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "D560434E-2636-4C7B-AC6B-A5952123B8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3334C5-92F3-403D-9116-4559D18F677F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7B173DF1-D506-47F4-8F13-18026BF7A974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.8:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4462DB3B-BF33-4BFA-A9C9-CF674A18D24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.9:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5E666EDB-F72C-4B14-8FF4-95B082BB38EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.10:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "96BCAA3F-EF7F-457B-8468-A736527A4F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.11:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4D706AEC-0814-4706-BA4C-6FED01AA4D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.12:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "53FCE242-9B64-4D71-BBB3-8085F7FBA8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.13:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FD6A26-7219-4958-B959-C6365193F839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.14:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "F6307EF6-1449-43B2-A3B8-DF0EA3A6985F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.15:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78C0FF05-0E18-4C48-BE3E-FBC881F468D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.16:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C32845-BAB4-422A-B1BA-568793B4E935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.17:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "0159DCD6-3C52-4B4C-82EC-4E699366E917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.18:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "9E245295-3EF6-4E6D-8D44-D45B8A198E61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.19:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "38DA0AF4-C053-4EEC-AA37-5089C9E6C778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.20:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8EE453-2FAC-4927-AC89-C92B2A947E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.21:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE434E6-63E1-44B0-AA79-BBDABC040234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.22:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC742E5-CA75-43E4-BCD5-54B712CF205E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.23:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "DADA7B77-7DBE-4A62-BE4A-83975D4D7311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.24:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "30D57B03-30FE-48E8-B6BA-77538F067D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.25:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E6BD04-775B-4EDE-BF3E-2896BB59F895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.26:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7900A51A-4E1E-412C-945E-DAB21078BD4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.27:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2B68CEAF-2287-4C1B-A147-DD718E7C6418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.28:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3CE396-518B-465F-AB91-6572601F0C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.29:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B70887CA-5A54-410D-B9B4-84EE31899FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.30:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C538F301-D9A9-48CC-AB77-AD073935D1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.31:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC42FE4-48BE-4EF2-900F-401CF34F113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.32:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "95E17189-F12A-4914-AEDC-52345D097A9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.torproject.org/blog/one-cell-enough",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Fu",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blackhat.com/presentations/bh-dc-09/Fu/BlackHat-DC-09-Fu-Break-Tors-Anonymity.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://blog.torproject.org/blog/one-cell-enough",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Fu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blackhat.com/presentations/bh-dc-09/Fu/BlackHat-DC-09-Fu-Break-Tors-Anonymity.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-20T19:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lenovo Veriface III allows physically proximate attackers to login to a Windows account by presenting a \"plain image\" of the authorized user."
      }, {
        "lang" : "es",
        "value" : "Lenovo Veriface vIII permite a atacantes fisicamente proximos acceder a la cuenta de usuario mediante la presentacion de una \"imagen plana\" del usuario autorizado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:veriface:iii:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC54C22-C4B9-4FF4-BF2C-1733D2B9754B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.bkis.vn/?p=292",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Nguyen",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blackhat.com/presentations/bh-dc-09/Nguyen/BlackHat-DC-09-Nguyen-Face-not-your-password.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/498997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/32700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.bkis.vn/?p=292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Nguyen",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blackhat.com/presentations/bh-dc-09/Nguyen/BlackHat-DC-09-Nguyen-Face-not-your-password.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/498997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/32700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0656",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-20T19:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Asus SmartLogon 1.0.0005 allows physically proximate attackers to bypass \"security functions\" by presenting an image with a modified viewpoint that matches the posture of a stored image of the authorized notebook user."
      }, {
        "lang" : "es",
        "value" : "Asus SmartLogon v1.0.0005 permite a usuarios fisicamente proximos evitar las \"funciones de seguridad\" mediante la presentacion de una imagen con un punto de vista modificado que coincida con la postura de la imagen autorizada del usuario legitimo almacenada en el equipo,"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asus:smartlogon:1.0.0005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55007B32-6107-4A57-8782-C94683644685"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.bkis.vn/?p=292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Nguyen",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blackhat.com/presentations/bh-dc-09/Nguyen/BlackHat-DC-09-Nguyen-Face-not-your-password.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/498997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/32700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.bkis.vn/?p=292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Nguyen",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blackhat.com/presentations/bh-dc-09/Nguyen/BlackHat-DC-09-Nguyen-Face-not-your-password.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/498997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/32700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-20T19:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Toshiba Face Recognition 2.0.2.32 allows physically proximate attackers to obtain notebook access by presenting a large number of images for which the viewpoint and lighting have been modified to match a stored image of the authorized notebook user."
      }, {
        "lang" : "es",
        "value" : "Toshiba Face Recognition v2.0.2.32 permite a atacantes fisicamente proximos obtener acceso al equipo mediante la presentacion de un largo numero de imagenes en las que el punto de vista y la luz ha sido modificada para que coincida con la del usuario legitimo del equipo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:toshiba:face_recognition:2.0.2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "417FF359-7C27-486B-9635-D5C4D96354D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.bkis.vn/?p=292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Nguyen",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blackhat.com/presentations/bh-dc-09/Nguyen/BlackHat-DC-09-Nguyen-Face-not-your-password.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/498997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/32700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.bkis.vn/?p=292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Nguyen",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blackhat.com/presentations/bh-dc-09/Nguyen/BlackHat-DC-09-Nguyen-Face-not-your-password.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/498997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/32700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-20T19:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF document, related to a non-JavaScript function call and possibly an embedded JBIG2 image stream, as exploited in the wild in February 2009 by Trojan.Pidief.E."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer en Adobe Reader versión 9.0 y anteriores, y Acrobat  versión 9.0 y anteriores, permite a los atacantes remotos ejecutar código arbitrario por medio de un documento PDF creado, relacionado con una llamada a una función que no sea JavaScript y posiblemente una secuencia de imágenes del componente JBIG2 incrustada, tal como se explotó “in the wild” en febrero de 2009 por Trojan.Pidief.E."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "C45837B4-F4F9-45DC-B324-48BD4AB51973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.1.4",
            "matchCriteriaId" : "5C1BEE55-AAE2-4D61-9156-7E34692469C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "4BB02266-8184-4A96-A1F0-66C9A3F0A329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.1.4",
            "matchCriteriaId" : "07DD4484-A823-4B8B-8939-44A553E2FD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isc.sans.org/diary.html?n&storyid=5902",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/52073",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/33901",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34392",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34490",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34706",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34790",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-17.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/advisories/apsa09-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-04.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/905281",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0376.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33751",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021739",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20090219",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.symantec.com/security_response/writeup.jsp?docid=2009-021212-5523-99&tabid=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-051A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0472",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1019",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48825",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5697",
        "source" : "cve@mitre.org",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8090",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8099",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://isc.sans.org/diary.html?n&storyid=5902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/52073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/33901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/advisories/apsa09-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/905281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0376.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20090219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.symantec.com/security_response/writeup.jsp?docid=2009-021212-5523-99&tabid=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-051A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0659",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-20T19:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 allows remote attackers to have an unknown impact via a STATS line with a long email field.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la funcion GetStatsFromLine en TPTEST v3.1.7 permite a atacantes remotos obtener un impacto desconocido a traves de la linea STATS con un campo \"long email\". NOTA; La procedencia es desconocida; los detalles fueron obtenidos unicamente por una tercera parte."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tptest:tptest:3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5850DB42-3355-4E37-B858-B02F3AD61AC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33972",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0040",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-02-22T22:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables."
      }, {
        "lang" : "es",
        "value" : "La libreria de referencia PNG (tambien conocida como libpng) anterior a v1.0.43, y v1.2.x anteriores a 1.2.35, utilizado en pngcrush y otras aplicaciones, lo que permite a atacantes dependientes de contexto producir una denegacion de servicio (caida de aplicacion) o posiblemente ejecutar codigo a traves de de un fichero PNG manipulado que inicia un puntero sin inicializar en (1) la funcion png_read_png, (2) manejador pCAL, o (3) instalacion de tablas de gamma de 16-bit."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.43",
            "matchCriteriaId" : "AC1A6D90-D8E8-4F56-BA83-47E9E5B46549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndExcluding" : "1.2.35",
            "matchCriteriaId" : "9789BC2F-6EB8-4357-90E8-0F372DA76170"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "48C7B5CA-82E7-4676-BDBA-76C1098DDEAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.8",
            "matchCriteriaId" : "80C038E4-C24D-45E9-8287-C205C0C07809"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B68DF-1440-4587-8458-9C5F4D1E43F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise:9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C3243C77-D635-480D-908C-328A479719E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise:10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AED08A6F-CD23-4405-B1CF-C96BB8AE7D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "513797E6-FCE6-4E84-9B66-202541F9601E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "743CBBB1-C140-4FEF-B40E-FAE4511B1140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.simplesystems.org/pub/png/src/libpng-1.2.34-ADVISORY.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://downloads.sourceforge.net/libpng/libpng-1.2.34-ADVISORY.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000062.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/33970",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33976",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34137",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34140",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34143",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34145",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34152",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34210",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34265",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34272",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34320",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34324",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34388",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34464",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35258",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35302",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35386",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-28.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201209-25.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_name=e56ccc8f0902181726i200f4bf0n20d919473ec409b7%40mail.gmail.com",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=1689&release_id=662441",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0046",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1750",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/649212",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:075",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:083",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0315.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0325.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0333.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0340.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501767/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503912/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505990/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33827",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33990",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0007.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0469",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0473",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0632",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1451",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1462",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1560",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48819",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10316",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6458",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00272.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00412.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "ftp://ftp.simplesystems.org/pub/png/src/libpng-1.2.34-ADVISORY.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://downloads.sourceforge.net/libpng/libpng-1.2.34-ADVISORY.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000062.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/33970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-28.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201209-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_name=e56ccc8f0902181726i200f4bf0n20d919473ec409b7%40mail.gmail.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=1689&release_id=662441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/649212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0333.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0340.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501767/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503912/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505990/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00272.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00412.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-22T22:30:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Partner Gateway (WPG) 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet (aka RNIF) document to a backend application, related to (1) \"altered service content\" and (2) \"digital signature foot-print.\""
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Partner Gateway (WPG) v6.0.0 hasta v6.0.0.7 no gestiona adecuadamente los fallos de verificación de firma, lo que permite a usuarios remotos autenticados enviar un documento RosettaNet (también conocido como RNIF) manipulado a una aplicación de administración, relacionado con (1) \"contenido de servicio alterado\" y (2) \"foot-print de firma digital\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B68684-EB29-4FC1-9CCF-559EE3E5885E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CD8555-DD04-4D12-8A99-62786588FC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3042B79-F460-4F94-8371-EEA0247F8DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23933DBA-A861-4EA3-85CB-C4C644651771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A79AA1-1791-4EC7-8155-4FC5EA9C8D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C7B6512-CBED-443E-A059-5B0591FCA60B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40E40C8-FEF8-464A-BA09-5223E4375999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ECAF146-F575-4CAD-A1F5-2FE9F04BE51C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33994",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21330341",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1JR31231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21330341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1JR31231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-22T22:30:00.860",
      "lastModified" : "2023-11-07T02:03:41.740",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Format string vulnerability in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit imap-2007d and other applications, allows remote attackers to execute arbitrary code via format string specifiers in the initial request to the IMAP port (143/tcp).  NOTE: Red Hat has disputed the vulnerability, stating \"The Red Hat Security Response Team have been unable to confirm the existence of this format string vulnerability in the toolkit, and the sample published exploit is not complete or functional.\"  CVE agrees that the exploit contains syntax errors and uses Unix-only include files while invoking Windows functions"
      } ],
      "metrics" : { },
      "references" : [ ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Disputed: The Red Hat Security Response Team have been unable to confirm the existence of this format string vulnerability in the toolkit, and the sample published exploit is not complete or functional.",
        "lastModified" : "2009-02-24T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-22T22:30:00.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Resend_Email module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary SQL commands via the user_prefix parameter to modules.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en el modulo Resend_Email en Raven Web Services RavenNuke v2.30 lo que permite a administradores remotos autentificados ejecutar comandos SQL a su elección a través del parámetro \"user_prefix\" a modules.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ravenphpscripts:ravennuke:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24561E2B-3481-4E0C-8115-14A7FBB2F176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ravenphpscripts.com/postt17156.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500988/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33787",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-72.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://ravenphpscripts.com/postt17156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-72.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-22T22:30:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary PHP code via the ID Field Name box in a yaCustomFields action to admin.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad del inyección \"Eval\" en la característica Custom Fields en el modulo Your Account en Raven Web Services RavenNuke v2.30 lo que permite a administradores remotos autentificados ejecutar codigo PHP a su elección a través de la sección ID Field Name en la acción yaCustomFields a admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ravenphpscripts:ravennuke:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24561E2B-3481-4E0C-8115-14A7FBB2F176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ravenphpscripts.com/postt17156.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500988/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.waraxe.us/advisory-72.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ravenphpscripts.com/postt17156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.waraxe.us/advisory-72.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-22T22:30:00.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "images/captcha.php in Raven Web Services RavenNuke 2.30, when register_globals and display_errors are enabled, allows remote attackers to determine the existence of local files by sending requests with full pathnames in the aFonts array parameter, and then observing the error messages, which differ between existing and nonexistent pathnames."
      }, {
        "lang" : "es",
        "value" : "images/captcha.php en Raven Web Services RavenNuke v2.30, cuando register_globals y display_errors estan activados, lo que permite a atacantes remotos determinar la existencia de ficheros locales mediante el envio de peticiones con rutas de directorio completas en el parametro aFonts array, y luego observando las diferencias en los mensajes de error, que es lo que difiere entre las rutas de directorio existentes y las no existentes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ravenphpscripts:ravennuke:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24561E2B-3481-4E0C-8115-14A7FBB2F176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ravenphpscripts.com/postt17156.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500988/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.waraxe.us/advisory-72.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ravenphpscripts.com/postt17156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.waraxe.us/advisory-72.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-22T22:30:00.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an \"inverted logic\" issue."
      }, {
        "lang" : "es",
        "value" : "La funcion skfp_ioctl en drivers/net/skfp/skfddi.c en el kernel de Linux anterior a v2.6.28.6 permite peticiones SKFP_CLR_STATS solo cuando la capacidad CAP_NET_ADMIN esta ausente, en cambio cuando esta capacidad esta presente, lo que permite a usuarios locales borrar las estadísticas de driver, relacionado con el hecho \"lógica inversa\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.28.5",
            "matchCriteriaId" : "A8CF3A02-9ED4-40DA-9214-FFCB00A4284A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D42BA44-C69B-4170-9867-CABF93CA9BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "085259B8-9D41-42B0-B32B-66B8D365F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A12DE15-E192-4B90-ADB7-A886B3746DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6588E7-F4FA-40F5-8945-FC7B6094376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "AE87E13E-ACF7-4F74-8938-729F3B0D694C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D4965A12-1BBA-4494-A5C1-43E0C0F48C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "388414A1-C9B4-41BA-AD35-6501A463A095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FDBA01DD-C129-48F1-800B-838418F4A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "185F1EF8-04EB-43ED-B909-8BDF60F23E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "3483FAFA-353C-498F-AF68-8F5B84A0F30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6B11A9E1-9D90-46DC-81B5-17A137205AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "07EEC559-9240-46BE-9057-0F17D1F61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BBBC127F-D67E-43FE-BCFE-606C200084F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "42B18945-EE09-4E6B-8C11-E382E5F8F850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "12D0C03A-7D30-485F-8431-638918FE9658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA311B8-D32E-4853-9B07-58EAF1019D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F0F679-43C8-426E-A97E-C3B207A3331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA40BC48-D6B5-4424-B306-F99E85EBBCB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2DF2BB-F94A-4692-AFDC-47C42F04081B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "BB286B42-E739-46CD-BC96-972CFFAECB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "7636014B-CC2A-43A3-9C9A-04B26AEB06D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ED7CE5-3388-4CB9-AF60-A2AF19611327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3463B83B-E46F-456E-98BA-801C59AEB337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "05FD0767-03F3-416C-AB6D-6BC4A12220B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8452D554-8DEB-4265-839C-6B40CCFB56B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "94F445F9-57A5-4453-BB5D-290349C04A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "62C97D20-4152-47C4-B21B-8206CF49E20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c25b9abbc2c2c0da88e180c3933d6e773245815a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.openwall.net/netdev/2009/01/28/90",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/02/20/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33938",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0326.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0360.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=486534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c25b9abbc2c2c0da88e180c3933d6e773245815a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.openwall.net/netdev/2009/01/28/90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/02/20/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0326.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0360.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=486534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 4 as the affected driver is not enabled in these kernels by default. The affected driver is enabled by default in Red Hat Enterprise Linux 2.1, 3, 5, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2009-0326.html and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2009-0360.html .\n\nAs Red Hat Enterprise Linux 2.1 and 3 are now in Production 3 of their maintenance life-cycle, http://www.redhat.com/security/updates/errata, and this issue has been rated as having moderate impact, the fix for this issue is not currently planned to be included in the future updates.",
        "lastModified" : "2009-05-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-22T22:30:00.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request."
      }, {
        "lang" : "es",
        "value" : "La función sock_getsockopt en net/core/sock.c en el kernel de Linux anterior a v2.6.28.6 no inicializa un miembro de cierta estructura, lo que permite a usuarios locales obtener información sensible de la memoria del kernel a través de una petición SO_BSDCOMPAT getsockopt."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.28.5",
            "matchCriteriaId" : "A8CF3A02-9ED4-40DA-9214-FFCB00A4284A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FDF616-E410-4540-B377-98D1FB88CE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5313B736-9904-442A-84D6-8FC7B9AC2059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D42BA44-C69B-4170-9867-CABF93CA9BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "085259B8-9D41-42B0-B32B-66B8D365F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A12DE15-E192-4B90-ADB7-A886B3746DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6588E7-F4FA-40F5-8945-FC7B6094376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "AE87E13E-ACF7-4F74-8938-729F3B0D694C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D4965A12-1BBA-4494-A5C1-43E0C0F48C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3069324C-28FB-4BB6-9451-F3AC6A8DA64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "388414A1-C9B4-41BA-AD35-6501A463A095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FDBA01DD-C129-48F1-800B-838418F4A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "185F1EF8-04EB-43ED-B909-8BDF60F23E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "3483FAFA-353C-498F-AF68-8F5B84A0F30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6B11A9E1-9D90-46DC-81B5-17A137205AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "07EEC559-9240-46BE-9057-0F17D1F61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BBBC127F-D67E-43FE-BCFE-606C200084F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "42B18945-EE09-4E6B-8C11-E382E5F8F850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "12D0C03A-7D30-485F-8431-638918FE9658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA311B8-D32E-4853-9B07-58EAF1019D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F0F679-43C8-426E-A97E-C3B207A3331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA40BC48-D6B5-4424-B306-F99E85EBBCB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2DF2BB-F94A-4692-AFDC-47C42F04081B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "BB286B42-E739-46CD-BC96-972CFFAECB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "7636014B-CC2A-43A3-9C9A-04B26AEB06D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ED7CE5-3388-4CB9-AF60-A2AF19611327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3463B83B-E46F-456E-98BA-801C59AEB337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "05FD0767-03F3-416C-AB6D-6BC4A12220B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8452D554-8DEB-4265-839C-6B40CCFB56B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "94F445F9-57A5-4453-BB5D-290349C04A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "62C97D20-4152-47C4-B21B-8206CF49E20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=df0bca049d01c0ee94afb7cd5dfd959541e6c8da",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2009/2/12/123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=123540732700371&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/02/20/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://patchwork.kernel.org/patch/6816/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0459.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/24/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/02/6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0326.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0360.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33846",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=486305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=df0bca049d01c0ee94afb7cd5dfd959541e6c8da",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lkml.org/lkml/2009/2/12/123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=123540732700371&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/02/20/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://patchwork.kernel.org/patch/6816/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/24/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/02/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0326.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0360.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=486305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-22T22:30:00.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "avatarlist.php in the Your Account module, reached through modules.php, in Raven Web Services RavenNuke 2.30 allows remote authenticated users to execute arbitrary code via PHP sequences in an element of the replacements array, which is processed by the preg_replace function with the eval switch, as specified in an element of the patterns array."
      }, {
        "lang" : "es",
        "value" : "avatarlist.php en el módulo Your Account, alcanzado a traves de modules.php, en Raven Web Services RavenNuke v2.30  lo que permite a usuarios remotos autentificados ejecutar codigo a su eleccion a traves de secuencias PHP en un elemento del array de reemplazo, lo que es procesado por la funcion preg_replace con el interruptor de evaluacion, como se especifica en un elemento del array de patrones."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ravenphpscripts:ravennuke:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24561E2B-3481-4E0C-8115-14A7FBB2F176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ravenphpscripts.com/postt17156.html&sid=12d1201371612260a42fa846ebce7bad",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33928",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/52007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500988/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.waraxe.us/advisory-72.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ravenphpscripts.com/postt17156.html&sid=12d1201371612260a42fa846ebce7bad",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/52007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.waraxe.us/advisory-72.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-22T22:30:01.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does not correspond to a valid font file, which reveals the installation path in an error message."
      }, {
        "lang" : "es",
        "value" : "images/captcha.php en RavenNuke v2.30 permite a atacantes remotos obtener información sensible a través del valor de un parámetro de aFonts array que no corresponde con un fichero de fuentes valido, lo que revela la ruta de instalación en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ravenphpscripts:ravennuke:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24561E2B-3481-4E0C-8115-14A7FBB2F176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ravenphpscripts.com/postt17156.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500988/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.waraxe.us/advisory-72.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ravenphpscripts.com/postt17156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.waraxe.us/advisory-72.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-22T22:30:01.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Your Account module in RavenNuke 2.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en el modulo Your Account en RavenNuke v2.30 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores inespecíficos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ravenphpscripts:ravennuke:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24561E2B-3481-4E0C-8115-14A7FBB2F176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ravenphpscripts.com/postt17156.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://ravenphpscripts.com/postt17156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-22T22:30:01.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cgi-bin/welcome/VPN_only in the web interface in Netgear SSL312 allows remote attackers to cause a denial of service (device crash) via a crafted query string, as demonstrated using directory traversal sequences."
      }, {
        "lang" : "es",
        "value" : "cgi-bin/welcome/VPN_only en el interfase Web en Netgear SSL312 permite a atacantes remotos provocar una denegación de servicio (caída del servicio) a través de una cadena de petición manipulada., como se ha demostrado utilizando secuencias de directorio transversal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netgear:ssl312:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098AEEF4-BA19-4041-B5A3-FF6A05D3017E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0084.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33896",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.helith.net/txt/netgear_ssl312_remote_dos.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33675",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0084.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.helith.net/txt/netgear_ssl312_remote_dos.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0698",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-02-23T15:30:04.110",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a 4X movie file with a large current_track value, a similar issue to CVE-2009-0385."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de entero en el demuxer 4xm (demuxers/demux_4xm.c) en xine-lib 1.1.16.1 permite a atacantes remotos provocar una denegación de servicio (con caída de la aplicación) y posiblemente ejecutar código arbitrario a través de un archivo de película 4X con un gran valor current_track. Se trata de un problema similar al de CVE-2009-0385."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066B88F9-0617-403E-9B7A-B8CAC6E76D5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.xine-project.org/show_bug.cgi?id=205",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=660071",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:298",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:299",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500514/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2009-004.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-746-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48954",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.xine-project.org/show_bug.cgi?id=205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=660071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500514/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2009-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-746-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-23T15:30:04.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in pagesUTF8/auftrag_allgemeinauftrag.jsp in Plunet BusinessManager 4.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the (1) QUB and (2) Bez74 parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en pagesUTF8/auftrag_allgemeinauftrag.jsp de Plunet BusinessManager v4.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) QUB y (2) \"Bez74\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plunet:business_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1",
            "matchCriteriaId" : "5E192FE6-1BBD-42E0-95A8-6D7B91D8BF4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-01/0032.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-01/0054.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securenetwork.it/ricerca/advisory/download/SN-2008-04.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33153",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-01/0032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-01/0054.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securenetwork.it/ricerca/advisory/download/SN-2008-04.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-23T15:30:04.140",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and (1) read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/Sys_DirAnzeige.jsp, or (2) list sensitive Jobs via a direct request to pagesUTF8/auftrag_job.jsp."
      }, {
        "lang" : "es",
        "value" : "Plunet BusinessManager 4.1 y anteriores permiten a usuarios remotos autenticados eludir las restricciones de acceso y (1) leer datos sensibles de Cliente u Ordenes a través de un acceso a pagesUTF8/Sys_DirAnzeige.jsp  con un parámetro Pfad modificado, o (2) listar Trabajos sensibles a través de una solicitud directa a pagesUTF8/auftrag_job.jsp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plunet:business_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1",
            "matchCriteriaId" : "5E192FE6-1BBD-42E0-95A8-6D7B91D8BF4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-01/0032.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-01/0054.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securenetwork.it/ricerca/advisory/download/SN-2008-04.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33153",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-01/0032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-01/0054.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securenetwork.it/ricerca/advisory/download/SN-2008-04.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-23T15:30:04.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in index.php in Cybershade CMS 0.2b, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) THEME_header and (2) THEME_footer parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en index.php en Cybershade CMS 0.2b, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en los parámetros (1) THEME_header y (2) THEME_footer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybershade:cybershadecms:0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EEE359-6A69-422D-8F54-A4F748993A42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33101",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-23T15:30:04.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Phoca Documentation (com_phocadocumentation) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a section action to index.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de SQL en el componente Phoca Documentation (com_phocadocumentation) de Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro id en una acción sección a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoca:com_phocadocumentation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40335480-875C-4527-AC72-50C0DD82973D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33114",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0026",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-23T15:30:04.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in bview.asp in ASPThai.Net Webboard 6.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de SQL en bview.asp en ASPThai.Net Webboard 6.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspthai.net:aspthai.net_webboard:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB871EA-8E05-4065-B291-D8BB093C8E18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33084",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-23T15:30:04.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in WSN Guest 1.23 allows remote attackers to execute arbitrary SQL commands via the search parameter in an advanced action."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en search.php en WSN Guest 1.23 permite a atacantes remotos ejecutar comandos SQL a través del parámetro Search en una acción avanzada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmastersite:wsn_guest:1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B32F0F-8BB8-4FEF-BA23-AC485A0AA543"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33097",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-23T15:30:04.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en news.php de PowerScripts PowerNews 2.5.4, cuando está desactivado magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL de su elección, a través del parámetro \"newsid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerscripts:powernews:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D7144F-0007-4E87-B671-77544E5F4198"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51110",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33363",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33081",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-23T15:30:04.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Simple Review (com_simple_review) component 1.3.5 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the category parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente Simple Review (com_simple_review) v1.3.5 para Joomla! y Mambo permite a atacantes remotos ejecutar comandos SQL de su elección, a través del parámetro \"category\" en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple-review:com_simple_review:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891CE0F3-EE97-4BAD-873B-A9F7B5CFE049"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A453A9F-12E9-40FC-8C42-D80C780154E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0901-exploits/joomlasimplereview-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33102",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0901-exploits/joomlasimplereview-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-23T15:30:04.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers to execute arbitrary SQL commands via the loginemail parameter (aka login field).  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/index.php de PowerClan v1.14a permite a atacantes remotos ejecutar comandos SQL de su elección, a través del parámetro \"loginemail\" (también conocido como campo \"login\"), NOTE: algunos de estos detalles se han obtenido de información de terceras personas.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerscripts:powerclan:1.14a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69157A7B-7D74-4EF1-9BE7-4E49273BC7EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33362",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33083",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-23T15:30:04.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in SemanticScuttle before 0.91 allow remote attackers to (1) hijack the authentication of administrators via unknown vectors or (2) hijack the authentication of arbitrary users via vectors involving the profile page."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo cross-site request forgery (CSRF) en SemanticScuttle anterior a versión 0.91 permiten a los atacantes remotos (1) secuestrar la autenticación de administradores por medio de vectores desconocidos o (2) secuestrar la autenticación de usuarios arbitrarios por medio de vectores que involucran la página profile."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:semanticscuttle:semanticscuttle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.90",
            "matchCriteriaId" : "BC5A5C27-5BEC-447A-821A-4C3921228C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:semanticscuttle:semanticscuttle:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81115CF0-0DDB-47DE-8B9B-34CBFB7863B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:semanticscuttle:semanticscuttle:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62BF88B6-892F-4144-8EF3-3D1AC7B0A6DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:semanticscuttle:semanticscuttle:0.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999D88B3-1EF0-492A-8A80-93EC031E3766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:semanticscuttle:semanticscuttle:0.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3B588E-95F5-4018-B6C0-91FA16EF2FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:semanticscuttle:semanticscuttle:0.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E445F40-C82B-4B63-A447-7FC9401BB224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33383",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=651587",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/33383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=651587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-23T15:30:04.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands via the user parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en login.php en PHPForball v1.6 permite a atacantes remotos ejecutar comandos SQL de su elección, a través del parámetro \"user\". NOTA: el origen de esta información es desconocido; los detalles se han obtenido solamente de información de terceras personas.\r\n \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vlad_alexa_mancini:phpfootball:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06D627A-00E6-44B1-B0D2-46DFF5C1A551"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33367",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-23T15:30:04.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PHPFootball 1.6 allow remote attackers to inject arbitrary web script or HTML via (1) the user parameter to login.php or (2) the dbfield parameter to filter.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en PHPFootball v1.6 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) el parámetro \"user\" en login.php, o (2) el parámetro \"dbfield\" en filter.php. NOTE: El origen esta información es desconocido; los detalles se han obtenido solamente de información de terceras partes.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vlad_alexa_mancini:phpfootball:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06D627A-00E6-44B1-B0D2-46DFF5C1A551"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/51103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/51103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-23T15:30:04.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "filter.php in PHPFootball 1.6 and earlier allows remote attackers to retrieve password hashes via a request with an Accounts value for the dbtable parameter, in conjunction with a Password value for the dbfield parameter.  NOTE: this has been reported as a SQL injection vulnerability by some sources, but the provenance of that information is unknown."
      }, {
        "lang" : "es",
        "value" : "filter.php en PHPFootball v1.6 y anteriores permite a atacantes remotos obtener hashes de contraseñas a través de una petición con un valor Accounts en el parámetro \"dbtable\", en conjunción con el valor Password en el parámetro \"dbfield\": NOTA: Esto ha sido reportado como una inyección SQL por algunas fuentes, pero el origen de esta información es desconocido.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vlad_alexa_mancini:phpfootball:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E33B72-3F09-4468-A8E2-6F06D884A167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vlad_alexa_mancini:phpfootball:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06D627A-00E6-44B1-B0D2-46DFF5C1A551"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33367",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/51102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/51102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-24T17:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the queue manager in IBM WebSphere MQ (WMQ) 5.3, 6.0 before 6.0.2.6, and 7.0 before 7.0.0.2 allows local users to gain privileges via vectors related to the (1) setmqaut, (2) dmpmqaut, and (3) dspmqaut authorization commands."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el gestor de cola de IBM WebSphere MQ (WMQ) v5.3, v6.0 anterior a v6.0.2.6 y v7.0 anterior a v7.0.0.2; permite a usuarios locales obtener privilegios a través de vectores relacionados con los comandos de autorización (1) setmqaut, (2) dmpmqaut y (3) dspmqaut."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36650BB9-861B-42B5-BCC1-492F84A64951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:5.3:-:express:*:*:*:*:*",
            "matchCriteriaId" : "428C853E-4F29-487B-805A-17AC769E1D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "465D718A-ACA5-444B-99EE-67876B8D3687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9728448F-E295-4C33-B2F4-17FAAFCDF169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F36C644-664C-4758-9762-E808C80AE904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C670A3F-7BBB-4115-A037-B5E732ABB6BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CD8F97-39E0-455C-92CA-F0FE9AE5A0CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97EC1D0-CA59-4E2C-84EB-054BF27D1BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CCD33A5-6567-43CB-909D-D1851ACF4AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3664585-D0B4-467C-9B6D-4F8E239F7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2216808-BAE9-4034-9618-5EC4CCB80E7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "594287A4-AF30-4872-A5B8-1421FAB5C674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "896273C9-11F9-45A0-BA46-66F37DFACCC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?rs=171&uid=swg27006037",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ40824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?rs=171&uid=swg27006037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ40824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-24T18:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in admin.php in Potato News 1.0.0 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the user cookie parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en admin.php en Potato News v1.0.0,permite a atacantes remotos incluir y ejecutar archivos de su elección a través de ..(punto punto) en el parámetro \"user cookie\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:potato-scripts:potato_news:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E992F02-9AAB-4BC9-AF4D-EC9F54B6280F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33729",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-24T23:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the gigcal_gigs_id parameter in a details action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente GigCalendar (com_gigcal) v1.0 para Mambo y Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro gigcal_gigs_id en una acción details en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gigcalendar:com_gigcalendar:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2D1050-B155-470F-8C50-C86DA90F832E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A453A9F-12E9-40FC-8C42-D80C780154E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33241",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-24T23:30:03.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in jobdetails.php in taifajobs 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the jobid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en jobdetails.php en taifajobs v1.0 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"jobid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tony_iha_kazungu:taifajobs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "3CB9794A-37EC-40F9-8FAB-28656856E9D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://e-rdc.org/v1/news.php?readmore=126",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/52256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501183/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33864",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://e-rdc.org/v1/news.php?readmore=126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/52256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501183/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-24T23:30:03.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the My_eGallery module for MAXdev MDPro (MD-Pro) and Postnuke allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showpic action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el módulo My-eGallery para MAXdev MDPro (MD-Pro) y Postnuke, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro pid en una acción showpic de index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:my_egallery:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1943F997-8B2F-49C9-B6E9-6E5331309853"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B05377-4F3B-46F2-80AA-1175A344F6BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:postnuke:postnuke:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69ED948F-298A-42DB-A45A-EF5EA0F04B38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33871",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-24T23:30:03.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Page Engine CMS 2.0 Basic and Pro allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the fPrefix parameter to (1) modules/recent_poll_include.php, (2) modules/login_include.php, and (3) modules/statistics_include.php and (4) configuration.inc.php in includes/.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en Page Engine CMS v2.0 Basic y Pro, permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de secuencias de salto de directorio en el parámetro \"fPrefix\" a (1) modules/recent_poll_include.php, (2) modules/login_include.php, (3) modules/statistics_include.php y (4) configuration.inc.php in includes/. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lingx:page_engine_cms:2.0:-:basic:*:*:*:*:*",
            "matchCriteriaId" : "BA8D0B15-AA9F-446E-99E7-29B37B34FB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lingx:page_engine_cms:2.0:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "E2065EC2-EEE9-4DF7-AAEF-A8328A96C8A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33983",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-24T23:30:03.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla!, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the gigcal _venues_id parameter in a details action to index.php, which is not properly handled by venuedetails.php, and (2) the gigcal_bands_id parameter in a details action to index.php, which is not properly handled by banddetails.php, different vectors than CVE-2009-0726."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en el componente GigCalendar (com_gigcal) v1.0 para Mambo y Joomla!, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través de (1) el parámetro gigcal _venues_id en una acción details para index.php, que no es manejada adecuadamente por venuedetails.php y (2) el parámetro gigcal_bands_id parameter en una acción details para index.php, que no es manejada adecuadamente por banddetails.php. Se trata de vectores diferentes de CVE-2009-0726."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gigcalendar:com_gigcalendar:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2D1050-B155-470F-8C50-C86DA90F832E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A453A9F-12E9-40FC-8C42-D80C780154E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/501174/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501175/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501176/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33859",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33863",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501174/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501175/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501176/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-24T23:30:03.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the template parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en pages/play.php de Free Arcade Script v1.0, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un .. (punto punto) en el parámetro template."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freearcadescript:free_arcade_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E5B02A-8093-4BA7-B9E3-4520C2EA2038"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34023",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33869",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-24T23:30:03.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Downloadcenter 2.1 stores common.h under the web root with insufficient access control, which allows remote attackers to obtain user credentials and other sensitive information via a direct request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Downloadcenter v2.1 almacena common.h en la raíz web con control de acceso insuficiente, esto permite a atacantes remotos obtener las credenciales de usuarios y otra información sensible a través de una solicitud directa. NOTA: información de origen desconocido; los detalles se han obtenido únicamente de fuentes de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lingx:downloadcenter:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC063BB-3CF4-49FB-B981-7078F0EFE93F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33992",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0238",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-02-25T16:30:00.343",
      "lastModified" : "2026-04-22T16:42:50.857",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1; and Excel in Microsoft Office 2004 and 2008 for Mac allow remote attackers to execute arbitrary code via a crafted Excel document that triggers an access attempt on an invalid object, as exploited in the wild in February 2009 by Trojan.Mdropper.AC."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3 y 2007 SP1; Excel Viewer 2003 Gold y SP3; Excel Viewer; Compatibility Pack para Word, Excel y PowerPoint 2007 File Formats SP1; y Excel de Microsoft Office 2004 y 2008 para Mac; permiten a atacantes remotos ejecutar código de su elección a través de un documento Excel manipulado que provoca un intento de acceso a un objeto no válido, tal y como se ha explotado libremente en Febrero 2009 por MDropper.XR."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2026-04-14",
      "cisaActionDue" : "2026-04-28",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Microsoft Office Remote Code Execution",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "896E23B1-AB34-43FF-96F3-BA6ED7F162AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBB33CD-CACF-4EB8-8B5F-8E1CB8D7A440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F703901F-AD7C-42E7-BBFA-529A8C510D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971EC323-267F-4DAF-BA3B-10A47A9F1ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "0B191155-67F2-4C6E-BD0C-AF5AF6F04BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2008:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "421ACF1B-1B21-4416-98ED-BAA5C210EAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C94F2C-786B-45E4-B80A-FC668D917014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2613CE-C469-43AE-A590-87CE1FAADA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B18C291F-57C2-4328-8FCF-3C1A27B0D18D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.zdnet.com/security/?p=2658",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=5923",
        "source" : "secure@microsoft.com",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "http://securitytracker.com/id?1021744",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/968272.mspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33870",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1023",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48875",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://blogs.zdnet.com/security/?p=2658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=5923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "http://securitytracker.com/id?1021744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/968272.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0238",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-25T16:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CICS listener in IBM TXSeries for Multiplatforms 6.2 GA waits for a forcepurge acknowledgement from the CICS Application Server (CICSAS) after an eci response timeout, which might allow remote authenticated users to cause a denial of service (forcepurge handling delay), or have unspecified other impact, via vectors involving slow or nonexistent acknowledgement."
      }, {
        "lang" : "es",
        "value" : "El listener CICS en IBM TXSeries para Multiplatforms 6.2 GA espera por un acuse de recibo \"forcepurge\" desde CICS Application Server (CICSAS) después de la finalización del tiempo de respuesta eci, lo que debería permitir a los usuarios remotos autenticados causar una denegación de servicios (demora en la manipulación de \"forcepurge\"), o tener otro impacto no especificado, a través de vectores que implican un lento o no existente acuse de recibo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:txseries:6.2:-:aix:*:*:*:*:*",
            "matchCriteriaId" : "35A53AA4-11A3-4274-9C7C-1AEB1C903E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:txseries:6.2:-:ga:*:*:*:*:*",
            "matchCriteriaId" : "3D4715FA-08F2-41BA-B5D3-D77BB8153E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:txseries:6.2:-:hp-ia:*:*:*:*:*",
            "matchCriteriaId" : "546BE6B7-EEF7-4F3B-8829-19954C03BBE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:txseries:6.2:-:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "FA4F1282-DD92-4ADA-AB93-55E7A8E513BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:txseries:6.2:-:solaris:*:*:*:*:*",
            "matchCriteriaId" : "875CC6DB-B368-4E02-8316-C8090A099960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:txseries:6.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E5227061-2047-4655-A868-6F87B6DBC0EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24019725",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ22391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24019725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ22391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-25T16:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1 and 6.0.2 before 6.0.2.33 on z/OS, when CSIv2 Identity Assertion is enabled and Enterprise JavaBeans (EJB) interaction occurs between a WAS 6.1 instance and a WAS pre-6.1 instance, allows local users to have an unknown impact via vectors related to (1) use of the wrong subject and (2) multiple CBIND checks."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en IBM WebSphere Application Server (WAS) v5.1 y v6.0.2 anterior a v6.0.2.33 sobre z/OS, cuando  está activado CSIv2 Identity Assertion y la interacción de  Enterprise JavaBeans (EJB) ocurre entre una instancia de  WAS v6.1 y WAS pre-6.1, permite a usuarios locales tener un impacto desconocido a través de vectores relacionados con (1) un uso del sujeto erróneo y (2)múltiples comprobaciones CBIND."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66DB2053-6DFD-4FF6-A6E9-444281531E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B68EE27-CC4F-4530-9DFE-D94171C45F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E5AEC-5C35-4962-B9BB-32D66290D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEBF289-F630-4386-8F79-5A1BF73BE6F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98E5593-1534-48E2-8CD5-B2D1CACDDAB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD71D5EA-9AF5-422C-810A-D136A5F132F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9D6BDA-39E1-4D15-9D86-E212809998FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2A78FE-8FA6-4532-9E9E-CF6F860EFAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63099EF9-0512-44CD-946A-9B25144E50D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9132BB1-5E2E-4CA6-9B63-027CF2A7229D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4421929D-C4B9-43C5-BE61-E68484D3B198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:z\\/os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A9DB7F-187D-42BA-B271-1C302E529BFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK71143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK71143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per http://www-01.ibm.com/support/docview.wss?uid=swg27006876#60223:\r\n\r\n\"Note: WebSphere Application Server V6.0.2 Fix Pack 2 (6.0.2.2), Fix Pack 4 (6.0.2.4), Fix Pack 6 (6.0.2.6), Fix Pack 8 (6.0.2.8), Fix Pack 10 (6.0.2.10), Fix Pack 12 (6.0.2.12), Fix Pack 14 (6.0.2.14), Fix Pack 16 (6.0.2.16), Fix Pack 18 (6.0.2.18), Fix Pack 20 (6.0.2.20), Fix Pack 22 (6.0.2.22) and Fix Pack 24 (6.0.2.24) were only published for the z/OS® platform.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-25T16:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Libero 5.3 SP5, and possibly other versions before 5.5 SP1, allows remote attackers to inject arbitrary web script or HTML via the search term field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en Libero v5.3 SP5, y posiblemente otras versiones anteriores a v5.5 SP1, permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del campo búsqueda term."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insightinformatics:libero:5.3:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "68000F3A-13AE-4956-AAF7-3B48E2A2CA1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0243.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/52263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0243.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/52263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-25T16:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Magento 1.2.0 and 1.2.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the username field in an admin/ request to index.php, possibly related to the login[username] parameter and the app/code/core/Mage/Admin/Model/Session.php login function; (2) the email address field in an admin/index/forgotpassword/ request to index.php, possibly related to the email parameter and the app/code/core/Mage/Adminhtml/controllers/IndexController.php forgotpasswordAction function; or (3) the return parameter to the default URI under downloader/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en Magento v1.2.0 y v1.2.1.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) el campo \"username\" en una petición  admin/ a index.php, posiblemente relacionado con el parámetro \"login[username]\" y la función de login app/code/core/Mage/Admin/Model/Session.php; (2) al campo \"email address\" en una petición admin/index/forgotpassword/ a index.php, posiblemente relacionado con el parámetro \"email\" y la función app/code/core/Mage/Adminhtml/controllers/IndexController.php forgotpasswordAction; o (3) el parámetro \"return\" a la URI por defecto bajo downloader/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magentocommerc:magento:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11B2C132-022B-4A55-9A99-FE02665D2520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magentocommerc:magento:1.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D75CA6-B651-4EBD-9B60-E0CF06D81BAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0257.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34000",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33872",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0257.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-25T20:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in MultimediaPlayer.exe 6.86.240.7 in Nokia PC Suite 6.86.9.3 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en el archivo MultimediaPlayer.exe v6.86.240.7 en Nokia PC Suite v6.86.9.3 que permite a los atacantes remotos ejecutar arbitrariamente código a través de una cadena de caracteres larga en un archivo de \"lista de reproducción\" .m3u ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:nokia_pc_suite:6.86.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF0BBA4-2167-4ACD-8DB7-E55B1AF79902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33796",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500627/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0318",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/51739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500627/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-25T20:30:02.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in lib/classes/message_class.php in Papoo CMS 3.6, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to read and possibly execute arbitrary files via a .. (dot dot) in the pfadhier parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en lib/classes/message_class.php en Papoo CMS v3.6, cuando register_globals es activado y  magic_quotes_gpc es desactivado, permite a atacantes remotos leer y posiblemente ejecutar archivos de su elección a través de ..(punto punto) en el parámetro \"pfadhier\". NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D559C7-89BB-4FE5-A276-D7697BA85374"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33911",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33718",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-25T20:30:02.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Pebble before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución  de secuencias de comandos en sitios cruzados en Pebble anterior a v2.3.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.1",
            "matchCriteriaId" : "0723613E-3F87-4242-8F04-2DBD85ACA1B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FFAC21-8B75-4475-8277-A1249E615AAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA0EF40-566D-432D-8C7F-E885821C5575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B12E869-D280-4CA4-AE6E-CD01EAA4D447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0582F1CE-E583-4343-9A85-E776E417E33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C41588C-1E82-442A-B004-F2C9B13D0DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.4:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E7FE34-D6DE-4DAD-BC97-7DECDFC3E031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.4:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F033DCBC-5172-4947-8976-CF1A72D7878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.4:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFA081E-120E-4978-A334-AE86F1FCA9E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E419C8-6636-4516-93F5-0CFAD815D26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.4.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA04F73-B0B4-4A26-8EC2-8EFF33AF8A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190A5C14-0B67-416E-B487-1CB385928525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56FEC064-05CC-4B5D-94E1-4E840D3CFA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D64F1AA-50B1-421C-934D-86345B3D0C70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "1A223112-0903-4CF8-A124-39785082BE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF89C39-A8F1-4D34-B272-DA2ACEBEC1DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.5:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5963C4-D407-4566-9A35-E90D3875A471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541B8041-66D6-44B0-B811-C0F9DB68DDF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42197A2A-72EE-4E0F-ADB4-840D71E93F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.6:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "F50D96E4-E32F-459C-B7B9-F9113B247022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.6:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "556DDA3C-830A-4C52-BACB-23FE113EB37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.6:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BEF5C4-8DD7-4836-A21C-2AAB6A91215B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB5AF94-92D2-468A-9120-F32B276C396C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FBA912-9E01-4A84-9FFF-3B2D7393DA93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.7:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "92207B85-9E88-4A57-8482-9A83671A7FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30AE47-A277-4B77-B6C9-F7C2E1C79121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC29E29D-1915-4598-893B-BAC7404D98B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2552728-7A9D-441E-B344-D81C4A43BEF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A104C8DD-CB3A-4F2E-A78E-37E49C1633F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D056297D-1E4C-4E90-ACE2-9200B5C89CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:2.0.0:m1:*:*:*:*:*:*",
            "matchCriteriaId" : "A45BD51A-3ADC-4271-BF9B-086408885EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:2.0.0:m2:*:*:*:*:*:*",
            "matchCriteriaId" : "B58B20D5-5E49-4121-9A9C-99E8AADD3F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:2.0.0:m3:*:*:*:*:*:*",
            "matchCriteriaId" : "8AFACAD5-2985-45DD-8163-8B409F5A9DA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:2.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "428B2B9C-D5DA-45D7-9E04-798958DAC087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:2.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5961A84D-6AC1-40CC-84C2-2B3EF989C92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D359FF9-A9E0-45DB-BA30-7668A25DD624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54C9C979-7C00-456B-B34B-D9E83CE9BD65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:2.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "AE37BA4F-DF8F-4A17-8C07-51B00DF3598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2050DE2-8712-4056-B611-D17A0E578B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31927AAE-4A13-4F6A-8D08-57CF3670D560"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33888",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=917656",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=660130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=917656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=660130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-25T20:30:02.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the web-based installer (config/index.php) in MediaWiki 1.6 before 1.6.12, 1.12 before 1.12.4, and 1.13 before 1.13.4, when the installer is in active use, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados - XSS - en el instalador basado en web (config/index.php) en MediaWiki v1.6 anteriores a v1.6.12, v1.12 anteriores a v1.12.4, y v1.13 anteriores a v1.13.4, cuando el instalador está activo, permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EAF847-B64C-4C12-8BF2-631F61B0618E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EF3827-9C87-4043-B10A-1D6AFCB64F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08B1EDE8-940E-47C1-9CDA-C6BBE1BB9A11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4554900-E09D-4D9D-99D4-FE5FDB3CDE78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93EB0312-A147-4307-9491-46AEC2EC727C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48929086-E08E-472D-A503-4CA803A840D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98675FD-C9EA-49AB-BA9F-2CF5898203C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB9B4718-DF85-4E77-B720-0EC3E0D318BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "132A745B-0A1B-4186-8BE2-88C24FF4A455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E710375D-F5B3-4998-AA7F-F931022CF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3130C952-83B3-4755-99D7-D25C1447670E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9842D148-50D2-4A52-A3E1-529670A25EBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746023B5-2472-4FC9-BEDF-FE6A321F12B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.12.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0D18C85B-E82B-46AE-959E-3FD32DB6F294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66714539-F1E1-4C16-AA12-059EEB1B9DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A80044C9-9F76-468E-84F7-D7D529004AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7CD7F5A-F4E4-45B6-9179-BD1BCD75D297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79CDE6D3-A26D-4ECD-B949-B9DDB53F67C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.13.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3CC82BE-8DEA-47D7-B6B7-2FFDFB728ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.13.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD79470-63A7-438B-A3BE-CABDAD7F848C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A26F4C94-E3A5-456E-8E5E-36BA67DD4BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C6D23B-B5C1-4F10-9F62-E81F639FF40F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13FA8F3C-2B6C-42FB-A6CE-EC2D8614E43D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.wikimedia.org/pipermail/mediawiki-announce/2009-February/000083.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/33881",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_12_4/phase3/RELEASE-NOTES",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_13_4/phase3/RELEASE-NOTES",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_6_12/phase3/RELEASE-NOTES",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33681",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0368",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.wikimedia.org/pipermail/mediawiki-announce/2009-February/000083.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/33881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_12_4/phase3/RELEASE-NOTES",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_13_4/phase3/RELEASE-NOTES",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_6_12/phase3/RELEASE-NOTES",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-25T20:30:02.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in Auth Php 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) passwd parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en login.php en Auth Php v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"username\" y (2)\"passwd\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frankmancuso:auth_php:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32936BF8-D326-47D9-B0A7-7400BCCD46E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33908",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-25T20:30:02.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in MyNews 0.10 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) passwd parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el archivo login.php en MyNews 0.10 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de los parámetros (1) username y(2) passwd."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frankmancuso:mynews:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A42D6B3-ED89-4C27-92A4-CEC1B252B8C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33728",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-25T20:30:02.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in BlueBird Prelease allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) passwd parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en login.php en BlueBird Prelease, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros  (1) \"username\" y (2) \"passwd\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frankmancuso:bluebird:pre-release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF5A050-668D-42F8-B90A-921A86894382"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33725",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-25T20:30:02.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginName parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el archivo Login.asp en Craft Silicon Banking@Home 2.1 y anteriores que permiten a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro LoginName."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftsilicon:banking\\@home:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "53351588-1998-443E-8BCD-284E1F1B37C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2009-February/067879.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33907",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500824/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33721",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2009-February/067879.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500824/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-26T16:17:19.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87, and possibly other versions, allows remote attackers to trick a user into visiting an arbitrary URL via unknown vectors, related to \"a potential Clickjacking issue variant.\""
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad no especificada en Administrador de configuración de Adobe Flash Player 9.x antes de 9.0.159.0, 10.x antes de 10.0.22.87 y, posiblemente otras versiones, permite a atacantes remotos engañar a un usuario para que visite una URL arbitraria a través de vectores desconocidos, relacionados con \"una posible variante del problema de Clickjacking.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DDE65E-ED35-42B6-A139-BB6F571B5967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.12.36",
            "matchCriteriaId" : "67971799-2A4E-4FD2-BF8B-5E0B82032E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFF4A51-C936-4C5B-8276-FD454C9E4F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E93289-6EE0-401A-958D-F59D2CDAE2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C00E5438-DBD7-4A47-8E5F-0D3946EA3102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82D5B56-44E0-4120-B73E-0A1155AF4B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E895107-ED8A-4F88-87C3-935EAE299C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4007D621-A0BC-4927-82A7-10D73802BCF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641776AE-5408-439E-8290-DD9324771874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138A932A-D775-46A2-86EC-3C03C96884C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "F648661E-BA18-41F9-A0A7-F9D5D7E2056B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A88BDD68-3EDD-49F4-B656-EB03BF849664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32912721-F750-4C20-B999-E728F7D3A85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95FA639-346C-491C-81A8-6C2A7B01AA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7DD938-F963-4E03-B66B-F00436E4EA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934A869D-D58D-4C36-B86E-013F62790585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFA6611-99DA-48B0-89F7-DD99B8E30334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AF804B-BD7A-4AD7-AD44-B5D980443B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0557AA2A-FA3A-460A-8F03-DC74B149CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22F1B02-CCF5-4770-A79B-1F58CA4321CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93957171-F1F4-43ED-A8B9-2D36C81EB1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE89894-E492-4380-8A2B-4CDD3A15667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6ED706-BAF2-4795-B597-6F7EE8CA8911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E2CF6-4D15-4168-A933-3EC52D8F93FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D50BF190-2629-49A8-A377-4723C93FFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4028B-72E7-4E4A-AD0F-645F5AACAA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:cs3:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A3618623-8C9F-47CA-BBF6-B0DA98CB41FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:cs4:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "9E1093EF-0A76-4757-9D8D-6808A5D95C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_for_linux:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.15.3",
            "matchCriteriaId" : "A72D07B5-1311-4653-8E84-7414E11A797C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D250C7-E7DE-491C-9FE3-F9F77C971B24"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isc.sans.org/diary.html?storyid=5929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-23.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1021751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254909-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0513",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=5929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0187",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-02-26T16:17:19.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a \"Connecting\" log message."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Orbit Downloader v2.8.2 y v2.8.3 y posiblemente otras versiones anteriores a v2.6.5, permiten a los atacantes remotos ejecutar código de su elección a través de una URL HTTP modificada con un nombre de host largo, el cual no es manejado de forma adecuada cunado construye un mensaje de registro \"Connecting\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD46C6-9D07-4A0E-801C-2EBFDB02E418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A412B9B8-3011-4683-AD6B-1FC33E7C151C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3471391-3784-420B-A5D2-4D1BE9AFC0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52294",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/33843",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-9/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501220/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33894",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0521",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48932",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://osvdb.org/52294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-9/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501220/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-26T16:17:19.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Process Server (WPS) 6.1.2 before 6.1.2.3 and 6.2 before 6.2.0.1 does not properly restrict configuration data during an export of the cluster configuration file from the administrative console, which allows remote authenticated users to obtain the (1) JMSAPI, (2) ESCALATION, and (3) MAILSESSION (aka mail session) cleartext passwords via vectors involving access to a cluster member."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Process Server (WPS) v6.1.2 anteriores v6.1.2.3 y v6.2 anteriores a v6.2.1.0 no restringen apropiadamente los datos de configuración durante una exportación del archivo de configuración en cluster desde la consola de administración, lo que permite a usuarios remotos autenticados obtener (1) información JMSAPI y (2) información de sesión del correo a través de vectores que implica el acceso a un componente del cluster."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_process_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.2.2",
            "matchCriteriaId" : "6B6EE919-5BD1-4F77-9869-A3B7EC38B220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_process_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "2BD7097A-FBE2-432C-8A76-426181C8F6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_process_server:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07586269-73DA-4189-B0BD-95D4B0091FAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_process_server:6.1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D43CB11-E506-4014-899E-417BDF7E0929"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27015580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1JR30088",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27015580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1JR30088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-26T16:17:19.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a crafted Shockwave Flash (aka .swf) file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Adobe Flash Player 9.x anteriores a v9.0.159.0 y v10.x anteriores a v10.0.22.87, permiten a atacantes remotos provocar una denegación de servicio (caída del navegador) o posiblemente ejecutar código de su elección a través de un fichero Shockwave Flash (también conocido como .swf)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DDE65E-ED35-42B6-A139-BB6F571B5967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.12.36",
            "matchCriteriaId" : "67971799-2A4E-4FD2-BF8B-5E0B82032E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFF4A51-C936-4C5B-8276-FD454C9E4F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E93289-6EE0-401A-958D-F59D2CDAE2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C00E5438-DBD7-4A47-8E5F-0D3946EA3102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82D5B56-44E0-4120-B73E-0A1155AF4B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E895107-ED8A-4F88-87C3-935EAE299C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4007D621-A0BC-4927-82A7-10D73802BCF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641776AE-5408-439E-8290-DD9324771874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138A932A-D775-46A2-86EC-3C03C96884C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "F648661E-BA18-41F9-A0A7-F9D5D7E2056B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A88BDD68-3EDD-49F4-B656-EB03BF849664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32912721-F750-4C20-B999-E728F7D3A85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95FA639-346C-491C-81A8-6C2A7B01AA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7DD938-F963-4E03-B66B-F00436E4EA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934A869D-D58D-4C36-B86E-013F62790585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFA6611-99DA-48B0-89F7-DD99B8E30334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AF804B-BD7A-4AD7-AD44-B5D980443B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0557AA2A-FA3A-460A-8F03-DC74B149CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22F1B02-CCF5-4770-A79B-1F58CA4321CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93957171-F1F4-43ED-A8B9-2D36C81EB1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE89894-E492-4380-8A2B-4CDD3A15667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6ED706-BAF2-4795-B597-6F7EE8CA8911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E2CF6-4D15-4168-A933-3EC52D8F93FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D50BF190-2629-49A8-A377-4723C93FFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4028B-72E7-4E4A-AD0F-645F5AACAA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:cs3:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A3618623-8C9F-47CA-BBF6-B0DA98CB41FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:cs4:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "9E1093EF-0A76-4757-9D8D-6808A5D95C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_for_linux:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.15.3",
            "matchCriteriaId" : "A72D07B5-1311-4653-8E84-7414E11A797C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D250C7-E7DE-491C-9FE3-F9F77C971B24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isc.sans.org/diary.html?storyid=5929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0332.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0334.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34012",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-23.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254909-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33890",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0513",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=5929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0334.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-26T16:17:19.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a \"buffer overflow issue.\""
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player v9.x anteriores a v9.0.159.0 y 10.x before 10.0.22.87 no elimina apropiadamente referencias a objetos destruidos durante el procesado de un archivo Shockwave Flash, lo que permite a los atacantes remotos ejecutar arbitrariamente código a través de un fichero manipulado, en relación a un \"asunto de desbordamiento de búfer\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DDE65E-ED35-42B6-A139-BB6F571B5967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.12.36",
            "matchCriteriaId" : "67971799-2A4E-4FD2-BF8B-5E0B82032E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFF4A51-C936-4C5B-8276-FD454C9E4F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E93289-6EE0-401A-958D-F59D2CDAE2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C00E5438-DBD7-4A47-8E5F-0D3946EA3102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82D5B56-44E0-4120-B73E-0A1155AF4B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E895107-ED8A-4F88-87C3-935EAE299C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4007D621-A0BC-4927-82A7-10D73802BCF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641776AE-5408-439E-8290-DD9324771874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138A932A-D775-46A2-86EC-3C03C96884C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "F648661E-BA18-41F9-A0A7-F9D5D7E2056B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A88BDD68-3EDD-49F4-B656-EB03BF849664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32912721-F750-4C20-B999-E728F7D3A85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95FA639-346C-491C-81A8-6C2A7B01AA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7DD938-F963-4E03-B66B-F00436E4EA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934A869D-D58D-4C36-B86E-013F62790585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFA6611-99DA-48B0-89F7-DD99B8E30334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AF804B-BD7A-4AD7-AD44-B5D980443B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0557AA2A-FA3A-460A-8F03-DC74B149CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22F1B02-CCF5-4770-A79B-1F58CA4321CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93957171-F1F4-43ED-A8B9-2D36C81EB1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE89894-E492-4380-8A2B-4CDD3A15667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6ED706-BAF2-4795-B597-6F7EE8CA8911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E2CF6-4D15-4168-A933-3EC52D8F93FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D50BF190-2629-49A8-A377-4723C93FFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4028B-72E7-4E4A-AD0F-645F5AACAA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:cs3:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A3618623-8C9F-47CA-BBF6-B0DA98CB41FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:cs4:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "9E1093EF-0A76-4757-9D8D-6808A5D95C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_for_linux:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.15.3",
            "matchCriteriaId" : "A72D07B5-1311-4653-8E84-7414E11A797C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D250C7-E7DE-491C-9FE3-F9F77C971B24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isc.sans.org/diary.html?storyid=5929",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0332.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0334.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-23.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1021750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254909-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33880",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0513",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=5929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0334.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-26T16:17:19.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allows local users to obtain sensitive information or gain privileges via a crafted library in a directory contained in the RPATH."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en Adobe Flash Player 9v.x anteriores a v9.0.159.0 y v10.x anteriores a 10.0.22.87 en Linux que permite a los usuarios locales obtener información sensible o obtener privilegios a través de una librería manipulada en un directorio contenido en RPATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_for_linux:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.15.3",
            "matchCriteriaId" : "A72D07B5-1311-4653-8E84-7414E11A797C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_for_linux:10.0.12.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE94BCCA-F6B2-48C9-8FBD-36CC3194B00E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isc.sans.org/diary.html?storyid=5929",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0332.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34012",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34226",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-23.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0513",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487144",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48904",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6160",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=5929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "evaluatorSolution" : "http://www.adobe.com/support/security/bulletins/apsb09-01.html\n\n\"This update prevents a potential Linux-only information disclosure issue in the Flash Player binary that could lead to privilege escalation. (CVE-2009-0521)\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-26T16:17:19.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows allows remote attackers to trick a user into visiting an arbitrary URL via an unspecified manipulation of the \"mouse pointer display,\" related to a \"Clickjacking attack.\""
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player 9.x antes de la 9.0.159.0 y 10.x antes de la 10.0.22.87 sobre Windows permite a atacantes remotos engañar a un usuario para que visite una URL arbitraria a través de una manipulación no especificada de la \"pantalla el puntero del ratón\", relacionada con un \"ataque de Clickjacking \"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DDE65E-ED35-42B6-A139-BB6F571B5967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.12.36",
            "matchCriteriaId" : "67971799-2A4E-4FD2-BF8B-5E0B82032E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFF4A51-C936-4C5B-8276-FD454C9E4F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E93289-6EE0-401A-958D-F59D2CDAE2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C00E5438-DBD7-4A47-8E5F-0D3946EA3102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82D5B56-44E0-4120-B73E-0A1155AF4B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E895107-ED8A-4F88-87C3-935EAE299C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4007D621-A0BC-4927-82A7-10D73802BCF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641776AE-5408-439E-8290-DD9324771874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138A932A-D775-46A2-86EC-3C03C96884C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "F648661E-BA18-41F9-A0A7-F9D5D7E2056B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A88BDD68-3EDD-49F4-B656-EB03BF849664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32912721-F750-4C20-B999-E728F7D3A85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95FA639-346C-491C-81A8-6C2A7B01AA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7DD938-F963-4E03-B66B-F00436E4EA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934A869D-D58D-4C36-B86E-013F62790585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFA6611-99DA-48B0-89F7-DD99B8E30334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AF804B-BD7A-4AD7-AD44-B5D980443B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0557AA2A-FA3A-460A-8F03-DC74B149CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22F1B02-CCF5-4770-A79B-1F58CA4321CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93957171-F1F4-43ED-A8B9-2D36C81EB1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE89894-E492-4380-8A2B-4CDD3A15667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6ED706-BAF2-4795-B597-6F7EE8CA8911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E2CF6-4D15-4168-A933-3EC52D8F93FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D50BF190-2629-49A8-A377-4723C93FFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4028B-72E7-4E4A-AD0F-645F5AACAA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:cs3:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A3618623-8C9F-47CA-BBF6-B0DA98CB41FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:cs4:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "9E1093EF-0A76-4757-9D8D-6808A5D95C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player_for_linux:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.15.3",
            "matchCriteriaId" : "A72D07B5-1311-4653-8E84-7414E11A797C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D250C7-E7DE-491C-9FE3-F9F77C971B24"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isc.sans.org/diary.html?storyid=5929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34012",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0513",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=5929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-01.html\r\n\r\n\"This update resolves a Windows-only issue with mouse pointer display that could potentially contribute to a Clickjacking attack. (CVE-2009-0522)\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-26T16:17:19.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled when displaying the Help Errors log."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en Adobe RoboHelp Server 6 y 7 que permite a los atacantes remoto inyectar arbitrariamente una secuencia de comandos web o HTML a través de URL manipuladas, lo que es manejado apropiadamente cuando se muestra el registro de errores de la ayuda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:robohelp:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3817D773-F9A8-4738-B159-93CCA297348D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:robohelp:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "113EFB69-D3FD-43DC-8AE9-300443F4FEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:robohelp_server:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462BB435-3230-4045-BDA6-3B51FC6E76F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:robohelp_server:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE4FAB57-4AE3-492A-9404-F7B925795D9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34048",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-02.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33887",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0512",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-26T16:17:19.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 6 and 7, and RoboHelp Server 6 and 7, allows remote attackers to inject arbitrary web script or HTML via vectors involving files produced by RoboHelp."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Adobe RoboHelp v6 y v7, y RoboHelp Server v6 y v7, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores que implican ficheros creados con robohelp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:robohelp:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3817D773-F9A8-4738-B159-93CCA297348D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:robohelp:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "113EFB69-D3FD-43DC-8AE9-300443F4FEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:robohelp_server:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462BB435-3230-4045-BDA6-3B51FC6E76F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:robohelp_server:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE4FAB57-4AE3-492A-9404-F7B925795D9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34032",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34048",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-02.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33888",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0512",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0614",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-02-26T16:17:20.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote attackers to bypass authentication and obtain administrative access via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad no especificada en Cisco Unified MeetingPlace Web Conferencing Web 6.0 antes de 6.0(517.0) (alias 6.0 MR4) y 7.0 antes de 7.0 (2) (alias 7.0 MR1) permite a atacantes remotos eludir la autenticación y obtener acceso administrativo a través de una URL modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0\\(171\\)",
            "versionEndExcluding" : "6.0\\(517.0\\)",
            "matchCriteriaId" : "0F3658DA-A276-44AD-A3CB-E1CB86ED7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0\\(1\\)",
            "versionEndExcluding" : "7.0\\(2\\)",
            "matchCriteriaId" : "81EA2062-D903-4A88-B8D3-899221F69924"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc86.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33901",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48888",
        "source" : "psirt@cisco.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc86.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0615",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-02-26T16:17:20.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Cisco Application Networking Manager (ANM) before 2.0 and Application Control Engine (ACE) Device Manager before A3(2.1) allows remote authenticated users to read or modify arbitrary files via unspecified vectors, related to \"invalid directory permissions.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en Cisco Application Networking Manager (ANM) anterior a v2.0 y Application Control Engine (ACE) Device Manager anterior a vA3(2.1) permite a usuarios atenticados remotamente leer o modificar ficheros de su elección a através de vectores sin especificar relacionados con \"permisos de directorio inválido\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_control_engine_device_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "5D4DDB47-1E38-47B5-A77E-B967A0C11ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_control_engine_device_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A02EE9C-8E93-409E-823A-08C8C9ADE002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_networking_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "2E917E6B-F744-49D3-8516-132C8684F3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_networking_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E427057-56BC-4E7C-8DBA-0388A6C81C87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33903",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021770",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0616",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-02-26T16:17:20.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Application Networking Manager (ANM) before 2.0 uses default usernames and passwords, which makes it easier for remote attackers to access the application, or cause a denial of service via configuration changes, related to \"default user credentials during installation.\""
      }, {
        "lang" : "es",
        "value" : "Cisco Application Networking Manager (ANM) en versiones anteriores a la 2.0 utiliza nombres de usuario y contraseñas por defecto, lo que facilita el acceso a los atacantes remotos a la aplicacion, o causar una denegación de servicio a través de cambios de configuración. Se trata de un asunto relacionado con \"las credenciales de usuario por defecto durante la instalación.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_networking_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "2E917E6B-F744-49D3-8516-132C8684F3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_networking_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E427057-56BC-4E7C-8DBA-0388A6C81C87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33903",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021771",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0617",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-02-26T16:17:20.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Application Networking Manager (ANM) before 2.0 uses a default MySQL root password, which makes it easier for remote attackers to execute arbitrary operating-system commands or change system files."
      }, {
        "lang" : "es",
        "value" : "Cisco Application Networking Manager (ANM) anteriores a v2.0 utiliza una contraseña por defecto para el directorio raíz MySQL, el cual hace más fácil para atacantes remotos ejecutar arbitrariamente comandos del sistema operativo o cambiar archivos del sistema."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_networking_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "2E917E6B-F744-49D3-8516-132C8684F3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_networking_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E427057-56BC-4E7C-8DBA-0388A6C81C87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33903",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021771",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0618",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-02-26T16:17:20.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Java agent in Cisco Application Networking Manager (ANM) before 2.0 Update A allows remote attackers to gain privileges, and cause a denial of service (service outage) by stopping processes, or obtain sensitive information by reading configuration files."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el agente Java de Cisco Application Networking Manager (ANM) anterior a 2.0 Actualización A, permite a atacantes remotos obtener privilegios y provocar una denegación de servicio -parada del servicio- deteniendo procesos, u obteniendo información sensible leyendo los ficheros de configuración."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_networking_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "35411333-C72A-47B8-8109-5BA29795C1CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_networking_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E427057-56BC-4E7C-8DBA-0388A6C81C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_networking_manager:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "888608EE-2818-4F72-8690-E8595B320872"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33903",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021772",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0620",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-02-26T16:17:20.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.1) uses default (1) usernames and (2) passwords for (a) the administrator and (b) web management, which makes it easier for remote attackers to perform configuration changes or obtain operating-system access."
      }, {
        "lang" : "es",
        "value" : "El módulo Cisco ACE Application Control Engine para los Switches Catalyst 6500 y Routers 7600 en versiones anteriores a la A2 (1.1) utiliza  (1) nombres de usuario por defecto y (2) contraseñas por defecto para (a) el administrador y (b) la gestión de la web, lo que facilita a los atacantes remotos realizar cambios de configuración u obtener acceso al sistema operativo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst:6500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "712DA93A-13CE-4E27-84FC-D2ECEEFFD568"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst:7600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521A4FD3-18E3-4937-A6AD-F7BDB3DB08ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_control_engine_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0",
            "matchCriteriaId" : "D85B8F79-9113-4AEB-8536-FEFAB06ADF2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33900",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0621",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-02-26T16:17:20.140",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco ACE 4710 Application Control Engine Appliance before A1(8a) uses default (1) usernames and (2) passwords for (a) the administrator, (b) web management, and (c) device management, which makes it easier for remote attackers to perform configuration changes to the Device Manager and other components, or obtain operating-system access."
      }, {
        "lang" : "es",
        "value" : "Cisco ACE 4710 Application Control Engine Appliance anterior a vA1(8a) utiliza por defecto (1) nombre de usuario y (2) contraseñas para (a) el administrador (b) gestión Web y (c) gestión de dispositivos, lo que permite fácilmente a los atacantes remotos realizar cambios de configuración, la gestión de los dispositivos y otros componentes, o obtener acceso al sistema operativo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFD21CF-CC38-477F-A78B-10CFEFF81E0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33900",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0622",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-02-26T16:17:20.157",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.2) and Cisco ACE 4710 Application Control Engine Appliance before A1(8a) allows remote authenticated users to execute arbitrary operating-system commands through a command line interface (CLI)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Cisco ACE Application Control Engine Module para Catalyst 6500 Switches y 7600 Routers anterior a A2(1.2) y Cisco ACE 4710 Application Control Engine Appliance anterior a A1(8a), permite a usuarios autenticados en remoto ejecutar comandos de su elección del sistema-operativo a través de una interfaz de línea de comandos (CLI)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:application_control_engine_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "F61AD2BC-FAE6-40F3-B872-964FD4CEE39E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:application_control_engine_module:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2258512F-36CD-48FF-AAB3-32D6A63959D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99DE48DF-A309-4A1C-B977-AE81B4EDB589"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D63186-5834-448C-98F2-0C189A11D25D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFD21CF-CC38-477F-A78B-10CFEFF81E0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33900",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml\r\n\r\nCisco ACE module software can be downloaded from:\r\n\r\nhttp://tools.cisco.com/support/downloads/go/Redirect.x?mdfid=280557289\r\n\r\nCisco ACE 4710 Application Control Engine appliance software can be downloaded from:\r\n\r\nhttp://tools.cisco.com/support/downloads/go/Redirect.x?mdfid=281222179"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0623",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-02-26T16:17:20.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.3) and Cisco ACE 4710 Application Control Engine Appliance before A3(2.1) allows remote attackers to cause a denial of service (device reload) via a crafted SSH packet."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en \"Cisco ACE Application Control Engine Module\" para Catalyst 6500 Switches y 7600 Routers anteriores A2(1.3) y Cisco ACE 4710 Application Control Engine Appliance anteriores a A3(2.1) que permite a los atacantes remotos causar una denegación de servicio (reinicio del dispositivo) a través de un paquete SSH manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "a3\\(2.0\\)",
            "matchCriteriaId" : "EE398278-79E8-4043-9ED3-735775213587"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_4710:a3\\(1.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3BDA08-1786-46AD-93B3-C374BE1AC949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:application_control_engine_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "a2\\(1.2\\)",
            "matchCriteriaId" : "19E93539-6D77-4D1E-BF77-C35EE2170D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:application_control_engine_module:a2\\(1.1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5EDC4AB-2D1B-4233-A260-9D5521057F09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst:6500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "712DA93A-13CE-4E27-84FC-D2ECEEFFD568"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst:7600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521A4FD3-18E3-4937-A6AD-F7BDB3DB08ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33900",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0624",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-02-26T16:17:20.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the SNMPv2c implementation in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.3) and Cisco ACE 4710 Application Control Engine Appliance before A3(2.1) allows remote attackers to cause a denial of service (device reload) via a crafted SNMPv1 packet."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la implementación SNMPv2c en Cisco ACE Application Control Engine Module para Catalyst 6500 Switches y 7600 Routers anteriores a A2(1.3) y Cisco ACE 4710 Application Control Engine Appliance anteior a A3(2.1); permite a atacantes remotos provocar una denegación de servicio (reinicio del dispositivo) a través de un paquete SNMPv1 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:application_control_engine_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "1B8CC891-D31C-44D2-BB76-F5ADE15D767C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:application_control_engine_module:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2258512F-36CD-48FF-AAB3-32D6A63959D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:application_control_engine_module:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1331F98-6AB3-4285-BF6E-4DEAADE069D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99DE48DF-A309-4A1C-B977-AE81B4EDB589"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D63186-5834-448C-98F2-0C189A11D25D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "a3\\(2.0\\)",
            "matchCriteriaId" : "EE398278-79E8-4043-9ED3-735775213587"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_4710:a1\\(2.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "142B1472-4694-436F-85C0-52B6A9CFCA64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_4710:a1\\(8.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A421567F-1772-46DC-9FBA-E0072DC6B7C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_4710:a3\\(1.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3BDA08-1786-46AD-93B3-C374BE1AC949"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33900",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021769",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml\r\n\r\n\"Note: SNMPv2c must be explicitly configured in an affected device in order to process any SNMPv2c transactions. SNMPv2c is not enabled by default.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0625",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-02-26T16:17:20.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.2) and Cisco ACE 4710 Application Control Engine Appliance before A1(8.0) allows remote attackers to cause a denial of service (device reload) via a crafted SNMPv3 packet."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en \"Cisco ACE  Application Control Engine Module\" para Switches Catalyst 6500 y routers anteriores A1(v1.2) y Cisco ACE 4710 \"Application Control Engine Appliance\" anteriores A1(8.0), permite a atacantes remotos provocar una denegación de servicio (recarga de dispositivo) a través de un paquete SNMPv3 manipulada. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "a1\\(2.0\\)",
            "matchCriteriaId" : "6F0D8DA3-2B73-4DE7-933B-23C199B50BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:application_control_engine_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "a2\\(1.1\\)",
            "matchCriteriaId" : "8AF3BB9E-7AAE-4B04-B5A5-B61FE82AA94F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst:6500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "712DA93A-13CE-4E27-84FC-D2ECEEFFD568"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst:7600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521A4FD3-18E3-4937-A6AD-F7BDB3DB08ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33900",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021769",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-26T16:17:20.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "El comando de nombre de usuario en el modulo Cisco ACE Application Control Engine para los Switches Catalyst 6500 y Routers 7600 y Cisco ACE 4710 Application Control Engine Appliance almacena una contraseña por defecto en texto claro, lo que permite a atacantes (dependiendo del contexto) obtener información sensible."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:application_control_engine_module:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B848A4E7-6D42-40EC-9019-0F65BD2FA8D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99DE48DF-A309-4A1C-B977-AE81B4EDB589"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D63186-5834-448C-98F2-0C189A11D25D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFD21CF-CC38-477F-A78B-10CFEFF81E0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ],
      "evaluatorComment" : "Note that CVE-2009-0742 is not referenced on the vendor advisory page at:\r\n\r\nhttp://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-26T23:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP Virtual Rooms Client before 7.0.1, when running on Windows, allows remote attackers to execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en HP Virtual Rooms Client anterior a v7.0.1, cuando se ejecuta en Windows, permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:virtual_rooms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "082EF78B-F0CC-4114-B92D-5A04D377F1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:virtual_rooms:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E04D0F5-4EC3-425F-BF4E-7C0F21AD0026"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=123567121722181&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=123567121722181&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0028",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-02-27T17:30:09.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit."
      }, {
        "lang" : "es",
        "value" : "La llamada al sistema clone en el kernel de Linux v2.6.28 y anteriores, permite a usuarios locales enviar señales arbitrarias a un proceso padre desde un proceso hijo sin privilegios mediante el envío de un proceso hijo adicional con la bandera CLONE_PARENT, y entonces dejando que este nuevo proceso salga.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.28",
            "matchCriteriaId" : "9B5B312F-E76A-43E1-A73F-31535848D55B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F9DBB0-8AF7-42CA-95DD-68A344E9D549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD00664-A27C-4514-A2A4-079E8F9B0251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E336C792-B7A1-4318-8050-DE9F03474CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D0159-1A05-4628-9C1C-360DED0F438C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6654B9-42EB-4C2C-8F71-710D50556180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FDF616-E410-4540-B377-98D1FB88CE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5313B736-9904-442A-84D6-8FC7B9AC2059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D42BA44-C69B-4170-9867-CABF93CA9BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "085259B8-9D41-42B0-B32B-66B8D365F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A12DE15-E192-4B90-ADB7-A886B3746DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6588E7-F4FA-40F5-8945-FC7B6094376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "AE87E13E-ACF7-4F74-8938-729F3B0D694C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D4965A12-1BBA-4494-A5C1-43E0C0F48C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3069324C-28FB-4BB6-9451-F3AC6A8DA64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3D19AD-4268-45E7-B13D-BC93ABDF2226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E619E6-A515-43BC-B371-C1FF6DAA6CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "388414A1-C9B4-41BA-AD35-6501A463A095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FDBA01DD-C129-48F1-800B-838418F4A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "185F1EF8-04EB-43ED-B909-8BDF60F23E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "3483FAFA-353C-498F-AF68-8F5B84A0F30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6B11A9E1-9D90-46DC-81B5-17A137205AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "07EEC559-9240-46BE-9057-0F17D1F61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BBBC127F-D67E-43FE-BCFE-606C200084F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "42B18945-EE09-4E6B-8C11-E382E5F8F850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "12D0C03A-7D30-485F-8431-638918FE9658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA311B8-D32E-4853-9B07-58EAF1019D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F0F679-43C8-426E-A97E-C3B207A3331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA40BC48-D6B5-4424-B306-F99E85EBBCB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2DF2BB-F94A-4692-AFDC-47C42F04081B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "BB286B42-E739-46CD-BC96-972CFFAECB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "7636014B-CC2A-43A3-9C9A-04B26AEB06D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ED7CE5-3388-4CB9-AF60-A2AF19611327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/52204",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0459.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-signal-vulnerability.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/33758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34680",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34917",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34962",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35120",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0084",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:118",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0326.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0451.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503610/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33906",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479932",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11187",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7947",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-signal-vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0326.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0451.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503610/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-27T17:30:09.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-site scripting (XSS), en la página de editar cuentas en el servidor Web de Cisco MeetingPlace Web Conferencing 6.0 anteriores a v6.0(517,0) (también conocido como v6.0 MR4) y v7.0 antes de v7.0(2) (también conocido como 7,0 MR1) permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML de su elección a través del campo E-mail Address."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_meetingplace:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D721B4-C0B8-4B7C-8C18-6B6B699B48E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_meetingplace:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B3B645-4500-4B63-8D1A-1139537DA522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_response09186a0080a7bc61.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501251/30/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_response09186a0080a7bc61.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501251/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-27T17:30:09.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari 4 Beta build 528.16 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a feeds: URI beginning with a (1) % (percent), (2) { (open curly bracket), (3) } (close curly bracket), (4) ^ (caret), (5) ` (backquote), or (6) | (pipe) character, followed by an & (ampersand) character."
      }, {
        "lang" : "es",
        "value" : "Apple Safari v4 beta Build 528,16 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero nulo y caída de la aplicación) a través de los canales: URI que comienzen con (1)% (por ciento), (2) ((abrir paréntesis), (3) ) (Cerrar paréntesis), (4) ^ (acento doble), (5) '(comilla), o (6) | (entubamiento),  seguido de un & carácter (ampersand)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC87F61-3463-468A-BF0B-070816BBC3CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/501229/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33909",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501229/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-27T17:30:09.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ext4_group_add function in fs/ext4/resize.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not properly initialize the group descriptor during a resize (aka resize2fs) operation, which might allow local users to cause a denial of service (OOPS) by arranging for crafted values to be present in available memory."
      }, {
        "lang" : "es",
        "value" : "La función ext4_group_add en fs/ext4/resize.c en el kernel de Linux v2.6.27 anteriores a v2.6.27.19 y v2.6.28  anteriores a v2.6.28.7 no inicializa de forma adecuada el descriptor de grupo durante una operación de cambio de tamaño (también conocido como resize2fs), que podría permitir a los usuarios locales, provocar una denegación de servicio (OOPS) organizando valores manipulados, para estar en la memoria disponible."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.kernel.org/show_bug.cgi?id=12433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fdff73f094e7220602cc3f8959c7230517976412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1243.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0509",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.kernel.org/show_bug.cgi?id=12433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fdff73f094e7220602cc3f8959c7230517976412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1243.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG. \n\nThis issue was addressed in Red Hat Enterprise Linux 5 by\nhttps://rhn.redhat.com/errata/RHSA-2009-1243.html",
        "lastModified" : "2009-09-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-27T17:30:09.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The make_indexed_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate a certain rec_len field, which allows local users to cause a denial of service (OOPS) by attempting to mount a crafted ext4 filesystem."
      }, {
        "lang" : "es",
        "value" : "La función make_indexed_dir en fs/ext4/namei.c en el kernel de Linux v2.6.27 anteriores a v2.6.27.19 y v2.6.28  anteriores a v2.6.28.7 no valida el campo rec_len, lo que permite a usuarios locales provocar una denegación de servicio (OOPS ) por tratar de montar un sistema de archivos ext4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.kernel.org/show_bug.cgi?id=12430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e6b8bc09ba2075cd91fbffefcd2778b1a00bd76f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1243.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0509",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.kernel.org/show_bug.cgi?id=12430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e6b8bc09ba2075cd91fbffefcd2778b1a00bd76f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1243.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG. \n\nThis issue was addressed in Red Hat Enterprise Linux 5 by\nhttps://rhn.redhat.com/errata/RHSA-2009-1243.html",
        "lastModified" : "2009-09-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-27T17:30:09.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ext4_isize function in fs/ext4/ext4.h in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 uses the i_size_high structure member during operations on arbitrary types of files, which allows local users to cause a denial of service (CPU consumption and error-message flood) by attempting to mount a crafted ext4 filesystem."
      }, {
        "lang" : "es",
        "value" : "La función ext4_isize en fs/ext4/ext4.h del kernel de Linux v2.6.27 anteriores a v2.6.27.19 y v2.6.28 anteriores a v2.6.28.7 utiliza el componente de la estructura i_size_high sobre tipos de ficheros de su elección, lo que permite a usuarios locales provocar una denegación de servicio (consumo de CPU y la inundación de mensajes de error) por tratar de montar un sistema de archivos ext4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA311B8-D32E-4853-9B07-58EAF1019D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F0F679-43C8-426E-A97E-C3B207A3331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA40BC48-D6B5-4424-B306-F99E85EBBCB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2DF2BB-F94A-4692-AFDC-47C42F04081B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "BB286B42-E739-46CD-BC96-972CFFAECB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "7636014B-CC2A-43A3-9C9A-04B26AEB06D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ED7CE5-3388-4CB9-AF60-A2AF19611327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3463B83B-E46F-456E-98BA-801C59AEB337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "05FD0767-03F3-416C-AB6D-6BC4A12220B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8452D554-8DEB-4265-839C-6B40CCFB56B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "94F445F9-57A5-4453-BB5D-290349C04A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "62C97D20-4152-47C4-B21B-8206CF49E20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.kernel.org/show_bug.cgi?id=12375",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=06a279d636734da32bb62dd2f7b0ade666f65d7c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1243.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0509",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.kernel.org/show_bug.cgi?id=12375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=06a279d636734da32bb62dd2f7b0ade666f65d7c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1243.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG. \n\nThis issue was addressed in Red Hat Enterprise Linux 5 by\nhttps://rhn.redhat.com/errata/RHSA-2009-1243.html",
        "lastModified" : "2009-09-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-02-27T17:30:09.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ext4_fill_super function in fs/ext4/super.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate the superblock configuration, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) by attempting to mount a crafted ext4 filesystem."
      }, {
        "lang" : "es",
        "value" : "La superfunción ext4_fill_super en fs/ext4/super.c del kernel Linux  v2.6.27 anteriores a v2.6.27.19 y v2.6.28 anteriores a v2.6.28.7 no valida la configuración de superbloque, lo que permite a usuarios locales provocar una denegación de servicio (un puntero de referencia NULL y OOPS) mediante el intento de montar un sistema de ficheros ext4 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA311B8-D32E-4853-9B07-58EAF1019D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F0F679-43C8-426E-A97E-C3B207A3331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA40BC48-D6B5-4424-B306-F99E85EBBCB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2DF2BB-F94A-4692-AFDC-47C42F04081B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "BB286B42-E739-46CD-BC96-972CFFAECB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "7636014B-CC2A-43A3-9C9A-04B26AEB06D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ED7CE5-3388-4CB9-AF60-A2AF19611327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3463B83B-E46F-456E-98BA-801C59AEB337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "05FD0767-03F3-416C-AB6D-6BC4A12220B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8452D554-8DEB-4265-839C-6B40CCFB56B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "94F445F9-57A5-4453-BB5D-290349C04A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "62C97D20-4152-47C4-B21B-8206CF49E20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.kernel.org/show_bug.cgi?id=12371",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ec110281379826c5cf6ed14735e47027c3c5765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1243.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0509",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.kernel.org/show_bug.cgi?id=12371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ec110281379826c5cf6ed14735e47027c3c5765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1243.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.\n\nThis issue was addressed in Red Hat Enterprise Linux 5 by\nhttps://rhn.redhat.com/errata/RHSA-2009-1243.html",
        "lastModified" : "2009-09-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-02T20:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c in OptiPNG 0.6.2 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted GIF image that causes the realloc function to return a new pointer, which triggers memory corruption when the old pointer is accessed."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad del tipo \"use-after-free\" (usar recurso después de haberlo liberado o destruido) en la función GIFReadNextExtension en lib/pngxtern/gif/gifread.c en OptiPNG v.0.6.2 y anteriores. Permite a atacantes dependientes del contexto causar una denegación del servicio (indisponibilidad y caída de la aplicación) a través de una imagen GIF manipulada que provoca que la llamada a la función realloc devuelva un nuevo puntero, que causa una corrupción de memoria cuando se accede al viejo puntero."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:optipng_project:optipng:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.2",
            "matchCriteriaId" : "2D9EBBA0-AD72-4BE3-8C7B-932B5996FB19"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3",
            "versionEndIncluding" : "11.1",
            "matchCriteriaId" : "FF141FBE-4CA5-4695-94A0-8BE1309D28CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise:9-11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "170FDFDE-DADB-4CBF-9AB8-3A01C7BA94AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://optipng.sourceforge.net",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://secunia.com/advisories/34035",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34201",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34259",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=2582013&group_id=151404&atid=780913",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200903-12.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/24/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/25/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33873",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0510",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48879",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://optipng.sourceforge.net",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://secunia.com/advisories/34035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=2582013&group_id=151404&atid=780913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200903-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/24/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/25/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-02T22:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en OpenSC en versiones anteriores a v0.11.7 que permite a atacantes próximos físicamente evitar los requisitos de autenticación/validación de PIN a través de (1) el comando APDU de bajo nivel o (2) una herramienta de depuración de errores, como se ha demostrado leyendo el fichero 4601 o 4701 con el programa opensc-explorer o opensc-tool."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.11.6",
            "matchCriteriaId" : "BEA45D6B-A77B-46F1-89E1-7E42F017D412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D734B35-BA7F-4219-98DA-FCD55E5A37C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349D5BCA-885C-4948-838E-E3904E49598E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "471DBF4E-54B8-4776-A0BA-0F65FE02192E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BC7891E-1898-442A-96BB-5B8EE5A5B400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA4321E6-1D08-489C-948F-2673C30D762C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8498096A-19A9-4C09-99C3-CC1C45D6BA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5028CF13-2807-4813-A542-A1CD6E735CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD4CB51-068C-4AD2-94AC-59DE20A2AB77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE75F1ED-E653-482C-B960-42DA2854E974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D8CA0B8-AC3B-4D0F-854D-EDF285EC01CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931CE287-97AF-4B73-BA57-FB9B9AAA7016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA979A3-A34F-4813-8489-C1985E22A398"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04701B8B-523A-4148-805C-419336D91CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2194636B-7F74-4EC2-A02F-CE0F29914D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D617E6-4EEC-4024-92D7-930F9A90F6DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428986EC-328E-49F8-AAE7-EECD97F6B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A64E85D-B1A7-48FB-8438-8173249ED817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "940151B8-6466-43D7-A7EB-A28F13DA5B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.9.7:b:*:*:*:*:*:*",
            "matchCriteriaId" : "0BE84E1D-F765-49E6-84E2-6831A535B67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.9.7:d:*:*:*:*:*:*",
            "matchCriteriaId" : "CE85FABD-20F0-4308-B240-0E460E85CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3752BA88-CA7A-4B79-96C4-A5EC9A6C2AC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13234C4B-7598-46B1-A8F0-7C0C863DE4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC7C1A0-83AA-4989-A023-0B22B95133B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B093D7C9-242E-4CC7-9971-71D9AE19A7F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AFA23-88C0-45AA-B9EF-EF7A4DC6AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2024C5-238A-4734-B8C6-D4F99EEFBC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF611D89-FA24-4421-A8A8-5290629C81D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.11.3:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECCFF79-6515-42F8-B986-4C06BE1F79D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74B19CB-8AFB-4A07-9A84-063BFF47E089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8F0F04-489E-41A6-B77B-133AC9FC64A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/02/26/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34052",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-01.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opensc-project.org/pipermail/opensc-announce/2009-February/000023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33922",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00673.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/02/26/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opensc-project.org/pipermail/opensc-announce/2009-February/000023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00673.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-02T22:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to execute arbitrary SQL commands via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el archivo login.php del script de ejemplo smNews de textSQL v2.2. Permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro \"username\" (nombre de usuario)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:txtsql:txtsql:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F102A90-5641-4393-904C-F8F3422764FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tombstone:smnews:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE45B00-6DD4-4EF6-96CC-203BD665B05E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-02T22:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of headers."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el servidor web Yaws en sus versiones anteriores a v1.30 que permite a atacantes remotos causar una denegación de servicio (agotamiento de la memoria y caída del servicio) a través de peticiones  con un gran número de cabeceras."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.79",
            "matchCriteriaId" : "C46DD252-6005-4E5A-9D11-F3FBF6410453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992B1D73-29BD-454E-B1A7-62B812D186C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "684FE8BF-66B0-4135-958F-E5198DF7CA6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE18953-7DF2-4E14-9368-F51AE9B300B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399F854C-C07E-42A8-B7E6-EED32DD4061E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC2C7DD-C87D-4FB5-B3E9-E6BE55D1CDAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE09563-F7F2-4EE2-B97C-AF75F1884C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB429B9B-D2E9-4AAA-9EB6-CA9DBC82D64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA1F732-E68A-4922-8B5B-D023E96EE21A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1839141-82D5-4E88-8F28-EB26E97F1A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B3E003-B9F6-4793-BA89-1F3E13B91B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1828466-3EAA-4B40-946A-B6400177155B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C2DF037-3854-48AE-BBF7-087ADE80ED2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F394C56-A5C1-4616-B0B0-0EEC3AA0C864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D1FC96-87A6-4C42-BDED-79DD462DD47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1335E6-D02B-403C-9878-FED0095874AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E253A0-BDC9-480B-8C2B-FE9C33F12F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CFB1DE-D860-438C-A9E7-A7372154925F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE02B9FE-300B-4191-B623-0883BD69DE22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C55AF6B3-800C-4E80-8D2D-EF164C108004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "206F051E-15E7-4CFD-A17A-47BBA4DB7D75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704FF671-C530-4000-9C15-B6CDB73EBE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5EBB06-F40A-4349-A6D8-6E43E64473CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "150881D1-84FC-4522-978D-FDE49297FE14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60B04D6-6CA3-4D79-AFD3-B6426158A93F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3ABEC8B-A76C-497C-9743-D9F5EE485657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaws:yaws:1.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82781B6-6A56-4CBB-B620-D2FB3AB60558"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33979",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/19/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://yaws.hyber.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/19/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://yaws.hyber.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-03T00:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Movable Type Pro and Community Solution 4.x before 4.24 has unknown impact and attack vectors, possibly related to the password recovery mechanism."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Movable Type Pro y Community Solution v4.x anteriores a v4.24 cuyo impacto y vectores de ataque se desconocen, pero que, posiblemente, estén relacionados con el mecanismo de recuperación de contraseñas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.0:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "B4FEB07E-4D70-4A24-822E-E4689CB8C9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.0:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "59457028-2EA4-472F-A76F-EF867F48937F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.01:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "ABE24C88-6062-4A36-9852-D9EC818EEA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.1:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "11C793FA-AE7C-430F-B537-19B788D9BC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.1:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "F80A607A-66A8-4995-A396-5487B8E3029C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.01:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "C3C21088-A9A5-4CE2-B4D7-8BC48DB84540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.01:b:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "C1DCAD70-9FFF-4950-875D-586937E93473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.01:b:pro:*:*:*:*:*",
            "matchCriteriaId" : "395B9CE4-EA3A-42A1-AD37-6487911E10D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.2:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "448081A9-A8C9-4FEC-879B-7FA11997B4D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.2:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "E7538776-B7B2-4912-BFE3-E7A1033F41E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.12:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "F33F4F69-D670-4698-84C6-EDD9D78F2D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.12:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "1E481C6C-F6EF-4E7D-8DAF-F68407DE6501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.21:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "23B5D056-BC56-4851-8E76-7E22C911EEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.21:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "CA9BC769-BE45-42EC-8E35-02E6B216D6E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.23:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "9A1B400B-FEC9-416B-89F2-C96B1BE11BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.23:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "1458F0E9-6AF1-44C6-B0EC-7BCF314B0038"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.movabletype.com/blog/2009/02/movable-type-424-get-updated-with-better-password-recovery.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.movabletype.com/blog/2009/02/movable-type-424-get-updated-with-better-password-recovery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-03T16:30:05.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to read arbitrary files via a leading \"//\" (double slash) in the filename."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio absoluto en MLDonkey v2.8.4 hasta v2.9.7 permite a atacantes remotos leer ficheros a su elección a través de una secuencia \"//\" (doble barra) en el nombre de fichero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mldonkey:mldonkey:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD462A8-9413-4F1E-93FB-7112ADCAE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mldonkey:mldonkey:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E8952D-70A2-4C19-A9E0-7E2A8BE22E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mldonkey:mldonkey:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E14481A6-DEF4-4472-97DB-D3B355B936DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mldonkey:mldonkey:2.9.0-r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AD7927-2933-4FEC-B1A7-681BD2A41691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mldonkey:mldonkey:2.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281D0380-5585-49C7-B3BB-3957C6D2B914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://savannah.nongnu.org/bugs/?25667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34008",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200903-36.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/23/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00542.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00617.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://savannah.nongnu.org/bugs/?25667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200903-36.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/23/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00542.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00617.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-03T16:30:05.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on the same server."
      }, {
        "lang" : "es",
        "value" : "PHP v4.4.4, v5.1.6, y otras versiones, cuando están ejecutando Apache, permite a usuarios locales modificar el comportamiento de otros sitios hospedados en el mismo servidor web mediante la modificación de la característica mbstring.func_overload dentro de .htaccess, lo que produce que esta característica sea aplicada a otros sistemas virtuales alojados en el mismo servidor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9BF34B5-F74C-4D56-9841-42452D60CB87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:apache:apache:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754744AE-2EB5-444F-9701-BA1364ED19A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.php.net/bug.php?id=27421",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/30/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/03/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/25/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0350.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/761-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.php.net/bug.php?id=27421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/01/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/03/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/25/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0350.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/761-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-03T16:30:05.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF file with an invalid Form Opt entry."
      }, {
        "lang" : "es",
        "value" : "La funcion FormWidgetChoice::loadDefaults en Poppler anteriores v0.10.4 permite a atacantes remotos producir una denegacion de servicio (caida) a traves de un fichero PDF con una entrada \"Form Opt\" incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.3",
            "matchCriteriaId" : "D94A745A-9BB3-4EE9-AC87-CACA64FB5C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0213390-08FA-4E04-835B-8BE0FC61B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B304657-740A-4F8D-99CD-22E283FEE6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.freedesktop.org/show_bug.cgi?id=19790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.freedesktop.org/archives/poppler/2009-January/004406.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33853",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/13/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/19/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502761/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.freedesktop.org/show_bug.cgi?id=19790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.freedesktop.org/archives/poppler/2009-January/004406.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/13/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/19/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502761/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  This issue did not affect the versions of poppler, xpdf, gpdf and kdegraphics as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
        "lastModified" : "2009-07-15T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-03T16:30:05.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::~JBIG2SymbolDict and triggers an invalid memory dereference."
      }, {
        "lang" : "es",
        "value" : "La función JBIG2Stream::readSymbolDictSeg en Poppler anteriores a v0.10.4 permite a atacantes remotos producir una denegación de servicio (caída) a través de un fichero PDF que dispara un error de parseo, lo cual no adecuadamente manejado por JBIG2SymbolDict::~JBIG2SymbolDict y produce una desreferencia de memoria incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.3",
            "matchCriteriaId" : "D94A745A-9BB3-4EE9-AC87-CACA64FB5C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0213390-08FA-4E04-835B-8BE0FC61B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B304657-740A-4F8D-99CD-22E283FEE6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.freedesktop.org/show_bug.cgi?id=19702",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.freedesktop.org/archives/poppler/2009-January/004403.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33853",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/13/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/19/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502761/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.freedesktop.org/show_bug.cgi?id=19702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.freedesktop.org/archives/poppler/2009-January/004403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/13/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/19/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502761/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue is a duplicate of CVE-2009-0166, which was addressed in affected products via following updates: https://rhn.redhat.com/errata/CVE-2009-0166.html",
        "lastModified" : "2009-07-15T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-03T16:30:05.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in GNU MPFR 2.4.0 allow context-dependent attackers to cause a denial of service (crash) via the (1) mpfr_snprintf and (2) mpfr_vsnprintf functions."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en GNU MPFR v2.4.0 permite a atacantes dependientes de contexto producir una denegación de servicio (caída) a través de las funciones (1) mpfr_snprintf y (2) mpfr_vsnprintf."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpfr:gnu_mpfr:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36519A0F-CBE1-4792-A554-63BD7E4E8175"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mpfr.loria.fr/mpfr-2.4.1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/02/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-772-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mpfr.loria.fr/mpfr-2.4.1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/02/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-772-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-03T16:30:05.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service (network bandwidth and CPU consumption) via a crafted legacy unicast mDNS query packet that triggers a multicast packet storm."
      }, {
        "lang" : "es",
        "value" : "La función originates_from_local_legacy_unicast_socket en avahi-core/server.c en avahi-daemon v0.6.23 no tiene en cuenta la orden del byte de red de un numero de puerto cuando se esta procesando la llegada de paquetes multidifusión, lo que permite a atacantes remotos producir una denegación de servicio (agotamiento de ancho de banda y CPU) a través de un paquete de petición legada monodifusión mDNS que dispara una tormenta de paquetes multidifusión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avahi:avahi-daemon:0.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5282283-E0A7-4D0C-A951-9D8F39E374FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/38420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/02/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/02/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue has been addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2010-0528.html.",
        "lastModified" : "2010-07-13T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-03T16:30:05.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote authenticated users to modify the znc.conf configuration file and gain privileges via CRLF sequences in the quit message and other vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de retorno de carro y salto de línea (CRLF) en ZNC antes de v0.066 permite a usuarios remotos autentificados modificar el fichero de configuración znc.conf y conseguir un aumento de privilegios a través de secuencias CRLF en el mensaje \"quit\" y otros vectores."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:znc:znc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.062",
            "matchCriteriaId" : "B3BC1DA6-B072-4966-9865-2D62B4614206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:znc:znc:0.056:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFE27D3-487B-41A2-A6CE-AA36E07506BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:znc:znc:0.058:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E7CC41-1923-4295-8AFC-8D295FDD9C5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/01/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://znc.svn.sourceforge.net/viewvc/znc/trunk/modules/webadmin.cpp?view=log&sortby=rev&sortdir=down&pathrev=1395",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1395",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/01/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://znc.svn.sourceforge.net/viewvc/znc/trunk/modules/webadmin.cpp?view=log&sortby=rev&sortdir=down&pathrev=1395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-04T11:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in pppdial in IBM AIX 5.3 and 6.1 allows local users to gain privileges via a long \"input string.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en pppdial en IBM AIX v5.3 y v6.1 permite a usuarios locales ganar privilegios a través de una \"cadena de entrada\" larga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD518B94-9CD7-4C45-8766-578CF427B4CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34005",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ44199",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ44220",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ44332",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ44388",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/52179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0487",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ44199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ44220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ44332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ44388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/52179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-04T11:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The aspath_prepend function in rde_attr.c in bgpd in OpenBSD 4.3 and 4.4 allows remote attackers to cause a denial of service (application crash) via an Autonomous System (AS) advertisement containing a long AS path."
      }, {
        "lang" : "es",
        "value" : "La función aspath_prepend de rde_attr.c de bgpd de OpenBSD v4.3 y v4.4, permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de un aviso Autonomous System (AS) que contiene una ruta AS larga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F12313A0-1EAF-4652-9AB1-799171CFFEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89CA041B-4153-43C7-BA69-D6052F4EBEEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openbsd.org/errata43.html#010_bgpd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://openbsd.org/errata44.html#010_bgpd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33975",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openbsd.org/errata43.html#010_bgpd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://openbsd.org/errata44.html#010_bgpd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-04T16:30:00.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header."
      }, {
        "lang" : "es",
        "value" : "Squid cuando el modo de interceptación trasparente está habilitado, utiliza la cabecera HTTP Host para determinar el punto final remoto, esto permite a atacantes remotos evitar los controles de acceso para Flash, Java, Silverlight y puede que otras tecnologías y permite que se comunique con sitios de intranet restringidos a través de una página Web manipulada que provoca que un cliente envíe solicitudes HTTP con una cabecera Host modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:N/A:N",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid_web_proxy_cache:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B8B26B-B58B-4A84-95BF-A271FEE36F4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid_web_proxy_cache:2.7.stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A0A485-9C22-4A1E-9224-F777C8407013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid_web_proxy_cache:2.7.stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CC68017-20A2-4519-94AD-1A720692323C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid_web_proxy_cache:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18A99A70-46CE-4F1F-BC50-A9A32DBB511E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid_web_proxy_cache:3.0_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F1B9-A281-47C0-88EB-417A6A5B9F00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid_web_proxy_cache:3.0_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EECA433-3770-4ADE-8962-181FCC3590E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid_web_proxy_cache:3.0_pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28613D22-9E8B-4231-9AC9-523D506A200A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8DBB70-1047-451D-9853-8FA404A307FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26EBDB74-8847-4FBD-B638-677CFEF6C062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B4C1903-AE1A-46E1-9095-4656BEA54754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CE8DDCB-0371-4220-A43E-946153EB02FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED179F50-3DCA-4853-875E-BCB684FF1D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BE6BD41-C6DB-442B-9844-9792255EB268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A29F22EA-DFC8-407D-9A08-0981AFA97A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E1D7E85-BBB6-4D8F-8543-9E0A0068DD74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55F27E45-FD71-46C1-80F9-4A4145DE2A50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/435052",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/435052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0801\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/",
        "lastModified" : "2009-03-09T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-04T16:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Qbik WinGate, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header."
      }, {
        "lang" : "es",
        "value" : "Qbik WinGate, cuando el modo de intercepción transparente esta activado, utiliza una cabecera de Host HTTP para determinar un punto final remoto, lo que permite a atacantes remotos evitar el control de acceso para Flash, Java, Silverlight y probablemente otras tecnologías, y posiblemente comunicar con sitios restringidos de redes internas a través de una pagina web manipulada que causa que el cliente envíe peticiones HTTP con una cabecera host modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:N/A:N",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F7F7D9-7886-4C2E-8A79-3EAC9DF63474"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.0.1_build_993:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82CD8E2B-37BF-4989-ABF3-9EC8E6F1C079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.0.1_build_995:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CCFB397-9F5F-42F8-ABB3-9700F100D43D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.0.2_build_1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00348CE9-7290-42D8-B727-47B06D98D8AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.0.2_build_1001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78495313-FD35-44C9-92B9-65EFAE0F9D42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.0.3_build_1005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B349F8-DE32-47AF-8110-8509ACB7164E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC35C61-DF0B-4E37-AB6E-8316BB6D9A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.1.1.1077:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDF759C-0AAE-4760-B829-13F055AD290C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05317F4B-C1D7-435A-BEB3-AD4DF60A05C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0013128-2173-426A-9E41-1D5DB642BF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5F3CDE-1931-4BD9-9ABD-F07543DAC113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB5F0B2-42F0-4FDE-901F-6597E8C67986"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1E8C06-4E84-4FB8-A513-D8ACC1146BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87271BFA-34F6-41D6-A92B-F8E1EF49AC80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A41232E5-3586-4CED-8070-7C004C06E62E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/435052",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/435052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-04T16:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header."
      }, {
        "lang" : "es",
        "value" : "SmoothWall SmoothGuardian, usada en SmoothWall Firewall, NetworkGuardian, y SchoolGuardian 2008, cuando el modo de intercepción trasparente está activado, usa la cabecera HTTP Host para determinar el punto final remoto, lo que permite a los atacantes remotos evitar el control de acceso para Flash, Java, Silverlight y propablemente otras tecnologías, y posiblemente comunicarse con sitios de intranet retringidos, a través de páginas web manipuladas lo que causa que el cliente envíe peticiones HTTP con una cabecera Host modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:N/A:N",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smoothwall:networkguardian:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "125A7E97-7498-4F4B-BF57-72216059F299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smoothwall:schoolguardian:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056B0BD8-F842-4844-8954-FE1CFC92C6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smoothwall:smoothguardian:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4285E19-02DA-4A75-BE6F-F46769FD8A0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/435052",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MAPG-7M6SM7",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33858",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/435052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MAPG-7M6SM7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-04T16:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ziproxy 2.6.0, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header."
      }, {
        "lang" : "es",
        "value" : "Cuando el modo de interceptación transparente está activado en Ziproxy 2.6.0, usa la cabecera Host de HTTP para determinar el destino, lo que permite a atacantes remotos saltarse el control de acceso para Flash, Java y Silverlight, y probablemente otras tecnologías, posiblemente podrían comunicarse con sitios restringidos de la Intranet, a través de una página Web manipulada que provoca que un cliente envíe peticiones con un cabecera Host modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:N/A:N",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ziproxy:ziproxy:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CB5B52-3848-4206-BDAD-3D947DAE7B47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/435052",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MAPG-7N9GN8",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/435052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MAPG-7N9GN8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-04T17:30:02.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in piCal 0.91h and earlier, a module for XOOPS, allows remote attackers to inject arbitrary web script or HTML via the event_id parameter in index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en piCal 0.91h y anteriores, un módulo para XOOPS, permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro event_id en el archivo index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mihai_bazon:pical:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.91h",
            "matchCriteriaId" : "BB0840DD-5A92-4952-BDB5-03D6663B72AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB325E21-BD1E-4C12-B3B1-7210AFFD1235"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN91591874/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000013.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33986",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://xoops.peak.ne.jp/md/news/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://xoops.peak.ne.jp/md/news/index.php?page=article&storyid=476&easiestml_lang=xlang%3Aen",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN91591874/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xoops.peak.ne.jp/md/news/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://xoops.peak.ne.jp/md/news/index.php?page=article&storyid=476&easiestml_lang=xlang%3Aen",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-04T17:30:02.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in OpenGoo before 1.2.1 allows remote authenticated users to modify their own permissions via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en OpenGoo anterior a v1.2.1, permite a usuarios autenticados en remoto modificar sus propios permisos a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "DADAA5EA-129C-4D0D-8CC7-BCAEF89D3D0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B9EE25-A6BF-4302-87FA-323FEFF91117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA125B0-E18B-4D42-AFC6-B77EC15F90A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "30F9527B-092A-43F5-8D0E-A4F992BDEB0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "EEC65EA3-425F-4351-9038-0923C5EFEFE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "09A10638-8F6E-4CEB-9521-D5D8CEFE9BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.5.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "AA8AEB76-5E1A-44F7-BB4E-6D9FC076B70C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.5.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "8652824E-FE62-42CC-A30B-FA92BBAA3840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A366E561-630C-4C23-93B7-DA3A926FA474"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41036BEC-ECBD-4966-974F-3D99245D2325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31075C8F-BFCD-49AC-81F7-EEB5B04964D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C038758-7C32-4C24-8D6D-BF52EEF3209F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E775DC5-909E-4F3E-97D6-3894FF2F3CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466AAA19-4C1F-44D5-934A-DE853254E13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17857BBF-BB51-41D0-A5FD-7011108A1BB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29540269-2D98-4AA0-AC7A-F00B3CA67F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E325F5A3-6180-45D6-B4B6-125FE1597EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B1BD62-0467-4E14-AC91-E4DAADBC3279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D567F5-6923-4C82-BCBB-5FFB15697137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC271E48-FC40-4A84-8660-12572DEFE02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD757BE-4DA1-46B0-A899-31CDB1B38D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BA77B2A5-2FDF-4154-A97E-AE10D54BAF37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CABFDE-DD6A-47A3-A485-CC6204B6D037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC6587D-86F4-441A-B6CA-9603956C9B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "1036853A-BDE7-482A-895C-ACD20A75AE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7A6292-1DAB-4706-BBB0-F37F171ADEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:1.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A3DDCBB7-E133-4D46-965F-B5C335DFA8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:1.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "E02268FF-33B7-41C4-9233-D994C730FFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:1.2:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "99B3FC64-BB6A-4E06-9C88-15EA2D044745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:1.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF5947A-F624-4544-88E0-2E2D3C72973B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoo:opengoo:1.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9D124D00-EB61-493A-85F3-9B73F8CCAD87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34044",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=663706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33897",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=663706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-04T17:30:02.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "zFeeder 1.6 allows remote attackers to gain administrative access via a direct request to admin.php."
      }, {
        "lang" : "es",
        "value" : "zFeeder v1.6, permite a atacantes remotos obtener acceso de administrador a través de una solicitud directa a admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zfeeder:zfeeder:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84DAA6A7-8810-42A7-B7B4-C25CCEE5E533"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-04T17:30:02.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in SimpleCMMS before 0.1.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en SimpleCMMS anteriores a v0.1.0 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_cmms:simplecmms:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93ADD7DC-112A-4B07-B35C-1B01DCF6487B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=661656&group_id=245458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0490",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=661656&group_id=245458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-04T17:30:02.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object."
      }, {
        "lang" : "es",
        "value" : "El editor web en Dassault Systemes ENOVIA SmarTeam V5 anterior a la liberación 18 del Service Pack 8, y posiblemente CATIA y otros productos, permite a usuarios remotos autentificados leer la tarjeta de perfil de un objeto en el documento \"class\" a través de un enlace que es enviado desde el propietario del objeto documento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:enovia_smarteam:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.18",
            "matchCriteriaId" : "707448B9-31A9-43DE-9FA2-AF23B5D9F479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:catia:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.18",
            "matchCriteriaId" : "DBA8D3F2-FF39-481D-B90E-DE09AE61C2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:catia:5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3F5AE9-4DCE-4392-BF82-8C856EE69497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:catia:5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E902E409-FB08-4A09-A3F4-8AF113FB3329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34037",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1HD80332",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0525",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1HD80332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "evaluatorComment" : "Per http://www-01.ibm.com/support/docview.wss?uid=swg1HD80332\r\n\r\n\"Scenario:\r\n1. Create a document class and give permissions to joe only.\r\n2. When someone else but joe logs onto Web editor, and does a\r\n   search on this new class no results are returned as expected.\r\n3. Login as joe and search for an object created for this new\r\n   class. click on the email icon, and send the mail to bob.\r\n4. When bob clicks on the link in the email, he can view the\r\n   profile card of the object, but when he clicks on viewer he\r\n   gets an unauthorized operation error. Bob shouldn't be able\r\n   to view the profile card in the first place as he doesn't\r\n   have any access to this class.  This is a security hole in\r\n   the web editor.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-04T17:30:02.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in xGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the user parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el archivo login.php en xGuestbook v2.0 permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro \"user\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xatrix:xguestbook:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B63BAF-7570-4E15-8F9D-EF9782393C4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33875",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0523",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-04T17:30:02.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de método inseguro en el control ActiveX de SopCast SopCore de sopocx.ocx v3.0.3.501, permite a atacantes remotos ejecutar programas de su elección a través de un nombre de fichero ejecutable en el argumento al método SetExternalPlayer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sopcast:sopcore_activex_control:3.0.3.501:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4876BB-0F7F-41D0-BBE2-9790667C6D88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/9sg_sopcastia.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501252/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33920",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/9sg_sopcastia.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501252/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-04T17:30:02.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x and earlier versions allows remote attackers to execute arbitrary code via a crafted Intel Hex Code (.hex) file. NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en BreakPoint Software Hex Workshop v4.23, v6.0.1.4603 y otras v6.x y versiones anteriores, permiten a atacantes remotos ejecutar código de su elección a través de un fichero Intel Hex Code (.hex) manipulado. NOTA: algunos de los detalles se han obtenido de fuentes de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.0",
            "matchCriteriaId" : "10DED104-0B96-4AED-ACBA-A8F0D10FFCDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA15841A-9389-4846-8C1D-18DDC513C50C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6BF4ED-54D1-4252-97A7-BD5DAE30A037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100360DA-9566-411A-968D-EDB58F1A30D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25ECAAA7-CC59-40B7-B800-60E58956A3FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E45C25-7A1E-4FCB-B51C-F9A0A7BA0ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2916C7C9-FE67-49F4-A937-56530680CD0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:2.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C61A13-C7B2-46F0-814B-8C52599F8CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:2.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09B6CA27-D136-4769-AB4E-C40AAC6A4FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:2.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A02F57-8428-4355-BF5F-A11A6BCE1F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBECCF0A-79B0-4C1D-8879-184C78ECAD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:3.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70FCF22E-5217-4B64-8960-11D65F21E59B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D370D9-6907-4AC2-89CB-D6936728D2DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F49B1C6-C892-49E2-AA22-9DE33609696B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55B2ACC-13C5-4FF0-8BD1-B143F8A7161B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C136606A-10DB-424C-A230-0E1640778A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CD53A9-BC06-4307-8009-4CC3AD194168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46A12319-9479-493A-88E7-2F07485E0059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7353520-10FF-45A8-8B91-26DA53CAA6A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7854DC8E-B375-40F9-B057-0CEE9D635C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB64D21-9A73-40AA-98F5-6BF5CA03396F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB87CACB-DC30-4508-839C-7BFF9C56BD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1434BD6A-F2F4-4A1F-ACE9-600E6DB0A878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD8E03A-2B59-4015-8A46-70B8C7494392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F94FBC7-8643-4F08-902F-55B1EFF6F3E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpsoft:hex_workshop:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E702A091-AC4B-4B83-BFE4-D6494A779CAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34021",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501300/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33932",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501300/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0037",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-05T02:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL."
      }, {
        "lang" : "es",
        "value" : "La implementación de redirección en curl y libcurl v5.11 hasta v7.19.3, cuando CURLOPT_FOLLOWLOCATION esta activado, acepta valores de localización a elección del usuario, lo que permite a servidores HTTP remotos (1)iniciar peticiones arbitrarias a servidores de red interna, (2) leer o sobreescribir ficheros arbitrariamente a través de una redirección a un fichero: URL, o (3) ejecutar comando arbitrariamente a través de una redirección a un scp: URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547AF432-EC84-4D3F-9A1A-9DDDE90FAA89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716A8128-1159-4E38-A35B-DB011915145B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:6.1beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21D0B74A-8656-486A-97D8-0FFA2B6E7577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFF7F97-FA48-43BF-BF90-180B9E9099AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48753D9B-72A1-4F7C-A71E-AA502F5FA6AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7F9940-212B-4AA8-B42F-6A8DDBA27652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9238EF-73A5-486E-94BD-3A411DFBE419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF49459-9F8D-4BF5-9F24-DCB256A72FCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA5A191C-D5AE-4A22-8D1A-38FBF5C24705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7637717-CF5F-4AA4-9433-5C80C711D824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC0FFDE-B7C6-47AD-8BED-181E10268643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAAA0E96-283D-4590-BE3C-76D0A222EB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74325BB1-54AE-40BC-81C0-AD07CE6BBDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A980CED-EB95-4997-BE4C-56EF96A14471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D83D9F-242B-4689-91EF-64A56C769C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17FA67F8-137F-4778-A6B6-A6EF59C2271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F84D43-1CE6-452D-A819-44C7CCBCB8C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95EE97A0-420F-4FB7-89CF-2E8064D7E0B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DE2E637-D0CA-4B2E-8386-EF2892E5E074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6DC7AC-CF08-4E45-AA75-2BABF59D960B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB3A5AE-F854-483C-A6DA-02F811F2F6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D20FA870-2B29-4CFE-ABD1-62DB4E165B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8019F384-E7EA-4E4D-8E09-4A1FDDB3849B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37105953-D573-4191-BB96-758F6AFD882C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35898A38-91F6-4C77-ACFD-70E1380AEF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E3545C6-934D-4C55-B285-DB44783E0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5AC6F4-443D-4EB6-83E7-4F193BCC1D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BC29408-D7CE-496B-AB2C-783EE40BCC5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC171D9-5418-4C66-BBDA-ABFD978CF113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CD68B6D-72AB-4A61-9528-8631B147A3DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97233341-471B-4B59-95ED-F376460370AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0080682-F304-45BE-A13B-C75C48245E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D90019-9713-46CB-90F5-CF6F016AE1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6D2C32-ADA4-4859-A30F-7B910D96F02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CDA26B4-A6F6-41B4-A592-C9AF101C5A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87392CA8-DA66-4E55-9EDA-A85DC6AA253A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFBF583-CE6A-4670-B196-3EEA7B4389BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75DFDCF3-FBC3-4231-9915-2D4A7853C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2669757-AA52-4C71-96E4-8A32883574D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8777B0FB-8BFB-4D98-A4C2-E60807CF0C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19C0BD35-0B32-46B8-A442-2FEA4762523F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9FFE5B-34E9-47FF-975C-ADC315E7C1E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E262EDF2-E490-48F1-B277-844C14CD7361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1B1C3BA-BAC3-4424-9523-BCDC373E8EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B0B2AA-4FD6-4376-A239-00E9431C9F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A11159-1757-404E-AA07-DD865DCDEF8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E300177-087D-4103-9092-FF6A4052EA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5D1EA8-D015-49F2-B134-C665969F0276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC24D6B-E3E4-4C07-9C4E-3748FDE300EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE6AD55-E3D2-46FD-8EFF-595EEF3B6F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4848C3C8-432D-43E7-B0D9-8FD69D4C3B0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A7BE71-D4FB-42FF-8ED4-BA5A81BE8720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D020D95D-CD04-48A5-9488-1C6E7F69ED8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2458D0E-66F7-484C-9989-308530AE766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B2D97A-083B-4DEB-A02E-124F36838130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF7D32E-D07A-478E-96E7-0302B6118B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D46E759-3E26-41AC-BF71-A0450CBF54FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CA2263-4478-477A-86C4-6CCCC36F3EBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0401FA1-CF19-4BBA-B61B-263CFBA92B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A28049D-C8AF-42D0-A294-851854A66516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F19EC641-0BC7-486B-A7B7-2C0264BC2DAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C045C9-332E-4277-9167-F25D7F62F702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262827E1-A139-46E2-B44D-46CC40E8E33B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:curl:7.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81B43-895A-4FD4-A274-CA762C73DCA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339F2D11-27F1-42A8-A780-8D0DAFB168C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEC85E8-5555-46A9-9A95-30E1497AFA09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03060364-7DCD-4111-BF7A-BEF6AFCB3134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "319DADFB-081B-46AA-9F7D-DD4D1C5BE26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9C6906-5FBD-4736-87B6-720E288E394A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4931FF86-51B6-470A-A2E0-A1B0942D1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA9DA33F-A33E-483E-AE4D-4422D62C02E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5028DB2-87D5-4AD8-87D4-325C519D6CD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E992CDB0-A787-4F7E-AC55-13FE7C68A1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "808143C5-108B-45BE-B626-A44F9F956018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EBBB3F1-98BD-40D1-B09F-1924D567625A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D5DAE5-ABEA-4FF1-836C-BA4741F13323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E15191F-D4E6-425C-81BE-2CD55A815B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0407CCC0-ACAA-4B2A-99A5-DA57791057B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248D86F7-A8E5-448D-A55A-C05278BB9822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBACF741-C988-4800-A9FF-E4836A1EE4E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://curl.haxx.se/docs/adv_20090303.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://curl.haxx.se/lxr/source/CHANGES",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000060.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34138",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34202",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34237",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34251",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34255",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34259",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34399",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35766",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-21.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.476602",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1738",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0341.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501757/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504849/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33962",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021783",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-726-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0009.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0581",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1865",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.withdk.com/2009/03/03/curllibcurl-redirect-arbitrary-file-access/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.withdk.com/archives/Libcurl_arbitrary_file_access.pdf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49030",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11054",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6074",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://curl.haxx.se/docs/adv_20090303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://curl.haxx.se/lxr/source/CHANGES",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.476602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0341.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501757/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504849/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-726-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.withdk.com/2009/03/03/curllibcurl-redirect-arbitrary-file-access/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.withdk.com/archives/Libcurl_arbitrary_file_access.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0186",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-03-05T02:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en libsndfile v1,0,18, usado en Winamp y otros productos, permite a atacantes dependientes de contexto la ejecución de código de su elección a través de un trozo de descripción manipulada en un archivo de audio CAF, permitiendo  un desbordamiento de búfer basado en montículo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "218E9850-70F5-4579-9549-47DD16ECD2B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951898A7-A060-4853-8C4E-99927794C0FC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.18",
            "matchCriteriaId" : "30C97108-A0D5-41AE-9D66-548A679ECD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3B1750-4CC0-44EA-A029-B42B8D341191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:0.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98620203-42FE-4C3F-AD03-CC477712A38A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD8A661-B9F9-46C0-AFE0-F4B0ADE25CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE94C03-86CE-4FF7-B2A2-3BC3D6F18810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "22C7A5B0-6D12-46D3-8474-133C936D4788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93CC8970-3901-46B7-9BBA-323F0B600A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA68E7AA-BD78-4AA8-A09C-61DDF3AD7B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D48F80-6625-49CC-816F-C71EAB6C3FC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30F54A9-501A-48C4-98DF-36A58CC0EC74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A89E2CE-793A-4040-A611-759CC060FEEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A4D8112-A8A3-4803-BB37-93956770FDE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F96730-512A-4B12-B365-2E7DFC5D401D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01ADE6F4-21F6-4CA1-BA9C-B7A73173981D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "263665FB-C27E-4BA4-A41C-90DB0286A58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A37DA09-D58A-4B3B-86D7-6447CF11B869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0080125E-B49E-4A39-8CEB-A309D8F35074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A03E3DF-F506-4476-BB3B-7ACE69717632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD0D6ED-4C26-4278-929D-CC874B4A974E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860DAC59-7CB7-4FCA-9198-B2E0E2C313D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "570D85F0-F757-488A-A059-54BF0810F1E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28BC682-E6B1-4A63-9734-FDB6019B9AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8823A84B-4694-4838-A877-AE66400B26BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/33980",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33981",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34316",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/34526",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/34642",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/34791",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-7/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-8/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-16.xml",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1742",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.mega-nerd.com/libsndfile/NEWS",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501399/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501413/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33963",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021784",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-749-1",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0584",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0585",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49038",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-8/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mega-nerd.com/libsndfile/NEWS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501399/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501413/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-749-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T02:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler."
      }, {
        "lang" : "es",
        "value" : "El manipulador de peticiones dbus en (1) network-manager-applet y (2) NetworkManager en Ubuntu v6.06 LTS, v7.10, v8.04 LTS, and v8.10 no verifica adecuadamente los privilegios, lo que permite a usuarios locales descubrir (a)las contraseñas de la conexión de red y (b)Las claves pre-compartidas a través de peticiones sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:6.06:-:lts:*:*:*:*:*",
            "matchCriteriaId" : "678EC327-EAC6-4923-9987-A9B78111B5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06FD8602-7069-41C6-B65C-84928EDCE2D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:8.04:-:lts:*:*:*:*:*",
            "matchCriteriaId" : "12DD761F-EA6F-4139-94ED-94EBC0F6A87D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED67B852-4B37-4B79-8F4D-23B2FEACA4ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1021910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1021911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.gnome.org/viewvc/network-manager-applet/trunk/nm-applet.conf?r1=1133&r2=1207&pathrev=1207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.gnome.org/viewvc/network-manager-applet?view=revision&revision=1207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0361.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0362.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33966",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-727-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-727-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.gnome.org/viewvc/network-manager-applet/trunk/nm-applet.conf?r1=1133&r2=1207&pathrev=1207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.gnome.org/viewvc/network-manager-applet?view=revision&revision=1207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0361.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0362.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-727-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-727-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T02:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module."
      }, {
        "lang" : "es",
        "value" : "El módulo Python AI de Wesnoth v1.4.x y v1.5 anterior a v1.5.11, permite a atacantes remotos escapar del sandbox -cajón de arena- y ejecutar código de su elección utilizando un módulo de lista blanca que importa un módulo no seguro, después la usar el nombre de un módulo jerárquico para acceder a un módulo no seguro a través del módulo de lista blanca."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB71E24E-1A08-491F-8379-FE41AF012E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B57803-62E1-4F50-92DD-6796C6D60758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D83E56-BE05-4DF7-88AD-BC0AD5098415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621115C3-5AF6-4709-BB0B-A0FE481C5C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1549F8-FE6A-49E5-BC19-585C4957E061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD5F86E-F65D-4114-9057-A81B360BE143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "256B2C75-47E5-4A8F-9672-B56D17086764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD02FB1-72CD-42A3-8E7C-910490467A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15627E66-D852-4F68-9C9A-3EAF5B805BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "415FE737-8F89-463D-9F1D-EF5EDACFCD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1941BB00-8039-4DD8-815A-1AE0CA986C70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D091DF5-3229-43E0-BEC4-754992B8DD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F8C56F-1F74-4F40-85D8-DA861DE4DB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E58D08-F602-4BE6-978D-34B58E9188B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51001322-B437-4A1C-83BA-C8E3C3BCE7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A991E343-0C44-4F37-80EE-5C0E45EDA909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4223A3-6F43-4774-8579-59868FB5074B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA5792D1-F342-41F2-B056-D8BA99F5C80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EDB1AAF-2513-4511-9E28-E0E9ACF74C19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://launchpad.net/bugs/335089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://launchpad.net/bugs/336396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://launchpad.net/bugs/cve/2009-0367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34058",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0595",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wesnoth.org/forum/viewtopic.php?t=24247",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wesnoth.org/forum/viewtopic.php?t=24340",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gna.org/bugs/index.php?13048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://launchpad.net/bugs/335089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://launchpad.net/bugs/336396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://launchpad.net/bugs/cve/2009-0367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wesnoth.org/forum/viewtopic.php?t=24247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wesnoth.org/forum/viewtopic.php?t=24340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gna.org/bugs/index.php?13048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0578",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-05T02:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console."
      }, {
        "lang" : "es",
        "value" : "network-manager-applet en Ubuntu 8.10 no verifica adecuadamente los privilegios para las peticiones dbus(1) \"modify\" y (2) \"delete\", lo que permite a usuarios locales modificar o eliminar las conexiones de red de usuarios de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED67B852-4B37-4B79-8F4D-23B2FEACA4ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34067",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34473",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0361.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33966",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021909",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-727-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487752",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49063",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8931",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0361.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-727-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0619",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-03-05T02:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Session Border Controller (SBC) before 3.0(2) for Cisco 7600 series routers allows remote attackers to cause a denial of service (SBC card reload) via crafted packets to TCP port 2000."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Session Border Controller (SBC) anterior a v3.0(2) para el router Cisco serie 7600, permite a atacantes remotos provocar una denegación de servicio (recarga de tarjeta SBC) a través de paquetes TCP manipulados dirigidos al puerto 2000."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:session_border_controller:3.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF30BB8E-6697-4B6C-9BC8-A2019C3AC8BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:session_border_controller:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E73F34D9-ECD9-46AE-B3FE-681990A9EE25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a80faa.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33975",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021787",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49055",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a80faa.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0771",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-05T02:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The layout engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption and assertion failures."
      }, {
        "lang" : "es",
        "value" : "El motor de diseño en Mozilla Firefox  anterior a v3.0.7, Thunderbird anterior a v2.0.0.21, y SeaMonkey v1.1.15, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente la ejecución de código de su elección a través de vectores que provocan una corrupción de memoria y un fallo de aserción."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.6",
            "matchCriteriaId" : "63B35DF5-2532-4BB3-9A0B-1388320FD7A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.14",
            "matchCriteriaId" : "A757D692-B21F-4768-BB9C-7B2AF2B274FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.20",
            "matchCriteriaId" : "28E241C3-B460-44AA-9716-1537ACC1686D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF479C3-95A0-414F-B47B-C94BE95713D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34140",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34272",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34383",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34464",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1751",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-07.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0315.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33990",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021795",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0632",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=424276%2C435209%2C436965%2C460706%2C466057%2C468578%2C471594%2C472502",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11314",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5250",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6163",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6196",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6755",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=424276%2C435209%2C436965%2C460706%2C466057%2C468578%2C471594%2C472502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0772",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-05T02:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetOwnerNode, events, and garbage collection, which triggers memory corruption."
      }, {
        "lang" : "es",
        "value" : "El motor en Mozilla Firefox 2 y 3 anteriores v3.0.7, Thunderbird anteriores a v2.0.0.21, y SeaMonkey v1.1.15 permite a los atacantes remotos causar una denegación de servicios (caída) y posiblemente ejecutar arbitrariamente código a través de vectores relativos a nsCSSStyleSheet::GetOwnerNode, eventos, y recolección de basura, lo que lanza una corrupción de memoria"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.6",
            "matchCriteriaId" : "63B35DF5-2532-4BB3-9A0B-1388320FD7A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.14",
            "matchCriteriaId" : "A757D692-B21F-4768-BB9C-7B2AF2B274FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.20",
            "matchCriteriaId" : "28E241C3-B460-44AA-9716-1537ACC1686D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF479C3-95A0-414F-B47B-C94BE95713D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34140",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34272",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34324",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34383",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34387",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34464",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1751",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-07.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0258.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0315.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0325.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33990",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021795",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0632",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=475136",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5703",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5945",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6097",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6811",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9609",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/741-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0258.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=475136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/741-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0773",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-05T02:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a splice of an array that contains \"some non-set elements,\" which causes jsarray.cpp to pass an incorrect argument to the ResizeSlots function, which triggers memory corruption; (2) vectors related to js_DecompileValueGenerator, jsopcode.cpp, __defineSetter__, and watch, which triggers an assertion failure or a segmentation fault; and (3) vectors related to gczeal, __defineSetter__, and watch, which triggers a hang."
      }, {
        "lang" : "es",
        "value" : "El motor JavaScript de Mozilla Firefox anterior a v3.0.7, Thunderbird anterior a v2.0.0.21 y SeaMonkey v1.1.15, permite a atacantes remotos provocar una denegación de servicio (caída) y puede que ejecutar código de su elección a través de (1) una unión de un array que contiene \"algunos elementos non-set\" que hace que jsarray.cpp pase un argumento incorrecto a la función ResizeSlots lo que lanza una corrupción de memoria; (2) vectores relacionado con js_DecompileValueGenerator, jsopcode.cpp, __defineSetter__ y watch -ver- que lanzan un fallo de aserción o un fallo de segmentación y (3) vectores relacionados con gczeal, __defineSetter__ y watch -ver- que inducen a un cuelgue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.6",
            "matchCriteriaId" : "63B35DF5-2532-4BB3-9A0B-1388320FD7A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.14",
            "matchCriteriaId" : "A757D692-B21F-4768-BB9C-7B2AF2B274FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.20",
            "matchCriteriaId" : "28E241C3-B460-44AA-9716-1537ACC1686D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF479C3-95A0-414F-B47B-C94BE95713D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34140",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34272",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34383",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34464",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1751",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-07.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0315.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33990",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021795",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0632",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=457521",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=467499",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=472787",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10491",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5856",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5980",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6708",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=457521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=467499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=472787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0774",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-05T02:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to gczeal, a different vulnerability than CVE-2009-0773."
      }, {
        "lang" : "es",
        "value" : "El motor de diseño en Mozilla Firefox 2 y 3 anterior a v3.0.7, Thunderbird anterior a v2.0.0.21, y SeaMonkey v1.1.15, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente la ejecución de código de su elección a través de vectores relacionados con \"gczeal\". Vulnerabilidad distinta de CVE-2009-0773."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.6",
            "matchCriteriaId" : "63B35DF5-2532-4BB3-9A0B-1388320FD7A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.14",
            "matchCriteriaId" : "A757D692-B21F-4768-BB9C-7B2AF2B274FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.20",
            "matchCriteriaId" : "28E241C3-B460-44AA-9716-1537ACC1686D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF479C3-95A0-414F-B47B-C94BE95713D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34140",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34272",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34324",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34383",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34387",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34464",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1751",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-07.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0258.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0315.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0325.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33990",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021795",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0632",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=473709",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11138",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5947",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6057",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6121",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6945",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/741-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0258.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=473709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/741-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0775",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-05T02:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to execute arbitrary code via \"cloned XUL DOM elements which were linked as a parent and child,\" which are not properly handled during garbage collection."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de doble liberación en Mozilla Firefox anteriores a v3.0.7, Thunderbird anteriores a v2.0.0.21, y SeaMonkey anteriores a v1.1.15  permite a atacantes remotos ejecutar código a su elección a través de \"elementos XUL DOM clonados lo cuales son enlazados como padre e hijo\", lo cual no es correctamente manejado durante la recolección de basura."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.6",
            "matchCriteriaId" : "63B35DF5-2532-4BB3-9A0B-1388320FD7A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.14",
            "matchCriteriaId" : "A757D692-B21F-4768-BB9C-7B2AF2B274FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.20",
            "matchCriteriaId" : "28E241C3-B460-44AA-9716-1537ACC1686D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF479C3-95A0-414F-B47B-C94BE95713D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34140",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34272",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34324",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34383",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1751",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-08.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0258.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0315.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0325.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33990",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021796",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0632",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=474456",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5806",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5816",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6207",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7584",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9681",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0258.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=474456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0776",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-05T02:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect."
      }, {
        "lang" : "es",
        "value" : "nsIRDFService de Mozilla Firefox anterior a v3.0.7, Thunderbird anterior a v2.0.0.21 y SeaMonkey anterior a v1.1.15; permite a atacantes remotos evitar la política de same-origin -mismo origen- y leer datos XML desde otro dominio a través de una redirección de dominio cruzado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.6",
            "matchCriteriaId" : "63B35DF5-2532-4BB3-9A0B-1388320FD7A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.14",
            "matchCriteriaId" : "A757D692-B21F-4768-BB9C-7B2AF2B274FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.20",
            "matchCriteriaId" : "28E241C3-B460-44AA-9716-1537ACC1686D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF479C3-95A0-414F-B47B-C94BE95713D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34140",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34272",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34324",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34383",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34387",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34464",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1751",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-09.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0258.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0315.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0325.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33990",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021797",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0632",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=414540",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5956",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6017",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6191",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7390",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9241",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/741-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0258.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=414540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/741-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0777",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-05T02:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode invisible characters when they are displayed in the location bar, which causes an incorrect address to be displayed and makes it easier for remote attackers to spoof URLs and conduct phishing attacks."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox en versiones anteriores a 3.0.7, Thunderbird en versiones anteriores 2.0.0.21 y SeaMonkey en versiones anteriores a 1.1.15, decodifican caracteres invisibles cuando son desplegados en la barra de ubicación, lo que causa que se muestre una dirección incorrecta y hace más fácil para los atacantes remotos falsificar URL y realizar ataques de phishing."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.6",
            "matchCriteriaId" : "63B35DF5-2532-4BB3-9A0B-1388320FD7A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.14",
            "matchCriteriaId" : "A757D692-B21F-4768-BB9C-7B2AF2B274FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.20",
            "matchCriteriaId" : "28E241C3-B460-44AA-9716-1537ACC1686D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF479C3-95A0-414F-B47B-C94BE95713D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34140",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34145",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34272",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2009/Mar/1021799.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-11.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0315.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33990",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0632",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=452979",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11222",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6039",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6157",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6229",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7435",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/alerts/2009/Mar/1021799.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=452979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T02:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54) in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de método inseguro en el control ActiveX ImeraIEPlugin (ImeraIEPlugin.dll v1.0.2.54) en Imera TeamLinks Client permite a atacantes remotos forzar la descarga y ejecucion de URLs a su eleccion a traves de los parametros \"DownloadProtocol\", \"DownloadHost\", \"DownloadPort\", y \"DownloadURI\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imera:teamlinks:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F6AB34-686D-4EC8-9A9B-FCFE58DF21F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34103",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0591",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T02:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Widgets.aspx in Blogsa 1.0 Beta 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchText parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Widgets.aspx en Blogsa v1.0 Beta 3 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"searchText\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blogsa:blogsa:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0beta3",
            "matchCriteriaId" : "D7E32DFD-1F29-4AC6-92BB-E7A6904ABA79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/501382/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33957",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501382/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T02:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret (juHash) in an error message, which allows remote attackers to read arbitrary files by including the hash in a request."
      }, {
        "lang" : "es",
        "value" : "El mecanismo jumpUrl en la biblioteca class.tslib_fe.php en TYPO3 versión 3.3.x hasta 3.8.x, versión 4.0 anterior a 4.0.12, versión 4.1 anterior a 4.1.10, versión 4.2 anterior a 4.2.6 y versión 4.3alpha1, filtra un hash secreto (juHash) en un mensaje de error, que permite a los atacantes remotos leer archivos arbitrarios mediante la inclusión del hash en una petición."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.3.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349BDDAD-35AE-44B6-9623-1ABAAFA16D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.5.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33152254-3B0B-4413-90F3-72A8B1ADDBD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.6.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78413B61-AAB7-485D-BD24-C8A6D7631281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6EAF89-59F9-4D06-A7AE-175816BB7E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.8.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF63F45-3E42-4DD6-ABD3-BA67D04C8A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EAE65C-1E17-48CD-B48C-E0BC09FB6596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F271C6-B5A7-4B06-A3DF-4C7F74090CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D69530-AE74-4012-B522-01D0B6B01662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5514D17F-95A5-48C5-9F91-554F8D3C3DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46E35EC-FF7B-4510-A5F2-FC230B7477B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A671ED2-91AA-4447-8996-A8A16FE753A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4219A367-8431-4A72-AF73-ED2A853B14E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F10D45-FA29-4534-8789-201D194C46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884B4418-83A4-4BCB-8019-306285EB418E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93919E9-B3E8-483E-A701-D87570127207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDEAF6A-8A99-4872-98CC-12BD54515B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8185B9-D244-43B3-9DF1-FF137A2108DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFAD319-DDFC-499F-86AB-141FBE435F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E068CC16-6995-40C6-BA24-9CA334C4CABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "231CD899-2DC5-42CD-A4F9-4D00C2C11159"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1720",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/10/6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/10/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0816",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T02:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the backend user interface in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo cross-site-scripting (XSS) en la interfaz de usuario backend en TYPO3 versión 3.3.x hasta 3.8.x, versión 4.0 anterior a 4.0.12, versión 4.1 anterior a 4.1.10, versión 4.2 anterior a 4.2.6 y versión 4.3alpha1, permiten a los atacantes remotos inyectar script web o HTML arbitrario por medio de campos no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EAE65C-1E17-48CD-B48C-E0BC09FB6596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501A9157-044A-4856-8092-418D7329EED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA47174-9BC4-4B74-8618-6A7B0773553B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A13146E-EC04-4354-9123-BC7CB292C66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F27B173-8D10-47F7-8450-F8808A918295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1FAD0A-6B98-476B-BCD2-361996CA1C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE992D57-AF82-4BF0-96E8-98110C0AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9A484F-C34D-4885-8125-D9C8725EEB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCB2DE6-4407-4E40-8574-9C813183565B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19647A4-C422-42D0-863B-5B6E0B08BFAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C842A284-8360-4DE4-8D05-8082D0A0AA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A4600DD-C9CA-4D71-BD31-12FE40A14D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F271C6-B5A7-4B06-A3DF-4C7F74090CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161E310F-F2D8-40B3-8390-8C52ACDD0B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D69530-AE74-4012-B522-01D0B6B01662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5514D17F-95A5-48C5-9F91-554F8D3C3DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46E35EC-FF7B-4510-A5F2-FC230B7477B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A671ED2-91AA-4447-8996-A8A16FE753A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4219A367-8431-4A72-AF73-ED2A853B14E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F10D45-FA29-4534-8789-201D194C46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884B4418-83A4-4BCB-8019-306285EB418E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDEAF6A-8A99-4872-98CC-12BD54515B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8185B9-D244-43B3-9DF1-FF137A2108DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFAD319-DDFC-499F-86AB-141FBE435F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E068CC16-6995-40C6-BA24-9CA334C4CABB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/10/6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/10/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0817",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T02:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Protected Node module 5.x before 5.x-1.4 and 6.x before 6.x-1.5, a module for Drupal, allows remote authenticated users with \"administer site configuration\" permissions to inject arbitrary web script or HTML via the Password page info field, which is not properly handled by the protected_node_enterpassword function in protected_node.module."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo Protected Node v5.x anterior v5.x-1.4 y v6.x anterior a  v6.x-1.5 para Drupal, permite a usuarios autenticados remotamente con permisos de \"configuración administrativa del sitio\", la inyección de secuencias de comandos web o HTML de su elección a través del campo Password Page Info, que no está manejado adecuadamente por la función protected_node_enterpassword  en protected_node.module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:protected_node_module:5.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA409222-79A5-4C9D-8D79-5F634A61E0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:protected_node_module:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D34BF7-DDAE-4F29-93CD-503679FAAF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:protected_node_module:5.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEEE7794-247D-4303-A426-C68CD0F934AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:protected_node_module:5.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F817243-DF82-4B24-992C-6FA4CC0038C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:protected_node_module:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A507F00C-8570-4265-86F4-CE13CD59F79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:protected_node_module:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF91738E-F092-4339-95C1-BA5696C3B935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:protected_node_module:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE752A2-612D-4E1D-9A6B-3D36CC009245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:protected_node_module:6.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171053F8-66E2-4DA1-A54B-3C6D96488E50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:protected_node_module:6.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C785797-2B53-4799-9B52-07FCC418ADD4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/385950",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/386604",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/386606",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lampsecurity.org/node/28",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://osvdb.org/52300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34060",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0572",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/385950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/386604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/386606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lampsecurity.org/node/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://osvdb.org/52300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0818",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T02:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the taxonomy_theme_admin_table_builder function (taxonomy_theme_admin.inc) in Taxonomy Theme module before 5.x-1.2, a module for Drupal, allows remote authenticated users with the \"administer taxonomy\" permission, or the ability to create pages when tagging is enabled, to inject arbitrary web script or HTML via the Vocabulary name (name parameter) to index.php.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función taxonomy_theme_admin_table_builder (taxonomy_theme_admin.inc) de Taxonomy Theme módulo anterior a 5.x-1.2, un módulo para Drupal, permite a usuarios autenticados en remoto con los permisos de \"administer taxonomy\", o la capacidad de crear páginas cuando las etiquetas están habilitadas; inyectar secuencias de comandos Web o HTML de su elección a través del nombre Vocabulary (parámetro name) a index.php. NOTA: algunos de estos detalles se han obtenido de fuentes de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:taxonomy_theme_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.x-1.1",
            "matchCriteriaId" : "800233AE-BE67-492F-975B-E9A2A74D4AA3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/386940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/386942",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34080",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33923",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/386940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://drupal.org/node/386942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T02:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via \"an XPath expression employing a scalar expression as a FilterExpr with ExtractValue() or UpdateXML(),\" which triggers an assertion failure."
      }, {
        "lang" : "es",
        "value" : "El archivo sql/item_xmlfunc.cc en MySQL versiones 5.1 anteriores a 5.1.32 y versiones 6.0 anteriores a 6.0.10, permite a los usuarios autenticados remotos causar una denegación de servicio (bloqueo) por medio de \"an XPath expression employing a scalar expression as a FilterExpr with ExtractValue() or UpdateXML(),\" que desencadena un fallo de aserción."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.32-bzr",
            "matchCriteriaId" : "1AE37831-9813-4488-AD83-A23DD5729EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D0F7A49-62A2-4201-B6F3-8DB9902A4480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C56D394-4CE1-4237-A681-1474B5436CC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:6.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9E9D88-6640-45E8-83AA-7B9C0936D905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:6.0.10-bzr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4433A47E-0AF5-474B-8C68-E6B470CEBC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F58612F4-1CAC-4BFC-A9B2-3D4025F428FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F49A1D-BCA3-4772-8AB3-621CCC997B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F719DD8E-8379-43C3-97F9-DE350E457F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "342BB65B-1358-441C-B59A-1756BCC6414A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6341F695-6034-4CC1-9485-ACD3A0E1A079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DF5F19-ECD9-457F-89C6-6F0271CF4766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446DB5E9-EF4C-4A53-911E-91A802AECA5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5829BE6A-BC58-482B-9DA1-04FDD413A7A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C85D20DF-702B-4F0B-922D-782474A4B663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73A09785-3CA4-4797-A836-A958DCDC322F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DE3D79-0966-4E14-9288-7C269A2CEEC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "564F6A24-BEB3-4420-A633-8AD54C292436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047FBCCD-DE7C-41FA-80A3-AD695C643C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "687CC501-4CB2-4295-86F6-A5E45DEC2D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "822A718D-AD9D-4AB9-802F-5F5C6309D809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2D4002-FD96-462D-BA55-4624170CAA4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A40FE1C-6EB0-4C75-867E-B1F8408E5A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.23:a:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7B68A6-13FA-4EAE-8ED0-5940A72A3D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F37486-E91C-47C4-9F53-4CFDBF8C1EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A7D87C-E34C-4595-88D5-CD483B3E8CE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28103843-D04F-4180-A71D-8DAC4E28C2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FEAE55E-7330-4A5A-A862-8D7E7621EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848D4621-AFB8-4A12-A20E-4FC9F1774DE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5138E55E-58C1-44B5-A296-A46DF2920DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B9607A-1E58-4471-BEDE-03484A1E9739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.31:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD25674A-B158-4770-B269-A9A039C79A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F48E7355-2D9A-454D-AE66-B0AE015E31A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51BF67A-BAEC-48F8-9290-67C6C5B8442E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5C6A2F-DEAE-470D-8888-0E9076CCA0B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C09231E-8759-4DFB-AA8D-17A1C6D43AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81592813-78D9-4366-AD2E-94677D93F599"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.mysql.com/bug.php?id=42495",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.1/en/news-5-1-32.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://dev.mysql.com/doc/refman/6.0/en/news-6-0-10.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34115",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33972",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0594",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.mysql.com/bug.php?id=42495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.1/en/news-5-1-32.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://dev.mysql.com/doc/refman/6.0/en/news-6-0-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of mysql packages, as shipped with Red Hat Enterprise Linux 3, 4, or 5, and Red Hat Application Stack v2.",
        "lastModified" : "2009-10-21T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T02:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code via (1) the end_date parameter to reserve.php and (2) the start_date and end_date parameters to check.php.  NOTE: the start_date/reserve.php vector is already covered by CVE-2008-6132."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección en eval (evaluación directa de código dinámico) en phpScheduleIt anterior a v1.2.11; permiten a atacantes remotos ejecutar código de su elección a través de (1) el parámetro end_date de reserve.php y (2) los parámetro start_date y end_date de check.php. NOTA: el vector start_date/reserve.php ya ha sido tratado en CVE-2008-6132."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.10",
            "matchCriteriaId" : "E82FC990-E9AC-4B43-ABBF-5F40ABF1A80A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7290BF1C-6FE1-41E4-BDA0-83DE37386E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.0.0rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D62D45B-DA45-433C-925A-1040E21FA522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "719A1C06-904B-4738-A91F-A10323FB9C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0C585D-37C7-4995-942E-93BA744B98E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "FA558DC0-AA3C-4E60-8E83-FAFA700F6B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8713ECF3-9DCD-4497-AFC9-46A5E2BC148F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461FB24E-23B1-4007-BEC0-F1CB35FA4018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D030A8C7-D749-4DC6-918C-A1D54CEA2BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16EDE5F3-3418-42AD-A580-9FD0536A59EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29C6DA6B-0346-4FB1-A1A9-C54566D0119B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36FAD8A-FA46-43AB-8409-12D1531FEEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D32582C-79F6-4965-AD0C-E3303F3D473C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7BC10E-49A1-4F6C-B06E-D51A172C94A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB0AC00-F7E5-4080-99EF-A70ABB67C661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AE62D0-76B5-4E28-B243-DAD69EB0DA24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/check.php?r1=318&r2=332",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/reserve.php?r1=318&r2=328",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33991",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=662749",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0491",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/check.php?r1=318&r2=332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/reserve.php?r1=318&r2=328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=662749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T02:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause a denial of service (application crash) via nested calls to the window.print function, as demonstrated by a window.print(window.print()) in the onclick attribute of an INPUT element."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox v2.0.0.20 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de llamadas anidadas a la función window.print, como se ha demostrado con window.print(window.print()) en el atributo onclick de un elemento INPUT."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.20",
            "matchCriteriaId" : "0DF851C0-1B3C-4224-B257-C3582F78A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/33969.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33969",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/33969.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T20:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BlogHelper stores common_db.inc under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request."
      }, {
        "lang" : "es",
        "value" : "BlogHelper almacena common_db.inc bajo la raíz web con insuficiente control de acceso, lo cual permite a atacantes remotos descargar el fichero de la base de datos que contiene credenciales de usuario a través de una petición directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedville:bloghelper:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0866FCF0-668D-4B0A-B87B-6D50E8F020D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33384",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T20:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PollHelper stores poll.inc under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request."
      }, {
        "lang" : "es",
        "value" : "PollHelper almacena poll.inc bajo la raíz web con insuficiente control de acceso, lo cual permite a atacantes remotos descargar el fichero de base de datos que contiene credenciales de usuarios a través de una petición directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedville:pollhelper:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504F51B5-E1A2-46BC-937D-057EFB3782BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51185",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33378",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T20:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtain sensitive database information, including user credentials, via a direct request."
      }, {
        "lang" : "es",
        "value" : "QuoteBook almacena  quotes.inc bajo la web raíz con insuficiente control de acceso, lo cual permite a atacantes remotos obtener información sensible, incluyendo credenciales de usuario, a través de una petición directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedville:quotebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C791A9AF-4396-41F7-A9E2-C6C63B03E687"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33420",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T20:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in QuoteBook allow remote attackers to execute arbitrary SQL commands via the (1) MyBox and (2) selectFavorites parameters to (a) quotes.php and the (3) QuoteName and (4) QuoteText parameters to (b) quotesadd.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en QuoteBook permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) MyBox y (2) selectFavorites de (a) quotes.php y los parámetros (3) QuoteName y (4) QuoteText de (b) quotesadd.php. \r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_freed:quotebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02642A47-1C91-4E9A-8F43-D4711057DEE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33420",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T20:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in QuoteBook allows remote attackers to inject arbitrary web script or HTML via the (1) QuoteName and (2) QuoteText parameters to quotesadd.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en QuoteBook permite a atacantes remotos inyectar web script o HTML a través de los parámetros (1) QuoteName y (2) QuoteText de quotesadd.php.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_freed:quotebook:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02642A47-1C91-4E9A-8F43-D4711057DEE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33420",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T20:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in members.php in the Members CV (job) module 1.0 for PHP-Fusion, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the sortby parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en  members.php en el módulo Members CV (job) v1.0 para PHP-Fusion, cuando magic_quotes_gpc no está activo, permite a usuarios remotos autenticados ejecutar comandos SQL de su elección a través del parámetro \"sortby\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-fusion:members_cv_module:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E11A1E-1EF6-4844-8F96-8BF36536A694"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:php-fusion:php-fusion:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E3E18BD-EA3F-4136-A256-A6A74F7066DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33424",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33156",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T20:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in items.php in the E-Cart module 1.3 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the CA parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en items.php en el módulo E-Cart v1.3 para PHP-Fusion permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"CA\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ausimods:e-cart:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D81481-68A3-4D66-8958-6EAA82B80E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:php-fusion:php-fusion:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E3E18BD-EA3F-4136-A256-A6A74F7066DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/499835/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33155",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/499835/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-05T20:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in gen_msn.dll in the gen_msn plugin 0.31 for Winamp 5.541 allows remote attackers to execute arbitrary code via a playlist (.pls) file with a long URL in the File1 field.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en  gen_msn.dll en la extensión (plugin) gen_msn v0.31 para Winamp v5.541 permite a atacantes remotos ejecutar código de su eleccion a través de un fichero playlist (.pls) con una URL larga en el campo \"File1\".\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myplugins:gen_msn:0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2661FAA-A987-40DF-9EA7-7BBCD28BBBA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951898A7-A060-4853-8C4E-99927794C0FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33425",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33159",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-06T06:50:20.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Team Board 1.x and 2.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for data/team.mdb."
      }, {
        "lang" : "es",
        "value" : "Team Board 1.x y 2.x almacena información sensible bajo la web raíz con insuficiente control de acceso, lo cual permite a atacantes remotos descargar una base de datos que contiene credenciales a través de una petición directa a data/team.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:team5:team_board:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC0FAEB-871F-41F8-ADB4-1AB4E150A326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:team5:team_board:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A60CED-F045-4A59-BF96-4E5E9A7365B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstorm.linuxsecurity.com/0902-exploits/teamboard-ddxss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33839",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/51752",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0902-exploits/teamboard-ddxss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/51752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-06T06:50:20.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in online.asp in Team Board 1.x allows remote attackers to inject arbitrary web script or HTML via the lookname parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en online.asp en Team Board 1.x permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro \"lookname\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:team5.team_board:1.0:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E4DF04-1931-4607-A9A6-3B104F99E93C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:team5.team_board:1.0.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2407C231-CAB0-4CA0-863A-FB31BDC76F67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:team5.team_board:1.0.2:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28241A39-69AF-44F5-9D35-428B34FA5386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:team5.team_board:1.0.3:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194471FA-50EF-4FAB-B3B4-1A1919A47C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:team5.team_board:1.0.4:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20728CC7-2423-496F-AA57-E52DE2289812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:team5.team_board:1.0.5:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF3EAF1D-F325-418F-A515-51903A67B8DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33614",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-06T06:50:20.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ScriptsEz Ez PHP Comment allows remote attackers to inject arbitrary web script or HTML via the name parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en ScriptsEz Ez PHP Comment permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro \"name\".\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptsez:ez_php_comment:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836C8DDF-E662-4439-B627-5DE69B9D8528"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33804",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-06T06:50:20.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in default.php in Kipper 2.01 allows remote attackers to inject arbitrary web script or HTML via the charm parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en default.php en Kipper v2.01 permite a atacantes remotos inyectar web script o HTML a través del parámetro \"charm\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bookelves:kipper:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA2ADC0-FF72-4E84-88D6-10C7E7EA03B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33832",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33640",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-06T06:50:20.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Kipper 2.01 allow remote attackers to inject arbitrary web script or HTML via the charm parameter to (1) index.php and (2) kipper.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Kipper v2.01 permiten a atacantes remotos inyectar web script o HTML a través del parámetro \"charm\" de (1) index.php y (2) kipper.php.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bookelves:kipper:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA2ADC0-FF72-4E84-88D6-10C7E7EA03B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33832",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-06T06:50:20.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Kipper 2.01 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the configfile parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php en Kipper v2.01 permite a atacantes remotos incluir y ejecutar ficheros locales a través de .. (punto punto) en el parámetro \"configfile\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bookelves:kipper:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA2ADC0-FF72-4E84-88D6-10C7E7EA03B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33832",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33640",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-06T06:50:20.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in default.php in Kipper 2.01 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the configfile parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en default.php en Kipper v2.01 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de secuencias de salto de directorio en el parámetro \"configfile\".\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bookelves:kipper:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA2ADC0-FF72-4E84-88D6-10C7E7EA03B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33832",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-06T06:50:20.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kipper 2.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing credentials via a direct request for job/config.data."
      }, {
        "lang" : "es",
        "value" : "Kipper v2.01 almacena información sensible bajo la raíz web con insuficiente control de acceso, lo cual permite a atacantes remotos descargar ficheros que contienen credenciales a través de una petición directa para job/config.data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bookelves:kipper:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA2ADC0-FF72-4E84-88D6-10C7E7EA03B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33832",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-06T06:50:20.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in forumhop.php in YapBB 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the forumID parameter in a next action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en forumhop.php en YapBB v1.2 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"forumID\" en una acción \"next\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapbb:yapbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "2E707548-B928-4791-9F21-7DF7757F847E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapbb:yapbb:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83D9A64-D110-4F71-A677-651B24847295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapbb:yapbb:1.2:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE0E924-AB6D-4CAC-BE45-3D72843288A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33620",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/7984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-06T06:50:20.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QIP 2005 build 8082 allows remote attackers to cause a denial of service (CPU consumption and application hang) via a crafted Rich Text Format (RTF) ICQ message, as demonstrated by an {\\rtf\\pict\\&&} message.  NOTE: the vulnerability may be in Sergey Tkachenko TRichView. If so, then this should not be treated as a vulnerability in QIP."
      }, {
        "lang" : "es",
        "value" : "QIP 2005 build 808 permite a atacantes remotos provocar una denegación de servicio (consumo de CPU y cuelgue de aplicación) a través de un mensaje Rich Text Format (RTF) ICQ manipulado, como lo demostrado por un mensaje {\\rtf\\pict\\&&}.\r\nNOTA: la vulnerabilidad puede ser en Sergey Tkachenko TRichView. Si bien, podría ser tratada como una vulnerabilidad en QIP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qip:qip:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28C4049F-7FF0-4F9B-9583-A52890B589C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33851",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/51755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500656/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33609",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/51755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500656/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-06T06:50:20.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dkim-milter 2.6.0 through 2.8.0 allows remote attackers to cause a denial of service (crash) by signing a message with a key that has been revoked in DNS, which triggers an assertion error."
      }, {
        "lang" : "es",
        "value" : "dkim-milter v2.6.0 hasta v2.8.0 permite a atacantes remotos provocar una denegación de serivio (caída) firmando un mensaje con una clave que ha sido revocada en DNS, lo cual dispara un error de afirmación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dkim:dkim-milter:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08955623-8AE9-4974-AC54-93967B0C6525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dkim:dkim-milter:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "062208E3-6997-43E5-A4B3-690697D3926F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dkim:dkim-milter:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F8AE8E3-1AC5-412D-B8EC-2D5EA0FCADE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dkim:dkim-milter:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B6EF2C-BD83-4EB8-B743-CBE60C9BA417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dkim:dkim-milter:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88968D80-76CA-4C9D-8139-EEF90802163C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33581",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34053",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=654247",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=2508602&group_id=139420&atid=744358",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1728",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/01/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33337",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=654247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=2508602&group_id=139420&atid=744358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/01/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-06T11:30:02.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343."
      }, {
        "lang" : "es",
        "value" : "La función audit_syscall_entry en el núcleo de Linux v2.6.28.7 y versiones anteriores en la plataforma x86_64 no maneja adecuadamente (1) un proceso de 32-bit haciendo una llamada al sistema (syscall) de 64 bit o (2) un proceso de 64-bit haciendo una llamada al sistema (syscall) de 32-bit, lo cual permite a usuarios locales evitar determinadas configuraciones de auditoría de llamadas al sistema (syscall) a través de llamadas al sistema (syscall) manipuladas, una cuestión diferente a VE-2009-0342 y CVE-2009-0343."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.28.7",
            "matchCriteriaId" : "37C3A423-BCC9-4001-A976-8C8620DD22F4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "823BF8BE-2309-4F67-A5E2-EAD98F723468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1CA1D49-76E7-4195-98AF-BE916040ECC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "941713DB-B1DE-4953-9A9C-174EAFDCB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F87B994-28E4-4095-8770-6433DE9C93AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B5DCF29-6830-45FF-BC88-17E2249C653D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B68DF-1440-4587-8458-9C5F4D1E43F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "513797E6-FCE6-4E84-9B66-202541F9601E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BEE9CB-F0AF-44B1-B454-1AE2F04D7299"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ccbe495caa5e604b04d5a31d7459a6f6a76a756c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=123579056530191&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=123579065130246&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=123597642832637&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0459.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0473.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34084",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34917",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34962",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35015",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35120",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35185",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0084",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:118",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0451.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503610/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33951",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022153",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487990",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49061",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8508",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9600",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ccbe495caa5e604b04d5a31d7459a6f6a76a756c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=123579056530191&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=123579065130246&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=123597642832637&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0473.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0451.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503610/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-06T11:30:02.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b) chmod, a related issue to CVE-2009-0342 and CVE-2009-0343."
      }, {
        "lang" : "es",
        "value" : "La función __secure_computing en kernel/seccomp.c  en el subsistema seccomp en el núcleo de Linux v2.6.28.7 y versiones anteriores en la plataforma x86_64, cuando CONFIG_SECCOMP está activo, no maneja adecuadamente (1) un proceso de 32-bit haciendo una llamada al sistema (syscall) de 64-bit o (2) un proceso de 64-bit haciendo  una llamada al sistema (syscall) de 32-bit, lo cual permite a usuarios locales evitar restricciones de acceso a través de llamadas al sistema (syscalls) manipuladsa que son malinterpretadas como (a) stat o (b) chmod, una cuestión distinta que CVE-2009-0342 y CVE-2009-0343."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "388414A1-C9B4-41BA-AD35-6501A463A095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FDBA01DD-C129-48F1-800B-838418F4A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "185F1EF8-04EB-43ED-B909-8BDF60F23E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "3483FAFA-353C-498F-AF68-8F5B84A0F30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6B11A9E1-9D90-46DC-81B5-17A137205AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "07EEC559-9240-46BE-9057-0F17D1F61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BBBC127F-D67E-43FE-BCFE-606C200084F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "42B18945-EE09-4E6B-8C11-E382E5F8F850"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2009/2/28/23",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=123579056530191&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=123579069630311&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=123597627132485&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-seccomp.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34084",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34917",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35185",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0451.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487255",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lkml.org/lkml/2009/2/28/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=123579056530191&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=123579069630311&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=123597627132485&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-seccomp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0451.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.\n\nIt was addressed in Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-0451.html .",
        "lastModified" : "2009-05-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-06T18:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv_88 through snv_102, does not properly free memory, which allows local users to cause a denial of service (panic) via unspecified vectors, related to the vmem_hash_delete function."
      }, {
        "lang" : "es",
        "value" : "El controlador crypto pseudo en Sun Solaris v10, y OpenSolaris snv_88 hasta snv_102, no libera memoria adecuadamente, lo cual permite a usuarios locales provocar una denegación de servicio (pánico) a través de vectores no especificados, relacionado con la función vmem_hash_delete."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5F33FE6-B2A7-4D20-8425-C545139103A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287C4B1B-FFA8-452E-98BF-8B2EB30F6B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F666F65E-BFA9-4F06-A84F-844D7E5DEBBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:x86:*:*:*:*:*:*",
            "matchCriteriaId" : "FB134C5D-D0FF-436C-8304-5CED1EC54A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B36C324-ADFA-4885-846E-059872C95B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB88D92E-A71C-4EA7-8A30-0109E62E9F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD8801EA-A577-4388-83F7-174F168B66E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF21371-BC95-4815-AE8D-34361B5FA3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C02D1A-F957-44AD-B7D0-ECF59695C6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86931B59-DAD2-474B-B030-3B1389278C49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34149",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1021810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139498-04-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254088-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-097.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0606",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139498-04-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254088-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-097.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-09T17:30:00.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the DtbClsLogin function in NovaStor NovaNET 12 allows remote attackers to (1) execute arbitrary code on Linux platforms via a long username field during backup domain authentication, related to libnnlindtb.so; or (2) cause a denial of service (daemon crash) on Windows platforms via a long username field during backup domain authentication, related to nnwindtb.dll.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de buffer basado en pila en la función DtbClsLogin en NovaStor NovaNet 12 permite a atacantes remotos (1) ejecutar código arbitrario en plataformas Linux a través de un campo de nombre de usuario demasaido largo durante la autenticación al dominio de backup, en relación a libnnlindtb.so, o (2) provocar una denegación de servicio (con caida del demonio) en plataformas Windows, a través de un campo de nombre de usuario demasiado largo durante la autenticación al dominio de backup, en relación con nnwindtb.dll. NOTA: algunos de estos detalles se obtienen a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novastor:novanet:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE53433F-AAC3-4C84-8560-200C7CC0A171"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52301",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/52302",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34024",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.insight-tech.org/index.php?p=NovaNET-12-Remote-Buffer-Oveflow",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33954",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49074",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://osvdb.org/52301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/52302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.insight-tech.org/index.php?p=NovaNET-12-Remote-Buffer-Oveflow",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ],
      "evaluatorComment" : "Per: http://secunia.com/advisories/34024\n\nSuccessful exploitation allows to crash the application on a Windows system and reportedly allows to execute arbitrary code on a Linux system."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-09T17:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file, as demonstrated by a filename inside a (1) rar or (2) zip archive file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en BitDefender Internet Security 2009 permite a atacantes remotos, con la ayuda de usuarios locales, inyectar HTML o scripts web arbitrarios a través del nombre de archivo (filename) de un archivo infectado de virus, como lo demuestra el nombre de un archivo dentro de un archivo (1) rar o (2 ) zip."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitdefender:internet_security:2009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D403FEDE-1CAF-431A-98C2-FA080A01781A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34082",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501277/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501299/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0557",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501277/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501299/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-09T17:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewforum.php and (2) viewtopic.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en CelerBB 0.0.2, cuando magic_quotes_gpc está desactivado, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id en (1)viewforum.php y (2)viewtopic.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stewart_howe:celerbb:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328B6F6E-2E79-470B-AED3-5999401B87FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/501481/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34014",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501481/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-09T17:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "showme.php in CelerBB 0.0.2 allows remote attackers to obtain \"reserved information\" via the user parameter."
      }, {
        "lang" : "es",
        "value" : "showme.php en CelerBB 0.0.2 permite a atacantes remotos obtener \"información reservada\" a través del parámetro usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stewart_howe:celerbb:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328B6F6E-2E79-470B-AED3-5999401B87FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/501481/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34014",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501481/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-09T17:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special characters in the Username parameter, as demonstrated by an admin'# parameter value."
      }, {
        "lang" : "es",
        "value" : "login.php en CelerBB v0.0.2, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos saltarse la autenticación y obtener acceso administrativo a través de caracteres especiales en el parámetro \"Username\" como se demostró con un valor admin'# en el parámetro."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stewart_howe:celerbb:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328B6F6E-2E79-470B-AED3-5999401B87FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/501481/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34014",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501481/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0027",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-09T21:30:00.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read arbitrary XML files via a crafted request."
      }, {
        "lang" : "es",
        "value" : "El manejador de solicitudes de JBossWS en JBoss Enterprise Application Platform (alias JBoss o JBEAP PEA) 4.2 antes de 4.2.0.CP06 y 4.3 antes de 4.3.0.CP04 no valida la ruta durante una petición de un archivo WSDL con un punto final del web-service propio, lo que permite a atacantes remotos leer archivos XML arbitrarios a través de una solicitud debidamente modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp01:*:*:*:*:*:*",
            "matchCriteriaId" : "599FBAC3-2E83-443B-AACB-99BBA896CB19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp02:*:*:*:*:*:*",
            "matchCriteriaId" : "43590B58-A1C7-4105-A00F-6C4F46A6CC5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp03:*:*:*:*:*:*",
            "matchCriteriaId" : "A44F907E-AE57-4213-B001-A23319B72CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp04:*:*:*:*:*:*",
            "matchCriteriaId" : "243ED156-851C-4897-AF59-86FCA5C9C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp05:*:*:*:*:*:*",
            "matchCriteriaId" : "125BF8B0-AF1B-4FB1-9D41-D9FB30AE23FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp06:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E7C299-8A2D-4733-98AC-F6FA37CC1C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp01:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3E4026-F98E-4AEB-9FE1-4FFBBF44AC55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp02:*:*:*:*:*:*",
            "matchCriteriaId" : "960A513A-CAFC-4B3D-ABD7-4659CF545C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp03:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D8DC6D-5E39-4A53-8BB8-F998706D573F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp04:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA2D64E-D7E7-400D-AC7E-CB2045750791"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0346.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0347.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0348.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0349.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34112",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34023",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021817",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479668",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://jira.jboss.org/jira/browse/JBPAPP-1548",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0346.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0347.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0348.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0349.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=479668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://jira.jboss.org/jira/browse/JBPAPP-1548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-09T21:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service (application crash) via a deep directory tree, related to the fts_level structure member, as demonstrated by (a) du, (b) rm, (c) chmod, and (d) chgrp on OpenBSD; and (e) SearchIndexer.exe on Vista Enterprise."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función fts_build en fts.c de libc sobre (1) OpenBSD v4.4 y anteriores y (2) Microsoft Interix v6.0 build 10.0.6030.0, permiten a atacantes, dependiendo del contexto, provocar una denegación de servicio (caída de la aplicación) a través de un arbol de directorio profundo, relativo al miembro de la estructura fts_level, como se ha demostrado por (a) du, (b) rm, (c) chmod, y (d) chgrp en OpenBSD; y (e)SearchIndexer.exe en Vista Enterprise."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:interix:6.0:*:10.0.6030.0:*:*:*:*:*",
            "matchCriteriaId" : "83ACC103-E369-4067-8387-8FDF89D90AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4",
            "matchCriteriaId" : "FAB41EFD-70AF-41E5-B17E-44DF68D5A6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DF0D51-FCFA-46A3-B834-E80DFA91DFDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CB726CF-ADA2-4CDA-9786-1E84AC53740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC373FC-88AC-4B6D-A289-51881ACD57F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBE290B-5EC6-4BBA-B645-294C150E417A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF053A1-C252-427E-9EEF-27240F422976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A9C344-45AA-47B9-B35A-1A62E220D9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB24F0-46A7-481B-83ED-8BB012AE0C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6AEAF0-FA61-4A3F-A083-1218C2027781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60DA30A1-3360-46BC-85B7-008D535F95BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA33E7E2-DE7B-411E-8991-718DA0988C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1957B3C0-7F25-469B-BC3F-7B09260837ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC46909F-DDFC-448B-BCDF-1EB343F96630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9496279F-AB43-4B53-81A6-87C651ABC4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA160D4-5CAB-44E7-880A-59DD98FEAD62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D84D7A-EB7C-4196-B8B6-7B703C8055C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEAE2873-0028-4744-B64E-8E2EA30447F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783973F9-2A6E-4DDF-A64C-7794FFD0B7B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5BB6C5D-4C43-4BB8-B1CE-A70BBE650CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC77812C-D84E-493E-9D21-1BA6C2129E70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C117F3-3684-4683-9F9E-CEDD5B88F9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF8DD37-A337-4E9D-A34E-C2D561A24285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F12313A0-1EAF-4652-9AB1-799171CFFEA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/achievement_securityalert/60",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fts.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fts.c.diff?r1=1.41%3Br2=1.42%3Bf=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501505/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34008",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fts.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fts.c.diff?r1=1.41%3Br2=1.42%3Bf=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501505/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0781",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-09T21:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\""
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en jsp/cal/cal2.jsp en la aplicación 'calendar' de los ejemplos de aplicaciones Web de Apache Tomcat 4.1.0 a  4.1.39, 5.5.0 a 5.5.27 y 6.0.0 a 6.0.18 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro 'time', en relación a un \"HTML no válido.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E300013-0CE7-4313-A553-74A6A247B3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D7414-8D0C-45D6-8E87-679DF0201D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB15C5DB-0DBE-4DAD-ACBD-FAE23F768D01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60CFD9CA-1878-4C74-A9BD-5D581736E6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E52BE7-5281-4430-8846-E41CF34FC214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02860646-1D72-4D9A-AE2A-5868C8EDB3AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BE4B9B5-9C2E-47E1-9483-88A17264594F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BE92A9B-4B8C-468E-9162-A56ED5313E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE21D455-5B38-4B07-8E25-4EE782501EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9AE125C-EB8E-4D33-BB64-1E2AEE18BF81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47588ABB-FCE6-478D-BEAD-FC9A0C7D66DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.9:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA8066-294D-431E-B026-C03707DFBCD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C92F3744-C8F9-4E29-BF1A-25E03A32F2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084B3227-FE22-43E3-AE06-7BB257018690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DDA1D1-1DB2-4FD6-90A6-7DDE2FDD73F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BFF1D5-2E34-4A01-83A7-6AA3A112A1B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D536FF4-7582-4351-ABE3-876E20F8E7FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C03E4C9-34E3-42F7-8B73-D3C595FD7EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB43F47F-5BF9-43A0-BF0E-451B4A8F7137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFFE700-AAFE-4F5B-B0E2-C3DA76DE492D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DDD82E-5D83-4581-B2F3-F12655BBF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0F0C91-171E-421D-BE86-11567DEFC7BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22D2621-D305-43CE-B00D-9A7563B061F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5D55E8-D3A3-4784-8AC6-CCB07E470AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F4245BA-B05C-49DE-B2E0-1E588209ED3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8633532B-9785-4259-8840-B08529E20DCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D9BD7E-FCC2-404B-A057-1A10997DAFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F935ED72-58F4-49C1-BD9F-5473E0B9D8CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADB75DC-8713-4F0C-9F06-30DA6F6EF6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EA52901-2D16-4F7E-BF5E-780B42A55D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A79DA2C-35F3-47DE-909B-8D8D1AE111C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF6952D-6308-4029-8B63-0BD9C648C60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94941F86-0BBF-4F30-8F13-FB895A11ED69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17522878-4266-432A-859D-C02096C8AC0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951FFCD7-EAC2-41E6-A53B-F90C540327E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1F2738-C7D6-4206-9227-43F464887FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98EEB6F2-A721-45CF-A856-0E01B043C317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02FDE602-A56A-477E-B704-41AF92EEBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A28B11A-3BC7-41BC-8970-EE075B029F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD3E84C-9A2E-4586-A09E-CBDEB1E7F695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB203AEC-2A94-48CA-A0E0-B5A8EBF028B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E98B82A-22E5-4E6C-90AE-56F5780EA147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34672E90-C220-436B-9143-480941227933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92883AFA-A02F-41A5-9977-ABEAC8AD2970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989A78F8-EE92-465F-8A8D-ECF0B58AFE7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5B6627-B4A4-4E2D-B96C-CA37CCC8C804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFB09F3-32D1-479C-8C39-D7329D9A6623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56581E2-9ECD-426A-96D8-A9D958900AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717F6995-5AF0-484C-90C0-A82F25FD2E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0C01D5-773F-469C-9E69-170C2844AAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB03FDFB-4DBF-4B70-BFA3-570D1DE67695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5CF79C-759B-4FF9-90EE-847264059E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "357651FD-392E-4775-BF20-37A23B3ABAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585B9476-6B86-4809-9B9E-26112114CB59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6145036D-4FCE-4EBE-A137-BDFA69BA54F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E437055A-0A81-413F-AB08-0E9D0DC9EA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9276A093-9C98-4617-9941-2276995F5848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C9C36C-EF7E-4D42-9749-E2FF6CE35A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98575E2-E39A-4A8F-B5B5-BD280B8367BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDA08E7-A417-44E8-9C89-EB22BEEC3B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD1B6BE-CF07-4DA8-A703-4A48506C8AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5878E08E-2741-4798-94E9-BA8E07386B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F6BAB7-C099-4345-A632-7287AEA555B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3AAF031-D16B-4D51-9581-2D1376A5157B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51120689-F5C0-4DF1-91AA-314C40A46C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F67477AB-85F6-421C-9C0B-C8EFB1B200CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D0C265-2ED9-42CF-A7D6-C7FAE4246A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11D6FB7-CBDB-48C1-98CB-1B3CAA36C5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E3C039-A949-4F1B-892A-57147EECB249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F28C7801-41B9-4552-BA1E-577967BCBBEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25B21085-7259-4685-9D1F-FF98E6489E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "635EE321-2A1F-4FF8-95BE-0C26591969D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A81B035-8598-4D2C-B45F-C6C9D4B10C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1096947-82A6-4EA8-A4F2-00D91E3F7DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C95ADA4-66F5-45C4-A677-ACE22367A75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11951A10-39A2-4FF5-8C43-DF94730FB794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "351E5BCF-A56B-4D91-BA3C-21A4B77D529A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC2BBB4-171E-4EFF-A575-A5B7FF031755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6B0504-27C1-4824-A928-A878CBBAB32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D903956B-14F5-4177-AF12-0A5F1846D3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F847DC-A2F5-456C-9038-16A0E85F4C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127420533226623&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129070310906557&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=133469267822771&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=136485229118404&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35788",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/42368",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-6.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2011/dsa-2207",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:136",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:138",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501538/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1856",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49213",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11041",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19345",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6564",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127420533226623&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129070310906557&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=133469267822771&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=136485229118404&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/42368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2011/dsa-2207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501538/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0781\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/",
        "lastModified" : "2009-03-17T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0825",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-09T21:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en system/rss.php de TinX/cms v3.x anteriores a v3.5.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torben_sorensen:tinx\\/cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "E5EF5962-F1F0-4BB9-864F-7BA6C3C53215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torben_sorensen:tinx\\/cms:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D37AA22D-AFF3-4F71-89C3-327B51934C11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://en.securitylab.ru/lab/PT-2009-13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/showfiles.php?group_id=133415",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=133415&release_id=658540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501547/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34021",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://en.securitylab.ru/lab/PT-2009-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/showfiles.php?group_id=133415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=133415&release_id=658540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501547/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-09T21:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en la consola administratica en IBM WebSphere Application Server (WAS) v6.1 anteriores v6.1.0.23 en z/OS, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95255265-6D69-46D3-9FFA-8EDB1734375C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4191D3-64AB-482C-9DEF-DD04C4C942CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD75308-7F21-4DDF-AD66-C155CF4B721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C250D-8279-4071-871C-1C7C4DE09B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC300B03-7A8F-4E96-B55D-18CC258BBFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C8054A-8581-4936-AF94-291AE56EB4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026EBFCD-0BC1-404B-BC14-292F35BE667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D74F8-4321-48B3-A33E-FCCFA93013CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2043B836-3950-46A1-89E4-08985DEA0D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/170073/IBM-Websphere-Application-Server-7.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34131",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK77505",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK81212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK82988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0607",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/170073/IBM-Websphere-Application-Server-7.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK77505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK81212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK82988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-09T21:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in sample applications in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, and 6.1 before 6.1.0.23 on z/OS, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Varias vulnerabilidades de tipo Cross-Site Scripting (XSS) en aplicaciones de muestra en IBM WebSphere Application Server (WAS) versión 6.0.2 anteriores a 6.0.2.35, y versión 6.1 anterior a 6.1.0.23 en z/OS, permiten a atacantes remotos inyectar script web o HTML arbitrario por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4191D3-64AB-482C-9DEF-DD04C4C942CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD75308-7F21-4DDF-AD66-C155CF4B721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C250D-8279-4071-871C-1C7C4DE09B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC300B03-7A8F-4E96-B55D-18CC258BBFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C8054A-8581-4936-AF94-291AE56EB4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026EBFCD-0BC1-404B-BC14-292F35BE667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D74F8-4321-48B3-A33E-FCCFA93013CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2043B836-3950-46A1-89E4-08985DEA0D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:z\\/os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A9DB7F-187D-42BA-B271-1C302E529BFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1021811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK76720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK81212",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0607",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1464",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK76720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK81212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-09T21:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in /prm/reports in the Performance Reporting Module (PRM) for Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.  NOTE: this can be leveraged for access to the SunMC Web Console."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en /prm/reports en Performance Reporting Module (PRM) para Sun Management Center (SunMC) v3.6.1 y v4.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"msg\". NOTA: esto puede ser aprovechados para el acceso a la Consola Web SunMC."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:management_center:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "493A8BEB-D27D-4E30-B174-1EBAE8CFB4FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DBDFD8C-371E-42D2-9635-D8CDD1775984"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:management_center:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "865D6035-AA7E-40C1-8ABD-873D20E19F22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34146",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125191-04-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-247046-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33999",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0605",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125191-04-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-247046-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-09T21:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The response_addname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets in the required manner, which allows remote attackers, with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary records via crafted zone data for this subdomain."
      }, {
        "lang" : "es",
        "value" : "La función response_addname en response.c de Daniel J. Bernstein djbdns v1.05 y anteriores no limitan de forma adecuada los desplazamientos en memoria, lo que permite que atacantes remotos, con control sobre subdominios de terceros  servidos por tinydns y axfrdns, provocar respuestas DNS que contengar registros de su elección a través de los datos de la zona manipulados para este subdominio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:d.j.bernstein:djbdns:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.05",
            "matchCriteriaId" : "BFF942A4-4F98-4622-9BBD-8CCFF18293F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://it.slashdot.org/article.pl?sid=09/03/05/2014249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=djbdns&m=123554945710038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=djbdns&m=123613000920446&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityandthe.net/2009/03/05/security-issue-in-djbdns-confirmed/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501294/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501340/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501479/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33937",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://it.slashdot.org/article.pl?sid=09/03/05/2014249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=djbdns&m=123554945710038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=djbdns&m=123613000920446&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityandthe.net/2009/03/05/security-issue-in-djbdns-confirmed/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501294/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501340/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501479/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-09T21:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated by running the ipcs program."
      }, {
        "lang" : "es",
        "value" : "La función shm_get_stat en ipc/shm.c del subsistema shm en el Kernell de Linux anteriores a v2.6.28.5, cuando CONFIG_SHMEM está desactivado, interpreta de forma errónea el tipo de datos en un inode, lo que permite a usuarios locales provocar una denegación de servicios (cuelgue del sistema) a través de una llamada shmctl SHM_INFO, como se ha demostrado ejecutando el programa ipcs.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.28.4",
            "matchCriteriaId" : "8326D9A2-64BB-4386-997C-17DC46C7242D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a68e61e8ff2d46327a37b69056998b47745db6fa",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=git-commits-head&m=123387479500599&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=120428209704324&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=123309645625549&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/03/06/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://patchwork.kernel.org/patch/6554/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a68e61e8ff2d46327a37b69056998b47745db6fa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=git-commits-head&m=123387479500599&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=120428209704324&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=123309645625549&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/03/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://patchwork.kernel.org/patch/6554/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5, or Red Hat Enterprise MRG.",
        "lastModified" : "2009-03-10T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-10T14:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the web user interface in the login application in NetMRI 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to error pages."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la interfaz de usuario web en la aplicación de registro de usuario en NetMRI v3.0.1 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores sin especificar, relacionado con las paginas de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netcordia:netmri:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "E7EA052B-9EBE-48FC-A860-768E2F17B0F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://connection.netcordia.com/forums/t/731.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33963",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501033/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://connection.netcordia.com/forums/t/731.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501033/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-10T14:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpDenora before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via an IRC channel name.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en phpDenora anteriores a v1.2.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un nombre de IRC channel. NOTA: Algunos de estos detalles fueron obtenidos de una tercera parte."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denorastats:phpdenora:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.2",
            "matchCriteriaId" : "0D597788-656C-4A30-ADF5-A5D7244AB9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denorastats:phpdenora:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E063085-D10D-4E6F-8FB5-B450C8CE2064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denorastats:phpdenora:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690816F6-D776-44FA-BBFA-DC5896444FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denorastats:phpdenora:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30020BD3-6567-45B4-BF86-CB3506337426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denorastats:phpdenora:1.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "758F1024-ACCD-4D93-92C7-B112B81AF1B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denorastats:phpdenora:1.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "51CD547C-0345-4254-8804-880DDABF3829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denorastats:phpdenora:1.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "18D94632-C20F-47D1-8605-4586E7A45C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denorastats:phpdenora:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC71B0D-FFDC-4C46-B665-1136BB16AFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denorastats:phpdenora:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9846BC70-9254-4BFA-BF99-F120EE99B20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denorastats:phpdenora:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9556D33B-90A7-44B4-91D1-95358B4A2A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denorastats:phpdenora:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89D60BF-2E21-46D0-AE64-FDF62E4AAE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denorastats:phpdenora:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "177EA99B-9CE0-4920-AA4B-5F14BA48A25F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/51981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33960",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=661189",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33822",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/51981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=661189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-10T14:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the hook_cntrlr_error_output function in modules/page/hooks/listeners.php in the admincp component in TangoCMS 2.2.x (aka Eagle) before 2.2.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función hook_cntrlr_error_output en modules/page/hooks/listeners.php en el componente admincp en TangoCMS v2.2.x (también conocido como Eagle) anteriores a v2.2.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores inespecíficos. NOTA: Algunos de los detalles fueron obtenidos de una tercera parte."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.3",
            "matchCriteriaId" : "77156518-31EE-49CD-B5B6-C78B72B65706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA8000C3-6E19-4CEE-88E1-35F67C807316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66D1177D-BD00-4FB4-A43F-385D83942EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:1.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD79A8BA-2341-4BCF-AF3B-F100CD137E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A0FF1D-220C-4346-8DD6-A32A4EA00F54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A5005C-03A3-42E9-A00C-6A0620832C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6B95017-5076-419F-ABB4-33387034F6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3B5DB5-65F2-46A3-B5CD-087FB214539C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E1AECF-7617-412E-A4C2-DFEBB444F0E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C0A809-5394-44C4-B58F-61E591A8C542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C815DF4-341A-426E-A0B4-AC83DC7B446B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C92559DE-504C-43CD-AC15-E7D94DB553B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15FA7FEA-2B72-403B-A7AD-3C741318F5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB76995-46E6-4584-8EAB-93432284AABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E5015A-260B-49B6-84CA-E7BE3AFFA7C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9149CAE5-B948-4B6C-B5A3-19BB28FDE512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBE12B8-C83A-44A6-A732-93C549DB6BBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33967",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tangocms.org/article/view/2.2.4-released",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tangocms.org/changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tangocms.org/article/view/2.2.4-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tangocms.org/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-10T14:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/delete_page.php in S-Cms 1.1 Stable allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/delete_page.php en S-Cms Stable v1.1 permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteoiammarrone:s-cms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5920CA-48BC-488A-A450-17F3E95C6047"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33799",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-10T14:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "S-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative access via an OK value for the login cookie."
      }, {
        "lang" : "es",
        "value" : "S-Cms 1.1 Stable permite a atacantes remotos evitar la autenticación y obtener acceso con privilegios de administrador a través de un valor \"OK\" para la cookie \"login\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteoiammarrone:s-cms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5920CA-48BC-488A-A450-17F3E95C6047"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/33799",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-10T14:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX (aka LiveX_v8200) ActiveX control 8.1.2 and 8.2.0 in LIVEX_~1.OCX allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument, possibly involving the PlayX and SnapShotX methods."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el método SnapShotToFile en el control ActiveX GeoVision LiveX (tambien conocido como LiveX_v8200) v8.1.2 y 8.2.0 en LIVEX_~1.OCX lo que permite a atacantes remotos crear o sobrescribir ficheros arbitrariamente a través de ..(punto punto) en el argumento, posiblemente implicando los métodos PlayX y SnapShotX."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:C/A:C",
            "baseScore" : 8.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geovision:livex_activex_control:8.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17492C3F-F438-4710-9B18-21EAECDF1CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geovision:livex_activex_control:8.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53126873-1C44-4EBE-AF23-C3E607AE5597"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33969",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33782",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-10T14:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for extra/genbackup.php."
      }, {
        "lang" : "es",
        "value" : "pHNews Alpha 1 almacena información sensible en la raíz del directorio web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar una base de datos a través de una petición directa para extra/genbackup.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phnews:phnews:1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1F5E3-FE82-4200-B286-6C2ED3132CE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-10T14:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain (1) hardware and (2) software information via unspecified requests in a client connection."
      }, {
        "lang" : "es",
        "value" : "El servicio HRM-S en Fujitsu Enhanced Support Facility v3.0 y v3.0.1 pemitiria a atacantes remotos conseguir información de (1)hardware y (2)software a través de peticiones sin especificar e una conexión de cliente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:enhanced_support_facility:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A096F8A-35E7-4CA2-9433-F79375DE7012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:enhanced_support_facility:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEADCE1B-B73F-491D-89BC-E8C2AAD33FDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33974",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fujitsu.com/global/support/software/security/products-f/esf-200901e.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fujitsu.com/global/support/software/security/products-f/esf-200901e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.fujitsu.com/global/support/software/security/products-f/esf-200901e.html\r\n\r\nFor the Patches, please contact a Fujitsu system engineer or your partner(s)."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-10T14:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección CRLF en la plantilla de WebLink en Jasmine2000 Enterprise Edition permite a atacantes remotos inyectar cabeceras HTTP de manera arbitraria y dirigir ataques de división de respuesta HTTP a través de vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:jasmine2000:*:enterprise:*:*:*:*:*:*",
            "matchCriteriaId" : "A2953A39-EB85-4C68-A9D4-A1B70F95F5AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AE6D9D-B3DC-4DA8-916A-51BB56C32074"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33971",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fujitsu.com/global/support/software/security/products-f/jasmine-200901e.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fujitsu.com/global/support/software/security/products-f/jasmine-200901e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0081",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-03-10T20:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate input received from user mode, which allows remote attackers to execute arbitrary code via a crafted (1) Windows Metafile (aka WMF) or (2) Enhanced Metafile (aka EMF) image file, aka \"Windows Kernel Input Validation Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "La implementación de la interfaz gráfica de dispositivos (GDI) en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008 no valida adecuadamente las entradas recibidas desde el modo de usuario, lo que permite a atacantes remotos ejecutar código arbitrariamente a través de (1) un fichero Windows Metafile (también conocido como WMF) o (2)un fichero Enhanced Metafile (también conocido como EMF) ficheros de imagen manipulados, también conocida como \"Vulnerabilidad del Kernel de Windows en la Validación de Entradas\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52522",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34117",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid=",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34012",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021826",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-069A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0659",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6202",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/52522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-069A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0082",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-03-10T20:30:01.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate handles, which allows local users to gain privileges via a crafted application that triggers unspecified \"actions,\" aka \"Windows Kernel Handle Validation Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El kernel en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008 no maneja adecuadamente la validación, lo que permite a usuarios locales ganar privilegios a través de una aplicación manipulada que inicia acciones inespecíficas, también conocida como \"Vulnerabilidad del Kernel de Windows en el manejo de validaciones\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52523",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34117",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid=",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34027",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021827",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-069A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0659",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6036",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/52523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-069A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0083",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-03-10T20:30:06.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers, which allows local users to gain privileges via an application that triggers use of a crafted pointer, aka \"Windows Kernel Invalid Pointer Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El kernel en Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 no gestiona adecuadamente los punteros inválidos, lo que permite a usuarios locales ganar privilegios a través de una aplicación que inicia el uso de un puntero manipulado, también conocida como \"Vulnerabilidad del Kernel de Windows de puntero invalido\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52524",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34117",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid=",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34025",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021827",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-069A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0659",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5440",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/52524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-069A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0085",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-03-10T20:30:06.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, when certificate authentication is used, does not properly validate the client's key exchange data in Transport Layer Security (TLS) handshake messages, which allows remote attackers to spoof authentication by crafting a TLS packet based on knowledge of the certificate but not the private key, aka \"SChannel Spoofing Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El componente de autenticación Secure Channel (también conocido como SChannel) en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008, cuando el certificado de autenticación es utilizado, no valida adecuadamente el intercambio de claves con el cliente en la capa de seguridad del transporte (TLS), lo que permite a atacantes remotos falsificar la autenticación mediante la manipulación de un paquete TLS basándose en el cocimiento del certificado pero no de la clave privada, también conocido como \"Vulnerabilidad de falsificación de SChannel\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:C/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52521",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34215",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021828",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-069A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0660",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-007",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6011",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/52521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-069A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0191",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-03-10T20:30:06.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized memory location."
      }, {
        "lang" : "es",
        "value" : "Foxit Reader v2.3 anterior a Build 3902 y v3.0 anterior a Build 1506, ademas de  v3.0.2009.1301, no maneja adecuadamente un segmento del símbolo JBIG2 del diccionario sin nuevos símbolos, lo que permite atacantes remotos ejecutar código arbitrariamente a través de un fichero PDF manipulado que inicia una desreferencia y una localización de memoria no inicializada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C133A953-B2F9-4168-8E00-91254ADC5C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30CB7169-357B-42FB-B680-044883A8D9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:3.0.2009.1301:*:*:*:*:*:*:*",
            "matchCriteriaId" : "913B8A86-09E0-4213-9111-6645064879C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34036",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-11/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.foxitsoftware.com/pdf/reader/security.htm#Processing",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501590/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34035",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021822",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0634",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49135",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/34036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.foxitsoftware.com/pdf/reader/security.htm#Processing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501590/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-10T20:30:06.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execute arbitrary programs and have unspecified other impact via a crafted file, as demonstrated by the \"Open/Execute a file\" action."
      }, {
        "lang" : "es",
        "value" : "Foxit Reader v2.3 anterior a Build 3902 y v3.0 anterior a Build 1506, incluidas la 1120 y 1301, no requiere la confirmación del usuario antes de realizar acciones peligrosas en un fichero PDF, lo que permite a atacantes remotos ejecutar programas de manera arbitraria y pudiendo producir un impacto sin especificar a través de un fichero manipulado, como se ha demostrado en la acción \"Abrir/Ejecutar fichero\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:reader:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3361D697-E620-4FA2-B5BF-17A2D7466F23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:reader:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20750FF-1750-4DF5-9054-D5A6F0BA3389"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.zoller.lu/2009/03/remote-code-execution-in-pdf-still.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2010-April/006079.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34036",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/foxit-reader-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.foxitsoftware.com/pdf/reader/security.htm#bypass",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501623/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34035",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0634",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blog.zoller.lu/2009/03/remote-code-execution-in-pdf-still.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2010-April/006079.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/foxit-reader-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.foxitsoftware.com/pdf/reader/security.htm#bypass",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501623/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-10T20:30:06.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) absolute path in the filename argument in an action, as demonstrated by the \"Open/Execute a file\" action."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Foxit Reader v3.0 anteriores a Build 1506, incluidas la 1120 y la 1301, permite a atacantes remotos ejecutar código arbitrario a través de (1)una ruta relativa larga o (2)una ruta absoluta larga en el argumento \"filename\" en una acción, como se demostró mediante la acción \"Abrir/Ejecutar un fichero\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxit:reader3.0:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E780D1-D8BF-4141-9E33-EE4268BA8980"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34036",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/foxit-reader-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.foxitsoftware.com/pdf/reader/security.htm#Stackbased",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501623/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0634",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/foxit-reader-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.foxitsoftware.com/pdf/reader/security.htm#Stackbased",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501623/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-10T20:30:06.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the client in IBM Tivoli Storage Manager (TSM) HSM 5.3.2.0 through 5.3.5.0, 5.4.0.0 through 5.4.2.5, and 5.5.0.0 through 5.5.1.4 on Windows allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el cliente en IBM Tivoli Storage Manager (TSM) HSM desde v5.3.2.0 hasta v5.3.5.0, desde v5.4.0.0 hasta v5.4.2.5, v5.5.0.0 hasta v5.5.1.4 en Windows permite a atacantes remotos producir una denegación de servicio (caída de la aplicación) o posiblemente ejecución arbitraria de código a través de vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_hsm:5.3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9500486-A77D-4BD1-850F-2DE5A5EC52A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_hsm:5.3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E935FE1F-94C3-4242-90CC-8FA05B6C1D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_hsm:5.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88884541-59D2-4EE9-B8E7-43699A419E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_hsm:5.4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0392ECA4-E99D-4BB4-9F38-CA3806D2FC0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_hsm:5.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "968DE378-360C-49C3-8ABD-CB29DA470E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_hsm:5.5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1391EC-5753-4790-B4D3-AC00B5527D6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34189",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21329223",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IC59481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34034",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0638",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21329223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IC59481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-10T20:30:06.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv_111, allow local users to cause a denial of service (infinite loop and system hang) by accessing an hsfs filesystem that is shared through NFSv4, related to the rfs4_op_readdir function."
      }, {
        "lang" : "es",
        "value" : "El modulo del servidor NFSv4 en el kernel en Sun Solaris v10, y OpenSolaris anterior a snv_111, permite a usuarios locales producir una denegación de servicio (bucle infinito y colgado de sistema) mediante el acceso a un fichero de sistema hsfs que esta compartido en NFSv4, relacionado con la función rfs4_op_readdir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34193",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1021819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-252469-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-090.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34031",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0635",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-252469-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-090.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0093",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-03-11T14:19:15.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restrict registration of the \"wpad\" hostname, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) feature, and conduct man-in-the-middle attacks by spoofing a proxy server, via a Dynamic Update request for this hostname, aka \"DNS Server Vulnerability in WPAD Registration Vulnerability,\" a related issue to CVE-2007-1692."
      }, {
        "lang" : "es",
        "value" : "Servidor DNS en Microsoft Windows 2000 SP4, Server 2003 SP1 y SP2, y Server 2008, cuando las actualizaciones dinámicas están activadas, no limita el registro del nombre de host \"wpad\", lo que permite a usuarios autenticados remotamente secuestrar la funcionalidad Proxy Auto-Discovery (WPAD), y llevar a cabo ataques del tipo \"man in the middle (hombre en el medio)\" mediante la suplantación del servidor proxy a través de una petición de \"Actualización dinámica\" para ese nombre de hots. También conocida como \"Vulnerabilidad DNS Server Vulnerability in WPAD Registration\". Relacionada con el CVE-2007-1692."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.ncircle.com/blogs/vert/archives/2009/03/successful_exploit_renders_mic.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/52519",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34217",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33989",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021830",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-069A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0661",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6138",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://blog.ncircle.com/blogs/vert/archives/2009/03/successful_exploit_renders_mic.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-069A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0094",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-03-11T14:19:15.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the (1) \"wpad\" and (2) \"isatap\" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) features, and conduct man-in-the-middle attacks by spoofing a proxy server or ISATAP route, by registering one of these names in the WINS database, aka \"WPAD WINS Server Registration Vulnerability,\" a related issue to CVE-2007-1692."
      }, {
        "lang" : "es",
        "value" : "El servidor WINS en Microsoft Windows 2000 SP4  y Server 2003 SP1 y SP2 no limita el registro de los nombres NetBIOS (1) \"wpad\" y (2) \"isatap\", lo que permite a usuarios autenticados remotamente secuestrar las características Web Proxy Auto-Discovery (WPAD) y Intra-Site Automatic Tunnel Addressing Protocol (ISATAP), y llevar a cabo ataques del tipo \"Man in The Middle (hombre en el medio)\" mediante la suplantación de un servidor proxy o ruta ISATAP registrando uno de esos nombres en la base de datos del WINS. También conocida como \"Vulnerabilidad WPAD WINS Server Registration\", cuestión relacionada con el CVE-2007-1692."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/52520",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34217",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021829",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-069A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0661",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6117",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-069A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Per: http://www.microsoft.com/technet/security/Bulletin/MS09-008.mspx\r\n\r\nMitigating Factors for WPAD WINS Server Registration Vulnerability - CVE-2009-0094\r\n\r\nMitigation refers to a setting, common configuration, or general best-practice, existing in a default state, that could reduce the severity of exploitation of a vulnerability. The following mitigating factors may be helpful in your situation.\t\r\n\r\nIf WINS server already has WPAD and ISATAP registered than an attacker will not be able to register these as well.\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0233",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-03-11T14:19:15.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not reuse cached DNS responses in all applicable situations, which makes it easier for remote attackers to predict transaction IDs and poison caches by simultaneously sending crafted DNS queries and responses, aka \"DNS Server Query Validation Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El DNS Resolver Cache Service (también conocido como DNSCache) en Windows DNS Server en Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, y Server 2008, cuando las actualizaciones dinámicas están activadas, no rechaza las respuestas en caché en todas las situaciones aplicables, lo que facilita a atacantes remotos predecir los IDs de las transacción y envenenar la caché mediante el envío simultáneo peticiones y respuestas DNS envenenadas , también conocida como \"vulnerabilidad DNS Server Query Validation \"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/52517",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34217",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/33982",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021831",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-069A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0661",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6228",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-069A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0234",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-03-11T14:19:15.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 does not properly cache crafted DNS responses, which makes it easier for remote attackers to predict transaction IDs and poison caches by sending many crafted DNS queries that trigger \"unnecessary lookups,\" aka \"DNS Server Response Validation Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El DNS Resolver Cache Service (también conocido como DNSCache) en Windows DNS Server en Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, y Server 2008, no cachea adecuadamente las respuestas DNS manipuladas, lo que facilita a atacantes remotos el predecir los IDs de las transacción y envenenar la caché mediante el envío de varias peticiones DNS manipuladas lo que provoca \"lookups innecesarios\", también conocida como \"vulnerabilidad DNS Server Response Validation \"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/52518",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34217",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/319331",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33988",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021831",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-069A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0661",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5715",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/319331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-069A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-11T14:19:15.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0 before 1.0.10 and 1.1 before 1.1.2 allow remote attackers to inject arbitrary web script or HTML via a (1) profile and (2) blog, a different vulnerability than CVE-2009-0487."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Mahara v1.0 anterior a v1.0.10 y v1.1 anterior a v1.1.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) profile y (2) blog. Vulnerabilidad distinta de CVE-2009-0487."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B49D797-AF1B-4F7E-A71D-AABD0F802912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18048333-3E64-4AB4-9F20-2B1B8E7AB9FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68167317-977B-48EE-9320-2A4539A93B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB25DF09-D88F-4633-9956-D64E3497153F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32430EE-5F2B-4936-A297-2DF55CC22937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC0259C-E628-4BBA-9D97-41A130B1E741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "974F2D63-488C-41D7-A627-BF9B085A8D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26420D4-20D8-4D6D-88B5-C74F39B88720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321475F4-1548-4FD1-BED9-12D944388FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F37005DE-BB31-4738-AC49-C3C2022AE8F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831676A2-1A33-4605-A5F4-97FAC8A1BB18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "84652E40-1C88-438D-BCA1-4FF4C069F9AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "08F53776-5F58-4C20-8FE7-9DF06F1704A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D55D2C-E6E5-44A4-831A-3EAE5C1568CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "79228F92-00A8-4B74-A914-11BDF9641F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "9EEB3BF7-C4D3-4BB8-893F-B0FE252F0405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE91ED4-EA2A-4402-813C-1A2E5B10EA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "F7FB1F02-A03F-45E5-8D26-C007C10EE97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A09C63AC-15A8-4722-B18E-98A86EC8A856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "62452677-EE4C-4E5E-9DD2-D11C4211DA54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDC6F32-24C0-4B5E-8338-FF85B0BBF801"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mahara.org/interaction/forum/topic.php?id=350",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34222",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.mahara.org/Release_Notes/1.1.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34064",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mahara.org/interaction/forum/topic.php?id=350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.mahara.org/Release_Notes/1.1.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-11T14:19:15.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in WMI Mapper for HP Systems Insight Manager before 2.5.2.0 allows local users to gain privileges via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en WMI Mapper para HP Systems Insight Manager anteriores a v2.5.2.0, permite a usuarios locales elevar sus privilegios a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:wmi_mapper:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E84338C-4517-4877-BF5A-C0A4D8491948"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:hp:insight_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "C06F84F7-2636-445F-B907-B4807A955A35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01655638",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=123688841217193&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01655638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=123688841217193&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-11T14:19:15.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in WMI Mapper for HP Systems Insight Manager before 2.5.2.0 allows remote attackers to obtain sensitive information via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en WMI Mapper para HP Systems Insight Manager anteriores a v2.5.2.0, permite a atacantes remotos obtener información sensible a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:systems_insight_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "8C203258-F1A8-48C0-A374-42671E49E896"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01655638",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=123688841217193&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01655638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=123688841217193&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-11T14:19:15.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in GTK2 in OpenSUSE 11.0 and 11.1 allows local users to execute arbitrary code via a Trojan horse GTK module in an unspecified \"relative search path.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en GTK2 en OpenSUSE v11.0 y v11.1, permite a usuarios locales ejecutar código de su elección a través de un módulo GTK troyanizado en \"una ruta de búsqueda relativa\" sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0854",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2009-03-11T14:19:15.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in dash 0.5.4, when used as a login shell, allows local users to execute arbitrary code via a Trojan horse .profile file in the current working directory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de  ruta de búsqueda no confiable en dash v0.5.4, cuando es usada como un interprete de comandos para hacer login, permite a usuarios locales ejecutar código de su elección a través de un archivo troyanizado .profile en el directorio actual de trabajo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dash:dash:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20B8CE9-D007-417F-8D4F-ADAB8E725FA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34205",
        "source" : "security@ubuntu.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34092",
        "source" : "security@ubuntu.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-732-1",
        "source" : "security@ubuntu.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49216",
        "source" : "security@ubuntu.com"
      }, {
        "url" : "http://secunia.com/advisories/34205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-732-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-11T14:19:15.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service (crash) via a SIP INVITE request without any headers, which triggers a NULL pointer dereference in the (1) sip_uri_headers_cmp and (2) sip_uri_params_cmp functions."
      }, {
        "lang" : "es",
        "value" : "El controlador de canal SIP en Asterisk Open Source v1.4.22, v1.4.23, y v1.4.23.1; v1.6.0 anterior a v1.6.0.6; v1.6.1 anterior a v1.6.1.0-rc2; y Asterisk Business Edition C.2.3, con la opción \"pedantic\" activada, permite a usuarios autenticados remotamente provocar una denegación de servicio (caída) a travñes de una petición SIP INVITE sin cabecera, lo que dispara una deferencia a puntero NULL en las funciones (1) sip_uri_headers_cmp y(2) sip_uri_params_cmp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4333904-9D21-4149-965F-F49F0A34BD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B10AE4B-EC2D-4D5B-B842-50F5097A0650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.4.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "080C7089-5662-4A94-9842-C4A26095DA4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8374B5D-DE7A-4C3C-A5FE-579B17006A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C7494CE2-D3CC-404D-BE61-09A2E1FB3E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "06E48482-D9AF-4038-80DA-27D9B4907C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "9BC3C441-290F-471A-BA19-6B1C4D72A670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "632ED295-B67D-43CF-BF38-CCE04088BA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "50F3835F-6F2B-4EA7-B111-3B3C26548BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "0DCF7BD2-7903-4DC5-ADDC-EFCDC58736C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "E5BECFE0-286F-4DA1-8CA9-6CEE861C3012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0:beta7.1:*:*:*:*:*:*",
            "matchCriteriaId" : "AFFF3245-2D0F-46E3-A1D6-319086489DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "C91F2524-99D1-4C4B-9A31-21C0FB8B4D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0:beta9:*:*:*:*:*:*",
            "matchCriteriaId" : "7B1BC0FF-9DB6-4FCC-A845-053943CF0D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "419D4D16-E790-4872-B9AF-1320978768C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "73D30BA6-1EE0-4C3F-8F69-65C698A1B9A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "D39FA25D-AB56-470D-94AB-14446DB7D475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4225252F-5960-4A42-A575-00C125860E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A65D76A8-BBDD-4BDE-B789-D745C400DCBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B0F5A5-4252-4A9C-B830-2419E87AE5A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F9085056-3BE9-4309-9601-9CA0569BC215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8432455-9064-479F-B060-BF2A74ECC3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8EF2D7-371B-4268-989E-25225CC1F7B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFF2686-0F5C-4F20-AA93-6B63C5ADCD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D4A9B22-7978-44F3-A30C-65FE7024AB6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.1:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "06219062-9CAD-49D2-823E-E11E74B131D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.1:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "91420C0D-C63B-4916-8335-6BE24EB738FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.1:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "FD1D7D08-AC94-49AC-9F16-A6E91F1F1EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05FDA8EA-6610-4D49-9825-34EBFAAD2691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:c.2.3:-:business:*:*:*:*:*",
            "matchCriteriaId" : "3FA908BA-BEF8-44A5-AC95-E7CF020D0C94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.digium.com/view.php?id=13547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.digium.com/view.php?id=14417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.digium.com/pub/security/AST-2009-002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34229",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501656/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34070",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.digium.com/view.php?id=13547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.digium.com/view.php?id=14417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://downloads.digium.com/pub/security/AST-2009-002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501656/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-11T14:19:15.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NFS server in Sun Solaris 10, and OpenSolaris before snv_111, does not properly implement the AUTH_NONE (aka sec=none) security mode in combination with other security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the AUTH_NONE and AUTH_SYS security modes."
      }, {
        "lang" : "es",
        "value" : "El servidor NFS en Sun Solaris 10 y Opensolaris anterios a svn_111, no implementa adecuadamente el modo de seguridad AUTH_NONE (también conocido como sec=none) en combinación con otros modos de seguridad, lo que permite a atacantes remotos evitar las restricciones de acceso establecidas y leer o modificar archivos, como se ha demostrado mediante la combinación de modos de seguridad AUTH_NONE y AUTH_SYS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_110",
            "matchCriteriaId" : "31816AE0-ED0C-42A7-A39C-4C49E267E231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_110",
            "matchCriteriaId" : "4853A432-1302-4C9C-8405-137DF4C1D3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34213",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1021833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253588-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-093.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34063",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0658",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253588-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-093.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-11T14:19:15.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys and sec=krb5 security modes, related to modes that \"override each other.\""
      }, {
        "lang" : "es",
        "value" : "El demonio NFS (también conocido como nfsd)  en Sun Solaris 10 y OpenSolaris snv_106, cuando NFSv3 es usado, no implementa adecuadamente las combinaciones de nodos de seguridad, lo que permite a atacantes remotos evitar las restricciones de acceso intencionadas y leer o modificar archivos, como se ha demostrado a través de una combinación de los nodos de seguridad sec=sys y sec=krb5, relacionado con nodos que \"sobreescriben el otro\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34225",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1021832",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-250306-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-096.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34062",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0657",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-250306-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-096.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-12T15:20:49.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The uncompress_buffer function in src/server/simple_wml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service via a large compressed WML document."
      }, {
        "lang" : "es",
        "value" : "La función uncompress_buffer en src/server/simple_wml.cpp en Wesnoth anterior a r33069 permite a atacantes remoto provocar una denegación de servicio a través de un documento WML de gran tamaño comprimido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.11",
            "matchCriteriaId" : "7FBEEB73-9922-4A87-9EE6-A712D58B831A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BD9EF4-531F-42FC-B6FB-2EFE9D1DBF27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB817AC-44E4-41CD-BD03-7B5907243FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBDC2E2D-581C-4B8C-8DB1-2B34A22C1788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB9B969-9AEA-47B8-A2C1-D951DA5A6D90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3ECAC12-E14D-47F6-853C-758584EB4E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2E47D5-D0F1-4FC4-BC1C-9964BE85741D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAFC79CA-F9B0-45FD-904C-B11760E11CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54937870-186F-4342-8658-6F3DA155A53D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9488E868-BFC2-4084-802C-874E41E0AE10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15CBB13-9B93-4C87-A19E-56FFE900D257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E587C8-E7D8-4FD8-A826-D7BFAE7F270D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED754F0-F2DB-445C-BE11-8525521C7B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0FF72F-A313-4BF1-8E7A-BF7EAA2C5EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B219D98C-B08A-4BB6-8C5B-E8978823A4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D98006-438D-4DF9-A40A-2B94CE8760EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07FD8E16-22EC-43BF-8ED3-09236F1C3BB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4D957E-7C2A-4062-A3DF-BD02E9CA5D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02358E6-E408-4A1C-A391-9F870625C5C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "383AD5F9-7691-4DA8-9DD6-AAB110F54B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51AF2340-3914-4411-BDC0-6B84548384B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95688481-AC1B-4A58-90D3-E6E76D9E0011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3FF4FDE-AF17-4BCE-AFEC-CDA138B76231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C116EF-BD41-4820-8243-A680EEB70055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C55CF49F-7678-41A9-8A4B-012A5B9EC78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952B7487-A920-40B0-BE80-8FA710149E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2794D70A-2180-424E-BFC7-848413BBA6B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31232ECA-2AF2-46EF-A9CA-BC692BFE4BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A4E7EF-F4AD-4A96-BD79-664AFDF5AC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57DCD88-7731-49A5-AFCB-5C6104025CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41728562-611D-4F58-AB89-D1887B3564B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D1E17F-BC30-4F01-94D5-A64E07B9B03A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3AF888-E2B1-4130-992C-4B7CF6CF4405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF25A9ED-8349-4DB0-B719-770E3AE30077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4989C0D-A6E6-4317-9640-15E50C62A54F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D8C3FF-41EC-4C98-BC7A-5C419559CBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF780D9D-2D07-42BF-A4AB-97F60C73A7B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A820E98A-D26D-4C9A-B476-8406C88437B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB71E24E-1A08-491F-8379-FE41AF012E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B57803-62E1-4F50-92DD-6796C6D60758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D83E56-BE05-4DF7-88AD-BC0AD5098415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621115C3-5AF6-4709-BB0B-A0FE481C5C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1549F8-FE6A-49E5-BC19-585C4957E061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD5F86E-F65D-4114-9057-A81B360BE143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "256B2C75-47E5-4A8F-9672-B56D17086764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD02FB1-72CD-42A3-8E7C-910490467A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15627E66-D852-4F68-9C9A-3EAF5B805BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "415FE737-8F89-463D-9F1D-EF5EDACFCD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1941BB00-8039-4DD8-815A-1AE0CA986C70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D091DF5-3229-43E0-BEC4-754992B8DD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F8C56F-1F74-4F40-85D8-DA861DE4DB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E58D08-F602-4BE6-978D-34B58E9188B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51001322-B437-4A1C-83BA-C8E3C3BCE7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A991E343-0C44-4F37-80EE-5C0E45EDA909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4223A3-6F43-4774-8579-59868FB5074B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA5792D1-F342-41F2-B056-D8BA99F5C80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EDB1AAF-2513-4511-9E28-E0E9ACF74C19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://launchpad.net/bugs/335089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://launchpad.net/bugs/336396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://launchpad.net/bugs/cve/2009-0366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.gna.org/viewcvs/wesnoth/trunk/src/server/simple_wml.cpp?rev=33069&r1=32990&r2=33069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.gna.org/viewcvs/wesnoth/trunk/src/server/simple_wml.cpp?rev=33069&view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gna.org/bugs/index.php?13037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://launchpad.net/bugs/335089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://launchpad.net/bugs/336396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://launchpad.net/bugs/cve/2009-0366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.gna.org/viewcvs/wesnoth/trunk/src/server/simple_wml.cpp?rev=33069&r1=32990&r2=33069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.gna.org/viewcvs/wesnoth/trunk/src/server/simple_wml.cpp?rev=33069&view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gna.org/bugs/index.php?13037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0632",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-03-12T15:20:49.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.1, 4.2 before 4.2(3)SR4b, 4.3 before 4.3(2)SR1b, 5.x before 5.1(3e), 6.x before 6.1(3), and 7.0 before 7.0(2) sends privileged directory-service account credentials to the client in cleartext, which allows remote attackers to modify the CUCM configuration and perform other privileged actions by intercepting these credentials, and then using them in requests unrelated to the intended synchronization task, as demonstrated by (1) DC Directory account credentials in CUCM 4.x and (2) TabSyncSysUser account credentials in CUCM 5.x through 7.x."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad IP Phone Personal Address Book (PAB) Synchronizer en Cisco Unified Communications Manager (también conocido como CUCM, formalmente CallManager) v4.1, v4.2 anteriores v4.2(3)SR4b, v4.3 anteriores v4.3(2)SR1b, v5.x anteriores v5.1(3e), v6.x anteriores v6.1(3), y v7.0 anteriores v7.0(2) envía credenciales de cuentas privilegiadas del servicio directorio a el cliente en texto plano, lo que permite a los atacantes remotos modificar la configuración CUCM y desarrollar otros acciones privilegiadas interceptando estas credenciales, y usándola en peticiones no relativas a las tareas de sincronización establecidas, como se ha demostrado a través de (1) credenciales de la cuenta DC Directory en CUCM v4.x y (2) credenciales de cuenta TabSyncSysUser en CUCM v5.x hasta v7.x."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E29A61E-334B-4F95-9B47-8F53A4DB3EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C20851-DC17-4E89-A6C1-D1B52D47608F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:4.2\\(3\\)sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9DCB59-F6AD-4CBD-B746-8FBA4BF733CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:4.2\\(3\\)sr2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E094AB-5F10-4238-BBE3-236B7306C995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:4.2\\(3\\)sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2496F01D-E387-48CD-B586-826D284BBC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:4.2\\(3\\)sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5955E35-E200-4054-8757-39BD04F13220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "577571D6-AC59-4A43-B9A5-7B6FC6D2046C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:4.3\\(1\\)sr.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A459F3A2-817B-4F7F-AF9B-4EACB90B7DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:4.3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB09252-6C59-4E1C-93C8-0AC3ED54A294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:4.3\\(2\\)sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0F270A-F953-43C7-9358-3B237B355BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AF68FA-433F-46F2-B309-B60A108BECFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9FDFF3-2E60-4E41-9251-93283D945D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "239510AD-8BB0-4515-B1DA-80DE696D25DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "26277C4A-4E27-492C-B18C-AC68D86ADF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(2b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9003EC1A-6E85-41F1-BB5D-B841C9C28105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0318CF61-B892-4D44-B41A-D630B4AB808C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDA8A78-BA6C-4451-8EAA-B83C3A6C6BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A49932-1E22-4BE0-8195-926D44F65AAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE1B0DD-EA64-493B-86B7-9057EE5033C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819AE879-5BF9-494E-8905-1E1E867EB5A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DF1139-A161-48DD-9929-F6939D626461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.0\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF99088E-1330-4E15-8BD3-2A5172FBA460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC6EF34-D23D-45CA-A907-A47993CC061E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CC94003-72B6-45C3-A07E-0A08F1562B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "958A2707-0F1A-4719-BB9F-DC9ED129105A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "597D9674-F44D-4A31-A2F2-2790ED698A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1\\(2\\)su1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2B7439-8547-41A6-AE6C-6ABCD167890E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE122F76-ECDB-4446-825C-EF02257D8C08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2564A8-5805-46E0-B6EC-F4967D67C566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:7.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0907FAF-8334-42C1-B35A-EC6ED89AC110"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52589",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/34238",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080a86434.html",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a8643c.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34082",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021839",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0675",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49196",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/52589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080a86434.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a8643c.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080a8643c.shtml\r\n\r\n\"Impact\r\n\r\nSuccessful exploitation of this vulnerability may allow an attacker to intercept user credentials that allow the attacker to escalate their privilege level and obtain complete administrative access to a vulnerable Cisco Unified Communications Manager system. If integrated with an external directory service, the intercepted user credentials may allow an attacker to gain access to additional systems configured to use the directory service for authentication.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0778",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-12T15:20:49.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache (aka DST) in some situations involving transmission of an ICMP Host Unreachable message, which allows remote attackers to cause a denial of service (connectivity outage) by sending a large series of packets to many destination IP addresses within this REJECT route, related to an \"rt_cache leak.\""
      }, {
        "lang" : "es",
        "value" : "La función icmp_send en net/ipv4/icmp.c en el kernel Linux anerior a v2.6.25, cuando se configura como un router con una ruta RECHAZADA, no gestiona apropiadamente el Protocolo Independiente de Caché de Destino (alias DST) en alguna situación que involucra transmisión de un mensaje ICMP Host inalcanzable, el cual permite a los atacantes remotos causar una denegación de servicio (conectividad parada) enviando una larga serie de paquetes a muchos direcciones IP de destino con esta ruta RECHAZADA, RELATIVA a \"rt_cache leak.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.24.7",
            "matchCriteriaId" : "C4298B94-7040-4CC0-8933-61CE1D967FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF02479-2124-4655-A38D-A4793D3B8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE04AF35-7A3B-45B0-A00F-2EF31910A2A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0ADF183-E519-4A99-910D-1F34E61B9EFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4090E02D-1928-4003-91A4-7A422CCDAFFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBB1A21-3826-4BC5-A243-AF8F8D1D4728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "980A6C7D-6175-4A44-8377-74AA7A9FD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C226902-04D9-4F32-866C-20225841ECF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "655DB612-AF49-4C17-AFB9-2E33EE8E0572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F65DF2-2794-47B7-9676-CCF150683CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED4E9DD-DDAD-46A8-9AD2-9CAE406F7575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D97ED16-D6B7-4445-889C-4D6DE2EDC49A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C2D5D4-9A4B-4CDF-8D71-D22EB5E97D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFB2843-A867-48EC-97D7-B106C7BBAED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1E1A8B-6FA1-45AD-B034-EC34884527DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CBD2D9-3765-40B2-A056-D71BE750CC01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F4D967-ED04-42EA-8B3E-36301D39D651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git3:*:*:*:*:*:*",
            "matchCriteriaId" : "C498EE89-7F07-4B1E-90E6-5897E6B04670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git4:*:*:*:*:*:*",
            "matchCriteriaId" : "708656AF-92AE-4EAF-AF19-F457DB04ADB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git5:*:*:*:*:*:*",
            "matchCriteriaId" : "3B263AB8-74A4-4C73-915C-A02724C24B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git6:*:*:*:*:*:*",
            "matchCriteriaId" : "A96D739B-9E8B-4D2F-9DED-4C9B313473CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git7:*:*:*:*:*:*",
            "matchCriteriaId" : "4ACDEFEE-B946-4232-8BD5-A9F7AA84ED85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "247E13CB-9B11-4B64-80AD-C0F8482CCC0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "903FE5D3-A9FB-466D-833B-448233BB0803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "958EDC43-0848-4D93-9D07-6A085A5940B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "AD35F21D-0A28-4C14-BCF5-8EDA760701C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "3AAD8BE9-A05B-40E8-80DF-0B2878968BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "D123AAFE-3F17-45C4-9382-BA392FD022C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D42BA44-C69B-4170-9867-CABF93CA9BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "085259B8-9D41-42B0-B32B-66B8D365F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A12DE15-E192-4B90-ADB7-A886B3746DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6588E7-F4FA-40F5-8945-FC7B6094376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "AE87E13E-ACF7-4F74-8938-729F3B0D694C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D4965A12-1BBA-4494-A5C1-43E0C0F48C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B31894-78E7-41A6-857C-D7A0C1C52838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:virtualcenter:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFF5385-64AA-48AD-A5FE-25918E4F07D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:virtualcenter:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17E8DFD-AC99-45E6-81F9-ED66369FBD0A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A2543D5-AE09-4E90-B27E-95075BE4ACBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFD8D25-7FDF-48DF-8728-5875C44FFB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902BA958-06AA-4EDF-9F9E-1030083EA361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF29100-E124-4416-95CF-18B4246D43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC337BB7-9A45-4406-A783-851F279130EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vma:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7426B5AC-D0FD-424D-9A1E-0875C2102D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7c0ecc4c4f8fd90988aab8a95297b9c0038b6160",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/03/11/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33758",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0326.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34084",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021958",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=485163",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49199",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10215",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7867",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7c0ecc4c4f8fd90988aab8a95297b9c0038b6160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/03/11/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0326.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=485163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2009-0326.html .",
        "lastModified" : "2009-05-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-12T15:20:49.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allow local users to cause a denial of service (process hang), or possibly bypass file permissions or gain kernel-context privileges, via vectors including ones related to (1) an argument handling deadlock in a door server and (2) watchpoint problems in the door_call function."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades múltiples no especificadas en el subsistema Doors en el kernel en Sun Solaris v8 hasta v10, y OpenSolaris anteriores a snv_94, permite a los usuarios locales causar una denegación de servicio (cuelgue del proceso), o posiblemente evitar los permisos del archivo o obtener privilegios kernel-context, a través de vectores incluyendo los relativos a (1) argumento que maneja deadlook en una puerta de servidor (2) problemas watchpoint en la función door_call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_93",
            "matchCriteriaId" : "A38B7292-65AC-47DE-B360-6A6A4B145B9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DBDFD8C-371E-42D2-9635-D8CDD1775984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_93",
            "matchCriteriaId" : "6E360011-C02E-44A9-B771-EEC0699BFB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34227",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-61-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-242486-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-095.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-61-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-242486-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-095.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-12T15:20:49.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allows local users to cause a denial of service (process hang), or possibly bypass file permissions or gain kernel-context privileges, via vectors involving the time at which control is transferred from a caller to a door server."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en el subsistema Doors en el kernel en Sun Solaris v8 hasta v10, y OpenSolaris anterior a snv_94, permite a los usuarios locales causar una denegación de servicio (cuelgue del proceso) o posiblemente evitar los permisos del archivo o ganar privilegios kernel-context, a través de vectores que implican en el tiempo en que el control transfiere desde un usuario llamador a la puerta de servidor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_93",
            "matchCriteriaId" : "A38B7292-65AC-47DE-B360-6A6A4B145B9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DBDFD8C-371E-42D2-9635-D8CDD1775984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_93",
            "matchCriteriaId" : "6E360011-C02E-44A9-B771-EEC0699BFB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34227",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-61-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-242486-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-095.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-61-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-242486-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-095.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-12T15:20:49.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DT_RPATH:$ORIGIN."
      }, {
        "lang" : "es",
        "value" : "Sun xVM VirtualBox versiones 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2 y 2.1.4r42893 en Linux, permite a los usuarios locales alcanzar privilegios por medio de un ataque de enlace físico, que conserva los bits de setuid/setgid en Linux, relacionado con DT_RPATH:$ORIGIN."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:xvm_virtualbox:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "004F2896-4A98-4385-982D-D75351ABEEE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:xvm_virtualbox:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96D440E-4639-4DF2-BEB1-BAD33A7E80CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:xvm_virtualbox:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C930392-136A-4C50-966E-D114C3DFB22E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:xvm_virtualbox:2.0.6r39760:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D125F4-B18B-40EA-8E44-460F0F9587A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:xvm_virtualbox:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5900799-F465-4071-8E84-6126357971D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:xvm_virtualbox:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87877B75-41B5-4CF4-B3D1-D52EAF957675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:xvm_virtualbox:2.1.4r42893:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64273D51-8F7D-4E79-AF81-8A036D6A8118"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155AD4FB-E527-4103-BCEF-801B653DEA37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34232",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254568-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/15/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/17/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34080",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.virtualbox.org/ticket/3444",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0674",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=260331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254568-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/15/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/17/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.virtualbox.org/ticket/3444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=260331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://sunsolve.sun.com/search/document.do?assetkey=1-66-254568-1\r\n\r\n\"5. Resolution\r\n\r\nThis issue is addressed in the following releases:\r\n\r\nLinux\r\n\r\n    * Sun xVM VirtualBox 2.0.6r43001\r\n    * Sun xVM VirtualBox 2.1.4r43001\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-12T15:20:49.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express allow remote attackers to inject arbitrary web script or HTML via the (1) Full Name or (2) Subject field."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados - XSS - en Sun Java System Communications Express que permite atacantes remotos inyectar una secuencia de comandos web o HTML a tra´ves del (1) Nombre completo o (2) campo asunto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_communications_express:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A5BA7A-2B6E-43FC-B09E-F3D1786C047D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sosoblood.freehostia.com/SJSC/html_injection.gif",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501672/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34083",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/52718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sosoblood.freehostia.com/SJSC/html_injection.gif",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501672/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-12T15:20:49.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service (memory consumption and daemon hang) via a map with a large (1) width or (2) height."
      }, {
        "lang" : "es",
        "value" : "La función read_game_map en src/terrain_translation.cpp en Wesnoth anterior a r32987, permite a los atacantes remotos causar una denegación de servicio (consumo de memoria y cuelgue de demonio) a través un mapa con una gran (1) anchura o (2) peso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.7",
            "matchCriteriaId" : "609F32FF-6F53-4C4B-82FA-9A2E826CB871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E259B064-C2F5-4F09-B07A-B7765D0EA033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5EAE3A3-21AD-40DE-99C7-F5756C1E86E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "950BB8F3-CD18-4EF9-9D62-23FB26ACDD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4987B9D2-193E-4AA6-99B1-DD2698E63B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05F8A92-DA97-4B1B-8F58-69919C52E312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02B29F51-C8BB-4AB9-9CEC-D4E0E21185DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9422C5B-1D98-437D-871C-DE144B8D5968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBD6D024-A80D-4A34-ADEC-369500E0B398"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE312CA7-1856-400C-A391-B50F75206200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6CFECF2-1447-41DA-AEE4-14E70154FA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1215EED-6612-45BC-B51C-A6E4E2BE39EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D273E0-A46A-414F-AD0E-0CBE6D8A666D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E777D3-E4B8-44BC-9ECD-D903C9AA1D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A43ED90-061D-456A-8C7D-89F1A229BAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA97E3DE-5157-496C-B676-09598EB1ABAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648E0AD0-6E97-4973-8E58-CA9EE883C2A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B7E333-AC80-4CA7-9D92-B34A17D16CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B877EC-E02B-40D1-9118-0867D5CAF91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0241E3-6747-4FCF-AD27-A079C0F19DED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.6.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B58DBF-035B-42F7-9B6E-47E2A997DD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.6.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87FE42CE-1F4F-4D81-8476-F45081712C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.6.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4CA6870-27A8-4B26-A868-3D962D992332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.6.99.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2853429-C12F-4307-97E8-6C38EE70E304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.6.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34A3D3FE-698A-4C52-AB2A-7E8C1B638051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4058C550-F2A8-4111-8F84-1E9E84A3D7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F728B1C9-E5A9-462B-ADAF-DADE7F46EA21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B008FA-0450-4F14-8BAC-691B02A3B22F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4611D18-F34F-45FF-B5BC-905A34910E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16DFBE2B-D7F5-4B2E-8156-563A66B5E861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30008245-2643-44AE-B20A-63D00FE48E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08B302AF-B0E4-44AD-A26D-F0BBFFE79C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15528F7F-9927-4A50-9DF8-D40793FCCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41E06FBF-1AA7-4B55-AE1C-113D6A3990A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF41356-8F02-495A-B6E2-7E0AA23B89DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730B766C-8B47-425C-A612-120989BC4E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4770E27E-893D-4AE1-850B-F5405770233F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C405A91-95C3-479B-96E2-F37A1B4FCC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B91CAED-E15B-4CDF-83A7-C31F9CE683E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D41E8097-6464-4AB5-AB8C-E7936EAB3CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB70E7A-795E-4A7E-91CA-781F98CC9FF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429500DC-7592-4870-9360-94D3699F8ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD8D11F-F24C-4538-AD78-A9D7481C5EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B6E6EB-4CDE-439F-9FF3-DF2CA75D17CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAA4EF0F-222E-4165-BA39-FC8CC0A61147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F32426F-86F8-44BC-BB0A-DB530372CF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4C50CF-91C8-4990-8405-C7309910A353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C90456F-96E6-4B6B-A61A-926E01CC9C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE039E74-555F-4F9B-BB9E-05C7709E03E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B157A699-B2A2-4E95-AB0E-A4607EFDAF71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE4FB8D-EB9C-43CF-8447-39F528DB841D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6838344-84D6-41C7-A875-C915D955E323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7407AE95-4ADA-486E-B1FC-3282683F84B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AAE5D43-38CD-4F0F-89F7-03358D47A23B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71453BBF-B911-483C-9F44-0D3D9053EA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B09BA0-35F2-43E7-8E2B-6EE03844A7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B378A8D9-86F7-4906-8B49-5145F3A31686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BD9EF4-531F-42FC-B6FB-2EFE9D1DBF27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.0rcl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6056DDDC-A194-4A30-B7E0-8BA912D9A466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB817AC-44E4-41CD-BD03-7B5907243FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBDC2E2D-581C-4B8C-8DB1-2B34A22C1788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB9B969-9AEA-47B8-A2C1-D951DA5A6D90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3ECAC12-E14D-47F6-853C-758584EB4E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF2E47D5-D0F1-4FC4-BC1C-9964BE85741D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAFC79CA-F9B0-45FD-904C-B11760E11CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54937870-186F-4342-8658-6F3DA155A53D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9488E868-BFC2-4084-802C-874E41E0AE10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15CBB13-9B93-4C87-A19E-56FFE900D257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E587C8-E7D8-4FD8-A826-D7BFAE7F270D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED754F0-F2DB-445C-BE11-8525521C7B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0FF72F-A313-4BF1-8E7A-BF7EAA2C5EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B219D98C-B08A-4BB6-8C5B-E8978823A4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D98006-438D-4DF9-A40A-2B94CE8760EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07FD8E16-22EC-43BF-8ED3-09236F1C3BB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4D957E-7C2A-4062-A3DF-BD02E9CA5D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02358E6-E408-4A1C-A391-9F870625C5C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "383AD5F9-7691-4DA8-9DD6-AAB110F54B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51AF2340-3914-4411-BDC0-6B84548384B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95688481-AC1B-4A58-90D3-E6E76D9E0011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3FF4FDE-AF17-4BCE-AFEC-CDA138B76231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C116EF-BD41-4820-8243-A680EEB70055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C55CF49F-7678-41A9-8A4B-012A5B9EC78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952B7487-A920-40B0-BE80-8FA710149E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADF53ED-10A0-4F03-8B8B-EE8CB4BDB9E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8675995D-8CE9-4A5F-B8AB-E4C33C5EB6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "873FD0CA-4B14-4927-B430-52D24176FC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61B37AA0-8114-4F1A-B9D5-3DFAF896E644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A6BB07-3825-412F-9E1D-1C990767157C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7024803-04D0-476E-B2EB-347D2A4F0CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F467E7C6-B3A3-4BAC-A377-9CA52A85A669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2794D70A-2180-424E-BFC7-848413BBA6B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31232ECA-2AF2-46EF-A9CA-BC692BFE4BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A4E7EF-F4AD-4A96-BD79-664AFDF5AC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57DCD88-7731-49A5-AFCB-5C6104025CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41728562-611D-4F58-AB89-D1887B3564B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D1E17F-BC30-4F01-94D5-A64E07B9B03A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3AF888-E2B1-4130-992C-4B7CF6CF4405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF25A9ED-8349-4DB0-B719-770E3AE30077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4989C0D-A6E6-4317-9640-15E50C62A54F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D8C3FF-41EC-4C98-BC7A-5C419559CBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF780D9D-2D07-42BF-A4AB-97F60C73A7B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A820E98A-D26D-4C9A-B476-8406C88437B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB71E24E-1A08-491F-8379-FE41AF012E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B57803-62E1-4F50-92DD-6796C6D60758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D83E56-BE05-4DF7-88AD-BC0AD5098415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621115C3-5AF6-4709-BB0B-A0FE481C5C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1549F8-FE6A-49E5-BC19-585C4957E061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD5F86E-F65D-4114-9057-A81B360BE143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wesnoth:wesnoth:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "256B2C75-47E5-4A8F-9672-B56D17086764"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://launchpad.net/bugs/335089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://launchpad.net/bugs/336396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.gna.org/viewcvs/wesnoth/trunk/src/terrain_translation.cpp?r2=32987&rev=32987&r1=31859&dir_pagestart=200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.gna.org/viewcvs/wesnoth/trunk/src/terrain_translation.cpp?rev=33078&dir_pagestart=200&view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gna.org/bugs/index.php?13031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://launchpad.net/bugs/335089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://launchpad.net/bugs/336396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.gna.org/viewcvs/wesnoth/trunk/src/terrain_translation.cpp?r2=32987&rev=32987&r1=31859&dir_pagestart=200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.gna.org/viewcvs/wesnoth/trunk/src/terrain_translation.cpp?rev=33078&dir_pagestart=200&view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gna.org/bugs/index.php?13031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-12T15:20:49.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service (daemon crash) via a long consumer name, as demonstrated by an M-POST request to a long /CIMListener/ URI."
      }, {
        "lang" : "es",
        "value" : "El servidor CIM en IBM Director anterior a v5.20.3 Service Update 2 sobre Windows permite a los atacantes remotos provocar una denegación de servicio (caída del demonio) a través de un nombre largo \"consumer\", como se ha demostrado en una petición M-POST a una URI larga /CIMListener/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:*:service_update_1:*:*:*:*:*:*",
            "versionEndIncluding" : "5.20.3",
            "matchCriteriaId" : "D525C638-4015-4E45-9A82-1CABAC1DCC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E2470-6359-4E0C-83E7-880FA6EC8520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622C9C51-0EB7-449F-96F0-07BC976CADDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2A9EE4-B5EA-451E-9A50-0BB901A7BD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D211F7-9F61-4E93-8C5E-596B782E0BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EE0669-1042-4580-8883-793C2F4272C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C5D77E-60BC-406F-86F6-2F1F0C9C8E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60AE021-6483-4075-B0F5-4DBF49F5332A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:5.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA0F5AD-D17D-492B-B463-52C40BA0B03B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:5.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD25392-1D9D-47C9-BAE3-7C2B24663A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D5A503-C92F-4EB9-8B5F-F59A1C6FAB76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:5.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824785BD-CA6D-4FDB-ADB3-428360D2F624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:5.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCA51AD-90E3-4DC5-BA4A-95A8B55C2DDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:5.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B3F58B-3D5C-4B3D-BA72-050270D741AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:5.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA69558A-697A-4FEC-A8EA-7E71DF9C4764"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021825",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501638/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0656",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.sec-consult.com/files/20090305-1_IBM_director_DoS.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=dmp&S_PKG=director_x_520&S_TACT=sms&lang=en_US&cp=UTF-8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501638/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.sec-consult.com/files/20090305-1_IBM_director_DoS.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=dmp&S_PKG=director_x_520&S_TACT=sms&lang=en_US&cp=UTF-8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-12T15:20:49.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. (dot dot) in a /CIMListener/ URI in an M-POST request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el servidor CIM en IBM Director anteriores v5.20.3 Service Update 2 en Windows que permite a los atacantes remotos cargar y ejecutar arbitrariamente código DLL local a través .. (punto punto) en un /CIMListener/ URI en una petición M-POST."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:*:service_update_1:*:*:*:*:*:*",
            "versionEndIncluding" : "5.20.3",
            "matchCriteriaId" : "D525C638-4015-4E45-9A82-1CABAC1DCC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E2470-6359-4E0C-83E7-880FA6EC8520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622C9C51-0EB7-449F-96F0-07BC976CADDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2A9EE4-B5EA-451E-9A50-0BB901A7BD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D211F7-9F61-4E93-8C5E-596B782E0BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EE0669-1042-4580-8883-793C2F4272C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C5D77E-60BC-406F-86F6-2F1F0C9C8E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60AE021-6483-4075-B0F5-4DBF49F5332A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:5.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA0F5AD-D17D-492B-B463-52C40BA0B03B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:5.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD25392-1D9D-47C9-BAE3-7C2B24663A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D5A503-C92F-4EB9-8B5F-F59A1C6FAB76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:5.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824785BD-CA6D-4FDB-ADB3-428360D2F624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:5.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCA51AD-90E3-4DC5-BA4A-95A8B55C2DDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:5.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B3F58B-3D5C-4B3D-BA72-050270D741AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:5.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA69558A-697A-4FEC-A8EA-7E71DF9C4764"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501639/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0656",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.sec-consult.com/files/20090305-2_IBM_director_privilege_escalation.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=dmp&S_PKG=director_x_520&S_TACT=sms&lang=en_US&cp=UTF-8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501639/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.sec-consult.com/files/20090305-2_IBM_director_privilege_escalation.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=dmp&S_PKG=director_x_520&S_TACT=sms&lang=en_US&cp=UTF-8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ],
      "evaluatorSolution" : "Per: http://www.securityfocus.com/archive/1/archive/1/501639/100/0/threaded\r\n\r\n\"The vendor has adressed this vulnerability in service update 2 for IBM\r\nDirector agent 5.20.3. Download link:\r\n\r\nhttps://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=dmp\r\n&S_PKG=director_x_520&S_TACT=sms<=en_US&cp=UTF-8\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-12T15:20:50.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el archivo ejemplo/paises.php en isiAJAX 1 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:josema_enzo:isiajax:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2979F260-2147-49B2-B80E-E498C98AD004"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-12T15:20:50.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to showtheme.php and the (2) user parameter to userinfo.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en nForum v1.5 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de (1) parámetro id para showtheme.php y el (2) parámetro user para userinfo.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roman_bogorodskiy:nforum:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62243043-27B2-4ACB-BF1C-740EB93CDA3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/501560/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34030",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501560/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-12T15:20:50.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the BlueEyeCMS_login cookie parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Blue Eye CMS v1.0.0 y anteriores, cuando magic_quotes_gpc es deshabilitado, permite a los atacantes remoto ejecutar arbitrariamente comandos SQL a través del parámetro de la cookie BlueEyeCMS_login."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amunak:blue_eye_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "2786EA0F-ED0F-47F3-A838-40CD10818249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amunak:blue_eye_cms:1.0.0:prerc:*:*:*:*:*:*",
            "matchCriteriaId" : "4ADB8D86-A99F-42F6-8588-92CD62D1C37D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34022",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-12T15:20:50.063",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SSL/TLS packets."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en FileZilla Server anteriores a v0.9.31 que permite a los atacantes remotos causar una denegación de servicio a través de vectores no especificados relativo a paquetes SSL/TLS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filezilla-project:filezilla_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.31",
            "matchCriteriaId" : "65B447F9-7981-43C2-8042-44E5CCF223C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://filezilla-project.org/index.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34089",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=665428",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34006",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021812",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0603",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49107",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://filezilla-project.org/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=665428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-12T15:20:50.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in Media Commands 1.0 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in a (1) M3U, (2) M3l, (3) TXT, and (4) LRC playlist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento múltiple de búfer basado en pila en Media Commands v1.0 que permite a los atacantes remoto ejecutar arbitrariamente código o causar una denegación de servicio (caída de la aplicación) a través de una secuencia de comandos larga en ficheros de listas de reproducción (1) M3U, (2) M3l, (3) TXT, y (4) LRC."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediacommands:media_commands:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA774B48-3499-4990-84CB-C41B3C9831F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34122",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/33958-2.py",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/33958.py",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/33958.rb",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0583",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/33958-2.py",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/33958.py",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/33958.rb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-12T15:20:50.110",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the default_language parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el archivo login.php en OneOrZero Helpdesk v1.6.5.7 y anteriores que permite a los atacantes remotos leer ficheros arbitrarios a través de .. (punto punto) en el parámetro default_language."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneorzero:oneorzero_helpdesk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.5.7",
            "matchCriteriaId" : "D79A5E3D-7BCE-41A1-99FC-D598A78AB8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.4_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6954D954-0953-434E-9F58-4192552E523B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F48E6F-1E7A-4B5F-9A05-37B2D7D39BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E97153-B0A5-4751-B657-79EF676FABD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52A56240-7E0C-49E9-ACBC-F92D2B326117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC596188-DBD8-4E56-953D-23B865670926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB496DA0-547A-4CE9-A18F-4B89B4764FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFF0F1A-84D9-4816-8ECB-8E070E94F70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251E0D13-FB1E-44A1-8AD3-6CD5EFBF2556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F671473D-7DDA-407E-BDB1-586A4E9BCA86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34029",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-12T15:20:50.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in the _pam_StrTok function in libpam/pam_misc.c in Linux-PAM (aka pam) 1.0.3 and earlier, when a configuration file contains non-ASCII usernames, might allow remote attackers to cause a denial of service, and might allow remote authenticated users to obtain login access with a different user's non-ASCII username, via a login attempt."
      }, {
        "lang" : "es",
        "value" : "Error de presencia de signo en entero en la función the_pam_StrTok en Linux-PAM (alias pam) 1.0.3 y anteriores, cuando un fichero de configuración contienen nombres de usuario con caracteres non-ASCII, podría permitir a los atacantes remoto causar una denegación de servicios, y podría permitir a usuarios remotos autenticados obtener login de acceso con un nombre de usuario diferente a los usuarios con caracteres non-ASCII, a través de un intento de login."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 2.7,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "5C8DB56B-870D-45E3-8216-ADB47FD07B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B59C70C7-FABE-4A45-A45D-2C7276D698DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA50D8F-D5A8-4123-93CF-E7714571F411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8820C0-1ECB-45AD-A573-5667F0D09776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D416053-0010-4B25-9F7C-6054C51C1685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97AB578-0E9E-4370-8379-0CD455F2D740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A6147C-CC0A-4C9F-B9A9-E144F2133592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DEF8EC8-0E0A-4C0A-95BE-FB7C23732083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A9AB1C-FDF8-4E98-8773-387E03CD93E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F94AA92-5854-46B9-8B3C-08FCC5B071CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5C0039-827C-45CD-99BE-95459006CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4256C34-DBCA-4FE0-96A5-874D7F00869A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2613D2-33C1-4132-AD9A-68190A59C0F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08FDE78F-119B-4FC8-BBFA-8048F2CF1227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A75789-F7EC-4D9C-942A-243DF92E5CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3753027E-D3A4-45D4-A3A3-2320C48AF6C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6533A629-6351-4831-BBF7-44718262FAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516F23F9-25B3-40DB-A3CA-2F1DE0678934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3ACA7F-D247-439C-8B5E-287EC5D236AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A30E5C3-501D-4DAA-B7F7-E42F98DEDBF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwall.com/lists/oss-security/2009/03/05/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pam.cvs.sourceforge.net/viewvc/pam/Linux-PAM/libpam/pam_misc.c?r1=1.9&amp%3Br2=1.10&amp%3Bview=patch",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pam.cvs.sourceforge.net/viewvc/pam/Linux-PAM/libpam/pam_misc.c?view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34010",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00398.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00420.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/03/05/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pam.cvs.sourceforge.net/viewvc/pam/Linux-PAM/libpam/pam_misc.c?r1=1.9&amp%3Br2=1.10&amp%3Bview=patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pam.cvs.sourceforge.net/viewvc/pam/Linux-PAM/libpam/pam_misc.c?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00398.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0887\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/\n",
        "lastModified" : "2009-03-13T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-14T18:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple iTunes before 8.1 on Windows allows remote attackers to cause a denial of service (infinite loop) via a Digital Audio Access Protocol (DAAP) message with a crafted Content-Length header."
      }, {
        "lang" : "es",
        "value" : "Apple iTunes antes de la versión 8.1 sobre Windows permite a atacantes remotos provocar una denegación de servicio (mediante un bucle infinito) a través de un mensaje del Protocolo de acceso de audio digital (DAAP) con la cabecera Content-Length debidamente modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "54518257-E550-48E5-8F7A-C4079F26C95E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "49DC3DDC-8758-4D28-B2D5-161994C0E669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D0E3B53-AFAE-47F1-B7E3-395406819357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5CF3BB89-1AEF-4B00-AF87-C9BAF7E23EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "389B617F-29D2-4171-B4E0-9E65BBFAF369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "696D5986-155D-446C-A5FE-49C0DF1868AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3370179D-5E8A-4036-AA23-252674C6D807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2B71E645-F15B-43FE-931B-819F9ABA89C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "E90B5E1A-4D90-4252-8E34-649F33F1A088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1D0D1162-36F7-4F7E-94C0-ABB86B9FC4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF23791B-F73D-4CF4-BAC3-591FF0F0B0C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E74DB1C-208B-42DE-9A5E-E9010140C5B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "262CAFD7-07C2-4C71-B2FC-165A88977881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "018AC033-ACF0-496D-96E1-A03CC4162CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3CA9634F-A553-4B72-BBA2-AD7EAE4DFA81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A698DDBE-B79B-4F59-AFBC-0A0682B1EF1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E91D9ACF-2595-4A9A-B581-46F177300B7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC9B5471-F1B1-4E8B-B991-FDE231BA30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2320B809-DE44-49AA-9C96-196BF39749C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.2.72:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "F2899F21-F01F-4C95-93AA-40C528EE56DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDD1695A-271B-4832-B4B1-E5A9D7DE4E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FD00E684-506B-4ED6-B48C-7D565CDA188C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.6:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "9136E8D6-310D-4D4E-A6AC-2F89218B8666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "28519DE2-61CA-4943-9247-9F6BCB0367DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "78A3FEC0-F135-41F9-A260-52157B283B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "822F3D7E-810F-41B9-823F-D0B54BD1A3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "79591197-B671-46B2-9EB2-03A75A838CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "359C82A7-F6FB-4140-BD11-2B38B323933A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.1.30:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A2DD1A9D-4AF4-452A-99C2-AE93611C985D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.8:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "8DEABC06-3FF2-4B6A-AAFF-F38B00BA2967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.8.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E9B16D5E-9EF4-4253-8E07-75C8E5E0E33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.9:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6514E3F5-3B5D-43BE-A26D-5167B519F3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.9.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CA2B6657-6E0F-4915-ACB9-219F76D8E38A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "23C49853-8616-4769-90BC-B6D85B24A36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "10A63976-A435-4F6C-8B09-3001CA3EDC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "7C1EC2F5-FBE8-4EC8-9D28-83C736F2DC01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "B97DF98E-792B-474E-8820-DF88C4B28A94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "8DDAAC1F-03CA-4DCC-9E9B-A68181261BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "97558F66-FA78-454B-B25C-DA2A39CA1A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D5AE8F59-2DF8-403B-BAB9-6465E618897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "B3F084A8-A293-4151-80F6-72C14582E31F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "F37B39AB-2D5B-417E-BCEF-29C18D386C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7426FDD0-F909-48AB-97C9-C4B25C05E6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A1DCEED8-8174-4319-BAA2-E0A70A7EAFC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "372C1609-E534-41E0-87CD-C654BBF0B88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "9730866D-DFE9-448F-9D4E-6B21B3942737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "03FCF3E7-0649-43B7-90C8-521E90079156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.4.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "E20BC99A-13FC-446C-A27A-6C2D859C172B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "DD300F1B-EE8F-4606-B024-A14CA2EF4D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "407AD48A-EA07-456F-B46B-24383E416A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C5B51908-CB81-492D-A437-D0508ABE05FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0E826E91-CBBF-48D8-A4AD-7FB6830F3769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2690D789-B1DC-40A5-8CC6-BBB499E9A550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "066FC8C7-5A0B-4B2E-A51E-BFB42153FD21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D2412E1-745B-4CFC-B075-1960A1410335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "45F36172-97A7-4767-BC9E-8DC0444A8635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D0D889C7-320C-4674-834F-93C8B1701EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "23B4660B-D22B-4AC5-B6F2-87F83A2251A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7F61B45F-86CA-43F6-BA12-62AB0FBAD352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC37C091-02B8-4B39-9253-52C1008ADEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9F7D1E31-E28F-4EAD-AAE5-01AE478003B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "70A4EEE2-1DD2-4936-8939-4683523670B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "91FB2868-DDF9-4D33-B78C-2A5180F9D260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "95B58CD1-03CB-4C35-A290-7157941D210D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AEEC5C0E-DDC5-4B28-8C04-DF69C152E1AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A27B736F-317F-4538-AA3B-72D6EF0D2D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2F688163-C543-4D58-BF71-DF50FFB0A112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "481E736B-0A83-4422-B1D3-4BD0F9565A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3BB09ABD-C1F1-4101-BDC2-FC3E8C422631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0C0CB6DE-46C4-4F9D-B8FD-47C01922D2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A7448F89-CC4A-4B18-887F-B47C0B57404C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "040B2DB5-8F7D-4272-A0D1-2872B289B125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "4F173E7D-3EEC-4698-B0FE-5CCE6F990829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "1A957B0E-9A86-40D4-8A39-01895C32838A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B7DBB76-5A86-42A3-8A0A-19D616357619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D41DA19A-4403-40A8-A3DB-01A12FD4F267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC16747F-9F32-4186-9824-487163276EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "25E7EF0A-D79E-44E3-B0D4-3C6E8F6FD666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F2043A3A-3578-42D8-AF54-7C8073CA0DB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0236.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2009/Mar/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34254",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3487",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.fortiguardcenter.com/advisory/FGA-2009-11.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501758/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0236.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2009/Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.fortiguardcenter.com/advisory/FGA-2009-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501758/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-14T18:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to trick a user into providing a username and password when subscribing to a crafted podcast."
      }, {
        "lang" : "es",
        "value" : "Apple iTunes antes de la versión 8.1 no informa adecuadamente al usuario sobre el origen de una solicitud de autenticación, lo que facilita a los servidores podcast remotos a engañar a un usuario para que proporcione su nombre de usuario y contraseña al suscribirse a un podcast debidamente modificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1",
            "matchCriteriaId" : "2318C358-C51B-40E8-BD3B-8520FE5517B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce//2009/Mar/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52579",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34254",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021843",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3487",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34094",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0702",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49201",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5336",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2009/Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0582",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-14T18:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server (aka evolution-data-server) 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount of data in a challenge packet, which allows remote mail servers to read information from the process memory of a client, or cause a denial of service (client crash), via an NTLM authentication type 2 packet with a length value that exceeds the amount of packet data."
      }, {
        "lang" : "es",
        "value" : "La función ntlm_challenge en el mecanismo de autenticación NTLM SASL de camel/camel-sasl-ntlm.c en Camel en Evolution Data Server (alias evolution-data-server) 2.24.5 y anteriores, and 2.25.92 and earlier 2.25.x , no valida si cierto valor de longitud es coherente con la cantidad de datos almacenados en el paquete del desafío, lo cual permite leer, a los servidores de correo remotos, información de la memoria del proceso de un cliente, o provocar una denegación de servicio (con caida del cliente), a través de una autenticación NTLM autenticación de tipo 2 con un valor de longitud del paquete que supera la cantidad de paquetes de datos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution-data-server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.24.5",
            "matchCriteriaId" : "51DF09C1-FDF2-4994-819B-5A8F860D8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution-data-server:2.25.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F72D458-22D6-48FF-8E65-0131EC962FD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://mail.gnome.org/archives/release-team/2009-March/msg00096.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/52673",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34286",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34338",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34339",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34348",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34363",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35357",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1021845",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1813",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:078",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0354.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0355.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0358.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34109",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0716",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487685",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49233",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10081",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00666.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00672.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mail.gnome.org/archives/release-team/2009-March/msg00096.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0354.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0355.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0358.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00666.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00672.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0585",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-14T18:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the soup_base64_encode function in soup-misc.c in libsoup 2.x.x before 2.2.x, and 2.x before 2.24, allows context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de entero en la función soup_base64_encode en sopa-misc.c en libsoup 2.x.x antes de 2.2.x, y 2.x antes de 2.24, permite a atacantes dependientes del contexto ejecutar código arbitrario a través de una cadena demasiado larga que se convierte en una representación en base64."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joe_shaw:libsoup:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2012D764-04DA-4E15-930C-9DAB867E0F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joe_shaw:libsoup:2.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B733A8-F7B9-4E49-9FA0-14F1B7E56446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joe_shaw:libsoup:2.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6723F3C8-8FD9-4F55-9022-32F577E847EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joe_shaw:libsoup:2.23.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD389C2E-BDD2-4502-A2A7-C0984E6958A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joe_shaw:libsoup:2.23.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7873F3C-043A-4699-B00A-5224CAD0A509"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://ocert.org/patches/2008-015/libsoup-CVE-2009-0585.diff",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/03/12/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34310",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34337",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34401",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-088.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:081",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2008-015.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0344.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501712/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34100",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-737-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49273",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9599",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://ocert.org/patches/2008-015/libsoup-CVE-2009-0585.diff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/03/12/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-088.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2008-015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0344.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501712/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-737-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0586",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-14T18:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugins-base) before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64 representation, which triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de enteros en la función gst_vorbis_tag_add_coverart (archivo gst-libs/gst/tag/gstvorbistag.c) en vorbistag en gst-plugins-base (se conoce como gstreamer-plugins-base) anterior a versión 0.10.23 en GStreamer, permite a los atacantes dependiendo del contexto ejecutar código arbitrario por medio de una etiqueta COVERART diseñada que es convertida desde una representación base64, lo que desencadena un desbordamiento de búfer en la región heap de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer:gstreamer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.10.23",
            "matchCriteriaId" : "686707F3-D282-4ACB-8822-F8F6FD16664A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cgit.freedesktop.org/gstreamer/gst-plugins-base/commit/?id=566583e87147f774e7fc4c78b5f7e61d427e40a9",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://ocert.org/patches/2008-015/gst-plugins-base-CVE-2009-0586.diff",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/03/12/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34335",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34350",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/35777",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-11.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:085",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2008-015.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501712/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34100",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-735-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49274",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9694",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://cgit.freedesktop.org/gstreamer/gst-plugins-base/commit/?id=566583e87147f774e7fc4c78b5f7e61d427e40a9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://ocert.org/patches/2008-015/gst-plugins-base-CVE-2009-0586.diff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/03/12/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/35777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2008-015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501712/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-735-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0587",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-14T18:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in Evolution Data Server (aka evolution-data-server) before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in (1) addressbook/libebook/e-vcard.c in evc or (2) camel/camel-mime-utils.c in libcamel."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de enteros en Evolution Data Server (alias Evolution-Data-Server) antes de la version 2.24.5 permiten a atacantes dependientes de contexto ejecutar código arbitrario a través de una cadena demasiado larga que es convertida en una representación en base64 en (1)  addressbook/libebook/e-vcard.c en evc o (2) camel/camel-mime-utils.c en libcamel."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:go-evolution:evolution-data-server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.24.4",
            "matchCriteriaId" : "9B278F29-E26D-4C8C-9C79-A2820F6F1E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://ocert.org/patches/2008-015/camel-CVE-2009-0587.diff",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://ocert.org/patches/2008-015/evc-CVE-2009-0587.diff",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/03/12/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/52702",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/52703",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34338",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34339",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34348",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34351",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35357",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1813",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:078",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2008-015.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0354.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0355.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0358.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501712/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34100",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-733-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11385",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://ocert.org/patches/2008-015/camel-CVE-2009-0587.diff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://ocert.org/patches/2008-015/evc-CVE-2009-0587.diff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/03/12/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/52702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2008-015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0354.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0355.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0358.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501712/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-733-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0824",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-14T18:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Elaborate Bytes ElbyCDIO.sys 6.0.2.0 and earlier, as distributed in SlySoft AnyDVD before 6.5.2.6, Virtual CloneDrive 5.4.2.3 and earlier, CloneDVD 2.9.2.0 and earlier, and CloneCD 5.3.1.3 and earlier, uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to cause a denial of service (system crash) via a crafted IOCTL call."
      }, {
        "lang" : "es",
        "value" : "Elaborate Bytes ElbyCDIO.sys 6.0.2.0 y anteriores, como se distribuye en SlySoft AnyDVD 6.5.2.6, Virtual CloneDrive 5.4.2.3 y anteriores, CloneDVD 2.9.2.0 y anteriores, y CloneCD 5.3.1.3 y anteriores, utiliza el método de comunicación METHOD_NEITHER para IOCTLs y no valida apropiadamente un buffer asociado con el objeto Irp, lo que permite provocar a usuarios locales una denegación de servicio (con caída del sistema) a través de una llamada a IOCTL modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slysoft:anydvd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5.2.2",
            "matchCriteriaId" : "4695B5EB-8A92-4883-B53E-3C8B9812685E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slysoft:clonecd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.1.3",
            "matchCriteriaId" : "88A736A8-1454-4537-A693-229B1C85A0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slysoft:clonedvd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.2.0",
            "matchCriteriaId" : "6C88FE3E-B0A6-41B0-A0A8-C70AACF2A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slysoft:virtualclonedrive:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.2.3",
            "matchCriteriaId" : "C052580C-5779-4262-9532-0DB9810E068B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://en.securitylab.ru/lab/PT-2009-11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501713/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.slysoft.com/download/changes_anydvd.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.slysoft.com/download/changes_clonedvd.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://en.securitylab.ru/lab/PT-2009-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501713/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slysoft.com/download/changes_anydvd.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slysoft.com/download/changes_clonedvd.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-16T17:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files, which allows attackers to gain privileges via \"special characters\" in unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "perl-MDK-Common v1.1.11 y v1.1.24, v1.2.9 hasta v1.2.14, y posiblemente otras versiones, en Mandriva Linux no maneja correctamente las cadenas de caracteres cuando las añade a ficheros de configuración, permitiendo a atacantes remotos obtener privilegios mediante \"caracteres especiales\" en vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mandriva:multi_network_firewall:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD4AE9-A466-4413-A0C8-5509CBC8DA33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandriva:linux:2008.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "107F6BEE-C3CB-460A-B574-16D031D823AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandriva:linux:2008.0:-:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "29197BBD-0C26-41ED-A972-E730216CC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandriva:linux:2008.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E024B17-9AEE-40AD-9EDC-3BC0FBB53BE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandriva:linux:2008.1:-:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "E6DCA59C-F054-4726-9A63-CF9419F7DC28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandriva:linux:2009.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F90D927-CBCD-4432-9C04-A5F040D8F337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandriva:linux:2009.0:-:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BA4E53C3-30E4-4FA2-8431-AC592966F4B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandriva:linux_corporate_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2E9E33-9EF8-4D35-AC4F-CC371682EB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandriva:linux_corporate_server:3.0:-:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "264BA60D-3B77-424B-907D-0B168C831787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandriva:linux_corporate_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6579A7-D98C-406F-B621-7E111EF875B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandriva:linux_corporate_server:4.0:-:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "7CE263F7-5E3E-4007-AEDE-E6BDE42B3081"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:072",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34089",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0688",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-16T17:30:07.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the keysock kernel module in Solaris 10 and OpenSolaris builds snv_01 through snv_108 allows local users to cause a denial of service (system panic) via unknown vectors related to PF_KEY socket, probably related to setting socket options."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el módulo keysock del kernel en Solaris v10 y OpenSolaris versiones vsnv_01 hasta vsnv_108 permite a usuarios locales provocar una denegación de servicio (error irrecuperable del sistema) mediante vectores desconocidos relacionados con el socket PF_KEY, relacionado probablemente con las opciones de configuración del socket."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_108",
            "matchCriteriaId" : "D4A9DF86-60C3-41C2-8CB7-AD9841676694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_108",
            "matchCriteriaId" : "342DE19C-9923-45C8-A441-5101F117A1CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34277",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253568-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-099.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253568-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-099.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-16T19:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server (WAS) 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.23, and 7.0 before 7.0.0.3 allow remote attackers to read arbitrary files contained in war files in (1) web-inf, (2) meta-inf, and unspecified other directories via unknown vectors, related to (a) web-based applications and (b) the administrative console."
      }, {
        "lang" : "es",
        "value" : "El componente Servlet Engine/Web Container en IBM WebSphere Application Server (WAS) v5.1.0, v5.1.1.19, v6.0.2 anteriores a v6.0.2.35, v6.1 anteriores a v6.1.0.23, y v7.0 anteriores a v7.0.0.3 permite a atacantes remotos leer ficheros de su elección contenidos en los fichero \"war\" de (1) el directorio web-inf, (2) el directorio \"meta-inf\", y otros directorios no especificados mediante vectores desconocidos, relacionados con (a) aplicaciones web y (b) la consola de administración."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66DB2053-6DFD-4FF6-A6E9-444281531E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A580AA9B-CE1A-4F21-9FAB-5DFC4FCB34E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521DB050-3C94-49BF-8666-6EC2C358AA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4AB6BD-4439-4100-A3CE-4600AED10B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BEDD70-B6DB-448F-A998-3E8774B0DB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D839EDB9-A44F-4F7F-94EF-1A77371D705C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB622117-C91F-47D2-9832-B7DB340796E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D87691D-0719-4447-B258-5FA2BD10F11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C286007A-361F-47BB-A099-E041D5CF6E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BC8C52-DA95-4BF2-AD47-9922741CAAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108457A-50DC-4432-9E30-98ADBEBF2389"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34283",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34876",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg24022456",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK81387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21380233",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21380376",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0704",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1188",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1464",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg24022456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK81387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21380233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21380376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Per: http://xforce.iss.net/xforce/xfdb/49085\r\n\r\nCVSS score based on information provided by ISS."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-16T19:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that triggers memory corruption."
      }, {
        "lang" : "es",
        "value" : "Opera en versiones anteriores a v9.64 permite a atacantes remotos ejecutar código de su elección mediante una imagen JPEG manipulada que provoca una corrupción de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.63",
            "matchCriteriaId" : "4DB92A4F-6761-4171-8395-F6A9F8266841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F892EEF-54EC-4EC0-84B3-BD5C216AED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089BEFE3-24B2-4C73-BA25-7C905ED68A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "76AECDD0-C14D-4A68-AF2E-1C41A51089EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D888C22C-41F9-427D-9249-F010891DA48E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FAD06C-830A-4CB6-B9AF-7E093B64B69B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5366D587-7E77-4288-AB31-48108D04E0B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFFC44-A329-4FA5-B57C-FA8892F8226B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9241CFD0-9E61-487F-B076-2D7B8ACEA381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB49750B-DAA1-4417-8384-1F4D47F2227D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1099D38B-82EC-43C9-9DF5-D5EDC19834DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D64030-1877-4F29-8340-93DB6E0F1F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "85184E8A-C42D-4CBD-ACB4-B58752C305D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DA682571-536B-4CD9-A820-47E897B01480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "298457B8-051B-46D0-81B4-C5B63B69EB98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D4BC07-C37E-4F99-8DEA-54A45250050A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECFBC71-7814-4A24-A918-C593673727B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "57824075-E3F7-4B23-B4D6-8417C3147085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "FE078F27-6FC1-466C-8331-A89F8B6FE0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "5839EB88-DF5E-4AB0-899B-DF9F72F5F442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1865A4-E038-4A1C-877D-5A3CFA9576BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "93966A66-4332-4E76-9B1A-2BBF10AF0ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA91E77-301C-48F6-9A57-D5FDCEF743BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49DDEF-681C-4A34-9FF8-17249C42842D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF365891-F3FA-4740-94B2-01F85254A2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42B4261-C511-4F3A-8596-6BD4E343DC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2F38FE-7E98-48B2-B0B2-35312368B21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "63687D75-860D-4A36-B6BB-45BD4268B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BD500741-CF39-4F0C-9F96-6CBDFF8973D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*",
            "matchCriteriaId" : "359941FD-A5CE-43C1-AA76-C1B79BCB08C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9AC78A-CA47-476D-935E-67932BAB98A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E9662C-441F-4AB2-AC4C-30F31C32949A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D681B3-73E6-4257-84B4-DE83F6D659B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E5F2A5-F50F-4085-AB7D-8C91121A429A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E90912E-0CF8-404B-9E86-461497C65A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E19DD71-9447-4946-931F-4866537C8BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54075890-6E0C-4AB7-8BD5-2023419CC251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABC3435-77CD-4591-8282-7ADA60225CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C35850-B79C-4EE4-A6F2-CC5D2304724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "50B797C8-3290-4278-9D4B-A15A14FB8D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEC078C-A8F4-471B-A367-59A86B78590D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E10F658D-D2E4-4789-8172-F8842C3EEA05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81687D99-7444-4205-A7BE-992CC758675F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75C4301-68E9-4A10-B9C5-711252BF629B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC690371-3326-421E-8BAC-14F48840671B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E20418A7-1FA7-45EF-99B5-12D283EA6CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE50982-8026-466C-9F51-867425C9986F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD889EC7-E5D2-4137-B85C-86D7DB5CED27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "97452A26-7231-43BE-B70E-B8D05365CAB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DBA733-467C-4505-8199-DD25A5FFBF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B332FF1C-731D-454C-AA9E-3534040F09E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7965089-8592-47F2-958B-7DBE669BCAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1750B2D-7AC8-45CF-9879-1D0476EEE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBAA39D-01A0-4B6B-926B-C36C238E5258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE4473-88C0-4E28-A5B5-F7383B0E5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9754B270-E01D-415E-9A91-09ECB9B82B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D4682E92-E5E7-4351-959E-25A79CA4271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC41D6-73D4-44E9-87E4-E1E955B9580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5A5E5-3703-44AC-9963-A20A55002B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3E5BEF-3F29-4929-A37C-C49322B19047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0E7B5D-2568-4128-8F99-E74D24A7E991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A04906-7267-4A09-87BF-D639C7CF315B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "76C58A91-23BA-4336-A81B-B7FDFAF6CA91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6E40C4-FA29-4D7A-9018-44154503A68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E48C83-01AE-4A33-A004-14B99792674C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A2B78-70BD-439B-B1ED-A17FA5EF0990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623E4466-82CC-4BDD-BE25-3BB33B585547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0002A4-8A90-471C-9813-F648D53E4F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECA190-D7D3-4248-A61E-0D87E67E3D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A15E0FA-5570-4C5F-B087-38591D9EBABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9F72B1-F398-4E07-8652-2042ADDB8414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA2F504-6690-4AAD-97A6-6487E450C92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B927D3-D766-4D53-9870-15A7184E4C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FE202A-E068-4ECE-B61D-230EFF0E60B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B43E22F-D894-4763-BF55-C9B77911C8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4218D36C-CCE7-443B-842B-AA1A2C865734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "3311565E-3971-416B-AC9C-6CF9F4EF0F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC4250E-E638-4015-B5EF-7B5405F7FBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B7AA6F-9918-4356-894C-72833B791201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB76FFE-CB54-4A5B-B8FF-02B1A5D55D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.60:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA48444-F998-425B-896A-CE9276869BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9BFC45-39DF-47A6-B013-4299D2A0FB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "177B7245-4E8F-44E7-BF34-43939DD75AE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34135",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-30.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1021782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/07/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/964/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/964/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/964/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/964/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/964/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/support/kb/view/926/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0586",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=261032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200903-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/07/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/support/kb/view/926/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=261032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-16T19:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via unspecified vectors related to plug-ins."
      }, {
        "lang" : "es",
        "value" : "Opera en versiones anteriores a v9.64 permite a atacantes remotos dirigir ataques de ejecución de secuencias de comandos en dominios cruzados mediante vectores no especificados relacionados con sus extensiones."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.64",
            "matchCriteriaId" : "52DFB2F5-B90B-4A04-8755-548B149F295D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34135",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/964/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/964/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/964/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/964/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/964/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33961",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0586",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6220",
        "source" : "cve@mitre.org",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-16T19:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to a \"moderately severe issue.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Opera versión anterior a v9.64 tiene un impacto y vectores de ataque desconocidos, relacionados con un \"asunto moderadamente severo\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.63",
            "matchCriteriaId" : "4DB92A4F-6761-4171-8395-F6A9F8266841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F892EEF-54EC-4EC0-84B3-BD5C216AED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089BEFE3-24B2-4C73-BA25-7C905ED68A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "76AECDD0-C14D-4A68-AF2E-1C41A51089EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D888C22C-41F9-427D-9249-F010891DA48E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FAD06C-830A-4CB6-B9AF-7E093B64B69B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5366D587-7E77-4288-AB31-48108D04E0B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFFC44-A329-4FA5-B57C-FA8892F8226B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9241CFD0-9E61-487F-B076-2D7B8ACEA381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB49750B-DAA1-4417-8384-1F4D47F2227D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1099D38B-82EC-43C9-9DF5-D5EDC19834DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D64030-1877-4F29-8340-93DB6E0F1F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "85184E8A-C42D-4CBD-ACB4-B58752C305D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DA682571-536B-4CD9-A820-47E897B01480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "298457B8-051B-46D0-81B4-C5B63B69EB98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D4BC07-C37E-4F99-8DEA-54A45250050A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECFBC71-7814-4A24-A918-C593673727B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "57824075-E3F7-4B23-B4D6-8417C3147085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "FE078F27-6FC1-466C-8331-A89F8B6FE0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "5839EB88-DF5E-4AB0-899B-DF9F72F5F442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1865A4-E038-4A1C-877D-5A3CFA9576BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "93966A66-4332-4E76-9B1A-2BBF10AF0ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA91E77-301C-48F6-9A57-D5FDCEF743BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49DDEF-681C-4A34-9FF8-17249C42842D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF365891-F3FA-4740-94B2-01F85254A2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42B4261-C511-4F3A-8596-6BD4E343DC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2F38FE-7E98-48B2-B0B2-35312368B21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "63687D75-860D-4A36-B6BB-45BD4268B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BD500741-CF39-4F0C-9F96-6CBDFF8973D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*",
            "matchCriteriaId" : "359941FD-A5CE-43C1-AA76-C1B79BCB08C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9AC78A-CA47-476D-935E-67932BAB98A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E9662C-441F-4AB2-AC4C-30F31C32949A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D681B3-73E6-4257-84B4-DE83F6D659B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E5F2A5-F50F-4085-AB7D-8C91121A429A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E90912E-0CF8-404B-9E86-461497C65A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E19DD71-9447-4946-931F-4866537C8BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54075890-6E0C-4AB7-8BD5-2023419CC251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABC3435-77CD-4591-8282-7ADA60225CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C35850-B79C-4EE4-A6F2-CC5D2304724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "50B797C8-3290-4278-9D4B-A15A14FB8D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEC078C-A8F4-471B-A367-59A86B78590D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E10F658D-D2E4-4789-8172-F8842C3EEA05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81687D99-7444-4205-A7BE-992CC758675F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75C4301-68E9-4A10-B9C5-711252BF629B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC690371-3326-421E-8BAC-14F48840671B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E20418A7-1FA7-45EF-99B5-12D283EA6CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE50982-8026-466C-9F51-867425C9986F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD889EC7-E5D2-4137-B85C-86D7DB5CED27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "97452A26-7231-43BE-B70E-B8D05365CAB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DBA733-467C-4505-8199-DD25A5FFBF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B332FF1C-731D-454C-AA9E-3534040F09E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7965089-8592-47F2-958B-7DBE669BCAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1750B2D-7AC8-45CF-9879-1D0476EEE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBAA39D-01A0-4B6B-926B-C36C238E5258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE4473-88C0-4E28-A5B5-F7383B0E5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9754B270-E01D-415E-9A91-09ECB9B82B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D4682E92-E5E7-4351-959E-25A79CA4271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC41D6-73D4-44E9-87E4-E1E955B9580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5A5E5-3703-44AC-9963-A20A55002B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3E5BEF-3F29-4929-A37C-C49322B19047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0E7B5D-2568-4128-8F99-E74D24A7E991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A04906-7267-4A09-87BF-D639C7CF315B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "76C58A91-23BA-4336-A81B-B7FDFAF6CA91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6E40C4-FA29-4D7A-9018-44154503A68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E48C83-01AE-4A33-A004-14B99792674C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A2B78-70BD-439B-B1ED-A17FA5EF0990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623E4466-82CC-4BDD-BE25-3BB33B585547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0002A4-8A90-471C-9813-F648D53E4F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECA190-D7D3-4248-A61E-0D87E67E3D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A15E0FA-5570-4C5F-B087-38591D9EBABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9F72B1-F398-4E07-8652-2042ADDB8414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA2F504-6690-4AAD-97A6-6487E450C92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B927D3-D766-4D53-9870-15A7184E4C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FE202A-E068-4ECE-B61D-230EFF0E60B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B43E22F-D894-4763-BF55-C9B77911C8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4218D36C-CCE7-443B-842B-AA1A2C865734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "3311565E-3971-416B-AC9C-6CF9F4EF0F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC4250E-E638-4015-B5EF-7B5405F7FBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B7AA6F-9918-4356-894C-72833B791201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB76FFE-CB54-4A5B-B8FF-02B1A5D55D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.60:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA48444-F998-425B-896A-CE9276869BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9BFC45-39DF-47A6-B013-4299D2A0FB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "177B7245-4E8F-44E7-BF34-43939DD75AE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34135",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/964/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/964/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/964/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/964/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/964/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0586",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/964/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-16T19:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in DFLabs PTK 1.0.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML by providing a forensic image containing HTML documents, which are rendered in web browsers during inspection by PTK.  NOTE: the vendor states that the product is intended for use in a laboratory with \"no contact from / to internet.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en DFLabs PTK v1.0.0 hasta v1.0.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección al proporcionar una imagen forense que contenga documentos HTML, que son visualizados en un navegador web durante la inspección por PTK. NOTA: el vendedor expone que el producto está previsto para su uso en un laboratorio \"sin contacto desde/hacia Internet\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dflabs:ptk:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBFB91D9-2A63-4693-B945-6657CBB3C8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dflabs:ptk:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7788956-AF55-4AE2-AD75-1E862ED0DF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dflabs:ptk:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F021F40-6D3C-4577-B0F6-1D53A5836CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dflabs:ptk:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C34A4D7-A2DC-4FFC-8F31-A5EB9B297C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dflabs:ptk:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD0A3FF-7218-4CE9-9F0E-A68D1B3D7A07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ptk.dflabs.com/faq.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://ptk.dflabs.com/security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/845747",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/RGII-7Q4GBJ",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ptk.dflabs.com/faq.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://ptk.dflabs.com/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/845747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/RGII-7Q4GBJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-16T19:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in DFLabs PTK 1.0.0 through 1.0.4 allow remote attackers to execute arbitrary commands in processes launched by PTK's Apache HTTP Server via (1) \"external tools\" or (2) a crafted forensic image."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en DFLabs PTK v1.0.0 hasta v1.0.4 permite a atacantes remotos ejecutar código de su elección en los procesos lanzados por el Apache HTTP Server de PTK mediante (1) \"herramientas externas\" o (2) una imagen forense manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dflabs:ptk:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBFB91D9-2A63-4693-B945-6657CBB3C8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dflabs:ptk:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7788956-AF55-4AE2-AD75-1E862ED0DF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dflabs:ptk:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F021F40-6D3C-4577-B0F6-1D53A5836CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dflabs:ptk:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C34A4D7-A2DC-4FFC-8F31-A5EB9B297C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dflabs:ptk:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD0A3FF-7218-4CE9-9F0E-A68D1B3D7A07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ptk.dflabs.com/faq.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://ptk.dflabs.com/security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/845747",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/RGII-7Q4GBJ",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ptk.dflabs.com/faq.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://ptk.dflabs.com/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/845747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/RGII-7Q4GBJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-16T19:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain access via (1) the \"lampp\" default password for the \"nobody\" account within the included ProFTPD installation, (2) a blank default password for the \"root\" account within the included MySQL installation, (3) a blank default password for the \"pma\" account within the phpMyAdmin installation, and possibly other unspecified passwords.  NOTE: this was originally reported as a problem in DFLabs PTK, but this issue affects any product that is installed within the XAMPP environment, and should not be viewed as a vulnerability within that product. NOTE: DFLabs states that PTK is intended for use in a laboratory with \"no contact from / to internet.\""
      }, {
        "lang" : "es",
        "value" : "XAMPP instala varios paquetes con contraseñas predeterminadas no confiables, lo que facilita a los atacantes remotos obtener acceso por medio de (1) la contraseña predeterminada \"lampp\" para la cuenta \"nobody\" dentro de la instalación ProFTPD incluida, (2) una contraseña predeterminada en blanco para la cuenta \"root\" dentro de la instalación MySQL incluida, (3) una contraseña predeterminada en blanco para la cuenta \"pma\" dentro de la instalación de phpMyAdmin, y posiblemente otras contraseñas no especificadas. NOTA: esto se informó originalmente como un problema en DFLabs PTK, pero este problema afecta a cualquier producto que está instalado dentro del entorno XAMPP, y no debe ser visto como una vulnerabilidad dentro de ese producto. NOTA: DFLabs declara que PTK está destinado a su uso en un laboratorio sin \"no contact from / to internet\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.1:alpha:solaris:*:*:*:*:*",
            "matchCriteriaId" : "D852C7F0-6921-44FE-A87B-A8E78A05D6EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.1:beta:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "78CEFFC6-417B-4411-93A8-C22681827936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.2:alpha:solaris:*:*:*:*:*",
            "matchCriteriaId" : "04FC6977-82E8-4742-8CFE-9EC5E5511A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.2:beta:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "A2D5B075-D251-4104-86F1-4BA1FF7EC31C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.3:-:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "D56B07D0-1D3F-495A-AD76-D866EDCAE68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.3:alpha:solaris:*:*:*:*:*",
            "matchCriteriaId" : "4B3E4D15-23A8-4541-BB39-C6ACB84D7999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.4:-:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "AD23964B-A722-4F7C-A336-61A360ADFA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.4:alpha:solaris:*:*:*:*:*",
            "matchCriteriaId" : "D35CA8B9-00B4-44CD-B5BF-CCE276F0216E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.5:-:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B9ACB8C9-5980-4789-9CCE-9805906F2DED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.5:beta:solaris:*:*:*:*:*",
            "matchCriteriaId" : "DF9F9BEF-FC13-48BB-9E6E-68B7F5828CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.6:-:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "678BE4AA-6505-4A9D-9531-5A581FBA4DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.6:beta:solaris:*:*:*:*:*",
            "matchCriteriaId" : "6D1AB580-968E-4C74-AD98-7B21FC1D8F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.6.1:-:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "E3E9D24D-A10F-4249-A39B-1C0762EEF1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.6.2:-:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "A915227E-F7E4-4A8E-8E6A-473C1FC8C8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.6.3:-:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B708DBBE-F01F-4C1B-B88D-CFB0E2EF20EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.6a:-:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "35A52F08-3A3C-45BF-805E-6B3F2062D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.7:beta:solaris:*:*:*:*:*",
            "matchCriteriaId" : "D667FE7B-9C1A-49D9-87C2-F7AC02F84C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.7.0:-:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "1388121F-3F5A-494C-91E9-A64B24F64B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.7.1:-:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "D49CD506-F56C-41A5-89C1-A3D43F8EB162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.7.2:-:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "56FD60B1-B834-496C-A44C-55AD27B5D025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.7.3:-:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "294BBC24-7AB9-4F03-9AF3-439333640E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.7.4:-:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "9EF76E73-830A-4116-8E91-A3EE3AB2D0B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.8.1:-:solaris:*:*:*:*:*",
            "matchCriteriaId" : "15C42672-5DB6-4DB7-BCA6-AA6BFF06FC65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.8.2:-:solaris:*:*:*:*:*",
            "matchCriteriaId" : "881F9C72-A00F-48DC-ACB1-864F6C780325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.9:-:solaris:*:*:*:*:*",
            "matchCriteriaId" : "22CF20F2-6F81-417E-A5ED-339BEFF17866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:0.9:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9BAEB9A5-52CA-456A-AC86-8C8A1DD796CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "B5BE1F44-BC2F-42E2-B767-AA68EF6A099C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.0.1:-:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "595B32FD-012E-4C8E-8551-9C34BA3B1F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C94F02B3-F069-421C-969F-CB07C03691CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.2:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "521DDEA7-67AB-4F15-B01D-B3B27323F790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "88AEFD99-5859-43B4-A063-7ACE2539799A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.3:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "1FCF3544-ED63-4093-9FF8-6D935FA41DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "00D8EC46-23B9-4C8E-8BDD-B33591D9953E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "518A38DF-D65C-4413-9562-F8BCEE6A7DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "753252BB-CD66-4B66-BB2F-87443A332DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.2:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "42A7210B-429F-4768-B500-88E4DAC38883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9BCC1009-E28C-40B2-B12F-CF0FB653A6F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.3:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "2E92F057-5D2B-48BA-8888-C24694E3F976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FD01B77C-5899-49DB-90B2-17D37F26E3D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.4:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "692792A8-5EF6-4938-AA73-1E496E646FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "EF035291-21D1-42C9-84F7-9623AACDE2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.5:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "6D416297-CD18-4069-8FBB-BA31D268D7BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D80F49AC-E95E-45EF-8053-EC1B68E3B897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.6:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "D4FF050C-B90B-48C6-A159-DBBC7DF727F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.6:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DD43FE64-CEB5-4F9E-93D1-FD0D1183D9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.7:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "00D41D08-45E5-4A6F-84C1-60105950DFBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.7:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5E428F45-0EF4-4CE6-A6E9-A6D4D649DB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.8:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "1C1B89C2-8900-4715-BF68-77992EC03965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.8:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E98A18D2-02FD-4FEC-8A95-945E216D2B06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.9:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "0F848630-852D-49CA-B503-52D128E15737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.9:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "326D9976-BF09-41A8-9FDA-1E708913F828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.10:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "E44CFC4F-A390-4479-8900-8BFED1A4BF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.10:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F498C376-5DE2-4CF0-86CB-04817540196F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.11:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "A52BCC2A-E627-4953-A3BA-00344BA6D86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.11:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "245C0C32-0D61-421B-AD96-5DDBAF3CAEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.12:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "3B39EA8B-5A4E-4CB2-AE1C-51698C678F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.12:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "4ABD7A7F-933E-4801-BEC1-828D4D164D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.13:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "19CFEB48-760D-4C7A-BF02-BEE37BCC5A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.13:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "409EDE80-5401-4D2C-81B7-E902AF2BC05D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.14:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "0D823D61-D4E3-46CA-8DD0-AA7165DBD625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.14:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF84DEF8-FE14-4542-9F12-8E7E8B2199C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.15:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "2169A052-897D-415B-8E64-EFF052FB4E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.15:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "EC2D3C65-85A6-4B6F-B96A-292F01EE89C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.16:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "513F226A-C9A6-4D6A-A9B3-A1B52B3CDFE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.4.16:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "B3F8A76A-8BFF-455E-93EF-9D1D1816A628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.5:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "670147E6-4A2F-491D-96B9-15F7CE0F623E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5E2BE53B-E413-4ADF-88E2-0E18951A29FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.5.1:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "D2130A2C-5983-4F36-9D35-59BD98CD12A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.5.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "14EDDE9C-1571-4015-8D93-277DA5E71B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.5.2:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "0478D781-3A56-46E2-92C7-625D36E81FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.5.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DE908119-F86C-4C4D-B997-8FF8B4FB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.5.3:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "B3120206-E5DE-4068-BED4-7AF420A10848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.5.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "A6D45009-6224-4EDA-A615-BE31C4F03CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.5.4:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "6DF4FF2F-DC67-4A6A-9559-83132DD10BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.5.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D35F8989-2793-4A55-8B66-E10CB3A6ABE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.5.4a:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "3559622C-545E-4637-8EF9-4B8D988BC2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.5.4a:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FF1B3B47-903A-4FE9-ABE9-794AF765B922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.5.5:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "8BACDCE8-992B-4A22-9F40-19EEA0C1A786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.5.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "98BAC01C-FDDC-466A-86ED-860F63F37C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.5.5a:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "4B59F9AA-F1ED-49FE-8111-0EBCB0790552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "45134D13-D489-469F-9A3A-8D4BA70FB219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5C9E3E23-8822-457A-955E-33945AF34DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.0a:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "68D8BBFF-D1E0-46FB-82D0-D3C508225C37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.1:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "3FE71F80-806D-4DB5-8375-4D24DA1D32FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5BEEC481-A24C-43CE-8F21-E8EDC2F85841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.2:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "97B4524A-CBDF-4601-85F3-13681C13F610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "37A8E8F9-97EC-45B9-9045-D86CB53D828D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.3:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "4AC0109B-C81A-4CF5-83BF-4E44D3C29F23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "76F1A3F2-2F18-4A0C-98D4-5202BB0E527E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.3a:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "8EE9D235-0C16-45C8-AA45-8097CB4A963A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.3a:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C6206F6B-4469-4FFE-A6C8-C8FA261DFDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.3b:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "8C7BC6E9-1C71-4CA5-8AFD-8C93537FF9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.4:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "7F199E65-F2A5-47F0-B92D-8D538000D9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "89A9AC2E-4A66-4D4C-AF17-70AB3217CA81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.5:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "2A0475AF-FA3D-4A34-8542-B11E130C4E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "29C62C67-FD02-4367-BF96-1F5DFE435AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.5a:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "8E7EBE1D-0FEC-4ADD-AB8C-D67A6CB57922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.6:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "42C6F2F6-C596-4647-B6C3-ABCEF6A7C890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.6:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "B2D29AA5-0BF4-46C6-8D6D-B584F041788E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.6a:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0174D79A-2341-44D4-B7EA-A14A38F8AF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.7:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "EDBC5972-7BD9-4C90-91A7-7D4811857019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.7:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "19A397CD-815D-4207-ABDB-67D0AAD8D750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.8:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "391FA876-2CB5-47F6-879E-F1B3C2EF058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.6.8a:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "A3486C4C-995A-425C-9A57-2E2A78AACADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.7:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "BAF988E9-F7E6-4246-A5AF-8A68BA8C300C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.7:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "6AABB31F-4389-4D1B-80AD-2B99BCE159AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.7.1:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "ABFA800A-38C7-4C89-BE56-11929AE7E36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.7.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2B0A5ED3-D7B5-4B7C-B84B-EF0174F7D904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:development:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F007A84B-F0F1-4DE2-9256-BA0A5D84B80E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ptk.dflabs.com/security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.apachefriends.org/en/faq-xampp-linux.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debianhelp.co.uk/xampp.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/developerworks/linux/library/l-xampp/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ptk.dflabs.com/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.apachefriends.org/en/faq-xampp-linux.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debianhelp.co.uk/xampp.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/developerworks/linux/library/l-xampp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-17T17:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests."
      }, {
        "lang" : "es",
        "value" : "PostgreSQL en versiones anteriores a 8.3.7, 8.2.13, 8.1.17, 8.0.21 y 7.4.25 permite a usuarios remotos autenticados provocar una denegación de servicio (consumo de pila y caída) desencadenando un fallo en la conversión de un mensaje de error localizado en el cifrado para un cliente especificado, como se demuestra usando peticiones de conversión de codificación no coincidentes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4394564D-131D-41C8-AE3A-BFF44779F27B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CD7F8CA-09B3-4038-B8B0-2D62A77F2478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B903334-2F67-4725-8277-6913E03BEFC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8C96F7-7F85-4E47-A05F-15E3C70AF583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74857259-30C7-422D-A24D-BE1E33F09466"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.postgresql.org//pgsql-bugs/2009-02/msg00176.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.postgresql.org/pgsql-bugs/2009-02/msg00172.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134124585221119&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34453",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35100",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-258808-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020455.1-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/11/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.postgresql.org/about/news.1065",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1067.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503598/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34090",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0767",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1316",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=488156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00810.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00843.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.postgresql.org//pgsql-bugs/2009-02/msg00176.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.postgresql.org/pgsql-bugs/2009-02/msg00172.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134124585221119&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-258808-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020455.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/11/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.postgresql.org/about/news.1065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503598/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=488156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00810.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00843.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Per: https://bugzilla.redhat.com/show_bug.cgi?id=488156\r\n\r\n\"PostgreSQL allows remote authenticated users to cause a momentary denial\r\nof service (crash due to stack consumption) when there is a failure to\r\nconvert a localized error message to the client-specified encoding.\r\nIn releases 8.3.6, 8.2.12, 8.1.16. 8.0.20, and 7.4.24, a trivial\r\nmisconfiguration is sufficient to provoke a crash.  In older releases\r\nit is necessary to select a locale and client encoding for which\r\nspecific messages fail to translate, and so a given installation may or\r\nmay not be vulnerable depending on the administrator-determined locale\r\nsetting.\r\n\r\nReleases 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 are secure against\r\nall known variants of this issue.\"",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue has been addressed in Red Hat\nEnterprise Linux 4 and 5 via:\nhttps://rhn.redhat.com/errata/RHSA-2009-1484.html\n\nand in Red Hat Application Stack v2 via:\nhttps://rhn.redhat.com/errata/RHSA-2009-1067.html",
        "lastModified" : "2009-10-08T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-17T19:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv_01 through snv_110 allows remote attackers to cause a denial of service (loss of incremental propagation requests to slave KDC servers) via unknown vectors related to the master Key Distribution Center (KDC) server."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Kerberos Incremental Propagation en Solaris 10 y OpenSolaris snv_01 hasta snv_110 permite a atacantes remotos provocar una denegación de servicio (perdida de peticiones de propagación incremental a servidores KDC esclavos) a través de vectores desconocidos relacionados con el servidor maestro Key Distribution Center (KDC)"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34298",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-249926-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-102.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0741",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-249926-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-102.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-17T19:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun OpenSolaris snv_39 through snv_45, when running in 64-bit mode on x86 architectures, allows local users to cause a denial of service (hang of UFS filesystem write) via unknown vectors related to the (1) ufs_getpage and (2) ufs_putapage routines, aka CR 6442712."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Sun OpenSolaris snv_39 hasta snv_45, cuando se ejecuta en modo 64-bit sobre arquitecturas x86, permite a usuarios locales provocar una denegación de servicio (cuelgue en la escritura en el sistema de archivos UFS) a través de vectores desconocidos relacionados con las rutinas (1) ufs_getpage y (2) ufs_putapage, también conocido como CR 6442712.\r\n\r\n\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254628-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-103.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0742",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254628-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-103.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-17T19:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Solaris 10 on SPARC sun4v systems, and OpenSolaris snv_47 through snv_85, allows local users to cause a denial of service (hang of UFS filesystem write) via unknown vectors related to the (1) ufs_getpage and (2) ufs_putapage routines, aka CR 6425723."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Sun Solaris 10 en SPARC sun4v systems, y OpenSolaris snv_47 hasta snv_85, permite a usuarios locales provocar una denegación de servicio (cuelgue en la escritura en el sistema de archivos UFS) a través de vectores desconocidos relacionados con las rutinas 1) ufs_getpage y (2) ufs_putapage, también conocido como CR 6425723."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254628-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-103.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0742",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254628-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-103.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-17T19:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the UFS filesystem functionality in Sun OpenSolaris snv_86 through snv_91, when running in 32-bit mode on x86 systems, allows local users to cause a denial of service (panic) via unknown vectors related to the (1) ufs_getpage and (2) ufs_putapage routines, aka CR 6679732."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la funcionalidad del sistema de ficheros UFS en Sun OpenSolaris snv_86 through snv_91, cuando se ejecuta en modo 32-bit sobre sistemas x86, permite a usuarios locales provocar una denegación de servicio (causando un panic) a través de vectores relacionados con las rutinas (1) ufs_getpage and (2) ufs_putapage, también conocido como CR 6679732."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:build_snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2DFA1F8F-6718-4E66-A70A-2B4B46F41A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254628-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-103.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254628-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-103.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-17T21:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the media manager in Nucleus CMS before 3.40 allows remote attackers to read arbitrary files via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el administrador de medios en Nucleus CMS anterior a v3.40 permite a atacantes remotos leer ficheros de su elección a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA33C047-9ABF-40EB-A3DF-F717AB7153CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.40",
            "matchCriteriaId" : "CE3CDB80-4346-4CE6-A4D8-8D842494920E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303D317F-EDB3-4388-A18E-F129DCB5CB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:3.0_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EFCA1BC-8955-4A99-96EB-9AAA81CF69E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:3.0_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA166822-CE86-4C59-AA10-6759162414A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3832414B-F057-4D74-A5B6-310B030597DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E14B24DC-A0C5-4DEB-B924-AF75CEA249D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "994775CD-ED61-4482-81E8-D4BDF23F379D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B8FEF97-08A4-46C1-A9CA-9C3C5E57082E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7CE897-CBCA-465D-A521-C66415AF9A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7422663-20B1-4C28-98D6-89472D1CD5B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34180",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nucleuscms.org/index.php/item/index.php/item/3051",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nucleuscms.org/index.php/item/index.php/item/3051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-17T21:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 4.2.2 and 4.3.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) smime.php, (2) pgp.php, and (3) message.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Horde IMP anterior a v4.2.2 y v4.3.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores sin especificar (1) smime.php, (2) pgp.php, y (3) message.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde_imp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "20B7AE19-8434-4059-B08A-8ED78625CB63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde_imp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.3",
            "matchCriteriaId" : "D64133DD-358E-49AA-BCAF-974223615D7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde_imp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.4",
            "matchCriteriaId" : "09467434-4D19-4BB8-A03C-B534C0A577CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde_imp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.4",
            "matchCriteriaId" : "62422098-04CA-430A-92C4-5EF9C45BF66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde_imp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.5",
            "matchCriteriaId" : "E4B0D289-30ED-4392-9744-E1B7E251DC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde_imp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.1",
            "matchCriteriaId" : "5BC61AC5-A795-466E-9CC1-D512D937241B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde_imp:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10B4B13B-87E1-4F61-B877-DADEB3EE34B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.301.2.3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000484.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000485.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33719",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.301.2.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000484.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000485.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-17T21:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the tag cloud search script (horde/services/portal/cloud_search.php) in Horde before 3.2.4 and 3.3.3, and Horde Groupware before 1.1.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la secuencia de comandos de búsqueda de nube de etiquetas (horde/services/portal/cloud_search.php) en Horde anterior a v3.2.4 y v3.3.3, y Horde Groupware anterior a v1.1.5, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.1",
            "matchCriteriaId" : "8243290A-4C75-4390-A226-524F87EC9C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.2",
            "matchCriteriaId" : "24B5DA5A-695F-4062-8E95-A620FE43187F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D745ADA6-7790-4680-896D-1644820459C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E69BF-8F4C-4C15-BC03-97EE3C61EBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370B7205-5813-4B57-8E90-7DDC2B6A6EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde_groupware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "92954132-BCFF-42A6-9DC3-07895FED14B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde_groupware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "E87F9E81-5AED-4016-AC05-00F6BB763C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde_groupware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.3",
            "matchCriteriaId" : "1446CC3A-E773-4D05-9A0D-934E385A3BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde_groupware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.4",
            "matchCriteriaId" : "7BB7D857-925F-453E-9AB9-11487A439B52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000482.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000483.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000486.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33695",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33491",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000482.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000483.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000486.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-17T21:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Horde_Image driver name."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en framework/Image/Image.php en Horde anterior a v3.2.4 y v3.3.3 y Horde Groupware anterior a v1.1.5 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de secuencias de salto de directorio en el nombre Horde_Image driver."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AD25F6-4269-47BD-A1ED-C75547EB5ED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D745ADA6-7790-4680-896D-1644820459C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E69BF-8F4C-4C15-BC03-97EE3C61EBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370B7205-5813-4B57-8E90-7DDC2B6A6EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BE3470C-2BDA-4246-94C4-EA0C79913ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4B8F4A-EC73-4F5D-9468-D36811C9EC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde_groupware:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADFA64E-597A-4946-B175-624B983EC48E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde_groupware:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A253650-5875-4F7B-A9F0-1F70E44F21FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde_groupware:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E3210B2-4111-44C6-A2B4-4C4930BE09B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:horde_groupware:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DCD443-05B4-40E9-ABD9-E27389B0575E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000482.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000483.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000486.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33695",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/8077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000482.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000483.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000486.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/8077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-17T22:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the administrative interface in Dotclear before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Dotclear anterior a v2.1.5 permite a atacantes inyectar secuencias de comandos web o HTML de su elección a través de vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.4",
            "matchCriteriaId" : "B673A5B1-A3EE-4CCE-ACD7-08D3FA68E2CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94896556-5D43-4C54-A49C-301511B69EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7B92DB-62E4-4F4F-BC57-2C5F646C13CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49EEF727-A23D-47AE-BE4E-238290246BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F6A6A-717B-4B94-B4D0-26C2BAC1E66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED66191-F39E-4D78-9B3D-1A20FD2914B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AFFAE76-D4DE-4F4C-B165-736EA01B30EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58D04A0-17E9-46E5-9C18-502746371365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAAF4270-05C5-487F-8A30-A96C4E943621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F73A6E-6D4F-45D8-98AC-73ABFF55CDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:2.0:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1A3960-F1D6-40FF-8E42-B330B347A686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:2.0:beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EE6B1E-3D40-4D61-B5D5-4D9B8A6FAD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:2.0:beta_4:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6BAC55-C04C-4174-965C-A590BDA7748F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:2.0:beta_5.2:*:*:*:*:*:*",
            "matchCriteriaId" : "AB76F976-A236-484A-98BA-269BAF196D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:2.0:beta_5.4:*:*:*:*:*:*",
            "matchCriteriaId" : "30451C6F-53FA-4FDD-9ED0-849C099093C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:2.0:beta_6:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E4C138-8CD6-4F8B-B45E-FC62FF225358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:2.0:beta_7:*:*:*:*:*:*",
            "matchCriteriaId" : "18C6F78A-10EE-4B7E-83F0-51386519100A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9AD6711-6C1D-4DB3-8BB5-4A6CE7234D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "975A3BEA-86E6-4366-91B7-94B7AE709927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E64EFF2-3A11-4B05-9AC8-C86C05183B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C53E97-A2A5-4819-B547-8B1784BE27A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49E0B5D-E551-4D94-995D-B9C015617FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938B7159-8C33-4810-B788-77A7405CE841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CAD49D-1A73-4C6F-9509-1F58EC172CC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dotclear.org/blog/post/2009/02/05/Dotclear-2.1.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34181",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0636",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dotclear.org/blog/post/2009/02/05/Dotclear-2.1.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-18T02:00:00.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en ejabberd anterior a v2.0.4 permite a atacantes inyectar secuencias de comandos web o HTML de su elección a través de vectores desconocidos relacionados con enlaces y MUC logs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.3",
            "matchCriteriaId" : "E5004977-E0B9-4CC0-B53D-67691C03E779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666E7908-0690-4DFE-8141-07F2D15E5404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFFF6D6-C749-4D07-85A5-E6D343FC4243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6EE1B8F-0FDB-4E00-A15A-C107DCDB93BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E7EDE8-298E-444E-A624-0202705C516C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81B5565-94A8-4F03-A846-3C3F842B909D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC959279-43D7-4CB0-A845-25D4DE92E06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:1.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46528149-3D63-4E68-9209-DAFA55B3A855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:1.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D5B249-4D6D-4B15-9348-2C7C0A0B82E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2425925-5ACB-4BE4-9C98-F028647AAF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB7AF867-ED0A-428A-A53D-E20B733EBAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4409695C-2A6C-4D27-9DB9-D0BD653487E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78A11B2-2110-4372-8579-DDA24691C18A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:2.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "906C248B-FFD7-4EF0-A181-BACE05B324AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:2.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "36B7CC0A-CD37-4E31-9A99-41E59EB46E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:2.0.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F401CBE2-80FC-4D64-A21B-5966330E9C08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0CBC37-5A98-4067-93FF-6B637F9C7EDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34340",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/16/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.process-one.net/en/ejabberd/release_notes/release_note_ejabberd_204",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00675.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00735.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/16/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.process-one.net/en/ejabberd/release_notes/release_note_ejabberd_204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00675.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00735.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-18T02:00:08.157",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service (OOPS) via a read with an invalid address to an inotify instance, which causes the device's event list mutex to be unlocked twice and prevents proper synchronization of a data structure for the inotify instance."
      }, {
        "lang" : "es",
        "value" : "La función inotify_read en el kernel de Linux versiones 2.6.27 hasta 2.6.27.13, 2.6.28 hasta 2.6.28.2 y 2.6.29-rc3, permite a los usuarios locales causar una denegación de servicio (OOPS) por medio de una lectura con una dirección no válida en una instancia inotify, lo que causa que la exclusión mutua de la lista de eventos del dispositivo se desbloquee dos veces e impida la sincronización apropiada de una estructura de datos para la instancia inotify."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.27",
            "versionEndIncluding" : "2.6.27.13",
            "matchCriteriaId" : "959E86DD-3F82-4BFC-9190-B63FC5B79507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.28",
            "versionEndIncluding" : "2.6.28.2",
            "matchCriteriaId" : "3421BB9A-F9FC-4BDD-B72B-1DF16DA121A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "92058AE0-2E52-4304-B4C6-871AB1CE42DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-kernel&m=123337123501681&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/06/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/18/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/19/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33624",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=488935",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49331",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=123337123501681&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/06/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/18/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/19/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=488935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5, or Red Hat Enterprise MRG.",
        "lastModified" : "2009-04-15T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-18T02:00:08.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service (infinite loop) via \"corrupt votes.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Tor anterior a v0.2.0.34 permite a atacantes provocar una denegación de servicio (bucle infinito) a través de \"votos corruptos\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.0.33",
            "matchCriteriaId" : "2C390EF7-1A08-4BAD-8DA5-8402AA2AB7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5CEE9D-FE82-4E87-AEA0-9A2D8186E522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3729DD-BFCC-4293-9DE7-B02588753F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5D08533D-A187-4C0E-AD4C-41061FB42413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7EADACB1-31D9-4297-A1C3-7F281A0AF154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "D560434E-2636-4C7B-AC6B-A5952123B8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3334C5-92F3-403D-9116-4559D18F677F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.10:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "96BCAA3F-EF7F-457B-8468-A736527A4F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.11:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4D706AEC-0814-4706-BA4C-6FED01AA4D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.12:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "53FCE242-9B64-4D71-BBB3-8085F7FBA8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.13:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FD6A26-7219-4958-B959-C6365193F839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.14:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "F6307EF6-1449-43B2-A3B8-DF0EA3A6985F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.15:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78C0FF05-0E18-4C48-BE3E-FBC881F468D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.16:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C32845-BAB4-422A-B1BA-568793B4E935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.17:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "0159DCD6-3C52-4B4C-82EC-4E699366E917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.18:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "9E245295-3EF6-4E6D-8D44-D45B8A198E61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.19:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "38DA0AF4-C053-4EEC-AA37-5089C9E6C778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.20:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8EE453-2FAC-4927-AC89-C92B2A947E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.21:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE434E6-63E1-44B0-AA79-BBDABC040234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.22:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC742E5-CA75-43E4-BCD5-54B712CF205E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.23:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "DADA7B77-7DBE-4A62-BE4A-83975D4D7311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.24:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "30D57B03-30FE-48E8-B6BA-77538F067D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.25:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E6BD04-775B-4EDE-BF3E-2896BB59F895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.26:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7900A51A-4E1E-412C-945E-DAB21078BD4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.27:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2B68CEAF-2287-4C1B-A147-DD718E7C6418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.28:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3CE396-518B-465F-AB91-6572601F0C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.29:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B70887CA-5A54-410D-B9B4-84EE31899FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.30:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C538F301-D9A9-48CC-AB77-AD073935D1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.31:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC42FE4-48BE-4EF2-900F-401CF34F113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.32:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "95E17189-F12A-4914-AEDC-52345D097A9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.seul.org/or/announce/Feb-2009/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/33880",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.seul.org/or/announce/Feb-2009/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/33880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0937",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-18T02:00:08.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Tor anterior a v0.2.0.34 permite replicaciones de directorio que provocan una denegación de servicio a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.0.33",
            "matchCriteriaId" : "2C390EF7-1A08-4BAD-8DA5-8402AA2AB7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5CEE9D-FE82-4E87-AEA0-9A2D8186E522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3729DD-BFCC-4293-9DE7-B02588753F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5D08533D-A187-4C0E-AD4C-41061FB42413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7EADACB1-31D9-4297-A1C3-7F281A0AF154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "D560434E-2636-4C7B-AC6B-A5952123B8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3334C5-92F3-403D-9116-4559D18F677F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.10:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "96BCAA3F-EF7F-457B-8468-A736527A4F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.11:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4D706AEC-0814-4706-BA4C-6FED01AA4D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.12:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "53FCE242-9B64-4D71-BBB3-8085F7FBA8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.13:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FD6A26-7219-4958-B959-C6365193F839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.14:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "F6307EF6-1449-43B2-A3B8-DF0EA3A6985F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.15:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78C0FF05-0E18-4C48-BE3E-FBC881F468D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.16:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C32845-BAB4-422A-B1BA-568793B4E935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.17:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "0159DCD6-3C52-4B4C-82EC-4E699366E917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.18:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "9E245295-3EF6-4E6D-8D44-D45B8A198E61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.19:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "38DA0AF4-C053-4EEC-AA37-5089C9E6C778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.20:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8EE453-2FAC-4927-AC89-C92B2A947E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.21:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE434E6-63E1-44B0-AA79-BBDABC040234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.22:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC742E5-CA75-43E4-BCD5-54B712CF205E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.23:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "DADA7B77-7DBE-4A62-BE4A-83975D4D7311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.24:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "30D57B03-30FE-48E8-B6BA-77538F067D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.25:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E6BD04-775B-4EDE-BF3E-2896BB59F895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.26:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7900A51A-4E1E-412C-945E-DAB21078BD4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.27:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2B68CEAF-2287-4C1B-A147-DD718E7C6418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.28:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3CE396-518B-465F-AB91-6572601F0C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.29:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B70887CA-5A54-410D-B9B4-84EE31899FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.30:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C538F301-D9A9-48CC-AB77-AD073935D1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.31:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC42FE4-48BE-4EF2-900F-401CF34F113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.32:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "95E17189-F12A-4914-AEDC-52345D097A9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.seul.org/or/announce/Feb-2009/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/33880",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.seul.org/or/announce/Feb-2009/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/33880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-18T02:00:08.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit node crash) via \"malformed input.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Tor anterior a v0.2.0.34 permite replicaciones de directorios que provocan una denegación de servicio (caída de nodo de salida) a través \"entrada malformada\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.0.33",
            "matchCriteriaId" : "2C390EF7-1A08-4BAD-8DA5-8402AA2AB7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5CEE9D-FE82-4E87-AEA0-9A2D8186E522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3729DD-BFCC-4293-9DE7-B02588753F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5D08533D-A187-4C0E-AD4C-41061FB42413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7EADACB1-31D9-4297-A1C3-7F281A0AF154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "D560434E-2636-4C7B-AC6B-A5952123B8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3334C5-92F3-403D-9116-4559D18F677F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.10:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "96BCAA3F-EF7F-457B-8468-A736527A4F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.11:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4D706AEC-0814-4706-BA4C-6FED01AA4D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.12:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "53FCE242-9B64-4D71-BBB3-8085F7FBA8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.13:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FD6A26-7219-4958-B959-C6365193F839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.14:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "F6307EF6-1449-43B2-A3B8-DF0EA3A6985F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.15:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78C0FF05-0E18-4C48-BE3E-FBC881F468D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.16:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C32845-BAB4-422A-B1BA-568793B4E935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.17:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "0159DCD6-3C52-4B4C-82EC-4E699366E917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.18:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "9E245295-3EF6-4E6D-8D44-D45B8A198E61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.19:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "38DA0AF4-C053-4EEC-AA37-5089C9E6C778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.20:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8EE453-2FAC-4927-AC89-C92B2A947E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.21:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE434E6-63E1-44B0-AA79-BBDABC040234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.22:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC742E5-CA75-43E4-BCD5-54B712CF205E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.23:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "DADA7B77-7DBE-4A62-BE4A-83975D4D7311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.24:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "30D57B03-30FE-48E8-B6BA-77538F067D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.25:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E6BD04-775B-4EDE-BF3E-2896BB59F895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.26:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7900A51A-4E1E-412C-945E-DAB21078BD4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.27:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2B68CEAF-2287-4C1B-A147-DD718E7C6418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.28:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3CE396-518B-465F-AB91-6572601F0C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.29:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B70887CA-5A54-410D-B9B4-84EE31899FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.30:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C538F301-D9A9-48CC-AB77-AD073935D1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.31:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC42FE4-48BE-4EF2-900F-401CF34F113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.32:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "95E17189-F12A-4914-AEDC-52345D097A9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.seul.org/or/announce/Feb-2009/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/33880",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.seul.org/or/announce/Feb-2009/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/33880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-18T02:00:08.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to \"Spec conformance,\" as demonstrated using 192.168.0."
      }, {
        "lang" : "es",
        "value" : "Tor anterior a v0.2.0.34 trata direcciones IPv4 incompletas como validas, lo que tiene un impacto desconocido y vectores de ataque relacionados con \"Spec conformance,\" como se ha demostrado utilizando 192.168.0."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.0.33",
            "matchCriteriaId" : "2C390EF7-1A08-4BAD-8DA5-8402AA2AB7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5CEE9D-FE82-4E87-AEA0-9A2D8186E522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3729DD-BFCC-4293-9DE7-B02588753F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5D08533D-A187-4C0E-AD4C-41061FB42413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7EADACB1-31D9-4297-A1C3-7F281A0AF154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "D560434E-2636-4C7B-AC6B-A5952123B8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3334C5-92F3-403D-9116-4559D18F677F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.10:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "96BCAA3F-EF7F-457B-8468-A736527A4F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.11:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4D706AEC-0814-4706-BA4C-6FED01AA4D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.12:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "53FCE242-9B64-4D71-BBB3-8085F7FBA8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.13:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FD6A26-7219-4958-B959-C6365193F839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.14:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "F6307EF6-1449-43B2-A3B8-DF0EA3A6985F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.15:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78C0FF05-0E18-4C48-BE3E-FBC881F468D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.16:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C32845-BAB4-422A-B1BA-568793B4E935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.17:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "0159DCD6-3C52-4B4C-82EC-4E699366E917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.18:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "9E245295-3EF6-4E6D-8D44-D45B8A198E61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.19:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "38DA0AF4-C053-4EEC-AA37-5089C9E6C778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.20:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8EE453-2FAC-4927-AC89-C92B2A947E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.21:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE434E6-63E1-44B0-AA79-BBDABC040234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.22:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC742E5-CA75-43E4-BCD5-54B712CF205E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.23:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "DADA7B77-7DBE-4A62-BE4A-83975D4D7311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.24:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "30D57B03-30FE-48E8-B6BA-77538F067D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.25:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E6BD04-775B-4EDE-BF3E-2896BB59F895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.26:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7900A51A-4E1E-412C-945E-DAB21078BD4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.27:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2B68CEAF-2287-4C1B-A147-DD718E7C6418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.28:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3CE396-518B-465F-AB91-6572601F0C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.29:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B70887CA-5A54-410D-B9B4-84EE31899FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.30:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C538F301-D9A9-48CC-AB77-AD073935D1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.31:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC42FE4-48BE-4EF2-900F-401CF34F113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.32:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "95E17189-F12A-4914-AEDC-52345D097A9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.seul.org/or/announce/Feb-2009/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33880",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.seul.org/or/announce/Feb-2009/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-18T15:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and modify arbitrary memory locations, and cause a denial of service (application crash) or possibly have unspecified other impact, via format string specifiers in the pathname of a remote control file (aka .CHF file)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de formato de cadena en Symantec pcAnywhere antes de 12.5 SP1 permite a atacantes remotos leer y modificar localizaciones de memoria de su elección y producir una denegación de servicio (caída de la aplicación) o posiblemente tener otro efecto no especificado mediante especificadores de cadena de formato en el nombre de ruta de fichero de un fichero de control remoto (alias fichero .CHF)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.5",
            "matchCriteriaId" : "3B5D2349-8330-4DE8-8040-6FDD368EFD32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAB70F5-1B1B-426B-A1F9-6D91D0A160B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0A6A97-1EFF-41C0-AAAA-B357C4C801F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014AA70B-942F-4ADE-9EEF-4F5204438268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0BF0A19-0AAD-44B2-9B51-85A985CC40A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A496D973-4BC8-4377-8C84-8F2CB281AEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF752E6-45B4-4D6D-90F8-AA69DB5C2775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13E1710-1723-4A52-ACDC-7FC511467152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE0E3DD-23F9-4ACD-BF9D-986CE5232D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2009.03.17.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.layereddefense.com/pcanywhere17mar.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501930/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2009.03.17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.layereddefense.com/pcanywhere17mar.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501930/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-18T21:00:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders, permiten a atacantes remotos (1) imprimir documentos mediante vectores desconocidos, (2) modificar la configuración de red mediante una petición NetIPChange a hp/device/config_result_YesNo.html/config o (3) cambiar la contraseña mediante los parámetros Password y ConfirmPassword a hp/device/set_config_password.html/config."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:8100c_digital_sender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F186CB2-E079-4F2B-943F-EB8F9638C717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:9100c_digital_sender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F8D755-0208-4081-99A2-00B0779AB285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:9200c_digital_sender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F76374-8890-47D1-AD4D-B8951B08A351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:9250c_digital_sender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED8DFB7-447D-44BE-98EF-587F6A82D521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2938ACA1-A6FA-47CD-AB05-7CF9095C7850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_1500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91EBCE22-6268-4083-A045-0D05F7110384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_2500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E92501-3E8C-4E61-9B65-87A7344747E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_2500l:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16651605-4616-44F8-8401-8DD057932BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_2500lse:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADB9132-CEF5-47A0-AC21-BE6B7F89B166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_2500n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB99C79-1DB4-4545-8457-515B1F9F484B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_2500tn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B58AD8-F848-4286-8AB4-A8EA0372D5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_2605dtn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB5C6FD-9280-451B-ACF3-2C3AFC50BA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4370mfp:20081211_46.211.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F7CF651-DB8F-4748-8E87-1C0173657400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4600:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6A133B7-AEA8-4F26-8632-2CEDE9EBB66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4600dn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E71E717-E71F-495E-9D86-794BF8A094D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4600dtn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8881544-2C06-41F2-9569-C3DCEB8F175B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4600hdn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BD8FA5-17EC-4850-9970-9F472E4BE809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4650:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F03F783-0CFE-488A-A392-2866D56E5E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4700:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627B437F-2941-4689-A3D0-E0037D9CB053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4730_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12F0604C-781B-4E69-A88E-C25492CB163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_5500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE52C54-2BF9-473A-8749-FEA31A2DEAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_5550:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1218222B-AC9B-430D-8948-D72F72293B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_8500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F3C900-81E1-467C-8D70-E70CADF484CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_8550:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4DED7B-DDA5-4302-923F-95258C52CF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_9500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C77E2D0-34F7-4940-AC33-47E405006890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_9500_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A3DFCD-E5C1-4997-95D4-9DF50FE1EAAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_9500mfp:20070719_05.011.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FD2715-0ECB-42B9-8967-D8C80DEAC5C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_mfp_cm8050:-:-:edgeline:*:*:*:*:*",
            "matchCriteriaId" : "8E40ABF2-0485-47DB-92FE-FC8F630F15B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_mfp_cm8060:-:-:edgeline:*:*:*:*:*",
            "matchCriteriaId" : "E8D50F7A-2290-49A1-AB7B-F1FCD5035599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:digital_senders:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F654546-9F2E-4B1B-AAF6-54D799317C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:edgeline_printers:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A17E5A0-9342-49BD-BBD7-E8A90FC42EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322C9A6C-C3A6-4058-861C-882B68443744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1005:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA365AAC-C67A-43FE-A419-E3B5B0BAEA0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1010:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB27B7D-AAC8-4FEC-98C4-FC613E9CA36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581AB2AA-1731-4142-822A-5F40DFA2C34F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1015:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DCE831-3508-4059-9579-91DA526902B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1018:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F27B109-9BCA-4D72-A21C-B6D70F1AD7A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1018s:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF6A641-E205-4290-97E2-34A3B3E9672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1020:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FD0F5B-F181-46AC-BE66-642E4CD60FAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1020_plus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B0A4A9-60C2-4CEC-B531-50C086173DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1022:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D9690-22E6-4E89-A5A7-42B28BD043DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1022n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCA67FA-E8B9-4D9E-B0F3-58B0A1B183B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1022nw:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C09FB44-FFEE-4AB0-A2E0-C470F20733EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25D1906-E45D-465B-B481-8C9B88FF37ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1150:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25BDF8F-F1B9-4A3E-A220-E72B306CF21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1160:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04FA759-550C-4C08-BBF3-1B8F512DEBB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D562B5-09B6-4D0E-9816-4DC9C193FCBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1300:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB12831-81B7-4B6E-9D80-259A474F38E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1320:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0645FD3F-1F42-4355-8430-D2B3F8740A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D3D3A6-7594-4306-A7C1-997328468C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB3C0E33-D115-4BCB-818E-92E5655AB8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "224C6B7D-DEAF-4B0D-93BA-BC5BF9517009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69367D0-1B9A-4615-9F4A-2F76596BA8EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2200dtn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A842F761-7AC1-4FE6-9D8E-D4E812971371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2300:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB3BC003-8116-475C-8816-DCD46E0184DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2300dn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8A93AE-C3A9-4714-A6FB-C855C9F439C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2400:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89A6F96-4A4A-4877-8E95-700CBAE663CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2410:20070410_08.112.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B34898C-6B9F-4DEF-9D9E-B7BA52F95A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2420:20070410_08.112.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3029F65D-88C0-4BC4-91D6-594474F022B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2430:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F804968D-0241-4C20-BAAC-684BA46B67F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2430:20070410_08.112.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02BB1543-E25E-4F77-8F53-ADC38FE3B81D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F75D41-DFB3-4FD2-A883-BBA8964D84D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2500c:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB83B8ED-0A0A-45C2-9A4F-BF85F97C114E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2600c:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F0E663-70A4-405C-B37E-60E24DDC6383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2600n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10474D2-F8D9-40B8-8E19-4741BDA55A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_3000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4042B85B-8BA8-49C8-8C72-ED4B12D10C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_3700:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CE1760-B9BD-4002-BA5C-0AFC4A2FBFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7EBF17F-331F-42D1-AC33-C5F60FF1C865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4\\/4m:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CB43B7-7CA2-4B8A-98D9-377F615F61E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4_plus\\/m_plus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DBBC2B-C054-46AD-9ABD-249216ED513F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659DFCA6-CF7D-4982-913B-6BF1B3DC5F5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4000n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02138F3E-4F3C-4607-BBB1-98D09B3C7F41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4050:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE6DC20-0757-4CF8-AB85-265C5264630F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549105CC-BA47-4C39-8B8A-9CAC39266B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4100_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE20791A-6CDA-46D0-8149-82F7D21662BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4100mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75525D7F-A881-4199-B44D-8E2D1B4809FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4993667F-9DE8-4DC9-90B1-A6D3AB6BFB0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4200dtn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED01DD0-7485-48E8-96E1-598DA0981525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4200ln:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1BCFB30-7322-4ABE-9529-CC10DA54F752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4240:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23DD9E6F-1F64-4643-B8E5-B3CAB5F961B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4240n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42459D1C-B860-4622-BA74-C6AF5446D644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4250:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F315232A-2DBB-4BE6-AB1E-0CCB327E19E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4250:20080319_08.015.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D180CB2E-F05A-4B9C-837B-605A00086A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4300:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4B141B-3358-469D-8331-88C5924763EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4345_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ADF801E-6D02-4CDF-AA6F-9F272D341E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4345mfp:20081211_09.131.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27CB3F95-8653-4CDB-BD81-53CA6D126512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4350:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "850BE715-BC0F-4873-9A72-6AED6259FF22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4350:20080319_08.015.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B03FD53-A1CA-4BD4-A87A-520D9782CEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4350dtn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA83D8E-3D70-4021-B9FD-F97BC8C92039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4650dn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2681DAAE-9DD4-4F25-B947-C676F868B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4l\\/ml:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7085C4E6-A34F-49E6-99EE-547861A25098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4m_plus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0F639A-C9F6-41E4-83BD-8097659ABEDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4p\\/mp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B67CAF7-6CDC-4074-BE55-2D898F1CF3EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4si:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DD8C9E-1738-456D-A22C-CB0C760E3712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4v\\/mv:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A010D1-588F-4EC5-9BE2-ADA22D399D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93BAAE8B-718E-4C6D-BAED-3F435D1C66A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5\\/m\\/n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD8388-3357-435C-8430-9D6CFE52D65A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_500_plus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F132B58-AF99-4E26-BEFB-C970AC9FCBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D220CD8-FB19-424D-B223-101098BE9088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5000:r.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157C92C4-2217-4A53-B70D-16D2171E7ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5000:r.25.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776C077B-32E5-45AD-866C-9C7FBEDF9631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0F236F-7EC3-440B-8FF4-362729EF0807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5100:v.29.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29E506F-B2B1-466C-9DAA-C8DFB643F036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5100dtn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A1E2E0-6832-4DE2-B793-BC8B2F3BF431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "977F2612-D1DE-4EAD-99ED-CF6FFD1D5B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5l:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212422DE-F76F-4418-89E5-B3826047A852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5m:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78907BCD-E0C8-44A0-85B7-0B5148AA8AD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5p\\/mp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76199C42-EF30-4F0B-9D7E-5C546001888E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5si:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8D6D65-3CA2-41E8-A8F8-B7C7BC24F962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_8000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1072358B-3C6C-45EB-83B0-22833A96741A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_8100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC8DA70-8669-4522-BEF7-C4595E142467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_8150:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94DFDFD-0CEA-4EC5-8E7D-0548DCAE5563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_8150dn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24852945-2734-468C-8DC7-5C9EBF2301FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54C64CAE-6CC4-4B92-9364-F982CDF47F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9000_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0E00FE-F3DB-45C2-81AE-D7189559BD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9000mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81556F50-ED68-4774-A208-E16286BC2F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9040:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D74F55-65F6-4328-B553-2756A75B777E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9040:20080204_08.110.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA65ABF-3241-48B5-B89A-031B09B8C129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9040mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDEA0FE9-F42F-4ECC-92E4-E404545CB0CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9040mfp:20080204_08.110.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A03C331E-BCF9-4226-ACB5-4CA4C85847F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9050:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1FEDCF-C604-49B3-B748-03BE3193792E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9050:20080204_08.110.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D06ADE7A-F615-475F-A6FB-977D51C8BD3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9050_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDA57B8-2AD5-45EF-9824-E60EBFF71D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9050mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2623A6-2DA1-4877-A5D8-3C9001FDC648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9050mfp:20080204_08.110.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3919FF01-7E93-4F35-826D-542DFD6E85B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9055:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7381DEDB-71A9-4882-B9DA-AFDC31D907C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9065:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F48F4812-7441-428B-B44A-E85AC64330D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9755F699-E5F7-424C-B84A-119E19A1E413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9500mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B8D80A-5E64-4ADD-98F7-2CD913EF151B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_ii:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "502E0F4F-8103-431C-BDCD-07FAA44DB035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_iid:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F17C5B7-FFE3-4FE6-A4AD-3EABCF9FCE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_iii:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F0EC84F-57BB-44D0-A05D-67AE5CD6652B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_iiid:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DA3E91-824D-4167-9990-8CED8E247DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_iiip:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B3AA1-0D4D-418B-A36B-2B38F642F798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_iiisi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB5EE77A-D014-4366-8D5B-251D09CC2DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_iip:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040C7DA9-9FF6-4772-82D4-2ED2BE01D8C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_iip_plus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD91F67B-C52F-4AED-8E02-B955F495BD8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m1522n_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8D0A1B-4F76-4403-B18E-464C33169CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m3027_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE95CC32-07DA-473D-BDAC-347B137E582A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m3035_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC3DE1F-AA79-4FE8-B634-368BDF14C0B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m4345_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E2ECB0-2335-4ABD-8326-CF935E8C4C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m5025_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C69873-A989-4B66-8D28-67A260EC7A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m5035_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEEA9582-8E01-41D3-A4D0-FA7BB2C98CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46628FAF-9819-4A6F-93BD-39E0650930E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1005:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C243A3-FA2C-414D-9530-CF50E65A6D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1006:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169C56AB-5565-4A4A-B298-B1FAC40D23CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1007:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931B6ACB-81B3-4406-834B-DFA85FC8871A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641D5E03-1FCD-4404-A37B-586262DCF863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1009:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F8AA6A9-855C-436C-AE9D-217598516DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DEDFF4-B9B1-4B31-BE32-1E44C19A5D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1505:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C4D0A5-B51C-4122-8BB7-705474A1E709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1505n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "049D53B4-920A-4BFC-A007-1DF3648C37A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AE3B2A8-ABE6-464B-B9E2-E1122EDEA3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p2010:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F52C858-CFB9-4CE0-9C3C-3672F03B1850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p2015:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "218E5994-4BF9-4B5F-ABAE-0AB85495B8C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p2030:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FCB0F1-6395-4B9E-99C6-9C919C62EB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p2050:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF93B01-EEEE-4ACF-B7C0-55F17996543E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p3000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6E5576-6764-4534-A405-67B01F4018FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p3005:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BED71C7-C0A7-4934-9930-1EC7C5A96584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p4010:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612ACC73-A274-46B1-AEC6-9EBAF1E38D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p4014:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "222D062D-1F47-4E21-9173-A5AFEEF66482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p4015:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFBC095-00B6-48D7-AC0A-C172DD3A550B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p4500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D468AA7E-BA93-4523-B6AA-B542E714A17F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p4510:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87FDEEF-E459-4C0E-AA61-6DE9E2D73234"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.louhinetworks.fi/advisory/HP_20090317.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501884/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.louhinetworks.fi/advisory/HP_20090317.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501884/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-18T21:00:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers to obtain access."
      }, {
        "lang" : "es",
        "value" : "El HP Embedded Web Server (EWS) en HP LaserJet Printers, Edgeline Printers, y Digital Senders no tiene contraseña de administración por defecto, lo que facilita a atacantes remotos el obtener acceso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:8100c_digital_sender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F186CB2-E079-4F2B-943F-EB8F9638C717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:9100c_digital_sender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F8D755-0208-4081-99A2-00B0779AB285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:9200c_digital_sender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F76374-8890-47D1-AD4D-B8951B08A351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:9250c_digital_sender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED8DFB7-447D-44BE-98EF-587F6A82D521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2938ACA1-A6FA-47CD-AB05-7CF9095C7850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_1500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91EBCE22-6268-4083-A045-0D05F7110384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_2500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E92501-3E8C-4E61-9B65-87A7344747E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_2500l:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16651605-4616-44F8-8401-8DD057932BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_2500lse:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADB9132-CEF5-47A0-AC21-BE6B7F89B166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_2500n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB99C79-1DB4-4545-8457-515B1F9F484B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_2500tn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B58AD8-F848-4286-8AB4-A8EA0372D5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_2605dtn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB5C6FD-9280-451B-ACF3-2C3AFC50BA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4370mfp:20081211_46.211.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F7CF651-DB8F-4748-8E87-1C0173657400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4600:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6A133B7-AEA8-4F26-8632-2CEDE9EBB66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4600dn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E71E717-E71F-495E-9D86-794BF8A094D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4600dtn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8881544-2C06-41F2-9569-C3DCEB8F175B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4600hdn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BD8FA5-17EC-4850-9970-9F472E4BE809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4650:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F03F783-0CFE-488A-A392-2866D56E5E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4700:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627B437F-2941-4689-A3D0-E0037D9CB053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4730_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12F0604C-781B-4E69-A88E-C25492CB163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_5500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE52C54-2BF9-473A-8749-FEA31A2DEAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_5550:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1218222B-AC9B-430D-8948-D72F72293B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_8500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F3C900-81E1-467C-8D70-E70CADF484CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_8550:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4DED7B-DDA5-4302-923F-95258C52CF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_9500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C77E2D0-34F7-4940-AC33-47E405006890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_9500_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A3DFCD-E5C1-4997-95D4-9DF50FE1EAAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_9500mfp:20070719_05.011.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FD2715-0ECB-42B9-8967-D8C80DEAC5C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_mfp_cm8050:-:-:edgeline:*:*:*:*:*",
            "matchCriteriaId" : "8E40ABF2-0485-47DB-92FE-FC8F630F15B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_mfp_cm8060:-:-:edgeline:*:*:*:*:*",
            "matchCriteriaId" : "E8D50F7A-2290-49A1-AB7B-F1FCD5035599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:digital_senders:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F654546-9F2E-4B1B-AAF6-54D799317C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:edgeline_printers:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A17E5A0-9342-49BD-BBD7-E8A90FC42EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322C9A6C-C3A6-4058-861C-882B68443744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1005:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA365AAC-C67A-43FE-A419-E3B5B0BAEA0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1010:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB27B7D-AAC8-4FEC-98C4-FC613E9CA36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1012:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581AB2AA-1731-4142-822A-5F40DFA2C34F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1015:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DCE831-3508-4059-9579-91DA526902B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1018:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F27B109-9BCA-4D72-A21C-B6D70F1AD7A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1018s:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF6A641-E205-4290-97E2-34A3B3E9672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1020:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FD0F5B-F181-46AC-BE66-642E4CD60FAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1020_plus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B0A4A9-60C2-4CEC-B531-50C086173DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1022:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D9690-22E6-4E89-A5A7-42B28BD043DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1022n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCA67FA-E8B9-4D9E-B0F3-58B0A1B183B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1022nw:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C09FB44-FFEE-4AB0-A2E0-C470F20733EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25D1906-E45D-465B-B481-8C9B88FF37ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1150:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25BDF8F-F1B9-4A3E-A220-E72B306CF21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1160:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04FA759-550C-4C08-BBF3-1B8F512DEBB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D562B5-09B6-4D0E-9816-4DC9C193FCBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1300:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB12831-81B7-4B6E-9D80-259A474F38E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_1320:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0645FD3F-1F42-4355-8430-D2B3F8740A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D3D3A6-7594-4306-A7C1-997328468C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB3C0E33-D115-4BCB-818E-92E5655AB8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "224C6B7D-DEAF-4B0D-93BA-BC5BF9517009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69367D0-1B9A-4615-9F4A-2F76596BA8EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2200dtn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A842F761-7AC1-4FE6-9D8E-D4E812971371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2300:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB3BC003-8116-475C-8816-DCD46E0184DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2300dn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8A93AE-C3A9-4714-A6FB-C855C9F439C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2400:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89A6F96-4A4A-4877-8E95-700CBAE663CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2410:20070410_08.112.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B34898C-6B9F-4DEF-9D9E-B7BA52F95A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2420:20070410_08.112.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3029F65D-88C0-4BC4-91D6-594474F022B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2430:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F804968D-0241-4C20-BAAC-684BA46B67F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2430:20070410_08.112.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02BB1543-E25E-4F77-8F53-ADC38FE3B81D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F75D41-DFB3-4FD2-A883-BBA8964D84D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2500c:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB83B8ED-0A0A-45C2-9A4F-BF85F97C114E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2600c:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F0E663-70A4-405C-B37E-60E24DDC6383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2600n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10474D2-F8D9-40B8-8E19-4741BDA55A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_3000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4042B85B-8BA8-49C8-8C72-ED4B12D10C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_3700:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CE1760-B9BD-4002-BA5C-0AFC4A2FBFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7EBF17F-331F-42D1-AC33-C5F60FF1C865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4\\/4m:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CB43B7-7CA2-4B8A-98D9-377F615F61E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4_plus\\/m_plus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DBBC2B-C054-46AD-9ABD-249216ED513F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659DFCA6-CF7D-4982-913B-6BF1B3DC5F5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4000n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02138F3E-4F3C-4607-BBB1-98D09B3C7F41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4050:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE6DC20-0757-4CF8-AB85-265C5264630F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549105CC-BA47-4C39-8B8A-9CAC39266B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4100_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE20791A-6CDA-46D0-8149-82F7D21662BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4100mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75525D7F-A881-4199-B44D-8E2D1B4809FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4993667F-9DE8-4DC9-90B1-A6D3AB6BFB0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4200dtn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED01DD0-7485-48E8-96E1-598DA0981525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4200ln:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1BCFB30-7322-4ABE-9529-CC10DA54F752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4240:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23DD9E6F-1F64-4643-B8E5-B3CAB5F961B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4240n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42459D1C-B860-4622-BA74-C6AF5446D644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4250:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F315232A-2DBB-4BE6-AB1E-0CCB327E19E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4250:20080319_08.015.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D180CB2E-F05A-4B9C-837B-605A00086A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4300:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4B141B-3358-469D-8331-88C5924763EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4345_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ADF801E-6D02-4CDF-AA6F-9F272D341E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4345mfp:20081211_09.131.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27CB3F95-8653-4CDB-BD81-53CA6D126512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4350:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "850BE715-BC0F-4873-9A72-6AED6259FF22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4350:20080319_08.015.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B03FD53-A1CA-4BD4-A87A-520D9782CEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4350dtn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA83D8E-3D70-4021-B9FD-F97BC8C92039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4650dn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2681DAAE-9DD4-4F25-B947-C676F868B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4l\\/ml:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7085C4E6-A34F-49E6-99EE-547861A25098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4m_plus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0F639A-C9F6-41E4-83BD-8097659ABEDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4p\\/mp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B67CAF7-6CDC-4074-BE55-2D898F1CF3EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4si:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DD8C9E-1738-456D-A22C-CB0C760E3712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4v\\/mv:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A010D1-588F-4EC5-9BE2-ADA22D399D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93BAAE8B-718E-4C6D-BAED-3F435D1C66A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5\\/m\\/n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD8388-3357-435C-8430-9D6CFE52D65A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_500_plus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F132B58-AF99-4E26-BEFB-C970AC9FCBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D220CD8-FB19-424D-B223-101098BE9088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5000:r.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157C92C4-2217-4A53-B70D-16D2171E7ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5000:r.25.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776C077B-32E5-45AD-866C-9C7FBEDF9631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0F236F-7EC3-440B-8FF4-362729EF0807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5100:v.29.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29E506F-B2B1-466C-9DAA-C8DFB643F036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5100dtn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A1E2E0-6832-4DE2-B793-BC8B2F3BF431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "977F2612-D1DE-4EAD-99ED-CF6FFD1D5B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5l:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212422DE-F76F-4418-89E5-B3826047A852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5m:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78907BCD-E0C8-44A0-85B7-0B5148AA8AD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5p\\/mp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76199C42-EF30-4F0B-9D7E-5C546001888E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5si:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8D6D65-3CA2-41E8-A8F8-B7C7BC24F962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_8000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1072358B-3C6C-45EB-83B0-22833A96741A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_8100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC8DA70-8669-4522-BEF7-C4595E142467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_8150:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94DFDFD-0CEA-4EC5-8E7D-0548DCAE5563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_8150dn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24852945-2734-468C-8DC7-5C9EBF2301FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54C64CAE-6CC4-4B92-9364-F982CDF47F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9000_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0E00FE-F3DB-45C2-81AE-D7189559BD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9000mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81556F50-ED68-4774-A208-E16286BC2F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9040:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D74F55-65F6-4328-B553-2756A75B777E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9040:20080204_08.110.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA65ABF-3241-48B5-B89A-031B09B8C129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9040mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDEA0FE9-F42F-4ECC-92E4-E404545CB0CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9040mfp:20080204_08.110.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A03C331E-BCF9-4226-ACB5-4CA4C85847F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9050:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1FEDCF-C604-49B3-B748-03BE3193792E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9050:20080204_08.110.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D06ADE7A-F615-475F-A6FB-977D51C8BD3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9050_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDA57B8-2AD5-45EF-9824-E60EBFF71D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9050mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2623A6-2DA1-4877-A5D8-3C9001FDC648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9050mfp:20080204_08.110.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3919FF01-7E93-4F35-826D-542DFD6E85B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9055:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7381DEDB-71A9-4882-B9DA-AFDC31D907C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9065:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F48F4812-7441-428B-B44A-E85AC64330D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9755F699-E5F7-424C-B84A-119E19A1E413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9500mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B8D80A-5E64-4ADD-98F7-2CD913EF151B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_ii:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "502E0F4F-8103-431C-BDCD-07FAA44DB035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_iid:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F17C5B7-FFE3-4FE6-A4AD-3EABCF9FCE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_iii:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F0EC84F-57BB-44D0-A05D-67AE5CD6652B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_iiid:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DA3E91-824D-4167-9990-8CED8E247DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_iiip:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B3AA1-0D4D-418B-A36B-2B38F642F798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_iiisi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB5EE77A-D014-4366-8D5B-251D09CC2DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_iip:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040C7DA9-9FF6-4772-82D4-2ED2BE01D8C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_iip_plus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD91F67B-C52F-4AED-8E02-B955F495BD8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m1522n_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8D0A1B-4F76-4403-B18E-464C33169CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m3027_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE95CC32-07DA-473D-BDAC-347B137E582A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m3035_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC3DE1F-AA79-4FE8-B634-368BDF14C0B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m4345_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E2ECB0-2335-4ABD-8326-CF935E8C4C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m5025_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C69873-A989-4B66-8D28-67A260EC7A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m5035_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEEA9582-8E01-41D3-A4D0-FA7BB2C98CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46628FAF-9819-4A6F-93BD-39E0650930E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1005:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C243A3-FA2C-414D-9530-CF50E65A6D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1006:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169C56AB-5565-4A4A-B298-B1FAC40D23CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1007:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931B6ACB-81B3-4406-834B-DFA85FC8871A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641D5E03-1FCD-4404-A37B-586262DCF863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1009:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F8AA6A9-855C-436C-AE9D-217598516DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DEDFF4-B9B1-4B31-BE32-1E44C19A5D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1505:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C4D0A5-B51C-4122-8BB7-705474A1E709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p1505n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "049D53B4-920A-4BFC-A007-1DF3648C37A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AE3B2A8-ABE6-464B-B9E2-E1122EDEA3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p2010:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F52C858-CFB9-4CE0-9C3C-3672F03B1850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p2015:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "218E5994-4BF9-4B5F-ABAE-0AB85495B8C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p2030:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FCB0F1-6395-4B9E-99C6-9C919C62EB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p2050:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF93B01-EEEE-4ACF-B7C0-55F17996543E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p3000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6E5576-6764-4534-A405-67B01F4018FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p3005:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BED71C7-C0A7-4934-9930-1EC7C5A96584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p4010:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612ACC73-A274-46B1-AEC6-9EBAF1E38D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p4014:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "222D062D-1F47-4E21-9173-A5AFEEF66482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p4015:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFBC095-00B6-48D7-AC0A-C172DD3A550B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p4500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D468AA7E-BA93-4523-B6AA-B542E714A17F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p4510:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87FDEEF-E459-4C0E-AA61-6DE9E2D73234"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.louhinetworks.fi/advisory/HP_20090317.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501884/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.louhinetworks.fi/advisory/HP_20090317.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501884/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-19T00:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2 and earlier, allows remote attackers to gain administrative privileges via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 y anteriores, y CGI Professional 3.2.2 y anteriores, permite a atacantes remotos obtener privilegios de administración mediante vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:mp_form_mail_cgi:*:-:ecommerce:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "FDEAB009-89A1-401A-80D0-6F9E14296FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:mp_form_mail_cgi:*:-:pro:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2",
            "matchCriteriaId" : "D5B8074E-F12B-48C6-85A0-9920B4CE19D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN84899898/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000014.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34197",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.futomi.com/library/info/2009/20090310.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN84899898/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.futomi.com/library/info/2009/20090310.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-19T10:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of service (crash) via an IRC PRIVMSG command containing crafted color codes that trigger an out-of-bounds read."
      }, {
        "lang" : "es",
        "value" : "Wee Enhanced Environment for Chat (WeeChat) versión 0.2.6, permite a los atacantes remotos causar una denegación de servicio (bloqueo) por medio de un comando PRIVMSG IRC que contiene códigos de color diseñados que desencadenan una lectura fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flashtux:weechat:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC44B684-89A2-4A6E-8BC1-98C3C7B6A0FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://savannah.nongnu.org/bugs/index.php?25862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34304",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34328",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://weechat.flashtux.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/17/8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34148",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0758",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://savannah.nongnu.org/bugs/index.php?25862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://weechat.flashtux.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/17/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-19T10:30:00.420",
      "lastModified" : "2026-04-22T14:12:44.147",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Adobe Reader y Adobe Acrobat v9.1 y v7.1.1 permite a atacantes remotos ejecutar código de su elección mediante vectores desconocidos, en relación con un método JavaScript y validación de entrada, una vulnerabilidad diferente a CVE-2009-0658."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-03-25",
      "cisaActionDue" : "2022-04-15",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndExcluding" : "7.1.1",
            "matchCriteriaId" : "FE671D4C-9BAC-4E77-A983-12F6BFD70562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.1.3",
            "matchCriteriaId" : "B03B6302-5781-4010-AD6A-7D18973D70C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.1",
            "matchCriteriaId" : "BDBEDB79-859B-4EC6-8AFB-81FC20EB52B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34490",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34706",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34790",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-17.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-04.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9579",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502116/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34169",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021861",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0770",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1019",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-014",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49312",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502116/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0927",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ],
      "evaluatorSolution" : "Per vendor advisory in the 'details' section it states:\n\n\"The Adobe Reader and Acrobat 9.1 and 7.1.1 updates resolve an input validation issue in a JavaScript method that could potentially lead to remote code execution. This issue has already been resolved in Adobe Reader 8.1.3 and Acrobat 8.1.3. (CVE-2009-0927)\"\n\nhttp://www.adobe.com/support/security/bulletins/apsb09-04.html"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-19T10:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the SearchField parameter to (1) UserView_list.php, (2) orders_list.php, (3) users_list.php, and (4) Administrator_list.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en PHPRunner v4.2 y posiblemente versiones anteriores permiten a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"SearchField\" a (1) UserView_list.php, (2) orders_list.php, (3) users_list.php y (4) Administrator_list.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xlinesoft:phprunner:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2",
            "matchCriteriaId" : "4E275FB1-EFD7-4AA2-88CB-A5F3D165DE03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xlinesoft:phprunner:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBC4CF9-4F07-4439-81AB-BFE0D55A24B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34330",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugreport.ir/index_63.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501894/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugreport.ir/index_63.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501894/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-19T10:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges.  NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication."
      }, {
        "lang" : "es",
        "value" : "UserView_list.php en PHPRunner v4.2, y posiblemente versiones anteriores, guarda las contraseñas  en la base de datos en texto plano, lo que permite a atacantes obtener privilegios. NOTA: esto puede ser aprovechado mediante una vulnerabilidad de inyección SQL para obtener contraseñas de forma remota sin autenticación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xlinesoft:phprunner:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2",
            "matchCriteriaId" : "4E275FB1-EFD7-4AA2-88CB-A5F3D165DE03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52804",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.bugreport.ir/index_63.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501894/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0750",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49279",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8226",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://osvdb.org/52804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.bugreport.ir/index_63.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501894/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0965",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-19T10:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in functions/browse.php in Ganesha Digital Library (GDL) 4.0 and 4.2 allows remote attackers to execute arbitrary SQL commands via the node parameter in a browse action to gdl.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en functions/browse.php en Ganesha Digital Library (GDL) v4.0 y v4.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"node\" en una acción \"browse\" a gdl.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ismail_fahmi:ganesha_digital_library:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E716886-9491-4546-A5BE-0422AD0BB549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ismail_fahmi:ganesha_digital_library:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A41FDE0E-8792-4245-B631-3DE10A3693A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34144",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0966",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-19T10:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter.  NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de fichero PHP en cross.php en YABSoft Mega File Hosting 1.2, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro url. NOTA: esto se puede aprovechar para incluir y ejecutar archivos locales arbitrarios mediante secuencias .. (punto punto)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabsoft:mega_file_hosting_script:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A06E0F8-5235-4C71-9473-C75051AF5C00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34325",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34157",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0967",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-19T10:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a denial of service (service hang) via a large number of SMNT commands without an argument."
      }, {
        "lang" : "es",
        "value" : "El servidor FTP en Serv-U versiones 7.0.0.1 hasta 7.4.0.1, permite a los usuarios remotos autenticados causar una denegación de servicio (bloqueo de servicio) por medio de un gran número de comandos SMNT sin un argumento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92DB160E-82FF-4360-970B-9DA8F8C80C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97835C15-FDFA-4483-B8F5-062731E912B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D43FB7-6D9C-46AE-9831-6C1A8CF8146E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE52F36F-FA2F-476C-9F30-5F74DC0F3D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D000B5-04D7-431C-AA2B-BC8D0475A518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C74BAC99-DF37-4AE4-AF48-69C6E855CEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FCBA2E-F6EE-4C52-B2DA-5174EF110DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40D1816-BD4A-4405-8461-07DA732C5CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD3CE83-3E37-464C-A511-CDF7E735E58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243CCCC8-9860-4440-9E80-12668270F330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE008FE-8C8A-4E82-B6EE-93ECBB6A9903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6D6DD1-D98B-46C1-921C-9B045C234377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FC2D20-D01F-43A7-B49D-6FAFB7889C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEF9A0E-7D4E-42CA-AD6F-B6F18CA3CFB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0968",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-19T10:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in fmoblog.php in the fMoblog plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en fmoblog.php en el plugin fMoblog 2.1 para WordPress, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" a \"index.php\". NOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fahlstad:fmoblog_plugin:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E965035F-E376-4CDD-85B4-FE13DAF8A448"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847DA578-4655-477E-8A6F-99FBE738E4F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34341",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34147",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0752",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-19T10:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in account/settings/account/index.php in phpFoX 1.6.21 allows remote attackers to hijack the authentication of administrators for requests that change the email address via the act[update] action."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en account/settings/account/ in phpFoX v1.6.21, permiten a atacantes remotos cambiar la dirección de correo electrónico del administrador mediante la acción act[update]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpfox:phpfox:1.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6455506A-DFD1-4918-98F7-578EF43B217C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0903-exploits/phpfox1621-xsrf.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34333",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0903-exploits/phpfox1621-xsrf.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-19T10:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/class_image.php in PHP Pro Bid 6.05, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the fileExtension parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en includes/class_image.php en PHP Pro Bid 6.05, cuando está habilitado register_globals, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro fileExtension. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen exclusivamente a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpprobid:php_pro_bid:6.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A344597-AB0A-4DB3-9618-685EEB9BF9C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34278",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/52750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/52750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-19T10:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in futomi's CGI Cafe Access Analyzer CGI Standard Version 3.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en futomi's CGI Cafe Access Analyzer CGI Standard Version v3.8.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:*:*:std:*:*:*:*:*",
            "versionEndIncluding" : "3.8.1",
            "matchCriteriaId" : "F6175713-CFAA-415D-87D8-F54EB2FC91AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:1.1:*:std:*:*:*:*:*",
            "matchCriteriaId" : "20ABFF4F-26C3-461D-9F38-6B8DE57B2782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:1.2:*:std:*:*:*:*:*",
            "matchCriteriaId" : "FA7F7688-CD90-46B7-9AB2-D52A57C5BA81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:1.3:*:std:*:*:*:*:*",
            "matchCriteriaId" : "0490EFA6-AEAB-4F11-B679-B9DC1245EFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:1.4:*:std:*:*:*:*:*",
            "matchCriteriaId" : "6974958E-E0C9-4AB5-AE67-B8A2483772A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:2.0:*:std:*:*:*:*:*",
            "matchCriteriaId" : "B2375FDF-B383-44BC-A2DF-F71416790EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:2.1:*:std:*:*:*:*:*",
            "matchCriteriaId" : "629AAD4C-BB24-4F13-8EAD-6081964470F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:2.2:*:std:*:*:*:*:*",
            "matchCriteriaId" : "A70FB601-1673-447E-8FF0-4B6EAB44C602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:2.3:*:std:*:*:*:*:*",
            "matchCriteriaId" : "74956E00-B195-488B-8CDF-7497D238629A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:2.4:*:std:*:*:*:*:*",
            "matchCriteriaId" : "5DAB8541-7F13-4D7F-9313-B2242BA8EEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:3.0:*:std:*:*:*:*:*",
            "matchCriteriaId" : "9108EF94-DDBB-4F07-B83C-9CAFD7821BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:3.1:*:std:*:*:*:*:*",
            "matchCriteriaId" : "F566B688-0734-4C28-9BF1-CAD72C910568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:3.2:*:std:*:*:*:*:*",
            "matchCriteriaId" : "8AD08FFB-D51A-4A93-A0FC-14F2F8AE80B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:3.3:*:std:*:*:*:*:*",
            "matchCriteriaId" : "D4BF8DD9-C511-46B2-AA71-83E0D214591C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:3.4:*:std:*:*:*:*:*",
            "matchCriteriaId" : "845055EE-C586-4238-A6D9-9A72F4F302B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:3.5:*:std:*:*:*:*:*",
            "matchCriteriaId" : "E522C8B4-EF1C-44BF-B7F3-27E36AE975A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:3.6:*:std:*:*:*:*:*",
            "matchCriteriaId" : "567641E9-8618-48B8-83CD-25AF4C7A27D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:3.7:*:std:*:*:*:*:*",
            "matchCriteriaId" : "04260F18-1816-4347-83E0-6CE9C736841F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:access_analyzer_cgi:3.8:*:std:*:*:*:*:*",
            "matchCriteriaId" : "002162F2-C5AD-48AE-96D9-1A4D95E2F763"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN23558374/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34271",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.futomi.com/library/info/2009/20090316.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0737",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN23558374/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.futomi.com/library/info/2009/20090316.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T00:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a long text field in a subtitle (.srt) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en la función Preview/ Set Segment en Gretech GOMlab GOM Encoder v1.0.0.1 y anteriores permite a atacantes remotos asistidos por  usuarios locales provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o ejecutar código de su elección a través de un campo de texto largo en un fichero subtitulado (.str)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gomlab:gom_encoder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.11",
            "matchCriteriaId" : "B0E06009-DAA3-490F-8BC2-8ACD30B20882"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34314",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.bkis.vn/?p=352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501846/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34120",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0735",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.bkis.vn/?p=352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501846/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T00:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in phpComasy 0.9.1 allows remote attackers to execute arbitrary SQL commands via the entry_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en phpComasy v0.9.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"entry_id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcomasy:phpcomasy:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD7EC34-569E-4F00-85E7-AA80658F7CEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34131",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T00:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Beerwin PHPLinkAdmin 1.0 allow remote attackers to execute arbitrary SQL commands via the linkid parameter to edlink.php, and unspecified other vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Beerwin PHPLinkAdmin v1.0 permiten a atacantes remotos ejecutar comandos SQL a través del parámetro \"linkid\" de edlink.php, y otros vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beerwin:phplinkadmin:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AAA469-30A9-4952-8A34-2DCD3371F1B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34129",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0733",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T00:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in linkadmin.php in Beerwin PHPLinkAdmin 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en linkadmin.php en Beerwin PHPLinkAdmin v1.0 permite a atacantes remotos ejecutar código PHP de su elección a través de de un URL en el parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beerwin:phplinkadmin:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AAA469-30A9-4952-8A34-2DCD3371F1B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34129",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0733",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T00:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en login.php en Kim Websites v1.0 permiten a atacantes remotos ejecutar comandos SQl de su elección a través del los parámetros (1) username y (2) password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kimwebsites:kim_websites:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D054925-4EB8-4965-8061-58E0E247C118"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34116",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0732",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T00:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in OpenCart 1.1.8 allows remote attackers to execute arbitrary SQL commands via the order parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en OpenCart v1.1.8 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"order\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencart:opencart:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5896D2-BD35-45A6-98E5-27D6EE6C4E61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ngenuity.org/wordpress/2009/03/10/ngenuity-2009-005-opencart-order-by-blind-sql-injection/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501843/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ngenuity.org/wordpress/2009/03/10/ngenuity-2009-005-opencart-order-by-blind-sql-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501843/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T00:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en ediSys eZip Wizard v3.0 permite a atacantes remotos ejecutar código de su elección a través de un fichero manipulado .zip."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edisys:ezip_wizard:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFA917C-0F87-4A47-B735-EC3C502F5302"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/39169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/8217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/39169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/8217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T00:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a long Date header, related to Imap.dll."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en POP Peeper v3.4.0.0 y versiones anteriores permite a servidores POP3 ejecutar código de su elección a través de una cabecera larga Date, relacionado con Imap.dll."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppeeper:pop_peeper:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.0.0",
            "matchCriteriaId" : "AF57FDF2-272B-4933-8047-1520ED872CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppeeper:pop_peeper:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C887EFD5-3F0A-40AF-8D44-A51F614E8821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppeeper:pop_peeper:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4205EC09-892C-41FD-9045-2C9B3E034186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppeeper:pop_peeper:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "162F6310-6687-4CAF-9111-0EF9A49EABB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34077",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.krakowlabs.com/res/adv/KL0309ADV-poppeeper_date-bof.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501701/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.krakowlabs.com/res/adv/KL0309ADV-poppeeper_date-bof.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501701/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T00:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordPress MU (WPMU) before 2.7 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función choose_primary_blog en wp-includes/wpmu-functions.php en WordPress MU (WPMU) anterior a v2.7 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de la cabecera HTTP Host."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6",
            "matchCriteriaId" : "12FFA638-4919-4D9F-9F27-F421C9F25B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D40A30E-7BA2-4121-90D0-55EB5ACDBC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8F048D-8B9D-4A1A-85CF-E0240B672864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC5983D-8B24-408A-A2B0-3D9E8918734E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "7343BA05-4A07-49C3-B4D8-69F1DD308B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "49E5C0D7-E4FE-4A7C-9A20-D085DA63D434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2912D04D-A004-4842-8EF0-B51DAAA5FD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77286DE-D583-4359-8962-439583BE9BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ED66D3-5D12-42CE-8B98-6A2984DAC7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB3E9E3-1341-4F34-B6D1-5DF9F3B1D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0EA81B6-0254-404D-8A2B-80C027383FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738C3727-FCA0-4C7B-B6D6-2FC14987706A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8149192C-167C-4459-8C20-355DE0FF2921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC1B2B1-C8EE-47A4-BE44-CAC1A6CD432E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E6D03D-0547-4CAB-A1CF-AEAC82634437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5136FA-5060-4448-9874-3DF375467ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FB8E4A4-818E-4FDF-8C83-7C8FB5C83909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F534621-ED5F-46D0-A893-D0C6DAACB0C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1930525-806B-49B1-A18E-189D41E5885C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "330826FD-833C-4BB4-8293-2812956496B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555E7E8A-3632-416B-889E-68E98AABE8CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAE70A19-919A-4478-B97B-EEF9FA29BECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70524981-C0ED-4915-B0F3-A9F5D4865A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9450D1-B817-4A38-A46F-05FCB6692A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA78384-3133-442A-B135-192440FB1745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFF1FD7-49D4-4EF3-9A2F-49058AB00AE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=126996727024732&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501667/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126996727024732&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501667/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T00:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a \\.. (backslash dot dot) in an MKD request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el servidor FTP en Rhino Software Serv-U File Server v7.4.0.1 permite a atacantes remotos crear directorios de su elección a través de \\.. (barra invertida punto punto) en una petición MKD."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:C/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92DB160E-82FF-4360-970B-9DA8F8C80C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97835C15-FDFA-4483-B8F5-062731E912B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D43FB7-6D9C-46AE-9831-6C1A8CF8146E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE52F36F-FA2F-476C-9F30-5F74DC0F3D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D000B5-04D7-431C-AA2B-BC8D0475A518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C74BAC99-DF37-4AE4-AF48-69C6E855CEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FCBA2E-F6EE-4C52-B2DA-5174EF110DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40D1816-BD4A-4405-8461-07DA732C5CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD3CE83-3E37-464C-A511-CDF7E735E58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243CCCC8-9860-4440-9E80-12668270F330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE008FE-8C8A-4E82-B6EE-93ECBB6A9903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6D6DD1-D98B-46C1-921C-9B045C234377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FC2D20-D01F-43A7-B49D-6FAFB7889C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEF9A0E-7D4E-42CA-AD6F-B6F18CA3CFB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34329",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0738",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T18:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2.3 allows remote attackers to execute arbitrary SQL commands via the gal parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en gallery_list.php en YABSoft Advanced Image Hosting (AIH) Script v2.3 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"gal\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabsoft:advanced_image_hosting_script:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C38AA7-43A4-453B-A1A9-E31F4B26159C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34366",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34176",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T18:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in misc.php in DeluxeBB 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the qorder parameter, a different vector than CVE-2005-2989 and CVE-2006-2503."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en misc.php en DeluxeBB v1.3 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"qorder\" un vector diferente que CVE-2005-2989 y CVE-2006-2503."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD698256-3700-4C30-858B-6E546A41CCA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "595D9D33-5FF5-4F0A-B8DC-A8E74C3E8D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3543354-4CC9-4C62-ACCE-6B646F797245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27346DF8-248F-426C-A435-7FDBCB34A977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6315C2-8918-456C-AF5D-7F53BF12C7AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A65D83C-FB89-46C8-8ABA-D9F66ACE8B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F38906-2E8F-40E4-A03B-8121FDEF903C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC51CF33-9B6A-40BE-B5A6-3596C02C48B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB0CB89-67EF-46F3-8370-ABFBDD54E959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B137A4A-B7E3-45BF-988D-D599A780E8E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34365",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34174",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T18:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Tasklist module 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x-2.0-alpha1, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via values in the URI."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el módulo Tasklist v5.x-1.x anterior a v5.x-1.3 y v5.x-2.x anterior a v5.x-2.0-alpha1, un módulo para Drupal, permite a atacantes remotos ejecutar comandos SQL de su elección a través de valores en la URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:tasklist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.x-1.x",
            "matchCriteriaId" : "398E7060-D8F7-4EA5-A0AD-BEB3D27696F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:tasklist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.x-2.x",
            "matchCriteriaId" : "0DCC78CC-19F9-41AE-ABF6-F48634989BA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/406316",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/52781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/406316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/52781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T18:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Tasklist module 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x-2.0-alpha1, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via Cascading Style Sheets (CSS)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de tipo cross-site scripting (XSS) en el módulo Tasklist versiones 5.x-1.x anteriores a 5.x-1.3 y versiones 5.x-2.x anteriores a 5.x-2.0-alpha1, un módulo para Drupal, permite a los usuarios autenticados remotos inyectar script web o HTML arbitrario por medio de Hojas de Estilo en Cascada (CSS)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jake_gordon:tasks:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB2C128-C62B-42A2-97A8-06C2816D1F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jake_gordon:tasks:5.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6476986E-EDCE-4BD1-AD7A-1A50490C01D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jake_gordon:tasks:5.x-2.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723AFC7A-8884-4EC4-9F38-475211E2C57B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/406316",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34376",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/406316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1036",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T18:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in the Plus 1 module before 6.x-2.6, a module for Drupal, allows remote attackers to cast votes for content via unspecified aspects of the URI."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el módulo Plus 1 anterior a v6.x-2.6, un módulo de Drupal, permite a atacantes remotos emitir votos de contenidos a través de aspectos de la URI sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:plus1:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.x-2.5",
            "matchCriteriaId" : "88EE6257-1E72-4BA9-A258-D4D9D9236387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:plus1:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277CB5E7-FA51-45A7-80E2-54EA60FA2F4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:plus1:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "163CAC05-57BB-46FE-A207-548EE6DFD28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:plus1:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C27A4BF-8B05-48E3-9AC6-B2ED98D3BD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:plus1:6.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36C8C9E8-A171-45D3-9596-FA2C208C48D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:plus1:6.x-2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76A47DA-E66B-467E-B468-9CF20CFA8EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:plus1:6.x-2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA608B72-450C-4C64-8B4E-0766BEA2B066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:plus1:6.x-2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADDA1E3-E765-4614-BA92-D68898C4DFDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:plus1:6.x-2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "7753EDBC-FAB4-4335-9CBB-9D96A348156A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:plus1:6.x-2.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "B993DA31-890B-4166-8251-D35BA2467327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:plus1:6.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D24BB6C-56AA-4617-B773-BE59D9630748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:plus1:6.x-2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "372BA942-62E7-4215-8F40-73E6FA7ABF6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:plus1:6.x-2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78863577-3914-481B-901E-2CAD85FE97B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:plus1:6.x-2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB37E8A8-85C4-444B-995D-303A13A7D6B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/405672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/406314",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/405672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://drupal.org/node/406314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T18:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Send by e-mail module in the \"Printer, e-mail and PDF versions\" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to send unlimited spam messages via unknown vectors related to the flood control API."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el módulo Send by e-mail en los módulos \"Printer, e-mail y PDF versiones\" v5.x anterior a v5.x-4.4 y v6.x anterior a v6.x-1.4, un módulo para Drupal, permite a atacantes remotos enviar mensajes de correo másivo ilimitados a través de vectores desconocidos relacionados con la API de control de inundación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13532942-BC0A-4B25-9FE3-679E5A698F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1DFE95-5788-4C00-8D24-FD2068352293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35122AE-7CAB-4AB1-88E7-EAF882618E33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD3428DA-1459-4B1F-A19B-C66F8FB75BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ABFF4E5-8F49-4AC4-8CEB-F502E6882087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7EF9D6-39D2-4922-B516-44B31E38DB32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "030BC1EE-8ED5-4955-AD4B-1745690ABB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-2.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989C2B4B-2CAA-4F85-899B-2E85C7C1AD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18D750A-6F98-4A72-B040-9A448EC007BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5029B78B-0160-4547-9934-19A891AB2652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE82C4B9-F7F2-424F-9AF9-9D945FD563EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0F5EE5-217D-40BF-BEF8-224FBDFB8E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C88506DA-94A1-4559-BCD8-D6DA9D438AF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0A448C-470C-4AA9-BAB5-8EAC14A6141E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D315DA5E-3012-4F25-8C7D-21C2BA172A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961AEFF7-499F-4709-BB2F-BB623A4CE19F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7267D96A-43CC-418B-B115-DE77154BCDAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9302C93E-C85F-4EA3-8BE2-3575592B50B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EC0689-1246-4E34-948B-6380BB2BAC90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746A3749-36A4-49EA-B705-922B9D260CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FCB2CC-8184-406E-BE92-34DB6F1B27A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F41A6973-2C38-418D-A16F-93F77F902206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6DF7D4-0992-4677-BA0A-860F329E6D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8A1B8F-021C-4558-880F-9E7FCFE2D323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF939A54-5458-4FD5-916D-301CD3B57F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF7248F-2CD2-4551-AD81-3207FE1D45A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD956162-E836-4777-8346-DF6DAA100A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82398A3C-DB58-42DE-BC16-56D92FAB55B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33406F84-81BF-492E-9C22-171311E519A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB084C5-BE56-4128-8A5D-8F536B276A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA70209E-98DA-4A0A-9272-2F4B04E62C8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/406516",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34374",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/406516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T18:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) image_id parameter to comments.php, and remote authenticated administrators to execute arbitrary SQL commands via the (2) user parameter in a modif action to admin/index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en YAP Blog v1.1.1 permite a atacantes remotos ejecutar comandos SQL de su eleccón a través del (1) parámetro \"image_id\" para comments.php, y administradores remotos autenticados ejecutar comandos SQL a través del (2) parámetro \"user\" en una acción modificada para admin/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yap:yap_blog:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7F0FA4-CDB9-4A6C-B5F3-1B5C7D062CF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52761",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/52762",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/52762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T18:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in CDex 1.70b2 allows remote attackers to execute arbitrary code via a crafted Info header in an Ogg Vorbis (.ogg) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en CDex v1.70b2 permite a atacantes remotos ejecutar código de su elección a través de una cabecera Info manipulada en un fichero Ogg Vorbis (.ogg)"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cdexos:cdex:170b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9C6901-1729-4844-88D5-54BB23A89D5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/9sg_cdex_ogg.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501928/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://retrogod.altervista.org/9sg_cdex_ogg.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501928/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-20T18:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in WinAsm Studio 5.1.5.0 allows user-assisted remote attackers to execute arbitrary code via a crafted project (.wap) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en WinAsm Studio v5.1.5.0 permite a atacantes remotos asistidos por usuarios locales ejecutar código de su elección a través de un fichero project (.wap) manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winasm:winasm_studio:5.1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9954A1B-A180-47F9-B890-8B4FC7D5F5E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34309",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34132",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0581",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-23T14:19:12.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service (memory consumption and application crash) via a crafted image file."
      }, {
        "lang" : "es",
        "value" : "Fuga de memoria en versiones de LittleCMS (alias LCMS o liblcms) anteriores a la 1.18beta2, tal como se utiliza en Firefox 3.1beta, OpenJDK, y el GIMP, permite causar, a atacantes dependientes de contexto, una denegación de servicio (mediante consumo de memoria y caida de la aplicación) a través de un archivo de imagen debidamente modificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:littlecms:little_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.17",
            "matchCriteriaId" : "5DAF1951-51CA-4FCC-94EE-3713860D6598"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.2",
            "matchCriteriaId" : "28CB30F0-E3AF-490A-B05B-0947A2BF717B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F72BFD4-000D-4B07-8261-C9F6839AD150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7",
            "matchCriteriaId" : "3FEAB217-572E-4BBB-8C01-C2517DCD99F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-003.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34367",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34382",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34400",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34408",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34442",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34450",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34454",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34463",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34782",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-19.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1745",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:121",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-003.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0339.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502018/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502031/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34185",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021870",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-744-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0775",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487509",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49328",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10023",
        "source" : "secalert@redhat.com",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00794.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00799.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00811.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00851.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00856.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00857.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00921.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0339.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502018/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502031/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-744-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00794.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00799.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00811.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00851.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00856.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00857.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00921.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-23T14:19:12.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de enteros en LittleCMS (también conocido como lcms o liblcms) anteriores a v1.18beta2, como el utilizado en Firefox v3.1beta, OpenJDK, y GIMP, permiten a atacantes dependientes de contexto ejecutar código arbitrario a través de un fichero de imagen manipulado, que provoca un desbordamiento de buffer basada en montículo. NOTA: algunos de estos detalles son obtenidos de información de terceras personas.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.2",
            "matchCriteriaId" : "28CB30F0-E3AF-490A-B05B-0947A2BF717B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F72BFD4-000D-4B07-8261-C9F6839AD150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7",
            "matchCriteriaId" : "3BD10277-3747-438E-BB0F-CC7E71602FC1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:littlecms:little_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.17",
            "matchCriteriaId" : "5DAF1951-51CA-4FCC-94EE-3713860D6598"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34367",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34382",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34400",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34408",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34442",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34450",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34454",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34463",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34782",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-19.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1745",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:121",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0339.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502018/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502031/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34185",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021869",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-744-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0775",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487508",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49326",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11780",
        "source" : "cve@mitre.org",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00794.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00799.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00811.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00851.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00856.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00857.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00921.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0339.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502018/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502031/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-744-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00794.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00799.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00811.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00851.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00856.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00857.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00921.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-23T14:19:12.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large integer value for the (1) input or (2) output channel, related to the ReadLUT_A2B and ReadLUT_B2A functions."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en pila en la función ReadSetOfCurves en LittleCMS (alias LCMS o liblcms) antes de la versión 1.18beta2, tal y como se usa en Firefox 3.1beta, OpenJDK, y GIMP, permiten ejecutar código arbitrario, a atacantes dependientes de contexto, a través de un archivo de imagen modificado con valores de enteros demasiado grandes en el (1) canal de entrada o (2) canal de salida, en relación con las funciones ReadLUT_A2B y ReadLUT_B2A."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.2",
            "matchCriteriaId" : "28CB30F0-E3AF-490A-B05B-0947A2BF717B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F72BFD4-000D-4B07-8261-C9F6839AD150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7",
            "matchCriteriaId" : "3BD10277-3747-438E-BB0F-CC7E71602FC1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:littlecms:little_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.17",
            "matchCriteriaId" : "5DAF1951-51CA-4FCC-94EE-3713860D6598"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34367",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34382",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34400",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34408",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34442",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34450",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34454",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34463",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34782",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-19.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1745",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:121",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0339.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502018/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502031/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34185",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021869",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-744-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0775",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487512",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49330",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9742",
        "source" : "cve@mitre.org",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00794.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00799.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00811.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00851.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00856.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00857.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00921.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0339.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502018/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502031/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-744-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00794.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00799.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00811.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00851.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00856.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00857.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00921.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-23T14:19:12.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Apple Safari en Mac OS X 10.5.6 permite a atacantes remotos ejecutar código de su elección a través de vécnoes desconocidos, provocados por hacer \"clic\" en un enlace, como se demostró por Nils durante la competición PWN2OWN en CanSecWest 2009."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE370CAA-04B3-434E-BD5B-1D87DE596C10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.zdnet.com/security/?p=2934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cansecwest.com/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.cnet.com/8301-1009_3-10199652-83.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://twitter.com/tippingpoint1/status/1351485521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.zdnet.com/security/?p=2934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cansecwest.com/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.cnet.com/8301-1009_3-10199652-83.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://twitter.com/tippingpoint1/status/1351485521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-23T14:19:12.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Microsoft Internet Explorer 8 sobre Windows 7 permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos simplemente haciendo clic en un enlace, como se demostró Nils durante una competición PWN2OWN en CanSecWest 2009."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52E757F-9B41-43B4-9D67-3FEDACA71283"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56B932B-9593-44E2-B610-E4EB2143EB21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.zdnet.com/security/?p=2934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cansecwest.com/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/03/20/pwn2own-day-2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.cnet.com/8301-1009_3-10199652-83.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.zdnet.com/security/?p=2934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cansecwest.com/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/03/20/pwn2own-day-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.cnet.com/8301-1009_3-10199652-83.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-23T14:19:12.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox versión 3.0.7 en Windows 7, permite a los atacantes remotos ejecutar código arbitrario por medio de vectores desconocidos relacionados con el método de árbol _moveToEdgeShift XUL, que desencadena un garbage collection en objetos que todavía están en uso, como es demostrado por Nils durante la competición PWN2OWN en CanSecWest 2009."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56B932B-9593-44E2-B610-E4EB2143EB21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.zdnet.com/security/?p=2934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.zdnet.com/security/?p=2941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cansecwest.com/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00008.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.cnet.com/8301-1009_3-10199652-83.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34471",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34505",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34510",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34511",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34521",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34549",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34550",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34792",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-113.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://twitter.com/tippingpoint1/status/1351635812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-13.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0397.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0398.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502303/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34181",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-745-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0864",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=484320",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01023.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01040.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.zdnet.com/security/?p=2934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://blogs.zdnet.com/security/?p=2941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cansecwest.com/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.cnet.com/8301-1009_3-10199652-83.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-113.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://twitter.com/tippingpoint1/status/1351635812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0397.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0398.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502303/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-745-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=484320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-23T16:30:01.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) via a long input argument in an in_play action."
      }, {
        "lang" : "es",
        "value" : "El archivo requests/status.xml en VLC versión 0.9.8a, permite a los atacantes remotos causar una denegación de servicio (consumo de pila y bloqueo) por medio de un argumento de entrada largo en una acción in_play."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:0.9.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A218DA63-4334-4C9F-BB47-44CC00630613"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=262708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/17/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34126",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=262708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/17/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-23T16:30:01.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is used, allows physically proximate attackers to cause a denial of service (memory corruption) by selecting a small number of 3-byte UTF-8 characters, which triggers an \"off-by-two memory error.\" NOTE: it is not clear whether this issue crosses privilege boundaries."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad de selección de consola en el kernel de Linux 2.6.28 en versiones anteriores a 2.6.28.4, 2.6.25 y posiblemente versiones anteriores, cuando se utiliza la consola UTF-8, permite a atacantes físicamente próximos causar una denegación de servicio (corrupción de memoria) seleccionando un número pequeño de carácteres de 3 bytes UTF-8, lo que desencadena un \"error de memoria off-by-two\". NOTA: no queda claro si el problema traspasa límites de privilegio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.openwall.net/linux-kernel/2009/01/30/333",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.openwall.net/linux-kernel/2009/02/02/364",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/12/10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/12/11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/12/9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0451.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33672",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.openwall.net/linux-kernel/2009/01/30/333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.openwall.net/linux-kernel/2009/02/02/364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/12/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/12/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/02/12/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0451.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-751-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.\n\nIt was addressed in Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-0451.html .",
        "lastModified" : "2009-05-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0583",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-23T20:00:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain \"native color space,\" related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de enteros en icc.c en la libreria de formatos (alias icclib) del International Color Consortium (ICC), tal como se utiliza en Ghostscript 8.64 y anteriores y Argyll Color Management System (CMS) 1.0.3 y anteriores, permiten causar una denegación de servicio (con desbordamiento de búfer basado en pila y caída de la aplicación) a atacantes dependientes de contexto y posiblemente ejecutar código arbitrario por medio de un fichero de dispositivo para una solicitud de traducción que opera en un archivo de imagen creado y se dirige a un determinado \"espacio de color nativo\", en relación con un perfil ICC en un (1) PostScript o (2) archivo PDF con imágenes incrustadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.64",
            "matchCriteriaId" : "06B00D31-6A9C-44C2-AF0F-36F91CADCF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46BABB2-C49A-4EF4-9FD7-7E80EE7CF55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:7.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9ECC8F7-93FD-427D-8395-F1B025CA4322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:7.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63082C3-15B6-4DD8-8818-BFD61B054B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877DC36-5151-43C9-864D-BE7939A0304D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F9F0F0A-E413-42CC-B67D-434EC6A92543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "491F4BDC-33BD-4EA6-A19B-1066BBC9EBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA7298B-2552-45DF-AE6B-FC71ACF623E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A234A3-5FF9-4567-A731-3FFCD1965C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2916811-2ABD-4CC4-829B-AE805BA1BC6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265CBC8B-5EF6-4335-B3EC-FF93A1DF8A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "755FCEC1-E1DD-42BC-9606-17217DB69128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C3057C-9207-4BCD-88D4-625BE0EFAE85"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "E0589F5F-9A14-4664-96E2-D3AD5B1C4907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87EEDC44-2DEB-4C76-9B28-322093F2F8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC777BB-79B6-41F4-8756-E53630198D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E685ACA-3C9C-4A65-BCE4-3D4F663C938E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56941499-5BD0-4222-AD6C-D36DA165A02C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746233CB-AC91-404E-9763-797AD1DCAF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787A9326-05FB-4766-A8F5-06C31763D2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:0.7.0:beta_8:*:*:*:*:*:*",
            "matchCriteriaId" : "90A92F2B-E055-4FBF-BE3F-E115590F2685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E228BF5-1FD4-4507-8451-82975E209FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1C3135-314E-48F7-A2A3-FC7FF071D1F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=261087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34266",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34373",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34381",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34393",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34398",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34437",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34443",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34469",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35559",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35569",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1021868",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-098.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0050",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.auscert.org.au/render.html?it=10666",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200903-37.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:095",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:096",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0345.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501994/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-743-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0776",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0777",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0816",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1708",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487742",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49329",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-2991",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10795",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/757-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00770.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00772.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00887.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00916.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=261087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-098.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.auscert.org.au/render.html?it=10666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200903-37.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0345.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501994/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-743-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-2991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/757-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00770.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00772.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00887.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00916.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0584",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-23T20:00:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes, related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images."
      }, {
        "lang" : "es",
        "value" : "icc.c, perteneciente a la librería de formatos del International Color Consortium (ICC) (alias icclib), tal y como se utiliza en Ghostscript 8.64 y anteriores y Argyll Color Management System (CMS) 1.0.3 y anteriores, permite causar una denegación de servicio (con caída de la aplicación) a atacantes dependientes de contexto, o posiblemente ejecutar código arbitrario por medio de un fichero de dispositivo diseñado para procesar archivos de imagen con modificaciones relacionadas con valores enteros grandes para  determinados tamaños, en relación con un perfil ICC en un (1) PostScript o (2) un archivo PDF con imágenes incrustadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "E37C8B4A-24A1-420A-A82F-190B3D343C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.64",
            "matchCriteriaId" : "06B00D31-6A9C-44C2-AF0F-36F91CADCF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E68242D-465A-443F-9D25-BE57F9080394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46BABB2-C49A-4EF4-9FD7-7E80EE7CF55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:7.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9ECC8F7-93FD-427D-8395-F1B025CA4322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:7.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63082C3-15B6-4DD8-8818-BFD61B054B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877DC36-5151-43C9-864D-BE7939A0304D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F9F0F0A-E413-42CC-B67D-434EC6A92543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "491F4BDC-33BD-4EA6-A19B-1066BBC9EBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA7298B-2552-45DF-AE6B-FC71ACF623E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A234A3-5FF9-4567-A731-3FFCD1965C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2916811-2ABD-4CC4-829B-AE805BA1BC6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B283683-D924-4C69-87F3-355ECC0DBA4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265CBC8B-5EF6-4335-B3EC-FF93A1DF8A9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=261087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/52988",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34266",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34373",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34381",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34393",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34398",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34437",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34443",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34469",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35559",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35569",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1021868",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-098.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0050",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.auscert.org.au/render.html?it=10666",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200903-37.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:095",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:096",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0345.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501994/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-743-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0776",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0777",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0816",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1708",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487744",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-2991",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10544",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/757-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00770.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00772.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00887.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00916.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=261087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-098.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.auscert.org.au/render.html?it=10666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200903-37.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0345.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501994/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-743-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-2991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/757-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00770.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00772.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00887.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00916.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-23T20:00:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Send by e-mail module in the \"Printer, e-mail and PDF versions\" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via vectors involving outbound HTML e-mail."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en el módulo \"Enviar-por-email\" en el modulo de Drupal \"versiones de PDF, e-mail e impresora\" en las versiones 5.x antes de 5.x-4.4 y 6.x antes de 6.x-1.4, permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de vectores relacionados con la salida de correo electrónico en formato HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13532942-BC0A-4B25-9FE3-679E5A698F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1DFE95-5788-4C00-8D24-FD2068352293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35122AE-7CAB-4AB1-88E7-EAF882618E33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD3428DA-1459-4B1F-A19B-C66F8FB75BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ABFF4E5-8F49-4AC4-8CEB-F502E6882087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7EF9D6-39D2-4922-B516-44B31E38DB32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "030BC1EE-8ED5-4955-AD4B-1745690ABB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-2.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989C2B4B-2CAA-4F85-899B-2E85C7C1AD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18D750A-6F98-4A72-B040-9A448EC007BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5029B78B-0160-4547-9934-19A891AB2652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE82C4B9-F7F2-424F-9AF9-9D945FD563EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0F5EE5-217D-40BF-BEF8-224FBDFB8E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C88506DA-94A1-4559-BCD8-D6DA9D438AF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0A448C-470C-4AA9-BAB5-8EAC14A6141E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D315DA5E-3012-4F25-8C7D-21C2BA172A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961AEFF7-499F-4709-BB2F-BB623A4CE19F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7267D96A-43CC-418B-B115-DE77154BCDAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9302C93E-C85F-4EA3-8BE2-3575592B50B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EC0689-1246-4E34-948B-6380BB2BAC90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746A3749-36A4-49EA-B705-922B9D260CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FCB2CC-8184-406E-BE92-34DB6F1B27A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F41A6973-2C38-418D-A16F-93F77F902206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6DF7D4-0992-4677-BA0A-860F329E6D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8A1B8F-021C-4558-880F-9E7FCFE2D323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF939A54-5458-4FD5-916D-301CD3B57F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF7248F-2CD2-4551-AD81-3207FE1D45A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD956162-E836-4777-8346-DF6DAA100A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82398A3C-DB58-42DE-BC16-56D92FAB55B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33406F84-81BF-492E-9C22-171311E519A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB084C5-BE56-4128-8A5D-8F536B276A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6B609E-4AD4-46CD-B9C7-5D0690B83326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA70209E-98DA-4A0A-9272-2F4B04E62C8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/406516",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/406516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-24T14:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en articleCall.php en Bloginator 1A permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kamads:bloginator:1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2957F0E-2949-4C68-832E-F416854B5A4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34395",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-24T14:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bloginator 1A allows remote attackers to bypass authentication and gain administrative access by setting the identifyYourself cookie."
      }, {
        "lang" : "es",
        "value" : "Bloginator 1A permite a atacantes remotos evitar la autenticación y conseguir acceso administrativo mediante la manipulación de la cookie \"identifyYourself\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kamads:bloginator:1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2957F0E-2949-4C68-832E-F416854B5A4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34395",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34187",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-24T14:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FubarForum 1.6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv."
      }, {
        "lang" : "es",
        "value" : "FubarForum v1.6 y anteriores almacena información sensible bajo la raíz de la web con insuficientes controles de acceso, lo que permite a usuarios remotos descargar la base de datos que contiene las credenciales de usuarios a través de una petición directa para user.tsv."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaozz:fubarforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "11EE8D19-D577-45FF-8C05-45337C89AE45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaozz:fubarforum:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A77C3C7-32FC-409A-89BA-D9A3911D2BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaozz:fubarforum:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C487F28-3520-4D38-B6FF-6D5C37182BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaozz:fubarforum:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA087ADB-F9B8-486E-AED2-B0CE9A5FF6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaozz:fubarforum:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6434CC36-9597-492D-B27C-8BA16FD8F5DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaozz:fubarforum:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E1AE1B-3016-44CC-AD23-FC89395F99B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaozz:fubarforum:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F7287F-66C2-4C17-A280-FCFBEAB718C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://e-rdc.org/v1/news.php?readmore=131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501902/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://e-rdc.org/v1/news.php?readmore=131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501902/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1052",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-24T14:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FireAnt 1.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv."
      }, {
        "lang" : "es",
        "value" : "FireAnt v1.3 y anteriores almacena información sensible bajo la raíz de la web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar la base de datos que contiene las credenciales de usuario a través de una petición directa a user.tsv"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaozz:fireant:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "F5B53485-54A0-48AF-AD18-BE4017517D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaozz:fireant:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86DD6E1-66F0-4208-B975-1F4627CD049E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaozz:fireant:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9504B92-D346-464C-A56E-72BB06499802"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://e-rdc.org/v1/news.php?readmore=130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501905/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://e-rdc.org/v1/news.php?readmore=130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501905/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Additional information available at:\r\n\r\nhttp://secunia.com/advisories/34359/"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1053",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-24T14:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "chaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv."
      }, {
        "lang" : "es",
        "value" : "chaozzDB v1.2 y anteriores almacena información sensible bajo la root de la web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar la base de datos que contiene las credenciales de usuario a través de una petición directa para user.tsv."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaozz:chaozzdb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "82B62A70-BCD4-4BD5-9B67-A2B7BC53E279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaozz:chaozzdb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32548796-576D-4382-9826-124FF2D1770D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaozz:chaozzdb:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAB7934-28DF-4FCD-B2DE-A177C9CAC450"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://e-rdc.org/v1/news.php?readmore=129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501901/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://e-rdc.org/v1/news.php?readmore=129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501901/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-24T14:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in JustSystems Ichitaro 13, 2004 through 2008, Lite2, and Ichitaro viewer 5.1.5.0 and earlier allows remote attackers to execute arbitrary code via a crafted file, as exploited in the wild by Trojan.Tarodrop.H in March 2009."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en JustSystems Ichitaro v13, de la v2004 hasta la v2008, Lite2, y Ichitaro viewer v5.1.5.0 y anteriores permite a atacantes remotos ejecutar código de forma arbitraria a través de un fichero manipulado, tal y como lo explotaba  Trojan.Tarodrop.H en Marzo de 2009."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ichitaro:ichitaro:13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7FB9A19-DFFC-4F94-9FEF-C2F5B5F1A944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ichitaro:ichitaro:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF02213B-94FF-4D80-9B4A-34B748097F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ichitaro:ichitaro:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D81D5676-D77B-4217-A3F8-D912A6906FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ichitaro:ichitaro:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "797D01A8-F293-43F9-918D-2AECA31123D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ichitaro:ichitaro:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9103793C-28AF-400E-8EB4-71424255BBC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ichitaro:ichitaro:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84FB501F-DF7E-4AF2-804D-168B87418DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ichitaro:ichitaro:lite2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD43250-CD0F-4A03-8D6D-ABE4184A2AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ichitaro:ichitaro_viewer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.5.0",
            "matchCriteriaId" : "C261864A-B5C8-40FF-B209-1652987914FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34405",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.justsystems.com/jp/info/js09001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-031608-2424-99",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0769",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.justsystems.com/jp/info/js09001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-031608-2424-99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-24T14:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security databases, and obtain administrative and user credentials, via unknown vectors related to SOAP and XML requests."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en el servicio web en Sitecore CMS v5.3.1 rev. 071114 permite a usuarios remotos autenticados conseguir acceso a las bases de datos de seguridad, y obtener credenciales administrativas y de usuario, a través de vectores desconocidos relacionados con las peticiones a SOAP y XML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitecore:cms:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20271A9D-C591-4206-AF17-9170BA32C70E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitecore:cms:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADD8B45-3408-454B-BB24-C9E51CDC05D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205%2C-d-%2C3/ReleaseNotes/V5%2C-d-%2C3%2C-d-%2C2/ChangeLog.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34356",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501929/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0753",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205%2C-d-%2C3/ReleaseNotes/V5%2C-d-%2C3%2C-d-%2C2/ChangeLog.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501929/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-24T14:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Rational AppScan Enterprise before 5.5 FP1 allows remote attackers to read arbitrary exported reports by \"forcefully browsing.\""
      }, {
        "lang" : "es",
        "value" : "IBM Rational AppScan Enterprise anteriores a v5.5 FP1 permite a atacantes remotos leer arbitrariamente informes exportados mediante \"navegación vigorosa\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_appscan:*:*:enterprise:*:*:*:*:*",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "30FC9824-9989-45DD-8D6E-272725E3C9AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34349",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK79991",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK79991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-24T14:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file that triggers memory corruption, related to a \"format string buffer overflow.\" NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product."
      }, {
        "lang" : "es",
        "value" : "MicroSmarts Enterprise ZipItFast! v3.0 permite a atacantes remotos ejecutar código de forma arbitraria a través de un fichero .zip manipulado que inicia una corrupción de memoria, relacionado con un \"desbordamiento de búfer de formato de cadena.\" NOTA: CVE no ha investigado que fichero file.zip puede producir la explotación de este producto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsmarts:zipitfast\\!:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F2EFA3-F08A-45D1-8997-45C75E3CF990"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34223",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-24T14:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in ZipGenius might allow remote attackers to execute arbitrary code via a crafted .zip file that triggers an SEH overwrite.  NOTE: it is possible that this overlaps CVE-2005-3317. NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en ZipGenius podría permitir a atacantes remotos ejecutar código a traves de un fichero .zip manipulado que inicia una sobrescritura SEH. NOTA: Es posible que esta se solape con CVE-2005-3317. NOTA: CVE no ha investigado que fichero file.zip especificamente puede ser utilizado para la explotación de este producto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zipgenius:zipgenius:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B0F1E2-A3C7-4884-BEA7-D186F5A56AFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-24T14:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Trident PowerZip 7.2 might allow remote attackers to execute arbitrary code via a crafted .zip file.  NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Trident PowerZip v7.2, podría permitir a atacantes remotos ejecutar código de su elección a través de una archivo zip manipulado. NOTA: CVE no ha investiga si el archivo zip puede ser usado para explotar la vulnerabilidad de esta aplicación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerzip:powerzip:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66EDE072-5C5A-44C6-8114-673374A64263"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-24T14:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Charlie Miller during a PWN2OWN competition at CanSecWest 2009."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en Apple Safari en Mac OS X v10.5.6 permite a atacantes remotos ejecutar código de forma arbitraria a través de vectores desconocidos que se inician cuando se hace click en un enlace, como demostró Charlie Miller durante la competición PWN2OWN en CanSecWest 2009."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE370CAA-04B3-434E-BD5B-1D87DE596C10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cansecwest.com/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.cnet.com/8301-1009_3-10199652-83.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9129978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cansecwest.com/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.cnet.com/8301-1009_3-10199652-83.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9129978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0193",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-03-25T01:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a PDF file with a malformed JBIG2 symbol dictionary segment, a different vulnerability than CVE-2009-1061 and CVE-2009-1062."
      }, {
        "lang" : "es",
        "value" : "Hay una vulnerabilidad en el desbordamiento del búfer en la región heap de la memoria en el programa de Adobe Acrobat Reader versión 9 anterior a  9.1, versión 8 anterior a  8.1.4, y versión 7 anterior a  7.1.1, permite a los atacantes remotos ejecutar códigos arbitrarios por medio  de un archivo PDF con un segmento de diccionario de símbolos JBIG2 malformados, una vulnerabilidad diferente de los CVE- 2009-1061 y CVE-2009-1062."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndExcluding" : "7.1.1",
            "matchCriteriaId" : "FE671D4C-9BAC-4E77-A983-12F6BFD70562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.1.4",
            "matchCriteriaId" : "4D5C20FC-C257-4523-BF20-74DF2F9B328A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.1",
            "matchCriteriaId" : "BDBEDB79-859B-4EC6-8AFB-81FC20EB52B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34392",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34490",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34706",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34790",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-14/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-17.xml",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-04.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0376.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502155/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34229",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021892",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1019",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-14/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0376.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502155/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T01:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.23 running VRTSodm 4.1 or VERITAS File System (VRTSvxfs) 4.1, B.11.23 running VRTSodm 5.0 or VRTSvxfs 5.0, and B.11.31 running VRTSodm 5.0 allows local users to gain root privileges via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecifica en HP-UX vB.11.11 corriendo VERITAS Oracle Disk Manager (VRTSodm) v3.5, vB.11.23 version VRTSodm v4.1 o VERITAS File System (VRTSvxfs) v4.1, vB.11.23 corriendo VRTSodm v5.0 o VRTSvxfs v5.0, y vB.11.31 corriendo VRTSodm v5.0 permite a usuarios locales conseguir privilegios de root a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "972D4ABF-2E80-4902-910D-5BD0CBEC9765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:vrtsodm:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C55364-6E56-4638-ACAE-EAFE8AAE3B22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64BBA96-FB3C-46AC-9A29-50EE02714FE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:vrtsodm:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9D0EBC-7CD9-4F24-97AB-79FE788EDED4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C73959-3E02-4847-8962-651D652800EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:vrtsodm:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "223E04E3-8BD1-4FAE-B0B2-0D31B186DE97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:vrtsodm:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9D0EBC-7CD9-4F24-97AB-79FE788EDED4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:vrtsvxfs:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3143959-9791-4EBC-B02A-870211DD6EDF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:vrtsvxfs:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2BB361-9948-40D7-ACF9-04F139B86BBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=123792744311063&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34226",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=123792744311063&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0787",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-25T01:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ecryptfs_write_metadata_to_contents function in the eCryptfs functionality in the Linux kernel 2.6.28 before 2.6.28.9 uses an incorrect size when writing kernel memory to an eCryptfs file header, which triggers an out-of-bounds read and allows local users to obtain portions of kernel memory."
      }, {
        "lang" : "es",
        "value" : "La función ecryptfs_write_metadata_to_contents  en la funcionalidad eCryptfs en el kernel Linux v2.6.28 anterior a v2.6.28.9 emplea un tamaño incorrecto cuando escribe de la memoria del kernel a la cabecera del archivo eCryptfs, lo que dispara una lectura fuera de rango y permite a usuarios locales obtener porciones d la memoria del kernel."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=8faece5f906725c10e7a1f6caf84452abadbdc7b",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/52860",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0473.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34422",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35015",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.9",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022177",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0802",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49355",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11068",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8319",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=8faece5f906725c10e7a1f6caf84452abadbdc7b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0473.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2009-0473.html .",
        "lastModified" : "2009-05-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T01:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Web Services Security component in IBM WebSphere Application Server 7.0 before Fix Pack 1 (7.0.0.1), 6.1 before Fix Pack 23 (6.1.0.23),and 6.0.2 before Fix Pack 33 (6.0.2.33) does not properly enforce (1) nonce and (2) timestamp expiration values in WS-Security bindings as stored in the com.ibm.wsspi.wssecurity.core custom property, which allows remote authenticated users to conduct session hijacking attacks."
      }, {
        "lang" : "es",
        "value" : "El componente Web Services Security en IBM WebSphere Application Server v7.0 anterior a Fix Pack 1 (v7.0.0.1), v6.1 anterior a Fix Pack 23 (v6.1.0.23),y v6.0.2 anterior Fix Pack 33 (v6.0.2.33) no respeta los valores (1)nonce y (2)timestamp expiration en los vínculos WS-Security tal y como se almacenan en la propiedad com.ibm.wsspi.wssecurity.core, lo que permite a usuarios remotos autenticados dirigir ataques de hijacking de sesión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:fp17:*:*:*:*:*",
            "matchCriteriaId" : "D592217D-3489-40AE-8338-BF5AA5BBA251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2604E01-E43E-4882-8896-5E646E850286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B68EE27-CC4F-4530-9DFE-D94171C45F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E5AEC-5C35-4962-B9BB-32D66290D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEBF289-F630-4386-8F79-5A1BF73BE6F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521DB050-3C94-49BF-8666-6EC2C358AA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98E5593-1534-48E2-8CD5-B2D1CACDDAB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4AB6BD-4439-4100-A3CE-4600AED10B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD71D5EA-9AF5-422C-810A-D136A5F132F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9D6BDA-39E1-4D15-9D86-E212809998FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2A78FE-8FA6-4532-9E9E-CF6F860EFAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BEDD70-B6DB-448F-A998-3E8774B0DB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63099EF9-0512-44CD-946A-9B25144E50D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9132BB1-5E2E-4CA6-9B63-027CF2A7229D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D839EDB9-A44F-4F7F-94EF-1A77371D705C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4421929D-C4B9-43C5-BE61-E68484D3B198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB622117-C91F-47D2-9832-B7DB340796E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D87691D-0719-4447-B258-5FA2BD10F11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5594891-E790-44E7-BC9E-0A413B385E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C286007A-361F-47BB-A099-E041D5CF6E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD464F13-942D-40EC-8144-6D23A0AEAA81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95255265-6D69-46D3-9FFA-8EDB1734375C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4191D3-64AB-482C-9DEF-DD04C4C942CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD75308-7F21-4DDF-AD66-C155CF4B721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C250D-8279-4071-871C-1C7C4DE09B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC300B03-7A8F-4E96-B55D-18CC258BBFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C8054A-8581-4936-AF94-291AE56EB4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026EBFCD-0BC1-404B-BC14-292F35BE667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D74F8-4321-48B3-A33E-FCCFA93013CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2043B836-3950-46A1-89E4-08985DEA0D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK66676&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK66676&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T01:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en OvCgi/Toolbar.exe en HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53, permite a atacantes remotos ejecutar código de su elección a través de una cookie OvOSLocale, una variantes de CVE-2008-0067."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_node_manager:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE29430-F5AE-498A-A73C-B1D91D46CAA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_node_manager:7.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D53F428-EBF9-4599-835E-F1D02CF3FC40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_node_manager:7.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A59795B-C6EC-4B4B-AFAF-8D83424F8C7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=123791084113871&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34444",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/8308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/content/openview-buffer-overflows",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502054/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0819",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=123791084113871&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/8308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/content/openview-buffer-overflows",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502054/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T01:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long OvAcceptLang cookie, which triggers the error in ov.dll and ovwww.dll, or (2) a long Accept-Language HTTP header, which triggers the error in ovwww.dll or libovwww.so.4."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en monticulo en OvCgi/Toolbar.exe en HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53, permite a atacantes remotos ejecutar código de forma arbitraria a través de (1)la cookie OvAcceptLang, que inicia el error en ov.dll y ovwww.dll, o (2)una cabecera HTTP larga Accept-Language, lo que inicia el error ovwww.dll o libovwww.so.4."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_node_manager:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE29430-F5AE-498A-A73C-B1D91D46CAA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_node_manager:7.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D53F428-EBF9-4599-835E-F1D02CF3FC40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:network_node_manager:7.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A59795B-C6EC-4B4B-AFAF-8D83424F8C7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=123791084113871&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/content/openview-buffer-overflows",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502054/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0819",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=123791084113871&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/content/openview-buffer-overflows",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502054/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T01:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers to execute arbitrary code via a PDF file containing a JBIG2 stream with a size inconsistency related to an unspecified table."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Adobe Acrobat Reader y Acrobat Professional v7.1.0, v8.1.3, v9.0.0 y otras versiones, permite a atacantes remotos ejecutar código de su elección a través de un archivo PDF que contiene una cadena JBIG2 con un tamaño inconsistente relacionado con una tabla sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "ADDAA1F2-FDC3-4CCE-8233-4F85EB5B8407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "465F9134-DD86-4F13-8C39-949BE6E7389A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB041EDF-EFF8-4AA6-8D59-411975547534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C05F6A5-0FB3-489B-9B8B-64C569C03D7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AABA4FE3-662B-4956-904D-45086E000890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "998CD79C-458E-46A8-8261-1C40C53D9FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:4.0.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0155FB0B-7FAD-4388-96C8-A8543B4FDFD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "201F059D-33D1-4D9F-9C6F-FC8EB49E4735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B025E795-5713-485E-8A15-EBE4451A1A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B453FA1D-0FE9-4324-9644-E167561926C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDEA946E-B6D2-463B-89D0-F2F37278089E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183B5940-2310-4D2E-99F0-9792A801A442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8BB13E-2732-4F9E-A588-EA1C00893C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FCDCBF-597B-439C-8D8B-2819FC70C567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440B890A-90E9-4456-B92A-856CD17F0C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BD9D8D-39DA-403E-915D-E1B6A46A6BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8976A7DC-1314-4C4A-A7C5-AA789D2DAB9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37854E7C-2166-48D7-AE8C-44C9468C38C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C17896-8895-4731-B77A-F488A94F0CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF9F1050-B6BE-4B99-882B-36D6E187304D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A624D44-C135-4ED3-9BA4-F4F8A044850B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B9F55CC-3681-4A67-99D1-3F40447392D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9C0AC89-804B-44A1-929A-118993B6BAA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39B174C3-1BA6-4654-BFA4-CC126454E147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACDAA2B-3977-4590-9F16-5DDB6FF6545B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7C4E07-0909-4114-BBFB-92626AFC49BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7832B75B-7868-44DE-A9A4-CBD9CC117DB4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "840D37C8-F30C-4A91-9B34-39AF1E4E34C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C92642-7C8D-411A-8726-06A8A6483D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBE2E6C-AF0E-4A77-9EB0-3593889BC676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:3.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5C5C14-383C-4630-858E-D40D6C32FD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F509566A-6D4A-40C0-8A16-F8765C5DCAAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "707D7124-6063-4510-80B4-AD9675996F67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200FFAE3-CC1C-4A11-99AD-377D54A67195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.0.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A990E86-07C0-49E2-92D6-55E499F30FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AED985D-60D7-489E-9F1E-CE3C9D985B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0FCA2F-FD7F-4CE5-9D45-324A7EC45105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7EAA22-CED2-4379-9465-9562BACB1C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B1CA6B-600C-4E03-B4D5-3D7E1BC4D0F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AA1BA3-9FFA-46AB-A92A-7247D5F7EA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F5F7424-1E19-4078-8908-CD86A0185042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2402B40-6B72-48B5-A376-DA8D16CA43FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D968113-340A-4E5A-B4FD-D9702D49E3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF742B8-5F7A-487B-835C-756B1BB392F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BB7C0C-B1D6-4733-BA91-022A1A7FB2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B131DB8-4B6A-4AF2-8D5E-B5EA1AEBFB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B9351C2-16ED-4766-B417-8DB3A8766C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74667860-0047-40AD-9468-860591BA9D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEA092A-5532-4DCC-B43D-7A8ECF07FA4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9628AFF9-6EE1-4E85-858F-AE96EE64B7F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95511FD-C8F1-478F-B6DF-1D0E068845D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32049561-270C-4B18-9E96-EA0F66ACECAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1976F77D-D8D2-4107-A1C4-05D776A02FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4670451-511E-496C-A78A-887366E1E992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2A4F62-7AB5-4134-9A65-4B4E1EA262A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35994F76-CD13-4301-9134-FC0CBEA37D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB61191-F955-4DE6-A86B-36E031DE1F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32D68D5-6A79-454B-B14F-9BC865413E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A57581C-A139-41C3-B9DB-0C4CFA7A1BB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34392",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34490",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34706",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34790",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-17.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-04.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0376.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1019",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0376.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T01:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to execute arbitrary code via unknown attack vectors related to JBIG2 and \"input validation,\" a different vulnerability than CVE-2009-0193 and CVE-2009-1062."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en Adobe Acrobat Reader v9 anteriores a v9.1, v8 anteriores a v8.1.4, y v7 anteriores a v7.1.1 permitiría a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos relacionados con JBIG2 y la \"validación de entrada\", una vulnerabilidad diferente de CVE-2009-0193 y CVE-2009-1062."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndExcluding" : "7.1.1",
            "matchCriteriaId" : "FE671D4C-9BAC-4E77-A983-12F6BFD70562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.1.4",
            "matchCriteriaId" : "4D5C20FC-C257-4523-BF20-74DF2F9B328A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.1",
            "matchCriteriaId" : "BDBEDB79-859B-4EC6-8AFB-81FC20EB52B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34392",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34490",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34706",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34790",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-17.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-04.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0376.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34229",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021892",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1019",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0376.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T01:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to trigger memory corruption and possibly execute arbitrary code via unknown attack vectors related to JBIG2, a different vulnerability than CVE-2009-0193 and CVE-2009-1061."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader versión 9 anterior a 9.1, versión 8 anterior a 8.1.4 y versión 7 anterior a 7.1.1 podría permitir a los atacantes remotos desencadenar una corrupción de memoria y posiblemente ejecutar código arbitrario por medio de vectores de ataque desconocidos relacionados con JBIG2, una vulnerabilidad diferente a las CVE-2009-0193 y CVE-2009-1061."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:professional:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "D010E4EE-0FD7-4F64-B973-5863D1ACB9DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:standard:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "8641E058-D77A-4A86-9FA8-0D26AAA27B94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AC8F85CD-8371-4B36-8D6A-8B2CA580631B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "FE88C274-CC72-4341-9BF6-1924054A12FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "507C02CF-7E81-4131-99DE-63E4EEC45F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "47EBEF8E-3C53-41D5-B344-297ED7C432F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "DC0DF265-984D-462D-878E-612783BF0BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0335D33B-20D8-483F-AB5E-E2517F2F900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2341215F-97A7-40B6-B618-7FF022C7CFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D61F0564-59B9-4811-B7FD-BA044C6A94AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9C9A3E43-7334-44B0-BF01-04BB19B6FE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D3E43C1B-D76D-4486-AE7A-943D34D0A92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "F52F86E7-E845-48A5-9CC4-98E6DAA43C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "CC9D669B-7E9D-4F39-894A-D9438000F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0D9CA54D-9D60-4064-B6AC-8CED8D064465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "55836D2A-487E-4B94-AC48-75A427D414F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "023C5C61-6629-480E-93AD-5F2691E51AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "0E16B425-B123-4BA3-AC93-5F400ED8F6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C6F47894-50FB-4192-A3CC-D944124F08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "5D6C9969-DFEF-4059-BE92-28969930EACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "EA23452E-F5C7-4756-8245-1F398BA78E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "21113403-CA7D-4082-9516-C672C9A487C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "8F04372D-60A1-4407-8CF1-113262846783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
            "matchCriteriaId" : "C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "56691A9A-4C98-4D5F-9734-B225F534CC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "43F1C1B8-20B5-4534-A753-19EC415D0E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "840D37C8-F30C-4A91-9B34-39AF1E4E34C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4A65AB-75F1-4F6B-83E4-354E7D1EAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD49BF0-E8BC-4716-8B13-DF39267D9303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71FC1CDB-DF7C-45FF-973D-8C9310121B0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8951B8-0DF2-48C9-9EAC-9EDCCD389958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:4.0.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCCF8E6-2117-4665-AC71-8F05771CDB15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E14042-AF3B-4609-8CFE-6E02B3DF5CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "822D6CAA-4CF7-41BE-B2AC-E7CBAB6229C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73579E5C-BDB2-4F9C-BB87-E3752B9030B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A57B3C8-B127-4A52-AB08-A1B6F7830914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F131F390-EA28-41C2-A054-42E6B070FA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26DE5FE-729C-4C3A-80FB-0FAFC90A8BEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C85609BE-4385-4728-AC7E-4231B45A3CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29BDD58D-3200-48C1-AB30-07808E029061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC93E153-9E21-4012-BFE0-0168488FFC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D445D4-2B00-451B-8744-CCA9F1E1ADA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D60FEC-557F-456B-8F35-170078EC5C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A7B617-FDB3-4F46-AF1F-F9210FB2793B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5D145B-FD5B-430E-8E90-929B00271C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E8FD46-14E2-4D92-8A99-66EC41F38CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BA5B02-F565-4A7F-B9FD-DD08ABF258CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3F0A07-7021-4D04-A8F2-1BCAB474CD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C1C3A0-B0DF-42E4-A8AC-D93FCB6526D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B5B11C-6E76-4A03-AC05-840EFE2F8504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF8D072-305A-40B9-9E89-D98BDD951346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF52FAE-B6EF-457D-A61A-95B5E31CEF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A7236C5-85F8-47C5-8A24-D5282F94D77D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "718F2E95-E221-4928-B50F-AB840BBA0E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "123D2B4E-0D05-453C-B598-E41D43FE0E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0109ADA4-6BA0-4299-8043-7CD60DAD6DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BCBFB5-72DF-4B8A-8F4C-E958B4FAFB37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71EB6E18-5764-4916-9ECA-F4E880672217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61151189-E24C-4AB6-BC60-B9AF720E3D4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34392",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34490",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34706",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34790",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-17.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-04.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ivizsecurity.com/security-advisory-iviz-sr-09001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0376.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34229",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1019",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ivizsecurity.com/security-advisory-iviz-sr-09001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0376.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T01:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option."
      }, {
        "lang" : "es",
        "value" : "nfsd en el Kernel de Linux anteriores a la v2.6.28.9 no detiene la capacidad de CAP_MKNOD antes del manejo de una petición de usuario en un hilo, lo que permite a usuarios locales crear nodos de dispositivo, como se ha demostrado en un sistema de ficheros que ha sido exportado con la opción root_squash."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.28.9",
            "matchCriteriaId" : "2735F338-6C83-49C7-8DA0-E4754BE828E4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B68DF-1440-4587-8458-9C5F4D1E43F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "513797E6-FCE6-4E84-9B66-202541F9601E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0507E91-567A-41D6-A7E5-5088A39F75FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:4.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D467EE9D-6A1F-4462-9BDA-C68B7EE375E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:virtualcenter:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFF5385-64AA-48AD-A5FE-25918E4F07D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:virtualcenter:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17E8DFD-AC99-45E6-81F9-ED66369FBD0A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A2543D5-AE09-4E90-B27E-95075BE4ACBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902BA958-06AA-4EDF-9F9E-1030083EA361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF29100-E124-4416-95CF-18B4246D43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC337BB7-9A45-4406-A783-851F279130EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vma:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7426B5AC-D0FD-424D-9A1E-0875C2102D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=76a67ec6fb79ff3570dcb5342142c16098299911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34422",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34432",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34786",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35185",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35343",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://thread.gmane.org/gmane.linux.kernel/805280",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.9",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/23/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1081.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34205",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0802",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49356",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10314",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8382",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=76a67ec6fb79ff3570dcb5342142c16098299911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://thread.gmane.org/gmane.linux.kernel/805280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/23/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1081.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue has been rated as having moderate security impact. It was addressed in Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG, via https://rhn.redhat.com/errata/RHSA-2009-1132.html , https://rhn.redhat.com/errata/RHSA-2009-1106.html , and https://rhn.redhat.com/errata/RHSA-2009-1081.html .\n\nThis issue is not planned to be fixed in Red Hat Enterprise Linux 2.1 and 3, due to these products being in Production 3 of their maintenance life-cycles, where only qualified security errata of important or critical impact are addressed.\n\nFor further information about Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/ .",
        "lastModified" : "2009-09-10T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0215",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-03-25T15:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el método GetXMLValue del control ActiveX en IBM Access Support en IbmEgath.dll, como el distribuido en los ordenadores IBM y Lenovo, permite a atacantes remotos ejecutar código arbitrario a través de vectores no específicos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:access_support_activex_control:3.20.284.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE3A9DF-C502-4C74-8FD6-A5FC152BB317"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52958",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/34470",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/340420",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34228",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0824",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49409",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://osvdb.org/52958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/340420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T15:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to \"ssl termination devices\" and lack of support for relative URLs."
      }, {
        "lang" : "es",
        "value" : "Sun Java System Identity Manager (IdM) v7.0 y v8.0, no usa SSL en todas las circunstancias que cabría esperar, esto facilita a los atacantes remotos obtener información sensible rastreando la red. Está relacionado con \"dispositivos de terminación ssl\" y una carencia de soporte de URLs relativas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0980492E-B7DB-4B9F-A400-FDC47DB89A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5C87C0-3734-4568-97A6-6AB8979AABE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E3B2F0-90E6-4868-915F-87131711EEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BC0B23-0CEE-489B-B89A-8776272EC8D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T15:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the Forgot Password feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames."
      }, {
        "lang" : "es",
        "value" : "Sun Java System Identity Manager (IdM) v7.0 hasta v8.0 responde diferente a fallos de la característica del \"Olvido de Contraseña\" dependiendo de si la cuenta de usuario existe, lo que permite a los atacantes remotos enumerar nombres de usuario válidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0980492E-B7DB-4B9F-A400-FDC47DB89A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5C87C0-3734-4568-97A6-6AB8979AABE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E3B2F0-90E6-4868-915F-87131711EEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BC0B23-0CEE-489B-B89A-8776272EC8D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T15:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the end-user question-based login feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames."
      }, {
        "lang" : "es",
        "value" : "Sun Java System Identity Manager (IdM) v7.0 hasta v8.0 responde de forma diferente a la no utilización de usuario final de una cuestión basada en la característica de inicio de sesión dependiendo de si la cuenta de usuario existe, lo cual permite a atacantes remotos enumerar nombres de usuario válidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0980492E-B7DB-4B9F-A400-FDC47DB89A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5C87C0-3734-4568-97A6-6AB8979AABE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E3B2F0-90E6-4868-915F-87131711EEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BC0B23-0CEE-489B-B89A-8776272EC8D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T15:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Change My Password implementation in the admin interface in Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the RequiresChallenge property setting, which allows remote authenticated users to change the passwords of other users, as demonstrated by changing the administrator's password."
      }, {
        "lang" : "es",
        "value" : "La implementación de Change My Password en el intefase de administración en Sun Java System Identity Manager (IdM) v7.0 hasta v8.0 no refuerza el valor de la propiedad RequiresChallenge, lo que permite a usuarios remotos autenticados cambiar la contraseña a otros usuarios, como se demostró cambiando la contraseña al administrador."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0980492E-B7DB-4B9F-A400-FDC47DB89A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5C87C0-3734-4568-97A6-6AB8979AABE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E3B2F0-90E6-4868-915F-87131711EEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BC0B23-0CEE-489B-B89A-8776272EC8D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T15:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the expected privilege requirements for (1) deleting audit policies and (2) modifying workflows, which allows remote authenticated users to have an unspecified impact."
      }, {
        "lang" : "es",
        "value" : "Sun Java System Identity Manager (IdM) v7.0 a la v8.0 no impone los requisitos de privilegios esperados para  (1) la eliminación de las políticas de auditoría (2) la modificación de flujos de trabajo, lo que permite a usuarios autenticados remotamente tener un impacto sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0980492E-B7DB-4B9F-A400-FDC47DB89A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5C87C0-3734-4568-97A6-6AB8979AABE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E3B2F0-90E6-4868-915F-87131711EEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BC0B23-0CEE-489B-B89A-8776272EC8D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T15:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19659, 19660, and 19683."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Sun Java System Identity Manager (IdM) v7.0 hasta v8.0 permite a atacantes remotos inyectar web script o HTML a través de vectores no especificados, también conocido como Bug IDs 19659, 19660, y 19683."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0980492E-B7DB-4B9F-A400-FDC47DB89A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5C87C0-3734-4568-97A6-6AB8979AABE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E3B2F0-90E6-4868-915F-87131711EEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BC0B23-0CEE-489B-B89A-8776272EC8D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T15:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID 19033."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad múltiple de ejecución de secuencias de comandos en sitios cruzados - XSS - en Sun Java System Identity Manager (IdM) 7.0 hasta 8.0 que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de vectores no especificados, también conocidos como Bug ID 19033."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0980492E-B7DB-4B9F-A400-FDC47DB89A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5C87C0-3734-4568-97A6-6AB8979AABE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E3B2F0-90E6-4868-915F-87131711EEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BC0B23-0CEE-489B-B89A-8776272EC8D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T15:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19595 and 19661."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Sun Java System Identity Manager (IdM) v7.0 a v8.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores sin especificar, también conocido como Bug IDs 19595 y 19661."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0980492E-B7DB-4B9F-A400-FDC47DB89A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5C87C0-3734-4568-97A6-6AB8979AABE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E3B2F0-90E6-4868-915F-87131711EEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BC0B23-0CEE-489B-B89A-8776272EC8D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T15:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin Console, as demonstrated by privileges for account creation and other administrative capabilities, related to the saveNoValidate action and saveNoValidateAllowedFormsAndWorkflows IDs."
      }, {
        "lang" : "es",
        "value" : "Sun Java System Identity Manager (IdM) v7.0 hasta v8.0, permite a usuarios autenticados en remoto ganar privilegios al enviar comandos manipulados a la Consola Admin, como se ha demostrado a través de privilegios para crear cuentas y otras capacidades administrativas. Está relacionado con la acción saveNoValidate e IDs saveNoValidateAllowedFormsAndWorkflows."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0980492E-B7DB-4B9F-A400-FDC47DB89A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5C87C0-3734-4568-97A6-6AB8979AABE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E3B2F0-90E6-4868-915F-87131711EEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BC0B23-0CEE-489B-B89A-8776272EC8D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T15:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Linux, AIX, Solaris, and HP-UX permits \"control characters\" in the passwords of user accounts, which allows remote attackers to execute arbitrary commands via vectors involving \"resource adapters.\""
      }, {
        "lang" : "es",
        "value" : "Sun Java System Identity Manager (IdM) v7.0 through v8.0 sobre Linux, AIX, Solaris, y HP-UX, permite \"el control de caracteres\" en las contraseñas de las cuentas de usuario, lo que permite a atacantes remotos la ejecución de comandos de su elección a través de vectores que involucran a los \"resource adapters\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0980492E-B7DB-4B9F-A400-FDC47DB89A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5C87C0-3734-4568-97A6-6AB8979AABE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E3B2F0-90E6-4868-915F-87131711EEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BC0B23-0CEE-489B-B89A-8776272EC8D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T15:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object."
      }, {
        "lang" : "es",
        "value" : "Sun Java System Identity Manager (IdM) v7.0 a la v8.0, no restringe adecuadamente el acceso al objeto System Configuration, lo que permite a administradores autenticados remotamente y posiblemente a atacantes remotos, provocar un impacto desconocido mediante la modificación de este objeto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0980492E-B7DB-4B9F-A400-FDC47DB89A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5C87C0-3734-4568-97A6-6AB8979AABE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E3B2F0-90E6-4868-915F-87131711EEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BC0B23-0CEE-489B-B89A-8776272EC8D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_253267_sun_java",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T18:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Piwik 0.2.32 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the API key and other sensitive information via a direct request for misc/cron/archive.sh."
      }, {
        "lang" : "es",
        "value" : "Piwik v0.2.32 y anterioes almacenan información sensible bajo en directorio raíz Web con control de acceso insuficiente, lo que permite a atacantes remotos conseguir la clave API y otra información sensible a través de una petición directa de  misc/cron/archive.sh."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matomo:matomo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.32",
            "matchCriteriaId" : "43A7DB24-9CF1-4F80-AC3B-770416688084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matomo:matomo:0.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262A0DB0-6CE4-41E7-BDC6-18924C76EDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matomo:matomo:0.2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3F37F31-2288-4B86-9EEB-38EE8B1979C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matomo:matomo:0.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74DBC09F-4B09-490B-8367-93B3257F9DBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matomo:matomo:0.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0384553E-FEEB-4AE4-B1F1-1EC99BE07BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matomo:matomo:0.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64C21FE-BCA5-4830-AA85-5959CBE3800D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matomo:matomo:0.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF976D83-866E-416D-A21C-2BF2A8F95462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matomo:matomo:0.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9EB7C0-C645-4E1A-A7CD-87325BBA81E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.piwik.org/trac/ticket/599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marco-ziesing.de/archives/35-Schluesselloch-in-Piwik.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/23/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.piwik.org/trac/ticket/599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marco-ziesing.de/archives/35-Schluesselloch-in-Piwik.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/23/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T18:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a DNS resource record (RR) with a long (1) class field (clas variable) and possibly (2) TTL field."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en la función ldns_rr_new_frm_str_internal  en ldns  v1.4.x, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) y posiblemente la ejecución de código de su elección a través de un registro de recurso (RR) con un (1) campo \"class\"  (variable \"class\") largo y posiblemente con (2) un campo largo TTL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:ldns:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7036E2A8-39EB-45D1-B0A5-80C35F737281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:ldns:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B747B09-4C10-4F06-9E75-08C220ABED84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nlnetlabs.nl/bugs/show_bug.cgi?id=232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nlnetlabs.nl/svn/ldns/tags/release-1.5.0/Changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/24/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nlnetlabs.nl/bugs/show_bug.cgi?id=232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nlnetlabs.nl/svn/ldns/tags/release-1.5.0/Changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/24/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T18:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple argument injection vulnerabilities in PPLive.exe in PPLive 1.9.21 and earlier allow remote attackers to execute arbitrary code via a UNC share pathname in the LoadModule argument to the (1) synacast, (2) Play, (3) pplsv, or (4) ppvod URI handler.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de argumento en PPLive.exe de PPLive v1.9.21 y anteriores, permite a atacantes remotos ejecutar código de su elección a través de un UNC con nombre de ruta compartido en el argumento de LoadModule a (1) synacast, (2) Play, (3) pplsv o (4) controlador URI ppvod. NOTA: algunos de estos detalles se han obtenido de fuentes de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pplive:pplive:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.21",
            "matchCriteriaId" : "D49260CE-96F2-4943-BEEE-61F4AB7A9EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pplive:pplive:1.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F645AD9-D61F-4F50-9540-A40A7C95E462"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34327",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0739",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T18:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Java code via a crafted XSLT stylesheet with \"extension elements and extension functions\" that trigger code execution by Xalan-Java, as demonstrated using xalan://java.lang.Runtime."
      }, {
        "lang" : "es",
        "value" : "Hannon Hill Cascade Server v5.7 y otras versiones que permite a los usuarios remotos autenticados ejecutar arbitrariamente programan o código Java a través de hojas de estilo XSLT manipuladas con \"elementos de extensión y funciones de extensión\" que lanzan ejecución de código por Xalan-Java, como se demuestra usando xala://java.lang.Runtime."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hannonhill:cascade:5.7:svr:*:*:*:*:*:*",
            "matchCriteriaId" : "69680B41-9AE1-4186-8F58-B7742B8A5003"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.hannonhill.com/browse/CSCD-4753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501981/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.hannonhill.com/browse/CSCD-4753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T18:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to read arbitrary files via a base64-encoded absolute path in the filename parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio absoluto en upload.php en Rapidleech rev.36 y anteriores permite a atacantes remotos leer archivos de su elección a través de una ruta absoluta base64-encoded en el parámetro \"filename\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidleech:rapidleech:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rev36",
            "matchCriteriaId" : "05EFDD78-9EAC-4672-A82D-488B5E1ECD24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34300",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.bkis.vn/?p=345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501854/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.bkis.vn/?p=345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501854/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T18:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uploaded parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en upload.php en Rapidleech rev.36 y anteriores permite a atacantes remotos añadir y ejecutar archivos locales de su elección a través de secuencias de salto de directorio en el parámetro \"uploaded\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidleech:rapidleech:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rev.36",
            "matchCriteriaId" : "44D87FC7-5CCD-43C6-9AF3-A7FDBD065C56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34300",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.bkis.vn/?p=345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501854/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.bkis.vn/?p=345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501854/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T18:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to inject arbitrary web script or HTML via the uploaded parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en upload.php en Rapidleech rev.36, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"uploaded \"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidleech:rapidleech:rev36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B3BC6AB-2ADE-49FB-91BC-E1D6743C79EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34300",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.bkis.vn/?p=345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501854/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.bkis.vn/?p=345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501854/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T18:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de uso de memoria previamente liberada en el control ActiveX de LIVEAUDIO.LiveAudioCtrl.1 en LIVEAU~1.OCX versión 7.0 para sistemas DVR de GeoVision, permite a los atacantes remotos ejecutar código arbitrario mediante el llamado al método GetAudioPlayingTime con ciertos argumentos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geovision:liveaudio_activex_control:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00ECA59A-A8F6-43EA-8C23-DE0ED5B6443F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/9sg_geovision_liveaudio_freedmem.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501773/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34115",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/9sg_geovision_liveaudio_freedmem.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501773/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0784",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-25T23:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en la herramienta stap de SystemTap versiones 0.0.20080705 y 0.0.20090314, permite a los usuarios locales del grupo stapusr insertar módulos de kernel de SystemTap arbitrarios y alcanzar privilegios por medio de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:C/A:C",
            "baseScore" : 6.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemtap:systemtap:0.0.20080705:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF696A11-4FC7-4ECE-B5E3-26B258431803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemtap:systemtap:0.0.20090314:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC37FD4-A179-45E8-8722-A24C3D32CCAE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34441",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34479",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34548",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-110.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1755",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0373.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0907",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11613",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-110.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0373.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T23:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang)."
      }, {
        "lang" : "es",
        "value" : "LdapCtx en el servicio LDAP en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v5.0 actualización 17 y anteriores; 6 actualización 12 y anteriores; SDK y JRE v1.3.1_24 y anteriores; y v1.4.2_19 y anteriores no cierran la conexión cuando la inicialización falla, lo que permite a los atacantes remotos causar una denegación de servicio (cuelgue del servicio LDAP )."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update17:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "CB0FA568-3AC1-4705-9E48-C93045B661BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "8C826CA0-A25F-4A10-BD9E-791372BF8F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2AADA633-EB11-49A0-8E40-66589034F03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "B120F7D9-7C1E-4716-B2FA-2990D449F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "CD61E49F-2A46-4107-BB3F-527079983306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "D900AAE0-6032-4096-AFC2-3D43C55C6C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "88B0958C-744C-4946-908C-09D2A5FAB120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE548B-DD0C-4C58-98CA-5B803F04F9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8E9AA0-8907-4B1A-86A1-08568195217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0754AFDC-2F1C-4C06-AB46-457B5E610029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DA4242-30D9-44C8-9D0D-877348FFA22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "C61C6043-99D0-4F36-AF84-1A5F90B895EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD30DAEB-4893-41CF-A455-B69C463B9337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update17:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "D4433A85-2A88-41B4-86BE-A51E45FBF1A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "1F38BA27-0EBC-47EC-99BF-A018E0BB0D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "9919D091-73D7-465A-80FF-F37D6CAF9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "02565D6F-4CB2-4671-A4EF-3169BCFA6154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "452A3E51-9EAC-451D-BA04-A1E7B7D917EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "55231B6B-9298-4363-9B5A-14C2DA7B1F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "E42CF0F7-418C-4BB6-9B73-FA3B9171D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "44051CFE-D15D-4416-A123-F3E49C67A9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "F296ACF3-1373-429D-B991-8B5BA704A7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B863420B-DE16-416A-9640-1A1340A9B855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "724C972F-74FE-4044-BBC4-7E0E61FC9002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE909DE-E55A-4BD3-A5BF-ADE407432193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAC04D2-68FD-4793-A8E7-4690A543D7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCD143C-057D-4F42-B487-46801E14ACF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1_24",
            "matchCriteriaId" : "5FEB3DCE-8F1B-4F69-9F32-B63D8A1A4EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399B06AC-E101-48EE-A362-D75F7072FF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E49A68E-0886-4AED-8FF4-9455914BFE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0875E34D-8544-49B9-BAD9-8191CC103A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E772B9-8E41-476F-81F5-87B41F1827A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A04480-92DF-49AD-9B36-7F1FCB29DE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477C310B-50AD-4D40-8EDB-4A80F0BF321D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1F526-6B28-47A3-8D2C-06CA067E9164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F09D9E-B04B-477E-86E6-E1B1F9650973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F929C59-9602-4962-95B4-4165D66E5935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B76949-9282-44D0-8075-74E482CE9A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B072DD-FC4F-4E07-9837-0E16017CA4AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86408019-1B53-4AA8-9F05-47EBD0466EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F47561-F59C-4904-8E05-D8A9629405A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB067445-8EA5-460F-B625-C21251E5A8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C075BC-607E-47A1-A32D-B912D2FA03BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007175B8-48DB-46BE-B971-FB57B6A33723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496901D5-014D-4920-A343-91A56F6FEFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D18FBC-4C9B-4722-90AB-028D281654F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1_24",
            "matchCriteriaId" : "1FC9BCEE-2470-492C-846F-B8CCC979C9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167D85F7-0D94-49CC-8A5E-F5FAB00ADFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34710306-D6CF-4D07-84BF-71A8839BE416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B93DC8-6375-4B41-B9BC-F22F592C56B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BF46A9-8E4A-4583-B35F-052FD481DF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B351BB-6CA6-4CEF-9F5D-ED47774FC676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA40FCD-1D34-4C47-908F-697433236153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00639A84-BD03-4BD9-A655-F806693DBC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14824B23-FF9F-4D6D-9D02-12B79BE346A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6493744C-A69D-4377-937E-85E7F5535EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09019B1-B873-41CE-951E-4777F324729C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4209A0-E73F-4B5A-9925-B5D20F879455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB8516D-03C4-478D-AFE2-824867FDC739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82AED17-FEC3-47D0-A395-26ACD07FBE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9630BC7B-9039-4FA6-86F8-5274783F3EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC39C819-9439-4029-8377-F6D58B3DFDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053DEF6-1317-4DA8-91D7-E1970DA62351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0605FF-3DDC-4F3A-8171-F3A447E9C292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801FF3B4-0729-4710-BFC2-4B078029944F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A411676-6666-4B54-A008-443B9B42F670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F69BEE4-CB4B-436A-9838-13239B368CF3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.2_19",
            "matchCriteriaId" : "AD1187CB-A684-42C9-8751-5499BEAA702E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63978872-E797-4F13-B0F9-98CB67D0962A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.2_19",
            "matchCriteriaId" : "5F3F1AFF-0554-40BB-A7A8-62088F56D208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "002CA86D-3090-4C7A-947A-21CB5D1ADD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-19-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254569-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-19-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254569-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T23:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier allows remote LDAP servers to execute arbitrary code via unknown vectors related to serialized data."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la implementación LDAP de Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v5.0 Update 17 y anteriores, v6 Update 12 y anteriores, SDK y JRE v1.3.1_24 y anteriores, y v1.4.2_19 y anteriores; permite a servidores LDAP remotos ejecutar código de su elección a través de vectores desconocidos relacionados con los datos en serie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update17:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "CB0FA568-3AC1-4705-9E48-C93045B661BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "8C826CA0-A25F-4A10-BD9E-791372BF8F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2AADA633-EB11-49A0-8E40-66589034F03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "B120F7D9-7C1E-4716-B2FA-2990D449F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "CD61E49F-2A46-4107-BB3F-527079983306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "D900AAE0-6032-4096-AFC2-3D43C55C6C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "88B0958C-744C-4946-908C-09D2A5FAB120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE548B-DD0C-4C58-98CA-5B803F04F9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8E9AA0-8907-4B1A-86A1-08568195217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0754AFDC-2F1C-4C06-AB46-457B5E610029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DA4242-30D9-44C8-9D0D-877348FFA22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "C61C6043-99D0-4F36-AF84-1A5F90B895EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD30DAEB-4893-41CF-A455-B69C463B9337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update17:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "D4433A85-2A88-41B4-86BE-A51E45FBF1A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "1F38BA27-0EBC-47EC-99BF-A018E0BB0D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "9919D091-73D7-465A-80FF-F37D6CAF9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "02565D6F-4CB2-4671-A4EF-3169BCFA6154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "452A3E51-9EAC-451D-BA04-A1E7B7D917EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "55231B6B-9298-4363-9B5A-14C2DA7B1F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "E42CF0F7-418C-4BB6-9B73-FA3B9171D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "44051CFE-D15D-4416-A123-F3E49C67A9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "F296ACF3-1373-429D-B991-8B5BA704A7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B863420B-DE16-416A-9640-1A1340A9B855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "724C972F-74FE-4044-BBC4-7E0E61FC9002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE909DE-E55A-4BD3-A5BF-ADE407432193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAC04D2-68FD-4793-A8E7-4690A543D7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCD143C-057D-4F42-B487-46801E14ACF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1_24",
            "matchCriteriaId" : "5FEB3DCE-8F1B-4F69-9F32-B63D8A1A4EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399B06AC-E101-48EE-A362-D75F7072FF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E49A68E-0886-4AED-8FF4-9455914BFE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0875E34D-8544-49B9-BAD9-8191CC103A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E772B9-8E41-476F-81F5-87B41F1827A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A04480-92DF-49AD-9B36-7F1FCB29DE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477C310B-50AD-4D40-8EDB-4A80F0BF321D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1F526-6B28-47A3-8D2C-06CA067E9164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F09D9E-B04B-477E-86E6-E1B1F9650973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F929C59-9602-4962-95B4-4165D66E5935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B76949-9282-44D0-8075-74E482CE9A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B072DD-FC4F-4E07-9837-0E16017CA4AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86408019-1B53-4AA8-9F05-47EBD0466EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F47561-F59C-4904-8E05-D8A9629405A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB067445-8EA5-460F-B625-C21251E5A8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C075BC-607E-47A1-A32D-B912D2FA03BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007175B8-48DB-46BE-B971-FB57B6A33723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496901D5-014D-4920-A343-91A56F6FEFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D18FBC-4C9B-4722-90AB-028D281654F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1_24",
            "matchCriteriaId" : "1FC9BCEE-2470-492C-846F-B8CCC979C9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167D85F7-0D94-49CC-8A5E-F5FAB00ADFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34710306-D6CF-4D07-84BF-71A8839BE416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B93DC8-6375-4B41-B9BC-F22F592C56B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BF46A9-8E4A-4583-B35F-052FD481DF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B351BB-6CA6-4CEF-9F5D-ED47774FC676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA40FCD-1D34-4C47-908F-697433236153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00639A84-BD03-4BD9-A655-F806693DBC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14824B23-FF9F-4D6D-9D02-12B79BE346A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6493744C-A69D-4377-937E-85E7F5535EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09019B1-B873-41CE-951E-4777F324729C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4209A0-E73F-4B5A-9925-B5D20F879455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB8516D-03C4-478D-AFE2-824867FDC739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82AED17-FEC3-47D0-A395-26ACD07FBE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9630BC7B-9039-4FA6-86F8-5274783F3EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC39C819-9439-4029-8377-F6D58B3DFDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053DEF6-1317-4DA8-91D7-E1970DA62351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0605FF-3DDC-4F3A-8171-F3A447E9C292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801FF3B4-0729-4710-BFC2-4B078029944F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A411676-6666-4B54-A008-443B9B42F670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F69BEE4-CB4B-436A-9838-13239B368CF3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.2_19",
            "matchCriteriaId" : "AD1187CB-A684-42C9-8751-5499BEAA702E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63978872-E797-4F13-B0F9-98CB67D0962A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.2_19",
            "matchCriteriaId" : "5F3F1AFF-0554-40BB-A7A8-62088F56D208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "002CA86D-3090-4C7A-947A-21CB5D1ADD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-19-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254569-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-19-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254569-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T23:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en unpack200 en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v5.0 Update 17 y anteriores, y v6 Update 12 y anteriores, permite a atacantes remotos acceder a ficheros y ejecutar código de su elección a través de un archivo JAR con cabeceras Pack200 manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update17:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "CB0FA568-3AC1-4705-9E48-C93045B661BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2AADA633-EB11-49A0-8E40-66589034F03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "B120F7D9-7C1E-4716-B2FA-2990D449F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "CD61E49F-2A46-4107-BB3F-527079983306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "D900AAE0-6032-4096-AFC2-3D43C55C6C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "88B0958C-744C-4946-908C-09D2A5FAB120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE548B-DD0C-4C58-98CA-5B803F04F9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8E9AA0-8907-4B1A-86A1-08568195217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0754AFDC-2F1C-4C06-AB46-457B5E610029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DA4242-30D9-44C8-9D0D-877348FFA22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "C61C6043-99D0-4F36-AF84-1A5F90B895EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update17:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "D4433A85-2A88-41B4-86BE-A51E45FBF1A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "9919D091-73D7-465A-80FF-F37D6CAF9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "02565D6F-4CB2-4671-A4EF-3169BCFA6154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "452A3E51-9EAC-451D-BA04-A1E7B7D917EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "55231B6B-9298-4363-9B5A-14C2DA7B1F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "E42CF0F7-418C-4BB6-9B73-FA3B9171D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "44051CFE-D15D-4416-A123-F3E49C67A9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "F296ACF3-1373-429D-B991-8B5BA704A7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B863420B-DE16-416A-9640-1A1340A9B855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "724C972F-74FE-4044-BBC4-7E0E61FC9002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE909DE-E55A-4BD3-A5BF-ADE407432193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAC04D2-68FD-4793-A8E7-4690A543D7D4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "8C826CA0-A25F-4A10-BD9E-791372BF8F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A4FEC7-A4A0-4B5C-A56C-8F80AE19865E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD30DAEB-4893-41CF-A455-B69C463B9337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*",
            "matchCriteriaId" : "21D6CE7E-A036-496C-8E08-A87F62B5290A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "1F38BA27-0EBC-47EC-99BF-A018E0BB0D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCD143C-057D-4F42-B487-46801E14ACF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-254570-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020225.1-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-254570-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020225.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T23:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en unpack200 en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v5.0 Update 17 y anteriores, y v6 Update 12 y anteriores, permite a atacantes remotos acceder a archivos o ejecutar código de su elección a través de un archivo JAR con cabeceras PAck200 manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update17:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "CB0FA568-3AC1-4705-9E48-C93045B661BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2AADA633-EB11-49A0-8E40-66589034F03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "B120F7D9-7C1E-4716-B2FA-2990D449F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "CD61E49F-2A46-4107-BB3F-527079983306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "D900AAE0-6032-4096-AFC2-3D43C55C6C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "88B0958C-744C-4946-908C-09D2A5FAB120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE548B-DD0C-4C58-98CA-5B803F04F9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8E9AA0-8907-4B1A-86A1-08568195217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0754AFDC-2F1C-4C06-AB46-457B5E610029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DA4242-30D9-44C8-9D0D-877348FFA22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "C61C6043-99D0-4F36-AF84-1A5F90B895EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update17:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "D4433A85-2A88-41B4-86BE-A51E45FBF1A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "9919D091-73D7-465A-80FF-F37D6CAF9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "02565D6F-4CB2-4671-A4EF-3169BCFA6154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "452A3E51-9EAC-451D-BA04-A1E7B7D917EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "55231B6B-9298-4363-9B5A-14C2DA7B1F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "E42CF0F7-418C-4BB6-9B73-FA3B9171D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "44051CFE-D15D-4416-A123-F3E49C67A9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "F296ACF3-1373-429D-B991-8B5BA704A7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B863420B-DE16-416A-9640-1A1340A9B855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "724C972F-74FE-4044-BBC4-7E0E61FC9002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE909DE-E55A-4BD3-A5BF-ADE407432193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAC04D2-68FD-4793-A8E7-4690A543D7D4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "8C826CA0-A25F-4A10-BD9E-791372BF8F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A4FEC7-A4A0-4B5C-A56C-8F80AE19865E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD30DAEB-4893-41CF-A455-B69C463B9337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*",
            "matchCriteriaId" : "21D6CE7E-A036-496C-8E08-A87F62B5290A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "1F38BA27-0EBC-47EC-99BF-A018E0BB0D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCD143C-057D-4F42-B487-46801E14ACF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-254570-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020225.1-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-254570-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020225.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T23:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allow remote attackers to access files or execute arbitrary code via (1) a crafted PNG image that triggers an integer overflow during memory allocation for display on the splash screen, aka CR 6804996; and (2) a crafted GIF image from which unspecified values are used in calculation of offsets, leading to object-pointer corruption, aka CR 6804997."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) versión 6 Update 12 y anteriores, permiten a los atacantes remotos acceder a archivos o ejecutar código arbitrario por medio de (1) una imagen PNG diseñada que desencadena un desbordamiento de enteros durante la asignación de memoria para su visualización en la pantalla de presentación, también se conoce como CR 6804996; y (2) una imagen GIF diseñada a partir de la cual se utilizan valores no especificados en el cálculo de desplazamientos, conllevando a una corrupción de puntero de objeto, también se conoce como CR 6804997."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "8C826CA0-A25F-4A10-BD9E-791372BF8F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A4FEC7-A4A0-4B5C-A56C-8F80AE19865E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD30DAEB-4893-41CF-A455-B69C463B9337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*",
            "matchCriteriaId" : "21D6CE7E-A036-496C-8E08-A87F62B5290A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "1F38BA27-0EBC-47EC-99BF-A018E0BB0D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCD143C-057D-4F42-B487-46801E14ACF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-254571-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-254571-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T23:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka CR 6804998."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento del búfer en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v5.0 Update 17 y anteriores; v6 Update 12 y anteriores; v1.4.2_19 y anteriores; y 1.3.1_24 y anteriores, permite a atacantes remotos acceder a ficheros o ejecutar código de su elección a través de una imagen GIF manipulada. También se conoce como CR 6804998."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update17:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "CB0FA568-3AC1-4705-9E48-C93045B661BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "8C826CA0-A25F-4A10-BD9E-791372BF8F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2AADA633-EB11-49A0-8E40-66589034F03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "B120F7D9-7C1E-4716-B2FA-2990D449F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "CD61E49F-2A46-4107-BB3F-527079983306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "D900AAE0-6032-4096-AFC2-3D43C55C6C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "88B0958C-744C-4946-908C-09D2A5FAB120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE548B-DD0C-4C58-98CA-5B803F04F9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8E9AA0-8907-4B1A-86A1-08568195217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0754AFDC-2F1C-4C06-AB46-457B5E610029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DA4242-30D9-44C8-9D0D-877348FFA22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "C61C6043-99D0-4F36-AF84-1A5F90B895EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD30DAEB-4893-41CF-A455-B69C463B9337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update17:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "D4433A85-2A88-41B4-86BE-A51E45FBF1A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "1F38BA27-0EBC-47EC-99BF-A018E0BB0D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "9919D091-73D7-465A-80FF-F37D6CAF9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "02565D6F-4CB2-4671-A4EF-3169BCFA6154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "452A3E51-9EAC-451D-BA04-A1E7B7D917EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "55231B6B-9298-4363-9B5A-14C2DA7B1F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "E42CF0F7-418C-4BB6-9B73-FA3B9171D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "44051CFE-D15D-4416-A123-F3E49C67A9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "F296ACF3-1373-429D-B991-8B5BA704A7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B863420B-DE16-416A-9640-1A1340A9B855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "724C972F-74FE-4044-BBC4-7E0E61FC9002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE909DE-E55A-4BD3-A5BF-ADE407432193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAC04D2-68FD-4793-A8E7-4690A543D7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCD143C-057D-4F42-B487-46801E14ACF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1_24",
            "matchCriteriaId" : "5FEB3DCE-8F1B-4F69-9F32-B63D8A1A4EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399B06AC-E101-48EE-A362-D75F7072FF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E49A68E-0886-4AED-8FF4-9455914BFE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0875E34D-8544-49B9-BAD9-8191CC103A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E772B9-8E41-476F-81F5-87B41F1827A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A04480-92DF-49AD-9B36-7F1FCB29DE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477C310B-50AD-4D40-8EDB-4A80F0BF321D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1F526-6B28-47A3-8D2C-06CA067E9164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F09D9E-B04B-477E-86E6-E1B1F9650973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F929C59-9602-4962-95B4-4165D66E5935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B76949-9282-44D0-8075-74E482CE9A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B072DD-FC4F-4E07-9837-0E16017CA4AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86408019-1B53-4AA8-9F05-47EBD0466EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F47561-F59C-4904-8E05-D8A9629405A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB067445-8EA5-460F-B625-C21251E5A8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C075BC-607E-47A1-A32D-B912D2FA03BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007175B8-48DB-46BE-B971-FB57B6A33723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496901D5-014D-4920-A343-91A56F6FEFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D18FBC-4C9B-4722-90AB-028D281654F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1_24",
            "matchCriteriaId" : "1FC9BCEE-2470-492C-846F-B8CCC979C9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167D85F7-0D94-49CC-8A5E-F5FAB00ADFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34710306-D6CF-4D07-84BF-71A8839BE416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B93DC8-6375-4B41-B9BC-F22F592C56B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BF46A9-8E4A-4583-B35F-052FD481DF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B351BB-6CA6-4CEF-9F5D-ED47774FC676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA40FCD-1D34-4C47-908F-697433236153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00639A84-BD03-4BD9-A655-F806693DBC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14824B23-FF9F-4D6D-9D02-12B79BE346A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6493744C-A69D-4377-937E-85E7F5535EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09019B1-B873-41CE-951E-4777F324729C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4209A0-E73F-4B5A-9925-B5D20F879455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB8516D-03C4-478D-AFE2-824867FDC739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82AED17-FEC3-47D0-A395-26ACD07FBE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9630BC7B-9039-4FA6-86F8-5274783F3EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC39C819-9439-4029-8377-F6D58B3DFDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053DEF6-1317-4DA8-91D7-E1970DA62351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0605FF-3DDC-4F3A-8171-F3A447E9C292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801FF3B4-0729-4710-BFC2-4B078029944F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A411676-6666-4B54-A008-443B9B42F670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F69BEE4-CB4B-436A-9838-13239B368CF3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.2_19",
            "matchCriteriaId" : "AD1187CB-A684-42C9-8751-5499BEAA702E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63978872-E797-4F13-B0F9-98CB67D0962A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.2_19",
            "matchCriteriaId" : "5F3F1AFF-0554-40BB-A7A8-62088F56D208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "002CA86D-3090-4C7A-947A-21CB5D1ADD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-254571-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-254571-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T23:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and triggers a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Un error de firma de enteros en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) versiones 5.0 Update 17 y anteriores, y versiones 6 Update 12 y anteriores, permite a los atacantes remotos acceder a archivos o ejecutar código arbitrario por medio de descripciones de glifos diseñados en una fuente Type1, lo que omite una comparación firmada y desencadena un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_runtime_environment:5.0:*:17:*:*:*:*:*",
            "matchCriteriaId" : "C34EC26B-EA60-484F-ABAD-F1CD308FCF06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_runtime_environment:6.0:*:12:*:*:*:*:*",
            "matchCriteriaId" : "83E4124E-E0A6-477D-BDBD-BB6C1887735D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se_development_kit:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D909E399-16B0-4C1D-A90A-4B5CFE1DFB3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118669-19-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-254571-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118669-19-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-254571-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T23:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and (1) \"limits on Font creation,\" aka CR 6522586, and (2) another unspecified vector, aka CR 6632886."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v5.0 Update 17 y anteriores, y v6 Update 12 y anteriores, permite a atacantes remotos provocar una denegación de servicio (consumo de disco) a través de vectores relacionados con ficheros de fuentes temporales y (1) \"límites en la creación de Fuentes\" también conocido como CR 6522586 y (2) otro vector no especificado, también conocido como CR 6632886."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update17:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "CB0FA568-3AC1-4705-9E48-C93045B661BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2AADA633-EB11-49A0-8E40-66589034F03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "B120F7D9-7C1E-4716-B2FA-2990D449F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "CD61E49F-2A46-4107-BB3F-527079983306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "D900AAE0-6032-4096-AFC2-3D43C55C6C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "88B0958C-744C-4946-908C-09D2A5FAB120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE548B-DD0C-4C58-98CA-5B803F04F9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8E9AA0-8907-4B1A-86A1-08568195217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0754AFDC-2F1C-4C06-AB46-457B5E610029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DA4242-30D9-44C8-9D0D-877348FFA22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "C61C6043-99D0-4F36-AF84-1A5F90B895EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update17:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "D4433A85-2A88-41B4-86BE-A51E45FBF1A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "9919D091-73D7-465A-80FF-F37D6CAF9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "02565D6F-4CB2-4671-A4EF-3169BCFA6154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "452A3E51-9EAC-451D-BA04-A1E7B7D917EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "55231B6B-9298-4363-9B5A-14C2DA7B1F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "E42CF0F7-418C-4BB6-9B73-FA3B9171D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "44051CFE-D15D-4416-A123-F3E49C67A9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "F296ACF3-1373-429D-B991-8B5BA704A7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B863420B-DE16-416A-9640-1A1340A9B855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "724C972F-74FE-4044-BBC4-7E0E61FC9002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE909DE-E55A-4BD3-A5BF-ADE407432193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAC04D2-68FD-4793-A8E7-4690A543D7D4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "8C826CA0-A25F-4A10-BD9E-791372BF8F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A4FEC7-A4A0-4B5C-A56C-8F80AE19865E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD30DAEB-4893-41CF-A455-B69C463B9337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*",
            "matchCriteriaId" : "21D6CE7E-A036-496C-8E08-A87F62B5290A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "1F38BA27-0EBC-47EC-99BF-A018E0BB0D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCD143C-057D-4F42-B487-46801E14ACF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-19-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254608-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-19-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254608-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T23:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to cause a denial of service (probably resource consumption) for a JAX-WS service endpoint via a connection without any data, which triggers a file descriptor \"leak.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la implementación del servidor HTTP Lightweight en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v6 Update 12 y anteriores permite a atacantes remotos provocar una denegación de servicio (probablemente consumo de recursos) para un punto final en el servicio JAX-WS a través de una conexión sin datos, lo que provoca una fuga del descriptor de fichero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "8C826CA0-A25F-4A10-BD9E-791372BF8F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A4FEC7-A4A0-4B5C-A56C-8F80AE19865E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD30DAEB-4893-41CF-A455-B69C463B9337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*",
            "matchCriteriaId" : "21D6CE7E-A036-496C-8E08-A87F62B5290A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "1F38BA27-0EBC-47EC-99BF-A018E0BB0D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCD143C-057D-4F42-B487-46801E14ACF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254609-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254609-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T23:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to \"code generation.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en la Máquina Virtual de Java en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) 6 Update 12 y anteriores, permite a atacantes remotos acceder a ficheros y ejecutar código de su elección a través de vectores desconocidos relacionados con la \"generación de código\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDA9F90-5D16-4E04-B285-D32C362279C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254610-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254610-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T23:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to \"deserializing applets,\" aka CR 6646860."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el Plug-in Java enn Java SE Development Kit (JDK) y Java Runtime Environment (JRE) 5.0 Update 17 y anteriores; 6 Update 12 y anteriores; v1.4.2_19 y anteriores; y v1.3.1_24 y anteriores, permiten a atacantes remotos acceder a archivos de su elección y ejecutar código de su elección a través de vectores no especificados relacionados con \"desserialización de applets,\" también conocido como CR 6646860."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDA9F90-5D16-4E04-B285-D32C362279C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T23:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331.  NOTE: this vulnerability can be leveraged with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors."
      }, {
        "lang" : "es",
        "value" : "El plug-in Java en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) 5.0 actualización 17 y anteriores; 6 actualización 12 y anteriores; y v1.4.2_19 y anteriores no previenen Javascript que es cargada desde el localhost desde la conexión a otros puertos en el sistema, lo que permite a los atacantes asistidos por el usuario evitar las restricciones de acceso intencionadas a través de via LiveConnect, también conocido como CR 6724331. NOTA: esta vulnerabilidad puede ser elevada con separadas vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados - XSS - para vectores de ataque remoto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDA9F90-5D16-4E04-B285-D32C362279C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118669-19-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118669-19-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T23:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490."
      }, {
        "lang" : "es",
        "value" : "El plug-in en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v6 Update 12, 11 y 10 permite a atacantes remotos asistidos por usuarios locales, provocar una que un applet de confianza ejecutarse en una versión del JRE antigua, lo que puede ser utilizado para explotar vulnerabilidades en esa versión antigua, también conocido como CR 6706490."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDA9F90-5D16-4E04-B285-D32C362279C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/39819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T23:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948."
      }, {
        "lang" : "es",
        "value" : "El  Plug-in Java en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) 6 Update 12, 11, y 10 no analiza adecuadamente los archivos  crossdomain.xml, lo que permite a atacantes remotos evitar las restricciones de acceso establecidas y conectarse a sitios de su elección a través de vectores desconocidos, también conocido como CR 6798948."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "F20FDD9F-FF45-48BC-9207-54FB02E76071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-25T23:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a \"Swing JLabel HTML parsing vulnerability,\" aka CR 6782871."
      }, {
        "lang" : "es",
        "value" : "El plugin de Java de Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v6 Update 12 y anteriores, y v5.0 Update 17 y anteriores, permite a atacantes remotos engañar a los usuarios para que confíen en un applet firmado a través de vectores desconocidos que tergiversan los diálogos de los avisos de seguridad . Está relacionado con una \"Vulnerabilidad de análisis sintáctico de Swing JLabel HTML (Swing JLabel HTML parsing vulnerability)\", también se conoce como CR 6782871."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDA9F90-5D16-4E04-B285-D32C362279C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-14-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124344236532162&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-14-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-26T05:50:27.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other versions before 7.39, allows remote attackers to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de formato de cadena en en componente mini_calendar en Citadel.org WebCit v7.22, y otras versiones anteriores a v7.39 permite a usuarios remotos ejecutar código de su elección a través de vectores no específicos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citadel:webcit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.38",
            "matchCriteriaId" : "C6634D04-1ED1-43A5-B42F-0635DCD4413F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citadel:webcit:7.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F783DAF6-1FF0-4227-A0B1-C9D103FC2619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citadel:webcit:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C30CB6-CFB0-4911-9427-58D25470DC42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citadel:webcit:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD3E3CF-FBE4-467C-BC80-0A92CB5A5B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citadel:webcit:7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC46E39-07E7-4E35-B4F3-193A4F5AA821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citadel:webcit:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5473C0C-1864-4E84-BFED-50CC5AFD47FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citadel:webcit:7.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "827EECFC-3926-42C7-9917-3D7DA58F8A2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.citadel.org/doku.php/news:webcit.security.advisory.-.2009-march-23",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34206",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/52915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.citadel.org/doku.php/news:webcit.security.advisory.-.2009-march-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1041",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2009-03-26T05:51:47.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad ktimer (sys/kern/kern_time.c) de FreeBSD v7.0, v7.1 y v7.2, permite a usuarios locales sobrescribir a su elección la memoria del kernel a través de un valor timer fuera de rango."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E0A416-733A-4616-AE08-150D67FCEA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.0:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "42231BCC-2B90-4196-A1C2-408A353C1BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.0:release:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8CCA19-1CBF-406F-AF84-00E803423195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.0:release-p8:*:*:*:*:*:*",
            "matchCriteriaId" : "510ABA29-1AAA-4279-BAD2-B4624DC60A11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.0:release-p9:*:*:*:*:*:*",
            "matchCriteriaId" : "7A6C0249-951F-4352-92B2-E6A6CD5F26FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "C3556FE9-9949-4B8E-9E51-1205220B1A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.0:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "799D4A5E-7BF1-4B04-89DB-5C929938847B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803EFA9F-B7CB-4511-B1C1-381170CA9A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "14D72C9B-EEB0-4605-BEA2-F77092129245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:release-p1:*:*:*:*:*:*",
            "matchCriteriaId" : "20A31C9A-A928-4C9B-BB49-0E53227746DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:release-p2:*:*:*:*:*:*",
            "matchCriteriaId" : "99FB7443-F942-402A-9104-64677EAF014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A75104-5A3E-485E-B4EC-0873C942731C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F948527C-A01E-4315-80B6-47FACE18A34F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-09:06.ktimer.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34196",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021882",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49362",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8261",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-09:06.ktimer.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-26T05:51:52.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in eXeScope 6.50 allows user-assisted remote attackers to execute arbitrary code via a crafted executable (.exe) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en eXeScope v6.50 permite a atacantes remotos asistidos por usuarios locales ejecutar código de su elección a través de un fichero ejecutable (.exe) manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:brother_soft:exescope:6:50:*:*:*:*:*:*",
            "matchCriteriaId" : "C16AD6D4-B66D-4F7F-BE84-D45D050B796A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34219",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-26T05:51:52.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allows remote attackers to overwrite arbitrary files via whitespace and a command-line switch, followed by a full pathname, in the third argument to the download method."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de argumento en orbitmxt.dll v2.1.0.2 del ActiveX Orbit Downloader  v2.8.7 y versiones previas, permite a atacantes remotos sobreescribir ficheros de su elección a través un espacio en blanco e interruptores de la línea de comandos seguidos de un nombre de ruta completo en el tercer argumento del método \"download\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbit_downloader:orbit_downloader:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6523B1-6B03-43B6-AEFD-72B92019D992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbit_downloader:orbit_downloader:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7553CFDF-7CA8-4DAF-8FFF-3D9222C25937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.7",
            "matchCriteriaId" : "A8309D23-4FB8-4D01-A152-14BF18C6D220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9582704-5578-48A0-A410-0F66F0BB85A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEEC8A4-B3A3-447A-BFAD-0C663AF87E50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDEDDF18-2B7F-4C36-AF04-FD8980A2F88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A8333D-8F29-4DB7-95F4-948A4810D3B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F23407-9615-4C6F-93C1-66BF0D2701B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC08EF4B-F0C0-4481-A939-F54B47144FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B3EA76-C40F-4AE3-AA7E-C3001FDF2612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6113A9CE-B5E9-4A0C-AD89-BD3B12BA4C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9964A5-B840-43A0-9C47-7C4ED9DCB267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B83AB34-50FE-4437-896D-4C33557FF4D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C26D59-B436-4ED2-B13D-F81D3DE6D9C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90842889-9B97-492B-8F4A-020A9302D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD46C6-9D07-4A0E-801C-2EBFDB02E418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A412B9B8-3011-4683-AD6B-1FC33E7C151C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3471391-3784-420B-A5D2-4D1BE9AFC0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitdownloader:orbit_downloader:2.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD7B7CF-628E-4D9D-AF21-70E56F532F7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.waraxe.us/advisory-73.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.waraxe.us/advisory-73.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-26T05:51:52.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the x parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php de Pixie CMS v1.01a, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro x. NOTA: información de origen desconocido; los detalles se han obtenido únicamente de fuentes de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getpixie:pixie_cms:1.01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5A23DC-5D37-4111-BCAE-7B60AF59E98D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34364",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-26T05:51:52.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the referral function in admin/lib/lib_logs.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header in a request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la función referral de admin/lib/lib_logs.php de Pixie CMS v1.01a, permite a atacantes remotos ejecutar comandos SQL de su elección a través de la cabecera HTTP en una solicitud."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getpixie:pixie_cms:1.01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5A23DC-5D37-4111-BCAE-7B60AF59E98D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0324.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lampsecurity.org/Pixie-CMS-Multiple-Vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://osvdb.org/52833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34364",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34189",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0324.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lampsecurity.org/Pixie-CMS-Multiple-Vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://osvdb.org/52833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-26T05:51:52.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to inject arbitrary web script or HTML via the x parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en index.php de Pixie CMS v1.01a, permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través del parámetro x."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getpixie:pixie_cms:1.01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5A23DC-5D37-4111-BCAE-7B60AF59E98D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0324.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lampsecurity.org/Pixie-CMS-Multiple-Vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://osvdb.org/52832",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34364",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34189",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0324.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lampsecurity.org/Pixie-CMS-Multiple-Vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://osvdb.org/52832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-26T05:51:52.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long hostname in a .bsl playlist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en BS.Player (bsplayer) v2.32 Build 975 Free y v2.34 Build 980 PRO y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o ejecutar código de su elección a través de un hostname largo en un fichero de lista de reproducción .bsl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bsplayer:bs.player:2.32:free:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD8C3AE-A226-4E46-9F79-7B61A7B957DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bsplayer:bs.player:2.34:pro:*:*:*:*:*:*",
            "matchCriteriaId" : "97551864-DFEB-4F25-A8A8-8644FFA4F2E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/9sg_bsplayer_seh.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34412",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502016/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://retrogod.altervista.org/9sg_bsplayer_seh.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502016/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-26T05:51:52.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the node edit form feature in Drupal Content Construction Kit (CCK) 6.x before 6.x-2.2, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (1) titles of candidate referenced nodes in the Node reference sub-module and the (2) names of candidate referenced users in the User reference sub-module."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en el formulario \"node edit\" del módulo  Content Construction Kit (CCK) v6.x anterior  a v6.x-2.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del (1)títulos de nodos candidatos referenciados en el sub-módulo \"Node Reference\" y (2) nombres de usuarios candidatos referenciados en el sub-módulo \"User references\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:content_construction_kit:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C311CE79-DE50-498A-95B6-0B9F3992A2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:content_construction_kit:6.x-1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "6C557F91-041A-422A-9B8D-A16C8EE37BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:content_construction_kit:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2884977-8DFE-4488-BD6E-E17FC1781DAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5227C3E1-DCEA-4B71-A911-61E3A9BEFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D2181EF0-5583-44F5-98D4-4E583B885CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8CAF91-5F75-4542-8F53-60A8A84FC4D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc10:*:*:*:*:*:*",
            "matchCriteriaId" : "1489B0C9-1889-40EC-BF72-96C3847092B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8749D157-5FE2-42E9-B944-72E98D21DCCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B3CB9B8C-F66B-475F-ABA3-6BBD129ACA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "F5563428-0910-4A5C-849A-006F06C74E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "6639D87C-561E-4F5B-A716-D4D9451BA5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "E174665E-32FC-41DF-95E1-7AE6A3168C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "876733CA-158B-46D3-A520-D5D590E5BB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDCC426-6904-444D-9756-23ECDA460896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "B01AF255-E7B9-412B-B3BE-BE252B2ED34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:content_construction_kit:6.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA53B6B-59CC-456D-9A96-1B8BC52444B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/406520",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34370",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/406520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/52783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/52784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-26T05:51:52.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in system/index.php in ExpressionEngine 1.6.4 through 1.6.6, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the avatar parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en system/index.php in ExpressionEngine v1.6.4 a la v1.6.6 y posiblemente otras versiones anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"avatar\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C85E9A1-1302-4AE2-8F78-725438C6EE62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CBFAF3-112B-49C0-98D4-E221C01BB36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A6DBA5-35E1-4910-873F-E68A308851C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://expressionengine.com/docs/changelog.html#v167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngenuity.org/wordpress/2009/01/28/ngenuity-2009-003-expressionengine-persistent-cross-site-scripting/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502045/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34193",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://expressionengine.com/docs/changelog.html#v167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngenuity.org/wordpress/2009/01/28/ngenuity-2009-003-expressionengine-persistent-cross-site-scripting/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502045/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-26T05:51:52.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Icarus 2.0 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted Portable Game Notation (.pgn) file."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región stack de la memoria en Icarus versión 2.0, permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) o ejecutar código arbitrario por medio de un archivo de extensión Portable Game Notation (.pgn) diseñado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:randomsoftware:icarus:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A22AD8-33E7-4BF9-9B71-BB0A3DB25B9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/52780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34368",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34167",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/52780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0589",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-26T10:12:11.360",
      "lastModified" : "2023-11-07T02:03:40.640",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0782",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-26T10:12:11.577",
      "lastModified" : "2023-11-07T02:03:43.643",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-26T14:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to read arbitrary files via directory traversal sequences in the file_path parameter ($filename variable)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el archivo bs_disp_as_mime_type.php en la característica BLOB streaming en phpMyAdmin anteriores a 3.1.3.1 que permite a los atacantes remotos leer arbitrariamente archivo a través de secuencias de salto de directorio en el parámetro file_path (variable $filename)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "9B142F14-A80C-4B95-86C9-0B57436AE8FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400E2D41-CB1F-4E5C-B08D-35294F8D1402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBEBBAAF-BAA7-40E9-A0FF-F8618A3ED2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4AFEEBA-01BA-46D6-86A3-B1B5A8F1B5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F72014B-B168-4FFA-ADDC-86CE84D19681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFFE8553-D8FF-4BA3-9325-A3C366FDFBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "72CD1784-3F48-49B5-A154-61C1F7EC3F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "278B4EF3-4331-4334-AB55-EC05C069F48A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_3_1_3/phpMyAdmin/bs_disp_as_mime_type.php?r1=12303&r2=12302&pathrev=12303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security/PMASA-2009-1.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_3_1_3/phpMyAdmin/bs_disp_as_mime_type.php?r1=12303&r2=12302&pathrev=12303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security/PMASA-2009-1.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-26T14:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the (1) c_type and possibly (2) file_type parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección CRLF en el archivo bs_disp_as_mime_type.php en la característica BLOB streaming en phpMyAdmin anteriores a v3.1.3.1 permite a los atacantes remotos inyectar arbitrariamente cabeceras HTTP y llevar a cabo ataques de separación de respuesta HTTP a través de los parámetros (1) c_type y posiblemente (2) file_type"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "9B142F14-A80C-4B95-86C9-0B57436AE8FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400E2D41-CB1F-4E5C-B08D-35294F8D1402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBEBBAAF-BAA7-40E9-A0FF-F8618A3ED2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4AFEEBA-01BA-46D6-86A3-B1B5A8F1B5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F72014B-B168-4FFA-ADDC-86CE84D19681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFFE8553-D8FF-4BA3-9325-A3C366FDFBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "72CD1784-3F48-49B5-A154-61C1F7EC3F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "278B4EF3-4331-4334-AB55-EC05C069F48A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_3_1_3/phpMyAdmin/bs_disp_as_mime_type.php?r1=12303&r2=12302&pathrev=12303",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security/PMASA-2009-1.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_3_1_3/phpMyAdmin/bs_disp_as_mime_type.php?r1=12303&r2=12302&pathrev=12303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security/PMASA-2009-1.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-26T14:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allow remote attackers to inject arbitrary web script or HTML via the pma_db_filename_template cookie."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados - XSS - en la página de exportación (display_export.lib.php) en phpMyAdmin v2.11.x anteriores a v2.11.9.5 y v3.x anteriores a v3.1.3.1, permite a los atacantes remotos inyectar una secuencia de comandos web o HTML a través de la cookie pma_db_filename_template."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98FF47C-8BA8-40E1-98F5-743CAD5DC52A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "346DF9C7-40BE-44FD-BB5A-23F60616E97F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B00F4D78-34C3-4934-8AFA-B7283388B246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B9F52BC-AC6A-41BB-8276-6176FA068929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA3305E-CBC2-4469-923F-29EDA0402CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC82C85-C9CF-424D-A07A-E841F7AC1904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0549FC5-B8E8-455D-867B-BAF321DE7004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DA6D40-2D3A-4490-B4E6-1367C585ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E351CA2-71DB-4025-8477-24DFE5349195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34AB221E-3DFA-43E4-9DBA-5565F81C0120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB774D1-8B5D-4118-8A5B-D7D14D7DE162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C10F7C9-FAAA-4D05-8CB2-F5CB397F8410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54669C6E-C13B-4602-9CC1-53B24CB897FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "40CE5E7C-A965-492F-AE85-535C3E5F1B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8AAB78-8460-43BB-9326-0395F7496EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2909BBB8-AB67-45DC-BAF0-015CBF97AFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "52F3DA64-2099-4A4F-9F38-F28255F47BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E1F897-861F-4E10-8E05-3C0DD60C7979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8CC1C1E-2B8C-4E59-B5ED-ED2957B46743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA5BCF7D-43FC-459C-8564-F0DCDC301FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA6A75C9-C695-45DF-9526-8DEA506FB21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03246EF4-F805-4C1C-9E6C-D85AFBD2D168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE432385-9FC2-4EB3-9770-4CA9A2979019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFCA67E-49E1-41FF-8B40-0209FF7893FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF4BA83-50C0-4D90-9755-CC99A0FF987E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE588389-7B4F-4949-BB7A-233C6BE31859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E709A6B-B580-414B-8CEE-8FF99F8409C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9AA2E6-CF57-40A1-9A9C-B704D8B009F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE75CBB-4EC2-4B97-9E86-28BB05DEA30C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A26E7D37-FA99-42EA-8E19-ED2343E8E70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A982E152-5A20-4A3A-9A98-6CF9EEF9141A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA11353-1DD1-4593-84E8-1D3CBB2C2166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0C19FB-60DF-440F-9A32-B9C62EBA9836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9716FC40-F759-4D24-9604-7A2DB32A8F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400E2D41-CB1F-4E5C-B08D-35294F8D1402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4AFEEBA-01BA-46D6-86A3-B1B5A8F1B5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F72014B-B168-4FFA-ADDC-86CE84D19681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFFE8553-D8FF-4BA3-9325-A3C366FDFBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "72CD1784-3F48-49B5-A154-61C1F7EC3F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAAA1171-F570-4E4D-B667-2D4C8F8ECDD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "278B4EF3-4331-4334-AB55-EC05C069F48A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/trunk/phpMyAdmin/libraries/display_export.lib.php?r1=11986&r2=12302&pathrev=12302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34430",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34642",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35585",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35635",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200906-03.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security/PMASA-2009-2.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/trunk/phpMyAdmin/libraries/display_export.lib.php?r1=11986&r2=12302&pathrev=12302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200906-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security/PMASA-2009-2.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-26T14:30:00.267",
      "lastModified" : "2026-04-22T14:13:07.463",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP code into a configuration file via the save action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático en el archivo setup.php en phpMyAdmin v2.11.x anteriores a v2.11.9.5 y v3.x anteriores a v3.1.3.1 que permite a los atacantes remotos inyectar código PHP arbitrariamente en el archivo de configuración a través de la acción guardar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-25",
      "cisaActionDue" : "2022-04-15",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "phpMyAdmin Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.11.0",
            "versionEndExcluding" : "2.11.9.5",
            "matchCriteriaId" : "DD88D7DA-16CF-4D83-BB84-6AED7A6B7B4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.3.1",
            "matchCriteriaId" : "01E76324-525D-4216-893A-A9C609F9FD09"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.neohapsis.com/2009/04/06/about-cve-2009-1151/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_2_11_9/phpMyAdmin/scripts/setup.php?r1=11514&r2=12301&pathrev=12301",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34430",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34642",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35585",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35635",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200906-03.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1824",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.gnucitizen.org/blog/cve-2009-1151-phpmyadmin-remote-code-execution-proof-of-concept/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:115",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security/PMASA-2009-3.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504191/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34236",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8921",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://labs.neohapsis.com/2009/04/06/about-cve-2009-1151/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_2_11_9/phpMyAdmin/scripts/setup.php?r1=11514&r2=12301&pathrev=12301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200906-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.gnucitizen.org/blog/cve-2009-1151-phpmyadmin-remote-code-execution-proof-of-concept/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security/PMASA-2009-3.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504191/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-1151",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-26T14:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Siemens Gigaset SE461 WiMAX router 1.5-BL024.9.6401, and possibly other versions, allows remote attackers to cause a denial of service (device restart and loss of configuration) by connecting to TCP port 53, then closing the connection."
      }, {
        "lang" : "es",
        "value" : "Router Siemens Gigaset SE461 WiMAX, 1.5-BL024.9.6401, y posiblemente otras versiones, que permite a los atacantes causar una denegación de servicios (reinicio del dispositivo y pérdida de configuración) conectándose al puerto TCP 53, cerrando la conexión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:C/A:C",
            "baseScore" : 7.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.5,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:siemens:gigaset_se461__wimax_router:1.5-bl024.9.6401:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE6CDAA-FE16-44B9-A0AE-1286AE361C54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://helith.net/txt/siemens_gigaset_se461_wimax_router_remote_dos.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34220",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://helith.net/txt/siemens_gigaset_se461_wimax_router_remote_dos.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1169",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-27T00:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XML file with a crafted XSLT transform."
      }, {
        "lang" : "es",
        "value" : "La función txMozillaXSLTProcessor::TransformToDoc en Firefox anterior a versión 3.0.8 y SeaMonkey anterior a versión 1.1.16, de Mozilla, permite a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecute código arbitrario por medio de un archivo XML con una transformación XSLT diseñada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.7",
            "matchCriteriaId" : "CDC0430B-245A-4462-B8DB-2465D682C747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CAA7D-398A-4B26-9754-FD188CE9729D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.zdnet.com/security/?p=3013",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00008.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34471",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34486",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34505",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34510",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34511",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34521",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34549",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34550",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34792",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-113.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1756",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:084",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-12.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0397.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0398.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34235",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021939",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-745-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0853",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=460090",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=485217",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=485286",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49439",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11372",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8285",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01023.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01040.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://blogs.zdnet.com/security/?p=3013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-113.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0397.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0398.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-745-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=460090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=485217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=485286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Per: http://www.securityfocus.com/bid/34235/info\r\n\r\nMozilla Firefox is prone to a remote memory-corruption vulnerability.\r\n\r\nAn attacker can exploit this issue to execute arbitrary code within the context of the affected browser. Failed exploit attempt will result in a denial-of-service condition."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0631",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-03-27T15:16:24.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with (1) IP Service Level Agreements (SLAs) Responder, (2) Session Initiation Protocol (SIP), (3) H.323 Annex E Call Signaling Transport, or (4) Media Gateway Control Protocol (MGCP) allows remote attackers to cause a denial of service (blocked input queue on the inbound interface) via a crafted UDP packet."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Cisco IOS v12.0 hasta v12.4, cuando se ha configurado con (1) IP Service Level Agreements (SLAs) Responder, (2) Session Initiation Protocol (SIP), (3) H.323 Annex E Call Signaling Transport, o (4) Media Gateway Control Protocol (MGCP) permite a atacantes remotos provocar una denegación de servicio (bloqueo de entrada a la cola en el interfaz de entrada) mediante un paquete UDP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F86F790-6247-42F2-9487-3D60A2842F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12434A88-88C6-4749-981F-E2B4D725F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C398460-3F38-4AA7-A4B1-FD8A01588DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6B0C2F-2FBE-4422-AD30-305100C595CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932C1AC0-0BD1-46DF-A241-AA71BBD785BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEA01D2-B985-4575-AF00-144CE2E3024D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11A2BE-19E7-4148-B3CC-B4956B07273E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E78DEE-1125-4183-A0CD-947B850E956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7F94E8-86FC-456B-A7BB-57953F67F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277BFD67-3EE3-4E79-8D81-35597D168C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B5CC91-144D-4818-871E-E6120A7E1050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E5F43E-20DA-4C5C-B8C5-1A5512CA07B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6333F9A-2605-41EE-9AB4-1D04C5825BAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1050ACB3-E5B2-4710-910B-F3DF4B49907F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABE71F9-17D4-47C4-A762-18CC8716E477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7977DA9F-41DE-4482-B0CD-896EEEFB5689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADAB898-7728-4C14-B69A-7B8B06AFC894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54424787-34AC-410D-985F-511ADB2BB144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F54F0C-AC91-4CB7-9FEB-257F03547864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A0D017-F26F-4429-891E-C7E1C66B6588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FA075D-4A9E-44EE-90CF-23947C9040EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3DFAEC-4534-4A8D-9886-0723F57C7A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5451772-87D4-42E2-8F48-D137670DA3E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D162976F-87A3-42BF-8C9F-A981B14F4673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43581A57-418A-4A35-ACF2-1380A8DA8A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC17E231-9256-4600-A33B-238E7E83CF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A6D5468-BB6A-4665-964F-D8F636359CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0AB67FC-88F4-42BB-BB90-54521950DE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442972CD-50D3-4C46-AB73-44AED94B9F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19077C39-A27B-4EC3-A882-9AC826E61570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1az:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B31AFC-9C72-4737-B6B7-E938C13695BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDEF6AED-4477-4AAC-9759-1996B77DFEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9427851-B0DC-4CE6-8BFA-60619D1DC87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D07DD94-0925-4FEE-9565-5F36B9AAF448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3A67F5-05C6-4097-A88E-0A0F165C12EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7126E176-D739-4102-8F10-1EEB8C6A219D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C0554-1A50-4341-AB07-80AA854673D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8C5149-40F8-40C9-9FC3-7E7C68801320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FF39C5-CC37-4573-BB18-36254D38509B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B377A8B9-90F2-41B7-9098-5ABEB621E2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "896A71EC-9508-406F-8DE8-58953D9A30FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B15FCC-1BB3-41CA-9550-6D55DD381F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A85892-C3AB-4920-A949-A71BD0332D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6330829-9A7B-479D-B38B-BC64148EC172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F1E38-3482-4EAC-8654-EBC004B9344B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BCD9C9-7E6B-42EB-A645-32B3C00CDDEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1gb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34A61768-E18E-4DB0-9EDF-2E36D0F62DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752C3C6B-910D-4153-A162-DF255F60306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297FAD97-60C0-473D-A18D-03657B81B7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD4A33B-B13E-40C6-B47F-A406ACC6664F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E488E6E-87F0-4292-B97B-31087FDB4655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D199CB1-A2A3-4678-9503-C5B61281755C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19952DC6-1186-4754-BB1E-BA1D78A19C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E8AF76-0A1D-4BAE-BF10-D63080352E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B674647-4438-4450-9DCA-25184D4E2682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E5CC41-1344-4A65-A653-8012ACE2CF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71FB7128-CF11-4903-97D7-418403A03CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EFB20A-78E2-4BA1-B87C-BB74E8982D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A273401-9394-4BC3-879C-DE3EFC09B3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DABF911-FCDF-4095-A95D-4BB73628FCA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77886493-C30E-439E-BBB4-3D34A8938378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7813F511-CF6D-487F-9D1C-7A6CF85AD724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677DC4B6-8B3D-4A0D-9934-743FD7494DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E272881F-0804-4190-A21D-3D0B9A774F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F084DA16-24CB-41D1-92B7-C6E0499AAD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA979D75-F60E-45F8-B99C-1402DC8CFCDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884753D4-3AF0-4723-9D51-26BA7B4CA533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF3601D-DF44-4A10-A424-8E97C65A36A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1835410-77EB-46F2-ACF0-379759D4B0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB103ED-B170-4193-84CD-4C59F4D6A10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88DCCDE-6A81-473F-B4FE-95A84F8DF964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D55886-268F-4E4D-B00F-8A5D97A73BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7C6FB8-8393-4916-BB2B-3097B1995C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E314B0F7-1A27-483E-B3B3-947A5561281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B838C9-E60E-46A3-A5FB-4F67291D0851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B29F111-CBA4-464D-8B25-C2677BA270EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96C76C5-52BA-45D9-9803-048E770BAA84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B9E2C6-0E23-4AC9-906F-28BBC15868DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F75542-F2C5-4CEB-B655-E0620408A3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC41749-91FC-43DB-A52F-AC3E3A2205C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0195AE-24FD-43B2-892B-F646B8B5ED6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316924D4-10D4-4C98-AF05-DDE1D530A205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11866346-C29A-463D-A18F-528C23DD579E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0912492E-565A-4559-ABB8-D2898F06CF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD6421A-D8C4-4A3E-9497-4AC130CFE597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F44EC8-13BF-4032-9EBA-0D50C6A353BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370EEE74-3DAA-4BB2-9192-66672229DC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF74B28-CD95-4BC6-97D4-D529D30E1509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ira:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2424530B-2353-48F2-A076-0C44AAA4C89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7111CAE-9279-49DA-B05A-046BB3EFA85F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E186AB2F-8C5B-45E0-9194-BF66DA64F772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32DCDA3-76B6-423C-9AF1-B65F19077909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCE26DD-FE65-4041-AB4D-9C7A16EE175C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE88965B-D148-43EB-9FC6-2EF5E5C917FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98E703A-717D-4997-AFBC-CAE4B644025D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B27825D-099A-4733-8D3F-8EF2B050E5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D035A35-D53E-4C49-B4E4-F40B85866F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBDC6C0-961B-441D-8C34-AACE0902057E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1579A2D-955F-4CC6-9F94-9D40C669D903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140C7C99-1B50-431C-B55C-DFF308E7ECF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2scb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65213862-01D0-4B1D-8C76-B19D083BF460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05A548B-C443-4C15-B636-64C1F9B9860D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DC8B40-2093-4D3A-B18B-F95868A36D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2seb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB7E760-8260-4488-B9FB-C741C1763F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F4B373-490C-463F-B518-89D0CABB852C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sed:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2B4600-550F-4D5D-9BBD-E035025677BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2see:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F42A6D9-8CC3-49AF-AA56-96894CCE5AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sef:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4474AB2-AFF5-46F1-9066-54A4D6FA98C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2seg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D81068C-7E72-4D5E-84CA-5942B9E8AB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85ABE5E-7900-4A9C-A945-48B293EF46B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E166F3-931A-4997-B7B2-F2AD19C6F209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A70BEC7-8A69-44B2-9DDA-DFC1A13EB7B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A9400-571E-4955-AB84-C49A4255A5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C38FE9-CEC6-4C5C-A4FD-CCD1D50BD040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A892B3F0-5A31-4086-8AB5-F06E68588EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0DA930-86CE-4D17-BD41-9C4E47D8088F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2srd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1AE2B1-BFED-49A3-94EB-E40A1A675BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ste:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D681CC0E-CD68-4252-B243-C043754954DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC70491B-F701-4D33-A314-C686469DBD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198C24E9-6D45-44FD-B502-D14ACDA99EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sva:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E768F600-19DC-46A5-BDED-3C2497530CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2svc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16EF97B1-5150-4E88-B011-DB8F0AAFA9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2svd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC263E7-BA6A-41CB-8248-5DDB4404D9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sve:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544835A2-3AB0-4313-A731-54B1123F7498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEF14D5-1327-4012-913F-DA0E12C4E953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A672BD-87AE-424D-8735-073BBE9CE164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C033E3-184B-4AC1-B10D-8318FEAF73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A68D177-B028-4025-BD7B-82ACDB2D1E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485ACF9E-1305-4D71-A766-5BE1D748AAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7CCDB53-4F8B-4B90-9929-4E94CF414CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C03B0702-070F-48D5-9CBC-DB36D409A4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09458CD7-D430-4957-8506-FAB2A3E2AA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E709D6B-61DB-4905-B539-B8488D7E2DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C1C831-556D-4634-AA24-6D64943ED275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075CD42D-070A-49BA-90D9-E7925BB41A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746DDC61-3981-4E93-A7EE-C120E0265485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4628FDA0-4260-4493-92C9-4574E5EC06A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FA064A-6E1A-4415-84D4-1A33FF667011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21147732-FA22-4728-B5F2-D115B78A8EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D717498-4DF9-4D15-A25B-D777FF460E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD441B8-CC3C-4571-B095-C70B78BE80E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17AA0C3D-7C96-4D2E-91E5-232536245ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE03B1E-1522-4143-A019-B19E1F605A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B40548F-3914-4227-9E4C-F1B34071C069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE49281-0571-49F7-95FF-68B1ACA07537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B72E-6862-4115-9A0B-574089A94289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC38B64C-E246-467F-A185-669497DEA839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB42063-9DB5-42DB-825A-53C6DBB51A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5C90EE-A9C0-461C-9E89-732BFA9BD066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74B6350-C2F8-4786-8E32-2ED6C188A5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E26473-A8EF-44C5-B550-5E0B86D31291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663FE3CE-FA09-46A2-9C0D-2797D9137A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86309E93-F2C9-4334-9A1C-989EFDC99215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D49D6-0624-41CE-829E-49E7EA679EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65318A70-40FF-4BE8-962B-DFCD5C476166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869CEAF7-59D6-4651-8D89-0244D6C430A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059FBAA6-3127-4DF9-99AD-AA3A16317B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0E376F-64E1-4632-9A8E-11DC99FB245F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF440B52-C6AE-4608-BE71-01B354D37BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243BEF5E-F693-450E-B274-FD7CF34B6771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7918C59-1678-4F24-A7C2-68824D1B59A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE72804E-600D-47FA-B3BF-36BD3CF13A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B41182-7AA8-49D1-BAC3-EAF312E43553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11BBB83-147B-4FBF-B263-77FCCFB2D92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E84677D-793D-44C5-80E9-FC29C3183278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFA2358-6B79-472D-9092-FF99DC3DF042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C26842-FF50-436F-8DB6-15A70082CD1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A31301-AAB0-4744-98B2-695D88798D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEB27CF-46B5-4780-964C-C31193614B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1094F9-7222-4DE0-A368-7421ABA66E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574FFD6F-D56C-41DB-A978-E501BA3CA5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11790F38-3720-45CF-9FD4-A8E5867684D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE2282B-6693-4E4B-8662-501EBC14CD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A925BA5C-AB2F-4B73-BA93-55664A319CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE02B7C-BC2D-433C-B0A8-E60EDD62538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9663D24-0D1D-4F46-961F-9D37D3776E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83649EC-61A5-4937-93F4-42D082023382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D8830A0-E816-40C4-8743-A9E0994BA922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40183EF8-BD19-49AD-9E55-7FCCA635327F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E40D5D-F46E-4098-A46A-1A52A343310D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E5138-016A-48EC-A367-3D3285AAFED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C114F1A6-5DFE-408F-B83A-E8B9D4AF9791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jeb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD5C082-9730-466D-A4A8-E4EEE5F3730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF419BD-8474-4F33-9CDD-587E341ABA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332B0446-4D8B-414B-B572-84B45D5643AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE0A39D0-0E87-42E9-B8D3-2010FDCC03D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D40FB896-E20C-46B1-BF59-FBB42295F9C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B418CFDD-AF36-46F9-B347-B34E72100F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F12741-69FB-46DD-A670-8461492B338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5688D88-A550-43EB-8854-2E132EC71156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FC4904-1F4D-4E10-AF95-911B07827598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE195E-084B-4F4C-800D-850165DED48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618BF54-56DC-40FC-A515-3BFB4366F823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A668D08-14C4-4438-A59C-CE60498BEF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC3706F-B00A-405E-917E-7FD5217E0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595DCBA-E6F2-4551-A804-4DBB137F076B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DF12B-2A20-4AC5-8EC5-729008D87736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2958873B-A0AB-4EAF-A5CF-8423739FAB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1938D118-C07F-4BEC-8030-947F099BFCB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB2B390-A39F-4082-BBCB-712BDD95886D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jda:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F782741-0F18-4FBC-9D00-AAABB8BC6A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB11851-BCF8-485B-91F9-6A39B2354826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C61F77-6CDE-4CCA-B2DB-B76C6B5F8152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFE3FC0-79BC-4549-98BA-235A53719F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jmb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4691CEAD-47F1-4A97-84A4-72B794D3F714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A28452-000C-4BBB-A34E-1AA63D69925D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7414D32-88A1-416E-A717-3F47B6D1BE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370DC543-AC01-4B91-88C7-60C323E35929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544BD924-2CBD-4130-BBD3-5AD084C85FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B78181E-E1D1-4C25-85DE-CA46BBF21765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1CD80F-E898-41CE-8A86-28C2F48B928A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF610051-1638-4C1B-9864-11E34EFC4DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78260223-50C0-48F8-9A65-AE67489E602C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E39462-4CEE-4C29-8B60-50E05FCF3E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7454AF-7610-4CD3-BD2B-95A6C3283811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB633E6C-025C-4B31-ABE7-8318C813376B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA9218D-E7A5-4F98-83E7-2FD6E138D5CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC90BE87-EB54-46F8-A1FD-8F4E553C69F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFED1FFB-899D-4A48-9CCA-0B8737AE1408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883FA166-2973-42BA-842D-28FBDBFEAC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4362045B-7065-4FF9-A977-B3DA7894F831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC27E79D-6B4B-4839-9664-DFE821C45C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4963A243-74FA-43AD-9645-C9FAD527A6E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C6EACA-35BE-4032-93DA-5F738AEE0F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90426.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34245",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021904",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49419",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6720",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90426.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0590",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-27T16:30:00.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length."
      }, {
        "lang" : "es",
        "value" : "La función ASN1_STRING_print_ex en OpenSSL versiones anteriores a v0.9.8k permite a atacantes remotos provocar una denegación de servicio (acceso inválido a memoria y caída de la aplicación) mediante vectores que provocan la impresión de (1) BMPString o (2) UniversalString con una longitud de codificación inválida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.8k",
            "matchCriteriaId" : "B334F9E9-BA5E-48D3-8461-A417DCF24E46"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124464882609472&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125017764422557&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127678688104458&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34411",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34460",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34509",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34561",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34666",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34896",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34960",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35380",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35729",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36533",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42467",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42724",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42733",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.FreeBSD.org/advisories/FreeBSD-SA-09:08.openssl.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021905",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-258048-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-172.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0057",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0057",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1763",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:087",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openssl.org/news/secadv_20090325.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/52864",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.php.net/archive/2009.php#id2009-04-08-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502429/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/515055/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34256",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-750-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2010-0019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0850",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1020",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1175",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1220",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1548",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3126",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49431",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.bluecoat.com/index?page=content&id=SA50",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10198",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6996",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124464882609472&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125017764422557&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127678688104458&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.FreeBSD.org/advisories/FreeBSD-SA-09:08.openssl.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-258048-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-172.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openssl.org/news/secadv_20090325.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/52864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.php.net/archive/2009.php#id2009-04-08-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502429/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/515055/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-750-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2010-0019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.bluecoat.com/index?page=content&id=SA50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue was fixed in openssl packages in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2009-1335.html\n\nThis issue was fixed in openssl packages in Red Hat Enterprise Linux 3 and 4 via: https://rhn.redhat.com/errata/RHSA-2010-0163.html",
        "lastModified" : "2010-03-25T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0591",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-27T16:30:01.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allows remote attackers to repudiate a signature that originally appeared to be valid but was actually invalid."
      }, {
        "lang" : "es",
        "value" : "La función CMS_verify en OpenSSL v0.9.8h hasta v0.9.8j, cuando se ha habilitado CMS, no maneja adecuadamente los errores asociados con atributos firmados malformados, permitiendo a atacantes remotos rechazar una firma que originalmente aparentaba ser válida pero que realmente será inválida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261EE631-AB43-44FE-B02A-DFAAB8D35927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1365ED-4651-4AB2-A64B-43782EA2F0E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124464882609472&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127678688104458&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34411",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34460",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34666",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35380",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/42724",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/42733",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1021907",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openssl.org/news/secadv_20090325.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/52865",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.php.net/archive/2009.php#id2009-04-08-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34256",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0850",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1020",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1548",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49432",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://kb.bluecoat.com/index?page=content&id=SA50",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124464882609472&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127678688104458&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/42724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/42733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1021907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openssl.org/news/secadv_20090325.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/52865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/archive/2009.php#id2009-04-08-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kb.bluecoat.com/index?page=content&id=SA50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue affected OpenSSL CMS functionality which is not present in the openssl packages as shipped with Red Hat Enterprise Linux 2.1, 3, 4 or 5.",
        "lastModified" : "2009-03-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0626",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-03-27T16:30:01.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTPS packet."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad SSLVPN en Cisco IOS v12.3 hasta v12.4 permite a atacantes remotos provocar una denegación de servicio (reinicio o cuelgue del dispositivo) mediante paquetes HTTPS manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40183EF8-BD19-49AD-9E55-7FCCA635327F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E40D5D-F46E-4098-A46A-1A52A343310D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E5138-016A-48EC-A367-3D3285AAFED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C114F1A6-5DFE-408F-B83A-E8B9D4AF9791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jeb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD5C082-9730-466D-A4A8-E4EEE5F3730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF419BD-8474-4F33-9CDD-587E341ABA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332B0446-4D8B-414B-B572-84B45D5643AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE0A39D0-0E87-42E9-B8D3-2010FDCC03D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D40FB896-E20C-46B1-BF59-FBB42295F9C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B418CFDD-AF36-46F9-B347-B34E72100F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F12741-69FB-46DD-A670-8461492B338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FC4904-1F4D-4E10-AF95-911B07827598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE195E-084B-4F4C-800D-850165DED48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618BF54-56DC-40FC-A515-3BFB4366F823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A668D08-14C4-4438-A59C-CE60498BEF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC3706F-B00A-405E-917E-7FD5217E0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595DCBA-E6F2-4551-A804-4DBB137F076B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DF12B-2A20-4AC5-8EC5-729008D87736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2958873B-A0AB-4EAF-A5CF-8423739FAB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1938D118-C07F-4BEC-8030-947F099BFCB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB2B390-A39F-4082-BBCB-712BDD95886D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jda:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F782741-0F18-4FBC-9D00-AAABB8BC6A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB11851-BCF8-485B-91F9-6A39B2354826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C61F77-6CDE-4CCA-B2DB-B76C6B5F8152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFE3FC0-79BC-4549-98BA-235A53719F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jmb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4691CEAD-47F1-4A97-84A4-72B794D3F714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A28452-000C-4BBB-A34E-1AA63D69925D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7414D32-88A1-416E-A717-3F47B6D1BE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370DC543-AC01-4B91-88C7-60C323E35929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544BD924-2CBD-4130-BBD3-5AD084C85FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B78181E-E1D1-4C25-85DE-CA46BBF21765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1CD80F-E898-41CE-8A86-28C2F48B928A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF610051-1638-4C1B-9864-11E34EFC4DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78260223-50C0-48F8-9A65-AE67489E602C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E39462-4CEE-4C29-8B60-50E05FCF3E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7454AF-7610-4CD3-BD2B-95A6C3283811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB633E6C-025C-4B31-ABE7-8318C813376B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA9218D-E7A5-4F98-83E7-2FD6E138D5CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFED1FFB-899D-4A48-9CCA-0B8737AE1408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883FA166-2973-42BA-842D-28FBDBFEAC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4362045B-7065-4FF9-A977-B3DA7894F831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC27E79D-6B4B-4839-9664-DFE821C45C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4963A243-74FA-43AD-9645-C9FAD527A6E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C6EACA-35BE-4032-93DA-5F738AEE0F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021896",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90424.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34239",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49425",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6919",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90424.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0628",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-03-27T16:30:01.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (memory consumption and device crash) by disconnecting an SSL session in an abnormal manner, leading to a Transmission Control Block (TCB) leak."
      }, {
        "lang" : "es",
        "value" : "Fuga de memoria en la funcionalidad SSLVPN en Cisco IOS v12.3 hasta v12.4 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y caída del dispositivo) mediante la conexión de una sesión SSL de forma anormal, precedida de una pérdida de bloque de control de transmisión (TCB)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A8D0F64-5DE1-4A6F-91F0-8A8509BF077F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:b:*:*:*:*:*:*",
            "matchCriteriaId" : "95418AD2-FB85-4E20-B874-D82DDF88BC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:bc:*:*:*:*:*:*",
            "matchCriteriaId" : "D8FC7948-B922-486E-9E5F-069B930EB1E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:bw:*:*:*:*:*:*",
            "matchCriteriaId" : "475EABCF-7404-4B65-9B29-E35C7D673B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:eu:*:*:*:*:*:*",
            "matchCriteriaId" : "7D99C07D-4EE3-4057-8E76-3468C45B4A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:ja:*:*:*:*:*:*",
            "matchCriteriaId" : "14D1B81D-95E4-4945-94F2-C36FD7C0DC55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jea:*:*:*:*:*:*",
            "matchCriteriaId" : "372582DB-DAB8-4B57-A778-5E2BC35B8233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jeb:*:*:*:*:*:*",
            "matchCriteriaId" : "452FF154-F6C0-4BC4-969E-1D49AA3CCE49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jec:*:*:*:*:*:*",
            "matchCriteriaId" : "36CF94C8-D6FE-4229-86F4-AF503F950151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jk:*:*:*:*:*:*",
            "matchCriteriaId" : "3AB6C57C-8805-443F-8ACE-83DAA48878CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jl:*:*:*:*:*:*",
            "matchCriteriaId" : "554C9611-55F1-40AF-9862-7E902D5CE1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jx:*:*:*:*:*:*",
            "matchCriteriaId" : "F89C185A-D3B3-4F5F-9249-F8EE89E8DD04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:t:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB0B55E-3579-4929-862F-C5FF9F796AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:tpc:*:*:*:*:*:*",
            "matchCriteriaId" : "A19FD313-0AF6-43E1-9FCB-5D27A18C8C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:va:*:*:*:*:*:*",
            "matchCriteriaId" : "CBC11203-84FD-4F6C-8597-573FD784C68E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xa:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8E34D3-0BCB-4D19-A41C-0375941E1B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xb:*:*:*:*:*:*",
            "matchCriteriaId" : "0F894B6F-9061-4D5B-A7F9-C9DDF2DD35D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xc:*:*:*:*:*:*",
            "matchCriteriaId" : "39BB1F5B-9D53-4DEC-8FC7-C9FC7B51C862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xd:*:*:*:*:*:*",
            "matchCriteriaId" : "5A124BB0-EFC3-430E-89F9-FF49B4BF9A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xe:*:*:*:*:*:*",
            "matchCriteriaId" : "A0515E7C-E3A5-44F4-866F-283E43AE8654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xf:*:*:*:*:*:*",
            "matchCriteriaId" : "1A74B4D0-939B-4FF1-9163-86FF64DB368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xg:*:*:*:*:*:*",
            "matchCriteriaId" : "09CBD68E-2A5C-43DF-9AD6-DE07815821B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xh:*:*:*:*:*:*",
            "matchCriteriaId" : "463C3A96-F8B7-4117-8CB3-D15B44119AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xi:*:*:*:*:*:*",
            "matchCriteriaId" : "01393D91-ED1D-460D-8621-10260F0CBDD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xj:*:*:*:*:*:*",
            "matchCriteriaId" : "48ABA40D-DE49-4B20-AFA1-302EB93719FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xk:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB2FF53-5991-4264-B5CC-D1E45460BFCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xq:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0B18B6-FF50-48BE-8250-14E57FB73AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xr:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1FAF42-B7B1-40B0-A0F7-5DF821E6193F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xs:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED386B6-3C75-41C3-8206-9CBA14E20B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xu:*:*:*:*:*:*",
            "matchCriteriaId" : "989581B0-FC28-457B-BDD2-72ED65BBE51E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xw:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8A8C95-2DC3-47AB-BED3-7D33902440C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xy:*:*:*:*:*:*",
            "matchCriteriaId" : "B8920235-87C6-41D6-9497-CC12D18A6536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:ya:*:*:*:*:*:*",
            "matchCriteriaId" : "9752CFFC-F1DA-4122-ACD8-79CB963F485F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yd:*:*:*:*:*:*",
            "matchCriteriaId" : "7012F8E0-2256-448A-9C4D-E2DB5AB9852B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yf:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE94EA2-E0CC-4760-94A8-DE56C8181F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yg:*:*:*:*:*:*",
            "matchCriteriaId" : "5B44691F-A47B-4953-BAC9-B2D43F4BCC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yh:*:*:*:*:*:*",
            "matchCriteriaId" : "8910F02B-DF61-443B-A4B5-2C0C04484519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yi:*:*:*:*:*:*",
            "matchCriteriaId" : "929836AD-8128-4174-872D-B9638B54611C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yj:*:*:*:*:*:*",
            "matchCriteriaId" : "045B4782-6CE2-40DD-A9F0-16E0C25768FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yk:*:*:*:*:*:*",
            "matchCriteriaId" : "9009E0C3-8BBC-4928-8528-62DA1ADC8BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:ym:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE4985F-2C87-4532-9D11-9BA37B7D6A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yq:*:*:*:*:*:*",
            "matchCriteriaId" : "9A80C51F-C69A-4780-8AE9-BEBC8EBFA115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:ys:*:*:*:*:*:*",
            "matchCriteriaId" : "416B8D2F-0B11-4074-B6BD-2E97F79B5520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yt:*:*:*:*:*:*",
            "matchCriteriaId" : "5ED5B53D-930D-477E-A0F6-76167AE67641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yu:*:*:*:*:*:*",
            "matchCriteriaId" : "29B39978-3BD0-40A8-93AE-EF40042EB7CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yx:*:*:*:*:*:*",
            "matchCriteriaId" : "84983F6A-64F6-4720-9291-FC84CA10EE25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yz:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2784C6-588A-4CAC-9362-515FB070D21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A60117-E4D1-4741-98A2-E643A26616A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:ja:*:*:*:*:*:*",
            "matchCriteriaId" : "93580300-6B1F-4D21-A51E-B781E234217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:jk:*:*:*:*:*:*",
            "matchCriteriaId" : "28E2C53A-51B0-4BD6-869E-1554B0BD3A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:jma:*:*:*:*:*:*",
            "matchCriteriaId" : "DB3BA487-727D-416C-80C6-C2F90D52E149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:jmb:*:*:*:*:*:*",
            "matchCriteriaId" : "A73738DE-E81B-4226-ABA3-B54A5AD96389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:jmc:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DA9F41-FBD0-404A-8C6B-E827C3FACE81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:jx:*:*:*:*:*:*",
            "matchCriteriaId" : "EFB1DA86-E0C2-4EDF-B82C-6677516CF1CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:md:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2376E9-D7F4-4483-AB13-8840EA9A63E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:mr:*:*:*:*:*:*",
            "matchCriteriaId" : "473A31DD-A0DC-4716-B98E-D2926A26DAF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:sw:*:*:*:*:*:*",
            "matchCriteriaId" : "C9569DC5-9803-4B17-9FF1-5BDA8194FE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:t:*:*:*:*:*:*",
            "matchCriteriaId" : "156B91B9-1F5B-4E83-A2B7-A5B7F272D5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xa:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E90E83-1732-4BEF-BC5B-401769DC8880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xb:*:*:*:*:*:*",
            "matchCriteriaId" : "68C9DDEB-EDE8-4B0D-A347-32621CCEDE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xc:*:*:*:*:*:*",
            "matchCriteriaId" : "51679B26-DF28-4E41-9801-E1599F250FFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xd:*:*:*:*:*:*",
            "matchCriteriaId" : "E989900F-BE66-47E4-9A1B-11B9785F89BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xe:*:*:*:*:*:*",
            "matchCriteriaId" : "95A01B7E-8231-4001-A340-31CE66474FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xf:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB012E7-E2E0-4F9D-ADF9-827816E3E6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xg:*:*:*:*:*:*",
            "matchCriteriaId" : "B7368529-518E-4DB2-B291-1F0009445D01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xj:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC62D3B-A287-4DED-A44D-3351452D4A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xk:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2F5D70-6790-4756-9A6A-F1865DCD4D10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021896",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90424.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34239",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49427",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12092",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90424.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0629",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-03-27T16:30:01.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) Airline Product Set (aka ALPS), (2) Serial Tunnel Code (aka STUN), (3) Block Serial Tunnel Code (aka BSTUN), (4) Native Client Interface Architecture (NCIA) support, (5) Data-link switching (aka DLSw), (6) Remote Source-Route Bridging (RSRB), (7) Point to Point Tunneling Protocol (PPTP), (8) X.25 for Record Boundary Preservation (RBP), (9) X.25 over TCP (XOT), and (10) X.25 Routing features in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service (device reload) via a series of crafted TCP packets."
      }, {
        "lang" : "es",
        "value" : "Las funcionalidades (1) Airline Product Set (conocido como ALPS), (2) Serial Tunnel Code (conocido como STUN), (3) Block Serial Tunnel Code (conocido como BSTUN), (4) soporte para Native Client Interface Architecture (NCIA), (5) Data-link switching (conocido como DLSw), (6) Remote Source-Route Bridging (RSRB), (7) Point to Point Tunneling Protocol (PPTP), (8) X.25 para Record Boundary Preservation (RBP), (9) X.25 sobre TCP (XOT), y (10) X.25 Routing en Cisco IOS v12.2 hasta 12.4 permite a atacantes remotos provocar una denegación de servicio (reinicio del dispositivo) mediante una serie de paquetes TCP manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E314B0F7-1A27-483E-B3B3-947A5561281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B838C9-E60E-46A3-A5FB-4F67291D0851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B29F111-CBA4-464D-8B25-C2677BA270EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96C76C5-52BA-45D9-9803-048E770BAA84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ca:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D57BED-1D99-4077-941C-E60BEA65324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B9E2C6-0E23-4AC9-906F-28BBC15868DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F75542-F2C5-4CEB-B655-E0620408A3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC41749-91FC-43DB-A52F-AC3E3A2205C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0195AE-24FD-43B2-892B-F646B8B5ED6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316924D4-10D4-4C98-AF05-DDE1D530A205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11866346-C29A-463D-A18F-528C23DD579E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0912492E-565A-4559-ABB8-D2898F06CF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD6421A-D8C4-4A3E-9497-4AC130CFE597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F44EC8-13BF-4032-9EBA-0D50C6A353BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370EEE74-3DAA-4BB2-9192-66672229DC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF74B28-CD95-4BC6-97D4-D529D30E1509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7111CAE-9279-49DA-B05A-046BB3EFA85F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E186AB2F-8C5B-45E0-9194-BF66DA64F772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32DCDA3-76B6-423C-9AF1-B65F19077909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCE26DD-FE65-4041-AB4D-9C7A16EE175C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE88965B-D148-43EB-9FC6-2EF5E5C917FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98E703A-717D-4997-AFBC-CAE4B644025D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEFEFF0-65E0-4F68-8C9E-03DAC585CA5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B27825D-099A-4733-8D3F-8EF2B050E5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4577947-7960-4627-9A74-9C3BB6477DDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D035A35-D53E-4C49-B4E4-F40B85866F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBDC6C0-961B-441D-8C34-AACE0902057E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1579A2D-955F-4CC6-9F94-9D40C669D903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140C7C99-1B50-431C-B55C-DFF308E7ECF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E166F3-931A-4997-B7B2-F2AD19C6F209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A70BEC7-8A69-44B2-9DDA-DFC1A13EB7B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A9400-571E-4955-AB84-C49A4255A5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE7C923-7CBB-4990-905B-9DD9D7D5946A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A892B3F0-5A31-4086-8AB5-F06E68588EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0DA930-86CE-4D17-BD41-9C4E47D8088F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC70491B-F701-4D33-A314-C686469DBD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198C24E9-6D45-44FD-B502-D14ACDA99EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sva:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E768F600-19DC-46A5-BDED-3C2497530CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2svc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16EF97B1-5150-4E88-B011-DB8F0AAFA9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2svd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC263E7-BA6A-41CB-8248-5DDB4404D9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sve:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544835A2-3AB0-4313-A731-54B1123F7498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEF14D5-1327-4012-913F-DA0E12C4E953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A672BD-87AE-424D-8735-073BBE9CE164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C033E3-184B-4AC1-B10D-8318FEAF73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A68D177-B028-4025-BD7B-82ACDB2D1E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485ACF9E-1305-4D71-A766-5BE1D748AAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09458CD7-D430-4957-8506-FAB2A3E2AA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E709D6B-61DB-4905-B539-B8488D7E2DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C1C831-556D-4634-AA24-6D64943ED275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075CD42D-070A-49BA-90D9-E7925BB41A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746DDC61-3981-4E93-A7EE-C120E0265485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4628FDA0-4260-4493-92C9-4574E5EC06A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FA064A-6E1A-4415-84D4-1A33FF667011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21147732-FA22-4728-B5F2-D115B78A8EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D717498-4DF9-4D15-A25B-D777FF460E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE03B1E-1522-4143-A019-B19E1F605A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B40548F-3914-4227-9E4C-F1B34071C069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE49281-0571-49F7-95FF-68B1ACA07537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B72E-6862-4115-9A0B-574089A94289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC38B64C-E246-467F-A185-669497DEA839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB42063-9DB5-42DB-825A-53C6DBB51A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5C90EE-A9C0-461C-9E89-732BFA9BD066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74B6350-C2F8-4786-8E32-2ED6C188A5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E26473-A8EF-44C5-B550-5E0B86D31291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663FE3CE-FA09-46A2-9C0D-2797D9137A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86309E93-F2C9-4334-9A1C-989EFDC99215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D49D6-0624-41CE-829E-49E7EA679EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65318A70-40FF-4BE8-962B-DFCD5C476166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869CEAF7-59D6-4651-8D89-0244D6C430A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059FBAA6-3127-4DF9-99AD-AA3A16317B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0E376F-64E1-4632-9A8E-11DC99FB245F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF440B52-C6AE-4608-BE71-01B354D37BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243BEF5E-F693-450E-B274-FD7CF34B6771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7918C59-1678-4F24-A7C2-68824D1B59A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE72804E-600D-47FA-B3BF-36BD3CF13A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5B9BAF-59BA-4282-B387-489264D44429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B41182-7AA8-49D1-BAC3-EAF312E43553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11BBB83-147B-4FBF-B263-77FCCFB2D92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E84677D-793D-44C5-80E9-FC29C3183278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFA2358-6B79-472D-9092-FF99DC3DF042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C26842-FF50-436F-8DB6-15A70082CD1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A31301-AAB0-4744-98B2-695D88798D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEB27CF-46B5-4780-964C-C31193614B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1094F9-7222-4DE0-A368-7421ABA66E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574FFD6F-D56C-41DB-A978-E501BA3CA5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11790F38-3720-45CF-9FD4-A8E5867684D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE2282B-6693-4E4B-8662-501EBC14CD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A925BA5C-AB2F-4B73-BA93-55664A319CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE02B7C-BC2D-433C-B0A8-E60EDD62538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9663D24-0D1D-4F46-961F-9D37D3776E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83649EC-61A5-4937-93F4-42D082023382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D8830A0-E816-40C4-8743-A9E0994BA922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B65738-134F-4C1A-916B-D6CD6365CB43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5331586-8380-4F77-8735-17EC0D0E503A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "93024CE7-DBA3-4C25-B7D4-4D2DA6AB880D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5769F6-8C69-4AC7-A3E3-75D275B2AC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35536E91-A58D-40F7-A256-34128E64B920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F69329B-4D37-428E-B467-E3B9314A4D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9615B275-5748-46CC-8A77-4A9550A39050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421CD923-6282-4404-A642-C04E1F57F12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD4411CB-5EE9-455C-AE90-1770320EFD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "593D1680-4883-43FE-A925-B87ED1D2E785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADF72EC-43B4-4FC0-9BA0-7CC91D4745B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBDB772E-F9A9-4EBA-958F-CDFCB2DA6BFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90769378-BBD1-48D0-921C-A79413B99CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6DF704-8CC8-42C3-83F1-4D38734DEAEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E636DC68-59FE-4BA0-BCFC-4DA97EE17B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0D6801-E9A8-416B-830B-7682A9AF65BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B2F9E0-E5FF-42D7-8CEF-359FDDFB4059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "23265E4D-855C-4CCC-A875-DFCBA55B3CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB86291-EB40-4CFD-A424-898EFB3D518B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10AADAC-4687-4308-8E4F-B7F9549556DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A747987-5218-4C1E-87C4-0675CD4F7A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6483CB-7838-45F7-AE28-824AD71172A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(5b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "04759B1E-8B40-460F-B33F-4E6332CFC31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AF3694-9686-444B-8D92-E41D262F74E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5595E7D-3CFD-4FF2-A6BE-59645058C54F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4235428-5E2E-4BCB-98B7-8844B19C7AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(7a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1E17AB-F645-4636-9337-3158556E85A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "86150D11-94D7-43F9-9D19-33778558255F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(9\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC43701-8A3A-42FB-B4F5-566DE59E542E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(23\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3B5CC3-A83E-4241-ACE1-0FFEE8A5EFE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB2B390-A39F-4082-BBCB-712BDD95886D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jda:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F782741-0F18-4FBC-9D00-AAABB8BC6A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB11851-BCF8-485B-91F9-6A39B2354826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C61F77-6CDE-4CCA-B2DB-B76C6B5F8152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFE3FC0-79BC-4549-98BA-235A53719F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jmb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4691CEAD-47F1-4A97-84A4-72B794D3F714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A28452-000C-4BBB-A34E-1AA63D69925D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7414D32-88A1-416E-A717-3F47B6D1BE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A4F6A3-1806-489A-85CF-7CA107513336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370DC543-AC01-4B91-88C7-60C323E35929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544BD924-2CBD-4130-BBD3-5AD084C85FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B78181E-E1D1-4C25-85DE-CA46BBF21765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1CD80F-E898-41CE-8A86-28C2F48B928A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF610051-1638-4C1B-9864-11E34EFC4DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78260223-50C0-48F8-9A65-AE67489E602C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E39462-4CEE-4C29-8B60-50E05FCF3E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7454AF-7610-4CD3-BD2B-95A6C3283811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB633E6C-025C-4B31-ABE7-8318C813376B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFED1FFB-899D-4A48-9CCA-0B8737AE1408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883FA166-2973-42BA-842D-28FBDBFEAC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4362045B-7065-4FF9-A977-B3DA7894F831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC27E79D-6B4B-4839-9664-DFE821C45C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0859B147-5D40-43FD-BA55-002DB292FDC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021903",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904cb.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34238",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49420",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904cb.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0630",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-03-27T16:30:02.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) Cisco Unified Communications Manager Express; (2) SIP Gateway Signaling Support Over Transport Layer Security (TLS) Transport; (3) Secure Signaling and Media Encryption; (4) Blocks Extensible Exchange Protocol (BEEP); (5) Network Admission Control HTTP Authentication Proxy; (6) Per-user URL Redirect for EAPoUDP, Dot1x, and MAC Authentication Bypass; (7) Distributed Director with HTTP Redirects; and (8) TCP DNS features in Cisco IOS 12.0 through 12.4 do not properly handle IP sockets, which allows remote attackers to cause a denial of service (outage or resource consumption) via a series of crafted TCP packets."
      }, {
        "lang" : "es",
        "value" : "Las funcionalidades (1) Cisco Unified Communications Manager Express; (2) el soporte de Transport Layer Security (TLS) para SIP Gateway Signaling; (3) Secure Signaling y Media Encryption; (4) Blocks Extensible Exchange Protocol (BEEP); (5) Network Admission Control HTTP Authentication Proxy; (6) Per-user URL Redirect para EAPoUDP, Dot1x, y la integración de autenticación MAC; (7) Distributed Director con HTTP Redirects; y (8) TCP DNS en Cisco IOS v12.0 hasta 12.4 no maneja adecuadamente los \"sockets\", permitiendo a atacantes remotos provocar una denegación de servicio (apagado o consumo de recursos) mediante una serie de paquetes TCP manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F86F790-6247-42F2-9487-3D60A2842F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12434A88-88C6-4749-981F-E2B4D725F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C398460-3F38-4AA7-A4B1-FD8A01588DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6B0C2F-2FBE-4422-AD30-305100C595CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932C1AC0-0BD1-46DF-A241-AA71BBD785BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEA01D2-B985-4575-AF00-144CE2E3024D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11A2BE-19E7-4148-B3CC-B4956B07273E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E78DEE-1125-4183-A0CD-947B850E956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7F94E8-86FC-456B-A7BB-57953F67F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277BFD67-3EE3-4E79-8D81-35597D168C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B5CC91-144D-4818-871E-E6120A7E1050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E5F43E-20DA-4C5C-B8C5-1A5512CA07B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6333F9A-2605-41EE-9AB4-1D04C5825BAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1050ACB3-E5B2-4710-910B-F3DF4B49907F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABE71F9-17D4-47C4-A762-18CC8716E477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7977DA9F-41DE-4482-B0CD-896EEEFB5689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADAB898-7728-4C14-B69A-7B8B06AFC894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54424787-34AC-410D-985F-511ADB2BB144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F54F0C-AC91-4CB7-9FEB-257F03547864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A0D017-F26F-4429-891E-C7E1C66B6588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FA075D-4A9E-44EE-90CF-23947C9040EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3DFAEC-4534-4A8D-9886-0723F57C7A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5451772-87D4-42E2-8F48-D137670DA3E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D162976F-87A3-42BF-8C9F-A981B14F4673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43581A57-418A-4A35-ACF2-1380A8DA8A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC17E231-9256-4600-A33B-238E7E83CF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A6D5468-BB6A-4665-964F-D8F636359CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0AB67FC-88F4-42BB-BB90-54521950DE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442972CD-50D3-4C46-AB73-44AED94B9F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19077C39-A27B-4EC3-A882-9AC826E61570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1az:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B31AFC-9C72-4737-B6B7-E938C13695BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDEF6AED-4477-4AAC-9759-1996B77DFEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9427851-B0DC-4CE6-8BFA-60619D1DC87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D07DD94-0925-4FEE-9565-5F36B9AAF448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3A67F5-05C6-4097-A88E-0A0F165C12EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7126E176-D739-4102-8F10-1EEB8C6A219D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C0554-1A50-4341-AB07-80AA854673D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8C5149-40F8-40C9-9FC3-7E7C68801320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FF39C5-CC37-4573-BB18-36254D38509B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B377A8B9-90F2-41B7-9098-5ABEB621E2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "896A71EC-9508-406F-8DE8-58953D9A30FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B15FCC-1BB3-41CA-9550-6D55DD381F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A85892-C3AB-4920-A949-A71BD0332D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6330829-9A7B-479D-B38B-BC64148EC172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F1E38-3482-4EAC-8654-EBC004B9344B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BCD9C9-7E6B-42EB-A645-32B3C00CDDEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1gb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34A61768-E18E-4DB0-9EDF-2E36D0F62DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752C3C6B-910D-4153-A162-DF255F60306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297FAD97-60C0-473D-A18D-03657B81B7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD4A33B-B13E-40C6-B47F-A406ACC6664F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E488E6E-87F0-4292-B97B-31087FDB4655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D199CB1-A2A3-4678-9503-C5B61281755C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19952DC6-1186-4754-BB1E-BA1D78A19C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E8AF76-0A1D-4BAE-BF10-D63080352E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B674647-4438-4450-9DCA-25184D4E2682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E5CC41-1344-4A65-A653-8012ACE2CF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71FB7128-CF11-4903-97D7-418403A03CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EFB20A-78E2-4BA1-B87C-BB74E8982D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A273401-9394-4BC3-879C-DE3EFC09B3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DABF911-FCDF-4095-A95D-4BB73628FCA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77886493-C30E-439E-BBB4-3D34A8938378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7813F511-CF6D-487F-9D1C-7A6CF85AD724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677DC4B6-8B3D-4A0D-9934-743FD7494DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E272881F-0804-4190-A21D-3D0B9A774F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F084DA16-24CB-41D1-92B7-C6E0499AAD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA979D75-F60E-45F8-B99C-1402DC8CFCDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884753D4-3AF0-4723-9D51-26BA7B4CA533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF3601D-DF44-4A10-A424-8E97C65A36A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1835410-77EB-46F2-ACF0-379759D4B0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB103ED-B170-4193-84CD-4C59F4D6A10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88DCCDE-6A81-473F-B4FE-95A84F8DF964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D55886-268F-4E4D-B00F-8A5D97A73BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7C6FB8-8393-4916-BB2B-3097B1995C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E314B0F7-1A27-483E-B3B3-947A5561281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B838C9-E60E-46A3-A5FB-4F67291D0851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B29F111-CBA4-464D-8B25-C2677BA270EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96C76C5-52BA-45D9-9803-048E770BAA84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B9E2C6-0E23-4AC9-906F-28BBC15868DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F75542-F2C5-4CEB-B655-E0620408A3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC41749-91FC-43DB-A52F-AC3E3A2205C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0195AE-24FD-43B2-892B-F646B8B5ED6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316924D4-10D4-4C98-AF05-DDE1D530A205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11866346-C29A-463D-A18F-528C23DD579E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0912492E-565A-4559-ABB8-D2898F06CF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD6421A-D8C4-4A3E-9497-4AC130CFE597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F44EC8-13BF-4032-9EBA-0D50C6A353BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370EEE74-3DAA-4BB2-9192-66672229DC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF74B28-CD95-4BC6-97D4-D529D30E1509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ira:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2424530B-2353-48F2-A076-0C44AAA4C89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7111CAE-9279-49DA-B05A-046BB3EFA85F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E186AB2F-8C5B-45E0-9194-BF66DA64F772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32DCDA3-76B6-423C-9AF1-B65F19077909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCE26DD-FE65-4041-AB4D-9C7A16EE175C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE88965B-D148-43EB-9FC6-2EF5E5C917FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98E703A-717D-4997-AFBC-CAE4B644025D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B27825D-099A-4733-8D3F-8EF2B050E5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D035A35-D53E-4C49-B4E4-F40B85866F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBDC6C0-961B-441D-8C34-AACE0902057E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1579A2D-955F-4CC6-9F94-9D40C669D903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140C7C99-1B50-431C-B55C-DFF308E7ECF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2scb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65213862-01D0-4B1D-8C76-B19D083BF460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05A548B-C443-4C15-B636-64C1F9B9860D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DC8B40-2093-4D3A-B18B-F95868A36D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2seb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB7E760-8260-4488-B9FB-C741C1763F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F4B373-490C-463F-B518-89D0CABB852C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sed:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2B4600-550F-4D5D-9BBD-E035025677BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2see:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F42A6D9-8CC3-49AF-AA56-96894CCE5AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sef:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4474AB2-AFF5-46F1-9066-54A4D6FA98C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2seg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D81068C-7E72-4D5E-84CA-5942B9E8AB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85ABE5E-7900-4A9C-A945-48B293EF46B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E166F3-931A-4997-B7B2-F2AD19C6F209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A70BEC7-8A69-44B2-9DDA-DFC1A13EB7B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A9400-571E-4955-AB84-C49A4255A5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C38FE9-CEC6-4C5C-A4FD-CCD1D50BD040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A892B3F0-5A31-4086-8AB5-F06E68588EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0DA930-86CE-4D17-BD41-9C4E47D8088F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2srd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1AE2B1-BFED-49A3-94EB-E40A1A675BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ste:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D681CC0E-CD68-4252-B243-C043754954DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC70491B-F701-4D33-A314-C686469DBD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198C24E9-6D45-44FD-B502-D14ACDA99EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sva:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E768F600-19DC-46A5-BDED-3C2497530CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2svc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16EF97B1-5150-4E88-B011-DB8F0AAFA9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2svd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC263E7-BA6A-41CB-8248-5DDB4404D9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sve:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544835A2-3AB0-4313-A731-54B1123F7498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEF14D5-1327-4012-913F-DA0E12C4E953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A672BD-87AE-424D-8735-073BBE9CE164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C033E3-184B-4AC1-B10D-8318FEAF73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A68D177-B028-4025-BD7B-82ACDB2D1E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485ACF9E-1305-4D71-A766-5BE1D748AAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7CCDB53-4F8B-4B90-9929-4E94CF414CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C03B0702-070F-48D5-9CBC-DB36D409A4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09458CD7-D430-4957-8506-FAB2A3E2AA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E709D6B-61DB-4905-B539-B8488D7E2DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C1C831-556D-4634-AA24-6D64943ED275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075CD42D-070A-49BA-90D9-E7925BB41A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746DDC61-3981-4E93-A7EE-C120E0265485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4628FDA0-4260-4493-92C9-4574E5EC06A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FA064A-6E1A-4415-84D4-1A33FF667011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21147732-FA22-4728-B5F2-D115B78A8EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D717498-4DF9-4D15-A25B-D777FF460E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD441B8-CC3C-4571-B095-C70B78BE80E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17AA0C3D-7C96-4D2E-91E5-232536245ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE03B1E-1522-4143-A019-B19E1F605A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B40548F-3914-4227-9E4C-F1B34071C069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE49281-0571-49F7-95FF-68B1ACA07537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B72E-6862-4115-9A0B-574089A94289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC38B64C-E246-467F-A185-669497DEA839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB42063-9DB5-42DB-825A-53C6DBB51A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5C90EE-A9C0-461C-9E89-732BFA9BD066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74B6350-C2F8-4786-8E32-2ED6C188A5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E26473-A8EF-44C5-B550-5E0B86D31291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663FE3CE-FA09-46A2-9C0D-2797D9137A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86309E93-F2C9-4334-9A1C-989EFDC99215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D49D6-0624-41CE-829E-49E7EA679EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65318A70-40FF-4BE8-962B-DFCD5C476166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869CEAF7-59D6-4651-8D89-0244D6C430A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059FBAA6-3127-4DF9-99AD-AA3A16317B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0E376F-64E1-4632-9A8E-11DC99FB245F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF440B52-C6AE-4608-BE71-01B354D37BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243BEF5E-F693-450E-B274-FD7CF34B6771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7918C59-1678-4F24-A7C2-68824D1B59A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE72804E-600D-47FA-B3BF-36BD3CF13A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B41182-7AA8-49D1-BAC3-EAF312E43553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11BBB83-147B-4FBF-B263-77FCCFB2D92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E84677D-793D-44C5-80E9-FC29C3183278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFA2358-6B79-472D-9092-FF99DC3DF042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C26842-FF50-436F-8DB6-15A70082CD1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A31301-AAB0-4744-98B2-695D88798D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEB27CF-46B5-4780-964C-C31193614B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1094F9-7222-4DE0-A368-7421ABA66E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574FFD6F-D56C-41DB-A978-E501BA3CA5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11790F38-3720-45CF-9FD4-A8E5867684D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE2282B-6693-4E4B-8662-501EBC14CD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A925BA5C-AB2F-4B73-BA93-55664A319CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE02B7C-BC2D-433C-B0A8-E60EDD62538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9663D24-0D1D-4F46-961F-9D37D3776E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83649EC-61A5-4937-93F4-42D082023382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D8830A0-E816-40C4-8743-A9E0994BA922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40183EF8-BD19-49AD-9E55-7FCCA635327F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E40D5D-F46E-4098-A46A-1A52A343310D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E5138-016A-48EC-A367-3D3285AAFED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C114F1A6-5DFE-408F-B83A-E8B9D4AF9791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jeb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD5C082-9730-466D-A4A8-E4EEE5F3730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF419BD-8474-4F33-9CDD-587E341ABA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332B0446-4D8B-414B-B572-84B45D5643AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE0A39D0-0E87-42E9-B8D3-2010FDCC03D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D40FB896-E20C-46B1-BF59-FBB42295F9C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B418CFDD-AF36-46F9-B347-B34E72100F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F12741-69FB-46DD-A670-8461492B338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5688D88-A550-43EB-8854-2E132EC71156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FC4904-1F4D-4E10-AF95-911B07827598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE195E-084B-4F4C-800D-850165DED48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618BF54-56DC-40FC-A515-3BFB4366F823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A668D08-14C4-4438-A59C-CE60498BEF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC3706F-B00A-405E-917E-7FD5217E0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595DCBA-E6F2-4551-A804-4DBB137F076B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DF12B-2A20-4AC5-8EC5-729008D87736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2958873B-A0AB-4EAF-A5CF-8423739FAB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1938D118-C07F-4BEC-8030-947F099BFCB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB2B390-A39F-4082-BBCB-712BDD95886D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jda:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F782741-0F18-4FBC-9D00-AAABB8BC6A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB11851-BCF8-485B-91F9-6A39B2354826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C61F77-6CDE-4CCA-B2DB-B76C6B5F8152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFE3FC0-79BC-4549-98BA-235A53719F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jmb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4691CEAD-47F1-4A97-84A4-72B794D3F714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A28452-000C-4BBB-A34E-1AA63D69925D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7414D32-88A1-416E-A717-3F47B6D1BE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370DC543-AC01-4B91-88C7-60C323E35929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544BD924-2CBD-4130-BBD3-5AD084C85FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B78181E-E1D1-4C25-85DE-CA46BBF21765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1CD80F-E898-41CE-8A86-28C2F48B928A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF610051-1638-4C1B-9864-11E34EFC4DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78260223-50C0-48F8-9A65-AE67489E602C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E39462-4CEE-4C29-8B60-50E05FCF3E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7454AF-7610-4CD3-BD2B-95A6C3283811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB633E6C-025C-4B31-ABE7-8318C813376B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA9218D-E7A5-4F98-83E7-2FD6E138D5CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC90BE87-EB54-46F8-A1FD-8F4E553C69F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFED1FFB-899D-4A48-9CCA-0B8737AE1408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883FA166-2973-42BA-842D-28FBDBFEAC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4362045B-7065-4FF9-A977-B3DA7894F831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC27E79D-6B4B-4839-9664-DFE821C45C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4963A243-74FA-43AD-9645-C9FAD527A6E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C6EACA-35BE-4032-93DA-5F738AEE0F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021897",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c6.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34242",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49418",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c6.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0633",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-03-27T16:30:02.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service (input queue wedge and interface outage) via MIPv6 packets, aka Bug ID CSCsm97220."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en (1) la funcionalidad Mobile IP NAT Traversal y (2) el subsistema Mobile IPv6 en Cisco IOS v12.3 hasta v12.4 permite a atacantes remotos provocar una denegación de servicio (presión en la cola de entrada y parada del interfaz) mediante paquetes MIPv6, conocido como Bug ID CSCsm97220."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A8D0F64-5DE1-4A6F-91F0-8A8509BF077F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:b:*:*:*:*:*:*",
            "matchCriteriaId" : "95418AD2-FB85-4E20-B874-D82DDF88BC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:bc:*:*:*:*:*:*",
            "matchCriteriaId" : "D8FC7948-B922-486E-9E5F-069B930EB1E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:bw:*:*:*:*:*:*",
            "matchCriteriaId" : "475EABCF-7404-4B65-9B29-E35C7D673B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:eu:*:*:*:*:*:*",
            "matchCriteriaId" : "7D99C07D-4EE3-4057-8E76-3468C45B4A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:ja:*:*:*:*:*:*",
            "matchCriteriaId" : "14D1B81D-95E4-4945-94F2-C36FD7C0DC55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jea:*:*:*:*:*:*",
            "matchCriteriaId" : "372582DB-DAB8-4B57-A778-5E2BC35B8233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jeb:*:*:*:*:*:*",
            "matchCriteriaId" : "452FF154-F6C0-4BC4-969E-1D49AA3CCE49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jec:*:*:*:*:*:*",
            "matchCriteriaId" : "36CF94C8-D6FE-4229-86F4-AF503F950151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jk:*:*:*:*:*:*",
            "matchCriteriaId" : "3AB6C57C-8805-443F-8ACE-83DAA48878CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jl:*:*:*:*:*:*",
            "matchCriteriaId" : "554C9611-55F1-40AF-9862-7E902D5CE1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jx:*:*:*:*:*:*",
            "matchCriteriaId" : "F89C185A-D3B3-4F5F-9249-F8EE89E8DD04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:t:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB0B55E-3579-4929-862F-C5FF9F796AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:tpc:*:*:*:*:*:*",
            "matchCriteriaId" : "A19FD313-0AF6-43E1-9FCB-5D27A18C8C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:va:*:*:*:*:*:*",
            "matchCriteriaId" : "CBC11203-84FD-4F6C-8597-573FD784C68E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xa:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8E34D3-0BCB-4D19-A41C-0375941E1B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xb:*:*:*:*:*:*",
            "matchCriteriaId" : "0F894B6F-9061-4D5B-A7F9-C9DDF2DD35D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xc:*:*:*:*:*:*",
            "matchCriteriaId" : "39BB1F5B-9D53-4DEC-8FC7-C9FC7B51C862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xd:*:*:*:*:*:*",
            "matchCriteriaId" : "5A124BB0-EFC3-430E-89F9-FF49B4BF9A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xe:*:*:*:*:*:*",
            "matchCriteriaId" : "A0515E7C-E3A5-44F4-866F-283E43AE8654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xf:*:*:*:*:*:*",
            "matchCriteriaId" : "1A74B4D0-939B-4FF1-9163-86FF64DB368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xg:*:*:*:*:*:*",
            "matchCriteriaId" : "09CBD68E-2A5C-43DF-9AD6-DE07815821B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xh:*:*:*:*:*:*",
            "matchCriteriaId" : "463C3A96-F8B7-4117-8CB3-D15B44119AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xi:*:*:*:*:*:*",
            "matchCriteriaId" : "01393D91-ED1D-460D-8621-10260F0CBDD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xj:*:*:*:*:*:*",
            "matchCriteriaId" : "48ABA40D-DE49-4B20-AFA1-302EB93719FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xk:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB2FF53-5991-4264-B5CC-D1E45460BFCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xq:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0B18B6-FF50-48BE-8250-14E57FB73AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xr:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1FAF42-B7B1-40B0-A0F7-5DF821E6193F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xs:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED386B6-3C75-41C3-8206-9CBA14E20B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xu:*:*:*:*:*:*",
            "matchCriteriaId" : "989581B0-FC28-457B-BDD2-72ED65BBE51E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xw:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8A8C95-2DC3-47AB-BED3-7D33902440C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xy:*:*:*:*:*:*",
            "matchCriteriaId" : "B8920235-87C6-41D6-9497-CC12D18A6536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:ya:*:*:*:*:*:*",
            "matchCriteriaId" : "9752CFFC-F1DA-4122-ACD8-79CB963F485F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yd:*:*:*:*:*:*",
            "matchCriteriaId" : "7012F8E0-2256-448A-9C4D-E2DB5AB9852B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yf:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE94EA2-E0CC-4760-94A8-DE56C8181F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yg:*:*:*:*:*:*",
            "matchCriteriaId" : "5B44691F-A47B-4953-BAC9-B2D43F4BCC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yh:*:*:*:*:*:*",
            "matchCriteriaId" : "8910F02B-DF61-443B-A4B5-2C0C04484519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yi:*:*:*:*:*:*",
            "matchCriteriaId" : "929836AD-8128-4174-872D-B9638B54611C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yj:*:*:*:*:*:*",
            "matchCriteriaId" : "045B4782-6CE2-40DD-A9F0-16E0C25768FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yk:*:*:*:*:*:*",
            "matchCriteriaId" : "9009E0C3-8BBC-4928-8528-62DA1ADC8BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:ym:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE4985F-2C87-4532-9D11-9BA37B7D6A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yq:*:*:*:*:*:*",
            "matchCriteriaId" : "9A80C51F-C69A-4780-8AE9-BEBC8EBFA115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:ys:*:*:*:*:*:*",
            "matchCriteriaId" : "416B8D2F-0B11-4074-B6BD-2E97F79B5520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yt:*:*:*:*:*:*",
            "matchCriteriaId" : "5ED5B53D-930D-477E-A0F6-76167AE67641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yu:*:*:*:*:*:*",
            "matchCriteriaId" : "29B39978-3BD0-40A8-93AE-EF40042EB7CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yx:*:*:*:*:*:*",
            "matchCriteriaId" : "84983F6A-64F6-4720-9291-FC84CA10EE25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yz:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2784C6-588A-4CAC-9362-515FB070D21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A60117-E4D1-4741-98A2-E643A26616A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:ja:*:*:*:*:*:*",
            "matchCriteriaId" : "93580300-6B1F-4D21-A51E-B781E234217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:jk:*:*:*:*:*:*",
            "matchCriteriaId" : "28E2C53A-51B0-4BD6-869E-1554B0BD3A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:jma:*:*:*:*:*:*",
            "matchCriteriaId" : "DB3BA487-727D-416C-80C6-C2F90D52E149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:jmb:*:*:*:*:*:*",
            "matchCriteriaId" : "A73738DE-E81B-4226-ABA3-B54A5AD96389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:jmc:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DA9F41-FBD0-404A-8C6B-E827C3FACE81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:jx:*:*:*:*:*:*",
            "matchCriteriaId" : "EFB1DA86-E0C2-4EDF-B82C-6677516CF1CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:md:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2376E9-D7F4-4483-AB13-8840EA9A63E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:mr:*:*:*:*:*:*",
            "matchCriteriaId" : "473A31DD-A0DC-4716-B98E-D2926A26DAF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:sw:*:*:*:*:*:*",
            "matchCriteriaId" : "C9569DC5-9803-4B17-9FF1-5BDA8194FE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:t:*:*:*:*:*:*",
            "matchCriteriaId" : "156B91B9-1F5B-4E83-A2B7-A5B7F272D5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xa:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E90E83-1732-4BEF-BC5B-401769DC8880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xb:*:*:*:*:*:*",
            "matchCriteriaId" : "68C9DDEB-EDE8-4B0D-A347-32621CCEDE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xc:*:*:*:*:*:*",
            "matchCriteriaId" : "51679B26-DF28-4E41-9801-E1599F250FFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xd:*:*:*:*:*:*",
            "matchCriteriaId" : "E989900F-BE66-47E4-9A1B-11B9785F89BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xe:*:*:*:*:*:*",
            "matchCriteriaId" : "95A01B7E-8231-4001-A340-31CE66474FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xf:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB012E7-E2E0-4F9D-ADF9-827816E3E6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xg:*:*:*:*:*:*",
            "matchCriteriaId" : "B7368529-518E-4DB2-B291-1F0009445D01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xj:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC62D3B-A287-4DED-A44D-3351452D4A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xk:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2F5D70-6790-4756-9A6A-F1865DCD4D10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021898",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a9042f.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34241",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49424",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12290",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a9042f.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0634",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-03-27T16:30:02.063",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the home agent (HA) implementation in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service (input queue wedge and interface outage) via an ICMP packet, aka Bug ID CSCso05337."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en la implementación del agente \"home\" (HA) en  (1) la funcionalida de Mobile IP NAT Traversal y (2) el subsistema Mobile IPv6 en Cisco IOS v12.3 hasta v12.4 permite a atacantes remotos provocar una denegación de servicio (presión en la cola de entrada y parada del interfaz) mediante un paquete ICMP, conocido como Bug ID CSCso05337."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A8D0F64-5DE1-4A6F-91F0-8A8509BF077F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:b:*:*:*:*:*:*",
            "matchCriteriaId" : "95418AD2-FB85-4E20-B874-D82DDF88BC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:bc:*:*:*:*:*:*",
            "matchCriteriaId" : "D8FC7948-B922-486E-9E5F-069B930EB1E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:bw:*:*:*:*:*:*",
            "matchCriteriaId" : "475EABCF-7404-4B65-9B29-E35C7D673B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:eu:*:*:*:*:*:*",
            "matchCriteriaId" : "7D99C07D-4EE3-4057-8E76-3468C45B4A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:ja:*:*:*:*:*:*",
            "matchCriteriaId" : "14D1B81D-95E4-4945-94F2-C36FD7C0DC55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jea:*:*:*:*:*:*",
            "matchCriteriaId" : "372582DB-DAB8-4B57-A778-5E2BC35B8233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jeb:*:*:*:*:*:*",
            "matchCriteriaId" : "452FF154-F6C0-4BC4-969E-1D49AA3CCE49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jec:*:*:*:*:*:*",
            "matchCriteriaId" : "36CF94C8-D6FE-4229-86F4-AF503F950151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jk:*:*:*:*:*:*",
            "matchCriteriaId" : "3AB6C57C-8805-443F-8ACE-83DAA48878CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jl:*:*:*:*:*:*",
            "matchCriteriaId" : "554C9611-55F1-40AF-9862-7E902D5CE1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:jx:*:*:*:*:*:*",
            "matchCriteriaId" : "F89C185A-D3B3-4F5F-9249-F8EE89E8DD04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:t:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB0B55E-3579-4929-862F-C5FF9F796AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:tpc:*:*:*:*:*:*",
            "matchCriteriaId" : "A19FD313-0AF6-43E1-9FCB-5D27A18C8C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:va:*:*:*:*:*:*",
            "matchCriteriaId" : "CBC11203-84FD-4F6C-8597-573FD784C68E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xa:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8E34D3-0BCB-4D19-A41C-0375941E1B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xb:*:*:*:*:*:*",
            "matchCriteriaId" : "0F894B6F-9061-4D5B-A7F9-C9DDF2DD35D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xc:*:*:*:*:*:*",
            "matchCriteriaId" : "39BB1F5B-9D53-4DEC-8FC7-C9FC7B51C862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xd:*:*:*:*:*:*",
            "matchCriteriaId" : "5A124BB0-EFC3-430E-89F9-FF49B4BF9A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xe:*:*:*:*:*:*",
            "matchCriteriaId" : "A0515E7C-E3A5-44F4-866F-283E43AE8654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xf:*:*:*:*:*:*",
            "matchCriteriaId" : "1A74B4D0-939B-4FF1-9163-86FF64DB368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xg:*:*:*:*:*:*",
            "matchCriteriaId" : "09CBD68E-2A5C-43DF-9AD6-DE07815821B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xh:*:*:*:*:*:*",
            "matchCriteriaId" : "463C3A96-F8B7-4117-8CB3-D15B44119AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xi:*:*:*:*:*:*",
            "matchCriteriaId" : "01393D91-ED1D-460D-8621-10260F0CBDD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xj:*:*:*:*:*:*",
            "matchCriteriaId" : "48ABA40D-DE49-4B20-AFA1-302EB93719FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xk:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB2FF53-5991-4264-B5CC-D1E45460BFCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xq:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0B18B6-FF50-48BE-8250-14E57FB73AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xr:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1FAF42-B7B1-40B0-A0F7-5DF821E6193F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xs:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED386B6-3C75-41C3-8206-9CBA14E20B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xu:*:*:*:*:*:*",
            "matchCriteriaId" : "989581B0-FC28-457B-BDD2-72ED65BBE51E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xw:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8A8C95-2DC3-47AB-BED3-7D33902440C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:xy:*:*:*:*:*:*",
            "matchCriteriaId" : "B8920235-87C6-41D6-9497-CC12D18A6536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:ya:*:*:*:*:*:*",
            "matchCriteriaId" : "9752CFFC-F1DA-4122-ACD8-79CB963F485F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yd:*:*:*:*:*:*",
            "matchCriteriaId" : "7012F8E0-2256-448A-9C4D-E2DB5AB9852B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yf:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE94EA2-E0CC-4760-94A8-DE56C8181F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yg:*:*:*:*:*:*",
            "matchCriteriaId" : "5B44691F-A47B-4953-BAC9-B2D43F4BCC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yh:*:*:*:*:*:*",
            "matchCriteriaId" : "8910F02B-DF61-443B-A4B5-2C0C04484519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yi:*:*:*:*:*:*",
            "matchCriteriaId" : "929836AD-8128-4174-872D-B9638B54611C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yj:*:*:*:*:*:*",
            "matchCriteriaId" : "045B4782-6CE2-40DD-A9F0-16E0C25768FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yk:*:*:*:*:*:*",
            "matchCriteriaId" : "9009E0C3-8BBC-4928-8528-62DA1ADC8BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:ym:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE4985F-2C87-4532-9D11-9BA37B7D6A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yq:*:*:*:*:*:*",
            "matchCriteriaId" : "9A80C51F-C69A-4780-8AE9-BEBC8EBFA115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:ys:*:*:*:*:*:*",
            "matchCriteriaId" : "416B8D2F-0B11-4074-B6BD-2E97F79B5520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yt:*:*:*:*:*:*",
            "matchCriteriaId" : "5ED5B53D-930D-477E-A0F6-76167AE67641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yu:*:*:*:*:*:*",
            "matchCriteriaId" : "29B39978-3BD0-40A8-93AE-EF40042EB7CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yx:*:*:*:*:*:*",
            "matchCriteriaId" : "84983F6A-64F6-4720-9291-FC84CA10EE25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.3:yz:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2784C6-588A-4CAC-9362-515FB070D21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A60117-E4D1-4741-98A2-E643A26616A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:ja:*:*:*:*:*:*",
            "matchCriteriaId" : "93580300-6B1F-4D21-A51E-B781E234217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:jk:*:*:*:*:*:*",
            "matchCriteriaId" : "28E2C53A-51B0-4BD6-869E-1554B0BD3A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:jma:*:*:*:*:*:*",
            "matchCriteriaId" : "DB3BA487-727D-416C-80C6-C2F90D52E149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:jmb:*:*:*:*:*:*",
            "matchCriteriaId" : "A73738DE-E81B-4226-ABA3-B54A5AD96389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:jmc:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DA9F41-FBD0-404A-8C6B-E827C3FACE81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:jx:*:*:*:*:*:*",
            "matchCriteriaId" : "EFB1DA86-E0C2-4EDF-B82C-6677516CF1CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:md:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2376E9-D7F4-4483-AB13-8840EA9A63E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:mr:*:*:*:*:*:*",
            "matchCriteriaId" : "473A31DD-A0DC-4716-B98E-D2926A26DAF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:sw:*:*:*:*:*:*",
            "matchCriteriaId" : "C9569DC5-9803-4B17-9FF1-5BDA8194FE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:t:*:*:*:*:*:*",
            "matchCriteriaId" : "156B91B9-1F5B-4E83-A2B7-A5B7F272D5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xa:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E90E83-1732-4BEF-BC5B-401769DC8880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xb:*:*:*:*:*:*",
            "matchCriteriaId" : "68C9DDEB-EDE8-4B0D-A347-32621CCEDE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xc:*:*:*:*:*:*",
            "matchCriteriaId" : "51679B26-DF28-4E41-9801-E1599F250FFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xd:*:*:*:*:*:*",
            "matchCriteriaId" : "E989900F-BE66-47E4-9A1B-11B9785F89BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xe:*:*:*:*:*:*",
            "matchCriteriaId" : "95A01B7E-8231-4001-A340-31CE66474FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xf:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB012E7-E2E0-4F9D-ADF9-827816E3E6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xg:*:*:*:*:*:*",
            "matchCriteriaId" : "B7368529-518E-4DB2-B291-1F0009445D01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xj:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC62D3B-A287-4DED-A44D-3351452D4A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cisco_ios:12.4:xk:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2F5D70-6790-4756-9A6A-F1865DCD4D10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021898",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a9042f.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34241",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49424",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49585",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12043",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a9042f.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0635",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-03-27T16:30:02.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the Cisco Tunneling Control Protocol (cTCP) encapsulation feature in Cisco IOS 12.4, when an Easy VPN (aka EZVPN) server is enabled, allows remote attackers to cause a denial of service (memory consumption and device crash) via a sequence of TCP packets."
      }, {
        "lang" : "es",
        "value" : "Perdida de memoria en la funcionalidad de encapsulado de Cisco Tunneling Control Protocol (cTCP) en Cisco IOS v12.4, cuando se ha habilitado un servidor Easy VPN (conocido como EZVPN), permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y caída del dispositivo) mediante una secuencia de paquetes TCP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4963A243-74FA-43AD-9645-C9FAD527A6E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C6EACA-35BE-4032-93DA-5F738AEE0F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90459.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34246",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021895",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49417",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90459.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml\r\n\r\n\r\nObtaining Fixed Software\r\n\r\nCisco has released free software updates that address these vulnerabilities. Prior to deploying software, customers should consult their maintenance provider or check the software for feature set compatibility and known issues specific to their environment.\r\n\r\nCustomers may only install and expect support for the feature sets they have purchased. By installing, downloading, accessing or otherwise using such software upgrades, customers agree to be bound by the terms of Cisco's software license terms found at http://www.cisco.com/en/US/docs/general/warranty/English/EU1KEN_.html , or as otherwise set forth at Cisco.com Downloads at http://www.cisco.com/public/sw-center/sw-usingswc.shtml ."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0636",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-03-27T16:30:02.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when SIP voice services are enabled, allows remote attackers to cause a denial of service (device crash) via a valid SIP message."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Cisco IOS v12.0 hasta v12.4, cuando están habilitados los servicios de voz SIP, permite a atacantes remotos provocar una denegación de servicio (caída del dispositivo) mediante un mensaje SIP válido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F86F790-6247-42F2-9487-3D60A2842F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12434A88-88C6-4749-981F-E2B4D725F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C398460-3F38-4AA7-A4B1-FD8A01588DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6B0C2F-2FBE-4422-AD30-305100C595CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932C1AC0-0BD1-46DF-A241-AA71BBD785BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEA01D2-B985-4575-AF00-144CE2E3024D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11A2BE-19E7-4148-B3CC-B4956B07273E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E78DEE-1125-4183-A0CD-947B850E956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7F94E8-86FC-456B-A7BB-57953F67F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277BFD67-3EE3-4E79-8D81-35597D168C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B5CC91-144D-4818-871E-E6120A7E1050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E5F43E-20DA-4C5C-B8C5-1A5512CA07B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6333F9A-2605-41EE-9AB4-1D04C5825BAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1050ACB3-E5B2-4710-910B-F3DF4B49907F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABE71F9-17D4-47C4-A762-18CC8716E477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7977DA9F-41DE-4482-B0CD-896EEEFB5689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADAB898-7728-4C14-B69A-7B8B06AFC894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54424787-34AC-410D-985F-511ADB2BB144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F54F0C-AC91-4CB7-9FEB-257F03547864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A0D017-F26F-4429-891E-C7E1C66B6588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FA075D-4A9E-44EE-90CF-23947C9040EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3DFAEC-4534-4A8D-9886-0723F57C7A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5451772-87D4-42E2-8F48-D137670DA3E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D162976F-87A3-42BF-8C9F-A981B14F4673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43581A57-418A-4A35-ACF2-1380A8DA8A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC17E231-9256-4600-A33B-238E7E83CF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A6D5468-BB6A-4665-964F-D8F636359CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0AB67FC-88F4-42BB-BB90-54521950DE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442972CD-50D3-4C46-AB73-44AED94B9F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19077C39-A27B-4EC3-A882-9AC826E61570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1az:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B31AFC-9C72-4737-B6B7-E938C13695BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDEF6AED-4477-4AAC-9759-1996B77DFEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9427851-B0DC-4CE6-8BFA-60619D1DC87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D07DD94-0925-4FEE-9565-5F36B9AAF448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3A67F5-05C6-4097-A88E-0A0F165C12EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7126E176-D739-4102-8F10-1EEB8C6A219D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C0554-1A50-4341-AB07-80AA854673D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8C5149-40F8-40C9-9FC3-7E7C68801320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FF39C5-CC37-4573-BB18-36254D38509B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B377A8B9-90F2-41B7-9098-5ABEB621E2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "896A71EC-9508-406F-8DE8-58953D9A30FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B15FCC-1BB3-41CA-9550-6D55DD381F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A85892-C3AB-4920-A949-A71BD0332D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6330829-9A7B-479D-B38B-BC64148EC172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F1E38-3482-4EAC-8654-EBC004B9344B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BCD9C9-7E6B-42EB-A645-32B3C00CDDEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1gb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34A61768-E18E-4DB0-9EDF-2E36D0F62DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752C3C6B-910D-4153-A162-DF255F60306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297FAD97-60C0-473D-A18D-03657B81B7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD4A33B-B13E-40C6-B47F-A406ACC6664F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E488E6E-87F0-4292-B97B-31087FDB4655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D199CB1-A2A3-4678-9503-C5B61281755C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19952DC6-1186-4754-BB1E-BA1D78A19C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E8AF76-0A1D-4BAE-BF10-D63080352E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B674647-4438-4450-9DCA-25184D4E2682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E5CC41-1344-4A65-A653-8012ACE2CF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71FB7128-CF11-4903-97D7-418403A03CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EFB20A-78E2-4BA1-B87C-BB74E8982D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A273401-9394-4BC3-879C-DE3EFC09B3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DABF911-FCDF-4095-A95D-4BB73628FCA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77886493-C30E-439E-BBB4-3D34A8938378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7813F511-CF6D-487F-9D1C-7A6CF85AD724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677DC4B6-8B3D-4A0D-9934-743FD7494DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E272881F-0804-4190-A21D-3D0B9A774F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F084DA16-24CB-41D1-92B7-C6E0499AAD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA979D75-F60E-45F8-B99C-1402DC8CFCDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884753D4-3AF0-4723-9D51-26BA7B4CA533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF3601D-DF44-4A10-A424-8E97C65A36A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1835410-77EB-46F2-ACF0-379759D4B0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB103ED-B170-4193-84CD-4C59F4D6A10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88DCCDE-6A81-473F-B4FE-95A84F8DF964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D55886-268F-4E4D-B00F-8A5D97A73BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7C6FB8-8393-4916-BB2B-3097B1995C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E314B0F7-1A27-483E-B3B3-947A5561281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B838C9-E60E-46A3-A5FB-4F67291D0851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B29F111-CBA4-464D-8B25-C2677BA270EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96C76C5-52BA-45D9-9803-048E770BAA84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B9E2C6-0E23-4AC9-906F-28BBC15868DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F75542-F2C5-4CEB-B655-E0620408A3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC41749-91FC-43DB-A52F-AC3E3A2205C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0195AE-24FD-43B2-892B-F646B8B5ED6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316924D4-10D4-4C98-AF05-DDE1D530A205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11866346-C29A-463D-A18F-528C23DD579E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0912492E-565A-4559-ABB8-D2898F06CF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD6421A-D8C4-4A3E-9497-4AC130CFE597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F44EC8-13BF-4032-9EBA-0D50C6A353BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370EEE74-3DAA-4BB2-9192-66672229DC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF74B28-CD95-4BC6-97D4-D529D30E1509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ira:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2424530B-2353-48F2-A076-0C44AAA4C89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7111CAE-9279-49DA-B05A-046BB3EFA85F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E186AB2F-8C5B-45E0-9194-BF66DA64F772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32DCDA3-76B6-423C-9AF1-B65F19077909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCE26DD-FE65-4041-AB4D-9C7A16EE175C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE88965B-D148-43EB-9FC6-2EF5E5C917FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98E703A-717D-4997-AFBC-CAE4B644025D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B27825D-099A-4733-8D3F-8EF2B050E5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D035A35-D53E-4C49-B4E4-F40B85866F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBDC6C0-961B-441D-8C34-AACE0902057E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1579A2D-955F-4CC6-9F94-9D40C669D903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140C7C99-1B50-431C-B55C-DFF308E7ECF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2scb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65213862-01D0-4B1D-8C76-B19D083BF460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05A548B-C443-4C15-B636-64C1F9B9860D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DC8B40-2093-4D3A-B18B-F95868A36D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2seb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB7E760-8260-4488-B9FB-C741C1763F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F4B373-490C-463F-B518-89D0CABB852C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sed:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2B4600-550F-4D5D-9BBD-E035025677BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2see:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F42A6D9-8CC3-49AF-AA56-96894CCE5AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sef:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4474AB2-AFF5-46F1-9066-54A4D6FA98C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2seg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D81068C-7E72-4D5E-84CA-5942B9E8AB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85ABE5E-7900-4A9C-A945-48B293EF46B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E166F3-931A-4997-B7B2-F2AD19C6F209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A70BEC7-8A69-44B2-9DDA-DFC1A13EB7B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A9400-571E-4955-AB84-C49A4255A5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C38FE9-CEC6-4C5C-A4FD-CCD1D50BD040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A892B3F0-5A31-4086-8AB5-F06E68588EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0DA930-86CE-4D17-BD41-9C4E47D8088F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2srd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1AE2B1-BFED-49A3-94EB-E40A1A675BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ste:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D681CC0E-CD68-4252-B243-C043754954DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC70491B-F701-4D33-A314-C686469DBD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198C24E9-6D45-44FD-B502-D14ACDA99EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sva:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E768F600-19DC-46A5-BDED-3C2497530CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2svc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16EF97B1-5150-4E88-B011-DB8F0AAFA9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2svd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC263E7-BA6A-41CB-8248-5DDB4404D9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sve:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544835A2-3AB0-4313-A731-54B1123F7498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEF14D5-1327-4012-913F-DA0E12C4E953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A672BD-87AE-424D-8735-073BBE9CE164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C033E3-184B-4AC1-B10D-8318FEAF73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A68D177-B028-4025-BD7B-82ACDB2D1E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485ACF9E-1305-4D71-A766-5BE1D748AAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7CCDB53-4F8B-4B90-9929-4E94CF414CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C03B0702-070F-48D5-9CBC-DB36D409A4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09458CD7-D430-4957-8506-FAB2A3E2AA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E709D6B-61DB-4905-B539-B8488D7E2DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C1C831-556D-4634-AA24-6D64943ED275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075CD42D-070A-49BA-90D9-E7925BB41A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746DDC61-3981-4E93-A7EE-C120E0265485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4628FDA0-4260-4493-92C9-4574E5EC06A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FA064A-6E1A-4415-84D4-1A33FF667011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21147732-FA22-4728-B5F2-D115B78A8EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D717498-4DF9-4D15-A25B-D777FF460E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD441B8-CC3C-4571-B095-C70B78BE80E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17AA0C3D-7C96-4D2E-91E5-232536245ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE03B1E-1522-4143-A019-B19E1F605A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B40548F-3914-4227-9E4C-F1B34071C069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE49281-0571-49F7-95FF-68B1ACA07537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B72E-6862-4115-9A0B-574089A94289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC38B64C-E246-467F-A185-669497DEA839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB42063-9DB5-42DB-825A-53C6DBB51A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5C90EE-A9C0-461C-9E89-732BFA9BD066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74B6350-C2F8-4786-8E32-2ED6C188A5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E26473-A8EF-44C5-B550-5E0B86D31291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663FE3CE-FA09-46A2-9C0D-2797D9137A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86309E93-F2C9-4334-9A1C-989EFDC99215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D49D6-0624-41CE-829E-49E7EA679EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65318A70-40FF-4BE8-962B-DFCD5C476166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869CEAF7-59D6-4651-8D89-0244D6C430A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059FBAA6-3127-4DF9-99AD-AA3A16317B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0E376F-64E1-4632-9A8E-11DC99FB245F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF440B52-C6AE-4608-BE71-01B354D37BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243BEF5E-F693-450E-B274-FD7CF34B6771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7918C59-1678-4F24-A7C2-68824D1B59A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE72804E-600D-47FA-B3BF-36BD3CF13A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B41182-7AA8-49D1-BAC3-EAF312E43553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11BBB83-147B-4FBF-B263-77FCCFB2D92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E84677D-793D-44C5-80E9-FC29C3183278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFA2358-6B79-472D-9092-FF99DC3DF042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C26842-FF50-436F-8DB6-15A70082CD1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A31301-AAB0-4744-98B2-695D88798D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEB27CF-46B5-4780-964C-C31193614B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1094F9-7222-4DE0-A368-7421ABA66E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574FFD6F-D56C-41DB-A978-E501BA3CA5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11790F38-3720-45CF-9FD4-A8E5867684D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE2282B-6693-4E4B-8662-501EBC14CD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A925BA5C-AB2F-4B73-BA93-55664A319CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE02B7C-BC2D-433C-B0A8-E60EDD62538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9663D24-0D1D-4F46-961F-9D37D3776E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83649EC-61A5-4937-93F4-42D082023382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D8830A0-E816-40C4-8743-A9E0994BA922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40183EF8-BD19-49AD-9E55-7FCCA635327F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E40D5D-F46E-4098-A46A-1A52A343310D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E5138-016A-48EC-A367-3D3285AAFED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C114F1A6-5DFE-408F-B83A-E8B9D4AF9791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jeb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD5C082-9730-466D-A4A8-E4EEE5F3730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF419BD-8474-4F33-9CDD-587E341ABA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332B0446-4D8B-414B-B572-84B45D5643AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE0A39D0-0E87-42E9-B8D3-2010FDCC03D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D40FB896-E20C-46B1-BF59-FBB42295F9C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B418CFDD-AF36-46F9-B347-B34E72100F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F12741-69FB-46DD-A670-8461492B338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5688D88-A550-43EB-8854-2E132EC71156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FC4904-1F4D-4E10-AF95-911B07827598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE195E-084B-4F4C-800D-850165DED48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618BF54-56DC-40FC-A515-3BFB4366F823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A668D08-14C4-4438-A59C-CE60498BEF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC3706F-B00A-405E-917E-7FD5217E0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595DCBA-E6F2-4551-A804-4DBB137F076B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DF12B-2A20-4AC5-8EC5-729008D87736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2958873B-A0AB-4EAF-A5CF-8423739FAB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1938D118-C07F-4BEC-8030-947F099BFCB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB2B390-A39F-4082-BBCB-712BDD95886D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jda:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F782741-0F18-4FBC-9D00-AAABB8BC6A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB11851-BCF8-485B-91F9-6A39B2354826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C61F77-6CDE-4CCA-B2DB-B76C6B5F8152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFE3FC0-79BC-4549-98BA-235A53719F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jmb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4691CEAD-47F1-4A97-84A4-72B794D3F714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A28452-000C-4BBB-A34E-1AA63D69925D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7414D32-88A1-416E-A717-3F47B6D1BE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370DC543-AC01-4B91-88C7-60C323E35929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544BD924-2CBD-4130-BBD3-5AD084C85FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B78181E-E1D1-4C25-85DE-CA46BBF21765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1CD80F-E898-41CE-8A86-28C2F48B928A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF610051-1638-4C1B-9864-11E34EFC4DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78260223-50C0-48F8-9A65-AE67489E602C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E39462-4CEE-4C29-8B60-50E05FCF3E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7454AF-7610-4CD3-BD2B-95A6C3283811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB633E6C-025C-4B31-ABE7-8318C813376B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA9218D-E7A5-4F98-83E7-2FD6E138D5CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC90BE87-EB54-46F8-A1FD-8F4E553C69F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFED1FFB-899D-4A48-9CCA-0B8737AE1408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883FA166-2973-42BA-842D-28FBDBFEAC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4362045B-7065-4FF9-A977-B3DA7894F831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC27E79D-6B4B-4839-9664-DFE821C45C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4963A243-74FA-43AD-9645-C9FAD527A6E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C6EACA-35BE-4032-93DA-5F738AEE0F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021902",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c0.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34243",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49421",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c0.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0637",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-03-27T16:30:02.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not enforce the CLI view configuration for file transfers, which allows remote authenticated users with an attached CLI view to (1) read or (2) overwrite arbitrary files via an SCP command."
      }, {
        "lang" : "es",
        "value" : "El servidor SCP en Cisco IOS v12.2 hasta la versión v12.4, cuando se ha habilitado el acceso CLI basado en roles, no refuerza la configuración de la visualización CLI para transferencias de ficheros, permitiendo a atacantes remotos autenticados con una vista CLI adjunta (1) leer o (2) sobreescribir ficheros de su elección mediante un  comando SCP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E314B0F7-1A27-483E-B3B3-947A5561281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B838C9-E60E-46A3-A5FB-4F67291D0851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B29F111-CBA4-464D-8B25-C2677BA270EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96C76C5-52BA-45D9-9803-048E770BAA84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ca:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D57BED-1D99-4077-941C-E60BEA65324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B9E2C6-0E23-4AC9-906F-28BBC15868DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F75542-F2C5-4CEB-B655-E0620408A3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC41749-91FC-43DB-A52F-AC3E3A2205C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0195AE-24FD-43B2-892B-F646B8B5ED6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316924D4-10D4-4C98-AF05-DDE1D530A205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11866346-C29A-463D-A18F-528C23DD579E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0912492E-565A-4559-ABB8-D2898F06CF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD6421A-D8C4-4A3E-9497-4AC130CFE597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F44EC8-13BF-4032-9EBA-0D50C6A353BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370EEE74-3DAA-4BB2-9192-66672229DC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF74B28-CD95-4BC6-97D4-D529D30E1509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7111CAE-9279-49DA-B05A-046BB3EFA85F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E186AB2F-8C5B-45E0-9194-BF66DA64F772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32DCDA3-76B6-423C-9AF1-B65F19077909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCE26DD-FE65-4041-AB4D-9C7A16EE175C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE88965B-D148-43EB-9FC6-2EF5E5C917FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98E703A-717D-4997-AFBC-CAE4B644025D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEFEFF0-65E0-4F68-8C9E-03DAC585CA5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B27825D-099A-4733-8D3F-8EF2B050E5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4577947-7960-4627-9A74-9C3BB6477DDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D035A35-D53E-4C49-B4E4-F40B85866F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBDC6C0-961B-441D-8C34-AACE0902057E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1579A2D-955F-4CC6-9F94-9D40C669D903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140C7C99-1B50-431C-B55C-DFF308E7ECF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E166F3-931A-4997-B7B2-F2AD19C6F209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A70BEC7-8A69-44B2-9DDA-DFC1A13EB7B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A9400-571E-4955-AB84-C49A4255A5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE7C923-7CBB-4990-905B-9DD9D7D5946A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A892B3F0-5A31-4086-8AB5-F06E68588EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0DA930-86CE-4D17-BD41-9C4E47D8088F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC70491B-F701-4D33-A314-C686469DBD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198C24E9-6D45-44FD-B502-D14ACDA99EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sva:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E768F600-19DC-46A5-BDED-3C2497530CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2svc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16EF97B1-5150-4E88-B011-DB8F0AAFA9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2svd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC263E7-BA6A-41CB-8248-5DDB4404D9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sve:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544835A2-3AB0-4313-A731-54B1123F7498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEF14D5-1327-4012-913F-DA0E12C4E953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A672BD-87AE-424D-8735-073BBE9CE164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C033E3-184B-4AC1-B10D-8318FEAF73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A68D177-B028-4025-BD7B-82ACDB2D1E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485ACF9E-1305-4D71-A766-5BE1D748AAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09458CD7-D430-4957-8506-FAB2A3E2AA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E709D6B-61DB-4905-B539-B8488D7E2DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C1C831-556D-4634-AA24-6D64943ED275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075CD42D-070A-49BA-90D9-E7925BB41A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746DDC61-3981-4E93-A7EE-C120E0265485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4628FDA0-4260-4493-92C9-4574E5EC06A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FA064A-6E1A-4415-84D4-1A33FF667011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21147732-FA22-4728-B5F2-D115B78A8EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D717498-4DF9-4D15-A25B-D777FF460E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE03B1E-1522-4143-A019-B19E1F605A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B40548F-3914-4227-9E4C-F1B34071C069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE49281-0571-49F7-95FF-68B1ACA07537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B72E-6862-4115-9A0B-574089A94289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC38B64C-E246-467F-A185-669497DEA839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB42063-9DB5-42DB-825A-53C6DBB51A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5C90EE-A9C0-461C-9E89-732BFA9BD066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74B6350-C2F8-4786-8E32-2ED6C188A5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E26473-A8EF-44C5-B550-5E0B86D31291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663FE3CE-FA09-46A2-9C0D-2797D9137A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86309E93-F2C9-4334-9A1C-989EFDC99215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D49D6-0624-41CE-829E-49E7EA679EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65318A70-40FF-4BE8-962B-DFCD5C476166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869CEAF7-59D6-4651-8D89-0244D6C430A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059FBAA6-3127-4DF9-99AD-AA3A16317B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0E376F-64E1-4632-9A8E-11DC99FB245F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF440B52-C6AE-4608-BE71-01B354D37BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243BEF5E-F693-450E-B274-FD7CF34B6771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7918C59-1678-4F24-A7C2-68824D1B59A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE72804E-600D-47FA-B3BF-36BD3CF13A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5B9BAF-59BA-4282-B387-489264D44429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B41182-7AA8-49D1-BAC3-EAF312E43553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11BBB83-147B-4FBF-B263-77FCCFB2D92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E84677D-793D-44C5-80E9-FC29C3183278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFA2358-6B79-472D-9092-FF99DC3DF042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C26842-FF50-436F-8DB6-15A70082CD1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A31301-AAB0-4744-98B2-695D88798D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEB27CF-46B5-4780-964C-C31193614B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1094F9-7222-4DE0-A368-7421ABA66E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574FFD6F-D56C-41DB-A978-E501BA3CA5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11790F38-3720-45CF-9FD4-A8E5867684D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE2282B-6693-4E4B-8662-501EBC14CD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A925BA5C-AB2F-4B73-BA93-55664A319CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE02B7C-BC2D-433C-B0A8-E60EDD62538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9663D24-0D1D-4F46-961F-9D37D3776E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83649EC-61A5-4937-93F4-42D082023382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D8830A0-E816-40C4-8743-A9E0994BA922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B65738-134F-4C1A-916B-D6CD6365CB43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5331586-8380-4F77-8735-17EC0D0E503A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "93024CE7-DBA3-4C25-B7D4-4D2DA6AB880D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5769F6-8C69-4AC7-A3E3-75D275B2AC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35536E91-A58D-40F7-A256-34128E64B920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F69329B-4D37-428E-B467-E3B9314A4D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9615B275-5748-46CC-8A77-4A9550A39050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421CD923-6282-4404-A642-C04E1F57F12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD4411CB-5EE9-455C-AE90-1770320EFD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "593D1680-4883-43FE-A925-B87ED1D2E785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADF72EC-43B4-4FC0-9BA0-7CC91D4745B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBDB772E-F9A9-4EBA-958F-CDFCB2DA6BFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90769378-BBD1-48D0-921C-A79413B99CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6DF704-8CC8-42C3-83F1-4D38734DEAEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E636DC68-59FE-4BA0-BCFC-4DA97EE17B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0D6801-E9A8-416B-830B-7682A9AF65BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B2F9E0-E5FF-42D7-8CEF-359FDDFB4059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "23265E4D-855C-4CCC-A875-DFCBA55B3CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB86291-EB40-4CFD-A424-898EFB3D518B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10AADAC-4687-4308-8E4F-B7F9549556DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A747987-5218-4C1E-87C4-0675CD4F7A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6483CB-7838-45F7-AE28-824AD71172A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(5b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "04759B1E-8B40-460F-B33F-4E6332CFC31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AF3694-9686-444B-8D92-E41D262F74E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(6\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5595E7D-3CFD-4FF2-A6BE-59645058C54F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4235428-5E2E-4BCB-98B7-8844B19C7AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(7a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1E17AB-F645-4636-9337-3158556E85A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "86150D11-94D7-43F9-9D19-33778558255F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(9\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC43701-8A3A-42FB-B4F5-566DE59E542E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(23\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3B5CC3-A83E-4241-ACE1-0FFEE8A5EFE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB2B390-A39F-4082-BBCB-712BDD95886D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jda:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F782741-0F18-4FBC-9D00-AAABB8BC6A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB11851-BCF8-485B-91F9-6A39B2354826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C61F77-6CDE-4CCA-B2DB-B76C6B5F8152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFE3FC0-79BC-4549-98BA-235A53719F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jmb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4691CEAD-47F1-4A97-84A4-72B794D3F714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A28452-000C-4BBB-A34E-1AA63D69925D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7414D32-88A1-416E-A717-3F47B6D1BE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A4F6A3-1806-489A-85CF-7CA107513336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370DC543-AC01-4B91-88C7-60C323E35929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544BD924-2CBD-4130-BBD3-5AD084C85FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B78181E-E1D1-4C25-85DE-CA46BBF21765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1CD80F-E898-41CE-8A86-28C2F48B928A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF610051-1638-4C1B-9864-11E34EFC4DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78260223-50C0-48F8-9A65-AE67489E602C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E39462-4CEE-4C29-8B60-50E05FCF3E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7454AF-7610-4CD3-BD2B-95A6C3283811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB633E6C-025C-4B31-ABE7-8318C813376B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFED1FFB-899D-4A48-9CCA-0B8737AE1408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883FA166-2973-42BA-842D-28FBDBFEAC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4362045B-7065-4FF9-A977-B3DA7894F831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC27E79D-6B4B-4839-9664-DFE821C45C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0859B147-5D40-43FD-BA55-002DB292FDC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021899",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c8.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34247",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "psirt@cisco.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49423",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/34438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c8.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0789",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-03-27T16:30:02.140",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a certificate, as demonstrated by an RSA public key."
      }, {
        "lang" : "es",
        "value" : "OpenSSL anterior a v0.9.8k en plataformas WIN64 y otras plataformas no maneja adecuadamente una estructura ASN.1 malformada, permitiendo a atacantes remotos provocar una denegación de servicio (acceso de memoria inválido y caída de la aplicación) al poner esta estructura en la clave pública de un certificado, como la utilizada por una clave pública RSA."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.8j",
            "matchCriteriaId" : "B2328F75-7F29-4516-B702-5F3AD9B5603D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D983EC-61B0-4FD9-89B5-9878E4CE4405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC4C5F05-BC0B-478D-9A6F-7C804777BA41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F417A1-5D97-4BC4-8B97-5AC40236DA21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDB5A09-BE86-4352-9799-A875649EDB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6231CAA-00A8-41CE-8436-B84518014CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A70AD93B-E876-4EAB-9970-752D42E15E99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F03FA9C0-24C7-46AC-92EC-7834BC34C79B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "716ADA01-38B8-4C15-A3BB-D9688DA30599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "B73326F7-7DCE-4EDE-95D7-AE7AED263A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E4742C-A983-4F00-B24F-AB280C0E876D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2D251C-9C45-4EFE-8262-E88AB7CE713A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "6D81E175-E698-40EF-9601-425893FFB1FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0F25B7-A172-4300-8718-112E817A6165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0628DF-3A4C-4078-B615-22260671EABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "52B1BE89-BAE0-4656-943B-B9B81D9B54B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D097222B-ED20-459C-9167-55751FA2C87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "86DDC8F2-7920-4A73-927E-562C89806972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962FCB86-15AD-4399-8B7D-EC1DEA919C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180D07AE-C571-4DD6-837C-43E2A946007A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90789533-C741-4B1C-A24B-2C77B9E4DE5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1520065B-46D7-48A4-B9D0-5B49F690C5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "494E48E7-EF86-4860-9A53-94F6C313746E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2636B92E-47D5-42EA-9585-A2B84FBE71CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A518E8-21BE-4C5C-B425-410AB1208E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3AB748-E463-445C-ABAB-4FEDDFD1878B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "660E4B8D-AABA-4520-BC4D-CF8E76E07C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "85BFEED5-4941-41BB-93D1-CD5C2A41290E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "9644CC68-1E91-45E7-8C53-1E3FC9976A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "73934717-2DA3-4614-A076-D6EDA5EB0626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E79A05-64F3-4397-952C-A5BB950C967D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98693865-2E79-4BD6-9F89-1994BC9A3E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6476506-EC37-4726-82DC-D0E8254A8CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C81EF3D-4DB7-4799-9670-8D79E28CA184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8116A66-175C-4E6D-9A9B-D54C1D97D213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382C1679-DA1D-4FA4-9D5E-B86CC5052D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA28812-8A24-4FE1-BED9-D6D5BB023645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9894D83E-2A27-446E-8B47-9C03CF802A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A9AC4D-E19B-431F-8679-B62F5F46BCF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4E446D-B9D3-45F2-9722-B41FA14A6C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4EA988-FC80-4170-8933-7C6663731981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F53B-24A1-4877-B16E-F1917C4E4E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75D3ACD5-905F-42BB-BE1A-8382E9D823BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "766EA6F2-7FA4-4713-9859-9971CCD2FDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB38AEA-BAF0-4920-9A71-747C24444770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F33EA2B-DE15-4695-A383-7A337AC38908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261EE631-AB43-44FE-B02A-DFAAB8D35927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124464882609472&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127678688104458&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34411",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34460",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34666",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35380",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35729",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42724",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42733",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021906",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openssl.org/news/secadv_20090325.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/52866",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.php.net/archive/2009.php#id2009-04-08-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34256",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0850",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1020",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1175",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1548",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49433",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://kb.bluecoat.com/index?page=content&id=SA50",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124464882609472&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127678688104458&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openssl.org/news/secadv_20090325.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/52866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/archive/2009.php#id2009-04-08-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kb.bluecoat.com/index?page=content&id=SA50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue only affects a small number of operating systems and does not affect the openssl packages as shipped with Red Hat Enterprise Linux 2.1, 3, 4 or 5.",
        "lastModified" : "2009-03-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-27T16:30:02.157",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via invalid ContextFlags data in the reqFlags field in a negTokenInit token."
      }, {
        "lang" : "es",
        "value" : "La función spnego_gss_accept_sec_context en lib/gssapi/spnego/spnego_mech.c en MIT Kerberos 5 (conocido como krb5) v.1.6.3, cuando se utiliza SPNEGO, permite a atacantes remotos provocar una denegación de servicio (referencia a puntero nulo y caída de la aplicación) mediante datos \"ContextFlags\" inválidos en el campo \"reqFlags\" en el token negTokenInit."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos:5-1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "032730AE-1E53-4CA2-96FD-AD60CD27F3CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD315AE-868B-4061-BF01-CDBF59B02499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B639DD5F-71C7-4D9B-BA5C-51CAF64140B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B904DCE-D59F-45C7-A814-DE42CF02792D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9957FE9E-1E89-4C27-852C-44F866A1834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C382DAA-68D2-4DD9-BE29-8EEB0BAF1A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73BB258E-51CF-4D12-836B-BCEA587A3F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81DE01C-BA3B-40B4-BD85-17692F0AF8A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=6402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34347",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://src.mit.edu/fisheye/browse/krb5/trunk/src/lib/gssapi/spnego/spnego_mech.c?r1=21875&r2=22084",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://src.mit.edu/fisheye/changelog/krb5/?cs=22084",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21396120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/662091",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0408.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502526/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502546/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-755-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0847",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2248",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=6402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://src.mit.edu/fisheye/browse/krb5/trunk/src/lib/gssapi/spnego/spnego_mech.c?r1=21875&r2=22084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://src.mit.edu/fisheye/changelog/krb5/?cs=22084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21396120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/662091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0408.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502526/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502546/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-755-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-30T16:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly other operating systems, uses world-writable permissions for the socket file (aka /var/run/multipathd.sock), which allows local users to send arbitrary commands to the multipath daemon."
      }, {
        "lang" : "es",
        "value" : "multipath-tools en SUSE openSUSE v10.3 hasta v11.0 y SUSE Linux Enterprise Server (SLES) v10 utiliza permisos de escritura a todos para el fichero del socket (también conocido como /var/run/multipathd.sock), permitiendo a usuarios locales enviar comandos de su elección al demonio \"multipath\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:christophe.varoqui:multipath-tools:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1B5821-FF7F-41DB-807D-EF28B3C4ADF0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "743CBBB1-C140-4FEF-B40E-FAE4511B1140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:intuity_audix_lx:2.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BE386B55-B9FA-41BD-AD00-EB6A6552C34E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:intuity_audix_lx:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "965928CF-FDE4-42F7-9486-CB4D2F011225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:intuity_audix_lx:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1E61EBAF-F034-4070-BFD5-68AD1239CD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:message_networking:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E871348D-8FA1-4C77-BB8E-BECF9CF2FFD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:messaging_storage_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E42226-4F91-4EEB-8151-71BA15E8B7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:messaging_storage_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB90E377-B821-4508-B1AB-B10F47975E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:messaging_storage_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA21139-B8E2-42A8-AC1D-8DA00F230D8B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:open_enterprise_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C0C136-E406-4628-994A-682E8E729B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3",
            "versionEndIncluding" : "11.0",
            "matchCriteriaId" : "9A8362BB-5717-4714-BD92-220DDB646D07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B14008-5E0A-4187-AF93-DE2FF5BA5921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD2D897-E321-4CED-92E0-11A98B52053C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:-:*:*:*:*:*:*",
            "matchCriteriaId" : "38C3AEB0-59E2-400A-8943-60C0A223B680"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:ctpview:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "A2953793-3D79-4128-A841-EDAF50095FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:ctpview:7.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D6B30D89-FF23-4818-A63D-7DE5C3328165"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.opensuse.org/update/10.3-test/repodata/patch-kpartx-6082.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://launchpad.net/bugs/cve/2009-0115",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34642",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34694",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34710",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34759",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-128.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1767",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9214",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00231.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00236.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://download.opensuse.org/update/10.3-test/repodata/patch-kpartx-6082.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://launchpad.net/bugs/cve/2009-0115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-128.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00231.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00236.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1170",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-30T16:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun OpenSolaris snv_100 through snv_101 allows local users, with privileges in a non-global zone, to execute arbitrary code in the global zone when a global-zone user is using mdb on a non-global zone process."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Sun OpenSolaris desde la version snv_100 hasta la snv_101 que permite a usuarios locales, con privilegios en una \"non-global zone\" (zona no global), ejecutar código de su elección en una \"global zone\" (zona global) cuando un usuario de \"global-zone\" esta usando mdb o un proceso de \"non-global zone\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255608-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255608-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1171",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-30T22:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assisted attackers to read arbitrary files via an input command in a \"$$\" sequence, which causes LaTeX to include the contents of the file."
      }, {
        "lang" : "es",
        "value" : "El filtro TeX en Moodle v1.6 anteriores a v1.6.9+, v1.7 anteriores a v1.7.7+, v1.8 anteriores a v1.8.9, y v1.9 anteriores a v1.9.5 permite a atacantes con la intervención del usuario leer ficheros de su elección mediante un comando \"input\" en secuencia con \"$$\", provocando que LaTeX incluya el contenido del fichero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680CE396-5F61-409C-A152-4D1E1CB44EA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A0F31A-BB19-4B2C-A2CD-1DFA5FDF1C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98CA6482-0B84-463D-9C81-A92FFC06C9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794B997-0793-4465-B9BA-5BFF254D600A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06F4A1D8-65C5-4EDA-BCEC-CD267DE5C4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2A20C9-5FEF-4D91-AFA0-B49672CC8B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFEA024-4CA7-4975-802C-1BB9C099C164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E5E19D-BC58-478E-A584-6D260A5C5265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6C092A-2871-475E-AE53-DC02EB9C3FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB16198E-A32D-4CFA-9CCE-65871596E6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFE9D24-24DB-49EA-B59E-AF9B47D46EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56551145-5213-4165-88C9-C351DACDD1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A589727E-92BB-40DA-8172-89279EB9B73C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E97539-A7CC-48D3-A897-ADE4BC194B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D19C1954-6330-449D-9101-378D5DBD122C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4A3A5D9-D96E-46B3-AC22-25045564EB96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF91F8EA-1737-4E11-9931-ACAFB4BC0018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E81E148-5710-439C-8A1A-884D27640AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B70465-F734-4C65-9790-0D83D03B7A16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7949FC50-81B9-44AD-BB1B-91D025B34FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F2602B-8ED3-4026-A9A4-31BE8BDC7724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F24649-B67F-4809-9F54-7B623AEF5A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9C3840-66BE-47EC-9F0C-E9D2171FF0B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.moodle.org/moodle/filter/tex/filter.php?r1=1.18.4.4&r2=1.18.4.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tracker.moodle.org/browse/MDL-18552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502231/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/791-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00077.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00079.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.moodle.org/moodle/filter/tex/filter.php?r1=1.18.4.4&r2=1.18.4.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tracker.moodle.org/browse/MDL-18552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502231/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/791-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00079.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-31T14:09:53.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 and 7.0 before 7.0.0.3 allows attackers to hijack user sessions in \"specific scenarios\" related to a forced logout."
      }, {
        "lang" : "es",
        "value" : "La consola de administración en IBM WebSphere Application Server (WAS) v6.1 versiones anteriores a v6.1.0.23 y v7.0 versiones anteriores a v7.0.0.3 permite a atacantes secuestrar sesiones de usuarios en \"escenarios específicos\" relacionados con cierres de sesión forzadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95255265-6D69-46D3-9FFA-8EDB1734375C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4191D3-64AB-482C-9DEF-DD04C4C942CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD75308-7F21-4DDF-AD66-C155CF4B721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C250D-8279-4071-871C-1C7C4DE09B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC300B03-7A8F-4E96-B55D-18CC258BBFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C8054A-8581-4936-AF94-291AE56EB4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026EBFCD-0BC1-404B-BC14-292F35BE667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D74F8-4321-48B3-A33E-FCCFA93013CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2043B836-3950-46A1-89E4-08985DEA0D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108457A-50DC-4432-9E30-98ADBEBF2389"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34131",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK74966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK74966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1172",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-31T14:09:53.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JAX-RPC WS-Security runtime in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 and 7.0 before 7.0.0.3, when APAR PK41002 is installed, does not properly validate UsernameToken objects, which has unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "El JAX-RPC Runtime WS-Security en el componente Web Services Security en IBM WebSphere Application Server (WAS) v6.1 versiones anteriores a v6.1.0.23 y v7.0 versiones anteriores a v7.0.0.3, cuando APAR PK41002 está instalado, no valida apropiadamente objetos UsernameToken, lo cual tiene un impacto y vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95255265-6D69-46D3-9FFA-8EDB1734375C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4191D3-64AB-482C-9DEF-DD04C4C942CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD75308-7F21-4DDF-AD66-C155CF4B721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C250D-8279-4071-871C-1C7C4DE09B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC300B03-7A8F-4E96-B55D-18CC258BBFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C8054A-8581-4936-AF94-291AE56EB4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026EBFCD-0BC1-404B-BC14-292F35BE667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D74F8-4321-48B3-A33E-FCCFA93013CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2043B836-3950-46A1-89E4-08985DEA0D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108457A-50DC-4432-9E30-98ADBEBF2389"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34131",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK75992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21367223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK75992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21367223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-31T14:09:53.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files associated with unspecified \"interim fixes,\" which allows attackers to modify files that would not have been accessible if the intended 755 permissions were used."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server (WAS) v7.0 anterior a v7.0.0.3 utiliza permisos débiles (777) para ficheros asociados con \"correcciones parciales\" sin especificar, lo que permite a atacantes modificar ficheros que podría no haber estado accesible si los fueran utilizados los permisos 755."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108457A-50DC-4432-9E30-98ADBEBF2389"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK77590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK82988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0854",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK77590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK82988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-31T14:09:53.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 and 7.0 before 7.0.0.3 has an unspecified \"security problem\" in the XML digital-signature specification, which has unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "El componente Web Services Security en IBM WebSphere Application Server (WAS) v7.0 versiones anteriores a v7.0.0.3 tiene un \"problema de seguridad\" no especificado en la especificación firma-digital XML, lo cual tiene un impacto y vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108457A-50DC-4432-9E30-98ADBEBF2389"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK80596",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21384925",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34506",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1464",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://secunia.com/advisories/34131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK80596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21384925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-31T14:09:53.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in apps/web/vs_diag.cgi in the DAAP extension in Banshee 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the server parameter, which is not properly handled in an error message."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en apps/web/vs_diag.cgi en la extensión DAAP en Banshee v1.4.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"server\", que no permite un manejo adecuado en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:banshee-project:banshee:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A13354B-324C-448B-A1DF-9DDB60D914CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=577270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/30/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=577270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/30/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-31T18:24:45.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote attackers to execute arbitrary code via a crafted id parameter in a query action."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en mapserv.c en mapserv en MapServer v4.x anterior a v4.10.4 y v5.x anterior a v5.2.2, cuando el servidor  tiene un mapa con un atributo largo IMAGEPATH O NAME, permite a atacantes remotos ejecutar código arbitrario a través de un parámetro \"id\" manipulado en una acción \"query\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7362D32E-07AF-4DFB-A7EE-B92A2949FCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16812C55-8E9F-4035-92E6-D2C7AF4F5B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11F257-809F-4F7C-B5B1-5D407B983DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFFE501-B4E0-4352-8C8D-44531E8A6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "426DC6E0-2DA2-4815-B08B-EE2CF20AE3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBEE70D8-0EC2-4855-81C8-9FECCD9C16BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE55464C-FD27-47BF-9941-26EE7968BF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A6111-3A73-4033-8333-4929A6A22CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4F9152-4BA9-4742-9041-9707BB4B505F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F27BB1D-165E-4414-AB9B-5BBDF4268F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9305883D-8626-448C-8B1A-074158F518DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "04D30449-7EEB-42C4-9F11-4E6EE39C18F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE53FF73-329B-4384-B636-2F4050778FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B52B92DB-535F-45B7-AF32-B97216A4C4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C410FF2E-E1C6-4238-94ED-3EC6389C961D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279DE3C1-7BEB-43A4-A91B-06D3A53C30A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "279EDC4E-87CC-48ED-B735-84F96DC5796E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "53AB964F-61BD-4EC5-8469-7DB371154455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "C27C5F5A-6B68-4723-809B-C482238F9647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43CFB610-77A2-436E-ADD0-C0D647AF56DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED26BFDF-0C8C-4BEF-BB2D-FA7ADB95AFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2E86BD-2358-46D5-BBB5-147168001578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6257B30-61DC-4838-92E6-D9938224BFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C661B582-E2F6-4E91-A47C-E91CCB0ECF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E60110D-1CED-47BE-8565-FE858BEFF44B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "8B061F26-EF3F-48CC-A974-5B49A622C5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "0870B801-E121-47D8-9C88-B01C7AB6ED3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F320C0-1A33-4768-9BB1-09C6554A9C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "81C28558-F40D-48B9-B98C-F30709C89AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "DCEF61F4-F4CE-4E33-A67C-17B1D0185BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "65E266D2-C1F2-4400-9E41-AEB2F116C733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9161B916-5EED-46C4-8E0C-515A0B6D2902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9689CB4-A70C-42D7-91E0-68057D9D4779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6767A7E5-7A2C-452D-A6EB-9C61B43DC39B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "119B427D-87AC-4DD8-AD13-B8CFC847A947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "57221C0B-EE09-4EB6-AE21-3C31393EB922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "74EEC8BC-A00F-4DCF-B787-5B95699DBD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9030BE8-663A-4F46-B255-0AEBFD790DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DED21A-FA34-4F6A-8ED5-A985671E5653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203F6A08-17BF-4F82-82C5-E0653C2100F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E939104D-9765-4DBF-AA1D-97EBBE515972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "93188DA2-4137-4291-9FDC-469D933C9602"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trac.osgeo.org/mapserver/ticket/2944",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.positronsecurity.com/advisories/2009-000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502271/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trac.osgeo.org/mapserver/ticket/2944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.positronsecurity.com/advisories/2009-000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502271/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-31T18:24:45.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to have an unknown impact via a negative value in the Content-Length HTTP header."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento inferior de búfer  basado en montículo en la función readPostBody en cgiutil.c en mapserv v4.x anterior a v4.10.4 y v5.x anterior a v5.2.2, permite a atacantes remotos tener un impacto desconocido a través de un valor negativo en la cabecera HTTP Content-Length."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7362D32E-07AF-4DFB-A7EE-B92A2949FCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16812C55-8E9F-4035-92E6-D2C7AF4F5B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11F257-809F-4F7C-B5B1-5D407B983DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFFE501-B4E0-4352-8C8D-44531E8A6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "426DC6E0-2DA2-4815-B08B-EE2CF20AE3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBEE70D8-0EC2-4855-81C8-9FECCD9C16BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE55464C-FD27-47BF-9941-26EE7968BF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A6111-3A73-4033-8333-4929A6A22CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4F9152-4BA9-4742-9041-9707BB4B505F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F27BB1D-165E-4414-AB9B-5BBDF4268F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9305883D-8626-448C-8B1A-074158F518DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "04D30449-7EEB-42C4-9F11-4E6EE39C18F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE53FF73-329B-4384-B636-2F4050778FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B52B92DB-535F-45B7-AF32-B97216A4C4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C410FF2E-E1C6-4238-94ED-3EC6389C961D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279DE3C1-7BEB-43A4-A91B-06D3A53C30A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "279EDC4E-87CC-48ED-B735-84F96DC5796E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "53AB964F-61BD-4EC5-8469-7DB371154455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "C27C5F5A-6B68-4723-809B-C482238F9647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43CFB610-77A2-436E-ADD0-C0D647AF56DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED26BFDF-0C8C-4BEF-BB2D-FA7ADB95AFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2E86BD-2358-46D5-BBB5-147168001578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6257B30-61DC-4838-92E6-D9938224BFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C661B582-E2F6-4E91-A47C-E91CCB0ECF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E60110D-1CED-47BE-8565-FE858BEFF44B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "8B061F26-EF3F-48CC-A974-5B49A622C5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "0870B801-E121-47D8-9C88-B01C7AB6ED3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F320C0-1A33-4768-9BB1-09C6554A9C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "81C28558-F40D-48B9-B98C-F30709C89AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "DCEF61F4-F4CE-4E33-A67C-17B1D0185BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "65E266D2-C1F2-4400-9E41-AEB2F116C733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9161B916-5EED-46C4-8E0C-515A0B6D2902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9689CB4-A70C-42D7-91E0-68057D9D4779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6767A7E5-7A2C-452D-A6EB-9C61B43DC39B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "119B427D-87AC-4DD8-AD13-B8CFC847A947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "57221C0B-EE09-4EB6-AE21-3C31393EB922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "74EEC8BC-A00F-4DCF-B787-5B95699DBD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9030BE8-663A-4F46-B255-0AEBFD790DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DED21A-FA34-4F6A-8ED5-A985671E5653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203F6A08-17BF-4F82-82C5-E0653C2100F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E939104D-9765-4DBF-AA1D-97EBBE515972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "93188DA2-4137-4291-9FDC-469D933C9602"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trac.osgeo.org/mapserver/ticket/2943",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.positronsecurity.com/advisories/2009-000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502271/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trac.osgeo.org/mapserver/ticket/2943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.positronsecurity.com/advisories/2009-000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502271/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-31T18:24:45.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with Cygwin, allows remote attackers to create arbitrary files via a .. (dot dot) in the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en mapserv.c en mapserv en MapServer v4.x anterior a v4.10.4 y v5.x anterior a v5.2.2, cuando se ejecuta sobre Windows con Cygwin, permite a atacantes remotos crear fichero de modo arbitrario a traves de ..(punto punto) en el parametro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7362D32E-07AF-4DFB-A7EE-B92A2949FCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16812C55-8E9F-4035-92E6-D2C7AF4F5B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11F257-809F-4F7C-B5B1-5D407B983DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFFE501-B4E0-4352-8C8D-44531E8A6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "426DC6E0-2DA2-4815-B08B-EE2CF20AE3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBEE70D8-0EC2-4855-81C8-9FECCD9C16BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE55464C-FD27-47BF-9941-26EE7968BF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A6111-3A73-4033-8333-4929A6A22CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4F9152-4BA9-4742-9041-9707BB4B505F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F27BB1D-165E-4414-AB9B-5BBDF4268F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9305883D-8626-448C-8B1A-074158F518DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "04D30449-7EEB-42C4-9F11-4E6EE39C18F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE53FF73-329B-4384-B636-2F4050778FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B52B92DB-535F-45B7-AF32-B97216A4C4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C410FF2E-E1C6-4238-94ED-3EC6389C961D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279DE3C1-7BEB-43A4-A91B-06D3A53C30A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "279EDC4E-87CC-48ED-B735-84F96DC5796E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "53AB964F-61BD-4EC5-8469-7DB371154455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "C27C5F5A-6B68-4723-809B-C482238F9647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43CFB610-77A2-436E-ADD0-C0D647AF56DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED26BFDF-0C8C-4BEF-BB2D-FA7ADB95AFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2E86BD-2358-46D5-BBB5-147168001578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6257B30-61DC-4838-92E6-D9938224BFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C661B582-E2F6-4E91-A47C-E91CCB0ECF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E60110D-1CED-47BE-8565-FE858BEFF44B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "8B061F26-EF3F-48CC-A974-5B49A622C5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "0870B801-E121-47D8-9C88-B01C7AB6ED3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F320C0-1A33-4768-9BB1-09C6554A9C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "81C28558-F40D-48B9-B98C-F30709C89AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "DCEF61F4-F4CE-4E33-A67C-17B1D0185BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "65E266D2-C1F2-4400-9E41-AEB2F116C733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9161B916-5EED-46C4-8E0C-515A0B6D2902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9689CB4-A70C-42D7-91E0-68057D9D4779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6767A7E5-7A2C-452D-A6EB-9C61B43DC39B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "119B427D-87AC-4DD8-AD13-B8CFC847A947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "57221C0B-EE09-4EB6-AE21-3C31393EB922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "74EEC8BC-A00F-4DCF-B787-5B95699DBD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9030BE8-663A-4F46-B255-0AEBFD790DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DED21A-FA34-4F6A-8ED5-A985671E5653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203F6A08-17BF-4F82-82C5-E0653C2100F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E939104D-9765-4DBF-AA1D-97EBBE515972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "93188DA2-4137-4291-9FDC-469D933C9602"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trac.osgeo.org/mapserver/ticket/2942",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.positronsecurity.com/advisories/2009-000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502271/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trac.osgeo.org/mapserver/ticket/2942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.positronsecurity.com/advisories/2009-000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502271/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-31T18:24:45.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to read arbitrary invalid .map files via a full pathname in the map parameter, which triggers the display of partial file contents within an error message, as demonstrated by a /tmp/sekrut.map symlink."
      }, {
        "lang" : "es",
        "value" : "mapserv en MapServer 4.x versiones anteriores a v4.10.4 y 5.x versiones anteriores a v5.2.2 permite a atacantes remotos leer ficheros .map inválidos de su elección a través de una ruta completa en el parámetro \"map\", lo cual dispara la pantalla del contenido de un fichero parcial dentro de un mensaje de error, como lo demostrado por un symlink /tmp/sekrut.map."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7362D32E-07AF-4DFB-A7EE-B92A2949FCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16812C55-8E9F-4035-92E6-D2C7AF4F5B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11F257-809F-4F7C-B5B1-5D407B983DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFFE501-B4E0-4352-8C8D-44531E8A6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "426DC6E0-2DA2-4815-B08B-EE2CF20AE3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBEE70D8-0EC2-4855-81C8-9FECCD9C16BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE55464C-FD27-47BF-9941-26EE7968BF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A6111-3A73-4033-8333-4929A6A22CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4F9152-4BA9-4742-9041-9707BB4B505F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F27BB1D-165E-4414-AB9B-5BBDF4268F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9305883D-8626-448C-8B1A-074158F518DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "04D30449-7EEB-42C4-9F11-4E6EE39C18F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE53FF73-329B-4384-B636-2F4050778FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B52B92DB-535F-45B7-AF32-B97216A4C4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C410FF2E-E1C6-4238-94ED-3EC6389C961D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279DE3C1-7BEB-43A4-A91B-06D3A53C30A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "279EDC4E-87CC-48ED-B735-84F96DC5796E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "53AB964F-61BD-4EC5-8469-7DB371154455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "C27C5F5A-6B68-4723-809B-C482238F9647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43CFB610-77A2-436E-ADD0-C0D647AF56DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED26BFDF-0C8C-4BEF-BB2D-FA7ADB95AFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2E86BD-2358-46D5-BBB5-147168001578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6257B30-61DC-4838-92E6-D9938224BFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C661B582-E2F6-4E91-A47C-E91CCB0ECF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E60110D-1CED-47BE-8565-FE858BEFF44B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "8B061F26-EF3F-48CC-A974-5B49A622C5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "0870B801-E121-47D8-9C88-B01C7AB6ED3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F320C0-1A33-4768-9BB1-09C6554A9C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "81C28558-F40D-48B9-B98C-F30709C89AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "DCEF61F4-F4CE-4E33-A67C-17B1D0185BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "65E266D2-C1F2-4400-9E41-AEB2F116C733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9161B916-5EED-46C4-8E0C-515A0B6D2902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9689CB4-A70C-42D7-91E0-68057D9D4779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6767A7E5-7A2C-452D-A6EB-9C61B43DC39B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "119B427D-87AC-4DD8-AD13-B8CFC847A947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "57221C0B-EE09-4EB6-AE21-3C31393EB922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "74EEC8BC-A00F-4DCF-B787-5B95699DBD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9030BE8-663A-4F46-B255-0AEBFD790DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DED21A-FA34-4F6A-8ED5-A985671E5653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203F6A08-17BF-4F82-82C5-E0653C2100F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E939104D-9765-4DBF-AA1D-97EBBE515972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "93188DA2-4137-4291-9FDC-469D933C9602"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trac.osgeo.org/mapserver/ticket/2941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.positronsecurity.com/advisories/2009-000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502271/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trac.osgeo.org/mapserver/ticket/2941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.positronsecurity.com/advisories/2009-000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502271/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-31T18:24:45.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence of arbitrary files via a full pathname in the queryfile parameter, which triggers different error messages depending on whether this pathname exists."
      }, {
        "lang" : "es",
        "value" : "La función msLoadQuery  mapserv en MapServer v4.x y anteriores, v4.10.4 y v5.x anteriores v5.2.2, permite a atacantes remotos determinar la existencia de ficheros a través de un Path completo en el parámetro queryfile, lo que provoca diferentes mensajes de error dependiendo de si existe la ruta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7362D32E-07AF-4DFB-A7EE-B92A2949FCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16812C55-8E9F-4035-92E6-D2C7AF4F5B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11F257-809F-4F7C-B5B1-5D407B983DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFFE501-B4E0-4352-8C8D-44531E8A6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "426DC6E0-2DA2-4815-B08B-EE2CF20AE3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBEE70D8-0EC2-4855-81C8-9FECCD9C16BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE55464C-FD27-47BF-9941-26EE7968BF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A6111-3A73-4033-8333-4929A6A22CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4F9152-4BA9-4742-9041-9707BB4B505F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F27BB1D-165E-4414-AB9B-5BBDF4268F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9305883D-8626-448C-8B1A-074158F518DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "04D30449-7EEB-42C4-9F11-4E6EE39C18F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE53FF73-329B-4384-B636-2F4050778FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B52B92DB-535F-45B7-AF32-B97216A4C4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C410FF2E-E1C6-4238-94ED-3EC6389C961D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279DE3C1-7BEB-43A4-A91B-06D3A53C30A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "279EDC4E-87CC-48ED-B735-84F96DC5796E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "53AB964F-61BD-4EC5-8469-7DB371154455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "C27C5F5A-6B68-4723-809B-C482238F9647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43CFB610-77A2-436E-ADD0-C0D647AF56DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED26BFDF-0C8C-4BEF-BB2D-FA7ADB95AFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2E86BD-2358-46D5-BBB5-147168001578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6257B30-61DC-4838-92E6-D9938224BFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C661B582-E2F6-4E91-A47C-E91CCB0ECF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E60110D-1CED-47BE-8565-FE858BEFF44B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "8B061F26-EF3F-48CC-A974-5B49A622C5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "0870B801-E121-47D8-9C88-B01C7AB6ED3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F320C0-1A33-4768-9BB1-09C6554A9C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "81C28558-F40D-48B9-B98C-F30709C89AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "DCEF61F4-F4CE-4E33-A67C-17B1D0185BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "65E266D2-C1F2-4400-9E41-AEB2F116C733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9161B916-5EED-46C4-8E0C-515A0B6D2902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9689CB4-A70C-42D7-91E0-68057D9D4779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6767A7E5-7A2C-452D-A6EB-9C61B43DC39B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "119B427D-87AC-4DD8-AD13-B8CFC847A947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "57221C0B-EE09-4EB6-AE21-3C31393EB922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "74EEC8BC-A00F-4DCF-B787-5B95699DBD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9030BE8-663A-4F46-B255-0AEBFD790DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DED21A-FA34-4F6A-8ED5-A985671E5653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203F6A08-17BF-4F82-82C5-E0653C2100F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E939104D-9765-4DBF-AA1D-97EBBE515972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "93188DA2-4137-4291-9FDC-469D933C9602"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trac.osgeo.org/mapserver/ticket/2939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.positronsecurity.com/advisories/2009-000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502271/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trac.osgeo.org/mapserver/ticket/2939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.positronsecurity.com/advisories/2009-000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502271/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-31T18:24:45.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field."
      }, {
        "lang" : "es",
        "value" : "nss-ldapd anteriores a v0.6.8 emplea permisos de \"lectura para todos\" para el archivo /etc/nss-ldapd.conf, lo que permite a los usuario locales obtener una contraseña en texto claro para el servidor LDAP, leyendo el campo bindpw."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:nss-ldap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.6.8",
            "matchCriteriaId" : "C3B17F2C-7A87-4AFC-AA24-5D2F2B4C787F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/debian/libnss-ldapd.postinst?r1=795&r2=813",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/man/nss-ldapd.conf.5.xml?r1=805&r2=806",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520476",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://ch.tudelft.nl/~arthur/nss-ldapd/news.html#20090322",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://launchpad.net/bugs/cve/2009-1073",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34523",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1758",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/23/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/24/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/25/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/25/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34211",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/debian/libnss-ldapd.postinst?r1=795&r2=813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/man/nss-ldapd.conf.5.xml?r1=805&r2=806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://ch.tudelft.nl/~arthur/nss-ldapd/news.html#20090322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://launchpad.net/bugs/cve/2009-1073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/23/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/24/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/25/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/25/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-31T18:24:45.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a '\\0' character, which allows remote attackers to conduct buffer-overflow attacks or have unspecified other impact via a long id parameter in a query action."
      }, {
        "lang" : "es",
        "value" : "mapserv.c en mapserv en MapServer v4.x anterior a v4.10.4 y v5.x anterior a v5.2.2 no garantiza que la cadena que soporta el parámetro \"id\" finalice en un carácter '\\0', lo que permite a atacantes remotos dirigir un ataque de desbordamiento de búfer o tener un otro impacto sin especificar a través de un parámetro \"id\" largo en una acción de consulta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7362D32E-07AF-4DFB-A7EE-B92A2949FCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16812C55-8E9F-4035-92E6-D2C7AF4F5B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11F257-809F-4F7C-B5B1-5D407B983DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFFE501-B4E0-4352-8C8D-44531E8A6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "426DC6E0-2DA2-4815-B08B-EE2CF20AE3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBEE70D8-0EC2-4855-81C8-9FECCD9C16BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE55464C-FD27-47BF-9941-26EE7968BF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A6111-3A73-4033-8333-4929A6A22CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4F9152-4BA9-4742-9041-9707BB4B505F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F27BB1D-165E-4414-AB9B-5BBDF4268F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9305883D-8626-448C-8B1A-074158F518DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "04D30449-7EEB-42C4-9F11-4E6EE39C18F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE53FF73-329B-4384-B636-2F4050778FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B52B92DB-535F-45B7-AF32-B97216A4C4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C410FF2E-E1C6-4238-94ED-3EC6389C961D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279DE3C1-7BEB-43A4-A91B-06D3A53C30A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "279EDC4E-87CC-48ED-B735-84F96DC5796E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "53AB964F-61BD-4EC5-8469-7DB371154455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "C27C5F5A-6B68-4723-809B-C482238F9647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43CFB610-77A2-436E-ADD0-C0D647AF56DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED26BFDF-0C8C-4BEF-BB2D-FA7ADB95AFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2E86BD-2358-46D5-BBB5-147168001578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6257B30-61DC-4838-92E6-D9938224BFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C661B582-E2F6-4E91-A47C-E91CCB0ECF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E60110D-1CED-47BE-8565-FE858BEFF44B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "8B061F26-EF3F-48CC-A974-5B49A622C5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "0870B801-E121-47D8-9C88-B01C7AB6ED3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F320C0-1A33-4768-9BB1-09C6554A9C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "81C28558-F40D-48B9-B98C-F30709C89AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "DCEF61F4-F4CE-4E33-A67C-17B1D0185BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "65E266D2-C1F2-4400-9E41-AEB2F116C733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9161B916-5EED-46C4-8E0C-515A0B6D2902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9689CB4-A70C-42D7-91E0-68057D9D4779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6767A7E5-7A2C-452D-A6EB-9C61B43DC39B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "119B427D-87AC-4DD8-AD13-B8CFC847A947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "57221C0B-EE09-4EB6-AE21-3C31393EB922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "74EEC8BC-A00F-4DCF-B787-5B95699DBD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9030BE8-663A-4F46-B255-0AEBFD790DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DED21A-FA34-4F6A-8ED5-A985671E5653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203F6A08-17BF-4F82-82C5-E0653C2100F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E939104D-9765-4DBF-AA1D-97EBBE515972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "93188DA2-4137-4291-9FDC-469D933C9602"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.positronsecurity.com/advisories/2009-000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502271/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.positronsecurity.com/advisories/2009-000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502271/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-31T18:24:45.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 have unknown impact and remote attack vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento múltiple de búfer basado en pila en el archivo maptemplate.c en mapserv en MapServer v4.x anteriores a v4.10.4 y v5.x anteriores a v5.2.2 con impacto desconocido y vectores de ataque remoto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7362D32E-07AF-4DFB-A7EE-B92A2949FCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16812C55-8E9F-4035-92E6-D2C7AF4F5B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11F257-809F-4F7C-B5B1-5D407B983DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFFE501-B4E0-4352-8C8D-44531E8A6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "426DC6E0-2DA2-4815-B08B-EE2CF20AE3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBEE70D8-0EC2-4855-81C8-9FECCD9C16BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE55464C-FD27-47BF-9941-26EE7968BF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A6111-3A73-4033-8333-4929A6A22CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4F9152-4BA9-4742-9041-9707BB4B505F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F27BB1D-165E-4414-AB9B-5BBDF4268F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9305883D-8626-448C-8B1A-074158F518DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "04D30449-7EEB-42C4-9F11-4E6EE39C18F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE53FF73-329B-4384-B636-2F4050778FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B52B92DB-535F-45B7-AF32-B97216A4C4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C410FF2E-E1C6-4238-94ED-3EC6389C961D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279DE3C1-7BEB-43A4-A91B-06D3A53C30A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "279EDC4E-87CC-48ED-B735-84F96DC5796E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "53AB964F-61BD-4EC5-8469-7DB371154455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "C27C5F5A-6B68-4723-809B-C482238F9647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43CFB610-77A2-436E-ADD0-C0D647AF56DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED26BFDF-0C8C-4BEF-BB2D-FA7ADB95AFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2E86BD-2358-46D5-BBB5-147168001578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6257B30-61DC-4838-92E6-D9938224BFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C661B582-E2F6-4E91-A47C-E91CCB0ECF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E60110D-1CED-47BE-8565-FE858BEFF44B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "8B061F26-EF3F-48CC-A974-5B49A622C5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "0870B801-E121-47D8-9C88-B01C7AB6ED3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F320C0-1A33-4768-9BB1-09C6554A9C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "81C28558-F40D-48B9-B98C-F30709C89AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "DCEF61F4-F4CE-4E33-A67C-17B1D0185BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "65E266D2-C1F2-4400-9E41-AEB2F116C733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9161B916-5EED-46C4-8E0C-515A0B6D2902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9689CB4-A70C-42D7-91E0-68057D9D4779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6767A7E5-7A2C-452D-A6EB-9C61B43DC39B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "119B427D-87AC-4DD8-AD13-B8CFC847A947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "57221C0B-EE09-4EB6-AE21-3C31393EB922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "74EEC8BC-A00F-4DCF-B787-5B95699DBD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9030BE8-663A-4F46-B255-0AEBFD790DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DED21A-FA34-4F6A-8ED5-A985671E5653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203F6A08-17BF-4F82-82C5-E0653C2100F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E939104D-9765-4DBF-AA1D-97EBBE515972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "93188DA2-4137-4291-9FDC-469D933C9602"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trac.osgeo.org/mapserver/ticket/2944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.positronsecurity.com/advisories/2009-000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502271/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trac.osgeo.org/mapserver/ticket/2944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.positronsecurity.com/advisories/2009-000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502271/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-03-31T18:24:46.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the server in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.2 and 6.x before 6.1 has unknown impact and attack vectors related to the \"admin command line.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el servidor en IBM Tivoli Storage Manager (TSM) 5.3.x versiones anteriores a v5.3.2 y 6.x versiones anteriores a v6.1 tiene un impacto desconocido y vectores de ataque relacionados a la \"línea de comandos del administrador\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A263333E-DB86-41BE-A508-731079429E62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5F0611-DD8F-42A2-AFD7-1BCBD38BAB4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4EA95B-C812-4A27-8FB2-46F644463BF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34498",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21246076",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21375360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IC46744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0881",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21246076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21375360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IC46744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T01:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in TikiWiki (Tiki) CMS/Groupware 2.2 allows remote attackers to inject arbitrary web script or HTML via the PHP_SELF portion of a URI to (1) tiki-galleries.php, (2) tiki-list_file_gallery.php, (3) tiki-listpages.php, and (4) tiki-orphan_pages.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en TikiWiki (Tiki) CMS/Groupware v2.2 permite a atacantes remotos inyectar web script o HTML a través de la parte PHP_SELF de una URI de (1) tiki-galleries.php, (2) tiki-list_file_gallery.php, (3) tiki-listpages.php, y (4) tiki-orphan_pages.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5160514-D8C3-458A-B3A6-24CD4FB96BD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.tikiwiki.org/tiki-view_tracker_item.php?itemId=2359&trackerId=5&show=view&reloff=3&cant=1229&status=o&trackerId=5&sort_mode=created_desc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://info.tikiwiki.org/tiki-read_article.php?articleId=51",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34273",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/2.0/changelog.txt?view=markup",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501702/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34105",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34106",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34107",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34108",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://dev.tikiwiki.org/tiki-view_tracker_item.php?itemId=2359&trackerId=5&show=view&reloff=3&cant=1229&status=o&trackerId=5&sort_mode=created_desc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://info.tikiwiki.org/tiki-read_article.php?articleId=51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/2.0/changelog.txt?view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501702/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T10:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Security Pro 2008 and 2009, allows local users to gain privileges via a crafted IRP in a METHOD_NEITHER IOCTL request to \\Device\\tmactmon that overwrites memory."
      }, {
        "lang" : "es",
        "value" : "Activity Monitor Module de TrendMicro (tmactmon.sys) versión 2.52.0.1002 en Internet Pro 2008 y 2009, y Security Pro 2008 y 2009 de Trend Micro, permite a los usuarios locales alcanzar privilegios por medio de un IRP diseñado en una petición IOCTL METHOD_NEITHER a \\Device\\tmactmon que sobrescribe la memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:internet_security:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871D717F-5282-4445-B786-57910FED8FDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:internet_security:2008:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "ADC2E9E8-154C-48AF-A2C4-73FA11D56E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:internet_security:2009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C56412-5316-49A1-A2F1-1A8DEFBF3FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:internet_security:2009:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "7C7304ED-62AF-4E7D-B68C-261F6795F97A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://en.securitylab.ru/lab/PT-2009-09",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://milw0rm.com/sploits/2009-trendmicro_local_expl_0day.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502314/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34304",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://en.securitylab.ru/lab/PT-2009-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://milw0rm.com/sploits/2009-trendmicro_local_expl_0day.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502314/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0790",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-01T10:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD."
      }, {
        "lang" : "es",
        "value" : "El demonio IKE pluto de Openswan y Strongswan IPsec v2.6 anterior a v2.6.21 y v2.4 anterior a v2.4.14, y Strongswan v4.2 anterior a v4.2.14 y v2.8 anteior a v2.8.9; permite a atacantes remotos provocar una denegación de servicio (caída del demonio y reinicio) a través de (1) R_U_THERE o (2) R_U_THERE_ACK  Detección de pares muertos (Dead Peer Detection -DPD)  mensaje de Notificación IKE IPsec que provoca una referencia a puntero nulo relacionado con el estado inconsistente ISAKMP y la falta de un estado de asociacion phase2 en DPD."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339E325D-B76C-400C-B332-7CA675C4F72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90373CD-E5C7-46BE-8C5F-22D3DE12A3E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8C12F9-A14F-4BC5-A2CC-18DADE8454C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C78E4DAD-B255-4666-927F-D82AC7396FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B602806-1420-4640-AD17-A2FEFDA6A967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A203ADA7-54C9-4F37-A254-0A5378BB9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D09EEB6-386C-4A73-BC08-4243BDC49EE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE3B5F4-063F-4AE9-B589-932751182101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFD8D5D-7FB7-4B25-B1F2-7850348A6924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F75943-1327-4868-88D5-917D06BCF5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4BE9083-EF34-4B1A-A139-E779E9704F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5518A917-D5D1-4985-BF71-B1A34BD3D5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778D7442-F54A-47DF-B87B-3CFA3CF08799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4B1F28-B3B8-4E31-8E4E-25F5A29F3AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16984E6E-7CA8-4DC3-B800-FFE007617FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C85F0BE-7E89-4B79-A036-9238785BE705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFF4780-2F92-4DF3-878A-C7E2BD57E39C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C794994-9367-4BBB-8940-BBB44B7C1C5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082272D3-0FE4-4959-978A-FFF795B52CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFEF9B3-C7F7-4588-A174-FAFD39C04116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97027262-849C-4DE9-90C9-0D9FBBC9F96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8658539D-27D8-47EE-9468-A6B625E6D45F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89ACA351-D10F-4D1A-95B0-4B2E329F1E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4D6E89-5313-4016-8A7E-036579330DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A8E226-FCEC-4545-A628-24F5A8103BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B944D80-A8B9-4034-A95B-BA92ADC8D4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5267BCC-A51C-4F3B-840C-49EF9C2A15F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CDCDB4B-2DF5-4394-B33A-08A4B6604D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66206A52-373C-4DBB-A3D7-2A7569C0181E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F654D3C4-D3A3-41E1-A0D8-3A384319AE08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F9E10-000D-4F3B-BEA6-DEE87405B89B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F37DFE8-2996-4904-B733-7BAECA95CB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38209DC9-3BE6-49EF-8BA1-6E2BC5D24FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155EB8F5-7C3C-4293-91EE-62DA561DA54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7841F42-1226-43C4-A007-88847925D872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77930F86-13FF-4787-A39F-2D00110AFBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B1ADD64-2503-4EED-9F6F-E425A3406123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3067BE9-4314-42BD-8131-89C4899F7D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00CA6E5-1F63-4D59-BA72-0F8697671718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35A2049-8502-41F2-894E-E39AEBEB6816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD82E956-8C8E-4B38-9E82-4AA9AEFE6891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0F0EA4-A0DF-48CC-9B42-465A36945503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78325087-599F-448B-8C47-570914FF6C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059CFA5C-B262-47AF-94A6-8E74AFB19204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12F25627-235B-4312-80A4-4E36DE0E72A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E70B88-6348-42BB-AE96-46BDB1F3C6FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A9DF25-48E8-4D52-A267-1BE0437E9000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C986533F-E320-46FA-A9F7-DAFDB1A0628A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C77DED4-2696-4172-92B7-43034E61F845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EDCCFDA-99A8-4590-99F1-95F3A5AD70B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1BA7D-B603-49D4-9080-4A9FEC056A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8EB86B-2DD9-4C4B-9C9A-E88B2C458C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207B98DB-5962-4F62-AF5B-D48EF0C0E2A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB65639-AE3A-4984-93F9-2A8100DCEE6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8921D08-FBA3-4C0A-8944-362909C5EB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FBD5312-E44F-4996-AA29-AFED53A90E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B24C96-47DF-4FA2-8DF4-8241F4964F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5067B83-AB9E-4819-B5A2-B14A96EB54C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773B9BB2-0F65-4604-AF2C-8AC396DDC094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA892169-0079-48D9-AEF5-641748CE1BF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.strongswan.org/CHANGES4.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34472",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34483",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34494",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34546",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1759",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1760",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openswan.org/CVE-2009-0790/CVE-2009-0790.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0402.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502270/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34296",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021949",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0886",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49523",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11171",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://download.strongswan.org/CHANGES4.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openswan.org/CVE-2009-0790/CVE-2009-0790.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0402.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502270/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T10:30:00.297",
      "lastModified" : "2023-11-07T02:03:51.273",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-4475.  Reason: This candidate is a duplicate of CVE-2007-4475.  Notes: All CVE users should reference CVE-2007-4475 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T10:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in futomi's CGI Cafe Access Analyzer CGI Professional Version 4.11.5 and earlier allows remote attackers to gain administrative privileges via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en futomi's CGI Cafe Access Analyzer CGI Professional Version v4.11.5 y anteriroes, permite a atacantes remotos obtener privilegios de administrador a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9",
            "matchCriteriaId" : "8CBEE32F-8BF8-4140-B593-CAA1FE0D7C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10",
            "matchCriteriaId" : "970A9B75-0F76-4169-8BFB-CFB01066B336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10.1",
            "matchCriteriaId" : "91DAA5BF-E021-4574-B405-E790D68595B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10.2",
            "matchCriteriaId" : "E30ECDFB-E285-4EC3-A6E6-039E7E631280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10.3",
            "matchCriteriaId" : "20FECDCD-9DEC-4A35-B064-0CAE63A40C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10.4",
            "matchCriteriaId" : "BB71FBCF-8684-4223-A569-266BB22B8775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10.5",
            "matchCriteriaId" : "3A315ABE-B665-41EC-A033-2CAAF6A2ACAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.0",
            "matchCriteriaId" : "042989AC-85A8-477A-90B0-05F04315BA96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.1",
            "matchCriteriaId" : "AB1D34F7-4456-43F1-87DF-C02D6AEBC955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.2",
            "matchCriteriaId" : "C7E17260-2D0C-4A77-AB25-69648BD97839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.3",
            "matchCriteriaId" : "341B90EC-4E75-448C-9FC3-C2132A00B31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.4",
            "matchCriteriaId" : "C8BF7F88-1C96-49F2-B502-15FFD3804E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*",
            "versionEndIncluding" : "4.11.5",
            "matchCriteriaId" : "34238598-9C96-4FEF-B9EF-EA630663C6F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN63511247/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34516",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.futomi.com/library/info/2009/20090331.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN63511247/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.futomi.com/library/info/2009/20090331.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T10:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the dircmp script in Sun Solaris 8 through 10, and OpenSolaris snv_01 through snv_111, allows local users to overwrite arbitrary files, probably involving a symlink attack on temporary files."
      }, {
        "lang" : "es",
        "value" : "Condición Race en la secuencia de comandos en  Sun Solaris v8 hasta v10, y OpenSolaris snv_01 hasta snv_111, permite a los usuario locales sobrescribir arbitrariamente archivos, probablemente involucra un ataque de enlace simbólico en archivos temporales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DBDFD8C-371E-42D2-9635-D8CDD1775984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34558",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34813",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-138897-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253468-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-140.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34316",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1105",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-138897-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253468-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-140.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T10:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in auth2db 0.2.5, and possibly other versions before 0.2.7, uses the addslashes function instead of the mysql_real_escape_string function, which allows remote attackers to conduct SQL injection attacks using multibyte character encodings."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en auth2db v0.2.5 y posiblemente otras versiones anteriores a la v0.2.7, emplea la función addslashes en vez de mysql_real_escape_string, lo que permite a atacantes remotos llevar a cabo ataques de inyección SQL usando codificaciones de caracteres multibyte."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth2db:auth2db:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADBE959-5BD2-4F1C-B661-B7CFFFB7AA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth2db:auth2db:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75A90F6-62CF-41C3-A8ED-D9B1F2B0E8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth2db:auth2db:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C892EC6A-A4BB-4985-AD36-1B3109649130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth2db:auth2db:0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F874A8E-890E-43E3-A2B1-6405541D9960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth2db:auth2db:0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B108BC-10AE-486A-A609-2E96DB094557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth2db:auth2db:0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96EE7BE6-882D-4B2A-AB7B-4C3C9F79A836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth2db:auth2db:0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B5F172-9E20-49E8-A337-85C46F85CBDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth2db:auth2db:0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576B8177-220D-4D9B-A7B9-F6972751D0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth2db:auth2db:0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "743F3844-D07B-4031-BC79-9723FB1EE7C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth2db:auth2db:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9364AFFB-1718-4C7B-A2F0-826883E53D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth2db:auth2db:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67ACADB2-A81D-4617-9039-6DD7C5DC4B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth2db:auth2db:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E6DEC0-36A5-4A4B-BD55-11538713EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth2db:auth2db:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFCB393B-EFAD-4C01-B43B-738E73B5842F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth2db:auth2db:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85462ABB-BCBB-4528-962A-FB4CF44D961A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth2db:auth2db:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70D14ACC-ECEE-4CB7-B7E8-D4565DD46D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth2db:auth2db:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1842BC-FF1E-4AEC-8B48-B15FF888CAFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auth2dbauth2db:0.1.1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50EB40E3-1A47-4A0E-BF48-E33D0D64F49B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521823",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34488",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.auth2db.com.ar/?title=CHANGELOG",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.auth2db.com.ar/?title=CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T10:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script tag with a long defer attribute."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Navegador Web Amaya W3C v11.1, permite a atacantes remotos ejecutar código de su elección a través de una etiqueta de secuencias de comandos con un atributo defer largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3:amaya:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82185BDB-DB66-4C49-9F4C-E9E88467443A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34531",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34295",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T10:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cadena de formato en el disector PROFINET/DCP (PN-DCP) en Wireshark versión 1.0.6 y anteriores, permite a los atacantes remotos ejecutar código arbitrario por medio de un paquete PN-DCP con especificadores de cadena de formato en el nombre station. NOTA: algunos de estos datos fueron obtenidos de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.5",
            "matchCriteriaId" : "9FDDCBF7-AD49-4A8B-AEE8-27CF79A2B2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8ED0A8C-174C-4889-9B00-51B1E720B575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9053B950-143E-4941-9C58-A57D9F1FF78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD279A0-5BA7-4D86-B975-2E76B4B2D85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA052598-2E72-4568-B783-8B01382736DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8E63FC-A3AA-455E-8AA7-E3577468F022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B432986-F5AE-4506-B584-3B4E943A9C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60178790-62CC-41A9-8B5A-78CF49069E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41535173-00D3-4E52-9441-D7ED44BE9B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3017F8E8-F28D-46E0-A256-0121BAD588A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589FBD3D-FFE4-4BB3-B5F9-7FF949212AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3283D8D0-0714-48CC-94C4-B5FA6C913A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA01FEEE-E5D1-4C19-B25E-1039FA72555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F90C98-DF9D-49F0-A026-C20C7CA0A034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4F19A6-98D5-4B6A-8AF0-D88561D50296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4D8B98-A542-4269-90C1-14FFBE9F4A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A353A2B8-A801-44C6-AFEF-19982E33975C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7FCA21-A695-46EA-A669-DF3FA3F7B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87BA063-BF1D-4103-973A-6E490A1CA4EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D8CE9A-4CE0-4DA8-9EBA-3B7CEBCDFEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090B987C-9880-4221-BC4C-8D53A8801649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06828062-5F31-4532-9E24-34F29CE30218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738F4F0-41C6-48CF-8233-C94D79DCA807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E88C1647-8B05-421E-AA1F-25F9B248D761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E7F73-0E2A-442C-9B76-679A2AD03052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF374E8-36A3-43AA-B86C-092F5B244841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C422E5-3252-48C2-B4FF-E32AA5463D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C43A78-E578-4B1C-8E33-24529E973E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1074B30-F2E6-47CD-8491-29163811E07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB52B779-7A2D-43E0-9F12-C65053002EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A85B028-7384-403A-817C-B5001F02A8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801B1795-3DC4-4BE3-A693-37B6BD116B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17808311-AC2A-428A-BB8B-B08549C5DAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978C483C-A6F7-456F-9488-833D520D4A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB94CE6-03D3-43C3-B765-AC36961CD83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FADA30-FD98-42F3-80F1-E8794C77AC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34542",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34778",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34970",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35133",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35224",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35464",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1100.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502745/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34291",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-02.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1100.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502745/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T10:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header."
      }, {
        "lang" : "es",
        "value" : "Blue Coat ProxySG, cuando el modo de interceptación transparente está activado, usa la cabecera HTTP Host para determinar el \"endpoint\" (punto de finalización) remoto, lo que permite a atacantes remotos evitar los controles de acceso por Flash, Java, Silverlight y probablemente otras tecnologías, y posiblemente comunicarse con sitios de la intranet restringidos, a través de una página web manipulada que provoca que el cliente envíe peticiones HTTP con una cabecera Host modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:proxysg_va-10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52A8FDA3-E3E4-407D-9FB3-091A59EA50D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:proxysg_va-15:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124C54BF-B511-47FF-96A4-7B2DCDDDA2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:proxysg_va-20:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95C5F84-3FDE-441A-9DF3-CAAEFBFF9A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecoat:proxysg_va-5:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C59FA09-5E58-4741-B591-FA71C5E95AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6CFEC9-0F8F-4CD4-ABD1-E6533F910F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg210-10:-:-:acceleration:*:*:*:*:*",
            "matchCriteriaId" : "9E11536F-7CFA-41C8-9826-945B6D3606A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg210-10:-:-:full_proxy:*:*:*:*:*",
            "matchCriteriaId" : "C162E145-9C08-4763-A5E4-0D383B18380A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg210-25:-:-:acceleration:*:*:*:*:*",
            "matchCriteriaId" : "3E2D3EE0-8C28-4338-BB55-3942868AEBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg210-25:-:-:full_proxy:*:*:*:*:*",
            "matchCriteriaId" : "2A8518E8-575C-42E4-844E-479448E0358A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg210-5:-:-:acceleration:*:*:*:*:*",
            "matchCriteriaId" : "650EF456-4DF5-42B4-BEC5-76F351461DAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg210-5:-:-:full_proxy:*:*:*:*:*",
            "matchCriteriaId" : "41104737-2E55-47DE-B29F-F88B07956601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg510-10:-:-:acceleration:*:*:*:*:*",
            "matchCriteriaId" : "64AC1648-94E7-4C2F-8D28-906DD3C9E9C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg510-10:-:-:full_proxy:*:*:*:*:*",
            "matchCriteriaId" : "B3ABD5B1-3CD8-4361-9933-A99C5BCAEC53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg510-20:-:-:acceleration:*:*:*:*:*",
            "matchCriteriaId" : "A63F6BE1-3705-41F8-83F2-14262C1A8513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg510-20:-:-:full_proxy:*:*:*:*:*",
            "matchCriteriaId" : "33C50C6D-42FD-47E2-811D-69673144601B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg510-25:-:-:acceleration:*:*:*:*:*",
            "matchCriteriaId" : "6F61A3FE-A7A2-42B8-BE15-A5904F68C2EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg510-25:-:-:full_proxy:*:*:*:*:*",
            "matchCriteriaId" : "053096B7-C691-430B-8EAF-FF8DF0ED3626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg510-5:-:-:full_proxy:*:*:*:*:*",
            "matchCriteriaId" : "3CC9C212-03B8-4D1D-8E66-1CAE9066D3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg810-10:-:-:acceleration:*:*:*:*:*",
            "matchCriteriaId" : "844E3782-018D-4CBB-B4E1-B60D713851D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg810-10:-:-:full_proxy:*:*:*:*:*",
            "matchCriteriaId" : "3711A175-0F97-4B8D-991B-EE05C6927D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg810-20:-:-:acceleration:*:*:*:*:*",
            "matchCriteriaId" : "25BA7C9D-3E26-4F1B-9C8A-DF864D3F8F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg810-20:-:-:full_proxy:*:*:*:*:*",
            "matchCriteriaId" : "DFC4B7BB-804A-4628-9829-369A37BB7C33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg810-25:-:-:acceleration:*:*:*:*:*",
            "matchCriteriaId" : "147F05C5-8148-4448-9A27-6A8093E4D501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg810-25:-:-:full_proxy:*:*:*:*:*",
            "matchCriteriaId" : "DB590391-1E89-4585-95B7-C77C3FA127C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg810-5:-:-:full_proxy:*:*:*:*:*",
            "matchCriteriaId" : "066A03FA-CEDF-4C8A-A445-521C9E6E954E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg9000-10:-:-:acceleration:*:*:*:*:*",
            "matchCriteriaId" : "E9858A0D-3368-407A-8438-14EB8BA0F096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg9000-10:-:-:full_proxy:*:*:*:*:*",
            "matchCriteriaId" : "EAF352C1-3CA1-4CE4-9067-9819BA327F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg9000-20:-:-:acceleration:*:*:*:*:*",
            "matchCriteriaId" : "A3EB21AA-B393-42F6-8945-E8EF1EF81C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg9000-20:-:-:full_proxy:*:*:*:*:*",
            "matchCriteriaId" : "A2A29D44-8A16-4F5A-9907-85D1F0EC13CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg9000-5:-:-:acceleration:*:*:*:*:*",
            "matchCriteriaId" : "2EDF8810-4C81-49E8-B4AA-2B87B5D6C953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bluecoat:proxysg_sg9000-5:-:-:full_proxy:*:*:*:*:*",
            "matchCriteriaId" : "A5259AF1-EBB5-4083-BF78-2DB7C075E298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id?1021781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hypersonic.bluecoat.com/support/securityadvisories/ProxySG_in_transparent_deployments",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://hypersonic.bluecoat.com/support/securityadvisories/ProxySG_in_transparent_deployments",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T10:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple insecure method vulnerabilities in PRECIS~2.DLL in the PrecisionID Datamatrix ActiveX control (DMATRIXLib.Datamatrix) allow remote attackers to overwrite arbitrary files via the (1) SaveBarCode and (2) SaveEnhWMF methods."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de método inseguro en PRECIS~2.DLL en el control ActiveX PrecisionID Datamatrix (DMATRIXLib.Datamatrix) permite a atacantes remotos sobreescribir ficheros de su elección mediante los métodos (1) SaveBarCode y (2) SaveEnhWMF."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:C/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:precisionid:data_matrix_barcode_activex_control:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220327C-9153-43D6-A21F-27942DE23BE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dsecrg.com/pages/vul/DSECRG-09-030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502319/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dsecrg.com/pages/vul/DSECRG-09-030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502319/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T10:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 3.2 before 3.2.3, 3.3 before 3.3.4, and earlier versions allows remote attackers to hijack the authentication of arbitrary users for requests that use attachment editing."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en attachment.cgi de Bugzilla v3.2 anterior a v3.2.3, v3.3 anterior a v3.3.4 y versiones anteriores, permiten a atacantes remotos secuestrar la autenticación de usuarios aleatorios de solicitudes que utilizan la edición de adjuntos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F248EA4D-1A39-40FD-8D3C-9701D36FD6B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "170EB43B-9488-4E25-9401-B84DE838247B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B1ED7682-A315-4F92-9F9F-38290BCC058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B5A433-526F-436E-9FCD-B71E661180FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EDC5BC-AD4B-4E67-B79C-F44292307AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB4EF1D-D4D0-40DA-BE78-24FD48030EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2962084-F778-4574-8105-8C5A260CCBD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF288A74-070E-4EB4-BB92-7D4D41635DD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8B31F0-6FCC-4258-865B-B65ECBFAF252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34545",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34547",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bugzilla.org/security/3.2.2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0887",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=476603",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00188.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00191.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bugzilla.org/security/3.2.2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=476603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00188.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00191.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T10:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information."
      }, {
        "lang" : "es",
        "value" : "GNU Screen v4.0.3, crea el archivo temporal /tmp/screen-exchange con permisos de lectura, lo que permite a usuarios locales obtener información sensible."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:screen:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF73BAA-7734-46E6-9F9C-0A5AF3E5E365"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://savannah.gnu.org/bugs/?25296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/25/7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/screen/+bug/315993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=492104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://savannah.gnu.org/bugs/?25296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/25/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/screen/+bug/315993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=492104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat does not consider this to be a security issue.  Affected file is supposed to be used to exchange information between local system users, therefore open permissions are intentional.",
        "lastModified" : "2009-04-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T10:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on the /tmp/screen-exchange temporary file."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en GNU screen v4.0.3, permite a usuarios locales crear y sobreescribir archivos de su elección a través de un ataque de enlace simbólico al archivo temporal /tmp/screen-exchange."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnu_screen:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FAB4AC-93A3-4733-8DE3-0CD96D25D8FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://savannah.gnu.org/bugs/?25296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/25/7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/screen/+bug/315993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=492104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://savannah.gnu.org/bugs/?25296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/03/25/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/screen/+bug/315993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=492104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat does not consider this to be a security issue.  The checks implemented by screen to protect against race condition attacks on /tmp/screen-exchange file provide sufficient protection for this rarely-used buffer exchange feature.  For more details, see https://bugzilla.redhat.com/show_bug.cgi?id=492104",
        "lastModified" : "2009-04-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T18:00:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA); as used in gunzip, gzip, pack, pcat, and unpack 7.x before 7.0.1701.48, 8.x before 8.0.1969.62, and 9.x before 9.0.3790.2076; allow remote attackers to execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en (1) unlzh.c y (2) unpack.c en las librerías gzip en Microsoft Windows Server 2008, Windows Services para UNIX 3.0 y 3.5, y el subsistema para UNIX-based Applications (SUA); como lo utilizado en gunzip, gzip, pack, pcat, y unpack 7.x versiones anteriores a 7.0.1701.48, 8.x versiones anteriores a 8.0.1969.62, y 9.x versiones anteriores a 9.0.3790.2076; permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:subsystem_for_unix-based_applications:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57DB32FA-500C-4B3F-945E-ED9293F4C214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_services_for_unix:3.0:-:std:*:*:*:*:*",
            "matchCriteriaId" : "797D9EB7-A39A-4A36-B7C0-789BD2B2E031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_services_for_unix:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD55F3F-C961-4E84-AC69-188306ADDE4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "8FF0D88B-821D-4E45-A2EC-5279B9190356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:ultimate:*:*:*:*:*",
            "matchCriteriaId" : "F0257B7A-A8D1-4AC9-98C8-324B5B810877"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34428",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.microsoft.com/kb/953602",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0849",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1021937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.microsoft.com/kb/953602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T18:00:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers to cause a denial of service (stack corruption and application termination) via a crafted EMF file that triggers an integer overflow, as demonstrated by voltage-exploit.emf, aka the \"Microsoft GdiPlus EMF GpFont.SetData integer overflow.\""
      }, {
        "lang" : "es",
        "value" : "Error Off-by-one en la función GpFont::SetData en gdiplus.dll en Microsoft GDI+ en Windows XP permite a atacantes remotos provocar una denegación de servicio (corrupción de pila y terminación de la aplicación) a través de un fichero EMF manipulado que dispara un desbordamiento de entero, como lo demostrado por voltage-exploit.emf, también conocido como el \"desbordamiento de entero Microsoft GdiPlus EMF GpFont.SetData\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:gdi\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C061A827-8040-4224-8E3A-C14953012763"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47EBFCC-1828-45AB-BC6D-FB980929A81A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bl4cksecurity.blogspot.com/2009/03/microsoft-gdiplus-emf-gpfontsetdata.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/03/26/new-emf-gdiplus-dll-crash-not-exploitable-for-code-execution.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34250",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0832",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49438",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://bl4cksecurity.blogspot.com/2009/03/microsoft-gdiplus-emf-gpfontsetdata.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/03/26/new-emf-gdiplus-dll-crash-not-exploitable-for-code-execution.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T18:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allow remote attackers to inject arbitrary web script or HTML via (1) the fmt-out parameter to login.wcap or (2) the date parameter to command.shtml."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Sun Calendar Express Web Server en Sun ONE Calendar Server 6.0 y Sun Java System Calendar Server 6 2004Q2 hasta 6.3-7.01 permite a atacantes remotos inyectar web script o HTML de su elección a través de (1) el parámetro \"fmt-out\" de login.wcap o (2) el parámetro \"date\" de command.shtml."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_calendar_server:6:-:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1C2387AF-026B-423B-A396-55034DC984A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_calendar_server:6.3:-:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E54204FF-DAA2-4D25-91CA-78DC271C35BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_calendar_server:6.0:-:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E04C0F4E-6825-4EED-994F-4FACCABD4670"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_calendar_server:6:-:x86:*:*:*:*:*",
            "matchCriteriaId" : "65EA6495-81BA-4124-82AB-C81AB94E2F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_calendar_server:6.3:-:x86:*:*:*:*:*",
            "matchCriteriaId" : "382FDFCA-95D8-4A57-8114-B7B3C939DD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_calendar_server:6.0:-:x86:*:*:*:*:*",
            "matchCriteriaId" : "DF8C61E6-7EF3-4069-8335-1D11B86B31D2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_calendar_server:6:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "4E60435B-947E-4579-B4D5-3BB3A858D8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_calendar_server:6.3:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "D377C48F-4513-467B-8514-5F7F27071A41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_calendar_server:6.0:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "1B17A5EA-6081-4229-B792-5EE18458BB9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020321.1-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/content/sun-calendar-express",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502320/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020321.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/content/sun-calendar-express",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502320/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T18:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter."
      }, {
        "lang" : "es",
        "value" : "Sun Calendar Express Web Server en Sun ONE Calendar Server v6.0 y Sun Java System Calendar Server 6 2004Q2 hasta 6.3-7.01 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de múltiples peticiones de la URI por defecto con caracteres alfabéticos en el parámetro \"tzid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_calendar_server:6:-:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1C2387AF-026B-423B-A396-55034DC984A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_calendar_server:6.3:-:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E54204FF-DAA2-4D25-91CA-78DC271C35BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_calendar_server:6.0:-:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E04C0F4E-6825-4EED-994F-4FACCABD4670"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_calendar_server:6:-:x86:*:*:*:*:*",
            "matchCriteriaId" : "65EA6495-81BA-4124-82AB-C81AB94E2F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_calendar_server:6.3:-:x86:*:*:*:*:*",
            "matchCriteriaId" : "382FDFCA-95D8-4A57-8114-B7B3C939DD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_calendar_server:6.0:-:x86:*:*:*:*:*",
            "matchCriteriaId" : "DF8C61E6-7EF3-4069-8335-1D11B86B31D2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_calendar_server:6:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "4E60435B-947E-4579-B4D5-3BB3A858D8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_calendar_server:6.3:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "D377C48F-4513-467B-8514-5F7F27071A41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_calendar_server:6.0:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "1B17A5EA-6081-4229-B792-5EE18458BB9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255008-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/content/sun-calendar-express",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502320/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34150",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255008-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/content/sun-calendar-express",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502320/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-01T18:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (ASA) 5520 with software 7.2(4)30 and earlier 7.2 versions including 7.2(2)22, and 8.0(4)28 and earlier 8.0 versions, when clientless mode is enabled, allows remote attackers to inject arbitrary web script or HTML via the Host HTTP header."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en archivo +webvpn+/index.html en el WebVPN en los Adaptive Security Appliances (ASA) 5520 de Cisco con el software versiones 7.2(4)30 y anteriores a 7.2 incluyendo 7.2(2)22, y versiones 8.0(4)28 y anteriores a 8.0, cuando el modo clientless está habilitado, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del encabezado HTTP Host."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance:5520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A2E92E9-6319-47BF-92B3-41D978CEE6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:7.2\\(2\\)22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92103922-950F-406F-82D7-B637718F7C6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0478.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=17950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502313/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34307",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0478.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=17950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502313/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-02T15:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in webEdition 6.0.0.4 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the WE_LANGUAGE parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php en webEdition v6.0.0.4 y anteriores, cuando register_globals esta activado y magic_quotes desactivado permite a atacantes remotos incluir y ejecutar ficheros de modo arbitrario a través de ..(punto punto) en el parámetro WE_LANGUAGE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webedition:webedition:6.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19372166-15FF-4004-9A39-F97C13BC18F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34518",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502315/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34323",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502315/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-02T15:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "aspWebCalendar Free Edition stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for calendar/calendar.mdb."
      }, {
        "lang" : "es",
        "value" : "aspWebCalendar Free Edition almacena información sensible bajo la raíz web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar la base de datos que contiene las credenciales de usuario a través de una petición directa para calendar/calendar.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fullrevolution:aspwebcalendar:-:-:free:*:*:*:*:*",
            "matchCriteriaId" : "76DB632B-5E1D-4D63-AE97-E911ED9F5CEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/502311/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502311/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-02T15:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in vsp-core/pub/themes/bismarck/gamestat.php in vsp stats processor 0.45 allows remote attackers to execute arbitrary SQL commands via the gameID parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en vsp-core/pub/themes/bismarck/gamestat.php en vsp stats processor  v0.45 permite a usuarios remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"game ID\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scivox:vsp_stats_processor:0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD2E56E-4262-4078-B48C-573BAD6248DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-02T15:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Turnkey Ebook Store 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Turnkey Ebook Store v1.1 permite a usuarios remotos inyectar de forma arbitraria secuencias de comandos web o HTML a través del parámetro \"keywords\" en el momento de realizar una búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:platinumprofitzone:turnkey_ebook_store:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B7F09CB-20AD-4FDE-B333-20D3433B44A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstorm.linuxsecurity.com/0903-exploits/turnkeyebook-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34533",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0903-exploits/turnkeyebook-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-02T15:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter."
      }, {
        "lang" : "es",
        "value" : "core/admin/delete.php en Podcast Generator v1.1 y anteriores no maneja adecuadamente las restricciones de acceso de funciones administrativas, lo que permite a atacantes remotos borrar ficheros de forma arbitraria a través del parámetro \"file\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "CB555065-7FFA-45D8-9814-02EE8B45F05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E1E9E4-8EC1-44E3-94FF-A3F7FC341756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DEDE5-E7B4-44A1-86F0-D71F516AB7D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6378A248-F8CE-4A6A-AC72-9DEAFE2AE6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF6FD0A-A18C-495A-B9E7-EE188EA1A58A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49690E2C-AC1E-40BE-BE91-FAB522A3EA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB0AED7-B499-440E-A4C1-3589512AFAB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765992EE-077D-4B67-80A3-5E5B664A4920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5230DAE5-0774-43A7-94ED-A9BDB2AD4D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F571A8D8-5D07-4D6E-8282-75DE3F75E12C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A3E9072-8FCE-4E5D-97C4-E7B60DF36207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.96.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D543A430-EFFA-470D-80F3-30016852E4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF53E2AD-1E11-4C55-8CFF-D580BFA63216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:1.0:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "CA26821E-665A-4650-9694-2F83A00D31E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86110300-D592-4079-9561-6CCD9C8CFD94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC6F118-1C43-4C82-8DCE-BDFD78D6CB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B718D31-5746-43A9-AC72-79EF26716A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41207558-39B2-4B9C-B684-C21C04BB16E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4080859E-FABD-4668-BF6A-32905B3EC49A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34555",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34317",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-02T15:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NOTE: this issue has been disputed by the vendor.  Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI Web Service allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) Authorization or (2) Referer HTTP header to TCP port 18624.  NOTE: the vendor has disputed this issue, stating \"Check Point Security Alert Team has analyzed this report. We've tried to reproduce the attack on all VPN-1 versions from NG FP2 and above with and without HFAs. The issue was not reproduced. We have conducted a thorough analysis of the relevant code and verified that we are secure against this attack. We consider this attack to pose no risk to Check Point customers.\"  In addition, the original researcher, whose reliability is unknown as of 20090407, also states that the issue \"was discovered during a pen-test where the client would not allow further analysis."
      }, {
        "lang" : "es",
        "value" : "** DISPUTADA ** NOTA: este problema ha sido disputado por el proveedor. desbordamiento de buffer en PKI Web Service en Check Point Firewall-1 PKI Web Service permite a atacantes remotos causar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario a través de una cabecera larga (1) Authorization o (2) Referer HTTP en el puerto TCP 18624. NOTA: el proveedor ha disputado este problema diciendo que 'el equipo de alertas de seguridad de Check Point ha analizado este informe. hemos intentado reproducir el ataque sobre todas las versiones de VPN-1 desde NG FP2 y más arriba con y sin HFAs. El problema no fue reproducido. Hemos realizado un análisis completo del código relevante y verificado que estamos seguros contra este ataque. Consideramos que este ataque no supone ningún riesgo para los clientes de Check Point.' Además, el investigador original, cuyo nivel de confianza es desconocido desde el 7 de abril del 2009, también dice que el problema 'fue descubierto durante una prueba de penetración (pen-test) donde el cliente no permitió más análisis.'"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:firewall-1_pki_web_service:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15EEECE9-5B04-4591-9908-D1A6D0A2CED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0463.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502256/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34286",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021948",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0463.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502256/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Check Point",
        "comment" : "Check Point Security Alert Team has analyzed this report. We’ve tried to reproduce the attack on all VPN-1 versions from NG FP2 and above with and without HFAs. \nThe issue was not reproduced. We have conducted a thorough analysis of the relevant code and verified that we are secure against this attack.\nWe consider this attack to pose no risk to Check Point customers.\n \nCheck Point Security Alert Team",
        "lastModified" : "2009-04-07T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-02T15:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject arbitrary web script or HTML via the username field (user_name parameter)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en register.php en Arcadwy Arcade Script CMS permite a atacantes remotos inyectar de forma arbitraria secuencia de comandos web o HTML a través del campo \"username\" (parámetro user_name)"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcadwy:arcadwy_arcade_script_cms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DFEB380-1EBC-4212-A981-F7405DAD33C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34506",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-02T15:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Arcadwy Arcade Script allows remote attackers to execute arbitrary SQL commands via the user cookie parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la secuencia de comandos Arcadwy Arcade permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro de cookie \"user\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcadwy:arcadwy_arcade_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0E0401-3E9D-47EB-A9FD-8B99055C422D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34506",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://z0rlu.blogspot.com/2009/03/arcadwy-arcade-script-auth-bypass.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://z0rlu.blogspot.com/2009/03/arcadwy-arcade-script-auth-bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-02T15:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated administrators to inject arbitrary PHP code into config.php via the recent parameter in a config change action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático en index.php en Podcast Generator v1.1 y anteriores permite a administradores remotos autenticados inyectar codigo PHP a su elección en config.php a través de el parámetro \"recent\" en una acción de cambio de configuración."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "CB555065-7FFA-45D8-9814-02EE8B45F05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E1E9E4-8EC1-44E3-94FF-A3F7FC341756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51DEDE5-E7B4-44A1-86F0-D71F516AB7D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6378A248-F8CE-4A6A-AC72-9DEAFE2AE6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF6FD0A-A18C-495A-B9E7-EE188EA1A58A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49690E2C-AC1E-40BE-BE91-FAB522A3EA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB0AED7-B499-440E-A4C1-3589512AFAB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765992EE-077D-4B67-80A3-5E5B664A4920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5230DAE5-0774-43A7-94ED-A9BDB2AD4D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F571A8D8-5D07-4D6E-8282-75DE3F75E12C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A3E9072-8FCE-4E5D-97C4-E7B60DF36207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:0.96.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D543A430-EFFA-470D-80F3-30016852E4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF53E2AD-1E11-4C55-8CFF-D580BFA63216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:1.0:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "CA26821E-665A-4650-9694-2F83A00D31E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86110300-D592-4079-9561-6CCD9C8CFD94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC6F118-1C43-4C82-8DCE-BDFD78D6CB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B718D31-5746-43A9-AC72-79EF26716A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41207558-39B2-4B9C-B684-C21C04BB16E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4080859E-FABD-4668-BF6A-32905B3EC49A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-02T17:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the eClient in IBM DB2 Content Manager 8.4.1 before 8.4.1.1 has unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en eClient en IBM DB2 Content Manager v8.4.1 anterior a la v8.4.1.1 tiene un impacto y vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_content_manager:8.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B858AD4F-749C-495E-A19A-7863761BDD09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34544",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27015162",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IO08969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27015162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IO08969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-02T17:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of service (memory corruption) via an XML document composed of a long series of start-tags with no corresponding end-tags. NOTE: it was later reported that 3.0.10 and earlier are also affected."
      }, {
        "lang" : "es",
        "value" : "Firefox de Mozilla versiones 3.0.8 y anteriores a 3.0.x, permite a los atacantes remotos causar una denegación de servicio (corrupción de memoria) por medio de un documento XML compuesto por una serie larga de etiquetas de inicio sin las etiquetas finales correspondientes. NOTA: más tarde se informó que la versión 3.0.10 y anteriores también están afectadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://milw0rm.com/sploits/2009-Firefox-XUL-0day-PoC.rar",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3216/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34522",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=485941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://milw0rm.com/sploits/2009-Firefox-XUL-0day-PoC.rar",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3216/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=485941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "https://bugzilla.mozilla.org/show_bug.cgi?id=485941\n\nRed Hat does not consider a user-assisted crash of a client application such as Firefox to be a security issue.\n",
        "lastModified" : "2009-04-27T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-02T17:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari 3.2.2 and 4 Beta on Windows allows remote attackers to cause a denial of service (application crash) via an XML document containing many nested A elements."
      }, {
        "lang" : "es",
        "value" : "Apple Safari v3.2.2 y v4 Beta en Windows permite a atacantes remotos producir una denegación de servicio (caída de aplicación) a través de un documento XML que contiene elementos \"A\" anidados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "04B8652D-BE06-49CB-A636-8B53B2DF9168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4:beta:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC9E7532-DEF2-4537-AB1E-B4D5D0C9C51C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-02T17:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera 9.64 allows remote attackers to cause a denial of service (application crash) via an XML document containing a long series of start-tags with no corresponding end-tags.  NOTE: it was later reported that 9.52 is also affected."
      }, {
        "lang" : "es",
        "value" : "Opera versión 9.64, permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) por medio de un documento XML que contiene una serie larga de etiquetas de inicio sin las etiquetas finales correspondientes. NOTA: más tarde se informó que la versión 9.52 también está afectada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B7AA6F-9918-4356-894C-72833B791201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14200693-2B22-42BF-9917-FF4B541D9188"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3216/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34298",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://websecurity.com.ua/3216/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-02T17:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to overwrite kernel memory and gain privileges by attaching an HFS+ disk image and performing certain steps involving HFS_GET_BOOT_INFO fcntl calls."
      }, {
        "lang" : "es",
        "value" : "XNU v1228.9.59 y anteriores en Apple Mac OS X v10.5.6 no aplica las restricciones adecuadas entre el espacio del usuario y el manejador HFS IOCTL, lo que permite a usuarios locales sobrescribir la memoria del kernel y conseguir ganar privilegios adjuntando una imagen de un disco HFS+ y realizando ciertos pasos incluyendo llamadas HFS_GET_BOOT_INFO fcntl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.5.6",
            "matchCriteriaId" : "536E776F-22D6-437C-B4F4-912071428F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399A8984-AADE-4281-A62F-A066D8F450A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734BE71B-82F5-49C6-AB43-F662105D8746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7F7799-33A1-4A8E-915A-B0D503A3DFFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DD3165-E6C3-49D4-B1F8-8E0915CC8BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09ED46A8-1739-411C-8807-2A416BDB6DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:mac_mini:*:*:*:*:*",
            "matchCriteriaId" : "ED946D47-0E49-4A56-A509-72D936167D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook:*:*:*:*:*",
            "matchCriteriaId" : "6E9BAD0F-7B96-4842-9C23-1B53B4CFE2D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook_pro:*:*:*:*:*",
            "matchCriteriaId" : "666E67AD-6097-4D69-810D-2D4403A6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "786BB737-EA99-4EC6-B742-0C35BF2453F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D089858-3AF9-4B82-912D-AA33F25E3715"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA315DB-10DF-4D18-A575-37A70F9AFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.5.6",
            "matchCriteriaId" : "BD25BF89-969E-4E3B-87DA-D105496F8C09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB279593-17D1-4A65-BF54-969B38B74B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90383DA6-C449-462B-84AD-8DC567D367ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D846700-3355-42CA-B15E-7F08F935F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3891C974-DBDE-42AD-ADBA-C8689D0D055D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A6CE48E-FB74-4F49-911D-936B09677753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADAB244E-0391-49E9-B36B-A7CB34CF7152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F5B731-D5A7-4694-9B27-CEE1DCC810EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA38FB0C-3959-4C5A-B06D-39B2A340A173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F4618C-1408-4097-B97D-5F32DE6D01DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F558C40-D0DA-4700-95DA-DF1322C020E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F30B-E4B8-4745-AFFA-8FD620E61994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AE033B-5F16-4262-A397-02D7450189B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02B8266D-69BB-417D-A776-DB9CF58A4C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E831F3E-A980-47AF-BD05-2DB1A14689B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36991737-904F-4B26-AEE2-7B30411279E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EE6036-1A18-43F1-8A92-7DF39E1516E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620ECFC8-293D-4C2B-9698-67185BB6E2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F14A45-BDDB-4C12-9370-D5241975A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BC34D4-A1E8-4E01-982D-EAF03A0EB886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35932546-B614-47C0-98E6-8EF1EFE06725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F17066-C090-4DD7-A1AC-D8FF70D268CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F060C7-AC9E-4844-A430-14B3DFC90E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F60BF582-F700-4E26-A4AF-5BF657803525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE429EF-24D4-453A-8B43-8CCEF5D72773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504D78AB-5374-48C9-B357-DB6BD2267D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3029892E-1375-4F40-83D3-A51BDC4E9840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F8DA6D-2258-4138-8FB2-90BE3C68B230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.sh",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34203",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0822",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.sh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-02T17:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allows remote attackers to cause a denial of service (system crash) via a ZIP NOTIFY (aka ZIPOP_NOTIFY) packet that overwrites a certain ifPort structure member."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en AppleTalk networking stack en XNU v1228.3.13 y anteriores en Apple Mac OS X v10.5.6 permite a atacantes remotos producir una denegación de servicio (caída del sistema) a través de un paquete NOTIFY (también conocido como ZIPOP_NOTIFY) que sobrescribe miembro de estructura ifPort."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.5.6",
            "matchCriteriaId" : "536E776F-22D6-437C-B4F4-912071428F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399A8984-AADE-4281-A62F-A066D8F450A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734BE71B-82F5-49C6-AB43-F662105D8746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7F7799-33A1-4A8E-915A-B0D503A3DFFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DD3165-E6C3-49D4-B1F8-8E0915CC8BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09ED46A8-1739-411C-8807-2A416BDB6DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:mac_mini:*:*:*:*:*",
            "matchCriteriaId" : "ED946D47-0E49-4A56-A509-72D936167D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook:*:*:*:*:*",
            "matchCriteriaId" : "6E9BAD0F-7B96-4842-9C23-1B53B4CFE2D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook_pro:*:*:*:*:*",
            "matchCriteriaId" : "666E67AD-6097-4D69-810D-2D4403A6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "786BB737-EA99-4EC6-B742-0C35BF2453F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D089858-3AF9-4B82-912D-AA33F25E3715"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA315DB-10DF-4D18-A575-37A70F9AFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.5.6",
            "matchCriteriaId" : "BD25BF89-969E-4E3B-87DA-D105496F8C09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB279593-17D1-4A65-BF54-969B38B74B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90383DA6-C449-462B-84AD-8DC567D367ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D846700-3355-42CA-B15E-7F08F935F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3891C974-DBDE-42AD-ADBA-C8689D0D055D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A6CE48E-FB74-4F49-911D-936B09677753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADAB244E-0391-49E9-B36B-A7CB34CF7152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F5B731-D5A7-4694-9B27-CEE1DCC810EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA38FB0C-3959-4C5A-B06D-39B2A340A173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F4618C-1408-4097-B97D-5F32DE6D01DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F558C40-D0DA-4700-95DA-DF1322C020E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F30B-E4B8-4745-AFFA-8FD620E61994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AE033B-5F16-4262-A397-02D7450189B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02B8266D-69BB-417D-A776-DB9CF58A4C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E831F3E-A980-47AF-BD05-2DB1A14689B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36991737-904F-4B26-AEE2-7B30411279E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EE6036-1A18-43F1-8A92-7DF39E1516E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620ECFC8-293D-4C2B-9698-67185BB6E2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F14A45-BDDB-4C12-9370-D5241975A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BC34D4-A1E8-4E01-982D-EAF03A0EB886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35932546-B614-47C0-98E6-8EF1EFE06725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F17066-C090-4DD7-A1AC-D8FF70D268CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F060C7-AC9E-4844-A430-14B3DFC90E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F60BF582-F700-4E26-A4AF-5BF657803525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE429EF-24D4-453A-8B43-8CCEF5D72773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504D78AB-5374-48C9-B357-DB6BD2267D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3029892E-1375-4F40-83D3-A51BDC4E9840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F8DA6D-2258-4138-8FB2-90BE3C68B230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digit-labs.org/files/exploits/xnu-appletalk-zip.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34201",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digit-labs.org/files/exploits/xnu-appletalk-zip.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-02T17:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a denial of service (kernel memory consumption) via a crafted (1) SYS_add_profil or (2) SYS___mac_getfsstat system call."
      }, {
        "lang" : "es",
        "value" : "Múltiples fugas de memoria en XNU v1228.3.13 y anteriores en Apple Mac OS X v10.5.6 y anteriores permite a usuarios locales producir una denegación de servicio (consumo de memoria del kernel) a traves de llamadas de sistema (1) SYS_add_profil o (2) SYS___mac_getfsstat manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.5.6",
            "matchCriteriaId" : "536E776F-22D6-437C-B4F4-912071428F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399A8984-AADE-4281-A62F-A066D8F450A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734BE71B-82F5-49C6-AB43-F662105D8746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7F7799-33A1-4A8E-915A-B0D503A3DFFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DD3165-E6C3-49D4-B1F8-8E0915CC8BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09ED46A8-1739-411C-8807-2A416BDB6DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:mac_mini:*:*:*:*:*",
            "matchCriteriaId" : "ED946D47-0E49-4A56-A509-72D936167D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook:*:*:*:*:*",
            "matchCriteriaId" : "6E9BAD0F-7B96-4842-9C23-1B53B4CFE2D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook_pro:*:*:*:*:*",
            "matchCriteriaId" : "666E67AD-6097-4D69-810D-2D4403A6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "786BB737-EA99-4EC6-B742-0C35BF2453F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D089858-3AF9-4B82-912D-AA33F25E3715"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA315DB-10DF-4D18-A575-37A70F9AFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.5.6",
            "matchCriteriaId" : "BD25BF89-969E-4E3B-87DA-D105496F8C09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB279593-17D1-4A65-BF54-969B38B74B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90383DA6-C449-462B-84AD-8DC567D367ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D846700-3355-42CA-B15E-7F08F935F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3891C974-DBDE-42AD-ADBA-C8689D0D055D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A6CE48E-FB74-4F49-911D-936B09677753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADAB244E-0391-49E9-B36B-A7CB34CF7152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F5B731-D5A7-4694-9B27-CEE1DCC810EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA38FB0C-3959-4C5A-B06D-39B2A340A173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F4618C-1408-4097-B97D-5F32DE6D01DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F558C40-D0DA-4700-95DA-DF1322C020E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F30B-E4B8-4745-AFFA-8FD620E61994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AE033B-5F16-4262-A397-02D7450189B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02B8266D-69BB-417D-A776-DB9CF58A4C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E831F3E-A980-47AF-BD05-2DB1A14689B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36991737-904F-4B26-AEE2-7B30411279E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EE6036-1A18-43F1-8A92-7DF39E1516E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620ECFC8-293D-4C2B-9698-67185BB6E2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F14A45-BDDB-4C12-9370-D5241975A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BC34D4-A1E8-4E01-982D-EAF03A0EB886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35932546-B614-47C0-98E6-8EF1EFE06725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F17066-C090-4DD7-A1AC-D8FF70D268CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F060C7-AC9E-4844-A430-14B3DFC90E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F60BF582-F700-4E26-A4AF-5BF657803525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE429EF-24D4-453A-8B43-8CCEF5D72773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504D78AB-5374-48C9-B357-DB6BD2267D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3029892E-1375-4F40-83D3-A51BDC4E9840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F8DA6D-2258-4138-8FB2-90BE3C68B230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digit-labs.org/files/exploits/xnu-macfsstat-leak.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.digit-labs.org/files/exploits/xnu-profil-leak.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34202",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digit-labs.org/files/exploits/xnu-macfsstat-leak.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.digit-labs.org/files/exploits/xnu-profil-leak.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-02T17:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows local users to cause a denial of service (kernel memory corruption) by simultaneously executing the same HFS_SET_PKG_EXTENSIONS code path in multiple threads, which is problematic because of lack of mutex locking for an unspecified global variable."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en el interfaz HFS vfs sysctl en XNU v1228.8.20 y anteriores en Apple Mac OS X v10.5.6 y anteriores permite a usuarios locales producir una denegación de servicio (corrupción de la memoria del kernel) mediante la ejecucion simultanea de la ruta de código HFS_SET_PKG_EXTENSIONS en múltiples lineas de ejecución, lo cual es problemático debido a la ausencia de bloqueo de mutex para una variable inespecífica global."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.5.6",
            "matchCriteriaId" : "536E776F-22D6-437C-B4F4-912071428F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399A8984-AADE-4281-A62F-A066D8F450A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734BE71B-82F5-49C6-AB43-F662105D8746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7F7799-33A1-4A8E-915A-B0D503A3DFFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DD3165-E6C3-49D4-B1F8-8E0915CC8BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09ED46A8-1739-411C-8807-2A416BDB6DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:mac_mini:*:*:*:*:*",
            "matchCriteriaId" : "ED946D47-0E49-4A56-A509-72D936167D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook:*:*:*:*:*",
            "matchCriteriaId" : "6E9BAD0F-7B96-4842-9C23-1B53B4CFE2D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook_pro:*:*:*:*:*",
            "matchCriteriaId" : "666E67AD-6097-4D69-810D-2D4403A6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "786BB737-EA99-4EC6-B742-0C35BF2453F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D089858-3AF9-4B82-912D-AA33F25E3715"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA315DB-10DF-4D18-A575-37A70F9AFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.5.6",
            "matchCriteriaId" : "BD25BF89-969E-4E3B-87DA-D105496F8C09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB279593-17D1-4A65-BF54-969B38B74B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90383DA6-C449-462B-84AD-8DC567D367ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D846700-3355-42CA-B15E-7F08F935F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3891C974-DBDE-42AD-ADBA-C8689D0D055D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A6CE48E-FB74-4F49-911D-936B09677753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADAB244E-0391-49E9-B36B-A7CB34CF7152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F5B731-D5A7-4694-9B27-CEE1DCC810EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA38FB0C-3959-4C5A-B06D-39B2A340A173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F4618C-1408-4097-B97D-5F32DE6D01DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F558C40-D0DA-4700-95DA-DF1322C020E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F30B-E4B8-4745-AFFA-8FD620E61994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AE033B-5F16-4262-A397-02D7450189B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02B8266D-69BB-417D-A776-DB9CF58A4C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E831F3E-A980-47AF-BD05-2DB1A14689B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36991737-904F-4B26-AEE2-7B30411279E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EE6036-1A18-43F1-8A92-7DF39E1516E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620ECFC8-293D-4C2B-9698-67185BB6E2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F14A45-BDDB-4C12-9370-D5241975A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BC34D4-A1E8-4E01-982D-EAF03A0EB886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35932546-B614-47C0-98E6-8EF1EFE06725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F17066-C090-4DD7-A1AC-D8FF70D268CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F060C7-AC9E-4844-A430-14B3DFC90E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F60BF582-F700-4E26-A4AF-5BF657803525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE429EF-24D4-453A-8B43-8CCEF5D72773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504D78AB-5374-48C9-B357-DB6BD2267D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3029892E-1375-4F40-83D3-A51BDC4E9840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F8DA6D-2258-4138-8FB2-90BE3C68B230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digit-labs.org/files/exploits/xnu-vfssysctl-dos.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34202",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digit-labs.org/files/exploits/xnu-vfssysctl-dos.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0556",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-03T18:30:00.610",
      "lastModified" : "2026-04-22T16:47:07.837",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka \"Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en Microsoft Office PowerPoint 2000 SP3, 2002 SP3, y 2003 SP3, y PowerPoint en Microsoft Office 2004 para Mac, permite a atacantes remotos ejecutar código arbitrario a través de un fichero PowerPoint que inicia un acceso a un \"objeto no valido en memoria\", Esta siendo explotado desde Abril 2009 mediante un exploit; Win32/Apptom.gen"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2026-01-07",
      "cisaActionDue" : "2026-01-28",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Microsoft Office PowerPoint Code Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A192BD93-8778-4CA9-BC32-18F8290BF197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "16844C40-F012-4C19-9028-D05014EBF7D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "34C63AE5-4584-4A51-B20D-36FA6DE01C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "1778A4FF-FF69-403C-A607-6777AE685A13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/mmpc/archive/2009/04/02/new-0-day-exploits-using-powerpoint-files.aspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2009/04/02/microsoft-security-advisory-969136.aspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/04/02/investigating-the-new-powerpoint-issue.aspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/53182",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34572",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/627331",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/969136.mspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503453/100/0/threaded",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34351",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021967",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0915",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-019",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49632",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6204",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6279",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://blogs.technet.com/mmpc/archive/2009/04/02/new-0-day-exploits-using-powerpoint-files.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2009/04/02/microsoft-security-advisory-969136.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/04/02/investigating-the-new-powerpoint-issue.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/53182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/627331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/969136.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503453/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0556",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-03T18:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 9.1 before FP7 returns incorrect query results in certain situations related to the order of application of an INNER JOIN predicate and an OUTER JOIN predicate, which might allow attackers to obtain sensitive information via a crafted query."
      }, {
        "lang" : "es",
        "value" : "IBM DB2 v9.1 anteriores a FP7 devuelve resultados incorrectos en ciertas situaciones relacionadas con la orden de aplicación de una identificación INNER JOIN y una identificación OUTER JOIN, lo que permitiría a atacantes conseguir información sensible a través de una petición manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:fp6a:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1",
            "matchCriteriaId" : "90C0F24A-7D81-4A4B-8987-FEF3214AFB7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B28091A-8772-41DC-9D91-D5359CDDA7A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:*:connect_server:*:*:*:*:*",
            "matchCriteriaId" : "7372EC03-10FD-4A90-801A-B7947436CE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "959E00AE-24A2-4890-A120-0EDEC401A2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:*:express_server:*:*:*:*:*",
            "matchCriteriaId" : "66CF4477-2D86-48D6-BD56-E09A01EA518F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "CE1F8C8D-DC4C-4401-9D83-BBCF9687035D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:*:workgroup_server:*:*:*:*:*",
            "matchCriteriaId" : "C1C73916-C875-4137-A208-6AE5EEB1A94E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp1:unix:*:*:*:*:*",
            "matchCriteriaId" : "AB624942-B12A-48B4-88F8-22261CBED995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp1:windows:*:*:*:*:*",
            "matchCriteriaId" : "C631A734-423E-4C76-8E1C-A4BB2974DA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF01163-F805-4FC8-9836-462034D1B5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*",
            "matchCriteriaId" : "E570E88C-35F8-4E12-8121-20536AC8A0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "757E30FB-2EFB-4B3D-9931-17D584D433A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*",
            "matchCriteriaId" : "B31F9D02-25FD-4ED1-9D1C-B244BC9426B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "47455B4A-6E10-417F-9974-B0AA7F3180FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "84156C5B-EFC6-4733-A868-C3C51CFBA7CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1JR31886",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21381257",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0912",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1JR31886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21381257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-03T18:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad no especificada en el motor Proventia de IBM versión 4.9.0.0.44 20081231, tal y como es usado en Proventia Network Mail Security System , Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), y posiblemente otros productos de IBM, permite a los atacantes remotos omitir la detección de malware por medio de un archivo RAR modificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:proventia_desktop_endpoint_security:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77F1551-5C37-4D5B-AC86-C2965083B93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:proventia_network_mail_security_system:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C520BF35-8406-44E3-8FC6-D8BD7242D13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:network_multi-function_security:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F24569C0-A783-4CFC-9A74-794DBA96E719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:proventia_network_mail_security_system_virtual_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F19781E-ECC4-40A0-8027-2DC059FB989E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.zoller.lu/2009/04/ibm-proventia-evasion-limited-details.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502369/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504987/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504992/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504995/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.zoller.lu/2009/04/ibm-proventia-evasion-limited-details.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502369/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504987/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504992/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504995/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Per: http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417\r\n\r\nAlthough the Virus Prevention System technology was, at one time, incorporated into the IBM Proventia Network MFS and the Proventia Network Mail appliances, this capability was removed in Jan 2008. For this reason, this vulnerability does not apply to these product lines.\r\n\r\nThe Virus Prevention System technology is currently incorporated into Proventia Desktop. However, the Proventia Desktop product is not affected by this evasion.\r\n\r\nNo other IBM ISS products currently incorporate the Virus Prevention System technology."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-03T18:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en ClamAV en versiones anteriores a v0.95 lo que permite a atacantes remotos evitar la detección de malware a través de un archivo RAR modificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.95",
            "matchCriteriaId" : "313364AD-2D04-4292-932A-33CC851EA16E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.zoller.lu/2009/04/clamav-094-and-below-evasion-and-bypass.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:097",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/07/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502366/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34344",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0934",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://blog.zoller.lu/2009/04/clamav-094-and-below-evasion-and-bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/07/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502366/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-06T14:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel before 2.6.29.1 on the i386 platform allows guest OS users to cause a denial of service (OOPS) by setting the EFER_LME (aka \"Long mode enable\") bit in the Extended Feature Enable Register (EFER) model-specific register, which is specific to the x86_64 platform."
      }, {
        "lang" : "es",
        "value" : "La función vmx_set_msr en arch/x86/kvm/vmx.c en la implementación VMX en el subsistema KVM en el kernel de Linux anteriores a v2.6.29.1 en la plataforma i386 permite a los usuarios invitados del SO causar una denegación de servicio (OOPS) estableciendo el bit EFER_LME (también conocido como \"modo largo habilitado\") en la Extended Feature Enable Register (EFER) registro específico de modelo, lo que es específico para la plataforma x86_64."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.29.1",
            "matchCriteriaId" : "1FF4F98B-4264-4C5E-BB8F-7D80149F3B06"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16175a796d061833aacfbd9672235f2d2725df65",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/04/01/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://patchwork.kernel.org/patch/15549/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34478",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35120",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35226",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35387",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-EFER-8585",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0084",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.globalsecuritymag.com/Vigil-nce-Linux-kernel-denial-of%2C20090402%2C8311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.29-git1.log",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503610/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34331",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0924",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=502109",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49594",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16175a796d061833aacfbd9672235f2d2725df65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/04/01/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://patchwork.kernel.org/patch/15549/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-EFER-8585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.globalsecuritymag.com/Vigil-nce-Linux-kernel-denial-of%2C20090402%2C8311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.29-git1.log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503610/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=502109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG.",
        "lastModified" : "2009-04-07T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-06T14:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "net/ipv4/udp.c in the Linux kernel before 2.6.29.1 performs an unlocking step in certain incorrect circumstances, which allows local users to cause a denial of service (panic) by reading zero bytes from the /proc/net/udp file and unspecified other files, related to the \"udp seq_file infrastructure.\""
      }, {
        "lang" : "es",
        "value" : "net/ipv4/udp.c en el kernel de Linux anteriores a v2.6.29.1, desarrolla un paso desbloqueante en ciertas circunstancias incorrectas, lo que permite a los usuarios locales causar una denegación de servicio (panic) por lectura de cero bytes desde el archivo /proc/net/udp y otros no especificado, en relación a \"udp seq_file infrastructure.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.29.1",
            "matchCriteriaId" : "1FF4F98B-4264-4C5E-BB8F-7D80149F3B06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=30842f2989aacfaba3ccb39829b3417be9313dbe",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/04/01/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34478",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-proc-net-udp-8586",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34329",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0924",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49595",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=30842f2989aacfaba3ccb39829b3417be9313dbe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/04/01/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-proc-net-udp-8586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG.",
        "lastModified" : "2009-04-07T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-06T15:30:04.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VI Client in VMware VirtualCenter before 2.5 Update 4, VMware ESXi 3.5 before Update 4, and VMware ESX 3.5 before Update 4 retains the VirtualCenter Server password in process memory, which might allow local users to obtain this password."
      }, {
        "lang" : "es",
        "value" : "VI Client de VMware VirtualCenter en versiones anteriores a la v2.5 Update 4, VMware ESXi 3.5 en sus versiones anteriores a Update 4, and VMware ESX 3.5 en sus versiones anteriores a Update 4 retienen la contraseña de VirtualCenter Server en la memoria de proceso, lo que puede permitir a los usuarios locales obtener esta contraseña."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_esx:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F8BE4D-EF33-4CC8-B66B-16ADE1CCBB63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_esxi:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C25C336B-B4BC-4FDF-8FD2-F90783841EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_virtualcenter:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6314167B-74F5-465B-8082-51CDCBCC24CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_virtualcenter:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF04F98-E574-4A18-B89C-5AA2A8C67226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_virtualcenter:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC4B360-6460-4327-8A88-6CE5463BC8B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_virtualcenter:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41671F9F-C0FA-4D7F-9E31-EE114DB4F5A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_virtualcenter:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5CB5CB-B259-4081-9358-2A48AF82860D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vmware_virtualcenter:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C57B5A-1175-4F6E-8138-915B3DDBB91C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-06T15:30:04.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the ACE shared folders implementation in the VMware Host Guest File System (HGFS) shared folders feature in VMware ACE 2.5.1 and earlier allows attackers to enable a disabled shared folder."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la implementación de la carpeta en VMware Host Guest File System (HGFS) característica de carpeta compartida en VMware ACE v2.5.1 y anteriores que permiten a lo atacantes deshabilitar las carpetas compartidas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "8D249F86-E463-4AB1-BEEE-0828D5A2D761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F20A8E8-E07D-41B2-899F-2ABA9DD1C2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700C0BB4-2272-4405-9D9A-A636E3D22461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC82A8C-E561-4E35-A84D-66A4D6C90264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D346E48-887C-4D02-BFD3-D323B7F3871C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9C6150A-2DF3-4F7B-B024-0F3DBB686124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40192EE1-A300-42C3-BC98-286C9E5A281E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87291B27-442C-4CAB-94A1-67FC766486EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B04862-4377-422E-931A-B17FE1CA1884"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B6730-F05B-4B62-B4DE-07C61A4924F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E1A5AA-BD9F-4263-B7C6-E744323C4D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D22E40D-C362-49FD-924C-262A64555934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A48CEB4-5864-4A0F-B14C-CFE4699C3311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78957047-FB9F-4D1D-B3D9-91257A6B4D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A04DB52-C66C-4AA9-9D6F-9D2DC202C5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280033C5-90EF-4825-A87D-B23650D8C71A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71537AE-346D-4BA9-90E7-EA0AB0CD0886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-06T15:30:04.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VMware ACE 2.5.x before 2.5.2 build 156735, and VMware Server 2.0.x before 2.0.1 build 156745 allows remote attackers to execute arbitrary code via a crafted web page or video file, aka ZDI-CAN-435."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en VNnc Codec en VMware Workstation v6.5.x anteriores a v6.5.2 build 156735, VMware Player v2.5.x anteriores a v2.5.2 build 156735, VMware ACE v2.5.x anteriores a v2.5.2 build 156735, y VMware Server v2.0.x anteriores a v2.0.1 build 156745 permite a los atacantes remotos ejecutar arbitrariamente código a través de páginas web manipuladas o archivos de vídeo, también conocida como ZDI-CVE-435."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5674C3DD-F510-4701-ACA8-437576307528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "252D2C0B-B89A-4C89-8D6B-6A8E58FCD8DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2786E370-6108-4695-B0A8-9F19D8E3C0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E658DA-56E8-49F0-B486-4EF622B63627"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201209-25.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34373",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201209-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-06T15:30:04.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VMware ACE 2.5.x before 2.5.2 build 156735, and VMware Server 2.0.x before 2.0.1 build 156745 allows remote attackers to execute arbitrary code via a crafted web page or video file, aka ZDI-CAN-436."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en  VNnc Codec en VMware Workstation 6.5.x versiones anteriores a v6.5.2 build 156735, VMware Player 2.5.x versiones anteriores a v2.5.2 build 156735, VMware ACE 2.5.x versiones anteriores a v2.5.2 build 156735, y VMware Server 2.0.x versiones anteriores a v2.0.1 build 156745 permite ejecutar código de su elección a través de un página web manipulada o fichero de video, también conocido como ZDI-CVE-436."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5674C3DD-F510-4701-ACA8-437576307528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "252D2C0B-B89A-4C89-8D6B-6A8E58FCD8DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2786E370-6108-4695-B0A8-9F19D8E3C0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E658DA-56E8-49F0-B486-4EF622B63627"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201209-25.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34373",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201209-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-06T15:30:04.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in an ioctl in hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x before 2.0.1 build 156745 allows local users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3761."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en un ioctl de hcmon.sys de VMware Workstation v6.5.1 y anteriores, VMware Player v2.5.1 y anteriores, VMware ACE v2.5.1 y anteriores y VMware Server en sus versiones v1.0.x anteriores a v1.0.9 build 156507 y v2.0.x en sus versiones anteriores a v2.0.1 build 156745. Permite a usuarios locales provocar una denegación de servicio (DOS) a través de vectores de ataque desconocidos utilizando una vulnerabilidad distinta a la especificada en CVE-2008-3761."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "8D249F86-E463-4AB1-BEEE-0828D5A2D761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F20A8E8-E07D-41B2-899F-2ABA9DD1C2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700C0BB4-2272-4405-9D9A-A636E3D22461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC82A8C-E561-4E35-A84D-66A4D6C90264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D346E48-887C-4D02-BFD3-D323B7F3871C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9C6150A-2DF3-4F7B-B024-0F3DBB686124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40192EE1-A300-42C3-BC98-286C9E5A281E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87291B27-442C-4CAB-94A1-67FC766486EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B04862-4377-422E-931A-B17FE1CA1884"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B6730-F05B-4B62-B4DE-07C61A4924F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E1A5AA-BD9F-4263-B7C6-E744323C4D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D22E40D-C362-49FD-924C-262A64555934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A48CEB4-5864-4A0F-B14C-CFE4699C3311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78957047-FB9F-4D1D-B3D9-91257A6B4D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A04DB52-C66C-4AA9-9D6F-9D2DC202C5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280033C5-90EF-4825-A87D-B23650D8C71A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71537AE-346D-4BA9-90E7-EA0AB0CD0886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "BC1C154A-3869-4189-A781-D3071D54143F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E76D03A3-DB55-48A2-B5A5-64002D28B95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EAC68CA-DCA3-4399-807D-E7AC67C9C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B13A58-1876-4322-AC25-107D43BABD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D04A928-4421-4BEE-9500-7398E4DB929B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2F6AF4-5987-43BC-9183-5DF7D6DE1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088450C4-9C6F-4651-8D59-C36F1B0601BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA35C066-90A9-4DE2-A97A-38A6CFC59A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462EEAD5-A78C-4381-847E-B6F1BE4CB379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E666A5E4-4CDD-4915-B0F3-C63998D01846"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7AD12A-26C9-48AD-A32A-0F56545DF8E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73C45BB0-C0DB-42B8-A238-B81D836CF91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297226F7-05CB-4721-9D02-51FE2919D2DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3F9D4D-2116-49A7-9292-AF6B4456E175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2EAA90-B24A-45E7-B99F-DA3554A16F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446F2959-C42B-403B-AE1C-BA7D305C60CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE944A70-CB9C-4712-9802-509531396A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EC33AB-E92A-4AA8-A523-C341133BB515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53197903-0614-4460-8944-C1B5257D71A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F037B05F-6F92-4BE1-B672-F677CBEFD075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DD6D27-1335-44EF-8B69-A9163A67BC2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFEAE8-0118-4548-A6EA-E90FA8FE7AF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42049891-38B7-4BB7-8DA5-A87169E2D958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07139DF7-C36B-4FED-8558-7FA49BE0BCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0D7307-5946-45DC-88D3-6BC72EF50184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89699BB6-9E41-41DC-B597-B45CA05313A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2786E370-6108-4695-B0A8-9F19D8E3C0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5.1",
            "matchCriteriaId" : "E4D69FD9-F162-4623-A475-9FA7A3A6DF30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBF029A-103D-4BB6-B037-25EC2224DF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D00C4D90-3697-4F3F-8FFF-FE63F3AD0DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A717A5-60C2-4470-943E-CA53781D4B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8FBC02-7F2F-4AEF-A5A3-E283D192937C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29AA2B37-BF5F-4AC5-844D-34CF56EC621C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07131E56-53EE-4CE1-A135-050792EA3C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86334051-8763-4CD9-9480-CAEAE756DFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66596F04-9C2E-4091-85A7-40239F3F920E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E831531-60FE-4DFC-994E-7409E6C69D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:3.2.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1A275E-2152-4A37-8CFE-34E8900E3426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A688A2-3E9C-4AA3-832B-300A5A311C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89098CFF-4696-4BD9-9BC9-D7C2D92FE729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30DFFE7-EB73-4A88-A23B-9B386C091314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6C230D-7BAA-4A77-9E96-B1B994F4AAC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0FE7C5-2C46-4B59-9242-A03B986C07DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37595A89-52C5-4699-A463-C9D91B91716B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3CF9F67-DE1A-4CB0-B3AB-B28DC8C02C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294B621F-6C1A-4571-AE13-49495680D255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCF51A7F-59DA-4F64-A4F7-3A250C950D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA47458-E783-4A6A-ABF1-59E8D87E9B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A1141D-9718-4A22-8FF2-AEAD28E07291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75ED54E-8E55-48BF-A52E-19FCCE895C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53297E3-0C74-421B-8058-DAF7357D421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACDEFCEF-F943-449B-91D8-A8CB290C7AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97957D6F-0249-4814-8755-5C4537B58E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89329F80-7134-4AB2-BDA3-E1B887F633B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4408849A-21F1-40F5-A528-0BD47E1BF823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9938CB4F-96D1-4852-9694-28A93E13AA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB61760-87FD-4E60-ADC6-407EFA13773C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBDE6D5-7131-421A-BABE-32F281615597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AA4FEF-FF8F-4706-89BC-8396F7614EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC6B629-30B3-4C45-B5E9-1B4310F186FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-06T15:30:04.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in vmci.sys in the Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 2.0.x before 2.0.1 build 156745 allows local users to gain privileges via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el archivo vmci.sys en la Virtual Machine Communication Interface (VMCI) en VMware Workstation v6.5.1 y anteriores, VMware Player v2.5.1 y anteriores, VMware ACE 2.5.1 y anteriores, y VMware Server v2.0.x anteriores a v2.0.1 build 156745 permite a los usuarios locales obtener privilegios a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1A5C22-A89A-4B6B-9108-8C3678BBBC9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F20A8E8-E07D-41B2-899F-2ABA9DD1C2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700C0BB4-2272-4405-9D9A-A636E3D22461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC82A8C-E561-4E35-A84D-66A4D6C90264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D346E48-887C-4D02-BFD3-D323B7F3871C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9C6150A-2DF3-4F7B-B024-0F3DBB686124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.3_build_54075:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B6602F-EF25-4E20-B4AA-955C026F7AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40192EE1-A300-42C3-BC98-286C9E5A281E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87291B27-442C-4CAB-94A1-67FC766486EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B04862-4377-422E-931A-B17FE1CA1884"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B6730-F05B-4B62-B4DE-07C61A4924F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E1A5AA-BD9F-4263-B7C6-E744323C4D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D22E40D-C362-49FD-924C-262A64555934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.1_build_55017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D438AB9-825C-4A9B-A3FF-55F2E5743B19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A48CEB4-5864-4A0F-B14C-CFE4699C3311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78957047-FB9F-4D1D-B3D9-91257A6B4D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A04DB52-C66C-4AA9-9D6F-9D2DC202C5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280033C5-90EF-4825-A87D-B23650D8C71A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71537AE-346D-4BA9-90E7-EA0AB0CD0886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5674C3DD-F510-4701-ACA8-437576307528"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBF029A-103D-4BB6-B037-25EC2224DF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D00C4D90-3697-4F3F-8FFF-FE63F3AD0DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A717A5-60C2-4470-943E-CA53781D4B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8FBC02-7F2F-4AEF-A5A3-E283D192937C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29AA2B37-BF5F-4AC5-844D-34CF56EC621C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07131E56-53EE-4CE1-A135-050792EA3C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86334051-8763-4CD9-9480-CAEAE756DFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66596F04-9C2E-4091-85A7-40239F3F920E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E831531-60FE-4DFC-994E-7409E6C69D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:3.2.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1A275E-2152-4A37-8CFE-34E8900E3426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A688A2-3E9C-4AA3-832B-300A5A311C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89098CFF-4696-4BD9-9BC9-D7C2D92FE729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30DFFE7-EB73-4A88-A23B-9B386C091314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.0.1_build_5289:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F1481E-A07D-4913-BCF3-630561F0FBC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6C230D-7BAA-4A77-9E96-B1B994F4AAC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0FE7C5-2C46-4B59-9242-A03B986C07DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.5.2_build_8848:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8F9694-8556-4990-A867-592D6A927498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.5.2_build_8848:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "0C605123-69F9-44AC-A17E-3C728059E628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37595A89-52C5-4699-A463-C9D91B91716B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.0.0_build_13124:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B54C61-FB19-4900-A635-2F6B63BEC88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3CF9F67-DE1A-4CB0-B3AB-B28DC8C02C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.0_build_13124:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BCB22F-7B9A-493B-AE19-18D0C15EA778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294B621F-6C1A-4571-AE13-49495680D255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.1_build_19175:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D6D4DD-13D2-4EA0-A7D7-367C3809ABAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCF51A7F-59DA-4F64-A4F7-3A250C950D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA47458-E783-4A6A-ABF1-59E8D87E9B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.3:42958:*:*:*:*:*:*",
            "matchCriteriaId" : "559D2177-ECB9-4AFF-A8B4-BCB47A1B4637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.3_build_34685:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51C6D608-64DE-4CC4-9869-3342E8FD707F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.3_build_42958:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDEAB605-03F6-4968-8A48-126C7C711043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A1141D-9718-4A22-8FF2-AEAD28E07291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.4_build_44386:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2ADE72-4F19-4E73-AC3E-7038FE0D38B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75ED54E-8E55-48BF-A52E-19FCCE895C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.5_build_56455:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B27D214D-2BEF-4445-802A-5E02E9E5E5CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53297E3-0C74-421B-8058-DAF7357D421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACDEFCEF-F943-449B-91D8-A8CB290C7AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97957D6F-0249-4814-8755-5C4537B58E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89329F80-7134-4AB2-BDA3-E1B887F633B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4408849A-21F1-40F5-A528-0BD47E1BF823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.1_build_55017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0692E537-A36E-470B-BECE-A17D531B925C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9938CB4F-96D1-4852-9694-28A93E13AA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB61760-87FD-4E60-ADC6-407EFA13773C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBDE6D5-7131-421A-BABE-32F281615597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AA4FEF-FF8F-4706-89BC-8396F7614EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC6B629-30B3-4C45-B5E9-1B4310F186FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E658DA-56E8-49F0-B486-4EF622B63627"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E76D03A3-DB55-48A2-B5A5-64002D28B95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EAC68CA-DCA3-4399-807D-E7AC67C9C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B13A58-1876-4322-AC25-107D43BABD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D04A928-4421-4BEE-9500-7398E4DB929B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2F6AF4-5987-43BC-9183-5DF7D6DE1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088450C4-9C6F-4651-8D59-C36F1B0601BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA35C066-90A9-4DE2-A97A-38A6CFC59A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462EEAD5-A78C-4381-847E-B6F1BE4CB379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E666A5E4-4CDD-4915-B0F3-C63998D01846"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7AD12A-26C9-48AD-A32A-0F56545DF8E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73C45BB0-C0DB-42B8-A238-B81D836CF91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297226F7-05CB-4721-9D02-51FE2919D2DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3F9D4D-2116-49A7-9292-AF6B4456E175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2EAA90-B24A-45E7-B99F-DA3554A16F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446F2959-C42B-403B-AE1C-BA7D305C60CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE944A70-CB9C-4712-9802-509531396A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "252D2C0B-B89A-4C89-8D6B-6A8E58FCD8DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2786E370-6108-4695-B0A8-9F19D8E3C0C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-06T16:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the insert_to_pastebin function in php/cccp-admin/inc/functions.php in CCCP Community Clan Portal Pastebin before 2.80 allow remote attackers to execute arbitrary SQL commands via the (1) subject, (2) language, and (3) nickname parameters to php/cccp-pages/submit.php.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Mútiples vulnerabilidades de inyección SQL en la función insert_to_pastebin de php/cccp-admin/inc/functions.php de la aplicación web CCCP Community Clan Portal Pastebin en versiones anteriores a la v2.80. Permite a usuarios remotos ejecutar comandos SQL de su elección a través de los  parámetros (1) subject, (2) language y (3) nickname de php/cccp-pages/submit.php. NOTA: algunos de estos detalles han sido obtenido de terceras partes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.70",
            "matchCriteriaId" : "B14BA363-5A2D-4350-8550-48B79F390800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB45A98-380D-4916-B7FB-81AAC9E2A0D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "201AAECE-F0E4-4F92-9780-51DA068DD17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBF323A-2894-4C04-BE22-8BDE5F19985C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259ECBB6-9BE1-48AE-8E0E-155895847AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB10992C-1E5B-4F17-BD5F-76975B39527B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1440B07C-AB93-4F4A-BA21-58D64F5E7ECD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jcsfog.cvs.sourceforge.net/viewvc/jcsfog/CCCP-Pastebin/php/cccp-admin/inc/functions.php?r1=1.10&r2=1.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34474",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=670960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jcsfog.cvs.sourceforge.net/viewvc/jcsfog/CCCP-Pastebin/php/cccp-admin/inc/functions.php?r1=1.10&r2=1.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=670960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-06T16:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Blogplus 1.0 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) row_mysql_blocks_center_down[file] parameter to includes/block_center_down.php; (2) row_mysql_blocks_center_top[file] includes/parameter to block_center_top.php; (3) row_mysql_blocks_left[file] parameter to includes/block_left.php; (4) row_mysql_blocks_right[file] parameter to includes/block_right.php; and row_mysql_bloginfo[theme] parameter to (5) includes/window_down.php and (6) includes/window_top.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en Blogplus v1.0 permiten a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en el parámetro (1) row_mysql_blocks_center_down[file] de includes/block_center_down.php; (2) parámetro row_mysql_blocks_center_top[fichero] includes/ de block_center_top.php; (3) parámetro row_mysql_blocks_left[file] de includes/block_left.php; (4) parámetro row_mysql_blocks_right[file] de includes/block_right.php; y parámetro row_mysql_bloginfo[theme] de (5) includes/window_down.php y (6) includes/window_top.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blogplus:blogplus:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC962A3-942C-4A72-89CC-BB8F918F6BD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34261",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-06T16:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en login.php en Acute Control Panel v1.0.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"username\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acutecp.rediscussed:acutecp:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056DCE60-DF83-421B-BF37-3443BE8D4E71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34485",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-06T16:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the theme_directory parameter to (1) container.php and (2) header.php in themes/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo PHP en Acute Control Panel v1.0.0 que permite a usuarios remotos ejecutar código PHP de su elección a través de una URL en el parámetro theme_directory de (1) container.php y (2) header.php de themes/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acutecp:acute_control_panel:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D76393-109D-48EF-BC69-B61EE309A329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34485",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-06T16:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Feed element mapper 5.x before 5.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the content title in admin/content/node-type/nodetype/map."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Feed element mapper 5.x versiones anteriores a 5.x-1.1, un módulo para Drupal, permite a atacantes remotos inyectar web script o HTML de su elección a través del contenido del título en admin/content/node-type/nodetype/map."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D7AF9A-4FEE-493E-9DEA-A4C9F00755F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "8F2B1FF7-6DC9-486D-B798-2637943B6175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC54361-B0BE-4F18-9BB0-954896960B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "6488C64C-60D0-45FA-A7D5-3ADF3CC61BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "20A57654-5776-4400-AF95-8DE74A727426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4D02C8-842F-40DC-ABF4-AD6BDD4519B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "A8402B0F-688A-4F7D-B9AF-74D19AFAACD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "80BD5743-720B-4BDC-BF86-C275D2635C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:feedapi_mapper:5.x-1.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8BD67A-FB6D-4DAE-A5FF-0A584176C815"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/414644",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/414702",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34497",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/414644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/414702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0796",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-07T23:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Status.pm en Apache::Status y Apache2::Status en mod_perl1 y mod_perl2 para Apache HTTP Server, cuando /perl-status esta accesible, permite a atacantes remotos inyectar código web o HTML de modo arbitrario a través de la URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_perl:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7612B6F-0CBF-4866-8293-37EF407C7BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_perl:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8639339-6C55-43A0-BCF1-56C75A6CA19B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6CD1F4-4C0E-4989-A2B3-DC086E8E80A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34597",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021508.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021709.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT4435",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://svn.apache.org/viewvc/perl/modperl/branches/1.x/lib/Apache/Status.pm?r1=177851&r2=761081&pathrev=761081&diff_format=h",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=761081",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gossamer-threads.com/lists/modperl/modperl-cvs/99477#99477",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gossamer-threads.com/lists/modperl/modperl/99475#99475",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:091",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502709/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34383",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1021988",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0943",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=494402",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-0796",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8488",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021508.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021709.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.apache.org/viewvc/perl/modperl/branches/1.x/lib/Apache/Status.pm?r1=177851&r2=761081&pathrev=761081&diff_format=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=761081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gossamer-threads.com/lists/modperl/modperl-cvs/99477#99477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gossamer-threads.com/lists/modperl/modperl/99475#99475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502709/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=494402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-0796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0796\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact, a future mod_perl package update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/",
        "lastModified" : "2009-06-11T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-07T23:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en FlexCMS v2.5 permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"ItemId\". NOTA: Algunos de los detalles de esta información fueron obtenidos de terceras partes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexcms:flexcms:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6DF79F-643E-4B88-A559-383F7FD1898B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34394",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-07T23:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted CCD file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Magic ISO Maker v5.5 build 0274, permite a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código de su elección a través de un fichero CCD manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magic_iso_maker:magic_iso_maker:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A7DD9C-D097-4E16-B97A-E744C11C217E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34595",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-07T23:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the RD-Autos (com_rdautos) component 1.5.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the makeid parameter in index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente RD-Autos (com_rdautos) v1.5.7 para Joomla! permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"makeid\" en index.php. NOTA: La procedencia de esta información es desconocida; los detalles fueron obtenidos únicamente de terceras partes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rd-media:com_rdautos:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3334C6D1-EE2F-48D6-885F-A8FCB322F70F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34578",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-07T23:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the topic_id parameter in a topic action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en inc/bb/topic.php en Insane Visions AdaptBB v1.0, cuando magic_quotes esta desactivado, permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"topic_id\" en una acción \"topic\" a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insanevisions:adaptbb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F4CB18-2C5F-48DB-A6C2-01DE7B4CA80D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34371",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-07T23:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos del búfer basados en pila en UltraISO v9.3.3.2685 y versiones anteriores, permiten a atacantes remotos provocar una denegación de servicio (caída) y ejecutar código de su elección a través de un fichero (1) CCD o (2) IMG manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:*:-:pe:*:*:*:*:*",
            "versionEndIncluding" : "9.3.3",
            "matchCriteriaId" : "17F5DF7A-9903-43A9-9BD2-E13EFAB08439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0D66CC-2BB9-42F2-AB1A-F2528F524235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:3.1_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E500A39-2771-4755-9BB8-117CAD275958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:3.1_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDA8DC52-D446-4610-85DB-FF370D2338B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5236E727-20BB-42A3-BAE1-A0243FED3633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1033E2-58A8-42A7-B782-BEA733CFE5EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34021E37-E7F0-460A-A72D-936B8FB0EECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F6294A-3E02-4B37-AB76-E5BCC99F0462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "156623DE-C954-4470-97A0-87BB66AA0BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:5.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42C26DB-5C2B-444A-A2CE-0EF9DE1C57AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:5.55_sr-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199E347B-61BE-4EF9-A2B6-6D1998462E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:5.55_sr-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF4B560-72DF-4FDB-B77B-60D8253B8B22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75393582-C1D5-42FD-9C4D-4E39810A89E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE47C4E9-C4AB-48C7-814F-0F58E3F358CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B07F4F7-7C7C-4358-A304-02F5DFCA82AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:6.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE09B73F-A9F1-473E-9C0A-8CC144DD00A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:6.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC84B744-042C-4C83-A0D6-37F1934E35AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:6.52_sr-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7571790-24EA-4764-AB99-3F4AA792B81E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:6.52_sr-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7621A640-266C-4435-9770-1804F186CA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:6.56_sr-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "806D55A4-F87D-49D0-AD72-A254FAEDF56B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:6.56_sr-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC8414A-FE5D-4343-842D-6FD1B6EB4BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:7.0:-:me:*:*:*:*:*",
            "matchCriteriaId" : "9BF9EF37-892B-4314-9F57-95D11548E659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:7.1:-:me:*:*:*:*:*",
            "matchCriteriaId" : "3BA4DAF7-72D5-47A9-ADD9-0274D8CBCCA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:7.5:-:me:*:*:*:*:*",
            "matchCriteriaId" : "12CC24A7-74D6-4FA5-B9F2-E0669D1E4E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:7.6:-:me:*:*:*:*:*",
            "matchCriteriaId" : "6AD36A09-943A-4B34-9439-34E0CACB1B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:7.21_sr-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAB8C09-472D-46D0-8AA7-B017A0D7DC6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:7.21_sr-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119B2B6F-E010-487F-A8BE-7929426E3C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:7.22_me:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86A46AD-3BB8-4F5B-9F73-2A9BE6BD3B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:7.23:-:me:*:*:*:*:*",
            "matchCriteriaId" : "995353BF-F882-44C4-8698-20AE41FDDF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:7.25:-:me:*:*:*:*:*",
            "matchCriteriaId" : "7FB3582B-A19A-4D00-8D3C-47D73386E215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:7.51:-:me:*:*:*:*:*",
            "matchCriteriaId" : "04F1A22F-80DF-4F0C-A6AE-4232327AF258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:7.52:-:me:*:*:*:*:*",
            "matchCriteriaId" : "F2CB70BB-8DF2-4FCE-914C-BE5C6D8BF7F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:7.55:-:me:*:*:*:*:*",
            "matchCriteriaId" : "0ED81FD8-2DCD-44A7-B29D-EA537D8A76C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:7.56:-:me:*:*:*:*:*",
            "matchCriteriaId" : "08DBBFF6-2B77-4B28-AEBE-51CC37F57169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:7.62:-:me:*:*:*:*:*",
            "matchCriteriaId" : "FCE3C7D8-0DC3-442E-9733-7D05770E6D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:7.65:-:me:*:*:*:*:*",
            "matchCriteriaId" : "A650E9E8-A2E1-420B-8EBC-4608ED2669F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:7.65_sr-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A65038-1900-44BF-BAAE-DA348A1C2274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:7.66:-:me:*:*:*:*:*",
            "matchCriteriaId" : "E3EBB8A7-1F10-4E4A-9965-C142976F335B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:8:-:pe:*:*:*:*:*",
            "matchCriteriaId" : "1A8AF672-11EF-4D00-9CB0-4C687C73D27E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:8.2:-:pe:*:*:*:*:*",
            "matchCriteriaId" : "A2238638-682D-4EFD-A793-FB015D24AF0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:8.6:-:pe:*:*:*:*:*",
            "matchCriteriaId" : "A7ABE1FD-F407-4A2A-80AC-798DAD000A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:8.12:-:pe:*:*:*:*:*",
            "matchCriteriaId" : "CEA13675-CB4C-4ADB-911B-0834AED3504B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:8.51:-:pe:*:*:*:*:*",
            "matchCriteriaId" : "63DD03D1-E0C9-47DB-98E6-CDA26193E53F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:8.61:-:pe:*:*:*:*:*",
            "matchCriteriaId" : "3E2E7CD0-51CE-461B-9098-6341B6480298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:8.62:-:pe:*:*:*:*:*",
            "matchCriteriaId" : "912F4170-8E12-400C-97C1-109396B5D8D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:8.63:-:pe:*:*:*:*:*",
            "matchCriteriaId" : "E31327FF-B3CC-4236-BB84-B6DD2659A0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:8.65:-:pe:*:*:*:*:*",
            "matchCriteriaId" : "F6F3AF7A-AE94-4C94-BF1D-219B4454149B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:8.66:-:pe:*:*:*:*:*",
            "matchCriteriaId" : "499BBD33-BE6A-42D6-9FC2-DE0D5A848E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:9.0:-:pe:*:*:*:*:*",
            "matchCriteriaId" : "79ABC413-761B-4EB3-A9FC-B83EE5DAFC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:9.1.2:-:pe:*:*:*:*:*",
            "matchCriteriaId" : "8D32892E-C508-469F-B06B-0F1C546106C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:9.2:-:pe:*:*:*:*:*",
            "matchCriteriaId" : "94B835E1-8E67-46FE-B9C6-854525DCF0C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:9.3:-:pe:*:*:*:*:*",
            "matchCriteriaId" : "266CEA1B-5C88-4A66-BD7B-53EC2750575C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:9.3.1:-:pe:*:*:*:*:*",
            "matchCriteriaId" : "4C9B2E61-9531-478C-AF8A-F16439F0A221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezbsystems:ultraiso:9.3.2:-:pe:*:*:*:*:*",
            "matchCriteriaId" : "375D5262-2DE1-4056-A010-F171A852AFBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34581",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0935",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-07T23:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Web Help Desk 9.1.22 (evaluation version) allow remote attackers to inject arbitrary web script or HTML via the (1) Report Name, (2) Asset No., and (3) Full Name fields in a Models action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Web Help Desk v9.1.22 (versión de evaluación) permite a atacantes remotos inyectar secuencias de  comandos web o HTML de su elección a través de (1) Report Name, (2) Asset No., y (3) y campos Full Name en una acción \"Models\". NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos exclusivamente a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhelpdesk:web_help_desk:9.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC4A539-97AE-45E0-A69F-1484E486D654"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34596",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-07T23:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string specifiers in the VPN connection name."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de formato de cadena en Fortinet FortiClient v3.0.614 y posiblemente versiones anteriores permite a usuarios locales ejecutar código de forma arbitraria a través de especificadores de formato de cadena en el nombre de la conexión VPN."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fortinet:forticlient:3.0.614:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46CC5D47-9685-4B5A-9308-A450CC7C8233"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2009-April/068583.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34524",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.layereddefense.com/FortiClient02Apr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502354/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502602/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0941",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2009-April/068583.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.layereddefense.com/FortiClient02Apr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502354/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502602/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-07T23:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in sub_commententry.php in the BookJoomlas (com_bookjoomlas) component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a comment action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en sub_commententry.php en el componente BookJoomlas (com_bookjoomlas) v0.1 para Joomla! permite a atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro \"gbid\" en una acción de comentario en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alikonweb:com_bookjoomlas:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54520703-F96D-47B1-9958-C3DF4E76A61B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53421",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34392",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0952",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-07T23:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "La extensión Frontend User Registration (sr_feuser_register) v.2.5.20 y anteriores para TYPO3, no comprueba adecuadamente los permisos de acceso, esto permite a usuarios autenticados en remoto obtener información sensible como contraseñas a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_feuser_register:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.20",
            "matchCriteriaId" : "B3355511-4472-4D36-B160-45A1F818DCFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053EF31D-FE26-4CF3-BE33-EB0F1036718F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E20C0A-8B89-4C95-8B24-A2A3CBFA0127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476D5133-8BCB-44BF-B61F-6699D7B8F9A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C84689-C9B1-480A-A3BF-00EF5316F03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B00C7C5-54A6-485D-AAF7-61F12E0D7B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D815939A-4446-4CC8-86EE-58903DEC9CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B238304F-2FEB-497C-B74D-4BED29879040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABDA6FBA-9A42-4524-AA65-2A15A5B2E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51DBFDB-9D5B-46D2-8EBC-A298E8DBBF88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F44CBF4-5A38-41C8-A7C5-CA1D6A61BEE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34586",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34374",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0938",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/53278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0795",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-08T01:30:00.280",
      "lastModified" : "2023-11-07T02:03:44.513",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-0796, CVE-2009-1265.  Reason: this candidate was intended for one issue, but a typo caused it to be associated with a different issue.  Notes: All CVE users should consult CVE-2009-0796 and CVE-2009-1265 to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-08T01:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote attackers to obtain sensitive information via a large length value, which causes \"garbage\" memory to be sent."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en rose_sendmsg (sys/net/af_rose.c) en el kernel de Linux  v2.6.24.4 y otras versiones anteriores a la 2.6.30-rc1, podría permitir a atacantes remotos conseguir información sensible a través de un valor largo, lo que causaría que la \"basura\" de la memoria fuese enviada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACBB194-1D24-464A-B79C-44B8127EAD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0138807-6313-4A3F-AB5A-4B7D4A9BE287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA2227-F259-499D-BF50-5074B1E7DD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A896D0-032C-4467-9D57-E47E8C612704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A415FECF-89CC-4D71-B1BF-6A678D32599D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F77E54-5F4A-4D47-8DE8-097B4BBC7944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752148FC-1594-4108-AE0F-C5145B978454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09546671-E75D-4F50-9D86-DFDDAC9DC5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6964925C-4394-4E82-976B-770A99E74F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8C909E-02D7-4B29-AA68-897BD0200B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA036609-ADD3-4903-AB9D-E8BF81CFC776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F9E122-994B-4276-9FCF-A8E4D2D06D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A15720C-3BDF-4343-B270-2575978293EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5ADCFA-2CD8-4A00-AFEC-B84F7E0015A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EA2EE9B-27FD-49FE-8665-159DABA0E3C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C81C5F8-2224-4D84-B7C0-E18421276AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B44A2C76-174E-40A5-9603-3B84D0D35557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42ACE154-0709-4AA1-82E3-1B7F34E63187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3022E902-9F0D-49FF-9279-71E0E1E8A873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDF77B26-91FA-4245-BFEC-43FD021A28E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "601B4C93-9A9C-40E8-A9D0-DA9D71C745EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7CE35A-87A4-4D95-86F9-211D50E30482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA8675A-A37C-4658-9D26-3359EBA277B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E8CB86-ECEE-4435-BEFC-B8D209B2C5AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373DEAE-8F8B-44AA-BAE5-3A0120A541F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D40063F-13D0-4897-AE71-1C7B617C8855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7E89C8-CF89-4FA8-A9F1-F0B415E5FE10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4034EFE6-449D-4749-9265-B47D44AA4EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F835D17-ACF9-4AE6-8C38-B74BE448B8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A12676-7EBE-4D83-83BD-D46CC7A1773A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FB112DB-891D-4FDB-8772-2E233A39A7BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3A0794-B10C-4DFD-9CAD-202CA1DC9250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E86CE6-CD1C-4412-939F-B45867068D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6896A4-16E0-46B6-B90C-5C002C526478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469534AB-2D0F-4B31-8121-05A792FA9332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2820354-F25B-485D-9FA7-E32B38DDBB1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF88BEB3-9EA4-47AA-B24E-DE9AD879382A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4209B4C-4901-4235-B35E-B0085AF1952F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D748A69-4A93-421E-AD83-2B63B2460A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2727A6AE-A1B6-4158-BB73-49D7C86104F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F3744A-0205-4BD6-8D43-E06DCBA54C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27430190-EB83-43C5-9584-4F65CF65151A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386B13F-9D7C-45F8-B86A-886384144A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67A63E8-837E-4162-999E-3B3DAAE57C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A701E87D-B807-426E-9CD4-6721DBCABE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F6E506-EC0A-4784-BDA3-B7B5CD938B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFA0277-B491-4BB1-88DC-85362F0A689C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE922924-6496-4D24-94A6-8EDD431A4568"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.kernel.org/show_bug.cgi?id=10423",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=83e0bbcbe2145f160fbaa109b0439dae7f4a38a9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35185",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35387",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/08/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.kernel.org/show_bug.cgi?id=10423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=83e0bbcbe2145f160fbaa109b0439dae7f4a38a9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/08/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 4, 5, or Red Hat Enterprise MRG, as the affected driver is not enabled in these kernels.\n\nThe affected driver is available in Red Hat Enterprise Linux 3, but only if the kernel-unsupported package is installed.\n\nThis issue has been rated as having moderate security impact as it does not lead to a denial of service or privilege escalation. As Red Hat Enterprise Linux 3 is now in Production 3 of its maintenance life-cycle, http://www.redhat.com/security/updates/errata, and the affected driver can only be enabled when using the unsupported kernel-unsupported package, a fix for this issue is not currently planned to be included in the future updates.",
        "lastModified" : "2009-06-17T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1270",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-08T16:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang."
      }, {
        "lang" : "es",
        "value" : "libclamav/untar.c en ClamAV anteriores a v0.95 permite a atacantes remotos provocar una denegación de servicio (buble infinito) a través de un fichero manipulado que provoca que se cuelguen (1) clamd y (2) clamscan."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.95",
            "matchCriteriaId" : "313364AD-2D04-4292-932A-33CC851EA16E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/53461",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34716",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1771",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:097",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/07/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34357",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-754-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0934",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49846",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1462",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Issue Tracking" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/53461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/07/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-754-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-08T18:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service (segmentation fault) via a malformed string to the json_decode API function."
      }, {
        "lang" : "es",
        "value" : "La función JSON_parser (ext/json/JSON_parser.c) en PHP v5.2.x anteriores a v5.2.9 permite a atacantes remotos provocar una denegación de servicio (falta de segmentación) a través de una cadena formada de forma incorrecta a la función API json_decode.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD02D837-FD28-4E0F-93F8-25E8D1C84A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88358D1E-BE6F-4CE3-A522-83D1FA4739E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86767200-6C9C-4C3E-B111-0E5BE61E197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00B416D-FF23-4C76-8751-26D305F0FA0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "F526115E-A68E-4B10-AA6A-9CD26CB81AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB6CDDD-70D3-4004-BCE0-8C4723076103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A782CA26-9C38-40A8-92AE-D47B14D2FCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892C89E-9389-4452-B7E0-981A763CD426"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.php.net/viewvc.cgi/php-src/ext/json/JSON_parser.c?r1=1.1.2.14&r2=1.1.2.15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/01/9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/releases/5_2_9.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0350.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-761-2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/761-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.php.net/viewvc.cgi/php-src/ext/json/JSON_parser.c?r1=1.1.2.14&r2=1.1.2.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/01/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/releases/5_2_9.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0350.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-761-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/761-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect PHP versions as shipped in Red Hat Enterprise Linux 2.1, 3, 4, and 5, and Red Hat Application Stack v1. PHP version in Red Hat Application Stack v2 was fixed via: https://rhn.redhat.com/errata/RHSA-2009-0350.html",
        "lastModified" : "2009-04-15T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-08T18:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The php_zip_make_relative_path function in php_zip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to cause a denial of service (crash) via a ZIP file that contains filenames with relative paths, which is not properly handled during extraction."
      }, {
        "lang" : "es",
        "value" : "La función php_zip_make_relative_path en php_zip.c en PHP v5.2.x anteriores a v5.2.9 permite a atacantes, dependiendo del contexto, provocar una denegación de servicio (caída) a través de una fichero ZIP que contiene nombres de ficheros con las rutas relativas, lo que no está bien manejado durante la extracción."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD02D837-FD28-4E0F-93F8-25E8D1C84A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88358D1E-BE6F-4CE3-A522-83D1FA4739E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86767200-6C9C-4C3E-B111-0E5BE61E197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00B416D-FF23-4C76-8751-26D305F0FA0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "F526115E-A68E-4B10-AA6A-9CD26CB81AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB6CDDD-70D3-4004-BCE0-8C4723076103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A782CA26-9C38-40A8-92AE-D47B14D2FCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892C89E-9389-4452-B7E0-981A763CD426"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.php.net/viewvc.cgi/php-src/ext/zip/php_zip.c?r1=1.1.2.48&r2=1.1.2.49",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125017764422557&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/01/9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/09/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/releases/5_2_9.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.php.net/viewvc.cgi/php-src/ext/zip/php_zip.c?r1=1.1.2.48&r2=1.1.2.49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125017764422557&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/01/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/09/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/releases/5_2_9.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect PHP versions as shipped in Red Hat Enterprise Linux 2.1, 3, 4, and 5, and Red Hat Application Stack v1 and v2. This problem was introduced in the fix for CVE-2008-5658. Patch for CVE-2008-5658 as used in Red Hat Application Stack v2 also includes the fix for this crash too.",
        "lastModified" : "2009-04-15T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-08T18:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames."
      }, {
        "lang" : "es",
        "value" : "pam_ssh v1.92 y posiblemente otras versiones, como las usadas cuando PAM se compila con USE=ssh, genera diferentes mensajes de error dependiendo de cuando el nombre de usuario es válido o inválido, lo que hace más fácil a atacantes remotos enumerar los nombres de usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_j.korty:pam_ssh:1.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F34D9E-CBD9-4BB2-BEDC-BB536241CA2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=263579",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34536",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00116.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00145.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=263579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00116.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00145.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-08T18:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to execute arbitrary code via a Quicktime movie file with a large count value in an STTS atom, which triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función qt_error parse_trak_atom en demuxers/demux_qt.c en xine-lib v1.1.16.2 y anteriores permite a atacantes remotos ejecutar código de su elección a través de un fichero de vídeo Quicktime, con un valor largo de contador en un elemento STTS, lo que provoca un desbordamiento de búfer basado en montículo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB10333-6C25-4359-BB3F-D76468170825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2377493B-8CC0-414B-AA5F-B7777C852195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC149FA-B916-4844-AD98-B7827116C803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BBF4E9-6090-4ED3-8A12-09396E660505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA642532-365F-4981-BA09-A56D3628271C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B75F992-1E85-491D-99FF-2ABE4228B88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFE3B5A-2AF7-4F0B-9364-A06DD19F4BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68EFD39-5F34-41DD-9897-A28A6BD190A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A4FBA1-BC5C-43F8-AD20-7D7245382EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066B88F9-0617-403E-9B7A-B8CAC6E76D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88354B3-C565-480C-B45D-CB172F139E28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.xine-project.org/show_bug.cgi?id=224",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34593",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=673233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502481/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2009-005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0937",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00210.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00215.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.xine-project.org/show_bug.cgi?id=224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=673233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502481/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2009-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00210.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00215.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T00:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read."
      }, {
        "lang" : "es",
        "value" : "La función get_input_token en la implementación SPNEGO de MIT Kerberos 5 (también conocido como krb5) v1.5 hasta v1.6.3 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) y posiblemente obtener información sensible a través de un valor length modificado que dispara una sobrescritura del búfer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos:5-1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "032730AE-1E53-4CA2-96FD-AD60CD27F3CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589D7E39-A243-49F9-8F67-4B9E92AE87DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD315AE-868B-4061-BF01-CDBF59B02499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B639DD5F-71C7-4D9B-BA5C-51CAF64140B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B904DCE-D59F-45C7-A814-DE42CF02792D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9957FE9E-1E89-4C27-852C-44F866A1834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C382DAA-68D2-4DD9-BE29-8EEB0BAF1A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73BB258E-51CF-4D12-836B-BCEA587A3F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81DE01C-BA3B-40B4-BD85-17692F0AF8A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21396120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/662091",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0408.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502526/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502546/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-755-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21396120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/662091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0408.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502526/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502546/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-755-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T00:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer."
      }, {
        "lang" : "es",
        "value" : "La función asn1_decode_generaltime en lib/krb5/asn.1/asn1_decode.c en el decodificador ASN.1 GeneralizedTime en MIT Kerberos 5 (también conocido como Krb5) anteriores a v1.6.4, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) o posiblemente ejecución de código de su elección a través de vectores que implican una codificación DER inválida, que provocará una liberación del puntero no inicializado.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.4",
            "matchCriteriaId" : "46577766-3490-43FD-8DDB-DDEF8862420D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "743CBBB1-C140-4FEF-B40E-FAE4511B1140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "823BF8BE-2309-4F67-A5E2-EAD98F723468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0507E91-567A-41D6-A7E5-5088A39F75FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.7",
            "matchCriteriaId" : "EA0E35E1-9181-4A2B-93E5-8833E5AB5FDD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6172AF57-B26D-45F8-BE3A-F75ABDF28F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1CA1D49-76E7-4195-98AF-BE916040ECC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9EF63F-DDA3-448B-92D7-27ED92C51FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397313C3-6BF5-4A87-90B3-55678E807171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A61204-33CE-422F-8285-20A5E98ADF3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FE6DAA-4702-409A-98B6-DE13B12805A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B5DCF29-6830-45FF-BC88-17E2249C653D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000059.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124896429301168&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497213107107&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0409.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0410.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34594",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34598",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34617",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34622",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34628",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34630",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34637",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34640",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34734",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35667",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-09.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0058",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21396120",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/662091",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:098",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0408.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502527/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502546/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504683/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34409",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021994",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-755-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0960",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0976",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1057",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1106",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2084",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2248",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10694",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5483",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6301",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000059.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124896429301168&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497213107107&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0409.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0410.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21396120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/662091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0408.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502527/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502546/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504683/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1021994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-755-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T00:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service (application crash) via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations with pointer arithmetic."
      }, {
        "lang" : "es",
        "value" : "La función asnbuf_imbed en el decodificador ASN.1 en MIT Kerberos 5 (también conocido como krb5) v1.6.3 cuando se usa PK-INIT, permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de un valor length modificado que provoca una llamada malloc errónea, relativo a cálculo erróneos con punto aritmético."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos:5-1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "032730AE-1E53-4CA2-96FD-AD60CD27F3CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124896429301168&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21396120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/662091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502526/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502546/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-755-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124896429301168&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21396120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/662091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502526/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502546/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-755-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of krb5 as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.",
        "lastModified" : "2009-04-09T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T00:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro."
      }, {
        "lang" : "es",
        "value" : "El gestor de caché en el cliente OpenAFS v1.0 hasta v1.4.8 y v1.5.0 hasta v1.5.58 en Linux, permite a atacantes remotos provocar una denegación de servicio (caída del sistema) a través de una respuesta RX con un valor en el código de error muy largo, lo que es interpretado como un puntero y desrefereciado, relativo al uso de la macro ERR_PTR."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:afs:*:patch18:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6",
            "matchCriteriaId" : "4201D241-5784-46AC-AACD-5612EB4F08AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:afs:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30616D7B-7047-4DB0-A259-1859619AC78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:afs:3.6:patch12:*:*:*:*:*:*",
            "matchCriteriaId" : "278D5804-4178-4946-AA4A-987540E82602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:afs:3.6:patch13:*:*:*:*:*:*",
            "matchCriteriaId" : "E41CEBB0-3A49-4652-AE91-D41A40DF92A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:afs:3.6:patch14:*:*:*:*:*:*",
            "matchCriteriaId" : "8E86AF64-34DB-4C1F-AAC7-BA44D5DDBF20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:afs:3.6:patch15:*:*:*:*:*:*",
            "matchCriteriaId" : "441D8AD1-5E83-4A48-9C5E-50E508C60B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:afs:3.6:patch16:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0EB239-580C-433D-8FAB-6BF0437D0755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC8B64A-B5A9-4F66-86AD-0288F8E3D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE08E0AC-71F8-456B-9E88-43E94A6A2F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CFD4A8-71AE-4F85-B86D-001461ECC2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD3D4A8-934B-420A-AF4A-36DD16E2F851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7AD53C-917A-41CC-83CD-6DF825E2640E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.0.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F84C9B-8073-4EBE-AA75-A373772A42EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E921700-C76F-41EA-AA61-6F939ED329CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC9A5221-2DBC-487A-9C6D-84EB9C95EB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BDBD251-3E96-4068-AD24-E5B1802769E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23A07568-7B15-49F1-9163-40A0BFF38309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A18760-0921-475E-9104-4DF480697E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD01B5F6-7E91-4FE8-B345-42D58C786FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34002792-689C-45B5-9B5A-94B5342AC20B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3331166E-ABBA-4326-8EF4-88872B9824A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302A9220-4C73-4D69-8B62-B64A7E280B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8FC287-D6D8-44BA-9125-3E64624ECDFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C09E5-23C3-4F9E-80FC-B0C4EC34C846"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0295B94D-BE71-4DA2-81C5-E5BBCF0E17AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBADEB7-0073-42EB-B53D-ADA227898493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0951C53-C62A-4607-B6DB-E6B38DF3A5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0813CDDB-FF48-4154-81F3-20873A6C6C45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AAAE0E9-BB79-455F-A08E-AC83370DBD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B65ACE-3BA2-4B42-AEE8-8F647A6399F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0E298D9-63FB-4818-A2F1-EDFC287625F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F2EED9-29E6-41E9-A911-D6ED9A08643C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299D4344-A1DB-4EC3-B1A2-5E07FB2B585F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BE26C0-4A71-43AE-B134-3CE6DE839349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE590EA3-85F6-462A-BCC1-0550192F8F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DB0E2F-782F-4BA1-A81A-5DDDA8CF0A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.3.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1399FC-A356-4624-BBA6-059B797B4C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.3.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D767864-04D5-4571-8B13-CD347ADB3ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.3.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47CECE6-1BD8-4CC3-B1F8-A4A069004C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.3.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846D8776-DCDF-4BD0-A391-5546BD4B20C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C9013E-A08B-441E-AE3F-C688793366FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F37635-C186-4D06-A79C-2A7AB0CFBAD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1364B7-D564-4385-B7D7-67184E474712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA3D7891-0B48-4C5D-B74B-6810FB4696F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C3BF7B2-72FF-4756-A1CC-982A1CD0747C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "832A44D5-3851-4DC5-A37A-B3C356764B19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F42FFC-9EA1-471C-8E5F-F8860BB2EA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.7_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E0060C-4C43-4B4C-88CE-01F5055A9193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.7_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1A3516-7785-406E-83B2-96A0FF8461A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.7_pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F020E77C-8445-4BE8-A36E-A436102FE83B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.7_pre4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F16D28-5011-4CE3-A656-9F9908E760AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.7_pre5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F1E040E-020D-4567-BF57-9A2DA7294CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D14A4C-D467-431A-A223-9383FD94EB12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.8_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED10F836-88BE-4832-BE5A-83AE0C798368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.8_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA22C60E-64A4-4340-A780-0C85BDACBB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.8_pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F407281C-A813-4190-BBF1-FB93779681DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6BEEDA-C1FE-49BA-A829-BA3BBBED1AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39308049-0C20-4845-9803-529A85CB9682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC63C9E-169F-40B5-A011-2A77B675875D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378F38A7-422C-4603-8120-42DB91C8B90D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69AC18EA-7DB6-4F68-95DD-637D557DDF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD8DE00-622E-42DC-B1C7-8B9C1300DEF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FCFBC7-CDEF-402D-8C11-DD3D112B76CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22ABC36E-79A7-41A6-8A80-CF3563EE640E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E121D95-158B-446D-BECD-D90D348A8CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2993321-45A6-496F-ADC3-B83E52B90ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA6732C-6108-40B1-B9D3-D11D9C18B225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93DE322-6843-4C9C-82F2-2E55FC5231DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D0C9D5-009C-4153-AB84-1DC3191CAC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18AAA5FE-D9FE-40A8-804B-C86C2D865958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADCB63E5-D32E-41E3-958D-F1991318CFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FDE6F07-DD16-4075-B7C4-4C3B9A194C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B8EC69-A4CD-42F8-AD25-ACE8DDAE7F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3B0624-435B-4A06-BC13-5B47C34E11E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F90E76-4EF0-4E12-96F9-1007DF457277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3944EFB-9C8C-451E-A339-603FC617A352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B400BB8-53F2-4BC3-842B-42480B52D156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1C5AD7-141A-4932-9A05-994B6CC69AC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155AD4FB-E527-4103-BCEF-801B653DEA37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/42896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201101-05.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21396389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1ID71123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openafs.org/security/OPENAFS-SA-2009-002.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openafs.org/security/openafs-sa-2009-002.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/42896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201101-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21396389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1ID71123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openafs.org/security/OPENAFS-SA-2009-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openafs.org/security/openafs-sa-2009-002.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T00:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en el gestor de caché en el cliente OpenAFS v1.0 hasta la v1.4.8 y v1.5.0 hasta la 1.5.58 de las plataformas Unix, permite a atacantes remotos provocar una denegación de servicio (caída del sistema) o posiblemente ejecutar código de su elección a través de una respuesta RX que contenga más datos que los especificados en la petición, relativo al uso de las tablas XDR."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:unix:unix:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A7C398-5356-45D6-AA5C-53E63BC88DCA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC8B64A-B5A9-4F66-86AD-0288F8E3D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE08E0AC-71F8-456B-9E88-43E94A6A2F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CFD4A8-71AE-4F85-B86D-001461ECC2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD3D4A8-934B-420A-AF4A-36DD16E2F851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7AD53C-917A-41CC-83CD-6DF825E2640E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.0.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F84C9B-8073-4EBE-AA75-A373772A42EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E921700-C76F-41EA-AA61-6F939ED329CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC9A5221-2DBC-487A-9C6D-84EB9C95EB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BDBD251-3E96-4068-AD24-E5B1802769E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23A07568-7B15-49F1-9163-40A0BFF38309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A18760-0921-475E-9104-4DF480697E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD01B5F6-7E91-4FE8-B345-42D58C786FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34002792-689C-45B5-9B5A-94B5342AC20B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3331166E-ABBA-4326-8EF4-88872B9824A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302A9220-4C73-4D69-8B62-B64A7E280B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8FC287-D6D8-44BA-9125-3E64624ECDFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C09E5-23C3-4F9E-80FC-B0C4EC34C846"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0295B94D-BE71-4DA2-81C5-E5BBCF0E17AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBADEB7-0073-42EB-B53D-ADA227898493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0951C53-C62A-4607-B6DB-E6B38DF3A5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0813CDDB-FF48-4154-81F3-20873A6C6C45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AAAE0E9-BB79-455F-A08E-AC83370DBD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B65ACE-3BA2-4B42-AEE8-8F647A6399F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0E298D9-63FB-4818-A2F1-EDFC287625F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F2EED9-29E6-41E9-A911-D6ED9A08643C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299D4344-A1DB-4EC3-B1A2-5E07FB2B585F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BE26C0-4A71-43AE-B134-3CE6DE839349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE590EA3-85F6-462A-BCC1-0550192F8F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DB0E2F-782F-4BA1-A81A-5DDDA8CF0A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.3.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1399FC-A356-4624-BBA6-059B797B4C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.3.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D767864-04D5-4571-8B13-CD347ADB3ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.3.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47CECE6-1BD8-4CC3-B1F8-A4A069004C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.3.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846D8776-DCDF-4BD0-A391-5546BD4B20C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C9013E-A08B-441E-AE3F-C688793366FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F37635-C186-4D06-A79C-2A7AB0CFBAD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1364B7-D564-4385-B7D7-67184E474712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA3D7891-0B48-4C5D-B74B-6810FB4696F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C3BF7B2-72FF-4756-A1CC-982A1CD0747C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "832A44D5-3851-4DC5-A37A-B3C356764B19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F42FFC-9EA1-471C-8E5F-F8860BB2EA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.7_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E0060C-4C43-4B4C-88CE-01F5055A9193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.7_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1A3516-7785-406E-83B2-96A0FF8461A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.7_pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F020E77C-8445-4BE8-A36E-A436102FE83B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.7_pre4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F16D28-5011-4CE3-A656-9F9908E760AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.7_pre5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F1E040E-020D-4567-BF57-9A2DA7294CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D14A4C-D467-431A-A223-9383FD94EB12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.8_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED10F836-88BE-4832-BE5A-83AE0C798368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.8_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA22C60E-64A4-4340-A780-0C85BDACBB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.4.8_pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F407281C-A813-4190-BBF1-FB93779681DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6BEEDA-C1FE-49BA-A829-BA3BBBED1AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39308049-0C20-4845-9803-529A85CB9682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC63C9E-169F-40B5-A011-2A77B675875D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378F38A7-422C-4603-8120-42DB91C8B90D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69AC18EA-7DB6-4F68-95DD-637D557DDF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD8DE00-622E-42DC-B1C7-8B9C1300DEF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FCFBC7-CDEF-402D-8C11-DD3D112B76CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22ABC36E-79A7-41A6-8A80-CF3563EE640E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E121D95-158B-446D-BECD-D90D348A8CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2993321-45A6-496F-ADC3-B83E52B90ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA6732C-6108-40B1-B9D3-D11D9C18B225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93DE322-6843-4C9C-82F2-2E55FC5231DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D0C9D5-009C-4153-AB84-1DC3191CAC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18AAA5FE-D9FE-40A8-804B-C86C2D865958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADCB63E5-D32E-41E3-958D-F1991318CFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FDE6F07-DD16-4075-B7C4-4C3B9A194C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B8EC69-A4CD-42F8-AD25-ACE8DDAE7F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3B0624-435B-4A06-BC13-5B47C34E11E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F90E76-4EF0-4E12-96F9-1007DF457277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3944EFB-9C8C-451E-A339-603FC617A352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B400BB8-53F2-4BC3-842B-42480B52D156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openafs:openafs:1.5.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1C5AD7-141A-4932-9A05-994B6CC69AC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/42896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201101-05.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openafs.org/security/OPENAFS-SA-2009-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openafs.org/security/openafs-sa-2009-001.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/42896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201101-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openafs.org/security/OPENAFS-SA-2009-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openafs.org/security/openafs-sa-2009-001.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T00:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file."
      }, {
        "lang" : "es",
        "value" : "James Stone Tunapie v2.1 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en un fichero temporal no especificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:james_stone:tunapie:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E82DD2-C7CC-4A08-B20E-58DC9AD3DDD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://launchpad.net/bugs/314591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/314591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T00:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL."
      }, {
        "lang" : "es",
        "value" : "James Stone Tunapie v2.1 permite a atacantes remotos ejecutar comandos de su elección a través de metacaracteres Shell en la cadena URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:james_stone:tunapie:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E82DD2-C7CC-4A08-B20E-58DC9AD3DDD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://launchpad.net/bugs/314591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/314591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0197",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-04-09T15:08:35.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large XPM file that triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en el Plugin FORMATS anteriores a v4.23 para IrfanView permite atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de un fichero XPM grande, que provoca un desbordamiento de búfer basado en montículo.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:formats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.22",
            "matchCriteriaId" : "2D04A63B-B5B4-4FF9-9B76-681295BED7C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:formats:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101D6BDF-3702-4F18-A696-86B4D815B4B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:formats:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11961A1-8F88-472D-9C96-E97F31F804BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:formats:4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2ACEE0-483A-4227-8611-3D19FA962A1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34525",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-20/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/53323",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502516/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34402",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0953",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49717",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/34525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/53323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502516/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0793",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-09T15:08:35.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for \"transformations of monochrome profiles.\""
      }, {
        "lang" : "es",
        "value" : "cmsxform.c en LittleCMS (también conocido como lcms o liblcms) v1.18, con el utilizado en OpenJDK y otros productos, permite a atacantes remotos provocar una denegación de servicio (desreferenciación de puntero nulo y caída de aplicación) a través de una imagen manipulada que provoca la ejecución de código incorrecto para \"transformación de perfiles monocromos\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:littlecms:lcms:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E7E7BA9-CC08-4BC0-9328-15F5B38B6AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openjdk:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F1742B-2BFA-4263-9053-B34EE83D8276"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34623",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34634",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34635",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34782",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35048",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/42870",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-19.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:121",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34411",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34420",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-1043-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0963",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0964",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=492353",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11340",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00203.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00204.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00233.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00285.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/42870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-1043-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=492353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00203.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00204.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00233.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00285.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0793\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future lcms packages update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/\n",
        "lastModified" : "2009-04-09T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T15:08:35.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the current working directory, related to an unset SYSTEM_XPDFRC macro in a Gentoo build process that uses the poppler library."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en el paquete Gentoo de Xpdf anteriores a v3.02-r2, permite a usuarios locales obtener privilegios a través de un troyano (fichero xpdfrc) en el directorio de trabajo actual, relativo a la macro SYSTEM_XPDFRC no fijada en el proceso de construcción Gentoo, que usa la biblioteca poppler."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02805E-7BD0-4563-82C8-6FFB982D4913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852F526D-F388-4FF0-BDD9-DF7635DB46D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478D53EA-CC8C-4ECB-8410-0910505AD819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C84FB90-FF1C-4502-B2D2-390438DD422F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13341DAE-D16D-41A7-BF17-FEC802997B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E30BAEA-231C-4A82-B014-9EE3D1E81545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1DE5A5-6448-43F6-A612-56998D16E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F84699-D4CF-4FD1-A959-53E316559EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D820DFD5-0EF9-4C9A-B281-D553A4F63141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CF839D-D034-4D47-977F-7E27B36EF04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B3E8A4-14FE-42DA-B82E-839B092B5302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.02",
            "matchCriteriaId" : "32628280-E2DB-45E0-AB8A-CFC90419A182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF5EC54-9145-4B51-8241-C9343160BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1344DF7-9917-4DB0-9256-9E8131C55B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309F0CF2-4AF7-4F46-91EA-39BA07BAF312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20311EDE-0E34-432A-AE41-F61EA68F134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FEF460-3569-4294-ABA4-D7C251D67071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB41E8C2-BBCC-48CB-805B-23411D39E936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16670F8A-E70B-4CDF-8C61-414D86E20C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3E7962-0A95-4E7B-A983-683B02350B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1120B3-3372-417B-BCA0-FD515638FBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7397645-3225-4980-8465-28F93322B58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A45EAF-B511-4360-A201-D588E7EEB39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069DE067-2C1D-46D3-9F5C-17921FA474B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=200023",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=242930",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/53529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34610",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-07.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=200023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=242930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/53529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1155",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-04-09T15:08:35.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1 before 8.1(2)15, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to bypass authentication and establish a VPN session to an ASA device via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Cisco Adaptive Security Appliances (ASA) 5500 Series y PIX Security Appliances v7.1(1) hasta v7.1(2)82, v7.2 anteriores a v7.2(4)27, v8.0 anteriores a v8.0(4)25, y v8.1 anteriores a v8.1(2)15, cuando introducimos en un campo de atributo general AAA, permite a atacantes remotos saltarse la autenticación y establecer una sesión VPN a un dispositivo ASO mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EAF7E0-6C0A-4B62-8776-CDE7CEB4565A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97290344-5440-4797-9668-AA1050E87C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4991BC7-B07D-4D8C-885C-136AD9D4E209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B161D0-D78B-4517-88AC-3A110F13C154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35649F68-BD09-4684-925D-620D99B42CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32C602C-E278-4DA2-B7D0-941FABA9ADC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53441",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/34607",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34429",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022016",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0981",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/53441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Per vendor advisory: http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml\r\n\r\n\"VPN Authentication Bypass Vulnerability\r\n\r\nCisco ASA or Cisco PIX security appliances that are configured for IPsec or SSL-based remote access VPN and have the Override Account Disabled feature enabled are affected by this vulnerability.\r\n\r\nNote:  The Override Account Disabled feature was introduced in Cisco ASA software version 7.1(1). Cisco ASA and PIX software versions 7.1, 7.2, 8.0, and 8.1 are affected by this vulnerability. This feature is disabled by default. \""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1156",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-04-09T15:08:35.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service (device reload) via a crafted (1) SSL or (2) HTTP packet."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no específica en Cisco Adaptive Security Appliances (ASA) 5500 Series devices v8.0 anteriores a v8.0(4)25 y v8.1 anteriores a v8.1(2)15, cuando está configurado el acceso SSL VPN o ASDM, permite a atacantes remotos provocar una denegación de servicio (recarga del dispositivo) a través de un paquete manipulado (1) SSL o (2) HTTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35649F68-BD09-4684-925D-620D99B42CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32C602C-E278-4DA2-B7D0-941FABA9ADC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53442",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/34607",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34429",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022015",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0981",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/53442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Per vendor advisory: http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml\r\n\r\nVPN Authentication Bypass Vulnerability\r\n\r\nThe Cisco ASA or Cisco PIX security appliance can be configured to override an account-disabled indication from a AAA server and allow the user to log on anyway. However, the user must provide the correct credentials in order to login to the VPN. A vulnerability exists in the Cisco ASA and Cisco PIX security appliances where VPN users can bypass authentication when the override account feature is enabled.\r\n\r\nNote:  The override account feature was introduced in Cisco ASA software version 7.1(1).\r\n\r\nThe override account feature is enabled with the override-account-disable command in tunnel-group general-attributes configuration mode, as shown in the following example. The following example allows overriding the \"account-disabled\" indicator from the AAA server for the WebVPN tunnel group \"testgroup\":\r\n\r\n    hostname(config)#tunnel-group testgroup type webvpn\r\n    hostname(config)#tunnel-group testgroup general-attributes\r\n    hostname(config-tunnel-general)#override-account-disable\r\n\r\nNote:  The override account feature is disabled by default."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1157",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-04-09T15:08:35.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)30, 8.0 before 8.0(4)28, and 8.1 before 8.1(2)19 allows remote attackers to cause a denial of service (memory consumption or device reload) via a crafted TCP packet."
      }, {
        "lang" : "es",
        "value" : "Fuga de memoria en Cisco Adaptive Security Appliances (ASA) 5500 Series y PIX Security Appliances v7.0 anteriores a v7.0(8)6, v7.1 anteriores a v7.1(2)82, v7.2 anteriores a v7.2(4)30, v8.0 anteriores a v8.0(4)28, y v8.1 anteriores a v8.1(2)19 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y recarga del dispositivo) a través de una paquete TCP manipulado.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235C2CE5-C858-4037-AE35-E6D506301894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EAF7E0-6C0A-4B62-8776-CDE7CEB4565A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97290344-5440-4797-9668-AA1050E87C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508DECFB-F334-409F-911B-BF8D842D3556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4991BC7-B07D-4D8C-885C-136AD9D4E209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B161D0-D78B-4517-88AC-3A110F13C154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35649F68-BD09-4684-925D-620D99B42CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32C602C-E278-4DA2-B7D0-941FABA9ADC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53445",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/34607",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34429",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022015",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0981",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/53445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Per vendor advisory: http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml\r\n\r\nCrafted TCP Packet DoS Vulnerability\r\n\r\nCisco ASA and Cisco PIX security appliances may experience a memory leak that can be triggered by a series of crafted TCP packets. Cisco ASA and Cisco PIX security appliances running versions 7.0, 7.1, 7.2, 8.0, and 8.1 are affected when configured for any of the following features:\r\n\r\n    * SSL VPNs\r\n    * ASDM Administrative Access\r\n    * Telnet Access\r\n    * SSH Access\r\n    * Cisco Tunneling Control Protocol (cTCP) for Remote Access VPNs\r\n    * Virtual Telnet\r\n    * Virtual HTTP\r\n    * Transport Layer Security (TLS) Proxy for Encrypted Voice Inspection\r\n    * Cut-Through Proxy for Network Access\r\n    * TCP Intercept"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1158",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-04-09T15:08:35.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and 8.1 before 8.1(2)14, when H.323 inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no específica en Cisco Adaptive Security Appliances (ASA) 5500 Series dispositivos v7.0 anteriores a v7.0(8)6, v7.1 anteriores a v7.1(2)82, v7.2 anteriores a v7.2(4)26, v8.0 anteriores a v8.0(4)24, y v8.1 anteriores a v8.1(2)14, cuando la inspección H.323 está habilitado, permite a atacantes remotos provocar una denegación de servicio (recarga de dispositivo) a través de un paquete h.323 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235C2CE5-C858-4037-AE35-E6D506301894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EAF7E0-6C0A-4B62-8776-CDE7CEB4565A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97290344-5440-4797-9668-AA1050E87C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508DECFB-F334-409F-911B-BF8D842D3556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4991BC7-B07D-4D8C-885C-136AD9D4E209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B161D0-D78B-4517-88AC-3A110F13C154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35649F68-BD09-4684-925D-620D99B42CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32C602C-E278-4DA2-B7D0-941FABA9ADC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53444",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/34607",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34429",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022015",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0981",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/53444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1159",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-04-09T15:08:35.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2 before 7.2(4)26, 8.0 before 8.0(4)22, and 8.1 before 8.1(2)12, when SQL*Net inspection is enabled, allows remote attackers to cause a denial of service (traceback and device reload) via a series of SQL*Net packets."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no específica en Cisco Adaptive Security Appliances (ASA) 5500 Series y PIX Security Appliances v7.2 anteriores a v7.2(4)26, v8.0 anteriores a v8.0(4)22, y v8.1 anteriores a v8.1(2)12, cuando la inspección SQL*Net está activada, permite a los atacantes remotos provocar una denegación de servicio (rastreo y recarga del dispositivo) a través de series de paquetes SQL*Net."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97290344-5440-4797-9668-AA1050E87C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B161D0-D78B-4517-88AC-3A110F13C154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35649F68-BD09-4684-925D-620D99B42CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32C602C-E278-4DA2-B7D0-941FABA9ADC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53446",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/34607",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34429",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022015",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0981",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/53446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1160",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-04-09T15:08:35.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before 8.0(4)5 do not properly implement the implicit deny statement, which might allow remote attackers to successfully send packets that bypass intended access restrictions, aka Bug ID CSCsq91277."
      }, {
        "lang" : "es",
        "value" : "Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances v7.0 anteriores a v7.0(8)1, v7.1 anteriores a v7.1(2)74, v7.2 anteriores a v7.2(4)9, and v8.0 anteriores a v8.0(4)5 no implementan de forma adecuada la denegación implícita, lo que podría permitir a atacantes remotos enviar paquetes que sobrepasen las restricciones de acceso impuestas, también conocido como Bug ID CSCsq91277."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235C2CE5-C858-4037-AE35-E6D506301894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EAF7E0-6C0A-4B62-8776-CDE7CEB4565A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97290344-5440-4797-9668-AA1050E87C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508DECFB-F334-409F-911B-BF8D842D3556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4991BC7-B07D-4D8C-885C-136AD9D4E209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B161D0-D78B-4517-88AC-3A110F13C154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35649F68-BD09-4684-925D-620D99B42CE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34607",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34429",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022017",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0981",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/34607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T15:08:35.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information via unspecified vectors, related to the (1) tiles:putAttribute and (2) tiles:insertTemplate JSP tags."
      }, {
        "lang" : "es",
        "value" : "Apache Tiles v2.1 anteriores a v2.1.2, como las usadas en Apache Struts y otros productos, evalúan las expresiones del lenguaje de expresiones (EL), dos veces en ciertas circunstancias, lo que permite a atacantes remotos conducir ataques de secuencias de comandos en sitios cruzados (XSS) para obtener información sensible a través de vectores no especificados, relativo a (1) tiles:putAttribute y (2) etiquetas JSP tiles:insertTemplate."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BFF7B2B-1DD7-46F4-9EF3-CB486EA84D94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tiles:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48583E6-A6FB-4F6E-AB8D-75BC999EE8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tiles:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "500C802F-65FF-4CD4-863C-063760B67116"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://svn.apache.org/viewvc/tiles/framework/trunk/src/site/apt/security/security-bulletin-1.apt?revision=741913",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.apache.org/struts/browse/TILES-351",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/tiles/framework/trunk/src/site/apt/security/security-bulletin-1.apt?revision=741913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.apache.org/struts/browse/TILES-351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T15:08:35.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications."
      }, {
        "lang" : "es",
        "value" : "XScreenSaver en Sun Solaris v10 and OpenSolaris anteriores a snv_109, y Solaris v8 y v9 con GNOME v2.0 o v2.0.2, permite a atacantes próximos físicamente conseguir información sensible, leyendo las ventanas \"PopUp\"s, que se muestran cuando la pantalla se bloquea, como se demostró en las notificaciones de nuevo mensaje de Thunderbird."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gnome:gnome:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E5B508-4053-4FA4-9454-BC7E2D31DE05"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gnome:gnome:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE904C0-4BF9-44EA-B17D-C8E5E43B103D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_108",
            "matchCriteriaId" : "D4A9DF86-60C3-41C2-8CB7-AD9841676694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DBDFD8C-371E-42D2-9635-D8CDD1775984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gnome:gnome:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E5B508-4053-4FA4-9454-BC7E2D31DE05"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gnome:gnome:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE904C0-4BF9-44EA-B17D-C8E5E43B103D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_108",
            "matchCriteriaId" : "342DE19C-9923-45C8-A441-5101F117A1CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1022009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-22-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255308-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-22-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1277",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T16:27:53.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the member_id parameter in a viewprofile action.  NOTE: the board_id issue is already covered by CVE-2008-2996.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Gravity Board X (GBX) 2.0 BETA permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro member_id en una acción viewprofile. NOTA: La cuestión board_id ya está cubierta por el CVE-2008-2996.2"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gravityboardx:gravity_board_x:2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F03FB72E-B395-412A-BE9B-27FE08A2A2D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34370",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T16:27:57.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Static code injection vulnerability in forms/ajax/configure.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to inject arbitrary PHP code into config.php via the configure action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático en forms/ajax/configure.php en Gravity Board X (GBX) v2.0 BETA permite a atacantes remotos inyectar código PHP a su elección en config.php a través de la acción configure en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gravityboardx:gravity_board_x:2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F03FB72E-B395-412A-BE9B-27FE08A2A2D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34370",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T16:27:57.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5 through 1.5.9 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the (1) com_admin component, (2) com_search component when \"Gather Search Statistics\" is enabled, and (3) the category view in the com_content component."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Joomla! v1.5 hasta 1.5.9, permite a atacantes remotos web script o HTML de su elección a través de vectores no especificados en los componentes (1) com_admin, (2) com_search cuando \"Gather Search Statistics\" está disponible y (3) la vista categoría en com_content.\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2017D307-89B3-4D94-A266-C7D8D45960A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D548B3C9-483F-492C-A6BB-694B7217FEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9813E813-2983-4471-9E56-6F254810A66B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F4F9E7-BA44-4235-A246-DB6C432C3873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "495BD724-45BE-4214-B120-3A83BD9AD11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCDBF4D-A797-4828-A084-8C775FA94BDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1B7CF2-B717-4F37-A923-0E188FF3C47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3333C204-A022-4B53-B61F-3C5601F21FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2752717-AA95-4398-8091-24FD5925C4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B3B3FB-E67D-4D9A-BE01-855FA2545772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29D3E39-7B43-4D19-B39F-2EB56E30F737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F155C3B-AAF5-4393-A964-E655113D84DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DA8EEE-F091-49D0-9F9D-4C83574B6A36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.joomla.org/security/news/293-20090301-core-multiple-xsscsrf.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://developer.joomla.org/security/news/294-20090302-core-comcontent-xss.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34551",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34360",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.joomla.org/security/news/293-20090301-core-multiple-xsscsrf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://developer.joomla.org/security/news/294-20090302-core-comcontent-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T16:27:57.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in the com_media component for Joomla! 1.5.x through 1.5.9 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de falsificación de petición de sitios cruzados en el componente com_media para Joomla! v1.5.x hasta v1.5.9 permite a atacantes remotos secuestrar la autentificación de de víctimas no especificadas mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2017D307-89B3-4D94-A266-C7D8D45960A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D548B3C9-483F-492C-A6BB-694B7217FEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9813E813-2983-4471-9E56-6F254810A66B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F4F9E7-BA44-4235-A246-DB6C432C3873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "495BD724-45BE-4214-B120-3A83BD9AD11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCDBF4D-A797-4828-A084-8C775FA94BDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1B7CF2-B717-4F37-A923-0E188FF3C47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3333C204-A022-4B53-B61F-3C5601F21FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2752717-AA95-4398-8091-24FD5925C4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B3B3FB-E67D-4D9A-BE01-855FA2545772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29D3E39-7B43-4D19-B39F-2EB56E30F737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F155C3B-AAF5-4393-A964-E655113D84DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DA8EEE-F091-49D0-9F9D-4C83574B6A36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.joomla.org/security/news/293-20090301-core-multiple-xsscsrf.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34551",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.joomla.org/security/news/293-20090301-core-multiple-xsscsrf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T16:27:57.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in glFusion before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en glFusion anteriores a v1.1.3, permite a usuarios remotos inyectar de forma arbitraria secuencias de comandos web o HTML a través vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "ED6C9F8D-68B5-4269-8202-D49B48434214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798B4747-978F-46D2-8EF1-76D8BC0872F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D711131E-314B-4BBE-9E6F-973C154694B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80EE971-44CA-478F-88CB-A13CBDD628CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6941B9D9-5EA0-4954-89E8-350B4EE8E35A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34575",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.glfusion.org/article.php/glfusion113",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.glfusion.org/article.php/glfusion113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T16:27:57.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the glf_session cookie parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en private/system/lib-session.php en glFusion v1.1.2 y anteriores, permiten a atacantes remotos ejecutar comandos SQL de su elección a través de parámetro de la cookie glf_session.\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "ED6C9F8D-68B5-4269-8202-D49B48434214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798B4747-978F-46D2-8EF1-76D8BC0872F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E3D0B5AC-35D8-4900-B2F8-95D661E880CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE6694E-7ED1-45F4-94D7-D5CD9AA6D801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D711131E-314B-4BBE-9E6F-973C154694B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80EE971-44CA-478F-88CB-A13CBDD628CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "51D13EE5-3B44-4AB3-86CD-01E9488DFBF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6941B9D9-5EA0-4954-89E8-350B4EE8E35A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=123877379105028&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/53286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/9sg_glfuso_sql_cookies.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34575",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.glfusion.org/wiki/doku.php?id=glfusion:whatsnew",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34361",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=123877379105028&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/53286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://retrogod.altervista.org/9sg_glfuso_sql_cookies.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.glfusion.org/wiki/doku.php?id=glfusion:whatsnew",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T16:27:57.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "glFusion before 1.1.3 performs authentication with a user-provided password hash instead of a password, which allows remote attackers to gain privileges by obtaining the hash and using it in the glf_password cookie, aka \"User Masquerading.\" NOTE: this can be leveraged with a separate SQL injection vulnerability to steal hashes."
      }, {
        "lang" : "es",
        "value" : "glFusion anterior a v1.1.3 realiza la autenticación con el hash de una contraseña en lugar de una contraseña, lo que permite a atacantes remotos obtener privilegios mediante la obtención del hash y utilizarlo en la cookie glf_password, (tambien conocido como \"Enmascaramiento de usuario.\") NOTA: esto puede ser apoyado con una vulnerabilidad de inyección SQL para robar hashes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "ED6C9F8D-68B5-4269-8202-D49B48434214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798B4747-978F-46D2-8EF1-76D8BC0872F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E3D0B5AC-35D8-4900-B2F8-95D661E880CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE6694E-7ED1-45F4-94D7-D5CD9AA6D801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D711131E-314B-4BBE-9E6F-973C154694B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A24202-EB12-4428-A327-97504EB460B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80EE971-44CA-478F-88CB-A13CBDD628CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "51D13EE5-3B44-4AB3-86CD-01E9488DFBF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glfusion:glfusion:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6941B9D9-5EA0-4954-89E8-350B4EE8E35A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=123877379105028&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/9sg_glfuso_sql_cookies.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34575",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.glfusion.org/article.php/glfusion113",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.glfusion.org/wiki/doku.php?id=glfusion:whatsnew",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=123877379105028&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/9sg_glfuso_sql_cookies.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.glfusion.org/article.php/glfusion113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.glfusion.org/wiki/doku.php?id=glfusion:whatsnew",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-09T16:27:57.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a long .bib bibliography file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en BibTeX v0.99 permite a atacantes, dependiendo del contexto, provocar una denegación de servicio (corrupción de memoria y caída) a través de un fichero de bibliografía .bib grande."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bibtex:bibtex:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6B810E-48BB-4CB4-8A06-EAB032FD913F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520920",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201206-28.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/01/8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-937-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=492136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00505.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00507.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201206-28.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/01/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-937-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=492136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00505.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00507.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\n\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-1284\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\n\nhttp://www.redhat.com/security/updates/classification/",
        "lastModified" : "2009-08-31T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0218",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-04-13T16:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX control in IntraLaunch.ocx, as used in LDRA TBbrowse and possibly other products, allows remote attackers to execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de método inseguro en el control ActiveX Particle Software IntraLaunch Application Launcher en IntraLaunch.ocx, tal como se utiliza en LDRA TBbrowse y posiblemente otros productos, permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ldra:tbbrowse:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895AFA6E-E2D0-4B53-8AF5-E282B1A92372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:particlesoftware:intralaunch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0874C9E8-F91A-4F58-BBD9-CE1B30BD01A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/908801",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MAPG-7PYRP4",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-7Q4RZN",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34395",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49684",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/908801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MAPG-7PYRP4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-7Q4RZN",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0794",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-13T16:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the PulseAudioTargetDataL class in src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLine.java in Pulse-Java, as used in OpenJDK 1.6.0.0 and other products, allows remote attackers to cause a denial of service (applet crash) via a crafted Pulse Audio source data line."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la clase PulseAudioTargetDataL de src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLine.java de Pulse-Java, cuando es utilizado en OpenJDK v1.6.0.0 y otros productos, permite a usuarios remotos causar una denegación de servicio (caída del applet) a traves de una línea de datos fuente de Pulse Audio modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openjdk:1.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8966567-1525-4738-A47A-2E8BFFECBCAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2009-February/004729.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34623",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0965",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=492367",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50383",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00203.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00204.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2009-February/004729.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=492367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00203.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00204.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-13T16:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745; VMware Fusion before 2.0.4 build 159196; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to execute arbitrary code on the host OS via unknown vectors, a different vulnerability than CVE-2008-4916."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad no especificada en la función de pantalla de máquina virtual de en VMware Workstation v6.5.1 y anteriores; VMware Player v2.5.1 y anteriores; VMware ACE v2.5.1 y anteriores; VMware Server v1.x antes de la v1.0.9 build 156507 y v2.x antes de v2.0.1 build 156745; VMware Fusion antes de la v2.0.4 build 159196; VMware ESXi 3.5 y VMware ESX v3.0.2, v3.0.3 y v3.5 permite ejecutar, a los usuarios invitados, código arbitrario en el sistema operativo anfitrión a través de vectores desconocidos, una vulnerabilidad diferente a la CVE-2008-4916."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "8D249F86-E463-4AB1-BEEE-0828D5A2D761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F20A8E8-E07D-41B2-899F-2ABA9DD1C2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700C0BB4-2272-4405-9D9A-A636E3D22461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC82A8C-E561-4E35-A84D-66A4D6C90264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D346E48-887C-4D02-BFD3-D323B7F3871C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9C6150A-2DF3-4F7B-B024-0F3DBB686124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40192EE1-A300-42C3-BC98-286C9E5A281E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87291B27-442C-4CAB-94A1-67FC766486EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B04862-4377-422E-931A-B17FE1CA1884"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B6730-F05B-4B62-B4DE-07C61A4924F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E1A5AA-BD9F-4263-B7C6-E744323C4D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D22E40D-C362-49FD-924C-262A64555934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A48CEB4-5864-4A0F-B14C-CFE4699C3311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78957047-FB9F-4D1D-B3D9-91257A6B4D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A04DB52-C66C-4AA9-9D6F-9D2DC202C5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280033C5-90EF-4825-A87D-B23650D8C71A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71537AE-346D-4BA9-90E7-EA0AB0CD0886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:esx:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78322B97-DBE0-4C7E-9826-11727254500E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:esx:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6F7416-E694-4EC9-9FE5-0C24448ECB34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:esx:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5ECA1B-7415-4390-8018-670F2C3CDF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD59C463-F352-4F6C-853F-415E3FB4ABDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.3",
            "matchCriteriaId" : "B3BA4159-EBBA-4326-A672-23322377781B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "942B4ED3-A68E-4106-A98B-FA7CD3505140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD1338C-8FC1-40A1-BAE8-B11F4354A0CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC862199-8AA7-4E5E-BA2B-DF5FC9A056BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BDA2CE1-E26E-4347-BD60-2764A19F5E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B503A45-D9F3-414D-9BFA-C58B1E81A39E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E18541B-36B6-40A7-9749-FA47A10379C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55EBD95F-3DF7-49F3-A7AA-47085E0B7C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DA47C9-3D1A-49A7-8976-AE05D6730673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "BC1C154A-3869-4189-A781-D3071D54143F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E76D03A3-DB55-48A2-B5A5-64002D28B95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EAC68CA-DCA3-4399-807D-E7AC67C9C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B13A58-1876-4322-AC25-107D43BABD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D04A928-4421-4BEE-9500-7398E4DB929B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2F6AF4-5987-43BC-9183-5DF7D6DE1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088450C4-9C6F-4651-8D59-C36F1B0601BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA35C066-90A9-4DE2-A97A-38A6CFC59A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462EEAD5-A78C-4381-847E-B6F1BE4CB379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E666A5E4-4CDD-4915-B0F3-C63998D01846"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7AD12A-26C9-48AD-A32A-0F56545DF8E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73C45BB0-C0DB-42B8-A238-B81D836CF91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297226F7-05CB-4721-9D02-51FE2919D2DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3F9D4D-2116-49A7-9292-AF6B4456E175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2EAA90-B24A-45E7-B99F-DA3554A16F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446F2959-C42B-403B-AE1C-BA7D305C60CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE944A70-CB9C-4712-9802-509531396A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EC33AB-E92A-4AA8-A523-C341133BB515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53197903-0614-4460-8944-C1B5257D71A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F037B05F-6F92-4BE1-B672-F677CBEFD075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DD6D27-1335-44EF-8B69-A9163A67BC2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFEAE8-0118-4548-A6EA-E90FA8FE7AF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42049891-38B7-4BB7-8DA5-A87169E2D958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07139DF7-C36B-4FED-8558-7FA49BE0BCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0D7307-5946-45DC-88D3-6BC72EF50184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89699BB6-9E41-41DC-B597-B45CA05313A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9D09AC-7D9B-4150-86BC-19F44F6F2CA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2786E370-6108-4695-B0A8-9F19D8E3C0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5.1",
            "matchCriteriaId" : "E4D69FD9-F162-4623-A475-9FA7A3A6DF30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBF029A-103D-4BB6-B037-25EC2224DF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D00C4D90-3697-4F3F-8FFF-FE63F3AD0DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A717A5-60C2-4470-943E-CA53781D4B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8FBC02-7F2F-4AEF-A5A3-E283D192937C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29AA2B37-BF5F-4AC5-844D-34CF56EC621C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07131E56-53EE-4CE1-A135-050792EA3C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86334051-8763-4CD9-9480-CAEAE756DFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66596F04-9C2E-4091-85A7-40239F3F920E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E831531-60FE-4DFC-994E-7409E6C69D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:3.2.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1A275E-2152-4A37-8CFE-34E8900E3426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A688A2-3E9C-4AA3-832B-300A5A311C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89098CFF-4696-4BD9-9BC9-D7C2D92FE729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30DFFE7-EB73-4A88-A23B-9B386C091314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6C230D-7BAA-4A77-9E96-B1B994F4AAC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0FE7C5-2C46-4B59-9242-A03B986C07DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37595A89-52C5-4699-A463-C9D91B91716B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53FBB074-4EAC-4CEC-AFC5-33C66B135F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3CF9F67-DE1A-4CB0-B3AB-B28DC8C02C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525D50A3-2943-4B96-B354-F81F814A7707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294B621F-6C1A-4571-AE13-49495680D255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCF51A7F-59DA-4F64-A4F7-3A250C950D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA47458-E783-4A6A-ABF1-59E8D87E9B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A1141D-9718-4A22-8FF2-AEAD28E07291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75ED54E-8E55-48BF-A52E-19FCCE895C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53297E3-0C74-421B-8058-DAF7357D421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACDEFCEF-F943-449B-91D8-A8CB290C7AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97957D6F-0249-4814-8755-5C4537B58E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89329F80-7134-4AB2-BDA3-E1B887F633B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4408849A-21F1-40F5-A528-0BD47E1BF823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9938CB4F-96D1-4852-9694-28A93E13AA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB61760-87FD-4E60-ADC6-407EFA13773C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBDE6D5-7131-421A-BABE-32F281615597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AA4FEF-FF8F-4706-89BC-8396F7614EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC6B629-30B3-4C45-B5E9-1B4310F186FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000055.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/53634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201209-25.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502615/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34471",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000055.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/53634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201209-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502615/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-13T16:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the LDAP dissector in Wireshark 0.99.2 through 1.0.6, when running on Windows, allows remote attackers to cause a denial of service (crash) via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el analizador de LDAP de Wireshark desde la versión v0.99.2 hasta la v1.0.6, cuando se ejecuta en Windows, permite a usuarios remotos provocar una denegación de servicio (caída del servicio) a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C43A78-E578-4B1C-8E33-24529E973E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1074B30-F2E6-47CD-8491-29163811E07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB52B779-7A2D-43E0-9F12-C65053002EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A85B028-7384-403A-817C-B5001F02A8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801B1795-3DC4-4BE3-A693-37B6BD116B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17808311-AC2A-428A-BB8B-B08549C5DAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978C483C-A6F7-456F-9488-833D520D4A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB94CE6-03D3-43C3-B765-AC36961CD83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FADA30-FD98-42F3-80F1-E8794C77AC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3F8A55-10DE-4197-9F9D-5F6570A94860"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502745/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-02.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502745/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.\n",
        "lastModified" : "2009-04-17T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1268",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-13T16:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Check Point High-Availability Protocol (CPHAP) dissector in Wireshark 0.9.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FWHA_MY_STATE packet."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el analizador del protocolo Check Point High-Availability Protocol (CPHAP) de Wireshark desde la versión v0.0.6 hasta la v1.0.6 permite a usuarios remotos causar una denegación de servicio (caída del servicio) a través de un paquete FWHA_MY_STATE modificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DFC6BB8-5A74-4F6A-AFC8-959623D4236F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B432986-F5AE-4506-B584-3B4E943A9C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60178790-62CC-41A9-8B5A-78CF49069E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E7F73-0E2A-442C-9B76-679A2AD03052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF374E8-36A3-43AA-B86C-092F5B244841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C422E5-3252-48C2-B4FF-E32AA5463D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C43A78-E578-4B1C-8E33-24529E973E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1074B30-F2E6-47CD-8491-29163811E07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB52B779-7A2D-43E0-9F12-C65053002EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A85B028-7384-403A-817C-B5001F02A8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801B1795-3DC4-4BE3-A693-37B6BD116B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17808311-AC2A-428A-BB8B-B08549C5DAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978C483C-A6F7-456F-9488-833D520D4A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB94CE6-03D3-43C3-B765-AC36961CD83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FADA30-FD98-42F3-80F1-E8794C77AC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3F8A55-10DE-4197-9F9D-5F6570A94860"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:088",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1100.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502745/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-02.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3269",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1100.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502745/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-13T16:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Wireshark 0.99.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad sin especificar en Wireshark 0.99.6 a 1.0.6 permite a atacantes remotos provocar una denegación de servicio (con caída de la aplicación) a través de un archivo Tektronix .rf5 debidamente modificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DFC6BB8-5A74-4F6A-AFC8-959623D4236F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B432986-F5AE-4506-B584-3B4E943A9C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60178790-62CC-41A9-8B5A-78CF49069E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E7F73-0E2A-442C-9B76-679A2AD03052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF374E8-36A3-43AA-B86C-092F5B244841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C422E5-3252-48C2-B4FF-E32AA5463D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C43A78-E578-4B1C-8E33-24529E973E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1074B30-F2E6-47CD-8491-29163811E07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB52B779-7A2D-43E0-9F12-C65053002EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A85B028-7384-403A-817C-B5001F02A8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801B1795-3DC4-4BE3-A693-37B6BD116B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17808311-AC2A-428A-BB8B-B08549C5DAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978C483C-A6F7-456F-9488-833D520D4A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB94CE6-03D3-43C3-B765-AC36961CD83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FADA30-FD98-42F3-80F1-E8794C77AC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3F8A55-10DE-4197-9F9D-5F6570A94860"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1100.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502745/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-02.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1100.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502745/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-13T16:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IMAP task in the server in IBM Lotus Domino 8.0.2 before FP1 IF1 and 8.5 before IF3 allows remote attackers to cause a denial of service (daemon crash) via a MIME e-mail message with RFC822 attachments (aka blobs) containing malformed root entities."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en la tarea de servidor IMAP en IBM Lotus Domino v8.0.2 anterior a FP1 IF1 y v8.5 anterior IF3 permite a usuarios remotos causar una denegación de servicio (caída del servicio) a través de un mensaje de e-mail MIME con adjuntos RFC822 (o blobs) que contienen entidades root mal formadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3DB9C3-4DAC-4663-9097-95600E13FCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8510F6-D054-488E-99E9-A58272C47AA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DB2AF7-B494-4494-8686-33CB6A4C2CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:8.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD6A3A3-6D6C-4EE0-B092-862DB03AC320"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34657",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21379894",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21379915",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21381562",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21381566",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0986",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21379894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21379915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21381562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21381566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-13T16:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Cisco Subscriber Edge Services Manager (SESM) allows remote attackers to inject arbitrary web script or HTML via the URI.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Cisco Subscriber Edge Services Manager (SESM) permite a usuarios remotos inyectar código web script o HTML de su elección a través de la URI (Uniform Resource Identifier). NOTA: algunos de estos detalles se han obtenido de terceras partes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:subscriber_edge_services_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86726D1-256E-4F9D-8D3A-DD1F1BD2E165"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1022030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xc0re.net/index.php?p=1_17_Cisco-Subscriber-Edge-Services-Manager-Multiple-Vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xc0re.net/index.php?p=1_17_Cisco-Subscriber-Edge-Services-Manager-Multiple-Vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-13T16:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to inject arbitrary web script or HTML via (1) the username in a login action or (2) the PATH parameter to private/file_management.ssi in the File manager."
      }, {
        "lang" : "es",
        "value" : "Varias vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el \"Advanced Management Module\" (AMM) o módulo de gestión avanzada de BladeCenter de IBM, incluyendo el BladeCenter H con BPET36H 54. Permiten a usuarios remotos inyectar código web script o HTML de su elección a través de (1) el nombre de usuario en una acción de login o (2) el parámetro PATH de private/file_management.ssi en el gestor de ficheros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:advanced_management_module:1.36h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65D2F618-192F-449D-B182-0AF5CAAE730B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:e:*:1881:*:*:*:*:*",
            "matchCriteriaId" : "F0D41279-6729-447A-A9CE-EFD83D82DC19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:e:*:7967:*:*:*:*:*",
            "matchCriteriaId" : "F578E536-42AE-4ABB-999B-C0F1249913D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:e:*:8677:*:*:*:*:*",
            "matchCriteriaId" : "BDE7F2D8-362B-49E5-B110-F5845F337FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:h:*:7989:*:*:*:*:*",
            "matchCriteriaId" : "0BAADDA3-CD72-4F14-B2CA-6EDA5E4EAEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:h:*:8852:*:*:*:*:*",
            "matchCriteriaId" : "D22C37E6-62A0-48FD-8000-91270C14B646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hc10:*:7996:*:*:*:*:*",
            "matchCriteriaId" : "E98311E3-E944-4380-B52A-CCB7895187B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs12:*:1916:*:*:*:*:*",
            "matchCriteriaId" : "B77405D4-F9B6-445A-9124-AAF53F955FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs12:*:8014:*:*:*:*:*",
            "matchCriteriaId" : "CA2824FF-1585-4035-AB47-24835688BEE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs12:*:8028:*:*:*:*:*",
            "matchCriteriaId" : "2BE05E6A-F41B-4F5B-BF80-E9848BC21D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs20:*:1883:*:*:*:*:*",
            "matchCriteriaId" : "84927A93-FBE6-4A9D-937C-73D84FDA0CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs21:*:1885:*:*:*:*:*",
            "matchCriteriaId" : "6AD291A9-FD2A-4F2E-AA5A-F587781FF208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs21:*:8853:*:*:*:*:*",
            "matchCriteriaId" : "61A7429A-EA22-4CC3-9177-EBD739BB55AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs21_xm:*:1915:*:*:*:*:*",
            "matchCriteriaId" : "177AB1AA-15CC-416C-A47B-7C290F23EC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs21_xm:*:7995:*:*:*:*:*",
            "matchCriteriaId" : "1210591D-6168-4C99-A40F-18BCC49656F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:ht:*:8740:*:*:*:*:*",
            "matchCriteriaId" : "E2C199D1-B4F3-4939-A216-30836490B4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:ht:*:8750:*:*:*:*:*",
            "matchCriteriaId" : "FD438583-D9C6-40CD-9526-D42E8FAC6689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:js12:*:7998:*:*:*:*:*",
            "matchCriteriaId" : "8D690D2D-174D-40CB-9273-8FA8E75EACDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:js21:*:7988:*:*:*:*:*",
            "matchCriteriaId" : "FBC94677-BF7E-4DEE-9C2B-EEF4E730E6F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:js21:*:8844:*:*:*:*:*",
            "matchCriteriaId" : "B0B7B3D3-306D-45C1-992F-8DBE78106A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:js22:*:7998:*:*:*:*:*",
            "matchCriteriaId" : "97B880FC-2992-4644-B40D-BFD857ADDF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:ls20:*:8850:*:*:*:*:*",
            "matchCriteriaId" : "55CF4234-A310-4A08-9BFA-6CA0E46F50CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:ls21:*:7971:*:*:*:*:*",
            "matchCriteriaId" : "FF502A54-6B7B-4ED9-932B-DC51A440D145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:ls41:*:7972:*:*:*:*:*",
            "matchCriteriaId" : "7A7C4912-DCDC-4402-BC10-B7BCE2821E86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:qs21:*:0792:*:*:*:*:*",
            "matchCriteriaId" : "6D2473A1-0DBB-4A17-8330-1E835D793815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:qs22:*:0793:*:*:*:*:*",
            "matchCriteriaId" : "F7BD9823-CDFB-4E75-B9CA-AB4D53BE22DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:s:*:1948:*:*:*:*:*",
            "matchCriteriaId" : "3D8C051F-56B7-4B6D-8357-4E1B76DAE024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:s:*:8886:*:*:*:*:*",
            "matchCriteriaId" : "9AC31661-5830-4FB3-8970-7C26D0658BC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:t:*:8720:*:*:*:*:*",
            "matchCriteriaId" : "A7C6F823-C727-45DA-A623-3F95C92CFE76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:t:*:8730:*:*:*:*:*",
            "matchCriteriaId" : "9B853206-C826-4215-9A56-8CAF9D018603"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.louhinetworks.fi/advisory/ibm_090409.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502582/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34447",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/53657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.louhinetworks.fi/advisory/ibm_090409.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502582/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-13T16:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "private/login.ssi in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allows remote attackers to discover the access roles and scopes of arbitrary user accounts via a modified WEBINDEX parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en private/login.ssi en el \"Advanced Management Module\" (AMM) o módulo de gestión avanzada de BladeCenter de IBM, incluyendo el BladeCenter H con BPET36H 54, permite a usuarios remotos averiguar los roles de acceso y el \"scope\" (alcance) de cuentas de usuario arbitrarias a través del parámetro WEBINDEX."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:advanced_management_module:1.36h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65D2F618-192F-449D-B182-0AF5CAAE730B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:e:*:1881:*:*:*:*:*",
            "matchCriteriaId" : "F0D41279-6729-447A-A9CE-EFD83D82DC19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:e:*:7967:*:*:*:*:*",
            "matchCriteriaId" : "F578E536-42AE-4ABB-999B-C0F1249913D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:e:*:8677:*:*:*:*:*",
            "matchCriteriaId" : "BDE7F2D8-362B-49E5-B110-F5845F337FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:h:*:7989:*:*:*:*:*",
            "matchCriteriaId" : "0BAADDA3-CD72-4F14-B2CA-6EDA5E4EAEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:h:*:8852:*:*:*:*:*",
            "matchCriteriaId" : "D22C37E6-62A0-48FD-8000-91270C14B646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hc10:*:7996:*:*:*:*:*",
            "matchCriteriaId" : "E98311E3-E944-4380-B52A-CCB7895187B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs12:*:1916:*:*:*:*:*",
            "matchCriteriaId" : "B77405D4-F9B6-445A-9124-AAF53F955FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs12:*:8014:*:*:*:*:*",
            "matchCriteriaId" : "CA2824FF-1585-4035-AB47-24835688BEE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs12:*:8028:*:*:*:*:*",
            "matchCriteriaId" : "2BE05E6A-F41B-4F5B-BF80-E9848BC21D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs20:*:1883:*:*:*:*:*",
            "matchCriteriaId" : "84927A93-FBE6-4A9D-937C-73D84FDA0CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs21:*:1885:*:*:*:*:*",
            "matchCriteriaId" : "6AD291A9-FD2A-4F2E-AA5A-F587781FF208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs21:*:8853:*:*:*:*:*",
            "matchCriteriaId" : "61A7429A-EA22-4CC3-9177-EBD739BB55AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs21_xm:*:1915:*:*:*:*:*",
            "matchCriteriaId" : "177AB1AA-15CC-416C-A47B-7C290F23EC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs21_xm:*:7995:*:*:*:*:*",
            "matchCriteriaId" : "1210591D-6168-4C99-A40F-18BCC49656F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:ht:*:8740:*:*:*:*:*",
            "matchCriteriaId" : "E2C199D1-B4F3-4939-A216-30836490B4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:ht:*:8750:*:*:*:*:*",
            "matchCriteriaId" : "FD438583-D9C6-40CD-9526-D42E8FAC6689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:js12:*:7998:*:*:*:*:*",
            "matchCriteriaId" : "8D690D2D-174D-40CB-9273-8FA8E75EACDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:js21:*:7988:*:*:*:*:*",
            "matchCriteriaId" : "FBC94677-BF7E-4DEE-9C2B-EEF4E730E6F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:js21:*:8844:*:*:*:*:*",
            "matchCriteriaId" : "B0B7B3D3-306D-45C1-992F-8DBE78106A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:js22:*:7998:*:*:*:*:*",
            "matchCriteriaId" : "97B880FC-2992-4644-B40D-BFD857ADDF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:ls20:*:8850:*:*:*:*:*",
            "matchCriteriaId" : "55CF4234-A310-4A08-9BFA-6CA0E46F50CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:ls21:*:7971:*:*:*:*:*",
            "matchCriteriaId" : "FF502A54-6B7B-4ED9-932B-DC51A440D145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:ls41:*:7972:*:*:*:*:*",
            "matchCriteriaId" : "7A7C4912-DCDC-4402-BC10-B7BCE2821E86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:qs21:*:0792:*:*:*:*:*",
            "matchCriteriaId" : "6D2473A1-0DBB-4A17-8330-1E835D793815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:qs22:*:0793:*:*:*:*:*",
            "matchCriteriaId" : "F7BD9823-CDFB-4E75-B9CA-AB4D53BE22DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:s:*:1948:*:*:*:*:*",
            "matchCriteriaId" : "3D8C051F-56B7-4B6D-8357-4E1B76DAE024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:s:*:8886:*:*:*:*:*",
            "matchCriteriaId" : "9AC31661-5830-4FB3-8970-7C26D0658BC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:t:*:8720:*:*:*:*:*",
            "matchCriteriaId" : "A7C6F823-C727-45DA-A623-3F95C92CFE76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:t:*:8730:*:*:*:*:*",
            "matchCriteriaId" : "9B853206-C826-4215-9A56-8CAF9D018603"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.louhinetworks.fi/advisory/ibm_090409.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502582/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.louhinetworks.fi/advisory/ibm_090409.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502582/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-13T16:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration interface in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to hijack the authentication of administrators, as demonstrated by a power-off request to the private/blade_power_action script."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de falsificación de petición en sitios cruzados(CSRF) en la interfaz de administración web en el Módulo de Gestión Avanzada (AMM) en el IBM BladeCenter, incluidos los BladeCenter H con BPET36H 54, permiten a atacantes remotos realizar acciones no autorizadas como administradores, como lo demuestra una solicitud de apagado al script private/blade_power_action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:advanced_management_module:1.36h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65D2F618-192F-449D-B182-0AF5CAAE730B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:e:*:1881:*:*:*:*:*",
            "matchCriteriaId" : "F0D41279-6729-447A-A9CE-EFD83D82DC19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:e:*:7967:*:*:*:*:*",
            "matchCriteriaId" : "F578E536-42AE-4ABB-999B-C0F1249913D4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:e:*:8677:*:*:*:*:*",
            "matchCriteriaId" : "BDE7F2D8-362B-49E5-B110-F5845F337FE5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:h:*:7989:*:*:*:*:*",
            "matchCriteriaId" : "0BAADDA3-CD72-4F14-B2CA-6EDA5E4EAEF1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:h:*:8852:*:*:*:*:*",
            "matchCriteriaId" : "D22C37E6-62A0-48FD-8000-91270C14B646"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hc10:*:7996:*:*:*:*:*",
            "matchCriteriaId" : "E98311E3-E944-4380-B52A-CCB7895187B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs12:*:1916:*:*:*:*:*",
            "matchCriteriaId" : "B77405D4-F9B6-445A-9124-AAF53F955FA0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs12:*:8014:*:*:*:*:*",
            "matchCriteriaId" : "CA2824FF-1585-4035-AB47-24835688BEE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs12:*:8028:*:*:*:*:*",
            "matchCriteriaId" : "2BE05E6A-F41B-4F5B-BF80-E9848BC21D5D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs20:*:1883:*:*:*:*:*",
            "matchCriteriaId" : "84927A93-FBE6-4A9D-937C-73D84FDA0CFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs21:*:1885:*:*:*:*:*",
            "matchCriteriaId" : "6AD291A9-FD2A-4F2E-AA5A-F587781FF208"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs21:*:8853:*:*:*:*:*",
            "matchCriteriaId" : "61A7429A-EA22-4CC3-9177-EBD739BB55AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs21_xm:*:1915:*:*:*:*:*",
            "matchCriteriaId" : "177AB1AA-15CC-416C-A47B-7C290F23EC31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:hs21_xm:*:7995:*:*:*:*:*",
            "matchCriteriaId" : "1210591D-6168-4C99-A40F-18BCC49656F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:ht:*:8740:*:*:*:*:*",
            "matchCriteriaId" : "E2C199D1-B4F3-4939-A216-30836490B4F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:ht:*:8750:*:*:*:*:*",
            "matchCriteriaId" : "FD438583-D9C6-40CD-9526-D42E8FAC6689"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:js12:*:7998:*:*:*:*:*",
            "matchCriteriaId" : "8D690D2D-174D-40CB-9273-8FA8E75EACDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:js21:*:7988:*:*:*:*:*",
            "matchCriteriaId" : "FBC94677-BF7E-4DEE-9C2B-EEF4E730E6F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:js21:*:8844:*:*:*:*:*",
            "matchCriteriaId" : "B0B7B3D3-306D-45C1-992F-8DBE78106A0A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:js22:*:7998:*:*:*:*:*",
            "matchCriteriaId" : "97B880FC-2992-4644-B40D-BFD857ADDF7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:ls20:*:8850:*:*:*:*:*",
            "matchCriteriaId" : "55CF4234-A310-4A08-9BFA-6CA0E46F50CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:ls21:*:7971:*:*:*:*:*",
            "matchCriteriaId" : "FF502A54-6B7B-4ED9-932B-DC51A440D145"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:ls41:*:7972:*:*:*:*:*",
            "matchCriteriaId" : "7A7C4912-DCDC-4402-BC10-B7BCE2821E86"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:qs21:*:0792:*:*:*:*:*",
            "matchCriteriaId" : "6D2473A1-0DBB-4A17-8330-1E835D793815"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:qs22:*:0793:*:*:*:*:*",
            "matchCriteriaId" : "F7BD9823-CDFB-4E75-B9CA-AB4D53BE22DE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:s:*:1948:*:*:*:*:*",
            "matchCriteriaId" : "3D8C051F-56B7-4B6D-8357-4E1B76DAE024"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:s:*:8886:*:*:*:*:*",
            "matchCriteriaId" : "9AC31661-5830-4FB3-8970-7C26D0658BC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:t:*:8720:*:*:*:*:*",
            "matchCriteriaId" : "A7C6F823-C727-45DA-A623-3F95C92CFE76"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ibm:bladecenter:t:*:8730:*:*:*:*:*",
            "matchCriteriaId" : "9B853206-C826-4215-9A56-8CAF9D018603"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.louhinetworks.fi/advisory/ibm_090409.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502582/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34447",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/53660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.louhinetworks.fi/advisory/ibm_090409.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502582/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-14T15:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función cookedprint en ntpq/ntpq.c en ntpq en NTP versiones anteriores a v4.2.4p7-RC2 permite a servidores NTP remotos ejecutar código de su elección a través de respuestas manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:*:rc1:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.4p7",
            "matchCriteriaId" : "E94AD088-AEF8-4708-9EAE-1A46F7C4DC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AB2D70-2807-4970-ACD3-9B4751A1F9D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C78C19-5A09-4883-8144-AE861A244FEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "437C8BA8-F437-4166-838D-EDC64E7A67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104AEC97-3C2A-48D2-BA63-08502F88F8D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D67E30-E303-4F79-9929-4A5B587FCDB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BD95B5-322C-4CDC-A2DB-A06D4DA3B104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BD63969-D18D-41AF-9814-DA1A207BDE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EAD8958-173A-4FCC-9420-A148BA5F73E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B271F6AD-D829-4671-8FA7-7D921364B426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.0.97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C25E03A8-46B5-4AC7-8506-4C255D7CC400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.0.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C76CD53-CC9F-491A-952F-9A82D6E20058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E749D64E-5C47-4A34-9F3C-1D34F8348058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0C9CBB-D52F-4F7C-B343-E685A3996BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB90A3FB-B107-46CF-A846-48EE0EDF637A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088BFFA4-1AAB-4699-9793-F731A81B296A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3475779-383A-4128-9145-474EC08030FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.2p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "782BAA3D-A639-4B25-83F0-741074C88D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.2p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF367FA4-2C7F-4040-89DE-8A97A069A802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.2p3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D11498-3FC4-4890-9B10-BBA74A01C9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.2p4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D085796-5574-4EF3-8CD4-3CCEF2867823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E0D2303-95BD-4260-86FC-3DFED8532092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4p0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA843BCD-372A-42F5-A8C0-1AD32FA9E94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B980A178-2958-4B36-8AD8-3932B12C5A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D65210A-F80E-4019-91DA-49838369E03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4p3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29FAB224-3493-4273-A655-10BE44F5B5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4p4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093F0DD2-9E88-4138-AFF5-69105E7F2C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4p5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3590927-E242-411D-822A-33337D6B8A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4p6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20FCD55C-D4A8-4544-81AF-C920B3B48A2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.pardus.org.tr/show_bug.cgi?id=9532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=136482797910018&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ntp.bkbits.net:8080/ntp-stable/?PAGE=gnupatch&REV=1.1565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1039.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1040.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35137",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35138",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35166",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35169",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35253",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35308",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35336",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35630",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.566238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34481",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0999",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=490617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1651.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.ntp.org/bugs/show_bug.cgi?id=1144",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/777-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.pardus.org.tr/show_bug.cgi?id=9532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=136482797910018&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://ntp.bkbits.net:8080/ntp-stable/?PAGE=gnupatch&REV=1.1565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1039.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.566238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=490617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1651.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.ntp.org/bugs/show_bug.cgi?id=1144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/777-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0792",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-14T16:26:56.110",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain \"native color space,\" related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.  NOTE: this issue exists because of an incomplete fix for CVE-2009-0583."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de entero en icc.c en el International Color Consortium (ICC) Format library (también conocido como icclib), como lo utilizado en Ghostscript v8.64 y versiones anteriores y Argyll Color Management System (CMS) v1.0.3 y versiones anteriores, permite a atacantes dependientes de contexto provocar una denegación de servicio (desbordamiento de búfer basado en montículo y caída de aplicación) o posiblemente ejecutar código de su elección utilizado un fichero de dispositivo para una petición de traducción que opera en un fichero de imagen manipulado y tiene como objetivo un determinado \"espacio de color nativo,\" relacionado con un perfil ICC en un (1) PostScript o (2) fichero PDF file with embedded image con imágenes embebidas.\r\nNOTA: esta cuestión existe debido a una modificación inicial imcompleta de CVE-2009-0583."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.64",
            "matchCriteriaId" : "06B00D31-6A9C-44C2-AF0F-36F91CADCF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46BABB2-C49A-4EF4-9FD7-7E80EE7CF55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:7.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9ECC8F7-93FD-427D-8395-F1B025CA4322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:7.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63082C3-15B6-4DD8-8818-BFD61B054B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877DC36-5151-43C9-864D-BE7939A0304D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F9F0F0A-E413-42CC-B67D-434EC6A92543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "491F4BDC-33BD-4EA6-A19B-1066BBC9EBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA7298B-2552-45DF-AE6B-FC71ACF623E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A234A3-5FF9-4567-A731-3FFCD1965C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2916811-2ABD-4CC4-829B-AE805BA1BC6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265CBC8B-5EF6-4335-B3EC-FF93A1DF8A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "755FCEC1-E1DD-42BC-9606-17217DB69128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C3057C-9207-4BCD-88D4-625BE0EFAE85"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "E0589F5F-9A14-4664-96E2-D3AD5B1C4907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87EEDC44-2DEB-4C76-9B28-322093F2F8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC777BB-79B6-41F4-8756-E53630198D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E685ACA-3C9C-4A65-BCE4-3D4F663C938E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56941499-5BD0-4222-AD6C-D36DA165A02C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746233CB-AC91-404E-9763-797AD1DCAF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787A9326-05FB-4766-A8F5-06C31763D2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:0.7.0:beta_8:*:*:*:*:*:*",
            "matchCriteriaId" : "90A92F2B-E055-4FBF-BE3F-E115590F2685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E228BF5-1FD4-4507-8451-82975E209FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argyllcms:argyllcms:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1C3135-314E-48F7-A2A3-FC7FF071D1F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34373",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34667",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34711",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34726",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34732",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35559",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35569",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201412-17.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-155.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0060",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:095",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:096",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0420.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0421.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502757/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1708",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=491853",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50381",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11207",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/757-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00211.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00217.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00460.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00461.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201412-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-155.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0421.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502757/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=491853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/757-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00211.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00217.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00460.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00461.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-14T16:26:56.140",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UCM-CQ in IBM Rational ClearCase 7.0.0.x before 7.0.0.5, 7.0.1.x before 7.0.1.4, and 7.1.x before 7.1.0.1 on Linux and AIX places a username and password on the command line, which allows local users to obtain credentials by listing the process."
      }, {
        "lang" : "es",
        "value" : "UCM-CQ en IBM Rational ClearCase 7.0.0.x versiones anteriores a v7.0.0.5, 7.0.1.x versiones anteriores a v7.0.1.4, y 7.1.x versiones anteriores a v7.1.0.1 en Linux y AIX sitúa un nombre de usuario y una contraseña en la línea de comandos, lo cual permite a usuarios locales obtener credenciales listando el proceso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearcase:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9F09C7-CF4B-42FA-ADDD-189E60813590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearcase:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D00DF56-BFB1-4B91-95A4-0A2F33074AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearcase:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58FCE9A7-B9C0-470D-A71D-2A94F826A907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearcase:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E41B2A6E-F8F9-4D81-840A-B520BC557515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearcase:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63308FC2-AE4D-4D50-B969-6AB28A77E550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearcase:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED125939-3657-45AC-8F41-F61B08B4A220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearcase:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89778E9A-90E8-4467-A33B-5F2BB0762A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearcase:7.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCCE7749-300A-452B-B428-9CF1DB000205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearcase:7.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E293794-7223-46EE-BA6A-EF0535566312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearcase:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDAC2996-1ACC-423C-BEA5-D86652A748D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:unix:unix:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A7C398-5356-45D6-AA5C-53E63BC88DCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34689",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK75832",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK75832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0077",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-15T08:00:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2004 SP3, 2006, 2006 Supportability Update, and 2006 SP1; does not properly manage the session state of web listeners, which allows remote attackers to cause a denial of service (many stale sessions) via crafted packets, aka \"Web Proxy TCP State Limited Denial of Service Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El motor del cortafuegos en Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); e Internet Security and Acceleration (ISA) Server 2004 SP3, 2006, 2006 Supportability Update, y 2006 SP1; no gestiona adecuadamente el estado de sesión de los oyentes web, lo que permite a atacantes remotos provocar una denegación de servicio (muchas sesiones caducadas)a través de paquetes manipulados, también conocido como \"Vulnerabilidad de denegación de servicio de limitada por el estado TCP del Web Proxy\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_threat_management_gateway:-:-:medium_business:*:*:*:*:*",
            "matchCriteriaId" : "034CCD4A-9B8D-466F-AEE7-82D25613BA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2004:sp3:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "234D43DB-0FC3-4B94-8883-EEE99A427E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2004:sp3:standard:*:*:*:*:*",
            "matchCriteriaId" : "64ACA6AB-44C3-4B33-BEA1-04DFF004FA7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2006:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "62CDCE9A-440C-4268-9430-BCD5E79D6ABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2006:supportability:*:*:*:*:*:*",
            "matchCriteriaId" : "9171409D-53E1-472B-A8E8-A3471C4F3BC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53636",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34687",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022045",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1030",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-016",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6068",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/53636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0078",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-15T08:00:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Management Instrumentation (WMI) provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka \"Windows WMI Service Isolation Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El proveedor Windows Management Instrumentation (WMI) en Microsoft Windows XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008 no implementa adecuadamente el aislamiento entre un conjunto de procesos distintos que (1) se ejecutan bajo la cuenta NetworkService o (2) se ejecutan bajo la cuenta LocalService, lo cual permite a usuarios locales conseguir privilegios accediendo a recursos de uno de los procesos, también conocido como \"Vulnerabilidad de aislamiento de Windows WMI Service\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*",
            "matchCriteriaId" : "C4BFF042-5C0B-482A-915B-3B9A267D2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "29EDE745-5A26-42BF-AFDE-7D985BB09D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A74985B6-BCA5-49E3-878B-77D7FA43070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53666",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022044",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1026",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6193",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/53666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0079",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-15T08:00:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka \"Windows RPCSS Service Isolation Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El servicio RPCSS en Microsoft Windows XP SP2 y SP3 y Server 2003 SP1 y SP2 no implementa adecuadamente el aislamiento entre los distintos procesos que (1) todo se ejecuta bajo la cuenta NetworkService o (2) todo se ejecuta bajo la cuenta LocalService, lo que permite a usuarios locales obtener privilegios para acceder a los recursos de uno de los procesos, también conocido como \"Vulnerabilidad de aislamiento de servicios RPCSS Windows\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "29EDE745-5A26-42BF-AFDE-7D985BB09D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53667",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022044",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1026",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6147",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/53667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0080",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-15T08:00:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ThreadPool class in Windows Vista Gold and SP1, and Server 2008, does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by leveraging incorrect thread ACLs to access the resources of one of the processes, aka \"Windows Thread Pool ACL Weakness Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "La clase ThreadPool en Windows Vista Gold y SP1, y Server 2008, no implementa adecuadamente el aislamiento entre un conjunto de procesos distintos que (1) se ejecutan bajo la cuenta NetworkService o (2) se ejecutan bajo la cuenta LocalService, lo cual permite a usuarios locales conseguir privilegios aprovechando hilos incorrectos ACLs para acceder a los recursos de uno de los procesos, también conocido como \"Vulnerabilidad Windows Thread Pool ACL Weakness\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32623D48-7000-4C7D-823F-7D2A9841D88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAEEA81-5037-4B68-98D9-83AAEBC98E20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "51160A46-6768-44D5-89CD-6DB9D2268A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7211B5C5-6B6E-4A33-88BC-1D64CD684204"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53668",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022044",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1026",
        "source" : "secure@microsoft.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6177",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/53668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0084",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-15T08:00:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka \"MJPEG Decompression Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "DirectShow en Microsoft DirectX v8.1 y v9.0 no descomprime adecuadamente ficheros multimedia, lo cual permite a atacantes remotos ejecutar código de su elección a través de un (1) fichero MJPEG manipulado o (2) cadena video, también conocido como \"Vulnerabilidad de Descompresión MJPEG\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF0278F-AFA7-48BA-8762-5569EC174AEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2936E9C2-65E6-4D26-A277-FF2AE13A3FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:9.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F096A3-DD19-4D54-94F4-027DBDF1A705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:9.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A8E96E-F752-43D2-83C3-877DE1042B80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:9.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44C68B75-2B7A-450B-BA1B-03E77E03B59B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "29EDE745-5A26-42BF-AFDE-7D985BB09D44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53632",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34665",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-132.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.piotrbania.com/all/adv/ms-directx-mjpeg-adv.txt",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34460",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022040",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1025",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-011",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5618",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/53632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-132.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.piotrbania.com/all/adv/ms-directx-mjpeg-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0086",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-15T08:00:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote HTTP servers to execute arbitrary code via crafted parameter values in a response, related to error handling, aka \"Windows HTTP Services Integer Underflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento inferior de entero en Windows HTTP Services (también conocido como WinHTTP) en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008 permite a servidores HTTP remotos ejecutar código de su elección a través de valores del parámetros manipulados en una respuesta, relacionado con un manejador de error, también conocido como \"Vulnerabilidad de desbordamiento inferior de entero en Windows HTTP Services\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*",
            "matchCriteriaId" : "C4BFF042-5C0B-482A-915B-3B9A267D2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53620",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34677",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34435",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022041",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1027",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6149",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/53620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0087",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-15T08:00:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and the Word 6 text converter in Microsoft Office Word 2000 SP3 and 2002 SP3; allows remote attackers to execute arbitrary code via a crafted Word 6 file that contains malformed data, aka \"WordPad and Office Text Converter Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el conversor de texto Word 6 en WordPad en Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP1 y SP2; y el conversor de texto Word 6 en Microsoft Office Word 2000 SP3 y 2002 SP3; permite a atacantes remotos ejecutar código de su elección a través de ficheros Word 6 manipulados que contienen datos mal formados, también conocido como \"Vulnerabilidad de corrupción de memoria en WordPad y Conversor de Texto Office\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B2B207-751F-4596-B805-B4622E312B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E99B12F-0DB7-4D0F-AD54-DD906CC8E3BD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "91D15A98-9ABC-4D79-9550-364A6F52B2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE8F4276-4D97-480D-A542-FE9982FFD765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "5A5D4DFE-2F35-4A07-AA7F-7F545C61E00C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2978BF86-5A1A-438E-B81F-F360D0E30C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:itanium:*",
            "matchCriteriaId" : "39F303CD-DB64-4FE6-AB4F-461E5E8AFB83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "17804445-2C63-4381-A721-7F3BB3DC645F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "70C62E91-94D3-4534-985C-8236D71CC10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "ABBA5D64-4184-4420-B7D0-A4E41359AA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53662",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022043",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1024",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5799",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/53662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0088",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-15T08:00:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers to execute arbitrary code via a crafted WordPerfect 6.x file, related to an unspecified counter and control structures on the stack, aka \"Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El conversor WordPerfect 6.x en Microsoft Office Word 2000 SP3 y Microsoft Office Converter Pack no valida adecuadamente la longitud de una cadena no especificada, lo cual permite a atacantes remotos ejecutar código de su elección a través de un fichero WordPerfect 6.x manipulado, también conocido como \"Vulnerabilidad de corrupción de pila en el conversor Word 2000 WordPerfect 6.x\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_converter_pack:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6150F14-FF1A-4A2B-8114-B539520E585F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B2B207-751F-4596-B805-B4622E312B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E99B12F-0DB7-4D0F-AD54-DD906CC8E3BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "29EDE745-5A26-42BF-AFDE-7D985BB09D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=782",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/53663",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022043",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1024",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5736",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0089",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-15T08:00:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Vista Gold allows remote web servers to impersonate arbitrary https web sites by using DNS spoofing to \"forward a connection\" to a different https web site that has a valid certificate matching its own domain name, but not a certificate matching the domain name of the host requested by the user, aka \"Windows HTTP Services Certificate Name Mismatch Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Servicios Windows HTTP (también conocido como WinHTTP) en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, y Vista Gold permite a servidores web remotos suplantar sitios web https de su elección utilizando envenenamiento de DNS \"reenvío de conexión\" a  un sitio web https diferente que tiene un certificado válido coincidiendo con su propio nombre de dominio, pero un certificado no coincide con el nombre de dominio del host solicitado por el usuario, también conocido como \"Vulnerabilidad de desajuste de nombre de certificado en servicios Windows HTTP\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "D34A558F-A656-43EB-AC52-C3710F77CDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "29EDE745-5A26-42BF-AFDE-7D985BB09D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34677",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34437",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022041",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1027",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6027",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0100",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-15T08:00:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel in Microsoft Office 2004 and 2008 for Mac; Microsoft Office Excel Viewer and Excel Viewer 2003 SP3; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 do not properly parse the Excel spreadsheet file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that contains a malformed object with \"an offset and a two-byte value\" that trigger a memory calculation error, aka \"Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, y 2007 SP1; Excel en Microsoft Office 2004 y 2008 para Mac; Microsoft Office Excel Viewer y Excel Viewer 2003 SP3; y Microsoft Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats SP1 no parsea adecuadamente el fichero con formato de hoja de cálculo Excel, lo cual permite a atacantes remotos ejecutar código de su elección a través de una hoja de cálculo manipulada que contiene un objeto mal formado, también conocido como \"Vulnerabilidad de corrupción de memoria\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "5BA91840-371C-4282-9F7F-B393F785D260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "806086B6-AB83-4008-A1A2-73BC35A95925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "ECDF1C1D-EF63-4A3E-AEE2-2D2D9FDBF368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "AD22DBA8-40B0-4197-9D56-38D5D9E1ED89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "297A9F48-13DF-4042-AC21-B8B764B217BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2613CE-C469-43AE-A590-87CE1FAADA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B18C291F-57C2-4328-8FCF-3C1A27B0D18D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53665",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.fortiguardcenter.com/advisory/FGA-2009-16.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502696/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022039",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1023",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6043",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/53665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fortiguardcenter.com/advisory/FGA-2009-16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502696/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0235",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-15T08:00:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Word 97 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Word 97 file that triggers memory corruption, related to use of inconsistent integer data sizes for an unspecified length field, aka \"WordPad Word 97 Text Converter Stack Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el conversor de texto Word 97 en WordPad en Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP1 y SP2 permite a atacantes remotos ejecutar código de su elección a través de ficheros Word 97 manipulados que disparan corrupción de memoria, también conocido como \"Vulnerabilidad de desbordamiento de pila en el conversor de texto WordPad Word 97\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE8F4276-4D97-480D-A542-FE9982FFD765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2978BF86-5A1A-438E-B81F-F360D0E30C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=783",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/53664",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34470",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022043",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1024",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5893",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0237",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-15T08:00:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in cookieauth.dll in the HTML forms authentication component in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2006, 2006 Supportability Update, and 2006 SP1; allows remote attackers to inject arbitrary web script or HTML via \"authentication input\" to this component, aka \"Cross-Site Scripting Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en cookieauth.dll en el componente HTML forms authentication en Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); e Internet Security and Acceleration (ISA) Server 2006, 2006 Supportability Update, y 2006 SP1; permite a atacantes remotos inyectar código web script o HTML de su elección a través de \"entrada de autenticación\" a este componente, también conocido como \"Vulnerabilidad de secuencias de comandos en sitios cruzados\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_threat_management_gateway:-:-:medium_business:*:*:*:*:*",
            "matchCriteriaId" : "034CCD4A-9B8D-466F-AEE7-82D25613BA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2004:sp3:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "234D43DB-0FC3-4B94-8883-EEE99A427E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2004:sp3:standard:*:*:*:*:*",
            "matchCriteriaId" : "64ACA6AB-44C3-4B33-BEA1-04DFF004FA7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2006:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "62CDCE9A-440C-4268-9430-BCD5E79D6ABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2006:supportability:*:*:*:*:*:*",
            "matchCriteriaId" : "9171409D-53E1-472B-A8E8-A3471C4F3BC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53637",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34687",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022046",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1030",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-016",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5771",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/53637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0550",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-15T08:00:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008; and WinINet in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008; allows remote web servers to capture and replay NTLM credentials, and execute arbitrary code, via vectors related to absence of a \"credential-reflection protections\" opt-in step, aka \"Windows HTTP Services Credential Reflection Vulnerability\" and \"WinINet Credential Reflection Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Windows HTTP Services (también conocido como WinHTTP) en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008; y WinINet en Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 y 7 en Windows XP SP2 y SP3, 6 y 7 en Windows Server 2003 SP1 y SP2, 7 en Windows Vista Gold y SP1, y 7 en Windows Server 2008; permite a servidores web remotos capturar y reproducir credenciales NTLM, y ejecutar código de su elección, a través de vectores relacionados con la falta de \"protecciones credencial-reflexión\" paso opt-in, también conocido como \"Vulnerabilidad de Reflexión de Credencial en Servicios HTTP de Windows\" y \"Vulnerablidad de Reflexión de Credencial WinINet\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "29EDE745-5A26-42BF-AFDE-7D985BB09D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "29EDE745-5A26-42BF-AFDE-7D985BB09D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*",
            "matchCriteriaId" : "C4BFF042-5C0B-482A-915B-3B9A267D2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/srd/archive/2009/04/14/ntlm-credential-reflection-updates-for-http-clients.aspx",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/53619",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34677",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34678",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=871138",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34439",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022041",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1027",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1028",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5320",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6233",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7569",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/04/14/ntlm-credential-reflection-updates-for-http-clients.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=871138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0551",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-15T08:00:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 does not properly handle transition errors in a request for one HTTP document followed by a request for a second HTTP document, which allows remote attackers to execute arbitrary code via vectors involving (1) multiple crafted pages on a web site or (2) a web page with crafted inline content such as banner advertisements, aka \"Page Transition Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer v6 SP1, v6 y v7 en Windows XP SP2 y SP3, v6 y v7 en Windows Server 2003 SP1 y SP2, v7 en Windows Vista Gold y SP1, y v7 en Windows Server 2008 no maneja adecuadamente errores de transición en una petición a un documento HTTP seguido de una petición a un segundo documento HTTP, lo que permite a atacantes remotos ejecutar código de su elección a través de vectores relacionados (1) múltiples páginas manipuladas en un sitio Web (2) una página Web con líneas de contenido manipulado como publicidad en forma de banner, también conocido como \"Vulnerabilidad de Corrupción de Memoria en transición de página\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "29EDE745-5A26-42BF-AFDE-7D985BB09D44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*",
            "matchCriteriaId" : "C4BFF042-5C0B-482A-915B-3B9A267D2D96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53624",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34678",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=871138",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022042",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1028",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6164",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/53624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=871138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0552",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-15T08:00:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 on Windows XP SP2 and SP3, and 6 on Windows Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka \"Uninitialized Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 en Windows XP SP2 y SP3, y 6 en Windows Server 2003 SP1 y SP2 permite a atacantes remotos ejecutar código de su elección a través de una página web que dispara la presencia de un objeto en memoria que (1) no fue inicializado adecuadamente o (2) borrado, también conocido como \"Vulnerabilidad de corrupción de memoria sin inicializar\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "29EDE745-5A26-42BF-AFDE-7D985BB09D44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53625",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34678",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022042",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1028",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5551",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/53625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0553",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-15T08:00:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka \"Uninitialized Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6 SP1, 6 y 7 en Windows XP SP2 y SP3, 6 y 7 en Windows Server 2003 SP1 y SP2, 7 en Windows Vista Gold y SP1, y 7 en Windows Server 2008 permite a atacantes remotos ejecutar código de su elección a través de una página web que dispara la presencia de un objeto en memoria que (1) no fue inicializado adecuadamente o (2) borrado, también conocido como \"Vulnerabilidad de corrupción de memoria no inicializada\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "29EDE745-5A26-42BF-AFDE-7D985BB09D44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*",
            "matchCriteriaId" : "C4BFF042-5C0B-482A-915B-3B9A267D2D96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53626",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34678",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://skypher.com/index.php/2009/04/19/ms09-014-embed-element-memory-corruption/",
        "source" : "secure@microsoft.com",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34424",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022042",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1028",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6069",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/53626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://skypher.com/index.php/2009/04/19/ms09-014-embed-element-memory-corruption/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0554",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-04-15T08:00:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka \"Uninitialized Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer v5.01 SP4, v6 SP1, v6 y v7 en Windows XP SP2 y SP3, v6 y v7 en Windows Server 2003 SP1 y SP2, v7 en Windows Vista Gold y SP1, y v7 en Windows Server 2008 permite a atacantes remotos ejecutar código de su elección a través de una página web que lanza la presencia de un objeto en memoria que (1) no había sido iniciado adecuadamente o (2) eliminado, también conocido como \"Vulnerabilidad de Corrupción de Memoria no Iniciada\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "29EDE745-5A26-42BF-AFDE-7D985BB09D44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*",
            "matchCriteriaId" : "C4BFF042-5C0B-482A-915B-3B9A267D2D96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34678",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022042",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1028",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5723",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/34678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-104A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-15T10:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted IOCTL request to pgpdisk.sys, and (2) cause a denial of service (crash) and execute arbitrary code via a crafted IRP in an IOCTL request to pgpwded.sys."
      }, {
        "lang" : "es",
        "value" : "PGP Desktop anterior a v9.10 permite a usuarios locales (1) provocar una denegación de servicio (caída) a través de peticiones IOCTL manipuladas en pgpdisk.sys, y (2) provocar una denegación de servicio (caída) y ejecutar código de su elección a través de una petición IOCTL con IRP manipulado en pgpwded.sys."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgp:desktop:*:-:home:*:*:*:*:*",
            "versionEndIncluding" : "9.9.0",
            "matchCriteriaId" : "8A96A401-F0D4-4B5B-A54D-81AF805BEA72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgp:desktop:*:-:pro:*:*:*:*:*",
            "versionEndIncluding" : "9.9.0",
            "matchCriteriaId" : "D13E822C-2401-4BA2-9F58-BA5A65BB5B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgp:desktop:8.0:*:home:*:*:*:*:*",
            "matchCriteriaId" : "0745A00E-1A44-475D-A39B-6597CDB27AEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgp:desktop:8.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "EEE891C4-7A40-4FF8-99A6-0CB57653B364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgp:desktop:9.0:*:home:*:*:*:*:*",
            "matchCriteriaId" : "F1A4562F-4959-44F9-AFEC-21D640E7B640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgp:desktop:9.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "5B5BCE69-AA38-4321-8B95-A3CFDFCBC9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgp:desktop:9.0.6:-:home:*:*:*:*:*",
            "matchCriteriaId" : "1739BE5D-E639-4835-A080-E7D4B66EEEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgp:desktop:9.0.6:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "FAD65FDF-B51D-4898-8A09-0031BBACE335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://en.securitylab.ru/lab/PT-2009-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502633/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://pgp.custhelp.com/cgi-bin/pgp.cfg/php/enduser/std_adp.php?p_faqid=1014&p_topview=1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://en.securitylab.ru/lab/PT-2009-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502633/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://pgp.custhelp.com/cgi-bin/pgp.cfg/php/enduser/std_adp.php?p_faqid=1014&p_topview=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0972",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Workspace Manager component in Oracle Database 11.1.0.6, 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Workspace Manager en Oracle Database v11.1.0.6, v11.1.0.7, v10.2.0.3, v10.2.0.4, v10.1.0.5, v9.2.0.8, y v9.2.0.8DV permite a usuarios remotos autenticados afectar a la confidencialidad, integridadad y disponibilidad mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432A3020-9977-4A10-9CDA-3A71E83F63F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C10722-4CC7-4C06-8DBC-4D96307DB41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED41086B-840A-4B39-B249-461A4B00B57B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC251D-9313-4A54-9623-51DC0AEC46FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEDE937-C3D7-421C-9F70-F546AB823E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0973",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Cluster Ready Services component in Oracle Database 10.1.0.5 allows remote attackers to affect availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Cluster Ready Services en Oracle Database v10.1.0.5 permite a atacantes remotos afectar a la disponibilidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9DC5FD-9892-47BD-8F35-A3D4556952A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53736",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0974",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2009-0983 and CVE-2009-3407."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Portal en Oracle Application Server 10.1.2.3 y 10.1.4.2 permite a atacantes remotos afectar la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-0983 y CVE-2009-3407."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "415018EB-2D62-49B5-BBBE-E8276400A1BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C64FECA-B451-4648-AFDE-194F36527A59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53751",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0975",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0978."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Workspace Manager en Oracle Database 10.2.0.4 y 11.1.0.6 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-0978."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7940F99-44F2-499B-ABEC-997B9BF7EE1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53732",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0976",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to LTADM."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente Workspace Manager en Oracle Database v10.2.0.4 y v11.1.0.6 permite a usuarios remotos autenticados afectar a la confidencialidad y la integridad, relacionado con LTADM."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7940F99-44F2-499B-ABEC-997B9BF7EE1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53733",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0977",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN.  NOTE: the previous information was obtained from the April 2009 CPU.  Oracle has not commented on reliable researcher claims that this issue is SQL injection in the GRANT_TYPE_ACCESS procedure in the DBMS_AQADM_SYS package."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Advanced Queuing en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5 y v10.2.0.3 permite a usuarios remotos autenticados afectar a la confidencialidad y la integridadad, en relación con DBMS_AQIN."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9DC5FD-9892-47BD-8F35-A3D4556952A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_10g:10.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6D836B0-A20F-49D8-9EE3-251BA2D28247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35853080-470C-415B-B15B-D93A6DE856FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FDC572-7FE0-41B2-99D6-139819781038"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_aqadm_sys.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502727/100/0/threaded",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_aqadm_sys.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502727/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0978",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0975."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Workspace Manager en Oracle Database 10.2.0.4 y 11.1.0.6 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-0975."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7940F99-44F2-499B-ABEC-997B9BF7EE1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53734",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0979",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Resource Manager component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Resource Manager en Oracle Database v9.2.0.8 y v9.2.0.8DV permite a usuarios remotos autenticados afectar a la confidencialidad, integridadad y disponibilidad mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35853080-470C-415B-B15B-D93A6DE856FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FDC572-7FE0-41B2-99D6-139819781038"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0980",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the SQLX Functions component in Oracle Database 10.2.0.3 and 11.1.0.6 allows remote authenticated users to affect integrity and availability, related to AGGXQIMP."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente SQLX Functions en Oracle Database v10.2.0.3 y v11.1.0.6 permite a usuarios remotos autenticados afectar a la disponibilidad y la integridad a través de vectores desconocidos, relacionado con AGGXQIMP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_10g:10.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6D836B0-A20F-49D8-9EE3-251BA2D28247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0981",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Application Express component in Oracle Database 11.1.0.7 allows remote authenticated users to affect confidentiality, related to APEX.  NOTE: the previous information was obtained from the April 2009 CPU.  Oracle has not commented on reliable researcher claims that this issue allows remote authenticated users to obtain APEX password hashes from the WWV_FLOW_USERS table via a SELECT statement."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Application Express en Oracle Database v11.1.0.7 permite a usuarios remotos autenticados afectar a la confidencialidad, en relación con APEX."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_11g:11.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086DC59A-A1F4-4345-B43E-6EE7E21AF0BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53738",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.red-database-security.com/advisory/apex_password_hashes.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502724/100/0/threaded",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8456",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/53738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/apex_password_hashes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502724/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0982",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote authenticated users to affect integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente PeopleSoft Enterprise PeopleTools en Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne v8.49.19 permite a usuarios autenticados remotamente afectar a la integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF1049F-38AF-49A7-98A1-10FCEE26760C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78CBB588-FC76-4DC3-9D7C-ED5E9249E59C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53759",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022057",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0983",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2009-0974 and CVE-2009-3407."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Portal en Oracle Application Server 10.1.2.3 y 10.1.4.2 permite a atacantes remotos afectar la integridad a través de vectores desconocidos, una vulnerabilidad diferente de CVE-2009-0974 y CVE-2009-3407."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "415018EB-2D62-49B5-BBBE-E8276400A1BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C64FECA-B451-4648-AFDE-194F36527A59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53752",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0984",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_SYS_SQL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Database Vault en Oracle Database v9.2.0.8DV, v10.2.0.4 y v11.1.0.6 permite a usuarios remotos autenticados afectar a la confidencialidad y la integridad, en relación con DBMS_SYS_SQL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7940F99-44F2-499B-ABEC-997B9BF7EE1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FDC572-7FE0-41B2-99D6-139819781038"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0985",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users with the IMP_FULL_DATABASE role to affect confidentiality, integrity, and availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Core RDBMS de Oracle Database v10.1.0.5, v10.2.0.4 y v11.1.0.6; permite a usuarios autenticados en remotos con el rol IMP_FULL_DATABASE comprometer la confidencialidad, integridad y disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9DC5FD-9892-47BD-8F35-A3D4556952A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7940F99-44F2-499B-ABEC-997B9BF7EE1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0986",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Workspace Manager en Oracle Database v10.2.0.4 y v11.1.0.6 permite a usuarios autenticados remotamente afectar a la confidencialidad, integridad, y disponibilidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7940F99-44F2-499B-ABEC-997B9BF7EE1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53735",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0988",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Password Policy component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Password Policy en Oracle Database v11.1.0.6 permite a usuarios remotos autenticados afectar a la confidencialidad mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53740",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0989",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0990."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente BI Publisher en Oracle Application Server 5.6.2, 10.1.3.2.1 y 10.1.3.3.3 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-0990."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C735B5E0-41E7-42E5-BAB3-7D2BB1F71B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE83AB53-83DF-4688-B597-35B021797504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FBC5D4-270E-432A-8E04-CEBEF8163691"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53742",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0990",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0989."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente BI Publisher en Oracle Application Server 5.6.2, 10.1.3.2.1 y 10.1.3.3.3 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-0989."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C735B5E0-41E7-42E5-BAB3-7D2BB1F71B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE83AB53-83DF-4688-B597-35B021797504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FBC5D4-270E-432A-8E04-CEBEF8163691"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53743",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0991",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-1970."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Listener en Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4 y 11.1.0.7 permite a atacantes remotos afectar la disponibilidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-1970."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9DC5FD-9892-47BD-8F35-A3D4556952A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7940F99-44F2-499B-ABEC-997B9BF7EE1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_11g:11.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086DC59A-A1F4-4345-B43E-6EE7E21AF0BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35853080-470C-415B-B15B-D93A6DE856FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FDC572-7FE0-41B2-99D6-139819781038"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53737",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50026",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/53737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0992",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is SQL injection in the DEQ_EXEJOB procedure."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Advanced Queuing en Oracle Database v10.1.0.5, v10.2.0.4, y v11.1.0.7 que permite a los usuarios remotos autenticados afectar a la confidencialidad e integridad, en relación a DBMS_AQIN."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9DC5FD-9892-47BD-8F35-A3D4556952A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7940F99-44F2-499B-ABEC-997B9BF7EE1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_11g:11.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086DC59A-A1F4-4345-B43E-6EE7E21AF0BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_aqin.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502723/100/0/threaded",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_aqin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502723/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0993",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the April 2009 CPU.  Oracle has not commented on reliable researcher claims that this issue is a format string vulnerability that allows remote attackers to execute arbitrary code via format string specifiers in an HTTP POST URI, which are not properly handled when logging to opmn/logs/opmn.log."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente OPMN en Oracle Application Server v10.1.2.3 permite a atacantes remotos afectar a la confidencialidad, la disponibilidad, y la integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "415018EB-2D62-49B5-BBBE-E8276400A1BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502683/100/0/threaded",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-017",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50030",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502683/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0994",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2009-1017."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente BI Publisher en Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3 y 10.1.3.4 permite a usuarios remotos autenticados afectar la confidencialidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-1017."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C735B5E0-41E7-42E5-BAB3-7D2BB1F71B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE83AB53-83DF-4688-B597-35B021797504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FBC5D4-270E-432A-8E04-CEBEF8163691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D41A0A9E-6B5B-4FA9-996B-E589B96C24D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53744",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0995",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 allows remote attackers to affect integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Applications Framework en Oracle E-Business Suite v12.0.6 y 11i10CU2 permite a atacantes remotos afectar a la integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11i10cu2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2EF5154-CDAC-49FB-B9A6-D52DC07CB5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite_12:12.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "522B4A4F-5702-4B4E-9215-1DB761E17228"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53754",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022056",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0996",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the BI Publisher component in Oracle Application Server 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente BI Publisher en Oracle Application Server v10.1.3.2.1, v10.1.3.3.3, y v10.1.3.4 permite a usuarios remotos autenticados afectar a la confidencialidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE83AB53-83DF-4688-B597-35B021797504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FBC5D4-270E-432A-8E04-CEBEF8163691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D41A0A9E-6B5B-4FA9-996B-E589B96C24D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53745",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0997",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Database Vault component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality, related to DBMS_SYS_SQL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Database Vault en Oracle Database v11.1.0.6 permite a los usuarios remotos autenticados afectar a la confidencialidad, en relación con DBMS_SYS_SQL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53739",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0998",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the PeopleSoft Enterprise HRMS - eBenefits component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente PeopleSoft Enterprise HRMS - eBenefits en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne v8.9.18 y v9.0.8 permite a usuarios autenticados remotamente afectar a la confidencialidad e integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.9.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2332EAE-75EE-415D-84A6-FE0A19D2C71B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:9.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6738B3-ED75-474D-847E-4A4AD1B56959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78CBB588-FC76-4DC3-9D7C-ED5E9249E59C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53758",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0999",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Application Object Library en Oracle E-Business Suite v12.0.6 que permite a los atacantes remotos afectar a la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53753",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022056",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1000",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 uses default passwords for unspecified \"FND Applications Users (not DB users),\" which has unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "El componente Oracle Applications Framework de Oracle E-Business Suite v12.0.6 y 11i10CU2, utiliza contraseñas por defecto para para \"Usuarios de Aplicaciones FND (no usuarios BD)\" no especificados. Esto tiene un impacto y vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11i10cu2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2EF5154-CDAC-49FB-B9A6-D52DC07CB5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53755",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022056",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1001",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle BEA WebLogic Portal 8.1 Gold through SP6 allows remote authenticated users to gain privileges via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente WebLogic Portal en BEA Product Suite v8.1 SP6 que permite a los usuarios autenticados afectar a la confidencialidad e integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "0B8AB045-051A-477E-B2F7-4057826C43F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53767",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/wls-security/1001.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022059",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50053",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/53767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/wls-security/1001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1002",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle BEA WebLogic Server 10.3, 10.0 Gold through MP1, 9.2 Gold through MP3, 9.1, 9.0, 8.1 Gold through SP6, and 7.0 Gold through SP7 allows remote attackers to gain privileges via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente WebLogic Server en BEA Product Suite v10.3, v10.0 MP1, v9.2 MP3, v9.1, v9.0, v8.1 SP6, y v7.0 SP7 permite a los atacantes afectar a la confidencialidad e integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "6859E096-4FA7-4797-B2D6-C5CE15D2078C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "0B8AB045-051A-477E-B2F7-4057826C43F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09215858-8A4F-4595-98DD-39027EC6CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A7390B6A-7944-4509-B499-5B51DB9BF42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*",
            "matchCriteriaId" : "193516AD-8096-4A6E-9C4B-4B9717DD7021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/wls-security/1002.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022059",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50052",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/wls-security/1002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1003",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, and 9.0 allows remote attackers to affect integrity via unknown vectors related to \"access to source code of web pages.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente WebLogic Server de BEA Product Suite v10.3, v10.0 MP1, v9.2 MP3, v9.1 y v9.0; permite a atacantes remotos comprometer la integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09215858-8A4F-4595-98DD-39027EC6CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A7390B6A-7944-4509-B499-5B51DB9BF42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*",
            "matchCriteriaId" : "193516AD-8096-4A6E-9C4B-4B9717DD7021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53762",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/wls-security/1003.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022059",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50054",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/53762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/wls-security/1003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1004",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality and integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente WebLogic Server en BEA Product Suite v10.3 permite a atacantes remotos afectar a la confidencialidad e integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022059",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1005",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Data Service Integrator (AquaLogic Data Services Platform) component in BEA Product Suite 10.3.0, 3.2, 3.0.1, and 3.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Data Service Integrator (AquaLogic Data Services Platform) en BEA Product Suite v10.3.0, v3.2, v3.0.1, and v3.0 que permite a los usuario locales afectar a la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 2.7,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC96C53F-BBC4-44F2-8CCC-5C1AD4E0AC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB55BA2-802E-4942-B641-8FC9B27FFAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F158161-3AAD-4F0A-9E8C-9D4669787317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0405C95B-CADF-4806-8ED1-D20575F4179B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53760",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/wls-security/1005.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022059",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/wls-security/1005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1006",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.2 and earlier, with SDK/JRE 1.4.2, JRE/JDK 5, and JRE/JDK 6, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente JRockit de BEA Product Suite R27.6.2 y anteriores, con SDK/JRE v1.4.2, JRE/JDK v5 y JRE/JDK v6; permite a atacantes remotos comprometer la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "r27.6.2",
            "matchCriteriaId" : "9608B08F-67D3-45CA-9F1E-22BB6C02E6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83DA137-A2FC-4E0F-B297-7D6FEBEF5FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDC15FE-3C16-433D-9D99-2B82727BD97F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "529D146C-4975-4A15-8818-59BE62202966"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB064B5E-06B4-48BD-9492-7BBBEDAA9978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC2BE68-DC4E-4B0B-85FE-27877657827D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4873B9FF-0BA4-45AE-834A-C23AE80A2B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39274558-2ECB-43CE-BAEF-DBD3AAC1BD05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72DA7B82-EC3B-4458-B040-6F9D1AE23DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r27.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "267F16DF-D868-4DD9-8670-01AC3CBCE716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164B5E91-F21A-4C99-A685-7332A85AF25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD7274B-EA02-49DE-9FA5-40DA26498191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BCE344-59AF-404B-9BC2-095562754184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r27.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D2BE6F9-6DAC-47B3-A9B6-10056E1E48F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jrockit:r27.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44280B48-5ECB-47B2-AE9E-0C6189B01A27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9B6F3-906D-4CCC-9655-99A1496B1475"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1264A513-5AE3-4F0E-8387-1F75EBAEA241"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63978872-E797-4F13-B0F9-98CB67D0962A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3241D774-D0F4-4529-A779-2F4F11813D18"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C502FE9-F61F-4316-AA33-B09FA8BA54DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "002CA86D-3090-4C7A-947A-21CB5D1ADD98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022059",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1008",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML, a different vulnerability than CVE-2009-1010."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Outside In Technology en Oracle Application Server 8.2.2 y 8.3.0 permite a usuarios locales afectar la confidencialidad, la integridad y la disponibilidad, relacionado con HTML, una vulnerabilidad diferente a CVE-2009-1010."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C753E1B-D81B-4995-877E-58EDD6F49DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092F8012-A1EE-46CE-B2B2-0604BF4ACBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618064A-3D05-4DC6-9A47-0EDF2427642F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1964FC-672F-4139-938F-A8EF9D86D9C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D303B0B9-CDAB-409B-AE44-512D4791C36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90EF7A4-8181-42C3-BB95-395D0DD94C14"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03943E63-9F03-45F9-9BE7-38C9B56C146A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F77E8E37-9AFB-4C1A-A1EC-ACCFB6AE0A16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53747",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21660640",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21660640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1009",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.1.9 allows local users to affect confidentiality, integrity, and availability, related to HTML."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Outside In Technology en Oracle Application Server v8.1.9 que permite a los usuarios locales afectar a la confidencialidad, integridad y disponibilidad en relación a HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:8.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D12B2DE-9584-4644-9A4E-6A627EF61D6D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C753E1B-D81B-4995-877E-58EDD6F49DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092F8012-A1EE-46CE-B2B2-0604BF4ACBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618064A-3D05-4DC6-9A47-0EDF2427642F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1964FC-672F-4139-938F-A8EF9D86D9C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D303B0B9-CDAB-409B-AE44-512D4791C36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90EF7A4-8181-42C3-BB95-395D0DD94C14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53748",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21660640",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21660640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1010",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:00.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML, a different vulnerability than CVE-2009-1008."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Outside In Technology en Oracle Application Server 8.2.2 y 8.3.0 permite a usuarios locales afectar la confidencialidad, la integridad y la disponibilidad, relacionado con HTML, una vulnerabilidad diferente a CVE-2009-1008."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C753E1B-D81B-4995-877E-58EDD6F49DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092F8012-A1EE-46CE-B2B2-0604BF4ACBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618064A-3D05-4DC6-9A47-0EDF2427642F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1964FC-672F-4139-938F-A8EF9D86D9C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D303B0B9-CDAB-409B-AE44-512D4791C36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90EF7A4-8181-42C3-BB95-395D0DD94C14"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03943E63-9F03-45F9-9BE7-38C9B56C146A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F77E8E37-9AFB-4C1A-A1EC-ACCFB6AE0A16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53749",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21660640",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21660640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1011",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:01.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML.  NOTE: the previous information was obtained from the April 2009 CPU.  Oracle has not commented on reliable researcher claims that this issue is for multiple integer overflows in a function that parses an optional data stream within a Microsoft Office file, leading to a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Outside In Technology en Oracle Application Server v8.2.2 y v8.3.0 permite a los usuarios locales afectar a la confidencialidad, integridad y disponibilidad relacionadas con HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03943E63-9F03-45F9-9BE7-38C9B56C146A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F77E8E37-9AFB-4C1A-A1EC-ACCFB6AE0A16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=798",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/53750",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21660640",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21660640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1012",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:01.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the plug-ins for Apache and IIS web servers in Oracle BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold through SP6, 9.0, 9.1, 9.2 Gold through MP3, 10.0 Gold through MP1, and 10.3 allows remote attackers to affect confidentiality, integrity, and availability.  NOTE: the previous information was obtained from the April 2009 CPU.  Oracle has not commented on claims from a reliable researcher that this is an integer overflow in an unspecified plug-in that parses HTTP requests, which leads to a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente WebLogic Server en BEA Product Suite v10.3, v10.0 MP1, v9.2 MP3, v9.1, v9.0, v8.1 SP6, y v7.0 SP7 permite a atacantes remotos afectar a la confidencialidad, integridad y disponibilidad, relacionada con IIS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "6859E096-4FA7-4797-B2D6-C5CE15D2078C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "0B8AB045-051A-477E-B2F7-4057826C43F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09215858-8A4F-4595-98DD-39027EC6CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A7390B6A-7944-4509-B499-5B51DB9BF42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*",
            "matchCriteriaId" : "193516AD-8096-4A6E-9C4B-4B9717DD7021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53765",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-22/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/wls-security/1012.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022059",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/64935",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/53765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-22/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/wls-security/1012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/64935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1013",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:01.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1014."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente PeopleSoft Enterprise PeopleTools en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.49.19 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-1014."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF1049F-38AF-49A7-98A1-10FCEE26760C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78CBB588-FC76-4DC3-9D7C-ED5E9249E59C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53756",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022057",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1014",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:01.063",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1013."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente PeopleSoft Enterprise PeopleTools en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.49.19 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-1013."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF1049F-38AF-49A7-98A1-10FCEE26760C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78CBB588-FC76-4DC3-9D7C-ED5E9249E59C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53757",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022057",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1016",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:01.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote authenticated users to affect confidentiality, integrity, and availability, related to IIS.  NOTE: the previous information was obtained from the April 2009 CPU.  Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow involving an unspecified Server Plug-in and a crafted SSL certificate."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente  WebLogic Server de BEA Product Suite v10.3, v10.0 MP1, v9.2 MP3, v9.1, v9.0, v8.1 SP6 y v7.0 SP7; permite a usuarios autenticados en remoto comprometer la confidencialidad, integridad y disponibilidad. Está relacionado con IIS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "6859E096-4FA7-4797-B2D6-C5CE15D2078C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "0B8AB045-051A-477E-B2F7-4057826C43F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09215858-8A4F-4595-98DD-39027EC6CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A7390B6A-7944-4509-B499-5B51DB9BF42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*",
            "matchCriteriaId" : "193516AD-8096-4A6E-9C4B-4B9717DD7021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/secunia_research/2009-23/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022059",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/64934",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-23/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/64934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1017",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-04-15T10:30:01.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2009-0994."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente BI Publisher en Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3 y 10.1.3.4 permite a usuarios remotos autenticados afectar la confidencialidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-0994."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C735B5E0-41E7-42E5-BAB3-7D2BB1F71B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE83AB53-83DF-4688-B597-35B021797504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FBC5D4-270E-432A-8E04-CEBEF8163691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D41A0A9E-6B5B-4FA9-996B-E589B96C24D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53746",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/53746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-105A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1119",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2009-04-15T19:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to (1) ctrlservice.exe or (2) rep_srv.exe, possibly related to an integer overflow."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en monticulo en EMC RepliStor v6.2 anterior a SP5 y v6.3 anterior a SP2 permite a atacantes remotos ejecutar código de su elección a través de un mensaje manipulado en (1) ctrlservice.exe o (2) rep_srv.exe, posiblemente relacionado con un desbordamiento de entero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:replistor:*:sp4:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "2F1EEE21-41FC-4377-B665-1A26DFDE8EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:replistor:*:sp1:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3",
            "matchCriteriaId" : "B05B45E7-02A9-4C05-B2E1-4FF063269939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34699",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fortiguardcenter.com/advisory/FGA-2009-13.html",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502575/100/0/threaded",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34449",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022026",
        "source" : "security_alert@emc.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1018",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.fortiguardcenter.com/advisory/FGA-2009-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502575/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0196",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-04-16T15:12:57.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol dictionary segment with a large run length value."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función big2_decode_symbol_dict (jbig2_symbol_dict.c) en la librería de decodificación JBIG2 (jbig2dec) en Ghostscript 8.64 y posiblemente versiones anteriores, permite a atacantes remotos ejecutar código de su elección mediante un fichero PDF que contenga un segmento de diccionario de símbolos JBIG2 con un valor grande de longitud de repetición(run length)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.64",
            "matchCriteriaId" : "06B00D31-6A9C-44C2-AF0F-36F91CADCF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E68242D-465A-443F-9D25-BE57F9080394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46BABB2-C49A-4EF4-9FD7-7E80EE7CF55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:7.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63082C3-15B6-4DD8-8818-BFD61B054B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9877DC36-5151-43C9-864D-BE7939A0304D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F9F0F0A-E413-42CC-B67D-434EC6A92543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "491F4BDC-33BD-4EA6-A19B-1066BBC9EBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA7298B-2552-45DF-AE6B-FC71ACF623E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A234A3-5FF9-4567-A731-3FFCD1965C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2916811-2ABD-4CC4-829B-AE805BA1BC6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B283683-D924-4C69-87F3-355ECC0DBA4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265CBC8B-5EF6-4335-B3EC-FF93A1DF8A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "755FCEC1-E1DD-42BC-9606-17217DB69128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostscript:ghostscript:8.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C3057C-9207-4BCD-88D4-625BE0EFAE85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://osvdb.org/53492",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34292",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34667",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/34729",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/34732",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/35559",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/35569",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-21/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201412-17.xml",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0060",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:095",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0421.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502586/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502757/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34445",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022029",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0983",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1708",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://bugzilla.redhat.com/attachment.cgi?id=337747",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10533",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://usn.ubuntu.com/757-1/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00460.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00461.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201412-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0421.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502586/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502757/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/attachment.cgi?id=337747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/757-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00460.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00461.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0579",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-16T15:12:57.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux-PAM before 1.0.4 does not enforce the minimum password age (MINDAYS) as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified."
      }, {
        "lang" : "es",
        "value" : "Linux-PAM antes de v1.0.4 no aplica la edad mínima de la contraseña (MINDAYS), tal como se especifica en /etc/shadow, lo que permite a usuarios locales eludir la política de seguridad y cambiar sus contraseñas antes de lo especificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "6B4EF54C-CE7D-4CCE-ACF2-3810C7ABFEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B59C70C7-FABE-4A45-A45D-2C7276D698DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA50D8F-D5A8-4123-93CF-E7714571F411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8820C0-1ECB-45AD-A573-5667F0D09776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D416053-0010-4B25-9F7C-6054C51C1685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97AB578-0E9E-4370-8379-0CD455F2D740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A6147C-CC0A-4C9F-B9A9-E144F2133592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DEF8EC8-0E0A-4C0A-95BE-FB7C23732083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A9AB1C-FDF8-4E98-8773-387E03CD93E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F94AA92-5854-46B9-8B3C-08FCC5B071CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5C0039-827C-45CD-99BE-95459006CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4256C34-DBCA-4FE0-96A5-874D7F00869A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2613D2-33C1-4132-AD9A-68190A59C0F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08FDE78F-119B-4FC8-BBFA-8048F2CF1227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A75789-F7EC-4D9C-942A-243DF92E5CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3753027E-D3A4-45D4-A3A3-2320C48AF6C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:0.99.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6533A629-6351-4831-BBF7-44718262FAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516F23F9-25B3-40DB-A3CA-2F1DE0678934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3ACA7F-D247-439C-8B5E-287EC5D236AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A30E5C3-501D-4DAA-B7F7-E42F98DEDBF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-pam:linux-pam:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC8C86C-9FC7-4838-BFD8-90431DEC4946"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514437",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34728",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34733",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00398.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00420.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/pam-list/2009-March/msg00006.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=487216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00398.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/pam-list/2009-March/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of pam as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.  Only PAM versions 1.x were affected.",
        "lastModified" : "2009-04-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-16T15:12:57.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x before 3.1.3.2 allows remote attackers to inject arbitrary PHP code into configuration files."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático en la función getConfigFile en setup/lib/ConfigFile.class.php en phpMyAdmin v3.x antes de v3.1.3.2 permite a atacantes remotos ejecutar código PHP de su elección en ficheros de configuración."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED38B88-A4D2-40B4-A5A8-A9FD1BCAAF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56908EFC-CCA8-4B22-8F8F-FB23C934D6E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400E2D41-CB1F-4E5C-B08D-35294F8D1402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBEBBAAF-BAA7-40E9-A0FF-F8618A3ED2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4AFEEBA-01BA-46D6-86A3-B1B5A8F1B5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F72014B-B168-4FFA-ADDC-86CE84D19681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFFE8553-D8FF-4BA3-9325-A3C366FDFBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "72CD1784-3F48-49B5-A154-61C1F7EC3F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAAA1171-F570-4E4D-B667-2D4C8F8ECDD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:1:*:*:*:*:*:*",
            "matchCriteriaId" : "F0BD3CDF-31C5-4B8A-8314-A5F0F9D28AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "278B4EF3-4331-4334-AB55-EC05C069F48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4943CF80-91E5-42CD-BD51-6CAFC83EA5A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_3_1_3/phpMyAdmin/setup/lib/ConfigFile.class.php?r1=12248&r2=12301&pathrev=12342",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security/PMASA-2009-4.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34526",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00442.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00452.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_3_1_3/phpMyAdmin/setup/lib/ConfigFile.class.php?r1=12248&r2=12301&pathrev=12342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security/PMASA-2009-4.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00442.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00452.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-16T15:12:57.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web login functionality (c/portal/login) in Novell Teaming 1.0 through SP3 (1.0.3) generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad de acceso web (c/portal/login) en Novell Teaming v1.0 a SP3 (1.0.3) genera diferentes mensajes de error en función de si el nombre de usuario es válido o inválid, lo que facilita a atacantes remotos descubrir los nombres de usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:teaming:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6512E489-A272-4A6F-919D-E947E49CC0FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:teaming:1.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "EFB7A6E2-2BF1-4999-9C21-EBAE0D6ADAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:teaming:1.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5B14AF-37D5-4BD8-B132-15AD5ACADC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:teaming:1.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "822B39AC-1892-4109-8FBE-E60A3B1766AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:teaming:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04F150F-BFA8-49BF-BA7A-2FEA386D60B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:teaming:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1135D3D2-92DC-424C-986C-034EFEC343DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:teaming:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBB9853-7AC0-4169-853B-4DED8B59FCC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7002997&sliceId=1&docTypeID=DT_TID_1_1&dialogID=33090060&stateId=1%200%2033084737",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502704/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34531",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.sec-consult.com/files/20090415-0-novell-teaming.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7002997&sliceId=1&docTypeID=DT_TID_1_1&dialogID=33090060&stateId=1%200%2033084737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502704/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.sec-consult.com/files/20090415-0-novell-teaming.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-16T15:12:57.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in web/guest/home in the Liferay 4.3.0 portal in Novell Teaming 1.0 through SP3 (1.0.3) allow remote attackers to inject arbitrary web script or HTML via the (1) p_p_state or (2) p_p_mode parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en web/guest/home en el portal Liferay v4.3.0 en Novell Teaming v1.0 a SP3 (1.0.3) permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) p_p_state or (2) p_p_mode."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:teaming:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6512E489-A272-4A6F-919D-E947E49CC0FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:teaming:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04F150F-BFA8-49BF-BA7A-2FEA386D60B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:teaming:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1135D3D2-92DC-424C-986C-034EFEC343DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:teaming:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBB9853-7AC0-4169-853B-4DED8B59FCC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liferay:liferay_enterprise_portal:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79819957-E04A-422D-A5F9-EC597C1BE32C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7002999&sliceId=1&docTypeID=DT_TID_1_1&dialogID=33090060&stateId=1%200%2033084737",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502704/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34531",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.sec-consult.com/files/20090415-0-novell-teaming.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7002999&sliceId=1&docTypeID=DT_TID_1_1&dialogID=33090060&stateId=1%200%2033084737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502704/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.sec-consult.com/files/20090415-0-novell-teaming.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-16T15:12:57.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "apt 0.7.20 does not check when the date command returns an \"invalid date\" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight."
      }, {
        "lang" : "es",
        "value" : "apt 0.7.20 no comprueba si el comando \"date\" devuelve un error de \"invalid date\" (fecha no válida) que puede prevenir a apt de la carga de actualizaciones de seguridad en zonas horarias para las cuales DST se produce a medianoche."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E05BE6-9BDF-441E-873E-A4D965B3494F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=523213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/08/11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/coreutils/+bug/354793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/762-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=523213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/08/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/coreutils/+bug/354793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/762-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1301",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-16T15:12:57.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in the store_id3_text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via an ID3 tag with a negative encoding value.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Error de presencia de signo entero en la función store_id3_text en el código ID3v2 en mpg123 antes de 1.7.2 permite a atacantes remotos provocar una denegación de servicio (acceso a memoria fuera de rango) y posiblemente ejecutar código de su elección mediante una etiqueta ID3 con un valor de codificación negativo. NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "EE444055-2ECC-4E90-BAEB-1D7F8A1C7045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:0.59m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46F3026-9958-460C-AB14-593C216E12D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:0.59n:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D782ECC-6223-4055-A812-36625B50517D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:0.59o:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74027FB8-195D-432C-A4AB-83829C81FFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:0.59p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2330232E-59BF-4885-84DC-879BAB98BA81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:0.59q:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124B56BC-EF2F-42D8-81B5-AD4E854CA9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:0.59r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8EEF7E-C6BB-4669-81D2-68AABF8A7686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:0.59s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1144518D-4069-4903-9B45-56C0E97BC992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:0.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F101A71C-6467-4008-9CCB-E2B9F69513FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5C11F12-01A2-48A7-9A4D-4D07E6C2D8D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93106E19-1059-4040-A5FA-569A1B7EF8C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7123CC8-1F0C-4069-A2DA-0A25418E551E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:pre0.59s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE94FDE-EC0C-48A1-A1E9-B4112CA4B0D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:pre0.59s_r11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9765C6AD-E1F0-421C-B7B1-C09AD83A3DB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=265342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34587",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_name=20090405211856.41696433%40sunscreen.local",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=673696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200904-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0936",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=265342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_name=20090405211856.41696433%40sunscreen.local",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=673696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200904-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T00:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de entero en FreeType v2.3.9 y anteriores permiten a atacantes remotos ejecutar código de su elección mediante vectores relacionados con valores grandes en ciertas entradas en (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, y (3) cff/cffload.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.9",
            "matchCriteriaId" : "7039ABA3-F36E-4337-8F61-470B2FA1C9EF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E8A89-7A16-411F-9D31-676313BB7244"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B68DF-1440-4587-8458-9C5F4D1E43F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:-:*:*:*:*:*:*",
            "matchCriteriaId" : "38C3AEB0-59E2-400A-8943-60C0A223B680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F13F07CC-739B-465C-9184-0E9D708BD4C7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "614C28E3-3645-4B20-95E5-42E7F123ADDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.6.0",
            "versionEndIncluding" : "10.6.4",
            "matchCriteriaId" : "C6DA1D55-B689-47CF-A55F-3C16DA4EFFFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1335E35A-D381-4056-9E78-37BC6DF8AD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.6.0",
            "versionEndIncluding" : "10.6.4",
            "matchCriteriaId" : "924AFEE6-E331-4E10-B1B8-1FF1FF801120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B4CD59-9F37-4EF0-BA43-427CFD6E1329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0545ec1ca36b27cb928128870a83e5f668980bc5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=79972af4f0485a11dcb19551356c45245749fc5b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=a18788b14db60ae3673f932249cd02d33a227c4e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34723",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34913",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34967",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35198",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35200",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35204",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35210",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-05.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270268-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4435",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1784",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:243",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0329.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1061.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1062.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34550",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-767-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1058",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=491384",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10149",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0545ec1ca36b27cb928128870a83e5f668980bc5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=79972af4f0485a11dcb19551356c45245749fc5b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=a18788b14db60ae3673f932249cd02d33a227c4e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270268-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1061.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1062.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-767-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=491384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T00:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension."
      }, {
        "lang" : "es",
        "value" : "body.asp en Web File Explorer v3.1 permite a atacantes remotos crear ficheros y ejecutar código de su elección mediante una acción \"savefile\" con el parámetro \"file\" conteniendo un nombre de fichero con una extensión ejecutable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webfileexplorer:web_file_explorer:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26608C9C-28DD-4C51-BD89-C17F7A9DB766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:08:51.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in AbleSpace 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) gid parameter to groups_profile.php, (2) cat_id and (3) razd_id parameters to adv_cat.php, and the (4) URL to blogs_full.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en AbleSpace 1.0 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"gid\" a groups_profile.php, (2) \"cat_id\" y (3) \"razd_id\" a adv_cat.php y (4) la URL a blogs_full.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abk-soft:ablespace:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF7D9A0-BEF0-4E83-BA04-FF847B523F06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=137",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502670/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34512",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502670/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1316",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:08:51.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in AbleSpace 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to events_view.php and the (2) id parameter to events_clndr_view.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en AbleSpace 1.0 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"eid\" a events_view.php y (2) \"id\" a events_clndr_view.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abk-soft:ablespace:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF7D9A0-BEF0-4E83-BA04-FF847B523F06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=137",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502670/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34512",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502670/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:08:51.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Aqua CMS 1.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) userSID cookie parameter to droplets/functions/base.php and the (2) username parameter to admin/index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Aqua CMS 1.1, cuando magic_quotes_gpc está deshabilitado, permiten a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) userSID cookie a droplets/functions/base.php y (2) username a admin/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aquacms:aqua_cms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BF40F5-A233-4945-A6E9-4934B0C98DEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34720",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34516",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:08:52.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en index.php en Jamroom v3.1.2, v3.2.3 a v3.2.6, v4.0.2, y posiblemente otras versiones antes de v3.4.0 permite a atacantes remotos incluir ficheros de su elección a través de secuencias de salto de directorio en el parámetro \"t\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C9C0E9-C1CC-4AA1-AE36-5550AE806649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD5550F-E364-4888-8A53-2A3DCE796A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:1.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "61367DA9-F651-4FB3-8D48-1AF26066C15D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:1.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "66CD47A2-E6E0-4079-B872-F890520FDC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:1.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA0695A-4CA9-4FE0-B9D1-A48335F57BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:1.0:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "4ABCF337-4928-45B8-8F99-725B5F081AEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:1.0:b5:*:*:*:*:*:*",
            "matchCriteriaId" : "28AB3D7B-7AE2-44C5-A704-825B33BFBB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C797B83-2A8C-49BE-8CDB-B6CFFBB9658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:2.0.9:a:*:*:*:*:*:*",
            "matchCriteriaId" : "38C2B402-A285-4959-B775-65B7A81AC242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD305738-CAF6-4D26-9C20-2E30BCCB4ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67567C47-1AC5-4916-99F2-B114E3B28087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC892073-E68B-4BC7-B327-5A50423D5CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2BAE01-7CA6-4883-A94B-F8DCA3664DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:2.60:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "922EBD12-2BDD-4DCB-95B4-859379699698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:2.60:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E76FF6-D673-410D-83D6-F120CBC916B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:2.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D96BCD95-57BE-49E3-AA36-553615FB8CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:2.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F370EE5-826A-4180-83AD-13391DF8C1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:2.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF74AC65-8D38-45F2-9D07-93414DDC3321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:2.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C09353-8A2D-4363-A44C-62EEDD6CD127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:2.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F08631D7-BD25-4EEB-A980-8BD959D65296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:2.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B03674-5C17-4867-A4B7-3F81F9F25E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:2.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137287E7-5927-495F-9B9F-D04AC7E528E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:2.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55161FB-A8BC-412D-8AF7-DBB50D251AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:2.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BAE9FF-377C-4DA8-BA15-6D54266B571A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5D230-4B3F-40B4-BA76-CF6ED80C6A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE9AC6B-DEDA-4898-8D77-E1D0FE16A5A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9222BC-4F3F-4ADA-BE29-C0E60D852B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "E269400E-65C9-4993-A469-C1722C72A89A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "A96EE17A-987A-4FA6-872C-2998F22A3B98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0:b5:*:*:*:*:*:*",
            "matchCriteriaId" : "718A7588-74E6-4601-B3B7-0C3EA0A0D021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0:b6:*:*:*:*:*:*",
            "matchCriteriaId" : "6370A2F4-2D59-404F-87C6-FEDCACD4A64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0:b7:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FFE8CE-0001-4221-A19C-2CB45A6CDA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0:b8:*:*:*:*:*:*",
            "matchCriteriaId" : "F9084E5E-29A9-4C1C-BBB4-0A05870908AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6947161-212C-48D0-A21F-DC5EFED5274B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "473AEE4B-3F73-49EB-8E30-B1AEF11DD9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F96B70-E44F-4392-9983-E395D27DDF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D8B1B7-2349-4E1F-B86F-C6CF5157F429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63A95CFA-5E47-4D8D-B5A7-38880FC9324B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E521F6F-D31C-4E08-AC06-120109DF4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B92F69F-85E9-4413-8474-24CF6186FB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DCA7B3B-3BBE-40E7-A750-D4911A7380AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1091207E-9F46-4F56-8D0F-C098BD2BBB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AE17521-A44E-4920-B50F-84EBA942D08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E46C8F-0B90-4583-A52E-933B7333F0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A911F967-8298-4C81-A6D3-0378595D41C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213CE4E8-54D1-479D-8227-94035A982155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151F9FC7-0BAB-463F-BD3A-2F8582AD1C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16CCF11C-2464-48E8-8049-4838092C6547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB674DC-97AB-4D45-BAF1-71AE18FAB3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D0AA62-0F61-490D-AFC6-E571F4646A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D88374-B90E-4E85-BFA9-C874ABA08B06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25655EBC-1E87-415E-9D20-0179F4FCD35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F208C24-E78B-49A0-8E61-90A1A7D475CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D49548E-EE58-4694-8099-032D3B65AA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DE05D9-4DC3-4F76-9314-E7AE267DA4DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC05C6F-2816-4486-8A2D-A40A523439F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF05E590-EDA4-4F52-A3D9-A7D070484A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34F3181-7CC9-45D4-AC45-D6A61AC58627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690D31B5-B81E-4FA7-8031-84438703490D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93B8842-96E2-4153-9F12-5A3A1DFB7C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1BB904-07E0-4C62-9365-C717D9FA18C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2BFB5B-BC98-4604-A3E1-1B703D1C1577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC0BC1D-8BFD-4A57-A160-959CB93DE303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA6F88A-C89F-4014-B1FD-BBBA8A68B5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.1.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "44456A6C-AF1D-445F-BF71-5A80008F84FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.1.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE15983-D025-47B0-87AB-B8E3818EA811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.1.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDCB191-2EB5-41C0-A354-6D790CF16083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E394BD3-8B2A-4896-868E-C4927356B486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41C8D61B-A5D8-4075-B2C6-119CC06AA4D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CC1F1D3-46B6-4AB2-9A5C-A13B89084031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "111054E3-3BD4-4E97-980B-1E1DC539182F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EC8F1C-4014-4DF2-AB32-6D82327FE793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8FDF4F-1F22-4E2B-A5F6-F69F6FC62FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C655733-74A4-4E0F-84EF-FE294F6753BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86D6AC4-4641-4874-A8D2-26E486EE6B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DCE23FB-700D-4E00-9B46-7AFD31D9358B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6366FFF-8412-465C-AA08-7C9366785059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1978E341-AF7E-49B8-8ADC-879F2B11D8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC99103B-A43D-4370-A70B-D9DD2C665056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1F953D-8D25-4395-8A86-4E2DD5B2399F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA61EDF9-CF08-407E-861E-98BF3B752834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A406E79C-13CF-48A3-943E-0AACC8050411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97B0CB1-E4D7-4210-933B-AD114EFF0D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE551F7B-0F0F-480D-BDD5-0E51ACB595ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C10A858B-6771-4E23-9E93-CCA37F21089E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93DD0B7C-609B-4E41-A44C-1F3B607EBC70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7DC010-399B-4DC7-82BC-BC2CAF19AD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95BFE507-492C-452C-9BF1-3A38FC16D858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB32428-77AA-44D0-9CBD-DFE7A1CFAD90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1470",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34511",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:08:52.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in includes/ini.inc.php in GuestCal 2.1 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the lang parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en includes/ini.inc.php en GuestCal 2.1 permite a atacantes remotos incluir y ejecutar ficheros de su elección mediante un .. (punto punto) en el parámetro \"lang\" a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guestcal:guest_cal:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA973C4-D8D0-4692-9936-89DA42E02472"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34721",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34519",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:08:52.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in include/zstore.php in Zazzle Store Builder 1.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) gridPage and (2) gridSort parameters.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en include/zstore.php en Zazzle Store Builder v1.0.2 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) gridPage y (2) gridSort. NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zazzle:store_builder:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4539CBF4-EC54-41F3-BFF6-C096151D7C08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://holisticinfosec.org/content/view/102/45/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34009",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://holisticinfosec.org/content/view/102/45/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:08:52.063",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.asp en ASP Product Catalog v1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"keywords\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:humayun_shabbir_bhutta:asp_product_catalog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6F3715-533E-4B6A-B91A-8C4BD4EBCFC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34504",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:08:52.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for database/aspProductCatalog.mdb."
      }, {
        "lang" : "es",
        "value" : "ASP Product Catalog 1.0 almacena información sensible bajo la raíz web con insuficiente control de acceso, lo que permite a atacantes remotos descargar una base de datos con las credenciales de usuario a través de una petición directa de database/aspProductCatalog.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:humayun_shabbir_bhutta:asp_product_catalog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6F3715-533E-4B6A-B91A-8C4BD4EBCFC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:08:52.110",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en body.asp in Web File Explorer v3.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webfileexplorer:web_file_explorer:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26608C9C-28DD-4C51-BD89-C17F7A9DB766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34648",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34462",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:08:52.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Mini-stream ASX a MP3 Converter v3.0.0.7 permite a atacantes remotos ejecutar código de su elección mediante una URI de gran tamaño en un fichero playlist (.m3u)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-stream:asx_to_mp3_converter:3.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EF8AB4-5A27-44BE-BF36-D7BE9A469A51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34681",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34494",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:08:52.157",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Mini-stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Mini-stream Ripper v3.0.1.1 permite a atacantes remotos ejecutar código de su elección mediante una URI de gran tamaño en un fichero playlist (.m3u)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-stream:ripper:3.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F4D1F4-1928-47BC-8060-694755E8441E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34692",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34494",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:08:52.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Mini-stream RM Downloader v3.0.0.9 permite a atacantes remotos ejecutar código de su elección mediante una URI de gran tamaño en un fichero playlist (.m3u)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-stream:rm_downloader:3.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A33CA1-7981-4B92-B0F8-7E7B5FC82A1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34647",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34494",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:08:52.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Mini-stream WM Downloader v3.0.0.9 permite a atacantes remotos ejecutar código de su elección mediante una URI de gran tamaño en un fichero playlist (.m3u)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-stream:wm_downloader:3.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E832D6-3D03-49EA-95A4-591C7CBB312B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34674",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34494",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:08:52.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Mini-stream RM-MP3 Converter 3.0.0.7 permite a atacantes remotos ejecutar código de su elección mediante una URI de gran tamaño en un fichero playlist (.m3u)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-stream:rm-mp3_converter:3.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AE52CE-7BD0-4B5F-B3F6-EDEAF8C01D46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34653",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34494",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:08:52.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Mini-stream Shadow Stream Recorder 3.0.1.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Mini-stream Shadow Stream Recorder 3.0.1.7 permite a atacantes remotos ejecutar código de su elección mediante una URI de gran tamaño en un fichero playlist (.m3u)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-stream:shadow_stream_recorder:3.0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CE478B-5933-40B2-B85B-285731B58FD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34719",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34494",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8405/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8405/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:08:52.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long filename in a playlist (.pls) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Easy RM a MP3 Converter permite a atacantes remotos ejecutar código de su elección mediante un nombre de fichero de gran tamaño en un fichero playlist (.pls)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-stream:easy_rm_to_mp3_converter:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD1F226-B118-43CF-AC7A-C276C94A28B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34514",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/39933/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/39933/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0038",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-17T14:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4) description parameter to console/portal/Server/Monitoring; or (5) the PATH_INFO to the default URI under console/portal/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la consola de administración web en Apache Geronimo Application Server 2.1 a 2.1.3 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) name, (2) ip, (3) username, o (4) description para console/portal/Server/Monitoring; o (5) el PATH_INFO para la URI por defecto bajo console/portal/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geronimo:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF8E5A6-BCAA-428E-A703-6D1508AE2DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geronimo:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7353F7C5-18E8-4310-B31E-9B13963E3F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geronimo:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F4CBB7-FF16-4B01-85B2-5B3FE7C8BE3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geronimo:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366DB1DC-39E2-43A1-9A23-37B7A75F7D07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=119",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://issues.apache.org/jira/browse/GERONIMO-4597",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34715",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502734/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34562",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1089",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://issues.apache.org/jira/browse/GERONIMO-4597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502734/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0039",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-17T14:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to hijack the authentication of administrators for requests that (1) change the web administration password, (2) upload applications, and perform unspecified other administrative actions, as demonstrated by (3) a Shutdown request to console/portal//Server/Shutdown."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en la consola de administración web en Apache Geronimo Application Server 2.1 a 2.1.3 permite a atacantes remotos realizar acciones no autorizadas como administradores para peticiones que (1) cambian la contraseña de administración de la web, (2) suben aplicaciones y realizan otras acciones de administración no especificadas como es demuestrado por (3) una petición de apagado a console/portal//Server/Shutdown."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geronimo:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF8E5A6-BCAA-428E-A703-6D1508AE2DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geronimo:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7353F7C5-18E8-4310-B31E-9B13963E3F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geronimo:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F4CBB7-FF16-4B01-85B2-5B3FE7C8BE3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geronimo:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366DB1DC-39E2-43A1-9A23-37B7A75F7D07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=120",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://issues.apache.org/jira/browse/GERONIMO-4597",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34715",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502735/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34562",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1089",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://issues.apache.org/jira/browse/GERONIMO-4597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502735/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1185",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-17T14:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space."
      }, {
        "lang" : "es",
        "value" : "udev antes de v1.4.1 no verifica si un mensaje NETLINK es generado desde el espacio del kernel, lo que permite a usuarios locales obtener privilegios mediante el envio de un mensaje NETLIINK desde el espacio de usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:udev_project:udev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "141",
            "matchCriteriaId" : "7F3E9D80-7648-4B88-AD14-EB45BF4A4284"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E135846-8959-4D7E-A8E6-07F0EC15F010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_debuginfo:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C76D0C17-2AFF-4209-BBCD-36166DF7F974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B68DF-1440-4587-8458-9C5F4D1E43F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "513797E6-FCE6-4E84-9B66-202541F9601E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6C1408-671A-4436-A825-12170CFB5C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F13F07CC-739B-465C-9184-0E9D708BD4C7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "823BF8BE-2309-4F67-A5E2-EAD98F723468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "743CBBB1-C140-4FEF-B40E-FAE4511B1140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:ctpview:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "A2953793-3D79-4128-A841-EDAF50095FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:ctpview:7.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D6B30D89-FF23-4818-A63D-7DE5C3328165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:ctpview:7.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC90E91-36BB-458E-9E63-B35DB0FF8666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:ctpview:7.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79A6AAEE-464C-424D-9738-174CDB70FAB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=e2b362d9f23d4c63018709ab5f81a02f72b91e75",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=e86a923d508c2aed371cdd958ce82489cf2ab615",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00012.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000060.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34731",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34750",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34753",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34771",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34776",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34785",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34787",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34801",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/35766",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0063",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1772",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200904-18.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:103",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:104",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0427.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502752/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504849/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34536",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022067",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-758-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0009.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1053",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1865",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1185",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10925",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5975",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8572",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=e2b362d9f23d4c63018709ab5f81a02f72b91e75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=e86a923d508c2aed371cdd958ce82489cf2ab615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/35766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200904-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502752/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504849/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-758-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue has been fixed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2009-0427.html .  udev packages as shipped in Red Hat Enterprise Linux 4 were not affected by this flaw, as they do not use netlink sockets for communication.  udev is not shipped in Red Hat Enterprise Linux 2.1 and 3.",
        "lastModified" : "2009-04-20T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1186",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-17T14:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1 allows local users to cause a denial of service (service outage) via vectors that trigger a call with crafted arguments."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función util_path_encode en udev/lib/libudev-util.c en udev antes de v1.4.1 permite a usuarios locales provocar una denegación de servicio (parada del servicio) mediante vectores que disparan una llamada con argumentos manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:udev_project:udev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "141",
            "matchCriteriaId" : "7F3E9D80-7648-4B88-AD14-EB45BF4A4284"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E135846-8959-4D7E-A8E6-07F0EC15F010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_debuginfo:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C76D0C17-2AFF-4209-BBCD-36166DF7F974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B68DF-1440-4587-8458-9C5F4D1E43F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "513797E6-FCE6-4E84-9B66-202541F9601E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6C1408-671A-4436-A825-12170CFB5C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F13F07CC-739B-465C-9184-0E9D708BD4C7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "823BF8BE-2309-4F67-A5E2-EAD98F723468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "743CBBB1-C140-4FEF-B40E-FAE4511B1140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=662c3110803bd8c1aedacc36788e6fd028944314",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34731",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34750",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34753",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34771",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34776",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34785",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34787",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34801",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0063",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1772",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200904-18.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:103",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502752/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34539",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022068",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-758-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1053",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495052",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1186",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=662c3110803bd8c1aedacc36788e6fd028944314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200904-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502752/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-758-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of udev as shipped with Red Hat Enterprise Linux 4, or 5.",
        "lastModified" : "2009-04-17T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Microsoft Windows Media Player (WMP) 11.0.5721.5260 allows remote attackers to cause a denial of service (application crash) via a crafted .mid file, as demonstrated by crash.mid."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en Microsoft Windows Media Player (WMP) 11.0.5721.5260, permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) mediante un fichero .mid manipulado, como es demostrado por crash.mid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_player:11.0.5721.5260:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52A31EEA-215E-4FB2-B5E4-8470111CE37D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34534",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Online Help feature in Sun Java System Directory Server 5.2 and Enterprise Edition 5 allows remote attackers to determine the existence of files and directories, and possibly obtain partial contents of files, via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La característica Online Help en Sun Java System Directory Server 5.2 y Enterprise Edition 5 permite a atacantes remotos determinar la existencia de ficheros y directorios y posiblemente obtener contenidos parciales de ficheros mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:5.0:-:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "8EA36B7D-1506-4B50-B371-8CF16879A62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "083E8ACF-7A6B-4C7C-B1E1-1567D09A8E4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34751",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255848-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255848-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in refresh_rate.htm in the web interface on the HP Deskjet 6840 printer with firmware XF1M131A allows remote attackers to inject arbitrary web script or HTML via the POST request body."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en refresh_rate.htm en la interfaz web de la impresora HP Deskjet 6840 con firmware XF1M131A permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del cuerpo de una petición POST."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:deskjet_6840:xf1m131a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34DAC0FF-ECE4-4010-AB4D-E7CF0312EBCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502620/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502620/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in login/FilepathLogin.html in IBM Tivoli Continuous Data Protection (CDP) for Files 3.1.4.0 allows remote attackers to inject arbitrary web script or HTML via the reason parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en login/FilepathLogin.html en IBM Tivoli Continuous Data Protection (CDP) para Files v3.1.4.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"reason\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_continuous_data_protection_for_files:3.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6019D979-A179-48A6-BCEB-F884A245C97C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34646",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022060",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.insight-tech.org/index.php?p=IBM-Tivoli-Continuous-Data-Protection-for-Files-version-3-1-4-0---XSS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/53651",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34513",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1021",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.insight-tech.org/index.php?p=IBM-Tivoli-Continuous-Data-Protection-for-Files-version-3-1-4-0---XSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/53651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-17T14:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 7 and 8 on Windows XP and Vista allows remote attackers to cause a denial of service (application hang) via a large document composed of unprintable characters, aka MSRC 9011jr."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 7 y 8 en Windows XP y Vista permiten a atacantes remotos provocar una denegación de servicio (caída de la aplicación) mediante un documento de gran tamaño formado por caracteres no imprimibles, también conocido como MSRC 9011jr."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52E757F-9B41-43B4-9D67-3FEDACA71283"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0111.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502617/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0111.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502617/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-20T14:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the CCK comment reference module 6.x before 6.x-1.2, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via certain comment titles associated with a node edit form."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el modulo \"CCK comment reference\" en versiones 6.x anteriores a 6.x-1.2 del gestor de contenidos Drupal. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de ciertos títulos de comentarios asociados al formulario de edición de nodo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:cck_comment_reference:6.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96085D14-9913-459F-84D3-2625DF14D3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:cck_comment_reference:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA191B9-B7F4-4433-BC9B-BC5961C14940"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/434836",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/53702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34739",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1060",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/434836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/53702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-20T14:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.5 and 6.x before 6.x-1.5, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via content titles."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el modulo módulo Print o Printer (en sus variantes e-mail y PDF) en sus versiones 5.x anteriores a 5.x-4.5 y 6.x anteriores a 6.x-1.5 del gestor de contenidos Drupal. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de los títulos de contenido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13532942-BC0A-4B25-9FE3-679E5A698F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1DFE95-5788-4C00-8D24-FD2068352293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35122AE-7CAB-4AB1-88E7-EAF882618E33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD3428DA-1459-4B1F-A19B-C66F8FB75BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ABFF4E5-8F49-4AC4-8CEB-F502E6882087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7EF9D6-39D2-4922-B516-44B31E38DB32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "030BC1EE-8ED5-4955-AD4B-1745690ABB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-2.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989C2B4B-2CAA-4F85-899B-2E85C7C1AD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18D750A-6F98-4A72-B040-9A448EC007BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5029B78B-0160-4547-9934-19A891AB2652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE82C4B9-F7F2-424F-9AF9-9D945FD563EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0F5EE5-217D-40BF-BEF8-224FBDFB8E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C88506DA-94A1-4559-BCD8-D6DA9D438AF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0A448C-470C-4AA9-BAB5-8EAC14A6141E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D315DA5E-3012-4F25-8C7D-21C2BA172A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961AEFF7-499F-4709-BB2F-BB623A4CE19F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7267D96A-43CC-418B-B115-DE77154BCDAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9302C93E-C85F-4EA3-8BE2-3575592B50B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EC0689-1246-4E34-948B-6380BB2BAC90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746A3749-36A4-49EA-B705-922B9D260CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ECD6FD0-0A42-4445-9524-DE02E568FF98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FCB2CC-8184-406E-BE92-34DB6F1B27A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F41A6973-2C38-418D-A16F-93F77F902206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6DF7D4-0992-4677-BA0A-860F329E6D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8A1B8F-021C-4558-880F-9E7FCFE2D323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF939A54-5458-4FD5-916D-301CD3B57F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF7248F-2CD2-4551-AD81-3207FE1D45A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD956162-E836-4777-8346-DF6DAA100A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82398A3C-DB58-42DE-BC16-56D92FAB55B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33406F84-81BF-492E-9C22-171311E519A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB084C5-BE56-4128-8A5D-8F536B276A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6B609E-4AD4-46CD-B9C7-5D0690B83326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA70209E-98DA-4A0A-9272-2F4B04E62C8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/434748",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34738",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/53704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34545",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1060",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/434748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/53704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-20T14:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Localization client module 5.x before 5.x-1.2 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via input to the translation functionality."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el modulo \"Localization client\" en versiones 5.x anteriores a 5.x-1.2 y 6.x anteriores a 6.x-1.7 del gestor de contenidos Drupal. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de la entrada a la funcionalidad de traducción."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:localization_client:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E569CF-2F12-434C-9335-F1D863B95C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:localization_client:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79CEEDA8-74C8-4172-8142-BAB017B2B6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:localization_client:5.x-1.xdev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1426782B-F79F-409E-A855-413C9C780FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:localization_client:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A4EE4E-EA90-4E6C-92F9-3A54405593A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:localization_client:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6DDC58-2B86-426A-8581-BED2D853A83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:localization_client:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A17AEEF-A5F9-48A6-B95F-FA3396BAD2BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:localization_client:6.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4060FDC-1BAE-4A9F-9123-BF37365F1258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:localization_client:6.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B36A0D0-1A87-487A-80CD-87E21F57C056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:localization_client:6.x-1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E9C3FB-F440-44B6-AB1E-9EAD59EF7E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:localization_client:6.x-1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C189416E-1B0D-4C4C-9F1D-FF8C5B95ADD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:localization_client:6.x-1.xdev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057E6EE9-EEAC-4DB2-BC61-17D66590AC9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/434682",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/53703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34718",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34546",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1060",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/434682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/53703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-20T14:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in document.php in cpCommerce 1.2.8 allows remote attackers to execute arbitrary SQL commands via the id_document parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en document.php de cpCommerce v1.2.8 permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro id_document."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpcommerce:cpcommerce:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70369A4-FED2-42C5-A0CB-A5299B5B8AFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34556",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-20T14:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in publico/ficha.php in NetHoteles 3.0 allows remote attackers to execute arbitrary SQL commands via the id_establecimiento parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en publico/ficha.php en NetHoteles v3.0 permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro \"id_establecimiento\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interguias:nethoteles:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45661989-F01D-4BF5-8176-845470B02E60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34561",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-20T14:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in stats/index.php in chCounter 3.1.3 allow remote attackers to execute arbitrary SQL commands via (1) the login_name parameter (aka the username field) or (2) the login_pw parameter (aka the password field)."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de inyección SQL en stats/index.php de chCounter v3.3.3 permiten a usuarios remotos ejecutar comandos SQL de su elección a través de (1) el parámetro \"login_name\" (nombre de usuario) o (2) el parámetro \"login_pw\" (contraseña)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chcounter:chcounter:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1218F9E-A0D4-484F-A259-2138AE199D78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/24879",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-21T15:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Secure NaviCLI in HP Storage Essentials 6.0.2 through 6.0.4 allows remote authenticated users to obtain \"access\" or \"extended privileges\" via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en Secure NaviCLI en HP Storage Essentials v6.0.2 hasta v6.0.4 permite a usuarios remotos autenticados obtener \"access\" o \"privilegios extendidos\" a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:storage_essentials:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7E8AA6-809F-416D-B520-ED55CC8A66B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:storage_essentials:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E47E96-5BE8-4DC3-936D-7C14A5B52B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:storage_essentials:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40EA615A-99F4-4346-82DB-DB6742AAB0F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=124025839111157&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124025839111157&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-21T15:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to cause a denial of service or obtain \"access\" via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en HP StorageWorks Storage Mirroring v5 anteriores a v5.1.1.1090.15 permite a atacantes remotos producir una denegación de servicio o conseguir \"access\" a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:storageworks_storage_mirroring:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F5C70A-3C84-4082-8B77-F61A3A56F1B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:storageworks_storage_mirroring:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED9F207-885B-45E4-A8FB-1C9604E7D532"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=124025929213175&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124025929213175&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-21T15:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to cause a denial of service via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en HP StorageWorks Storage Mirroring v5 anterior a v5.1.1.1090.15 permite a atacantes remotos producir una denegación de servicio a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:storageworks_storage_mirroring:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F5C70A-3C84-4082-8B77-F61A3A56F1B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:storageworks_storage_mirroring:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED9F207-885B-45E4-A8FB-1C9604E7D532"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=124025929213175&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124025929213175&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-21T15:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en HP StorageWorks Storage Mirroring v5 anterior a v5.1.1.1090.15 permite a atacantes remotos ejecutar de forma arbitraria a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:storageworks_storage_mirroring:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F5C70A-3C84-4082-8B77-F61A3A56F1B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:storageworks_storage_mirroring:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED9F207-885B-45E4-A8FB-1C9604E7D532"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=124025929213175&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124025929213175&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-21T15:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Wireshark before 1.0.7 has unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en Wireshark anteriores a v1.0.7-0.1-1 tiene un impacto y vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "C9E11B1A-B1B2-417C-804F-7C9E2454D8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8ED0A8C-174C-4889-9B00-51B1E720B575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9053B950-143E-4941-9C58-A57D9F1FF78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD279A0-5BA7-4D86-B975-2E76B4B2D85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA052598-2E72-4568-B783-8B01382736DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8E63FC-A3AA-455E-8AA7-E3577468F022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DFC6BB8-5A74-4F6A-AFC8-959623D4236F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B432986-F5AE-4506-B584-3B4E943A9C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60178790-62CC-41A9-8B5A-78CF49069E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41535173-00D3-4E52-9441-D7ED44BE9B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3017F8E8-F28D-46E0-A256-0121BAD588A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589FBD3D-FFE4-4BB3-B5F9-7FF949212AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3283D8D0-0714-48CC-94C4-B5FA6C913A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA01FEEE-E5D1-4C19-B25E-1039FA72555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F90C98-DF9D-49F0-A026-C20C7CA0A034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4F19A6-98D5-4B6A-8AF0-D88561D50296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4D8B98-A542-4269-90C1-14FFBE9F4A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A353A2B8-A801-44C6-AFEF-19982E33975C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7FCA21-A695-46EA-A669-DF3FA3F7B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87BA063-BF1D-4103-973A-6E490A1CA4EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D8CE9A-4CE0-4DA8-9EBA-3B7CEBCDFEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090B987C-9880-4221-BC4C-8D53A8801649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06828062-5F31-4532-9E24-34F29CE30218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738F4F0-41C6-48CF-8233-C94D79DCA807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E88C1647-8B05-421E-AA1F-25F9B248D761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E7F73-0E2A-442C-9B76-679A2AD03052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF374E8-36A3-43AA-B86C-092F5B244841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C422E5-3252-48C2-B4FF-E32AA5463D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C43A78-E578-4B1C-8E33-24529E973E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1074B30-F2E6-47CD-8491-29163811E07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB52B779-7A2D-43E0-9F12-C65053002EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A85B028-7384-403A-817C-B5001F02A8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801B1795-3DC4-4BE3-A693-37B6BD116B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17808311-AC2A-428A-BB8B-B08549C5DAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978C483C-A6F7-456F-9488-833D520D4A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB94CE6-03D3-43C3-B765-AC36961CD83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FADA30-FD98-42F3-80F1-E8794C77AC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3F8A55-10DE-4197-9F9D-5F6570A94860"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34778",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502745/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502745/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-21T15:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script or HTML via the URI."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en C2Net Stronghold v2.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de la URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:stronghold:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B778FBDF-3D73-4841-8568-C4DDCE839EA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/502799/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34606",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502799/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This flaw was caused by a C2Net specific patch added to Apache http_log.c in Stronghold 2.3.\n\nC2Net Stronghold 2.3 reached end of life for updates on October 31st 2000. \nhttp://www.awe.com/mark/history/stronghold.html",
        "lastModified" : "2009-04-21T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-21T16:24:52.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by establishing an IPC$ connection to the XTIERRPCPIPE named pipe, and sending RPC messages that trigger a dereference of an arbitrary pointer."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en xtagent.exe en Novell NetIdentity Client anteriores v1.2.4 permite a atacantes remotos ejecutar código arbitrario mediante el establecimiento de una conexión IPC$ al tubo XTIERRPCPIPE, y enviando mensajes RPC que inicia una desreferencia de un puntero arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netidentity_client1.2.3:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA602AC-C61F-407B-BD9D-DEB80991C070"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.novell.com/Download?buildid=6ERQGPjRZ8o~",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502514/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1021990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0954",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-016/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=437511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://download.novell.com/Download?buildid=6ERQGPjRZ8o~",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502514/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1021990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-016/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=437511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-21T16:24:52.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apollo 37zz allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long URI in a playlist (.m3u) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Apollo 37zz permite a atacantes remotos producir una denegación de servicio (caída de aplicación) y posiblemente ejecutar código a través de una URI larga en un fichero de lista de reproducción (.m3u)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heikki_ylinen:apollo:37zz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E03235-4208-4654-8D4C-F4BB8B3D3094"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34554",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-21T16:24:52.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Dawningsoft PowerCHM 5.7 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an HTML file with a link to a long URL, as demonstrated by a .rar URL."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Dawningsoft PowerCHM v5.7 permite a atacantes remotos producir una denegación de servicio (caída de aplicación) y posiblemente ejecutar código a través de un fichero HTML con un enlace a una URL larga, como se demostró mediante una URL .rar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dawningsoft:powerchm:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048CF5D2-27BA-4C6C-8365-C4F44468FB7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34517",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1353",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-21T16:24:52.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause a denial of service (daemon crash) via a long URI, related to http.c."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función http_parse_hex en libz/misc.c en Zervit Webserver v0.02 permite a atacantes remotos producir una denegación de servicio (caída de demonio) a través de una URI larga, relacionado con http.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sebastian_fernandez:zervit:0.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "208BB7A6-808D-467D-BCF3-7400C6B67DA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502693/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34530",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://zervit.svn.sourceforge.net/viewvc/zervit/trunk/src/libz/misc.c?r1=17&r2=19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://zervit.svn.sourceforge.net/viewvc/zervit/trunk/src/libz/misc.c?view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502693/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://zervit.svn.sourceforge.net/viewvc/zervit/trunk/src/libz/misc.c?r1=17&r2=19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zervit.svn.sourceforge.net/viewvc/zervit/trunk/src/libz/misc.c?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1354",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-21T16:24:52.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Mongoose 2.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en Mongoose v2.4 permite a atacantes remotos leer ficheros de forma arbitraria a través de .. (punto punto) en el URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sergey_lyubka:mongoose:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDD3A200-BEF3-41F7-8EA2-A7FD558F68B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/502648/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34510",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502648/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-21T16:24:52.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in muxatmd in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long filename."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en muxatmd en IBM AIX v5.2, v5.3, y v6.1 permite a usuarios locales conseguir privilegios a través de un nombre largo de fichero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD518B94-9CD7-4C45-8766-578CF427B4CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/muxatmd_advisory.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34662",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ48495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ48496",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ48499",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ48500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ48501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ48502",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ48561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ48562",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34543",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1056",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/muxatmd_advisory.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ48495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ48496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ48499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ48500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ48501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ48502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ48561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ48562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-21T16:24:52.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary code via a long MP3 filename in a playlist (.xpl) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Elecard AVC HD Player permite a atacantes remotos ejecutar código de forma arbitraria a través de un nombre de fichero MP3 largo en un fichero de lista de reproducción (.xpl)"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elecard:elecard_avc_hd_player:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADA56E53-3891-4617-B1BF-71C1E75C85B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34560",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-21T23:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories."
      }, {
        "lang" : "es",
        "value" : "apt-get in apt anterior a 0.7.21 no comprueba adecuadamente el error de codigo en gpgv, lo que hace que apt utilice un repositorio firmado con una clave que ha sido revocada o ha caducado, lo que permite a atacantes remotos engañar a apt en la instlacion de repositorios maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.20",
            "matchCriteriaId" : "A5915EA2-9710-4CCC-A16A-EABD1D34A9C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2372DE68-69A3-44B6-A42E-1C8EA272FAC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F846A10-711A-42A1-A71A-FB11D4B511F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E070DA8-E764-4C1B-BCDB-F15597ABE7AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.2-0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCEE6BF2-3B33-41F7-84C4-626D1559FB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BDAAE90-9BD4-4160-89D3-162561CB30BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBC7B0DD-F983-41DC-BB78-52FB53C044DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832BF3E-A081-4708-8D54-C5BC827965E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31586872-C049-4125-B82A-FEA8B06FDF7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F377D69-4C1D-4D1A-96D9-B7724756CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71851F90-85E4-4250-B9FB-320A33B04B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.15:exp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C6356166-F4D5-4B50-94AE-7A25803FFF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.15:exp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7D88AF-16B4-4C3F-AF7D-8773CB08BA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.15:exp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5F293909-BFDB-49A2-AF03-6ADACE195204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E138D3A7-F289-4491-A24D-4DF2F179EAAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19ED89FC-F907-4126-B969-625887306487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.17:exp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F467E33-20AC-401C-AF1F-8F4BC0CB0C37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.17:exp2:*:*:*:*:*:*",
            "matchCriteriaId" : "595406A6-DFD2-4E26-82C8-745E0AC0D6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.17:exp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED3DB0F-E9BF-4E23-8057-AACA17475C66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.17:exp4:*:*:*:*:*:*",
            "matchCriteriaId" : "39A7A479-6225-43EA-B010-46EF4BC77E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC4CC2E-7E68-4360-8360-B0463D9B6B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF988A0E-A630-40DD-9387-2C1610D2F932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE7EC9A-2E4D-4A60-AC88-F390F5B3432A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2257DAB-0A44-4841-9EF9-CBBF9BB68F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:advanced_package_tool:0.7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47EDE750-C502-4B25-829D-D0C0F2653C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67027C4-0C37-4715-9EE6-BBE71C8A4CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D7BB47-916D-40AB-9B6C-DBBCB8CC8F56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "862E6716-C665-43E9-9245-E0FABC095CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63B043A4-EC4C-4A30-ABA3-CE63934C06CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBD74BC2-9B95-4E0E-B7A9-62C97464443A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15861FDD-ED4A-4407-B7DF-6AAC25C3AC7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D0D36A-F149-4733-BC75-B6EF39FD9C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10450117-95E5-43EF-8BAE-56D403C27E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B1CAB4-EF19-419E-AE59-950F4C64CAAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27DC4956-E0D1-451C-AECA-6C5629DD1A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB54FAC9-4300-4C91-98A8-7AA075B68E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B5ED2CB-2603-42BE-A067-738E76E52687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "181924A3-71DD-46A2-BAD4-6D4734DDD541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.13-bo1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4955663F-A699-428D-9995-21ED69331F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB91513D-3AEB-440E-BDD2-8D2FE1D6AD08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1410E630-2E45-4AC0-B5F9-96839957C8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.15-0.1bo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AC38E9-FBFE-4972-80FA-D7F5D9169B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.15-0.2bo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6533A-C6DA-4E45-BB5F-44B7C4ADEA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.16-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF482CC-3A0A-4178-9ADD-57C8BFD5050E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.0.17-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB97D09E-80A1-4819-8496-AA5D4BCB9189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3229262-E656-46EB-8880-B24F73C90509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81B47A64-8339-4A26-8AF5-D8CE90293F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D5E1D8-EC66-495D-BBBC-78D535635F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2593C2F6-54E2-4311-B0A6-6E5E80B99A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E18DAF1F-2FFA-4C12-93A4-5417C5C25E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A2315F-0591-4CB7-AFD1-ADC8BF1C87FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C5ED765-9C72-4334-91E0-4BB0A15381DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "185A3B86-2261-488F-B1CA-03E9B42D94DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C98BE1A-0B65-44CD-ABDC-7CAA5D595797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B883322-F944-4FFC-B9D8-B1C289EA6C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC159F3-A216-45B8-A547-174ABABC953B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E1C9D0-5CDB-4DB2-A757-FCA31D1D591F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6D9BFD0-E308-44E8-A7C7-4699A2510A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72875923-4ACB-4B08-B52F-D9BA45CA8D1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE3B58F-BD33-452A-BD4D-D0D023E1F8E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86F2E2D4-CDEA-4D26-869A-C32C97A53D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "015691AF-BFD4-4ED0-873A-5D23F9194D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "699D019F-2924-4AE5-A833-92E46BA4AF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FD22F86-65A4-4B63-AEA3-77CD2DEF589B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A8FF5D4-493B-42DE-8DAA-BF6BDE3B5B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5AF288-9358-40BF-9A71-99C983713F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7995C830-651D-46E9-AE53-2D73CB1575A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F31AEB78-1DA5-4583-B865-1F74C0DE364E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A64810-DB07-4600-9968-052703A01B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B0F899-EF61-4B2B-81A3-932D5B8786EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCF1902-FD1C-4AA2-86BE-1374A5677C82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B29CF3-9B80-4626-9785-73446E3DA300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F384C461-0A0B-4A3A-A944-51C7282CE6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB2D223-5C72-4728-8628-C692E59155DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3776D2F0-5551-4B0D-B5B6-A6306E1052CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE504A04-16EA-421F-A01E-FCCAFC9D2971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F68E822C-189B-4F90-8D06-92E1E64E1C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAA1B686-013D-44A2-A9D5-52D913C28236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C7B1EB-B9B6-4E04-A14B-A7ADAF282EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863AD8F9-1BC2-4CCE-962D-C9E77FD5C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7529570E-6563-4A7D-A493-A557583481AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4ECE94E-D866-435A-A54C-B6B90E8149E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1D9284-EEF8-49B6-AAD1-826695148720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C391EB0-E875-4B9E-BF0A-285B91961EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44311E97-AF64-4181-A52F-9F66F9F250C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D98750AF-DCD0-4B5F-82E2-911FB3F72BBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C0D02B8-2DC4-4ECD-B846-EEEF13BFA026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A25EFC1-758B-4F81-A07B-10807674D94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9C27EE-F6AA-400B-AFDE-6AFD5988685E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6473F0E9-C55E-4687-B57C-5A2B9CA5DF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CFA4C36-68E3-4586-B715-86FCC0C934FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED45163-C060-4884-90D6-32DCCB3FC907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5643C7-7519-4C86-A962-541057765FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A8669B-1746-439D-B592-BFD9FDCAF384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F14B17-32E2-420A-99F5-E5E4729D73AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A0ED4A-58FB-4F7B-AEF4-482AC4DDAFA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F11B9294-7C52-4E64-A8D8-F1A36A9B3AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9FBA9CD-AF6B-4EE8-A4D4-5ED9FEF560D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4BB811-8AFE-4ADC-9790-A72B64614FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D7CF6C2-B787-4DB3-AF77-B69C25ED94E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B478DB-912F-4563-A058-C4671BA8D0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.30:ubuntu1:*:*:*:*:*:*",
            "matchCriteriaId" : "B061E3B1-9865-4730-BB64-5B727C28B6EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.30:ubuntu2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FCC9BF-91E0-4E51-B071-A4A80C3D50E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5A7027-0C72-4C98-A20F-F176D2CA783C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.5.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9128231B-2EE4-49CE-93BB-E1569F997C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD12618-EADC-4C62-9844-B13D42F48873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3BAFCE-3B0F-46C5-A0F3-FA10795F94C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E6EE25-34B0-44A7-9E0B-85420BA23A86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBBC666-27DA-482D-AEFF-2158965A9A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B130388-E8CD-48E6-BBB3-9555CDF41ED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46311A8F-B75F-497B-8B9D-3912437BC300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD5FAC29-BDBC-44A4-9B3A-54D335D66315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4606D3C-3956-4028-9B3C-38D89E5C3732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1631B320-1ADA-4D92-889A-27802AA289CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A32DEA0-0410-4D7F-8B20-35B76B8542B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2BF13-3509-449D-BCD7-626DA16E333C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8931C487-7B01-46B4-AAC7-959E286D796A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1DD0BF-6581-4269-90E3-D7FD14ACC542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C379EA2E-90F0-4B2E-8F6F-B2DA7259CD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CF91FC-A3B4-4507-A225-49A27EE451EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9962509-53B4-402E-AA1E-77C7C5D54452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65345737-6DD6-4971-8A24-209C6EFBEC38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DDAC7AC-A0FB-4B0F-9DF9-BAA1C6C2E224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CDE8307-9EBB-461D-8802-516599DD3D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA4BEB2-98AE-4834-BD6C-7E41EA0F08E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66EFD81E-7B6B-48C2-B8A2-B803C1347EBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7F566F-700E-411D-B0C7-CF9BC30FAD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB94CAF2-2C59-43D5-A5BE-BAE3D44B94D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7550CF30-596C-4C46-9928-99D1F091982B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D74FEBE-5BA7-4907-ADBE-21BC4A73F2B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08025BA8-8DB2-4A63-BE31-4BC7626CF247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C33D9E60-633B-48A9-AC9D-FDDB6FF39440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.27:ubuntu1:*:*:*:*:*:*",
            "matchCriteriaId" : "C745117D-546B-451F-9839-2AA56AC10AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.27:ubuntu2:*:*:*:*:*:*",
            "matchCriteriaId" : "7A29168F-B7BD-460E-91D7-143B243BC2AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.27:ubuntu3:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3AB78A-864E-4F5A-827B-F0AFD503F22F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.27:ubuntu4:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2659B2-7D6B-4FB8-A941-DD313544ED15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADA767C-A9C7-4592-9633-54EB71F07793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F063F513-7F04-49B9-BCAA-69261841B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751E4B9-B89F-49D4-8E72-534AEFE57F56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC64ABF1-F116-4510-B279-84C28405D809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1686258C-4378-47BA-9811-8B6863FAF1A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BD2A6B-A393-4435-9958-2A01DEE48DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE7BEE8-10F8-4735-A204-738AAA0C3038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA66AB92-12CA-4B8D-8BAB-7DA45A4EF9A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC226131-5C53-4829-B125-AFB8111A3774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.36:ubuntu1:*:*:*:*:*:*",
            "matchCriteriaId" : "DE6C9C14-C804-47F1-97CE-CA2FF3287DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3454FE-522A-42C0-8CA7-21AE8EAC9437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15B6CBB7-4870-4A82-9B6A-30A34EA54E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "346E9720-D787-4BE7-9F33-D5FFE30C7B96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B0FB1A-48C0-4455-9109-7A8F60B99DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.40.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D6CCB50-D360-4AB2-90D5-C3FCF506D31C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0E1794-C19A-4779-8CD5-C10DA67F6DCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61AF9067-3A57-41C3-A326-19A2A1FC5291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.42.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD24204-9DE1-498B-8CF7-23234B3DC517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.42.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "411547FE-D995-488F-A07D-018FFB4DCF44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D748634E-B7D1-4E1F-8951-E5B1FC64D9B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A75E5219-4BC1-45CE-A225-21C2C3E3D212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.43.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B1D550-8384-40EC-827C-2433E3BA71CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.43.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D705912-ADE8-4BF6-B367-AB1699E17B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.43.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C709AC5-2A55-4917-AD18-3E313A9B3F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "913E6EE4-D94B-4B0D-8F5C-637CD23ABBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.44.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF26A78B-E7B7-481D-9C0F-888E322CF7FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.44.1-0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43BB1F89-B225-49B8-922F-AA93404D9102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.44.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C482A979-497D-40D0-A606-21B2E1803BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.44.2:exp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923935B-F81D-4BC5-9C01-06612159C07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18A6960B-7B34-43D8-8E86-F2E6FCA91E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBFF6B94-521C-4B51-8F60-9CEF723978C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.46.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FFEBB7C-4E56-4A92-BFD3-8D10E739B457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.46.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2764CB-AE41-4435-A459-9227B6E670B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.46.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28D5396-5378-46D3-A46A-CC77A02A6ABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.46.3-0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAAA97B2-1072-4080-A341-64C00DAED664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.46.3-0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6BEB024-66AD-4B5A-A61E-82543767400E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.6.46.4-0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77824A3-F70D-4AA2-93D3-7BE6E6A12616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D42EE-C68F-4BCC-AF01-5AE9EF107DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DB0DE2-C967-4DCA-A3B4-2F235371993B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CA862B0-D7DB-44D7-A669-66357DC46AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1464B59B-72A7-4328-A6BA-D60153C226AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB3B7EBB-BDE5-4091-8FE5-05965656912F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48005163-3A91-4F5D-B2E5-9A7B691713C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:apt:0.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "335B661E-7912-4E16-B6B2-18A111C23D1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=433091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/apt/+bug/356012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/762-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=433091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/apt/+bug/356012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/762-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1336",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-22T15:30:00.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service (OOPS) via a long filename, related to the encode_lookup function."
      }, {
        "lang" : "es",
        "value" : "fs/nfs/client.c in el kernel de Linux en versiones anteriores a v2.6.23 no inicializa adecuadamente cierto miembro de la estructura que alacena la longitud máxima de fichero NFS, lo que permite a usuarios locales producir una denegación de servicio (OOPS) a través de un nombre de fichero largo, relacionado con la función encode_lookup."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.22.19",
            "matchCriteriaId" : "1826D616-AC19-40CC-A62F-FCB194E2113D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=54af3bb543c071769141387a42deaaab5074da55",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0473.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/06/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/17/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1024.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1077.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=494074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=54af3bb543c071769141387a42deaaab5074da55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0473.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/17/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=494074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-22T15:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then uses an exec system call to launch a setuid application."
      }, {
        "lang" : "es",
        "value" : "La función exit_notify en kernel/exit.c en el kernel Linux antes de la versión 2.6.30-rc1 no restringe las señales de salida cuando se alcanza la capacidad CAP_KILL , lo que permite a usuarios locales enviar una señal de su elección a un proceso mediante la ejecución de un programa que modifica el campo exit_signal y, a continuación, utiliza una llamada exec  al sistema para iniciar una aplicación setuid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:rc2_git7:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.29",
            "matchCriteriaId" : "135A0668-0598-41A0-BB2F-90D6F24B2987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F9DBB0-8AF7-42CA-95DD-68A344E9D549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD00664-A27C-4514-A2A4-079E8F9B0251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E336C792-B7A1-4318-8050-DE9F03474CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D0159-1A05-4628-9C1C-360DED0F438C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6654B9-42EB-4C2C-8F71-710D50556180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FDF616-E410-4540-B377-98D1FB88CE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5313B736-9904-442A-84D6-8FC7B9AC2059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D42BA44-C69B-4170-9867-CABF93CA9BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "085259B8-9D41-42B0-B32B-66B8D365F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A12DE15-E192-4B90-ADB7-A886B3746DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6588E7-F4FA-40F5-8945-FC7B6094376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "AE87E13E-ACF7-4F74-8938-729F3B0D694C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D4965A12-1BBA-4494-A5C1-43E0C0F48C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "388414A1-C9B4-41BA-AD35-6501A463A095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FDBA01DD-C129-48F1-800B-838418F4A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "185F1EF8-04EB-43ED-B909-8BDF60F23E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "3483FAFA-353C-498F-AF68-8F5B84A0F30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6B11A9E1-9D90-46DC-81B5-17A137205AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "07EEC559-9240-46BE-9057-0F17D1F61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BBBC127F-D67E-43FE-BCFE-606C200084F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "42B18945-EE09-4E6B-8C11-E382E5F8F850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "12D0C03A-7D30-485F-8431-638918FE9658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA311B8-D32E-4853-9B07-58EAF1019D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F0F679-43C8-426E-A97E-C3B207A3331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA40BC48-D6B5-4424-B306-F99E85EBBCB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2DF2BB-F94A-4692-AFDC-47C42F04081B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "BB286B42-E739-46CD-BC96-972CFFAECB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "7636014B-CC2A-43A3-9C9A-04B26AEB06D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ED7CE5-3388-4CB9-AF60-A2AF19611327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:git7:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEBA0F6-5453-4993-932B-BB8941DCC5CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3463B83B-E46F-456E-98BA-801C59AEB337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "05FD0767-03F3-416C-AB6D-6BC4A12220B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8452D554-8DEB-4265-839C-6B40CCFB56B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "94F445F9-57A5-4453-BB5D-290349C04A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "62C97D20-4152-47C4-B21B-8206CF49E20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386B13F-9D7C-45F8-B86A-886384144A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:git1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F95AB2-319C-4BDE-8D34-9FBE69A2FB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D48FD9D7-E775-4E26-AEBF-01A09C404D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "89EA3CF3-0AB7-4648-96BA-25E978D2C8C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=432870dab85a2f69dc417022646cb9a70acf7f94",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=123560588713763&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://patchwork.kernel.org/patch/16544/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0473.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/07/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/17/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0451.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1024.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1077.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503610/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/512019/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=493771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1550.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=432870dab85a2f69dc417022646cb9a70acf7f94",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=123560588713763&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://patchwork.kernel.org/patch/16544/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0473.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/07/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/17/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0451.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503610/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/512019/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=493771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1550.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-22T15:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kill_something_info function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces when processing signals directed to PID -1, which allows local users to bypass the intended namespace isolation, and send arbitrary signals to all processes in all namespaces, via a kill command."
      }, {
        "lang" : "es",
        "value" : "La función kill_something_info function en kernel/signal.c en el núcleo de Linux versiones anteriores a v2.6.28 no considera namespaces PID cuando está procesando señales dirigidas a PID -1, lo cual permite a atacantes remotos evitar namespace aislados, y envía señales de su elección a todos los procesos en todos los namespaces, a través del comando kill."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.27.21",
            "matchCriteriaId" : "45F60110-70D6-45AF-A52C-572DFB4EBB5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F9DBB0-8AF7-42CA-95DD-68A344E9D549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD00664-A27C-4514-A2A4-079E8F9B0251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E336C792-B7A1-4318-8050-DE9F03474CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D0159-1A05-4628-9C1C-360DED0F438C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6654B9-42EB-4C2C-8F71-710D50556180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FDF616-E410-4540-B377-98D1FB88CE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5313B736-9904-442A-84D6-8FC7B9AC2059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3069324C-28FB-4BB6-9451-F3AC6A8DA64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3D19AD-4268-45E7-B13D-BC93ABDF2226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E619E6-A515-43BC-B371-C1FF6DAA6CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "388414A1-C9B4-41BA-AD35-6501A463A095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FDBA01DD-C129-48F1-800B-838418F4A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "185F1EF8-04EB-43ED-B909-8BDF60F23E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "3483FAFA-353C-498F-AF68-8F5B84A0F30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6B11A9E1-9D90-46DC-81B5-17A137205AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "07EEC559-9240-46BE-9057-0F17D1F61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BBBC127F-D67E-43FE-BCFE-606C200084F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "42B18945-EE09-4E6B-8C11-E382E5F8F850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACBB194-1D24-464A-B79C-44B8127EAD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d25141a818383b3c3b09f065698c544a7a0ec6e7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2008/7/23/148",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/16/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/17/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/21/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1081.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503610/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=496031",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d25141a818383b3c3b09f065698c544a7a0ec6e7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lkml.org/lkml/2008/7/23/148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/16/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/17/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/21/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1081.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503610/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=496031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.\n\nIt was addressed in Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2009-1081.html .",
        "lastModified" : "2009-09-10T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-22T15:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the SCTP sockets implementation in Sun OpenSolaris snv_106 through snv_107 allows local users to cause a denial of service (panic) via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en la implementación de los sockets en Sun OpenSolaris snv_106 hasta la snv_107  permite a usuarios locales producir una denegación de servicio (panic) a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-257331-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-257331-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-22T15:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The __inet6_check_established function in net/ipv6/inet6_hashtables.c in the Linux kernel before 2.6.29, when Network Namespace Support (aka NET_NS) is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via vectors involving IPv6 packets."
      }, {
        "lang" : "es",
        "value" : "La función __inet6_check_established en net/ipv6/inet6_hashtables.c en el núcleo de Linux versiones anteriores a v2.6.29, cuando Network Namespace Support (también conocido como NET_NS) está activo, permite a atacantes remotos provocar una denegación de servicio (puntero de referencia NULL y caída del sistema) a través de vectores envueltos con paquetes IPv6."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.28.9",
            "matchCriteriaId" : "65B49D64-E571-4D7F-9852-6A3D129B51BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F9DBB0-8AF7-42CA-95DD-68A344E9D549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD00664-A27C-4514-A2A4-079E8F9B0251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E336C792-B7A1-4318-8050-DE9F03474CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D0159-1A05-4628-9C1C-360DED0F438C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6654B9-42EB-4C2C-8F71-710D50556180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FDF616-E410-4540-B377-98D1FB88CE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5313B736-9904-442A-84D6-8FC7B9AC2059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D42BA44-C69B-4170-9867-CABF93CA9BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "085259B8-9D41-42B0-B32B-66B8D365F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A12DE15-E192-4B90-ADB7-A886B3746DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6588E7-F4FA-40F5-8945-FC7B6094376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "AE87E13E-ACF7-4F74-8938-729F3B0D694C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D4965A12-1BBA-4494-A5C1-43E0C0F48C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "388414A1-C9B4-41BA-AD35-6501A463A095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FDBA01DD-C129-48F1-800B-838418F4A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "185F1EF8-04EB-43ED-B909-8BDF60F23E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "3483FAFA-353C-498F-AF68-8F5B84A0F30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6B11A9E1-9D90-46DC-81B5-17A137205AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "07EEC559-9240-46BE-9057-0F17D1F61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BBBC127F-D67E-43FE-BCFE-606C200084F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "42B18945-EE09-4E6B-8C11-E382E5F8F850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "12D0C03A-7D30-485F-8431-638918FE9658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA311B8-D32E-4853-9B07-58EAF1019D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F0F679-43C8-426E-A97E-C3B207A3331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA40BC48-D6B5-4424-B306-F99E85EBBCB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2DF2BB-F94A-4692-AFDC-47C42F04081B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "BB286B42-E739-46CD-BC96-972CFFAECB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "7636014B-CC2A-43A3-9C9A-04B26AEB06D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ED7CE5-3388-4CB9-AF60-A2AF19611327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:git7:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEBA0F6-5453-4993-932B-BB8941DCC5CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3463B83B-E46F-456E-98BA-801C59AEB337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "05FD0767-03F3-416C-AB6D-6BC4A12220B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8452D554-8DEB-4265-839C-6B40CCFB56B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "94F445F9-57A5-4453-BB5D-290349C04A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "62C97D20-4152-47C4-B21B-8206CF49E20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3f53a38131a4e7a053c0aa060aba0411242fb6b9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://xorl.wordpress.com/2009/04/21/linux-kernel-net_ns-ipv6-null-pointer-dereference/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3f53a38131a4e7a053c0aa060aba0411242fb6b9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xorl.wordpress.com/2009/04/21/linux-kernel-net_ns-ipv6-null-pointer-dereference/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5, or Red Hat Enterprise MRG.",
        "lastModified" : "2009-04-23T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-22T18:30:00.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the \"Customize Statistics Page\" (admin/statistics/ConfigureStatistics) in the MDS Connection Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) before 4.1.6 MR5 allows remote attackers to inject arbitrary web script or HTML via the (1) customDate, (2) interval, (3) lastCustomInterval, (4) lastIntervalLength, (5) nextCustomInterval, (6) nextIntervalLength, (7) action, (8) delIntervalIndex, (9) addStatIndex, (10) delStatIndex, and (11) referenceTime parameters."
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de tipo Cross-Site Scripting (XSS) en la \"Customize Statistics Page\"  (admin/statistics/ConfigureStatistics) en el servicio de conexión MDS en Research in Motion (RIM) BlackBerry Enterprise Server (BES) anterior a versión 4.1.6 MR5 permite a atacantes remotos inyectar script web o HTML arbitrario por medio de los parámetros (1) customDate, (2) interval, (3) lastCustomInterval, (4) lastIntervalLength, (5) nextCustomInterval, (6) nextIntervalLength, (7) action, (8) delIntervalIndex, (9) addStatIndex, (10) delStatIndex, y (11) referenceTime."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:*:mr4:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.6",
            "matchCriteriaId" : "1200C916-4168-49E6-A0F4-665F6A5954F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7A2FFD-C840-459C-95C2-92FEDF341D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E297652-3533-4B2B-BA9E-FDC452BAE650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FB6C5-1EA2-451E-A89B-9CE5EE3F8626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4ACEF3E-E394-45E2-B20F-8575C92A490F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9F71618E-5CB6-41A7-9705-6AD4344CDEA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BD344A-EE9C-4ECB-8CB1-35146FD6F056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1694E42-9AA5-4503-9714-CBDE388481A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F378AF-E25B-4D60-AF7E-9E6FB228BF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265D8F90-96C3-4627-ABA5-994C25F70A45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0170.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34740",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/btsc/dynamickc.do?externalId=KB17969&sliceID=1&command=show&forward=nonthreadedKC&kcId=KB17969",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34573",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0170.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/btsc/dynamickc.do?externalId=KB17969&sliceID=1&command=show&forward=nonthreadedKC&kcId=KB17969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1302",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-22T18:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors."
      }, {
        "lang" : "es",
        "value" : "El motor del navegador Mozilla Firefox v3.x anteriores a la v3.0.9, Thunderbird anteriores a la v2.0.0.22, y SeaMonkey anteriores a v1.1.16 permite a atacantes remotos producir una denegación de servicio (caída de aplicación) y posiblemente inicia una corrupción de memoria a través de vectores relacionados con (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) caso de pueba xslt_attributeset_ImportSameName.html para el compilador XSLT stylesheet , (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate y nsEditor::EndUpdateViewBatch, y (8) gfxSkipCharsIterator::SetOffsets, y otros vectores."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.13",
            "matchCriteriaId" : "547B206A-36E7-4602-8046-8366BC556AA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFFBC58-ACD2-449D-B010-5026D6022F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EED5D2-EC40-4253-991B-0C746FBEF6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.19",
            "matchCriteriaId" : "850345D6-2085-4EC4-AE47-FC8E265C61D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F0C73F-291F-4A92-87B8-2269B5C1516D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938B1260-74A7-4CFF-8086-415DCC284430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28672BA-E3C2-40C3-80E1-95B7CDD089E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9308147C-0A23-48BC-BFA9-A49B9D73014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD8DCC-DBB4-40EE-927C-7B0969700077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F9CE47-E3AA-49D7-AEC9-447951AC31E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581615BB-C781-42CA-836E-0E0EAB8C4504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257F43FA-D22C-4BF0-A02E-261A54142BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D291234-D64A-4E8A-A7CD-08BB980E1CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48702EEB-C272-46ED-9C61-6F44D6964DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC650D89-CEEC-4A90-B3B9-5F0ADCEFCBB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-14.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022090",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=428113",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=431260",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=432114",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=454276",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=461053",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=462517",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=467881",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=477775",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=483444",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10106",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5527",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6070",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6170",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7030",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=428113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=431260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=432114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=454276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=461053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=462517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=467881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=477775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=483444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1303",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-22T18:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree."
      }, {
        "lang" : "es",
        "value" : "El navegador del motor en Mozilla Firefox versiones anteriores a v3.0.9, Thunderbird versiones anteriores a v2.0.0.22, y SeaMonkey versiones anteriores a v1.1.16 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) y posiblemente disparar corrupción de memoria a través de vectores relacionados con nsSVGElement::BindToTre."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.8",
            "matchCriteriaId" : "FF7EBD73-EAFC-4D89-9962-8EBB2BB3DBDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.15",
            "matchCriteriaId" : "DBCBF62F-8386-4E0B-99F3-5152A2BCFEEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4A97B6E1-EABA-4977-A3FC-64DF0392AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D33486-4956-4E2C-BA16-FA269A9D02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E99882-786F-455F-BAC4-30716120964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A3468-C3BF-417B-85FB-18C28F0765B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFFBC58-ACD2-449D-B010-5026D6022F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DD17EC-99EB-46C1-98E9-16A2EDB8E224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF89719E-C415-45A3-A1CC-FAFDFCAE3055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.21",
            "matchCriteriaId" : "E03AD36E-7C5B-4A60-AE19-29F3AF780333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0618BD26-0EF5-4774-9131-B5ABD4CD302A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D604DAE-DF63-413C-9F49-FFC8E84699F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE6185-09F4-48E3-9742-F9D8030B5774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E565E5-286D-4A68-B085-5659DFE59A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F0C73F-291F-4A92-87B8-2269B5C1516D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938B1260-74A7-4CFF-8086-415DCC284430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28672BA-E3C2-40C3-80E1-95B7CDD089E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9308147C-0A23-48BC-BFA9-A49B9D73014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD8DCC-DBB4-40EE-927C-7B0969700077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F9CE47-E3AA-49D7-AEC9-447951AC31E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581615BB-C781-42CA-836E-0E0EAB8C4504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257F43FA-D22C-4BF0-A02E-261A54142BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D291234-D64A-4E8A-A7CD-08BB980E1CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3C27EC-5794-49C1-96E0-997E700B13DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745C2CBA-4824-441B-A6BC-E80959C2E035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6A7D00-A203-4891-96CE-20C91FCBF048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8CB480-0595-4BC1-998E-3638E85DB367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBF526-7A28-436B-9B01-EADE913602B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A0BCE3-38E7-4318-9A7E-3D895171129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2303104C-4A91-4704-A9CB-8C83A859090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF479C3-95A0-414F-B47B-C94BE95713D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48702EEB-C272-46ED-9C61-6F44D6964DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AF48A9-C161-4603-82F0-5D2DE1EBA498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821E46E8-B084-4762-86F0-002CA288B522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A084C258-7D78-4F6D-8E24-00BE9608EBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FEA455-E605-4CE3-A951-760D59091C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1758117-4865-42A4-8110-2250924E21FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81AF4BFB-EC89-454B-89DF-FC8F6102E28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8013986B-DCAF-44A1-BA63-5BBA6762720F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0437.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34844",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-14.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1125.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022090",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=453736",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5810",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5992",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6151",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6646",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9455",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1125.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=453736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1304",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-22T18:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropertyHelper, related to the definitions of Math and Date; and (2) js_CheckRedeclaration."
      }, {
        "lang" : "es",
        "value" : "El motor JavaScript en Mozilla Firefox v3.x en anteriores a v3.0.9, Thunderbird anteriores a v2.0.0.22, y SeaMonkey anteriores a v1.1.16  permite a atacantes remotos producir una denegación de servicio (caída de aplicación) y posiblemente iniciar una corrupción de memoria a través de vectores relacionados con (1) js_FindPropertyHelper, relacionado con las definiciones de \"Math\" y \"Date\"; (2) js_CheckRedeclaration."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.13",
            "matchCriteriaId" : "547B206A-36E7-4602-8046-8366BC556AA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFFBC58-ACD2-449D-B010-5026D6022F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EED5D2-EC40-4253-991B-0C746FBEF6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.19",
            "matchCriteriaId" : "850345D6-2085-4EC4-AE47-FC8E265C61D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F0C73F-291F-4A92-87B8-2269B5C1516D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938B1260-74A7-4CFF-8086-415DCC284430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28672BA-E3C2-40C3-80E1-95B7CDD089E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9308147C-0A23-48BC-BFA9-A49B9D73014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD8DCC-DBB4-40EE-927C-7B0969700077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F9CE47-E3AA-49D7-AEC9-447951AC31E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581615BB-C781-42CA-836E-0E0EAB8C4504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257F43FA-D22C-4BF0-A02E-261A54142BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D291234-D64A-4E8A-A7CD-08BB980E1CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48702EEB-C272-46ED-9C61-6F44D6964DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC650D89-CEEC-4A90-B3B9-5F0ADCEFCBB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-14.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022090",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=461158",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=475971",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5319",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5480",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6015",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7516",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9535",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=461158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=475971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1305",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-22T18:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute."
      }, {
        "lang" : "es",
        "value" : "El motor JavaScript en Mozilla Firefox antes de 3.0.9, Thunderbird antes de 2.0.0.22, y SeaMonkey antes de 1.1.16 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) y posiblemente disparar una corrupción de memoria mediante vectores en relación con JSOP_DEFVAR y con las propiedades que carecen del atributo JSPROP_PERMANENT."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.13",
            "matchCriteriaId" : "547B206A-36E7-4602-8046-8366BC556AA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFFBC58-ACD2-449D-B010-5026D6022F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EED5D2-EC40-4253-991B-0C746FBEF6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.19",
            "matchCriteriaId" : "850345D6-2085-4EC4-AE47-FC8E265C61D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F0C73F-291F-4A92-87B8-2269B5C1516D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938B1260-74A7-4CFF-8086-415DCC284430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28672BA-E3C2-40C3-80E1-95B7CDD089E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9308147C-0A23-48BC-BFA9-A49B9D73014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD8DCC-DBB4-40EE-927C-7B0969700077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F9CE47-E3AA-49D7-AEC9-447951AC31E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581615BB-C781-42CA-836E-0E0EAB8C4504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257F43FA-D22C-4BF0-A02E-261A54142BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D291234-D64A-4E8A-A7CD-08BB980E1CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48702EEB-C272-46ED-9C61-6F44D6964DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC650D89-CEEC-4A90-B3B9-5F0ADCEFCBB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0437.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34844",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-14.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1125.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022090",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=476049",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10110",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6090",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6232",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6248",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6921",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1125.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=476049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1306",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-22T18:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded .jar file with a \"Content-Disposition: attachment\" designation."
      }, {
        "lang" : "es",
        "value" : "La implementación de jar: URI en Mozilla Firefox anteriores 3.0.9, Thunderbird, y SeaMonkey no cumplen la cabecera \"Content-Disposition\" de la URI interna, permitiendo a atacantes remotos realizar ataques de secuencias de comandos en sitios cruzados (XSS) y posiblemente otros ataques al utilizar un fichero .jar cargado con una designación \"Content-Disposition: attachment\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.8",
            "matchCriteriaId" : "FF7EBD73-EAFC-4D89-9962-8EBB2BB3DBDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CAA7D-398A-4B26-9754-FD188CE9729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138701FB-929A-4683-B41F-CB014ACFE44A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5C8E657-3049-4462-98F6-296C60BC8C5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0437.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34844",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-16.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1125.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022095",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=474536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10150",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6021",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6194",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6312",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6710",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1125.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=474536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1307",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-22T18:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI."
      }, {
        "lang" : "es",
        "value" : "La implementación view-source: URI en Mozilla Firefox anteriores a v3.0.9, Thunderbird, and SeaMonkey no implementa correctamente la política de mismo origen, permitiendo a atacantes remotos (1) saltar las restricciones crossdomain.xml y conectar a sitios web de su elección utilizando un fichero Flash; (2) leer, crear o modificar objetos compartidos locales utilizando un fichero Flash; o (3) saltar restricciones no especificadas y generar contenido mediante vectores relacionados con jar: URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.8",
            "matchCriteriaId" : "FF7EBD73-EAFC-4D89-9962-8EBB2BB3DBDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CAA7D-398A-4B26-9754-FD188CE9729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138701FB-929A-4683-B41F-CB014ACFE44A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5C8E657-3049-4462-98F6-296C60BC8C5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0437.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34844",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35882",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-17.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1125.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022093",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=481342",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10972",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5933",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6154",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6266",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7008",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1125.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=481342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1308",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-22T18:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Mozilla Firefox anteriores a 3.0.9, Thunderbird, y SeaMonkey permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores involucrados con enlaces XBL JavaScript y hojas de estilo remotas, como ha sido explotado por una lista de eBay en Marzo de 2009."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.8",
            "matchCriteriaId" : "FF7EBD73-EAFC-4D89-9962-8EBB2BB3DBDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CAA7D-398A-4B26-9754-FD188CE9729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138701FB-929A-4683-B41F-CB014ACFE44A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5C8E657-3049-4462-98F6-296C60BC8C5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-18.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022097",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.theregister.co.uk/2009/03/08/ebay_scam_wizardy/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=481558",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10428",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6173",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6185",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6296",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7285",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.theregister.co.uk/2009/03/08/ebay_scam_wizardy/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=481558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1309",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-22T18:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anteriores a 3.0.9, Thunderbird, y SeaMonkey no implementan correctamente la política de mismo origen para (1) XMLHttpRequest, suponiendo una perdida del documento principal, y (2) XPCNativeWrapper.toString, suponiendo un alcance _proto_ incorrecto, permitiendo a atacantes remotos con la intervención del usuario realizar ataques de secuencias de comandos en sitios cruzados (XSS) y posiblemente otros ataques al utilizar documentos manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.8",
            "matchCriteriaId" : "FF7EBD73-EAFC-4D89-9962-8EBB2BB3DBDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CAA7D-398A-4B26-9754-FD188CE9729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138701FB-929A-4683-B41F-CB014ACFE44A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5C8E657-3049-4462-98F6-296C60BC8C5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0437.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34844",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-19.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1125.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022094",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=478433",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=482206",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5265",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5591",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6139",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6831",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9494",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1125.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=478433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=482206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1310",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-22T18:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la implementación del plugin MozSearch en Mozilla Firefox anteriores a v3.0.9 permite a atacantes remotos con la intervención del usuario inyectar secuencias de comandos web o HTML de su elección mediante un javascript: URI en el elemento SearchForm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.8",
            "matchCriteriaId" : "FF7EBD73-EAFC-4D89-9962-8EBB2BB3DBDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36757",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1886",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-20.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022097",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=483086",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11520",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6242",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=483086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1311",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-22T18:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODE_FILEONLY save of the inner frame."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anteriores a v3.0.9 y SeaMonkey anteriores a v1.1.17 permite a atacantes remotos con la intervención del usuario obtener información sensible al utilizar una página web con un \"frame\" embebido, provocando que una operación \"POST\" desde una página externa sea enviada al \"frame\" contenido en la URL al realizar un almacenamiento \"SAVEMODE_FILEONLY\" del \"frame\" contenido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.8",
            "matchCriteriaId" : "FF7EBD73-EAFC-4D89-9962-8EBB2BB3DBDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.16",
            "matchCriteriaId" : "DE872814-DA94-417A-99E4-0E01E4554E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*",
            "matchCriteriaId" : "30B95DB4-EC98-4046-A894-26CA0807456B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4A97B6E1-EABA-4977-A3FC-64DF0392AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D33486-4956-4E2C-BA16-FA269A9D02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E99882-786F-455F-BAC4-30716120964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A3468-C3BF-417B-85FB-18C28F0765B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFFBC58-ACD2-449D-B010-5026D6022F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EED5D2-EC40-4253-991B-0C746FBEF6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF89719E-C415-45A3-A1CC-FAFDFCAE3055"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0437.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34844",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35882",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-21.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022097",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=471962",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10939",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6200",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6222",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7235",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=471962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1312",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-22T18:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anteriores a v3.0.9 y SeaMonkey no bloquean el código \"javascript\": URIs en cabeceras \"Refresh\" en respuestas HTTP, permitiendo a atacantes remotos llevar a cabo ataques de secuencias de comandos en sitios cruzados (XSS) utilizando vectores relacinados con (1) inyectar una cabecera \"Refresh\" o (2) especificar el contenido de una cabecera \"Refresh\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.8",
            "matchCriteriaId" : "FF7EBD73-EAFC-4D89-9962-8EBB2BB3DBDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CAA7D-398A-4B26-9754-FD188CE9729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138701FB-929A-4683-B41F-CB014ACFE44A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ha.ckers.org/blog/20070309/firefox-header-redirection-javascript-execution/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0437.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34844",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://websecurity.com.ua/3275/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-22.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504718/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504723/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022096",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=475636",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6064",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6131",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6731",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9818",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://ha.ckers.org/blog/20070309/firefox-header-redirection-javascript-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://websecurity.com.ua/3275/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0436.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504718/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504723/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=475636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/764-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-22T18:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "dig.php en las herramientas DNS GScripts.net permite a atacantes remotos ejecutar código de su elección al utilizar meta-caracteres del interprete de comandos en el parámetro \"host\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gscripts:dns_tools:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE79F01-6B31-466B-9512-CFBDD79CF22A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34773",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-22T18:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in administration/index.php in chCounter 3.1.3 allows remote attackers to execute arbitrary SQL commands via the login_name parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en administration/index.php en chCounter v3.1.3 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"login_name\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chcounter:chcounter:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1218F9E-A0D4-484F-A259-2138AE199D78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/24879",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-22T21:30:13.127",
      "lastModified" : "2026-04-24T17:34:37.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Website\\admin\\Sales\\paypalipn.aspx in DotNetNuke (DNN) before 4.9.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to \"name/value pairs\" and \"paypal IPN functionality.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Website\\admin\\Sales\\paypalipn.aspx en DotNetNuke (DNN) versiones anteriores v4.9.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados relacionados con \"parejas name/value\" y \"funcionalidad paypal IPN\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.2",
            "matchCriteriaId" : "3F189FF4-0C86-4F36-8E44-8116D6A696CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2548573E-7FDD-425D-95B6-ADCEAA77F722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2577EF82-53B4-4214-89EA-A292DE87F30B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E536AA-D810-4D2D-BF58-A1CDB37D9B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E04BBB1-E7C2-44E5-AAD7-405EC5CEE5C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:1.0.10d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF31E99C-DD44-4016-82C2-9F52D54C691F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:1.0.10e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED5EEC4-20B7-40A8-AF4F-34A3520F5011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DE6E92-32F1-4388-89A3-386D6054A274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1310A0F-89BC-4199-9588-A676A65B8985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A385977D-BE60-4EA3-B416-D2D33B1616CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A63CE487-4186-4264-9E65-39B3F4ABC3FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC3E38B-1C6A-406B-96BF-3BE49094DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B169A9F8-CEB6-4F99-B0BE-A25BEF964208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B056AAD8-8E66-498D-ABC1-A582691BDB03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2824231-B0CD-46A2-967E-93691A53F30B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EB40A1C-6104-41C0-8CE7-65097AA1E756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225B1E93-6963-4569-AF6F-E534E4DC351E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84703D9D-6318-4F78-91FA-015B9484A8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D578455-9973-4BC4-BA10-2A4AB0301840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E404EC72-E317-4D5A-B13E-31D6C569F4D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD79C8EA-CD84-47AD-93DC-152EB717DC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AB4573D-5B8E-41D2-986A-338D1F03CB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC55855-1B13-43F5-91C5-D56F1D605F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7163CF0E-F277-4CB8-8CB7-5701200C9B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067321EB-5A1D-43B6-9826-6E14701CFFCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:4.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A561AD7-1E12-4F43-B78E-38B565B41B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:4.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE07817D-D3D9-4A9F-90A5-CFE0F2CC4F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:4.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D12406C-E93F-4248-B8EC-C34DA36B3C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F222B3C7-E840-46CF-8229-8E31307B5769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:4.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9852A91-F153-49CB-B376-657CBC4593A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34686",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno25/tabid/1260/Default.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno25/tabid/1260/Default.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-22T21:30:14.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web script or HTML via the query parameter in search action, a different issue than CVE-2008-6127.2a."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en moziloCMS v1.11 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"query\" en la acción de búsqueda, siendo una vulnerabilidad diferente que CVE-2008-6127.2a."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilo:mozilocms:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E63B7C-1A65-407E-BB0D-8AA95A86C79F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34474",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-22T21:30:14.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in moziloCMS 1.11 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.  NOTE: this might be the same issue as CVE-2008-6126.2, which may have been fixed in 1.10.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php en moziloCMS v1.11 permite a atacantes remotos leer ficheros de su elección al utilizar los caracteres .. (punto punto) en el parámetro \"page\". NOTA: esta podría ser la misma vulnerabilidad que CVE-2008-6126.2,que podría haber sido solucionada en v1.10.3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilo:mozilocms:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E63B7C-1A65-407E-BB0D-8AA95A86C79F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34474",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-22T21:30:14.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "moziloCMS 1.11 allows remote attackers to obtain sensitive information via the (1) gal[] parameter to gallery.php, (2) page[] and (3) cat[] parameter to index.php, or (4) file[] parameter to download.php, which reveals the installation path in an error message."
      }, {
        "lang" : "es",
        "value" : "moziloCMS v1.11 permite a atacantes remotos obtener información sensible mediante el parámetro (1) \"gal[]\" en gallery.php, los parámetros (2) \"page[]\" y () \"cat[]\" en index.php, o el parámetro (4) \"file[]\" en download.php, revelando la ruta de instalación en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilo:mozilocms:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E63B7C-1A65-407E-BB0D-8AA95A86C79F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-22T21:30:14.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in ape_plugin.plg in Xilisoft Video Converter 3.1.53.0704n and 5.1.23.0402 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .cue file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en ape_plugin.plg en Xilisoft Video Converter v3.1.53.0704n y v5.1.23.0402 permite a atacantes remotos provocar una denegación de servicio (colgarse) y posiblemente ejecutar código de su elección al utilizar una cadena larga en un fichero de extensión .cue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xilisoft:xilisoft_video_converter:3.1.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DFD3FF-B87F-4ADB-8F74-494DA7008FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xilisoft:xilisoft_video_converter:5.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E75033-DDC1-491A-86DC-DFBC60AF7F74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34660",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34472",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-23T15:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CLI_ISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) via a malformed file with UPack encoding."
      }, {
        "lang" : "es",
        "value" : "La macro CLI_ISCONTAINED en libclamav/others.h en ClamAV anteriores a v0.95.1 permite a atacantes remotos producir una denegación de servicio (caída de aplicación) a través de un fichero malformado con codificación UPack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.95",
            "matchCriteriaId" : "4DA7BE61-355F-48AD-91F3-79A9A91B5FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EC0AEB-91CF-4A79-AF40-A475E896FB45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5935EDE0-9203-4150-9B7A-AB10B377F9F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C2680C-C187-487A-B6C4-F509E0C52436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A796E5E1-6481-49EF-8D97-9EC2A01C712B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FF3AE5-5BD9-43B4-9FB0-6BED8450C9ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.8_:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "61ABEE1A-AABB-47D3-941D-81DCB198DC0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.9_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD151A-2494-41A5-9FDB-CE0082333FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22958219-46D6-4868-B324-BFC2F2C893F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4543DDEE-C1D1-428F-91C7-98B8985A5931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FED760C-7106-49CE-B4FE-CA53A1092C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.14:pre:*:*:*:*:*:*",
            "matchCriteriaId" : "CABA4177-6B24-4364-BC34-D5ED171E60FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F488ACB2-A013-4BF3-B5AC-897E40BA87F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5799FA-DD99-4A35-BC56-B2FBEB747226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F32EA99F-088E-499E-9DCE-EFA9A64D1673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B04C5B-316D-4C6A-96CF-F145F7C9E636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66D5CDE-ED5D-41BA-A4B1-28E8559EC056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20769174-C51F-47D5-A34F-EB772F542A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "721B8B46-DFD9-4937-96A3-8D731304415B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF18A59-FB30-45C6-B28E-4499DCD78F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B28E0BE-1E2D-45D2-B483-2D81326BF482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7029650-6DF1-4616-BE9F-DE40E9BBE3A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47FD5DF-F22E-4B78-9B92-A9C41950F836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.60p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F9571F-9192-414F-B680-10A22C71CFDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7CAC876-9AAC-407C-A34E-98AA6801D25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470FC8FE-785A-4934-8989-D17C1796870E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A6C0FE-2EED-447D-9F62-12CFF1E0918A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.67-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0928E05F-92E7-4451-AC11-4E6A014E1154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E7A70A-3584-4259-80CA-03AE290ABAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.68.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24AF81C1-5B68-4D84-AFB9-C0419B7F98D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27D70A0-EC82-4DC7-A66D-60D263B76E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.70:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "28C9C5AD-97A9-42C8-917C-2787785F5BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4AB3389-1C30-47BB-9DAE-0F744E7F8877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4D3D3E-067B-4A37-A851-99D2A3E20FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA837A0-C8CB-486B-845E-A370E3137697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235A144A-4AB1-4756-AFB1-58AFFE02649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "767BBE7F-6CC4-42D4-9730-6E617D36AAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.75.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA7CD6A-133F-48E4-87BC-77CF21A25940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65A7930-A913-4C3D-95A3-E629D6A468C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "9C24942D-7AD6-4391-8F05-2827AB6A751E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BABA6024-1769-44D9-BF20-215602980A89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC10D578-B4C4-48A3-ADB6-09BEFEB440E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4A3CF4-5295-47B5-8CC6-BD5B07C6618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28D6C24-5BF9-496D-AA74-28A5D1455225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA719FE4-04E0-4664-8EEC-70CD613408DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.81_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B7512-74E3-4578-9473-1C8B1759B933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C859F864-B68F-4805-B804-E50F2C3FFE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CAFEA5-C062-43EA-A302-38887DA6768C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525DC218-308C-4A0E-96A7-DC74B8973B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.84_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52584216-2921-4299-AC4E-2118EA72997B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.84_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEC1A194-C333-4AAC-AE23-9ADEFFAA6377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C71B82-8F84-4855-A138-7E7436788D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "039341D8-8E2B-4901-BFA6-9CCC46A18C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C048A75E-6587-485C-9F2B-E12BED34FF2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC4D448-DDCD-4C0B-AA84-2D054FCF718C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B003639-3228-4AC1-AB46-73481BB5DDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F0A16A-4B50-4CF0-B857-3BAC06CDD54E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D6A495D-F9BB-41B9-A912-670D837EA278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.87.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F5E6B4-88DD-4426-9FB6-D9009F6B8740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1EB857-D417-49EB-89FD-04733C872EE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B9D09D6-3EFD-45A6-88C3-199BF3EF9A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4551D5ED-6C72-4C9B-A556-491042A6113A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01859947-09D4-417E-92A4-FA4F1625C60D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "797B7A3B-BAEA-4868-BC3E-CE629FE151F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30337B76-E552-431F-B49C-A418E5B851A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53027413-3353-4051-88FA-A46859AD747A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970D5900-7F83-4140-A3E4-FF4E710DBD2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.7_p0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA0D4F76-258B-4E5D-AA4D-8231E846C76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.7_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A669CC-C10F-4E74-ACD0-DF933D723EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDAFCF3-811C-4365-8BBA-E0BB4F67AD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E8E7E7-E29A-4539-8D8C-45B9C39B0146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90.1_p0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A966F2C4-47A0-445F-8927-0F0222A48FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7681419E-5125-40D6-BE61-57CE9C8F3DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90.2_p0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE0D056-B84F-4331-832C-5D1703A15A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A13543-D7E2-41D6-8E8E-BE150ECDAA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90.3_p0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27310591-C883-4929-824A-AE99E7592D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90.3_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2964A047-0277-4DA4-BDBE-3F5FC3C1F68E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30CD371C-7B08-4A4B-AEB7-AC6BD199EE15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90_rc1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBFE202-86D7-4AE3-AC5B-0902B5FEF18A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FBB0CE5-C6E7-469D-B3E4-1AB7FF677DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2B28501-9959-41D4-AA04-70706792611E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E891471A-A0B8-4251-A6D3-60E947A18F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.91.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E6A5E0-66E0-4EA7-9007-2389179500C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.91.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED827D10-C862-4BC7-AB33-06E040DAE161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.91.2_p0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51DC9827-D7D1-4D34-AA35-6A7BDB92907D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.91_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5511BAA8-2BA1-45C2-A4FB-6B8285CE62DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.91_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A756F525-1527-49FB-B045-9709FA957836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3B776-0096-41B7-8D2E-C6F0B4F37458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.92.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5AAC04C-FFC7-45D8-A29C-6B258CD56489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.92_p0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06278C4-328D-4D14-9BC1-DCA697EC9EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A66094D-050A-405E-AB0F-239A39F64E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.93.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF14BCBC-8B3C-4F70-93E8-ADB5C992ACE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.93.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B931BDB2-DBE4-4983-ABFB-86941CDD14F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.93.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8FA4A86-C015-4F1F-B565-89410E70D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F874453A-7F9C-4FF2-ACBD-F691FBF3B4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.94.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0722860E-934A-49CA-BEAD-0EB05AA6E4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.94.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F399F4-E7C0-4AD0-AA4F-C7C7FC2C466E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.95:src1:*:*:*:*:*:*",
            "matchCriteriaId" : "19A73FE2-2D4C-4B47-85C9-F8E3874992B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.95:src2:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB5B3F9-3A02-450D-A6F0-4C640209780B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34612",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34654",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.clamav.net/websvn/filedetails.php?repname=clamav-devel&path=%2Ftrunk%2FChangeLog&rev=5032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34446",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-756-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0985",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/360502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.clamav.net/websvn/filedetails.php?repname=clamav-devel&path=%2Ftrunk%2FChangeLog&rev=5032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-756-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.net/bugs/360502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-23T15:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función cli_url_canon en libclamav/phishcheck.c en ClamAV antes de 0.95.1 permite a atacantes remotos provocar una denegación de servicio (cuelgue de la aplicación) y posiblemente ejecutar código de su elección mediante una URL manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:src2:*:*:*:*:*:*",
            "versionEndIncluding" : "0.95",
            "matchCriteriaId" : "6D8C3234-5194-4E3B-8503-526CB99E0E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EC0AEB-91CF-4A79-AF40-A475E896FB45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5935EDE0-9203-4150-9B7A-AB10B377F9F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C2680C-C187-487A-B6C4-F509E0C52436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A796E5E1-6481-49EF-8D97-9EC2A01C712B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FF3AE5-5BD9-43B4-9FB0-6BED8450C9ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.8_:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "61ABEE1A-AABB-47D3-941D-81DCB198DC0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.9_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD151A-2494-41A5-9FDB-CE0082333FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22958219-46D6-4868-B324-BFC2F2C893F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4543DDEE-C1D1-428F-91C7-98B8985A5931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FED760C-7106-49CE-B4FE-CA53A1092C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.14:pre:*:*:*:*:*:*",
            "matchCriteriaId" : "CABA4177-6B24-4364-BC34-D5ED171E60FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F488ACB2-A013-4BF3-B5AC-897E40BA87F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5799FA-DD99-4A35-BC56-B2FBEB747226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F32EA99F-088E-499E-9DCE-EFA9A64D1673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B04C5B-316D-4C6A-96CF-F145F7C9E636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66D5CDE-ED5D-41BA-A4B1-28E8559EC056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20769174-C51F-47D5-A34F-EB772F542A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "721B8B46-DFD9-4937-96A3-8D731304415B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF18A59-FB30-45C6-B28E-4499DCD78F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B28E0BE-1E2D-45D2-B483-2D81326BF482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7029650-6DF1-4616-BE9F-DE40E9BBE3A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47FD5DF-F22E-4B78-9B92-A9C41950F836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.60p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F9571F-9192-414F-B680-10A22C71CFDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7CAC876-9AAC-407C-A34E-98AA6801D25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470FC8FE-785A-4934-8989-D17C1796870E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A6C0FE-2EED-447D-9F62-12CFF1E0918A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.67-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0928E05F-92E7-4451-AC11-4E6A014E1154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E7A70A-3584-4259-80CA-03AE290ABAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.68.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24AF81C1-5B68-4D84-AFB9-C0419B7F98D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27D70A0-EC82-4DC7-A66D-60D263B76E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.70:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "28C9C5AD-97A9-42C8-917C-2787785F5BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4AB3389-1C30-47BB-9DAE-0F744E7F8877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4D3D3E-067B-4A37-A851-99D2A3E20FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA837A0-C8CB-486B-845E-A370E3137697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235A144A-4AB1-4756-AFB1-58AFFE02649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "767BBE7F-6CC4-42D4-9730-6E617D36AAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.75.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA7CD6A-133F-48E4-87BC-77CF21A25940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65A7930-A913-4C3D-95A3-E629D6A468C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "9C24942D-7AD6-4391-8F05-2827AB6A751E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BABA6024-1769-44D9-BF20-215602980A89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC10D578-B4C4-48A3-ADB6-09BEFEB440E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4A3CF4-5295-47B5-8CC6-BD5B07C6618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28D6C24-5BF9-496D-AA74-28A5D1455225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA719FE4-04E0-4664-8EEC-70CD613408DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.81_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B7512-74E3-4578-9473-1C8B1759B933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C859F864-B68F-4805-B804-E50F2C3FFE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CAFEA5-C062-43EA-A302-38887DA6768C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525DC218-308C-4A0E-96A7-DC74B8973B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.84_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52584216-2921-4299-AC4E-2118EA72997B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.84_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEC1A194-C333-4AAC-AE23-9ADEFFAA6377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C71B82-8F84-4855-A138-7E7436788D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "039341D8-8E2B-4901-BFA6-9CCC46A18C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C048A75E-6587-485C-9F2B-E12BED34FF2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC4D448-DDCD-4C0B-AA84-2D054FCF718C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B003639-3228-4AC1-AB46-73481BB5DDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F0A16A-4B50-4CF0-B857-3BAC06CDD54E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D6A495D-F9BB-41B9-A912-670D837EA278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.87.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F5E6B4-88DD-4426-9FB6-D9009F6B8740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1EB857-D417-49EB-89FD-04733C872EE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B9D09D6-3EFD-45A6-88C3-199BF3EF9A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4551D5ED-6C72-4C9B-A556-491042A6113A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01859947-09D4-417E-92A4-FA4F1625C60D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "797B7A3B-BAEA-4868-BC3E-CE629FE151F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30337B76-E552-431F-B49C-A418E5B851A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53027413-3353-4051-88FA-A46859AD747A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970D5900-7F83-4140-A3E4-FF4E710DBD2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.7_p0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA0D4F76-258B-4E5D-AA4D-8231E846C76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.7_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A669CC-C10F-4E74-ACD0-DF933D723EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDAFCF3-811C-4365-8BBA-E0BB4F67AD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E8E7E7-E29A-4539-8D8C-45B9C39B0146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90.1_p0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A966F2C4-47A0-445F-8927-0F0222A48FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7681419E-5125-40D6-BE61-57CE9C8F3DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90.2_p0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE0D056-B84F-4331-832C-5D1703A15A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A13543-D7E2-41D6-8E8E-BE150ECDAA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90.3_p0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27310591-C883-4929-824A-AE99E7592D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90.3_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2964A047-0277-4DA4-BDBE-3F5FC3C1F68E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30CD371C-7B08-4A4B-AEB7-AC6BD199EE15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90_rc1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBFE202-86D7-4AE3-AC5B-0902B5FEF18A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FBB0CE5-C6E7-469D-B3E4-1AB7FF677DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.90_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2B28501-9959-41D4-AA04-70706792611E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E891471A-A0B8-4251-A6D3-60E947A18F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.91.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E6A5E0-66E0-4EA7-9007-2389179500C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.91.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED827D10-C862-4BC7-AB33-06E040DAE161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.91.2_p0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51DC9827-D7D1-4D34-AA35-6A7BDB92907D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.91_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5511BAA8-2BA1-45C2-A4FB-6B8285CE62DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.91_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A756F525-1527-49FB-B045-9709FA957836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3B776-0096-41B7-8D2E-C6F0B4F37458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.92.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5AAC04C-FFC7-45D8-A29C-6B258CD56489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.92_p0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06278C4-328D-4D14-9BC1-DCA697EC9EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A66094D-050A-405E-AB0F-239A39F64E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.93.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF14BCBC-8B3C-4F70-93E8-ADB5C992ACE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.93.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B931BDB2-DBE4-4983-ABFB-86941CDD14F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.93.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8FA4A86-C015-4F1F-B565-89410E70D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F874453A-7F9C-4FF2-ACBD-F691FBF3B4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.94.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0722860E-934A-49CA-BEAD-0EB05AA6E4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.94.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F399F4-E7C0-4AD0-AA4F-C7C7FC2C466E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F0BB8C6-F0A3-418F-A457-93A4CC5BB6C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.95:src1:*:*:*:*:*:*",
            "matchCriteriaId" : "19A73FE2-2D4C-4B47-85C9-F8E3874992B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34612",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.clamav.net/websvn/filedetails.php?repname=clamav-devel&path=%2Ftrunk%2FChangeLog&rev=5032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0985",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.clamav.net/websvn/filedetails.php?repname=clamav-devel&path=%2Ftrunk%2FChangeLog&rev=5032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-23T17:30:01.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos del búfer en el decodificador JBIG2 en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, y otros productos permiten a los atacantes remotos causar una denegación de servicio (bloqueo) por medio de un archivo PDF creado, relacionado a (1) JBIG2SymbolDict::setBitmap y (2) JBIG2Stream::readSymbolDictSeg."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02805E-7BD0-4563-82C8-6FFB982D4913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852F526D-F388-4FF0-BDD9-DF7635DB46D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478D53EA-CC8C-4ECB-8410-0910505AD819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C84FB90-FF1C-4502-B2D2-390438DD422F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13341DAE-D16D-41A7-BF17-FEC802997B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E30BAEA-231C-4A82-B014-9EE3D1E81545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1DE5A5-6448-43F6-A612-56998D16E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F84699-D4CF-4FD1-A959-53E316559EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D820DFD5-0EF9-4C9A-B281-D553A4F63141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CF839D-D034-4D47-977F-7E27B36EF04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B3E8A4-14FE-42DA-B82E-839B092B5302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.02",
            "matchCriteriaId" : "32628280-E2DB-45E0-AB8A-CFC90419A182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF5EC54-9145-4B51-8241-C9343160BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1344DF7-9917-4DB0-9256-9E8131C55B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309F0CF2-4AF7-4F46-91EA-39BA07BAF312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20311EDE-0E34-432A-AE41-F61EA68F134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FEF460-3569-4294-ABA4-D7C251D67071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB41E8C2-BBCC-48CB-805B-23411D39E936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16670F8A-E70B-4CDF-8C61-414D86E20C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69483A91-53DB-4736-908F-7B14EFB40888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3E7962-0A95-4E7B-A983-683B02350B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1120B3-3372-417B-BCA0-FD515638FBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7397645-3225-4980-8465-28F93322B58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A45EAF-B511-4360-A201-D588E7EEB39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D244903F-5407-4C35-AE2C-1A05D3C227D4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.9",
            "matchCriteriaId" : "B4E90153-8D18-4A50-9581-895C851F6489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D89E03-94D0-4F7F-9A54-3021E3E5A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230B77E7-B1AE-4470-859D-7B5F99749D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6070FC-4566-4314-940E-0AAE34B56E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC691F07-8B38-4867-AB18-51F380CAEA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E943EFBF-39A7-408F-8AC5-677E83DFDBB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA7725A-4398-4C76-BEBF-10E56C7F34F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7415295-0FBF-4946-8D99-8CB2EC391319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C702EE3-4B7C-42EA-92AA-8717807CF67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F74581-D71C-4FEC-BA8C-85EF4C1991BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABCFB52-33D3-428C-B1D5-DCE504170A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F03F2B-6AC3-4872-9032-293C2E9B837C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E02B6FB-C36D-45F3-95F3-566CA03B29A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96093309-A87D-48D0-84DA-446255ABF231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF67F149-614B-4507-A15F-E557A1B73423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49862F77-B8DE-4AA7-AE17-B348B05AC00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D7719F-03E0-4E66-A50A-F8E857A9B6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3139FDA-9476-4414-B349-7119E63FD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523FE78C-441F-4ACD-B9F2-3E5293E277AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F887B5B1-7528-4086-AE6C-134F54A93342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C5C552-6276-4791-80CD-6B3EB425EF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8335D4E3-563D-4288-B708-A9635BCA595F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5279D055-248A-4BD1-9FBB-0024BA16DF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16519855-FCB9-44A8-9C7E-116192327BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D9330B-C51A-4C7D-A322-85103C64D86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA0C19F-95EB-429C-AF06-A2C1D5643662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "225CCE80-FF4B-4B39-B8BD-EB4710047524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "07925DD8-50C0-4908-95D1-7342A4617BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A519DB-6C6D-4094-814D-33BD5EF389BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ED7566-5092-4B08-97A9-B2B53117A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E72614CD-8F70-4E07-AD83-8FDE8026CEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "48E62419-C165-4B42-8C23-E24821BD4BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "217D804B-CA56-49CE-B9EB-2A297EB1763C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E8583-C837-4871-B4D2-FD41C78D538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D480C37B-0DA8-4096-80B0-5198FE589A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "241D4183-879D-4974-BACB-A6987EDA2E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96592A93-4967-4B91-BCF7-558DC472E7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8758715D-B973-4960-8B7D-6F9A11E73288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0370E9EB-B830-4362-B83C-912579695691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D644926A-C2A5-45FE-85A3-2782CE87ED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0696E675-0A13-45FC-8917-845E6FF7A311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAC98C-1FE6-42A3-8B62-E3C321914F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C36785A-F735-45C0-986B-9624AD65F0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1D3916-607F-44E8-9D47-93C6C0789083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174613C3-A04B-4701-849B-BAA598BF4F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81C1137C-BE3D-45F9-83C9-D212107F0E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA876FF-C58A-45CF-A8E8-E2068DF79421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD78771-BD9A-4AC2-B664-B189DD288FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A16424-732F-4B76-A753-1642A97BC1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E189C976-2DD2-485C-828E-7FC3DC6A8F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A86CA90F-A944-4F3E-B75F-8147125335D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAFABDC-E40F-4C53-AC66-94EFD077665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96C1B80-9E20-4832-8308-BF7911569EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C394DC-65A7-4713-B823-6F5D329A0C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BD64BB-BDA7-4F82-8324-B7C7C941133C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8814509-8B08-46C6-AE50-19B7D30DCF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0718FB6B-D787-409A-B535-0318F2C63A81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=263028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-20.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502750/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502761/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=490612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=263028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502750/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502761/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=490612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-23T17:30:01.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos enteros en el decodificador JBIG2 en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anterior, y otros productos permiten a los atacantes remotos causar una denegación de servicio (bloqueo) por medio de un archivo PDF creado, relacionado a (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg y (3) JBIG2Stream::readGenericBitmap."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02805E-7BD0-4563-82C8-6FFB982D4913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852F526D-F388-4FF0-BDD9-DF7635DB46D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478D53EA-CC8C-4ECB-8410-0910505AD819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C84FB90-FF1C-4502-B2D2-390438DD422F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13341DAE-D16D-41A7-BF17-FEC802997B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E30BAEA-231C-4A82-B014-9EE3D1E81545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1DE5A5-6448-43F6-A612-56998D16E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F84699-D4CF-4FD1-A959-53E316559EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D820DFD5-0EF9-4C9A-B281-D553A4F63141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CF839D-D034-4D47-977F-7E27B36EF04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B3E8A4-14FE-42DA-B82E-839B092B5302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.02",
            "matchCriteriaId" : "32628280-E2DB-45E0-AB8A-CFC90419A182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF5EC54-9145-4B51-8241-C9343160BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1344DF7-9917-4DB0-9256-9E8131C55B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309F0CF2-4AF7-4F46-91EA-39BA07BAF312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20311EDE-0E34-432A-AE41-F61EA68F134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FEF460-3569-4294-ABA4-D7C251D67071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB41E8C2-BBCC-48CB-805B-23411D39E936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16670F8A-E70B-4CDF-8C61-414D86E20C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69483A91-53DB-4736-908F-7B14EFB40888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3E7962-0A95-4E7B-A983-683B02350B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1120B3-3372-417B-BCA0-FD515638FBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7397645-3225-4980-8465-28F93322B58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A45EAF-B511-4360-A201-D588E7EEB39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D244903F-5407-4C35-AE2C-1A05D3C227D4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.9",
            "matchCriteriaId" : "B4E90153-8D18-4A50-9581-895C851F6489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D89E03-94D0-4F7F-9A54-3021E3E5A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230B77E7-B1AE-4470-859D-7B5F99749D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6070FC-4566-4314-940E-0AAE34B56E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC691F07-8B38-4867-AB18-51F380CAEA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E943EFBF-39A7-408F-8AC5-677E83DFDBB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA7725A-4398-4C76-BEBF-10E56C7F34F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7415295-0FBF-4946-8D99-8CB2EC391319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C702EE3-4B7C-42EA-92AA-8717807CF67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F74581-D71C-4FEC-BA8C-85EF4C1991BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABCFB52-33D3-428C-B1D5-DCE504170A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F03F2B-6AC3-4872-9032-293C2E9B837C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E02B6FB-C36D-45F3-95F3-566CA03B29A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96093309-A87D-48D0-84DA-446255ABF231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF67F149-614B-4507-A15F-E557A1B73423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49862F77-B8DE-4AA7-AE17-B348B05AC00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D7719F-03E0-4E66-A50A-F8E857A9B6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3139FDA-9476-4414-B349-7119E63FD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523FE78C-441F-4ACD-B9F2-3E5293E277AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F887B5B1-7528-4086-AE6C-134F54A93342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C5C552-6276-4791-80CD-6B3EB425EF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8335D4E3-563D-4288-B708-A9635BCA595F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5279D055-248A-4BD1-9FBB-0024BA16DF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16519855-FCB9-44A8-9C7E-116192327BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D9330B-C51A-4C7D-A322-85103C64D86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA0C19F-95EB-429C-AF06-A2C1D5643662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "225CCE80-FF4B-4B39-B8BD-EB4710047524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "07925DD8-50C0-4908-95D1-7342A4617BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A519DB-6C6D-4094-814D-33BD5EF389BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ED7566-5092-4B08-97A9-B2B53117A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E72614CD-8F70-4E07-AD83-8FDE8026CEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "48E62419-C165-4B42-8C23-E24821BD4BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "217D804B-CA56-49CE-B9EB-2A297EB1763C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E8583-C837-4871-B4D2-FD41C78D538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D480C37B-0DA8-4096-80B0-5198FE589A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "241D4183-879D-4974-BACB-A6987EDA2E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96592A93-4967-4B91-BCF7-558DC472E7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8758715D-B973-4960-8B7D-6F9A11E73288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0370E9EB-B830-4362-B83C-912579695691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D644926A-C2A5-45FE-85A3-2782CE87ED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0696E675-0A13-45FC-8917-845E6FF7A311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAC98C-1FE6-42A3-8B62-E3C321914F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C36785A-F735-45C0-986B-9624AD65F0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1D3916-607F-44E8-9D47-93C6C0789083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174613C3-A04B-4701-849B-BAA598BF4F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81C1137C-BE3D-45F9-83C9-D212107F0E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA876FF-C58A-45CF-A8E8-E2068DF79421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD78771-BD9A-4AC2-B664-B189DD288FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A16424-732F-4B76-A753-1642A97BC1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E189C976-2DD2-485C-828E-7FC3DC6A8F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A86CA90F-A944-4F3E-B75F-8147125335D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAFABDC-E40F-4C53-AC66-94EFD077665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96C1B80-9E20-4832-8308-BF7911569EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C394DC-65A7-4713-B823-6F5D329A0C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BD64BB-BDA7-4F82-8324-B7C7C941133C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8814509-8B08-46C6-AE50-19B7D30DCF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0718FB6B-D787-409A-B535-0318F2C63A81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=263028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-20.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502750/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502761/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=490614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=263028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502750/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502761/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=490614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-23T17:30:01.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "El desbordamiento de enteros en las rutinas de decodificación de imágenes TIFF en CUPS versiones 1.3.9 y anteriores, permite a los atacantes remotos causar una denegación de servicio (bloqueo del demonio) y posiblemente ejecutar código arbitrario por medio de una imagen TIFF diseñada, que no es manejado apropiadamente por la función _cupsImageReadTIFF (1) en el filtro imagetops y (2) el filtro imagetoraster, lo que conduce a un desbordamiento de búfer en la región heap de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.9",
            "matchCriteriaId" : "B4E90153-8D18-4A50-9581-895C851F6489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D89E03-94D0-4F7F-9A54-3021E3E5A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230B77E7-B1AE-4470-859D-7B5F99749D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6070FC-4566-4314-940E-0AAE34B56E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC691F07-8B38-4867-AB18-51F380CAEA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E943EFBF-39A7-408F-8AC5-677E83DFDBB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA7725A-4398-4C76-BEBF-10E56C7F34F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7415295-0FBF-4946-8D99-8CB2EC391319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C702EE3-4B7C-42EA-92AA-8717807CF67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F74581-D71C-4FEC-BA8C-85EF4C1991BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABCFB52-33D3-428C-B1D5-DCE504170A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F03F2B-6AC3-4872-9032-293C2E9B837C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E02B6FB-C36D-45F3-95F3-566CA03B29A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96093309-A87D-48D0-84DA-446255ABF231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF67F149-614B-4507-A15F-E557A1B73423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49862F77-B8DE-4AA7-AE17-B348B05AC00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D7719F-03E0-4E66-A50A-F8E857A9B6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3139FDA-9476-4414-B349-7119E63FD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523FE78C-441F-4ACD-B9F2-3E5293E277AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F887B5B1-7528-4086-AE6C-134F54A93342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C5C552-6276-4791-80CD-6B3EB425EF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8335D4E3-563D-4288-B708-A9635BCA595F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5279D055-248A-4BD1-9FBB-0024BA16DF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16519855-FCB9-44A8-9C7E-116192327BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D9330B-C51A-4C7D-A322-85103C64D86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA0C19F-95EB-429C-AF06-A2C1D5643662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "225CCE80-FF4B-4B39-B8BD-EB4710047524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "07925DD8-50C0-4908-95D1-7342A4617BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A519DB-6C6D-4094-814D-33BD5EF389BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ED7566-5092-4B08-97A9-B2B53117A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E72614CD-8F70-4E07-AD83-8FDE8026CEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "48E62419-C165-4B42-8C23-E24821BD4BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "217D804B-CA56-49CE-B9EB-2A297EB1763C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E8583-C837-4871-B4D2-FD41C78D538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D480C37B-0DA8-4096-80B0-5198FE589A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "241D4183-879D-4974-BACB-A6987EDA2E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96592A93-4967-4B91-BCF7-558DC472E7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8758715D-B973-4960-8B7D-6F9A11E73288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0370E9EB-B830-4362-B83C-912579695691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D644926A-C2A5-45FE-85A3-2782CE87ED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB34629-DB13-4164-8A18-BD818E50528B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "2D432471-B5FD-4B1D-82DF-6F3152752071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "960DE41E-63DB-45EB-9B19-6349BDA05086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A57D2299-3409-4907-9FC0-5C3C715CDB37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EB92FA-3669-4530-BE69-84CF01D98FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0696E675-0A13-45FC-8917-845E6FF7A311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAC98C-1FE6-42A3-8B62-E3C321914F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C36785A-F735-45C0-986B-9624AD65F0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1D3916-607F-44E8-9D47-93C6C0789083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174613C3-A04B-4701-849B-BAA598BF4F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81C1137C-BE3D-45F9-83C9-D212107F0E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA876FF-C58A-45CF-A8E8-E2068DF79421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD78771-BD9A-4AC2-B664-B189DD288FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A16424-732F-4B76-A753-1642A97BC1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E189C976-2DD2-485C-828E-7FC3DC6A8F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A86CA90F-A944-4F3E-B75F-8147125335D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "690C4DEC-1467-4D7D-8E73-6EE1758439D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5CA96B-411E-47BE-81A1-1C2E240A25F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5A29C9-1913-4B8F-B162-66E71BEABD1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAFABDC-E40F-4C53-AC66-94EFD077665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96C1B80-9E20-4832-8308-BF7911569EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C394DC-65A7-4713-B823-6F5D329A0C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BD64BB-BDA7-4F82-8324-B7C7C941133C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34722",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34747",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-20.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cups.org/articles.php?L582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cups.org/str.php?L3031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0428.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502750/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-760-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=490596",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cups.org/articles.php?L582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cups.org/str.php?L3031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0428.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502750/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-760-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=490596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-23T17:30:01.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory."
      }, {
        "lang" : "es",
        "value" : "El decodificador JBIG2 en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, y otros productos permite a los atacantes remotos causar una denegación de servicio (bloqueo) por medio de un archivo PDF creado que desencadena una liberación de memoria no inicializada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02805E-7BD0-4563-82C8-6FFB982D4913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852F526D-F388-4FF0-BDD9-DF7635DB46D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478D53EA-CC8C-4ECB-8410-0910505AD819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C84FB90-FF1C-4502-B2D2-390438DD422F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13341DAE-D16D-41A7-BF17-FEC802997B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E30BAEA-231C-4A82-B014-9EE3D1E81545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1DE5A5-6448-43F6-A612-56998D16E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F84699-D4CF-4FD1-A959-53E316559EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D820DFD5-0EF9-4C9A-B281-D553A4F63141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CF839D-D034-4D47-977F-7E27B36EF04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B3E8A4-14FE-42DA-B82E-839B092B5302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.02",
            "matchCriteriaId" : "32628280-E2DB-45E0-AB8A-CFC90419A182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF5EC54-9145-4B51-8241-C9343160BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1344DF7-9917-4DB0-9256-9E8131C55B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309F0CF2-4AF7-4F46-91EA-39BA07BAF312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20311EDE-0E34-432A-AE41-F61EA68F134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FEF460-3569-4294-ABA4-D7C251D67071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB41E8C2-BBCC-48CB-805B-23411D39E936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16670F8A-E70B-4CDF-8C61-414D86E20C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69483A91-53DB-4736-908F-7B14EFB40888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3E7962-0A95-4E7B-A983-683B02350B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1120B3-3372-417B-BCA0-FD515638FBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7397645-3225-4980-8465-28F93322B58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A45EAF-B511-4360-A201-D588E7EEB39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D244903F-5407-4C35-AE2C-1A05D3C227D4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.5",
            "matchCriteriaId" : "E0299F4A-A027-430C-9A53-AFEF9022960C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0213390-08FA-4E04-835B-8BE0FC61B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B304657-740A-4F8D-99CD-22E283FEE6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3030D6-DE07-418B-AB40-87C85FCA3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3583D56-F653-457A-B1F8-25842A15CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA5DBB-5A80-439E-A135-77CB40772916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A5C43B-3978-4D0A-8166-A99622106781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88294D9-563E-4AB3-9FE6-971F43B052B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A39F672-B238-4B21-A48E-5121771949F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A8D058-224E-467E-AB61-06F90B541F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.9",
            "matchCriteriaId" : "B4E90153-8D18-4A50-9581-895C851F6489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D89E03-94D0-4F7F-9A54-3021E3E5A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230B77E7-B1AE-4470-859D-7B5F99749D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6070FC-4566-4314-940E-0AAE34B56E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC691F07-8B38-4867-AB18-51F380CAEA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E943EFBF-39A7-408F-8AC5-677E83DFDBB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA7725A-4398-4C76-BEBF-10E56C7F34F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7415295-0FBF-4946-8D99-8CB2EC391319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C702EE3-4B7C-42EA-92AA-8717807CF67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F74581-D71C-4FEC-BA8C-85EF4C1991BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABCFB52-33D3-428C-B1D5-DCE504170A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F03F2B-6AC3-4872-9032-293C2E9B837C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E02B6FB-C36D-45F3-95F3-566CA03B29A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96093309-A87D-48D0-84DA-446255ABF231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF67F149-614B-4507-A15F-E557A1B73423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49862F77-B8DE-4AA7-AE17-B348B05AC00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D7719F-03E0-4E66-A50A-F8E857A9B6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3139FDA-9476-4414-B349-7119E63FD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523FE78C-441F-4ACD-B9F2-3E5293E277AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F887B5B1-7528-4086-AE6C-134F54A93342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C5C552-6276-4791-80CD-6B3EB425EF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8335D4E3-563D-4288-B708-A9635BCA595F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5279D055-248A-4BD1-9FBB-0024BA16DF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16519855-FCB9-44A8-9C7E-116192327BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D9330B-C51A-4C7D-A322-85103C64D86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA0C19F-95EB-429C-AF06-A2C1D5643662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "225CCE80-FF4B-4B39-B8BD-EB4710047524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "07925DD8-50C0-4908-95D1-7342A4617BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A519DB-6C6D-4094-814D-33BD5EF389BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ED7566-5092-4B08-97A9-B2B53117A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E72614CD-8F70-4E07-AD83-8FDE8026CEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "48E62419-C165-4B42-8C23-E24821BD4BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "217D804B-CA56-49CE-B9EB-2A297EB1763C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E8583-C837-4871-B4D2-FD41C78D538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D480C37B-0DA8-4096-80B0-5198FE589A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "241D4183-879D-4974-BACB-A6987EDA2E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96592A93-4967-4B91-BCF7-558DC472E7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8758715D-B973-4960-8B7D-6F9A11E73288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0370E9EB-B830-4362-B83C-912579695691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D644926A-C2A5-45FE-85A3-2782CE87ED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0696E675-0A13-45FC-8917-845E6FF7A311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAC98C-1FE6-42A3-8B62-E3C321914F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C36785A-F735-45C0-986B-9624AD65F0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1D3916-607F-44E8-9D47-93C6C0789083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174613C3-A04B-4701-849B-BAA598BF4F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81C1137C-BE3D-45F9-83C9-D212107F0E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA876FF-C58A-45CF-A8E8-E2068DF79421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD78771-BD9A-4AC2-B664-B189DD288FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A16424-732F-4B76-A753-1642A97BC1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E189C976-2DD2-485C-828E-7FC3DC6A8F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A86CA90F-A944-4F3E-B75F-8147125335D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAFABDC-E40F-4C53-AC66-94EFD077665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96C1B80-9E20-4832-8308-BF7911569EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C394DC-65A7-4713-B823-6F5D329A0C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BD64BB-BDA7-4F82-8324-B7C7C941133C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8814509-8B08-46C6-AE50-19B7D30DCF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0718FB6B-D787-409A-B535-0318F2C63A81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-20.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502750/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=490625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502750/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=490625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0195",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-04-23T17:30:01.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Xpdf v3.02p12 y anteriores, CUPS v1.3.9 y probablemente otros productos, permite a atacantes remotos ejecutar código de forma arbitraria a través de un fichero PDF con segmentos JBIG2 de diccionario simbólico manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C671B95-8892-4D71-87FE-BABF5CBEC144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02805E-7BD0-4563-82C8-6FFB982D4913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852F526D-F388-4FF0-BDD9-DF7635DB46D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478D53EA-CC8C-4ECB-8410-0910505AD819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C84FB90-FF1C-4502-B2D2-390438DD422F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13341DAE-D16D-41A7-BF17-FEC802997B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E30BAEA-231C-4A82-B014-9EE3D1E81545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1DE5A5-6448-43F6-A612-56998D16E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F84699-D4CF-4FD1-A959-53E316559EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D820DFD5-0EF9-4C9A-B281-D553A4F63141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CF839D-D034-4D47-977F-7E27B36EF04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B3E8A4-14FE-42DA-B82E-839B092B5302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D79ABD-202F-464F-B6C3-B225FD37DD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.02",
            "matchCriteriaId" : "32628280-E2DB-45E0-AB8A-CFC90419A182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF5EC54-9145-4B51-8241-C9343160BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1344DF7-9917-4DB0-9256-9E8131C55B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309F0CF2-4AF7-4F46-91EA-39BA07BAF312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20311EDE-0E34-432A-AE41-F61EA68F134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FEF460-3569-4294-ABA4-D7C251D67071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB41E8C2-BBCC-48CB-805B-23411D39E936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16670F8A-E70B-4CDF-8C61-414D86E20C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69483A91-53DB-4736-908F-7B14EFB40888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3E7962-0A95-4E7B-A983-683B02350B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1120B3-3372-417B-BCA0-FD515638FBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7397645-3225-4980-8465-28F93322B58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A45EAF-B511-4360-A201-D588E7EEB39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-17/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-18/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502759/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502762/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34791",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-17/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502759/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502762/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-23T17:30:01.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El producto PlonePAS 3.x anterior a la version 3.9 y 3.2.x en versiones anteriores a la 3.2.2, un producto para Plone, no maneja adecuadamente el formulario de login, lo que permite a atacantes remotos autenticados adquirir la identidad de un usuario de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plonepas:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA0C288-C190-41CB-8B86-B5C791D906E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plonepas:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E832934C-0738-47D2-A3DA-16040EA41C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plonepas:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9535495-6677-49F9-BDE1-F7472899C3C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plonepas:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "447AB0B6-4016-4DD4-9151-1D90BE8B70D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plonepas:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7969846-24D4-4AE9-858D-A4292A65AADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plonepas:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A230672-0497-45C8-A511-BAD673193C25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:plone:plone:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E87B987-557F-49BB-A837-34142D9C3761"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://plone.org/products/plone/security/advisories/cve-2009-0662",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34840",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://plone.org/products/plone/security/advisories/cve-2009-0662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-23T17:30:01.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x before 1.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the introduction field in a user profile or (2) an arbitrary text block in a user view."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Mahara la v1.0.x anteriores a v1.0.11 y la v1.1.x anteriores a v1.1.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través (1) el campo \"introduction\" en el perfil de usuario o (2) un bloque de texto arbitrario en la vista de usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B49D797-AF1B-4F7E-A71D-AABD0F802912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18048333-3E64-4AB4-9F20-2B1B8E7AB9FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68167317-977B-48EE-9320-2A4539A93B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB25DF09-D88F-4633-9956-D64E3497153F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32430EE-5F2B-4936-A297-2DF55CC22937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC0259C-E628-4BBA-9D97-41A130B1E741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "974F2D63-488C-41D7-A627-BF9B085A8D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26420D4-20D8-4D6D-88B5-C74F39B88720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321475F4-1548-4FD1-BED9-12D944388FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F37005DE-BB31-4738-AC49-C3C2022AE8F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA6F03B-F449-424E-A856-5BE5FB98814F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "84652E40-1C88-438D-BCA1-4FF4C069F9AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "08F53776-5F58-4C20-8FE7-9DF06F1704A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D55D2C-E6E5-44A4-831A-3EAE5C1568CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "79228F92-00A8-4B74-A914-11BDF9641F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "9EEB3BF7-C4D3-4BB8-893F-B0FE252F0405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE91ED4-EA2A-4402-813C-1A2E5B10EA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "F7FB1F02-A03F-45E5-8D26-C007C10EE97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A09C63AC-15A8-4722-B18E-98A86EC8A856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "62452677-EE4C-4E5E-9DD2-D11C4211DA54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDC6F32-24C0-4B5E-8338-FF85B0BBF801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92848F08-EBFC-4579-A088-EC15D0B3EE48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mahara.org/interaction/forum/topic.php?id=532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34789",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1778",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34677",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://mahara.org/interaction/forum/topic.php?id=532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0799",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-23T17:30:01.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read."
      }, {
        "lang" : "es",
        "value" : "El decodificador JBIG2 en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, Poppler versión anterior a 0.10.6, y otros productos permite a los atacantes remotos causar una denegación de servicio (bloqueo) por medio de un archivo PDF creado que desencadena una vulnerabilidad de lectura fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02805E-7BD0-4563-82C8-6FFB982D4913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852F526D-F388-4FF0-BDD9-DF7635DB46D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478D53EA-CC8C-4ECB-8410-0910505AD819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C84FB90-FF1C-4502-B2D2-390438DD422F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13341DAE-D16D-41A7-BF17-FEC802997B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E30BAEA-231C-4A82-B014-9EE3D1E81545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1DE5A5-6448-43F6-A612-56998D16E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F84699-D4CF-4FD1-A959-53E316559EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D820DFD5-0EF9-4C9A-B281-D553A4F63141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CF839D-D034-4D47-977F-7E27B36EF04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B3E8A4-14FE-42DA-B82E-839B092B5302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.02",
            "matchCriteriaId" : "32628280-E2DB-45E0-AB8A-CFC90419A182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF5EC54-9145-4B51-8241-C9343160BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1344DF7-9917-4DB0-9256-9E8131C55B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309F0CF2-4AF7-4F46-91EA-39BA07BAF312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20311EDE-0E34-432A-AE41-F61EA68F134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FEF460-3569-4294-ABA4-D7C251D67071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB41E8C2-BBCC-48CB-805B-23411D39E936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16670F8A-E70B-4CDF-8C61-414D86E20C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69483A91-53DB-4736-908F-7B14EFB40888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3E7962-0A95-4E7B-A983-683B02350B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1120B3-3372-417B-BCA0-FD515638FBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7397645-3225-4980-8465-28F93322B58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A45EAF-B511-4360-A201-D588E7EEB39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D244903F-5407-4C35-AE2C-1A05D3C227D4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.5",
            "matchCriteriaId" : "E0299F4A-A027-430C-9A53-AFEF9022960C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0213390-08FA-4E04-835B-8BE0FC61B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B304657-740A-4F8D-99CD-22E283FEE6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3030D6-DE07-418B-AB40-87C85FCA3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3583D56-F653-457A-B1F8-25842A15CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA5DBB-5A80-439E-A135-77CB40772916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A5C43B-3978-4D0A-8166-A99622106781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88294D9-563E-4AB3-9FE6-971F43B052B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A39F672-B238-4B21-A48E-5121771949F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A8D058-224E-467E-AB61-06F90B541F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.9",
            "matchCriteriaId" : "B4E90153-8D18-4A50-9581-895C851F6489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D89E03-94D0-4F7F-9A54-3021E3E5A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230B77E7-B1AE-4470-859D-7B5F99749D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6070FC-4566-4314-940E-0AAE34B56E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC691F07-8B38-4867-AB18-51F380CAEA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E943EFBF-39A7-408F-8AC5-677E83DFDBB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA7725A-4398-4C76-BEBF-10E56C7F34F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7415295-0FBF-4946-8D99-8CB2EC391319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C702EE3-4B7C-42EA-92AA-8717807CF67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F74581-D71C-4FEC-BA8C-85EF4C1991BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABCFB52-33D3-428C-B1D5-DCE504170A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F03F2B-6AC3-4872-9032-293C2E9B837C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E02B6FB-C36D-45F3-95F3-566CA03B29A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96093309-A87D-48D0-84DA-446255ABF231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF67F149-614B-4507-A15F-E557A1B73423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49862F77-B8DE-4AA7-AE17-B348B05AC00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D7719F-03E0-4E66-A50A-F8E857A9B6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3139FDA-9476-4414-B349-7119E63FD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523FE78C-441F-4ACD-B9F2-3E5293E277AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F887B5B1-7528-4086-AE6C-134F54A93342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C5C552-6276-4791-80CD-6B3EB425EF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8335D4E3-563D-4288-B708-A9635BCA595F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5279D055-248A-4BD1-9FBB-0024BA16DF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16519855-FCB9-44A8-9C7E-116192327BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D9330B-C51A-4C7D-A322-85103C64D86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA0C19F-95EB-429C-AF06-A2C1D5643662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "225CCE80-FF4B-4B39-B8BD-EB4710047524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "07925DD8-50C0-4908-95D1-7342A4617BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A519DB-6C6D-4094-814D-33BD5EF389BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ED7566-5092-4B08-97A9-B2B53117A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E72614CD-8F70-4E07-AD83-8FDE8026CEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "48E62419-C165-4B42-8C23-E24821BD4BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "217D804B-CA56-49CE-B9EB-2A297EB1763C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E8583-C837-4871-B4D2-FD41C78D538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D480C37B-0DA8-4096-80B0-5198FE589A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "241D4183-879D-4974-BACB-A6987EDA2E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96592A93-4967-4B91-BCF7-558DC472E7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8758715D-B973-4960-8B7D-6F9A11E73288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0370E9EB-B830-4362-B83C-912579695691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D644926A-C2A5-45FE-85A3-2782CE87ED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0696E675-0A13-45FC-8917-845E6FF7A311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAC98C-1FE6-42A3-8B62-E3C321914F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C36785A-F735-45C0-986B-9624AD65F0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1D3916-607F-44E8-9D47-93C6C0789083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174613C3-A04B-4701-849B-BAA598BF4F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81C1137C-BE3D-45F9-83C9-D212107F0E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA876FF-C58A-45CF-A8E8-E2068DF79421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD78771-BD9A-4AC2-B664-B189DD288FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A16424-732F-4B76-A753-1642A97BC1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E189C976-2DD2-485C-828E-7FC3DC6A8F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A86CA90F-A944-4F3E-B75F-8147125335D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAFABDC-E40F-4C53-AC66-94EFD077665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96C1B80-9E20-4832-8308-BF7911569EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C394DC-65A7-4713-B823-6F5D329A0C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BD64BB-BDA7-4F82-8324-B7C7C941133C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8814509-8B08-46C6-AE50-19B7D30DCF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0718FB6B-D787-409A-B535-0318F2C63A81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=495886",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022072",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10204",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=495886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0800",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-23T17:30:01.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple \"input validation flaws\" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Múltiples \"Input validation flaws\" en el decodificador JBIG2 en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, Poppler versión anterior a 0.10.6, y otros productos permiten a los atacantes remotos ejecutar código arbitrario por medio de un archivo PDF creado"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02805E-7BD0-4563-82C8-6FFB982D4913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852F526D-F388-4FF0-BDD9-DF7635DB46D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478D53EA-CC8C-4ECB-8410-0910505AD819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C84FB90-FF1C-4502-B2D2-390438DD422F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13341DAE-D16D-41A7-BF17-FEC802997B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E30BAEA-231C-4A82-B014-9EE3D1E81545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1DE5A5-6448-43F6-A612-56998D16E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F84699-D4CF-4FD1-A959-53E316559EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D820DFD5-0EF9-4C9A-B281-D553A4F63141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CF839D-D034-4D47-977F-7E27B36EF04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B3E8A4-14FE-42DA-B82E-839B092B5302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.02",
            "matchCriteriaId" : "32628280-E2DB-45E0-AB8A-CFC90419A182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF5EC54-9145-4B51-8241-C9343160BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1344DF7-9917-4DB0-9256-9E8131C55B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309F0CF2-4AF7-4F46-91EA-39BA07BAF312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20311EDE-0E34-432A-AE41-F61EA68F134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FEF460-3569-4294-ABA4-D7C251D67071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB41E8C2-BBCC-48CB-805B-23411D39E936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16670F8A-E70B-4CDF-8C61-414D86E20C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69483A91-53DB-4736-908F-7B14EFB40888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3E7962-0A95-4E7B-A983-683B02350B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1120B3-3372-417B-BCA0-FD515638FBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7397645-3225-4980-8465-28F93322B58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A45EAF-B511-4360-A201-D588E7EEB39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D244903F-5407-4C35-AE2C-1A05D3C227D4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.5",
            "matchCriteriaId" : "E0299F4A-A027-430C-9A53-AFEF9022960C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0213390-08FA-4E04-835B-8BE0FC61B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B304657-740A-4F8D-99CD-22E283FEE6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3030D6-DE07-418B-AB40-87C85FCA3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3583D56-F653-457A-B1F8-25842A15CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA5DBB-5A80-439E-A135-77CB40772916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A5C43B-3978-4D0A-8166-A99622106781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88294D9-563E-4AB3-9FE6-971F43B052B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A39F672-B238-4B21-A48E-5121771949F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A8D058-224E-467E-AB61-06F90B541F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.9",
            "matchCriteriaId" : "B4E90153-8D18-4A50-9581-895C851F6489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D89E03-94D0-4F7F-9A54-3021E3E5A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230B77E7-B1AE-4470-859D-7B5F99749D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6070FC-4566-4314-940E-0AAE34B56E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC691F07-8B38-4867-AB18-51F380CAEA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E943EFBF-39A7-408F-8AC5-677E83DFDBB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA7725A-4398-4C76-BEBF-10E56C7F34F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7415295-0FBF-4946-8D99-8CB2EC391319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C702EE3-4B7C-42EA-92AA-8717807CF67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F74581-D71C-4FEC-BA8C-85EF4C1991BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABCFB52-33D3-428C-B1D5-DCE504170A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F03F2B-6AC3-4872-9032-293C2E9B837C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E02B6FB-C36D-45F3-95F3-566CA03B29A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96093309-A87D-48D0-84DA-446255ABF231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF67F149-614B-4507-A15F-E557A1B73423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49862F77-B8DE-4AA7-AE17-B348B05AC00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D7719F-03E0-4E66-A50A-F8E857A9B6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3139FDA-9476-4414-B349-7119E63FD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523FE78C-441F-4ACD-B9F2-3E5293E277AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F887B5B1-7528-4086-AE6C-134F54A93342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C5C552-6276-4791-80CD-6B3EB425EF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8335D4E3-563D-4288-B708-A9635BCA595F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5279D055-248A-4BD1-9FBB-0024BA16DF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16519855-FCB9-44A8-9C7E-116192327BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D9330B-C51A-4C7D-A322-85103C64D86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA0C19F-95EB-429C-AF06-A2C1D5643662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "225CCE80-FF4B-4B39-B8BD-EB4710047524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "07925DD8-50C0-4908-95D1-7342A4617BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A519DB-6C6D-4094-814D-33BD5EF389BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ED7566-5092-4B08-97A9-B2B53117A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E72614CD-8F70-4E07-AD83-8FDE8026CEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "48E62419-C165-4B42-8C23-E24821BD4BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "217D804B-CA56-49CE-B9EB-2A297EB1763C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E8583-C837-4871-B4D2-FD41C78D538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D480C37B-0DA8-4096-80B0-5198FE589A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "241D4183-879D-4974-BACB-A6987EDA2E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96592A93-4967-4B91-BCF7-558DC472E7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8758715D-B973-4960-8B7D-6F9A11E73288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0370E9EB-B830-4362-B83C-912579695691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D644926A-C2A5-45FE-85A3-2782CE87ED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0696E675-0A13-45FC-8917-845E6FF7A311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAC98C-1FE6-42A3-8B62-E3C321914F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C36785A-F735-45C0-986B-9624AD65F0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1D3916-607F-44E8-9D47-93C6C0789083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174613C3-A04B-4701-849B-BAA598BF4F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81C1137C-BE3D-45F9-83C9-D212107F0E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA876FF-C58A-45CF-A8E8-E2068DF79421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD78771-BD9A-4AC2-B664-B189DD288FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A16424-732F-4B76-A753-1642A97BC1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E189C976-2DD2-485C-828E-7FC3DC6A8F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A86CA90F-A944-4F3E-B75F-8147125335D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAFABDC-E40F-4C53-AC66-94EFD077665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96C1B80-9E20-4832-8308-BF7911569EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C394DC-65A7-4713-B823-6F5D329A0C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BD64BB-BDA7-4F82-8324-B7C7C941133C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8814509-8B08-46C6-AE50-19B7D30DCF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0718FB6B-D787-409A-B535-0318F2C63A81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022073",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495887",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11323",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1179",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-23T17:30:01.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en el decodificador JBIG2 en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, Poppler versión anterior a 0.10.6, y otros productos permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo PDF creado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02805E-7BD0-4563-82C8-6FFB982D4913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852F526D-F388-4FF0-BDD9-DF7635DB46D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478D53EA-CC8C-4ECB-8410-0910505AD819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C84FB90-FF1C-4502-B2D2-390438DD422F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13341DAE-D16D-41A7-BF17-FEC802997B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E30BAEA-231C-4A82-B014-9EE3D1E81545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1DE5A5-6448-43F6-A612-56998D16E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F84699-D4CF-4FD1-A959-53E316559EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D820DFD5-0EF9-4C9A-B281-D553A4F63141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CF839D-D034-4D47-977F-7E27B36EF04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B3E8A4-14FE-42DA-B82E-839B092B5302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.02",
            "matchCriteriaId" : "32628280-E2DB-45E0-AB8A-CFC90419A182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF5EC54-9145-4B51-8241-C9343160BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1344DF7-9917-4DB0-9256-9E8131C55B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309F0CF2-4AF7-4F46-91EA-39BA07BAF312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20311EDE-0E34-432A-AE41-F61EA68F134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FEF460-3569-4294-ABA4-D7C251D67071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB41E8C2-BBCC-48CB-805B-23411D39E936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16670F8A-E70B-4CDF-8C61-414D86E20C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69483A91-53DB-4736-908F-7B14EFB40888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3E7962-0A95-4E7B-A983-683B02350B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1120B3-3372-417B-BCA0-FD515638FBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7397645-3225-4980-8465-28F93322B58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A45EAF-B511-4360-A201-D588E7EEB39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D244903F-5407-4C35-AE2C-1A05D3C227D4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.5",
            "matchCriteriaId" : "E0299F4A-A027-430C-9A53-AFEF9022960C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0213390-08FA-4E04-835B-8BE0FC61B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B304657-740A-4F8D-99CD-22E283FEE6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3030D6-DE07-418B-AB40-87C85FCA3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3583D56-F653-457A-B1F8-25842A15CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA5DBB-5A80-439E-A135-77CB40772916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A5C43B-3978-4D0A-8166-A99622106781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88294D9-563E-4AB3-9FE6-971F43B052B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A39F672-B238-4B21-A48E-5121771949F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A8D058-224E-467E-AB61-06F90B541F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.9",
            "matchCriteriaId" : "B4E90153-8D18-4A50-9581-895C851F6489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D89E03-94D0-4F7F-9A54-3021E3E5A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230B77E7-B1AE-4470-859D-7B5F99749D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6070FC-4566-4314-940E-0AAE34B56E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC691F07-8B38-4867-AB18-51F380CAEA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E943EFBF-39A7-408F-8AC5-677E83DFDBB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA7725A-4398-4C76-BEBF-10E56C7F34F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7415295-0FBF-4946-8D99-8CB2EC391319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C702EE3-4B7C-42EA-92AA-8717807CF67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F74581-D71C-4FEC-BA8C-85EF4C1991BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABCFB52-33D3-428C-B1D5-DCE504170A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F03F2B-6AC3-4872-9032-293C2E9B837C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E02B6FB-C36D-45F3-95F3-566CA03B29A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96093309-A87D-48D0-84DA-446255ABF231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF67F149-614B-4507-A15F-E557A1B73423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49862F77-B8DE-4AA7-AE17-B348B05AC00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D7719F-03E0-4E66-A50A-F8E857A9B6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3139FDA-9476-4414-B349-7119E63FD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523FE78C-441F-4ACD-B9F2-3E5293E277AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F887B5B1-7528-4086-AE6C-134F54A93342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C5C552-6276-4791-80CD-6B3EB425EF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8335D4E3-563D-4288-B708-A9635BCA595F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5279D055-248A-4BD1-9FBB-0024BA16DF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16519855-FCB9-44A8-9C7E-116192327BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D9330B-C51A-4C7D-A322-85103C64D86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA0C19F-95EB-429C-AF06-A2C1D5643662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "225CCE80-FF4B-4B39-B8BD-EB4710047524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "07925DD8-50C0-4908-95D1-7342A4617BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A519DB-6C6D-4094-814D-33BD5EF389BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ED7566-5092-4B08-97A9-B2B53117A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E72614CD-8F70-4E07-AD83-8FDE8026CEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "48E62419-C165-4B42-8C23-E24821BD4BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "217D804B-CA56-49CE-B9EB-2A297EB1763C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E8583-C837-4871-B4D2-FD41C78D538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D480C37B-0DA8-4096-80B0-5198FE589A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "241D4183-879D-4974-BACB-A6987EDA2E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96592A93-4967-4B91-BCF7-558DC472E7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8758715D-B973-4960-8B7D-6F9A11E73288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0370E9EB-B830-4362-B83C-912579695691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D644926A-C2A5-45FE-85A3-2782CE87ED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0696E675-0A13-45FC-8917-845E6FF7A311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAC98C-1FE6-42A3-8B62-E3C321914F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C36785A-F735-45C0-986B-9624AD65F0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1D3916-607F-44E8-9D47-93C6C0789083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174613C3-A04B-4701-849B-BAA598BF4F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81C1137C-BE3D-45F9-83C9-D212107F0E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA876FF-C58A-45CF-A8E8-E2068DF79421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD78771-BD9A-4AC2-B664-B189DD288FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A16424-732F-4B76-A753-1642A97BC1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E189C976-2DD2-485C-828E-7FC3DC6A8F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A86CA90F-A944-4F3E-B75F-8147125335D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAFABDC-E40F-4C53-AC66-94EFD077665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96C1B80-9E20-4832-8308-BF7911569EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C394DC-65A7-4713-B823-6F5D329A0C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BD64BB-BDA7-4F82-8324-B7C7C941133C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8814509-8B08-46C6-AE50-19B7D30DCF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0718FB6B-D787-409A-B535-0318F2C63A81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022073",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495889",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11892",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1180",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-23T17:30:01.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data."
      }, {
        "lang" : "es",
        "value" : "El decodificador JBIG2 en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, Poppler versión anterior a 0.10.6, y otros productos, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo PDF creado que desencadena una liberación de datos no válidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02805E-7BD0-4563-82C8-6FFB982D4913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852F526D-F388-4FF0-BDD9-DF7635DB46D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478D53EA-CC8C-4ECB-8410-0910505AD819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C84FB90-FF1C-4502-B2D2-390438DD422F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13341DAE-D16D-41A7-BF17-FEC802997B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E30BAEA-231C-4A82-B014-9EE3D1E81545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1DE5A5-6448-43F6-A612-56998D16E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F84699-D4CF-4FD1-A959-53E316559EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D820DFD5-0EF9-4C9A-B281-D553A4F63141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CF839D-D034-4D47-977F-7E27B36EF04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B3E8A4-14FE-42DA-B82E-839B092B5302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.02",
            "matchCriteriaId" : "32628280-E2DB-45E0-AB8A-CFC90419A182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF5EC54-9145-4B51-8241-C9343160BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1344DF7-9917-4DB0-9256-9E8131C55B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309F0CF2-4AF7-4F46-91EA-39BA07BAF312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20311EDE-0E34-432A-AE41-F61EA68F134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FEF460-3569-4294-ABA4-D7C251D67071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB41E8C2-BBCC-48CB-805B-23411D39E936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16670F8A-E70B-4CDF-8C61-414D86E20C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69483A91-53DB-4736-908F-7B14EFB40888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3E7962-0A95-4E7B-A983-683B02350B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1120B3-3372-417B-BCA0-FD515638FBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7397645-3225-4980-8465-28F93322B58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A45EAF-B511-4360-A201-D588E7EEB39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D244903F-5407-4C35-AE2C-1A05D3C227D4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.5",
            "matchCriteriaId" : "E0299F4A-A027-430C-9A53-AFEF9022960C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0213390-08FA-4E04-835B-8BE0FC61B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B304657-740A-4F8D-99CD-22E283FEE6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3030D6-DE07-418B-AB40-87C85FCA3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3583D56-F653-457A-B1F8-25842A15CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA5DBB-5A80-439E-A135-77CB40772916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A5C43B-3978-4D0A-8166-A99622106781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88294D9-563E-4AB3-9FE6-971F43B052B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A39F672-B238-4B21-A48E-5121771949F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A8D058-224E-467E-AB61-06F90B541F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.9",
            "matchCriteriaId" : "B4E90153-8D18-4A50-9581-895C851F6489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D89E03-94D0-4F7F-9A54-3021E3E5A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230B77E7-B1AE-4470-859D-7B5F99749D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6070FC-4566-4314-940E-0AAE34B56E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC691F07-8B38-4867-AB18-51F380CAEA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E943EFBF-39A7-408F-8AC5-677E83DFDBB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA7725A-4398-4C76-BEBF-10E56C7F34F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7415295-0FBF-4946-8D99-8CB2EC391319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C702EE3-4B7C-42EA-92AA-8717807CF67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F74581-D71C-4FEC-BA8C-85EF4C1991BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABCFB52-33D3-428C-B1D5-DCE504170A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F03F2B-6AC3-4872-9032-293C2E9B837C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E02B6FB-C36D-45F3-95F3-566CA03B29A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96093309-A87D-48D0-84DA-446255ABF231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF67F149-614B-4507-A15F-E557A1B73423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49862F77-B8DE-4AA7-AE17-B348B05AC00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D7719F-03E0-4E66-A50A-F8E857A9B6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3139FDA-9476-4414-B349-7119E63FD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523FE78C-441F-4ACD-B9F2-3E5293E277AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F887B5B1-7528-4086-AE6C-134F54A93342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C5C552-6276-4791-80CD-6B3EB425EF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8335D4E3-563D-4288-B708-A9635BCA595F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5279D055-248A-4BD1-9FBB-0024BA16DF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16519855-FCB9-44A8-9C7E-116192327BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D9330B-C51A-4C7D-A322-85103C64D86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA0C19F-95EB-429C-AF06-A2C1D5643662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "225CCE80-FF4B-4B39-B8BD-EB4710047524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "07925DD8-50C0-4908-95D1-7342A4617BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A519DB-6C6D-4094-814D-33BD5EF389BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ED7566-5092-4B08-97A9-B2B53117A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E72614CD-8F70-4E07-AD83-8FDE8026CEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "48E62419-C165-4B42-8C23-E24821BD4BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "217D804B-CA56-49CE-B9EB-2A297EB1763C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E8583-C837-4871-B4D2-FD41C78D538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D480C37B-0DA8-4096-80B0-5198FE589A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "241D4183-879D-4974-BACB-A6987EDA2E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96592A93-4967-4B91-BCF7-558DC472E7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8758715D-B973-4960-8B7D-6F9A11E73288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0370E9EB-B830-4362-B83C-912579695691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D644926A-C2A5-45FE-85A3-2782CE87ED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0696E675-0A13-45FC-8917-845E6FF7A311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAC98C-1FE6-42A3-8B62-E3C321914F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C36785A-F735-45C0-986B-9624AD65F0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1D3916-607F-44E8-9D47-93C6C0789083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174613C3-A04B-4701-849B-BAA598BF4F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81C1137C-BE3D-45F9-83C9-D212107F0E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA876FF-C58A-45CF-A8E8-E2068DF79421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD78771-BD9A-4AC2-B664-B189DD288FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A16424-732F-4B76-A753-1642A97BC1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E189C976-2DD2-485C-828E-7FC3DC6A8F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A86CA90F-A944-4F3E-B75F-8147125335D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAFABDC-E40F-4C53-AC66-94EFD077665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96C1B80-9E20-4832-8308-BF7911569EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C394DC-65A7-4713-B823-6F5D329A0C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BD64BB-BDA7-4F82-8324-B7C7C941133C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8814509-8B08-46C6-AE50-19B7D30DCF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0718FB6B-D787-409A-B535-0318F2C63A81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022073",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495892",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9926",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1181",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-23T17:30:01.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "El decodificador JBIG2 en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, Poppler versión anterior a 0.10.6, y otros productos, permite a los atacantes remotos causar una denegación de servicio (bloqueo) por medio de un archivo PDF creado que desencadena una desreferencia de puntero NULL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02805E-7BD0-4563-82C8-6FFB982D4913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852F526D-F388-4FF0-BDD9-DF7635DB46D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478D53EA-CC8C-4ECB-8410-0910505AD819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C84FB90-FF1C-4502-B2D2-390438DD422F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13341DAE-D16D-41A7-BF17-FEC802997B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E30BAEA-231C-4A82-B014-9EE3D1E81545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1DE5A5-6448-43F6-A612-56998D16E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F84699-D4CF-4FD1-A959-53E316559EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D820DFD5-0EF9-4C9A-B281-D553A4F63141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CF839D-D034-4D47-977F-7E27B36EF04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B3E8A4-14FE-42DA-B82E-839B092B5302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.02",
            "matchCriteriaId" : "32628280-E2DB-45E0-AB8A-CFC90419A182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF5EC54-9145-4B51-8241-C9343160BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1344DF7-9917-4DB0-9256-9E8131C55B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309F0CF2-4AF7-4F46-91EA-39BA07BAF312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20311EDE-0E34-432A-AE41-F61EA68F134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FEF460-3569-4294-ABA4-D7C251D67071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB41E8C2-BBCC-48CB-805B-23411D39E936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16670F8A-E70B-4CDF-8C61-414D86E20C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69483A91-53DB-4736-908F-7B14EFB40888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3E7962-0A95-4E7B-A983-683B02350B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1120B3-3372-417B-BCA0-FD515638FBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7397645-3225-4980-8465-28F93322B58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A45EAF-B511-4360-A201-D588E7EEB39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D244903F-5407-4C35-AE2C-1A05D3C227D4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.5",
            "matchCriteriaId" : "E0299F4A-A027-430C-9A53-AFEF9022960C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0213390-08FA-4E04-835B-8BE0FC61B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B304657-740A-4F8D-99CD-22E283FEE6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3030D6-DE07-418B-AB40-87C85FCA3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3583D56-F653-457A-B1F8-25842A15CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA5DBB-5A80-439E-A135-77CB40772916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A5C43B-3978-4D0A-8166-A99622106781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88294D9-563E-4AB3-9FE6-971F43B052B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A39F672-B238-4B21-A48E-5121771949F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A8D058-224E-467E-AB61-06F90B541F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.9",
            "matchCriteriaId" : "B4E90153-8D18-4A50-9581-895C851F6489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D89E03-94D0-4F7F-9A54-3021E3E5A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230B77E7-B1AE-4470-859D-7B5F99749D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6070FC-4566-4314-940E-0AAE34B56E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC691F07-8B38-4867-AB18-51F380CAEA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E943EFBF-39A7-408F-8AC5-677E83DFDBB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA7725A-4398-4C76-BEBF-10E56C7F34F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7415295-0FBF-4946-8D99-8CB2EC391319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C702EE3-4B7C-42EA-92AA-8717807CF67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F74581-D71C-4FEC-BA8C-85EF4C1991BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABCFB52-33D3-428C-B1D5-DCE504170A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F03F2B-6AC3-4872-9032-293C2E9B837C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E02B6FB-C36D-45F3-95F3-566CA03B29A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96093309-A87D-48D0-84DA-446255ABF231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF67F149-614B-4507-A15F-E557A1B73423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49862F77-B8DE-4AA7-AE17-B348B05AC00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D7719F-03E0-4E66-A50A-F8E857A9B6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3139FDA-9476-4414-B349-7119E63FD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523FE78C-441F-4ACD-B9F2-3E5293E277AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F887B5B1-7528-4086-AE6C-134F54A93342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C5C552-6276-4791-80CD-6B3EB425EF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8335D4E3-563D-4288-B708-A9635BCA595F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5279D055-248A-4BD1-9FBB-0024BA16DF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16519855-FCB9-44A8-9C7E-116192327BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D9330B-C51A-4C7D-A322-85103C64D86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA0C19F-95EB-429C-AF06-A2C1D5643662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "225CCE80-FF4B-4B39-B8BD-EB4710047524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "07925DD8-50C0-4908-95D1-7342A4617BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A519DB-6C6D-4094-814D-33BD5EF389BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ED7566-5092-4B08-97A9-B2B53117A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E72614CD-8F70-4E07-AD83-8FDE8026CEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "48E62419-C165-4B42-8C23-E24821BD4BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "217D804B-CA56-49CE-B9EB-2A297EB1763C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E8583-C837-4871-B4D2-FD41C78D538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D480C37B-0DA8-4096-80B0-5198FE589A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "241D4183-879D-4974-BACB-A6987EDA2E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96592A93-4967-4B91-BCF7-558DC472E7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8758715D-B973-4960-8B7D-6F9A11E73288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0370E9EB-B830-4362-B83C-912579695691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D644926A-C2A5-45FE-85A3-2782CE87ED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0696E675-0A13-45FC-8917-845E6FF7A311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAC98C-1FE6-42A3-8B62-E3C321914F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C36785A-F735-45C0-986B-9624AD65F0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1D3916-607F-44E8-9D47-93C6C0789083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174613C3-A04B-4701-849B-BAA598BF4F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81C1137C-BE3D-45F9-83C9-D212107F0E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA876FF-C58A-45CF-A8E8-E2068DF79421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD78771-BD9A-4AC2-B664-B189DD288FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A16424-732F-4B76-A753-1642A97BC1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E189C976-2DD2-485C-828E-7FC3DC6A8F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A86CA90F-A944-4F3E-B75F-8147125335D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAFABDC-E40F-4C53-AC66-94EFD077665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96C1B80-9E20-4832-8308-BF7911569EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C394DC-65A7-4713-B823-6F5D329A0C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BD64BB-BDA7-4F82-8324-B7C7C941133C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8814509-8B08-46C6-AE50-19B7D30DCF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0718FB6B-D787-409A-B535-0318F2C63A81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022072",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495894",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9683",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1182",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-23T17:30:01.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos del búfer en el decodificador JBIG2 MMR en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, Poppler versión anterior a 0.10.6, y otros productos, permiten a los atacantes remotos ejecutar código arbitrario por medio de un archivo PDF creado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02805E-7BD0-4563-82C8-6FFB982D4913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852F526D-F388-4FF0-BDD9-DF7635DB46D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478D53EA-CC8C-4ECB-8410-0910505AD819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C84FB90-FF1C-4502-B2D2-390438DD422F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13341DAE-D16D-41A7-BF17-FEC802997B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E30BAEA-231C-4A82-B014-9EE3D1E81545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1DE5A5-6448-43F6-A612-56998D16E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F84699-D4CF-4FD1-A959-53E316559EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D820DFD5-0EF9-4C9A-B281-D553A4F63141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CF839D-D034-4D47-977F-7E27B36EF04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B3E8A4-14FE-42DA-B82E-839B092B5302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.02",
            "matchCriteriaId" : "32628280-E2DB-45E0-AB8A-CFC90419A182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF5EC54-9145-4B51-8241-C9343160BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1344DF7-9917-4DB0-9256-9E8131C55B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309F0CF2-4AF7-4F46-91EA-39BA07BAF312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20311EDE-0E34-432A-AE41-F61EA68F134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FEF460-3569-4294-ABA4-D7C251D67071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB41E8C2-BBCC-48CB-805B-23411D39E936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16670F8A-E70B-4CDF-8C61-414D86E20C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69483A91-53DB-4736-908F-7B14EFB40888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3E7962-0A95-4E7B-A983-683B02350B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1120B3-3372-417B-BCA0-FD515638FBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7397645-3225-4980-8465-28F93322B58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A45EAF-B511-4360-A201-D588E7EEB39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D244903F-5407-4C35-AE2C-1A05D3C227D4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.5",
            "matchCriteriaId" : "E0299F4A-A027-430C-9A53-AFEF9022960C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0213390-08FA-4E04-835B-8BE0FC61B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B304657-740A-4F8D-99CD-22E283FEE6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3030D6-DE07-418B-AB40-87C85FCA3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3583D56-F653-457A-B1F8-25842A15CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA5DBB-5A80-439E-A135-77CB40772916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A5C43B-3978-4D0A-8166-A99622106781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88294D9-563E-4AB3-9FE6-971F43B052B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A39F672-B238-4B21-A48E-5121771949F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A8D058-224E-467E-AB61-06F90B541F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.9",
            "matchCriteriaId" : "B4E90153-8D18-4A50-9581-895C851F6489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D89E03-94D0-4F7F-9A54-3021E3E5A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230B77E7-B1AE-4470-859D-7B5F99749D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6070FC-4566-4314-940E-0AAE34B56E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC691F07-8B38-4867-AB18-51F380CAEA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E943EFBF-39A7-408F-8AC5-677E83DFDBB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA7725A-4398-4C76-BEBF-10E56C7F34F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7415295-0FBF-4946-8D99-8CB2EC391319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C702EE3-4B7C-42EA-92AA-8717807CF67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F74581-D71C-4FEC-BA8C-85EF4C1991BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABCFB52-33D3-428C-B1D5-DCE504170A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F03F2B-6AC3-4872-9032-293C2E9B837C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E02B6FB-C36D-45F3-95F3-566CA03B29A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96093309-A87D-48D0-84DA-446255ABF231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF67F149-614B-4507-A15F-E557A1B73423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49862F77-B8DE-4AA7-AE17-B348B05AC00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D7719F-03E0-4E66-A50A-F8E857A9B6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3139FDA-9476-4414-B349-7119E63FD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523FE78C-441F-4ACD-B9F2-3E5293E277AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F887B5B1-7528-4086-AE6C-134F54A93342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C5C552-6276-4791-80CD-6B3EB425EF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8335D4E3-563D-4288-B708-A9635BCA595F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5279D055-248A-4BD1-9FBB-0024BA16DF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16519855-FCB9-44A8-9C7E-116192327BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D9330B-C51A-4C7D-A322-85103C64D86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA0C19F-95EB-429C-AF06-A2C1D5643662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "225CCE80-FF4B-4B39-B8BD-EB4710047524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "07925DD8-50C0-4908-95D1-7342A4617BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A519DB-6C6D-4094-814D-33BD5EF389BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ED7566-5092-4B08-97A9-B2B53117A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E72614CD-8F70-4E07-AD83-8FDE8026CEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "48E62419-C165-4B42-8C23-E24821BD4BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "217D804B-CA56-49CE-B9EB-2A297EB1763C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E8583-C837-4871-B4D2-FD41C78D538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D480C37B-0DA8-4096-80B0-5198FE589A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "241D4183-879D-4974-BACB-A6987EDA2E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96592A93-4967-4B91-BCF7-558DC472E7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8758715D-B973-4960-8B7D-6F9A11E73288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0370E9EB-B830-4362-B83C-912579695691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D644926A-C2A5-45FE-85A3-2782CE87ED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0696E675-0A13-45FC-8917-845E6FF7A311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAC98C-1FE6-42A3-8B62-E3C321914F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C36785A-F735-45C0-986B-9624AD65F0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1D3916-607F-44E8-9D47-93C6C0789083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174613C3-A04B-4701-849B-BAA598BF4F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81C1137C-BE3D-45F9-83C9-D212107F0E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA876FF-C58A-45CF-A8E8-E2068DF79421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD78771-BD9A-4AC2-B664-B189DD288FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A16424-732F-4B76-A753-1642A97BC1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E189C976-2DD2-485C-828E-7FC3DC6A8F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A86CA90F-A944-4F3E-B75F-8147125335D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAFABDC-E40F-4C53-AC66-94EFD077665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96C1B80-9E20-4832-8308-BF7911569EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C394DC-65A7-4713-B823-6F5D329A0C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BD64BB-BDA7-4F82-8324-B7C7C941133C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8814509-8B08-46C6-AE50-19B7D30DCF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0718FB6B-D787-409A-B535-0318F2C63A81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022073",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495896",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10735",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1183",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-23T17:30:01.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "El decodificador JBIG2 MMR en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, Poppler versión anterior a 0.10.6, y otros productos permite a los atacantes remotos causar una denegación de servicio (bucle infinito y colgar) por medio de un archivo PDF creado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02805E-7BD0-4563-82C8-6FFB982D4913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852F526D-F388-4FF0-BDD9-DF7635DB46D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478D53EA-CC8C-4ECB-8410-0910505AD819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C84FB90-FF1C-4502-B2D2-390438DD422F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13341DAE-D16D-41A7-BF17-FEC802997B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E30BAEA-231C-4A82-B014-9EE3D1E81545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1DE5A5-6448-43F6-A612-56998D16E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F84699-D4CF-4FD1-A959-53E316559EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D820DFD5-0EF9-4C9A-B281-D553A4F63141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CF839D-D034-4D47-977F-7E27B36EF04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B3E8A4-14FE-42DA-B82E-839B092B5302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.02",
            "matchCriteriaId" : "32628280-E2DB-45E0-AB8A-CFC90419A182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF5EC54-9145-4B51-8241-C9343160BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1344DF7-9917-4DB0-9256-9E8131C55B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309F0CF2-4AF7-4F46-91EA-39BA07BAF312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20311EDE-0E34-432A-AE41-F61EA68F134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FEF460-3569-4294-ABA4-D7C251D67071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB41E8C2-BBCC-48CB-805B-23411D39E936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16670F8A-E70B-4CDF-8C61-414D86E20C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69483A91-53DB-4736-908F-7B14EFB40888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3E7962-0A95-4E7B-A983-683B02350B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1120B3-3372-417B-BCA0-FD515638FBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7397645-3225-4980-8465-28F93322B58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A45EAF-B511-4360-A201-D588E7EEB39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D244903F-5407-4C35-AE2C-1A05D3C227D4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.5",
            "matchCriteriaId" : "E0299F4A-A027-430C-9A53-AFEF9022960C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0213390-08FA-4E04-835B-8BE0FC61B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B304657-740A-4F8D-99CD-22E283FEE6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3030D6-DE07-418B-AB40-87C85FCA3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3583D56-F653-457A-B1F8-25842A15CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA5DBB-5A80-439E-A135-77CB40772916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A5C43B-3978-4D0A-8166-A99622106781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88294D9-563E-4AB3-9FE6-971F43B052B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A39F672-B238-4B21-A48E-5121771949F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A8D058-224E-467E-AB61-06F90B541F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.9",
            "matchCriteriaId" : "B4E90153-8D18-4A50-9581-895C851F6489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D89E03-94D0-4F7F-9A54-3021E3E5A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230B77E7-B1AE-4470-859D-7B5F99749D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6070FC-4566-4314-940E-0AAE34B56E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC691F07-8B38-4867-AB18-51F380CAEA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E943EFBF-39A7-408F-8AC5-677E83DFDBB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA7725A-4398-4C76-BEBF-10E56C7F34F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7415295-0FBF-4946-8D99-8CB2EC391319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C702EE3-4B7C-42EA-92AA-8717807CF67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F74581-D71C-4FEC-BA8C-85EF4C1991BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABCFB52-33D3-428C-B1D5-DCE504170A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F03F2B-6AC3-4872-9032-293C2E9B837C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E02B6FB-C36D-45F3-95F3-566CA03B29A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96093309-A87D-48D0-84DA-446255ABF231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF67F149-614B-4507-A15F-E557A1B73423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49862F77-B8DE-4AA7-AE17-B348B05AC00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D7719F-03E0-4E66-A50A-F8E857A9B6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3139FDA-9476-4414-B349-7119E63FD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523FE78C-441F-4ACD-B9F2-3E5293E277AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F887B5B1-7528-4086-AE6C-134F54A93342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C5C552-6276-4791-80CD-6B3EB425EF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8335D4E3-563D-4288-B708-A9635BCA595F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5279D055-248A-4BD1-9FBB-0024BA16DF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16519855-FCB9-44A8-9C7E-116192327BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D9330B-C51A-4C7D-A322-85103C64D86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA0C19F-95EB-429C-AF06-A2C1D5643662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "225CCE80-FF4B-4B39-B8BD-EB4710047524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "07925DD8-50C0-4908-95D1-7342A4617BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A519DB-6C6D-4094-814D-33BD5EF389BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ED7566-5092-4B08-97A9-B2B53117A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E72614CD-8F70-4E07-AD83-8FDE8026CEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "48E62419-C165-4B42-8C23-E24821BD4BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "217D804B-CA56-49CE-B9EB-2A297EB1763C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E8583-C837-4871-B4D2-FD41C78D538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D480C37B-0DA8-4096-80B0-5198FE589A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "241D4183-879D-4974-BACB-A6987EDA2E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96592A93-4967-4B91-BCF7-558DC472E7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8758715D-B973-4960-8B7D-6F9A11E73288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0370E9EB-B830-4362-B83C-912579695691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D644926A-C2A5-45FE-85A3-2782CE87ED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0696E675-0A13-45FC-8917-845E6FF7A311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAC98C-1FE6-42A3-8B62-E3C321914F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C36785A-F735-45C0-986B-9624AD65F0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1D3916-607F-44E8-9D47-93C6C0789083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174613C3-A04B-4701-849B-BAA598BF4F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81C1137C-BE3D-45F9-83C9-D212107F0E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA876FF-C58A-45CF-A8E8-E2068DF79421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD78771-BD9A-4AC2-B664-B189DD288FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A16424-732F-4B76-A753-1642A97BC1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E189C976-2DD2-485C-828E-7FC3DC6A8F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A86CA90F-A944-4F3E-B75F-8147125335D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAFABDC-E40F-4C53-AC66-94EFD077665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96C1B80-9E20-4832-8308-BF7911569EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C394DC-65A7-4713-B823-6F5D329A0C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BD64BB-BDA7-4F82-8324-B7C7C941133C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8814509-8B08-46C6-AE50-19B7D30DCF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0718FB6B-D787-409A-B535-0318F2C63A81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022072",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495899",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10769",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0458.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0429.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1191",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-23T17:30:01.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request."
      }, {
        "lang" : "es",
        "value" : "mod_proxy_ajp.c en el módulo mod_proxy_ajp en el servidor HTTP Apache v2.2.11 permite a atacantes remotos obtener datos de respuesta sensibles, lo que esta previsto para un cliente que envío una petición POST temprana sin cuerpo de petición, a través de una petición HTTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CF6394-95D9-42AF-A442-385EFF9CEFE1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "http://osvdb.org/53921",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34827",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/35395",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/35721",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-04.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=766938&r2=767089",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.apache.org/dist/httpd/patches/apply_to_2.2.11/PR46949.diff",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:102",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34663",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022264",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-787-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1147",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50059",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/bugzilla/show_bug.cgi?id=46949",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8261",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "http://osvdb.org/53921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/35395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/35721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=766938&r2=767089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.apache.org/dist/httpd/patches/apply_to_2.2.11/PR46949.diff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-787-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/bugzilla/show_bug.cgi?id=46949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-23T17:30:01.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the HELP_PAGE parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección CRLF en da/DA/Login en Sun Java System Delegated Administrator desde v6.2 hasta v6.4 permite a atacantes remotos inyectar cabeceras HTTP de forma arbitraria y dirigir ataques de división de respuesta HTTP a través del parámetro \"HELP_PAGE\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_delegated_administrator:6.2:-:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84FBFD6D-70D2-4068-A8FB-997F55962DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_delegated_administrator:6.3:-:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DD69018-E00B-4A29-A1AD-0487756E763C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_delegated_administrator:6.4:-:sparc:*:*:*:*:*",
            "matchCriteriaId" : "42C7A680-F66F-44B7-85E6-910F92EBB94F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_delegated_administrator:6.2:-:x86:*:*:*:*:*",
            "matchCriteriaId" : "60880A55-685E-4079-8501-96734549AA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_delegated_administrator:6.3:-:x86:*:*:*:*:*",
            "matchCriteriaId" : "3DC59D17-A1A2-4D41-A163-270A33A0EE62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_delegated_administrator:6.4:-:x86:*:*:*:*:*",
            "matchCriteriaId" : "1C5A463D-99A0-413C-86C4-895696021474"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_delegated_administrator:6.2:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "45ED4043-563B-49BB-A6CB-32109E7F0E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_delegated_administrator:6.3:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "92BE2B12-7FA9-469F-8B91-D0D6C38E76F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_delegated_administrator:6.4:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "4ADC7E16-A2B6-43D7-BB99-9A48B9DE3449"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34760",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022108",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-121581-20-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255928-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020305.1-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/content/sun-delegated-administrator",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502863/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34643",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1122",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-121581-20-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255928-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020305.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/content/sun-delegated-administrator",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502863/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-23T19:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to \"g*allocn.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en el decodificador JBIG2 en Xpdf v3.02p12 y anteriores, como se utiliza en Poppler y otros productos, cuando corre en Mac OS X, tiene un impacto desconocido, relacionado con \"g*allocn.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02805E-7BD0-4563-82C8-6FFB982D4913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852F526D-F388-4FF0-BDD9-DF7635DB46D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478D53EA-CC8C-4ECB-8410-0910505AD819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C84FB90-FF1C-4502-B2D2-390438DD422F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13341DAE-D16D-41A7-BF17-FEC802997B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E30BAEA-231C-4A82-B014-9EE3D1E81545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1DE5A5-6448-43F6-A612-56998D16E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F84699-D4CF-4FD1-A959-53E316559EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D820DFD5-0EF9-4C9A-B281-D553A4F63141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CF839D-D034-4D47-977F-7E27B36EF04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B3E8A4-14FE-42DA-B82E-839B092B5302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D79ABD-202F-464F-B6C3-B225FD37DD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.02",
            "matchCriteriaId" : "32628280-E2DB-45E0-AB8A-CFC90419A182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF5EC54-9145-4B51-8241-C9343160BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1344DF7-9917-4DB0-9256-9E8131C55B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309F0CF2-4AF7-4F46-91EA-39BA07BAF312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20311EDE-0E34-432A-AE41-F61EA68F134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FEF460-3569-4294-ABA4-D7C251D67071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB41E8C2-BBCC-48CB-805B-23411D39E936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16670F8A-E70B-4CDF-8C61-414D86E20C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69483A91-53DB-4736-908F-7B14EFB40888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3E7962-0A95-4E7B-A983-683B02350B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1120B3-3372-417B-BCA0-FD515638FBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7397645-3225-4980-8465-28F93322B58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A45EAF-B511-4360-A201-D588E7EEB39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D244903F-5407-4C35-AE2C-1A05D3C227D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A63FAB9-7E4D-4D2D-808B-F96F2015BF63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=263028",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=263028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1187",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-23T19:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc)."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la característica JBIG2 decoding en Poppler anteriores a v0.10.6 permite a atacantes remotos producir una denegación de servicio (caida) y posiblemente ejecutar código a través de vectores relacionados con CairoOutputDev (CairoOutputDev.cc)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.5",
            "matchCriteriaId" : "E0299F4A-A027-430C-9A53-AFEF9022960C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0213390-08FA-4E04-835B-8BE0FC61B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B304657-740A-4F8D-99CD-22E283FEE6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3030D6-DE07-418B-AB40-87C85FCA3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3583D56-F653-457A-B1F8-25842A15CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA5DBB-5A80-439E-A135-77CB40772916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A5C43B-3978-4D0A-8166-A99622106781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88294D9-563E-4AB3-9FE6-971F43B052B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A39F672-B238-4B21-A48E-5121771949F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A8D058-224E-467E-AB61-06F90B541F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=263028#c16",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502761/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10292",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=263028#c16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502761/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1188",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-23T19:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la característica JBIG2 decoding en Poppler anteriores a v0.10.6 permite a atacantes remotos producir una denegación de servicio (caida) y posiblemente ejecutar código a través de vectores relacionados con SplashBitmap (splash/SplashBitmap.cc)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.5",
            "matchCriteriaId" : "E0299F4A-A027-430C-9A53-AFEF9022960C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0213390-08FA-4E04-835B-8BE0FC61B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B304657-740A-4F8D-99CD-22E283FEE6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3030D6-DE07-418B-AB40-87C85FCA3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3583D56-F653-457A-B1F8-25842A15CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA5DBB-5A80-439E-A135-77CB40772916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A5C43B-3978-4D0A-8166-A99622106781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88294D9-563E-4AB3-9FE6-971F43B052B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A39F672-B238-4B21-A48E-5121771949F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A8D058-224E-467E-AB61-06F90B541F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=263028#c16",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37028",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37037",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37043",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37053",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37079",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39938",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2028",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2050",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502761/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2928",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0802",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495907",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=526915",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50185",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9957",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1501.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1502.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1503.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1512.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=263028#c16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://poppler.freedesktop.org/releases.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/196617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502761/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=495907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=526915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1501.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1502.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1503.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1512.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-24T14:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in product_info.php in CRE Loaded 6.2 allows remote attackers to execute arbitrary SQL commands via the products_id parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de SQL en product_info.php en CRE Loaded v6.2 permite a atacantes remotos ejecutar comandos SQL a través del parámetro products_id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:creloaded:cre_loaded:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ECDAEC6-5493-478E-BA31-DC78AEB24384"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34640",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-24T14:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user (Username) parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en admin.php en PastelCMS v0.8.0, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a través del parámetro usuario (Username)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pastel:pastelcms:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA84A19-6FDE-435F-A252-757ED9604C1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34853",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34635",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-24T14:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the set_lng parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en index.php en PastelCMS v0.8.0, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos incluir y ejecutar archivos locales a través de un .. (punto punto) en el parámetro set_lng."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pastel:pastelcms:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA84A19-6FDE-435F-A252-757ED9604C1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34853",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34635",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-24T14:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in cms_detect.php in TotalCalendar 2.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the include parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en cms_detect.php en TotalCalendar 2.4 permite a atacantes remotos incluir y ejecutar archivos locales a través de un .. (punto punto) en el parámetro include."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sweetphp:totalcalendar:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17F19D1-00AA-4A51-9BC9-6C04FD3EB005"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34824",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34634",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-24T14:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in config.php in NotFTP 1.3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a certain languages[][file] parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en config.php en NotFTP 1.3.1 permite a atacantes remotos leer ficheros arbitrarios a través de un .. (punto punto) en un determinado parámetro languages[][file]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wonko:notftp:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11916F71-1FB9-4146-928B-20BFD95B87AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34636",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-24T14:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover in nested BBcode tags, as demonstrated using (1) email, (2) img, and (3) url tags."
      }, {
        "lang" : "es",
        "value" : "Una vunerabildad de ejecución de secuencias de comandos en sitios cruzados(XSS) en webSPELL v4.2.0c permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de eventos Javascript onmouseover en etiquetas BBcode anidadas, como se ha demostrado usando las etiquetas (1) email, (2) img, y (3) url."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:4.2.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45223AEF-D151-4C08-993F-1537BC02DA40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34764",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502732/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34595",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.webspell.org/index.php?site=files&file=25",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.webspell.org/index.php?site=news_comments&newsID=126&lang=uk",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502732/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.webspell.org/index.php?site=files&file=25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.webspell.org/index.php?site=news_comments&newsID=126&lang=uk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-24T14:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in usersettings.php in e107 0.7.15 and earlier, when \"Extended User Fields\" is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hide parameter, a different vector than CVE-2005-4224 and CVE-2008-5320."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de SQL en usersettings.php en e107 v0.7.15 y anteriores, cuando la opción \"Campos de usuario extendidos\" está activado y magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro Hide. Se trata de un vector diferente al de CVE-2005-4224 y CVE-2008-5320."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.15",
            "matchCriteriaId" : "87794C62-4C18-4F8F-9E78-1993BD1B0E6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C34EB0-7685-4346-81A2-371C1F19F6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB26A2A4-B0DE-4130-AA5F-76D5394A0614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90909932-AD39-4648-8621-5866F0C4AB12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F208E9-3C39-4D00-B1E0-5CD0B315E740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27C7402F-54C9-4FDA-B181-85941DDC7010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "061B1AF2-2BA7-49CB-9F8B-91BF5D5B0BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F77F5E4-8636-41F5-9A80-055CC0FC0346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70AB914E-D616-45D2-A451-1C247B8B6E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA03C1AC-97EA-47ED-9558-A7CA48420AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32695A82-B042-46B7-9CB4-20F3446E0C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6716A040-0CBE-4402-AB2A-1621B1240B0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81627355-AB45-4D47-8DD2-4087E6971EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2DAAA4F-B893-4914-8538-E68DDA211225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B649DDC6-EEE6-47E1-A69A-831E5C2DD58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEEC90E-8640-4786-B014-CAD83EC4F2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E29B9B12-4C94-4A8D-B407-2D288502EFE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CAADA1-1FBB-4983-A942-FC4490CE8D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D7C699-0E92-4D9C-9D8F-87C39A28ACCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C62F8AD-EA30-441E-B97F-EF8DE640DC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C22711-AEC4-438F-9B37-64D36B0BDFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDD8B3B-8580-4624-8D77-E3FD97DFF4A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.547_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "437C4251-886C-4E94-B7F6-AE34A0142A76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.548_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D4EE9-0D54-4370-BCBC-3C23481C127B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.549_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11E3F9E-708E-44CB-8FD2-E4961028B732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.551_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F38EB42-437C-4381-B36A-FD3DB78E724E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.552_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC957BA-D96C-41B7-9BD4-2ECD37C9C924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.553_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9E9AC1-5ECD-448F-B72A-1CE8228C2C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6454D949-83A2-4F69-92E1-BBCD84F21BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.554_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC4B3A4-2563-4C06-A484-5C02CD8F7408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC274184-AD8E-4BC2-BC6A-4E64F354BFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E80F85C-61AD-49C0-9EBF-B79F728F6A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE097FC-A525-4599-9FDA-1A011EECE767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.602:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF51B0D-E020-491D-92A9-D2A01A7417AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8692341-8DF2-4943-853A-4AAF1F313914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.604:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75197306-53DB-4C94-959B-C46D3FB1F42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.605:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C5C91C-C1C5-457D-9E09-24C7CACCC280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.606:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB88C92-4F62-471A-8C10-C13C890E764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5585DC36-C65F-4FCA-B26F-E4A7901863E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.608:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7DD56C-66F7-421C-B211-07C7856112C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.609:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E14B108-228D-454F-AF16-9D9086E4C10B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.610:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C91C45-9A96-4E69-8A0A-D619AB45BC08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.611:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7C68F4-9ECD-41A9-B4AE-48F028841428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.612:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B75E28-08DE-4CA2-A60B-FB2F61AEC5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.613:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9AA824A-CEE6-460B-A668-92FC3A822305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.614:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A51FBB3-42CE-40E1-A15D-ADDFBF8E203D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.615:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAC1FD5-ECD1-480C-827E-F1AE8484C4EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.615a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17F613A-6BE1-4B45-8E40-8E44E0EEA756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CB33E9-9AB8-482A-A196-768A2085A49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BD5CAD-0EB8-48F2-AF80-510584A83446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6171:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8CD2A8-C8E8-4A5F-8355-6DF45C9DF45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E294FE-F0A2-45FC-BB67-D988DD89D2AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6173:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9640315B-7F04-4F5A-B213-8FAF509DFF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6174:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA89549A-6CD7-4DDB-A8C8-ADF103F6CDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6175:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF75A192-81C1-4F58-A660-7EFE4F33E58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DD84FB-8CF3-4FD4-AB18-DCD3FF3A2F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4189588A-A887-4D27-B3A0-48A3DBBD5E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549E7FF-4329-49F6-BF59-081DA7874BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA26A71E-F1E6-4EA0-9165-F7989FB89B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.3_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C90BAB9-2ACE-48E4-BC15-E88C2C370B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD219A3-4958-4EA9-A914-37D4F0A8A24D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.4_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3417C70B-E531-49C8-971E-CC349FB5AA1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.4_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5EF2F8-0A65-4C8C-A4A3-9B9B1151509C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.4_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FBE3F6-7685-43BA-B63B-28AA79330323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.4_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CC3B56-F1FC-452A-A0A7-4CF60089C1E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.4_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7524B12E-3D05-4CD1-B582-8A66EEC3F6DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "590FE150-07AF-4E25-B8F8-D0E8500D73B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F515DEBF-B55A-4B42-8E1F-AB9A2C3DD8DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34823",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-24T14:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Quick.Cms.Lite 0.5 permite a atacantes remotos ejecutar comandos SQL a través del parámetro id. \t"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensolution:quick.cms.lite:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377D2FEC-AB61-40DC-983B-19623F4FBBD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34647",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-24T14:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in events/inc/events.inc.php in the Events plugin for Seditio CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the c parameter to plug.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en events/inc/events.inc.php en el plugin para Eventos de Seditio CMS 1.0 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro c para plug.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:seditio:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F15E84-46FF-4E53-BB0C-04D9B15E6CBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34812",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34608",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1112",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-24T15:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en el Centro de Control en Symantec Brightmail Gateway Appliance antes de 8.0.1 permite a usuarios remotos autenticados inyectar HTML o scripts web arbitrarios a través de vectores no especificados.\r\n\t\t"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:brightmail_gateway_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "142AC359-363A-4B84-8154-2E6D178E33EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:brightmail_gateway_appliance:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC321D15-6374-4D17-A7A7-05257692AA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:brightmail_gateway_appliance:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F74170B9-18E6-4275-BD5C-7223EAA08AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:brightmail_gateway_appliance:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDCFFB37-7043-47BB-9906-6D1EFA7B8FC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022116",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1155",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-24T15:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allow remote authenticated users to gain privileges, and possibly obtain sensitive information or hijack sessions of arbitrary users, via vectors involving (1) administrative scripts or (2) console functions."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el Centro de Control de Symantec Brightmail Gateway Appliance antes de v8.0.1 permiten a los usuarios remotos autenticados obtener privilegios, y posiblemente obtener información sensible o el secuestro arbitrario de sesiones de los usuarios, a través de vectores relacionados con (1) secuencias de comandos administrativos o (2) funciones de la consola."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:brightmail_gateway_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "142AC359-363A-4B84-8154-2E6D178E33EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:brightmail_gateway_appliance:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC321D15-6374-4D17-A7A7-05257692AA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:brightmail_gateway_appliance:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F74170B9-18E6-4275-BD5C-7223EAA08AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:brightmail_gateway_appliance:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDCFFB37-7043-47BB-9906-6D1EFA7B8FC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022117",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1155",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-24T15:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks."
      }, {
        "lang" : "es",
        "value" : "La interfaz web de CUPS antes de v1.3.10 no valida la cabecera HTTP Host en una solicitud de un cliente, lo que facilita para realizar ataques de revinculación de DNS a atacantes remotos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.9",
            "matchCriteriaId" : "B4E90153-8D18-4A50-9581-895C851F6489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D89E03-94D0-4F7F-9A54-3021E3E5A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230B77E7-B1AE-4470-859D-7B5F99749D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6070FC-4566-4314-940E-0AAE34B56E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC691F07-8B38-4867-AB18-51F380CAEA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E943EFBF-39A7-408F-8AC5-677E83DFDBB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA7725A-4398-4C76-BEBF-10E56C7F34F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7415295-0FBF-4946-8D99-8CB2EC391319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C702EE3-4B7C-42EA-92AA-8717807CF67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F74581-D71C-4FEC-BA8C-85EF4C1991BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABCFB52-33D3-428C-B1D5-DCE504170A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F03F2B-6AC3-4872-9032-293C2E9B837C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E02B6FB-C36D-45F3-95F3-566CA03B29A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96093309-A87D-48D0-84DA-446255ABF231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF67F149-614B-4507-A15F-E557A1B73423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49862F77-B8DE-4AA7-AE17-B348B05AC00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D7719F-03E0-4E66-A50A-F8E857A9B6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3139FDA-9476-4414-B349-7119E63FD268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523FE78C-441F-4ACD-B9F2-3E5293E277AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F887B5B1-7528-4086-AE6C-134F54A93342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C5C552-6276-4791-80CD-6B3EB425EF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8335D4E3-563D-4288-B708-A9635BCA595F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5279D055-248A-4BD1-9FBB-0024BA16DF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "16519855-FCB9-44A8-9C7E-116192327BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D9330B-C51A-4C7D-A322-85103C64D86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA0C19F-95EB-429C-AF06-A2C1D5643662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "225CCE80-FF4B-4B39-B8BD-EB4710047524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "07925DD8-50C0-4908-95D1-7342A4617BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A519DB-6C6D-4094-814D-33BD5EF389BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ED7566-5092-4B08-97A9-B2B53117A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E72614CD-8F70-4E07-AD83-8FDE8026CEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "48E62419-C165-4B42-8C23-E24821BD4BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "217D804B-CA56-49CE-B9EB-2A297EB1763C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E8583-C837-4871-B4D2-FD41C78D538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D480C37B-0DA8-4096-80B0-5198FE589A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "241D4183-879D-4974-BACB-A6987EDA2E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96592A93-4967-4B91-BCF7-558DC472E7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8758715D-B973-4960-8B7D-6F9A11E73288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0370E9EB-B830-4362-B83C-912579695691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D644926A-C2A5-45FE-85A3-2782CE87ED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB34629-DB13-4164-8A18-BD818E50528B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "2D432471-B5FD-4B1D-82DF-6F3152752071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "960DE41E-63DB-45EB-9B19-6349BDA05086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A57D2299-3409-4907-9FC0-5C3C715CDB37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EB92FA-3669-4530-BE69-84CF01D98FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0696E675-0A13-45FC-8917-845E6FF7A311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAC98C-1FE6-42A3-8B62-E3C321914F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C36785A-F735-45C0-986B-9624AD65F0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1D3916-607F-44E8-9D47-93C6C0789083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174613C3-A04B-4701-849B-BAA598BF4F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81C1137C-BE3D-45F9-83C9-D212107F0E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA876FF-C58A-45CF-A8E8-E2068DF79421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD78771-BD9A-4AC2-B664-B189DD288FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A16424-732F-4B76-A753-1642A97BC1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E189C976-2DD2-485C-828E-7FC3DC6A8F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A86CA90F-A944-4F3E-B75F-8147125335D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "690C4DEC-1467-4D7D-8E73-6EE1758439D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5CA96B-411E-47BE-81A1-1C2E240A25F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5A29C9-1913-4B8F-B162-66E71BEABD1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAFABDC-E40F-4C53-AC66-94EFD077665D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96C1B80-9E20-4832-8308-BF7911569EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C394DC-65A7-4713-B823-6F5D329A0C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BD64BB-BDA7-4F82-8324-B7C7C941133C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=263070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-20.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cups.org/articles.php?L582",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cups.org/str.php?L3118",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502750/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=490597",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=263070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200904-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cups.org/articles.php?L582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cups.org/str.php?L3118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502750/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=490597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0164\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/\n",
        "lastModified" : "2009-04-27T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0798",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-24T15:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, which triggers an infinite loop."
      }, {
        "lang" : "es",
        "value" : "El demonio acpid antes de v1.0.10 permite a atacantes remotos provocar una denegación de servicio (provocando un alto consumo de CPU y la pérdida de conectividad) por la apertura de un gran número de sockets UNIX sin cerrar, lo que provoca un bucle infinito."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tim_hockin:acpid:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.8",
            "matchCriteriaId" : "56152BA0-9713-4977-A549-AD3F4A868DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tim_hockin:acpid:0.99.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD49E1BF-56EC-4360-B134-5D8AB62E6920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tim_hockin:acpid:0.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8941F702-1D8E-4248-81F6-552BEA77972E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tim_hockin:acpid:0.99.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF312D3-6015-4FFE-8FE8-CDCCA59FF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tim_hockin:acpid:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CEA183-A214-4E82-8788-F353994988C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tim_hockin:acpid:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF40A7F7-D99C-47DF-8F95-45E3EAD0758B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tim_hockin:acpid:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F5A736-A76D-4141-A963-4877BB267E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tim_hockin:acpid:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15395859-CEEF-4FF1-A764-033E437374A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tim_hockin:acpid:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A178536-8705-40C9-85BE-C69172EF8493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tim_hockin:acpid:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "519F489B-0D6D-46AD-9834-A9419F504BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tim_hockin:acpid:20010510:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DE0C675-67E9-4A6D-87FC-58744A0D3A01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34838",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34914",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34918",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35010",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35209",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35231",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1786",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200905-06.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:107",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0474.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34692",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022182",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-766-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=494443",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=502583",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50060",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7560",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9955",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01342.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01365.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200905-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0474.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-766-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=494443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=502583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01342.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01365.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1192",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-24T15:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading these pages."
      }, {
        "lang" : "es",
        "value" : "drivers/char/agp/generic.c en el subsistema en el kernel de Linux antes de v2.6.30-rc3 no vacía páginas que más tarde pueden estar disponibles para un proceso del espacio de usuario, lo que permite a usuarios locales obtener información sensible mediante la lectura estas páginas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:rc2:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.30",
            "matchCriteriaId" : "860DCD8A-7E14-4DE9-9CAA-993AF91BBD5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F9DBB0-8AF7-42CA-95DD-68A344E9D549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD00664-A27C-4514-A2A4-079E8F9B0251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E336C792-B7A1-4318-8050-DE9F03474CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D0159-1A05-4628-9C1C-360DED0F438C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6654B9-42EB-4C2C-8F71-710D50556180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FDF616-E410-4540-B377-98D1FB88CE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5313B736-9904-442A-84D6-8FC7B9AC2059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D42BA44-C69B-4170-9867-CABF93CA9BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "085259B8-9D41-42B0-B32B-66B8D365F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A12DE15-E192-4B90-ADB7-A886B3746DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6588E7-F4FA-40F5-8945-FC7B6094376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "AE87E13E-ACF7-4F74-8938-729F3B0D694C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D4965A12-1BBA-4494-A5C1-43E0C0F48C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "388414A1-C9B4-41BA-AD35-6501A463A095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FDBA01DD-C129-48F1-800B-838418F4A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "185F1EF8-04EB-43ED-B909-8BDF60F23E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "3483FAFA-353C-498F-AF68-8F5B84A0F30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6B11A9E1-9D90-46DC-81B5-17A137205AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "07EEC559-9240-46BE-9057-0F17D1F61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BBBC127F-D67E-43FE-BCFE-606C200084F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "42B18945-EE09-4E6B-8C11-E382E5F8F850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "12D0C03A-7D30-485F-8431-638918FE9658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA311B8-D32E-4853-9B07-58EAF1019D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F0F679-43C8-426E-A97E-C3B207A3331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA40BC48-D6B5-4424-B306-F99E85EBBCB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2DF2BB-F94A-4692-AFDC-47C42F04081B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "BB286B42-E739-46CD-BC96-972CFFAECB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "7636014B-CC2A-43A3-9C9A-04B26AEB06D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ED7CE5-3388-4CB9-AF60-A2AF19611327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3463B83B-E46F-456E-98BA-801C59AEB337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "05FD0767-03F3-416C-AB6D-6BC4A12220B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8452D554-8DEB-4265-839C-6B40CCFB56B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "94F445F9-57A5-4453-BB5D-290349C04A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "62C97D20-4152-47C4-B21B-8206CF49E20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc8-kk:*:*:*:*:*:*",
            "matchCriteriaId" : "23859759-4748-4A03-9D78-083C77CFF4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5FC0A9-A78A-4D09-BDCC-208AFC899824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBFC9DD-B7C2-4FB2-A8F6-29FF50EFAAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.rc2-git1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B3BFC1-4B0A-4D63-BFA2-CF6A51A8D2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E55450-F6D9-483C-9CC8-E651E5A12AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "45273823-29EA-44DE-8444-3933402C5793"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=59de2bebabc5027f93df999d59cc65df591c3e6e",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/04/22/2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35120",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35387",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37351",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0084",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:119",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1081.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503610/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34673",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=497020",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10567",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8003",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=59de2bebabc5027f93df999d59cc65df591c3e6e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwall.com/lists/oss-security/2009/04/22/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1081.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503610/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=497020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-24T15:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in the chromehtml: protocol handler in Google Chrome before 1.0.154.59, when invoked by Internet Explorer, allows remote attackers to determine the existence of files, and open tabs for URLs that do not satisfy the IsWebSafeScheme restriction, via a web page that sets document.location to a chromehtml: value, as demonstrated by use of a (1) javascript: or (2) data: URL.  NOTE: this can be leveraged for Universal XSS by exploiting certain behavior involving persistence across page transitions."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de argumento en el manejador de protocolo chromehtml: en Google Chrome antes de v1.0.154.59, cuando es invocado por Internet Explorer, lo que permite a atacantes remotos determinar la existencia de archivos y abrir pestañas para URLs que no cumplen la restricción IsWebSafeScheme, a través de una página web que establece document.location a un valor chromehtml, como lo demuestra el uso de una URL (1) javascript: o (2) data: . NOTA: esto puede ser aprovechados para ataques XSS universales explotando ciertos comportamientos que impliquen persistencia a través de transiciones de la página."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.154.53",
            "matchCriteriaId" : "22A411BE-895D-4D8F-B14B-AAEB3112F9F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8FF77A-7802-4963-B532-3F16C7BB012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73576CF-76EE-42A3-9955-D7991384B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://chromium.googlecode.com/issues/attachment?aid=5579180911289877192&name=Google+Chrome+Advisory.doc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=9860",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/04/stable-update-security-fix.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://chromium.googlecode.com/issues/attachment?aid=5579180911289877192&name=Google+Chrome+Advisory.doc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=9860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/04/stable-update-security-fix.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-24T15:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome 1.0.x does not cancel timeouts upon a page transition, which makes it easier for attackers to conduct Universal XSS attacks by calling setTimeout to trigger future execution of JavaScript code, and then modifying document.location to arrange for JavaScript execution in the context of an arbitrary web site.  NOTE: this can be leveraged for a remote attack by exploiting a chromehtml: argument-injection vulnerability."
      }, {
        "lang" : "es",
        "value" : "Google Crome 1.0.x no cancela los timeouts sobre una pagina de transición, lo que facilita a atacantes a la hora de llevar a cabo ataques XSS Universales llamando a la función setTimeout para desencadenar futuras ejecuciones de código JavaScript, y, a continuación modificar document.location para organizar la ejecución de JavaScript en el contexto de un sitio Web arbitrario. NOTA: esto puede ser aprovechado para un ataque a distancia mediante la explotación de un argumento de la vulnerabilidad de la inyección chromehtml."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5094C4-1338-4189-B5FD-C9AFFF091D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://chromium.googlecode.com/issues/attachment?aid=5579180911289877192&name=Google+Chrome+Advisory.doc",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=9860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://chromium.googlecode.com/issues/attachment?aid=5579180911289877192&name=Google+Chrome+Advisory.doc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=9860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-24T15:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome 2.0.x lets modifications to the global object persist across a page transition, which makes it easier for attackers to conduct Universal XSS attacks via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Google Chrome 2.0.x permite que las modificaciones en el objeto global persistan a través de una página de transición, lo que facilita a los atacantes a la hora de llevar a cabo ataques XSS universales a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F95770-F36F-43C0-986F-5C819648271E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCE1FD3-8D27-4304-97F9-6F9689F2498D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6CA696-49AA-4445-B978-96C1D8CE58DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CFA3BF-6C07-448B-8C83-AD4C524A6577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8497F93-D88A-4FFA-B988-7210608530A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=9860",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=9860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-24T23:30:00.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in File::find (filesystem/File.php) in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en File::find (filesystem/File.php) in SilverStripe antes de v2.3.1 permite a atacantes remotos ejecutar comandos SQL a través del parámetro de nombre de archivo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:*:rc2:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.1",
            "matchCriteriaId" : "FCA6B176-316E-40D6-932A-8DEA9EE7E0DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93D92D9-A3CC-46D0-8539-587F2B3A3A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6330F446-45E8-4C3E-8585-4BAA9385DFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC23F5D-AC9E-4F83-95B2-CEF6E546E732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77480CB4-04B8-4934-AB1D-B61BB262CD40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D735517-B50D-4C4B-A95F-E48626AB5671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1CDF7-D273-4044-94AB-3295EAD98AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8AB709-B4E7-4D48-8481-08BBCD9121A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D51AEAF-EACD-4E52-85D4-5A54A443EDBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "800CC172-F319-41A2-8C29-8944B98930B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24734325-97DA-4B2C-B192-3F4B83CCF0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:2.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D875C510-39F2-4726-9DBD-3D95A5CB3D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:2.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8C544D-E233-488D-B768-8C077BB79338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:2.3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "26E1807F-7DEB-4519-95B9-4FA647C7D477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:silverstripe:2.3.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB67F4E-0E56-4597-BD9B-90D07685D7F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://open.silverstripe.com/ticket/3721",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://open.silverstripe.com/wiki/ChangeLog/2.3.1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34633",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://open.silverstripe.com/ticket/3721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://open.silverstripe.com/wiki/ChangeLog/2.3.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1189",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-27T18:00:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before 1.2.14 uses incorrect logic to validate a basic type, which allows remote attackers to spoof a signature via a crafted key.  NOTE: this is due to an incorrect fix for CVE-2008-3834."
      }, {
        "lang" : "es",
        "value" : "La función _dbus_validate_signature_with_reason (dbus-marshal-validate.c) en D-Bus (también conocido como DBus) en versiones anteriores a 1.2.14 utiliza lógica incorrecta para validar un tipo básico, lo que permite a atacantes remotos suplantar una firma a través de una clave manipulada. NOTA: esto es debido a una solución incorrecta para CVE-2008-3834."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.3",
            "matchCriteriaId" : "CB9F83F6-FFF0-456A-87D1-A546FAA09F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2945FB-BDB8-49B7-BA9A-2BB390345FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE08E05-948A-4A9C-BA91-B2935355D3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0A3D5A-8823-4365-83B9-1E370C131F3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6262F9B-30B5-4A7E-AC49-B9221B06CA4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F4A579-8F26-47CF-9AE0-41334A9751AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E12E1141-5FE4-43BF-B3A0-DC45C593F880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B04817C0-14A2-4B75-8747-691D48E70BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C8C79E-AE58-48AE-89DB-E84637543783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4ECF06-79CC-4142-BE6A-AF4E1E981543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87CC329-AF59-4882-82E1-851C4E0BB0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDA4ACC-9166-491C-A8D4-A5418F3B0965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084A8212-B0FC-41BA-9532-080E8F92B949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB88CDF-0C71-4FE7-9210-C43EBE806416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D84E94E-18EB-4276-AF55-2FB9850B08CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6D0AAC-7F4B-48FF-9ACB-8C8844BDD722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD40B16-FF56-4C23-B8A9-D79433713F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A81FE8-37A0-46CE-AAA4-F00CF4122C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8815B87-7910-4E41-AB28-AEAD9F53475A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCEF7E9B-3F19-48CF-862B-B5935824A4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB32F7B-8616-40F5-8D94-4FC97F6AD958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC42FAD-C541-4D91-BDF6-62AA1C894B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAECF21B-68AF-47D8-9540-BB0001087881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D0DE09-5F83-423B-AD86-033005D35994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6618ACC-B506-4A92-BE4F-346FAC29D24F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB406736-7185-4E0A-ACC6-4F79AB312FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.35.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18867CA7-E4AE-4312-A6E8-0CC514FCF063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.35.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C443F3D-5BD0-4E89-99F1-1BC0798666F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA75AB4-4ADF-4E42-8840-B044DC4D9FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809A431-7BA6-4C9F-8644-33A14389B289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.36.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "732CD552-3E19-4389-B426-77D5B473866F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1702AE33-38F4-40C5-B448-C863A7E95553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3801D383-91A6-4F2F-87D5-32882005BF58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2392266A-BE81-4494-81C3-942ED56B0558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCA6868-E09D-4616-A9A8-EF63F20C981D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B6DA02-F08B-4ACE-8F93-F869467BC628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4E7E9B-722E-4EE1-A435-906DE07BEB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF4902A-5598-42B7-8BB0-E9F8AB645D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DEF0BA7-4EE6-482A-BFE4-A159A7C329AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E93056D8-497A-4C08-B3FA-8372A92A6ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0380A55A-541E-450B-8092-280BD5DA736D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C55E6EEB-A408-45F5-AF95-37DBDEBA17EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8671706-FC4E-4485-945C-C397C80D859E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9908FE-6B10-41BF-ADE2-1639CAC1340E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA34903A-9D38-46FF-B702-D6BEECA96031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39753912-8A2D-49B0-B90B-43DAF723B34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FF206A-8E96-40A2-9687-E0C4F00F020F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA580B9B-F975-4667-9ECC-703E2B16D24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:dbus:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BDF532-871B-4A0B-B536-038545C2339C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.freedesktop.org/show_bug.cgi?id=17803",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/32127",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35810",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.freedesktop.org/wiki/Software/dbus#head-dad0dab297a44f1d7a3b1259cfc06b583fd6a88a",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/16/13",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/31602",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50385",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10308",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2010-0095.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/799-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.freedesktop.org/show_bug.cgi?id=17803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/32127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.freedesktop.org/wiki/Software/dbus#head-dad0dab297a44f1d7a3b1259cfc06b583fd6a88a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/16/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/31602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2010-0095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/799-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-27T18:00:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to cause a denial of service (application crash) via directories with long pathnames.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "NTRtScan.exe en Trend Micro OfficeScan Client 8.0 SP1 y 8.0 SP1 Parche 1 permite a usuarios locales causar una denegación de servicio (cuelgue de la aplicación) a través de directorios con nombres de rutas largas. NOTA: algunos de estos detalles se obtienen a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:8.0:sp1:client:*:*:*:*:*",
            "matchCriteriaId" : "5F9E1EED-C780-4E2A-BACC-932EE2E521BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://es.geocities.com/jplopezy/officescan.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/53890",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34737",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502847/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502860/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34642",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022109",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1146",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://es.geocities.com/jplopezy/officescan.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/53890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502847/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502860/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-27T18:00:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berkeley DB 1.85 database structures, which allows local users to obtain sensitive information by reading a database file."
      }, {
        "lang" : "es",
        "value" : "La interfaz de base de datos en libc en FreeBSD 6.3, 6.4, 7.0, 7.1, y 7.2-PRERELEASE no inicializa correctamente la memoria para las estructuras de la base de datos Berkeley DB v1.85, lo cual permite a usuarios locales obtener información sensible mediante la lectura de un archivo de base de datos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F702C46F-CA02-4FA2-B7D6-C61C2C095679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.3:release_p10:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1D9D46-75E4-4742-9CF3-2B063B6B7504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F7F02A-C845-40BF-8490-510A070000F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:release_p4:*:*:*:*:*:*",
            "matchCriteriaId" : "8E08DCB9-9064-4DB7-B43A-7B415882EB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "06FB0EEA-254E-4A1F-99E7-058FCD518E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E0A416-733A-4616-AE08-150D67FCEA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.0:release-p12:*:*:*:*:*:*",
            "matchCriteriaId" : "0452688A-3E71-4BC9-8942-56ABBC47EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803EFA9F-B7CB-4511-B1C1-381170CA9A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:release-p5:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A31704-E99F-4DBE-ABA4-EC3E566DE6CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.2:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "8B573401-DC6F-4AFE-92F5-D96F785D2107"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34810",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-09:07.libc.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34666",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-09:07.libc.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-27T18:00:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file. NOTE: this may overlap CVE-2008-3408."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en PortableApps CoolPlayer Portable (también conocido como CoolPlayer+ Portable), en versiones 2.19.6 y anteriores permite que atacantes remotos ejecuten código arbitrario mediante una cadena larga en un archivo de lista de reproducción malformado (.m3u). NOTA: podría solaparse con CVE-2008-3408."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coolplayer:coolplayer:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B434D0D-4AD5-4C45-933C-2A284FE1FA03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34816",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hansesecure.de/vulnerability-in-coolplayer/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://hansesecure.de/vulnerability-in-coolplayer/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-27T18:00:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted (1) song comment or (2) song name, which triggers a heap-based buffer overflow, as exploited in the wild in August 2008."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento en la función CSoundFile::ReadMed (src/load_med.cpp) en libmodplug antes de la versión v0.8.6, tal como se utiliza en gstreamer-plugins y otros productos, permite ejecutar a determinados atacantes, dependiendo del contexto, código arbitrario a través de un archivo MED con un (1) un comentario a una canción o (2) nombre de canción, debidamente modificado, lo que desencadena un desbordamiento de búfer basado en montículo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:konstanty_bialkowski:libmodplug:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.5",
            "matchCriteriaId" : "AC513C19-E6AE-434D-9FF1-AFD01FE8A494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:konstanty_bialkowski:libmodplug:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E90B264-B800-4D01-B9C6-1B1A97702F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:konstanty_bialkowski:libmodplug:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7869CDE5-B184-42EB-B0D6-6E6164AA324A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=266913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_med.cpp?r1=1.1&amp%3Br2=1.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53801",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34797",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-07.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=677065&group_id=1275",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/21/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-package-announce/2009-April/msg00907.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-package-announce/2009-April/msg00908.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/30801",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-771-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1104",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=496834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=266913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_med.cpp?r1=1.1&amp%3Br2=1.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=677065&group_id=1275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/21/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-package-announce/2009-April/msg00907.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-package-announce/2009-April/msg00908.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/30801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-771-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=496834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "The impact of this flaw is limited to application crash, not allowing code execution.  Red Hat does not consider a user-assisted crash of a client application such as media players using GStreamer framework to be a security issue.\n\nFor further details, see: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-1438",
        "lastModified" : "2009-04-28T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-27T18:00:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en fs/cifs/connect.c en el kernel de Linux v2.6.29 y anteriores permite a atacantes remotos provocar una denegación de servicio (mediante caída) a través de un campo nativeFileSystem demasiado largo en una respuesta Tree Connect a una petición de montaje SMB."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.29",
            "matchCriteriaId" : "3871E973-1DCE-4C2D-8FF0-9330AF928297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F9DBB0-8AF7-42CA-95DD-68A344E9D549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD00664-A27C-4514-A2A4-079E8F9B0251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E336C792-B7A1-4318-8050-DE9F03474CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D0159-1A05-4628-9C1C-360DED0F438C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6654B9-42EB-4C2C-8F71-710D50556180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FDF616-E410-4540-B377-98D1FB88CE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5313B736-9904-442A-84D6-8FC7B9AC2059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D42BA44-C69B-4170-9867-CABF93CA9BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "085259B8-9D41-42B0-B32B-66B8D365F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A12DE15-E192-4B90-ADB7-A886B3746DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6588E7-F4FA-40F5-8945-FC7B6094376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "AE87E13E-ACF7-4F74-8938-729F3B0D694C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D4965A12-1BBA-4494-A5C1-43E0C0F48C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "388414A1-C9B4-41BA-AD35-6501A463A095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FDBA01DD-C129-48F1-800B-838418F4A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "185F1EF8-04EB-43ED-B909-8BDF60F23E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "3483FAFA-353C-498F-AF68-8F5B84A0F30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6B11A9E1-9D90-46DC-81B5-17A137205AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "07EEC559-9240-46BE-9057-0F17D1F61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BBBC127F-D67E-43FE-BCFE-606C200084F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "42B18945-EE09-4E6B-8C11-E382E5F8F850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "12D0C03A-7D30-485F-8431-638918FE9658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA311B8-D32E-4853-9B07-58EAF1019D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F0F679-43C8-426E-A97E-C3B207A3331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA40BC48-D6B5-4424-B306-F99E85EBBCB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2DF2BB-F94A-4692-AFDC-47C42F04081B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "BB286B42-E739-46CD-BC96-972CFFAECB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "7636014B-CC2A-43A3-9C9A-04B26AEB06D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ED7CE5-3388-4CB9-AF60-A2AF19611327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3463B83B-E46F-456E-98BA-801C59AEB337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "05FD0767-03F3-416C-AB6D-6BC4A12220B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8452D554-8DEB-4265-839C-6B40CCFB56B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "94F445F9-57A5-4453-BB5D-290349C04A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "62C97D20-4152-47C4-B21B-8206CF49E20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:git1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F95AB2-319C-4BDE-8D34-9FBE69A2FB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D48FD9D7-E775-4E26-AEBF-01A09C404D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "89EA3CF3-0AB7-4648-96BA-25E978D2C8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc2_git7:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4DB179-F78F-4D36-A47D-557FB1B945DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc8-kk:*:*:*:*:*:*",
            "matchCriteriaId" : "23859759-4748-4A03-9D78-083C77CFF4AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.fefe.de/?ts=b72905a8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b363b3304bcf68c4541683b2eff70b29f0446a5b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.samba.org/archive/linux-cifs-client/2009-April/004322.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/04/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/07/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/07/7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1081.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503610/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://xorl.wordpress.com/2009/04/07/linux-kernel-tree-connect-cifs-remote-buffer-overflow/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=492282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=494275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01271.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.fefe.de/?ts=b72905a8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b363b3304bcf68c4541683b2eff70b29f0446a5b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.samba.org/archive/linux-cifs-client/2009-April/004322.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/04/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/07/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/07/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1081.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503610/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xorl.wordpress.com/2009/04/07/linux-kernel-tree-connect-cifs-remote-buffer-overflow/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=492282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=494275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01271.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-27T18:00:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers to conduct argument injection attacks into a command for mplayer via a crafted filename."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de lista negra incompleta en DownloadListCtrl.cpp en amule v2.2.4 permite realizar, a atacantes remotos, ataques de inyección de argumentos en un comando de mplayer a través de un nombre de archivo debidamente modificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amule:amule:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0690116F-2D29-4E01-BAFA-78E7EEB42266"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525078",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/22/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/22/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-27T19:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el componente de servidor de OCS Inventory NG antes de v1.02 tienen un impacto y unos vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.01",
            "matchCriteriaId" : "348E1D9C-D9E9-4258-A5FB-7B4D11A949EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C9D8DD-6505-4903-9181-26223DA65DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CCBDA19C-8B65-4D0D-80B6-3C1E76C5BE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3E915093-BDDA-4A75-A0D0-819246D94249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDE845A-A67A-4DCC-BC61-FC64C6943C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B363C2E6-FAB1-4CED-9C0D-3797AEC814E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc3-1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B28BF3-C16C-458A-BC9B-23631D2B7623"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34763",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=133&cntnt01returnid=51",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1152",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=133&cntnt01returnid=51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-27T19:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in indexk.php in WebPortal CMS 0.8-beta allows remote attackers to execute arbitrary PHP code via a URL in the lib_path parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inclusión remota de archivo PHP en indexk.php en WebPortal CMS v0.8-beta permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro lib_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webportal:webportal_cms:0.8_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7677BF08-46A6-4E91-8892-40FD784D433A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34687",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-27T19:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to (1) read arbitrary files via directory traversal sequences in the lang parameter to libraries/helpdocs/help.php and (2) include and execute arbitrary local files via directory traversal sequences in the error parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en WebPortal CMS v0.8-beta permiten a atacantes remotos (1) leer ficheros de su elección a través de secuencias de salto de directorio en el parámetro lang de libraries/helpdocs/help.php y (2) incluir y ejecutar archivos locales de su elección a través de secuencias de salto de directorio en el parámetro de error a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivano_culmine:webportal_cms:0.8:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "EC541683-B488-4448-A826-F5E01E08461C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34687",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-27T19:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in upload.php in Elkagroup Image Gallery 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in gallery/pictures/. NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de subida de ficheros sin  restricciones en upload.php en Elkagroup Image Gallery v1.0 permite a los usuarios remotos autenticados ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable para, a continuación, acceder a él a través de una solicitud directa al archivo en gallery/pictures/. NOTA: Algunos de estos detalles se obtienen a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elkagroup:image_gallery:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB9AD45-67EF-4859-BAA1-38C8DD8E6F87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25844",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1149",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-27T19:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in admin/editor/image.php in e-cart.biz Free Shopping Cart allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de subida de ficheros sin restricciones en admin/editor/image.php en e-cart.biz Free Shopping Cart permite a atacantes remotos ejecutar código arbitrario mediante la subida de archivos con una extensión ejecutable para, a continuación, acceder a él a través de una solicitud directa al archivo en images/ ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-cart:free_shopping_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BD714A-DFB9-4B0C-83FC-3713E4D4D91A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34736",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1190",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-27T22:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit (JDK) before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 through 1.0.2, allows remote attackers to cause a denial of service (CPU consumption) via serializable data with a long regex string containing multiple optional groups, a related issue to CVE-2004-2540."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de complejidad algorítmica  en el método java.util.regex.Pattern.compile en Sun Java Development Kit (JDK) antes de la versión 1.6, cuando se utiliza con spring.jar en la plataforma SpringSource Spring Framework v1.1.0 a la v2.5.6 y v3.0.0.M1 a y v3.0.0.M2 y dm Server v1.0.0 a v1.0.2, permite a atacantes remotos provocar una denegación de servicio (mediante un excesivo consumo de CPU) a través de datos serializables con una cadena regex demasiado larga que almacene multiples grupos opcionales. Vulnerabilidad relacionada con la CVE-2004-2540."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update_22:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "B2BAB703-E024-42CE-B6DF-605A54BF4749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C1D605-1FE9-4F1A-A374-CC342CD7310C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBE2903-9C4E-4BBD-AC12-2408BAF42ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.1.6:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "8722DCD3-C7CB-4D79-808E-FBC1E27A0ED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.1.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E48A0E7-9956-4187-952D-4D4DD2F28099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.1.7b:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "8A64F606-A1A8-4ABE-9249-0F3D3D02A182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.1.8:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "F16BAE28-B7F1-496F-98AC-43DCA387FA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.1.8:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99B49A-5A04-4EC8-ABD7-1BEAF620C0DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.1.8:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "E58C529E-0D46-46A2-A6F3-894ECB215A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.1.8:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D8520B-8B24-444F-A47B-ED0733859954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.1.8:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A18370-9054-48F5-8766-D4A15F3A67C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.1.8:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "4053D51D-57A9-495F-9B8D-0076661283EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF39BD92-7733-4408-A907-D292D973D9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07425A23-5BF3-441E-B47A-395BE402B2C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.2.1:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "38A647E6-2BC2-4E71-96FB-7CA457484CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.2.2:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "5B791B1F-D6AA-451D-A415-C2C9BE44865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.2.2:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D34197-1500-47C7-848D-676F7592BCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA4DE59-4CF5-49F4-8625-0F3DA2DB7020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.0_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC733B9-1694-44E3-BF58-34BABBA4E08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.0_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "991AEC76-0494-4085-9427-52D8BDD75753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.0_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12763342-3D3A-4744-941D-4DFD33F79515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.0_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E28D80-D908-4F17-BF3D-62C970A4D54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.0_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D8BC0C-13B8-472D-A077-F2039A637326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15AAA894-90A8-4B08-A392-5CB36ABE6F54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1:update19:*:*:*:*:*:*",
            "matchCriteriaId" : "910AF14C-1993-4740-AE6D-77B55B52AC48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "8C924560-0EF5-4BC0-8614-2DD5616E076A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09F9315-CE9E-4F20-9E8A-597896057A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88DB55B2-7D7F-4EB8-8E29-7D15F735A286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CDFAD5-389F-4F08-AF24-5D8782E86225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE962961-9E1D-4164-A11A-0CA6DC4FFBAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8244F8-C212-420B-BB12-F58B84B64335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E7BB67D-0D40-4C92-8005-C1F876629304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "926B3423-5AB8-4A7C-A83E-5C363A783AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F623253-2FF5-4398-AF23-A56F06008301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4EE7212-2AF1-4D10-826B-3B6EDDDA6DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B5A02FE-614B-4B8C-AB9A-57F5C32B36A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E781B3C-EA57-4CA6-9F03-117C52552AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1227F19E-5A69-422F-A2E1-5280B1836C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18FE8DE3-A93A-4884-9131-84715C776545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3D41B2-05C4-4EB5-9124-FFC887A010F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E09BF6-A2E4-49F3-9E8C-3C7EB5FE782B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB23A52B-0F6E-4570-9B72-0D07CF26D536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E1566F-1257-428F-8DA9-29DB0DF5D647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A84080AF-E076-40FD-BDEB-727AAE986AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD02135-C3C2-4FCC-A85C-353CD321B97A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10ACCA84-F469-401B-A68F-0281E5C2D46E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B1DA4B-CE36-4828-B10F-8A854CCB368E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B201EA-49A8-407A-9893-B3988C936D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD65ECF9-5495-4F69-B566-C1657473F08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671EF738-7846-40A0-B070-649F637782F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7714D90D-1BF0-4388-B086-17C6D1BC9D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54C9BE0-9009-41F6-B07F-855358EE5141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C144EF3-5228-4338-921E-547902CC6F1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9F5541-983B-42E3-AA7A-988028303B0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.3.1_28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B63DC45-DDDB-4D93-81BC-16893FFF558C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20C9C594-3DBC-4706-BA88-A662CD28C830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E34550-4CA8-4AF1-81CA-BBD5AC53BFB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5AE3D20-565C-4438-A6B6-8FD87511BD8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73966143-616D-4CB7-80A9-3CB3F1F455D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.0_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF742B38-8C5E-4F17-8C75-23A8C61BDB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811DEBE9-356B-4D60-8BE8-AE55CE484D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F2D988-DFAE-420E-B7BB-440746F4AB76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CEF4A09-4520-422F-8766-AD0D00832BFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E06A6F0-9F90-4BCD-A736-0A521E565C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1032FEB-9948-4501-AB70-94DFBEFD204D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA27821-FAB3-40E2-8D94-F3B5DFB0714B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F27CFAE-F807-4643-BAC3-1A6486DE3D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBF7DA4-B357-4507-8BBE-7AE21CB6CE96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9E5ACCC-F82F-42F8-860A-92765D0F0B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA9CA652-9B8C-4175-9ED8-71F441ADF962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B973CB-25CE-4CA4-A4F8-577ED9ACEFEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F66ED4-F74A-4F61-B01C-122DC98D5324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7321A75D-AC6E-486E-8911-AF66A992C8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70B8B14-B4A2-4D05-B999-E2840A2365E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3EDC5EB-2E48-462E-BA0B-217BC470DFC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1D44C4-E43A-4D63-A5C9-76E885D3B436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E30E1D-2766-4E79-B9C7-7B998E23A49F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9872BC-5A24-4855-8D01-4C43BBF5C265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94D13A6-E832-4BDF-8AF2-A4E0EF7DCBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5EFE8C-B098-460C-AFE5-C5A938599F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040AD56D-A0B7-4AF7-AF3D-4B4BD802516D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F0F7DF1-E117-4FD4-9A63-D05747727D01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D63DF43C-4781-4E0F-89C4-0BFC841A0488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D29842F-2185-46C5-8091-23ECB06CB680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF285D8-6E75-4932-A28B-639DA07F1124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "817C3737-F625-4EE9-BB5C-D4B624EF0DAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A152C0A-65CE-438D-8B53-32D1EFC019F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8DEFA1-AAA4-4AA2-859F-257B9B4D2B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "8198F493-0447-4A87-9F16-5B6CB3572E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "645BBE6D-BA5E-4D93-9152-759A2355013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE694C9-940A-4899-844C-AC63412FA295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9476DD-9B56-4811-A248-711C25181F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "68D34082-2948-4D95-B43F-FBD59E2F3D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E01C07-4921-47CC-9AFC-D3B461D0B78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "7532E7D4-2F62-4DA0-B905-F95A0A735CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF93193-889E-4F44-ADEB-E89E56DE6C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "68C19440-4172-4539-8E38-09DBCB1752E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC000EC-9717-47DA-B182-6C8CD3970F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "115083C5-811F-47BA-8549-3BDFF9CA0740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "51337B8C-78F2-4207-998E-A3FC591F538B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "48193108-CD9F-476E-A7D2-E0796F659BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A80299-783A-4FBA-9EBF-5913942949A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "76A4F852-0240-44D6-9BD5-FE79DEF16438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E5943-5CC3-4736-85E8-FE7CC4F38735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C228E00-0F5C-41D2-8BD0-46AF682AE842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "0329E813-B2C8-4C84-BCAF-2D54C4AE0472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3C40E1-7005-4F83-B347-177BEC9EE339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "C79BDB6E-442B-41F1-A025-C17648A81FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2AADA633-EB11-49A0-8E40-66589034F03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "B120F7D9-7C1E-4716-B2FA-2990D449F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "CD61E49F-2A46-4107-BB3F-527079983306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "D900AAE0-6032-4096-AFC2-3D43C55C6C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "88B0958C-744C-4946-908C-09D2A5FAB120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2D8D09-3F18-4E73-81CF-BB589BB8AEC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD24779-988F-4EC1-AC19-77186B68229E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1E860E-98F2-48FF-B8B3-54D4B58BF81F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE548B-DD0C-4C58-98CA-5B803F04F9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "505A8F40-7758-412F-8895-FA1B00BE6B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*",
            "matchCriteriaId" : "212F4A5F-87E3-4C62-BA21-46CBBCD8D26A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DFCD2-00A3-4BC7-8842-836CE22C7B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3A0C49-3FF9-4CB7-9E01-F771D4925103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D1BBD4-2F88-4372-B863-BB70753D841B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*",
            "matchCriteriaId" : "9A75A4C0-6B49-424B-BEC0-0E0AAEF877B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8E9AA0-8907-4B1A-86A1-08568195217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0754AFDC-2F1C-4C06-AB46-457B5E610029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DA4242-30D9-44C8-9D0D-877348FFA22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "C61C6043-99D0-4F36-AF84-1A5F90B895EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0_03:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "0DF9EC3A-E40C-415B-8BF3-40D3C474AF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0_03:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "937EEE89-443C-4435-9064-EE228B3CEBD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:dm_server:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95E4679-D525-4E6A-921F-9CE1C7E1EE09"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:dm_server:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A8C3A93-F837-4595-8A4D-F53CA97AC7E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:dm_server:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27410ECF-4E3D-40B2-86A6-6A4BAA9E9C82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12B16A98-BB2E-4F5B-AE14-F84B6A879097"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1274AB42-FE68-4EF5-B11F-6343685A7747"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.0:m1:*:*:*:*:*:*",
            "matchCriteriaId" : "E88635C7-2305-41F6-9BD9-8E945F524C12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.0:m2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD492C8-A0EF-44E8-AC9F-56F8F64C99A4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.0:m3:*:*:*:*:*:*",
            "matchCriteriaId" : "C419AC44-21A5-456C-B537-B8BAF475BCF3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.0:m4:*:*:*:*:*:*",
            "matchCriteriaId" : "EFAAE3B9-C62E-47F6-A23D-1024E5870B7E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.0:m5:*:*:*:*:*:*",
            "matchCriteriaId" : "DA630C68-21E8-4F2A-8044-5DAF3CA3CC37"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "012985DE-5D39-470C-8E51-5AFCED594FB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "94639F24-EEF4-4AA3-83F4-6C86A3286E5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6649C191-78C3-403F-BEAF-741AF9FF2893"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6A4E6F8A-44B0-4982-9D52-96E8C85D9CFF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC4457-E99A-4AAF-B9FA-E4852E4E1967"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0474C87-8CC6-4E71-B350-3A4AA7CF452D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5049E640-145C-4338-B25C-7AA82A67FA0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDB933A-AED3-4A0B-9911-CBBF0B9E91B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58F22748-6F62-495A-96F5-694E5E1EBCB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.1:m1:*:*:*:*:*:*",
            "matchCriteriaId" : "030CC42C-8582-4B71-B93E-9D7AE5D2EBF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.1:m2:*:*:*:*:*:*",
            "matchCriteriaId" : "629C79A0-0233-4750-9A43-F98C97BBA47D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.1:m3:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6958CD-61D4-41ED-A16A-2B74E17AD501"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.1:m4:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4E5B16-5012-44CD-9719-ADDAACF4FBAE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ECA0EF4-6BEA-4464-B098-37C0342AEDDF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DF1E8-2BB9-45A6-96C4-406C81827E68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE1B570-A480-46AD-A8AE-E984824CF6BE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4DDA5A7-62A4-471A-9B01-D54CF560BF56"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B977B334-EC1A-45BD-976D-3DF3332ADA90"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DC37B55-E7DF-4426-B1E2-2644078EDD19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A939B963-7C6C-4617-A695-A9CC4FC774EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2D44CB-BBBF-45DE-B3C9-2BD2625BC8E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F709DAAC-AA32-4D37-9E0C-A014FB519697"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:3.0.0:m1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E1344C-CB41-48FC-BB98-7FEBEBF190E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:springsource:spring_framework:3.0.0:m2:*:*:*:*:*:*",
            "matchCriteriaId" : "AD66E687-C387-486D-AC34-279961311A8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34892",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/hitb06/DAY_1_-_Marc_Schoenefeld_-_Pentesting_Java_J2EE.pdf",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502926/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.springsource.com/securityadvisory",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=497161",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/hitb06/DAY_1_-_Marc_Schoenefeld_-_Pentesting_Java_J2EE.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502926/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.springsource.com/securityadvisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=497161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-27T22:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in apricot.php in LovPop.net APRICOT, probably 1.20, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en apricot.php en la aplicación Apricot de LovPop.net, probablemente en la versión 1.20, permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de parámetros no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lovpop:apricot:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D6256C-19D2-4735-BDE9-0FA0E809253F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN82744714/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000019.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN82744714/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-27T22:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.1 allows remote attackers to execute arbitrary code via a skin file (skin.ini) with a large PlaylistSkin parameter.  NOTE: this may overlap CVE-2008-5735."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en pila en PortableApps CoolPlayer Portable (alias CoolPlayer+ Portable) v2.19.1 permite a atacantes remotos ejecutar código arbitrario a través de un archivo skin.ini con un parámetro PlaylistSkin muy grande. NOTA: esta vulnerabilidad puede anular a CVE-2008-5735."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coolplayer:coolplayer:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B434D0D-4AD5-4C45-933C-2A284FE1FA03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34816",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-28T15:30:00.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in format.php in SMA-DB 0.3.12 allows remote attackers to execute arbitrary PHP code via a URL in the _page_content parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de ficheros en format.php en SMA-DB v0.3.12 permite a atacantes remotos ejecutar código PHP a su elección a través de una URL en el parámetro _page_content."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluevirus-design:sma-db:0.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "718DC9B9-0A61-45E3-9EAF-7E5F65A1F44E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/7936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-28T15:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in startpage.php in SMA-DB 0.3.12 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en startpage.php en SMA-DB v0.3.12 permite a atacantes remotos inyectar HTML o scripts web a su elección a través de PATH_INFO."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluevirus-design:sma-db:0.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "718DC9B9-0A61-45E3-9EAF-7E5F65A1F44E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/7936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-28T16:30:03.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execute arbitrary PHP code via a URL in the (1) _page_css and (2) _page_javascript parameters. NOTE: the _page_content vector is already is covered by CVE-2009-1450."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivos PHP en theme/format.php en SMA-DB v0.3.13 permiten a atacantes remotos ejecutar código PHP arbitrario a través de una URL en los parámetros (1) _page_css y (2) _page_javascript. NOTA: el vector _page_content ya está cubierto por CVE-2009-1450."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluevirus-design:sma-db:0.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38ED9A46-9DDD-4865-BB5F-B2A87CF4F331"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34569",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-28T16:30:03.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in class.eport.php in Tiny Blogr 1.0.0 rc4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the txtUsername parameter (aka the Username field).  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en class.eport.php en Tiny Blogr v1.0.0 RC4, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos arbitrarios SQL a través del parámetro txtUsername (alias del campo Username). NOTA: algunos de estos detalles se obtienen a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anoochit_chalothorn:tiny_blogr:1.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "37C96ECF-839F-4879-8F30-78511D7CBAF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34768",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502747/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34581",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502747/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-28T16:30:03.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in tasks.php in WebCollab before 2.50 (aka Billy Goat) allows remote attackers to inject arbitrary web script or HTML via the selection parameter in a todo action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en tasks.php en WebCollab anterior a v2.50 (alias Billy Goat) permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de selección de parámetros en una tarea de acción."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_simpson:webcollab:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.40",
            "matchCriteriaId" : "D1B6A332-16AE-4941-B3BF-F46BE31E1632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_simpson:webcollab:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35368D38-7D8C-4338-A54E-9EEA5257C87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_simpson:webcollab:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9840E707-2DCC-4585-A74D-CAC8A93D1738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_simpson:webcollab:2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "817D79BC-7532-4797-85C9-79D5BC27BA8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://holisticinfosec.org/content/view/108/45/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34568",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=676245&group_id=75945",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/53780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://holisticinfosec.org/content/view/108/45/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=676245&group_id=75945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/53780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-28T16:30:03.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in WebCollab before 2.50 (aka Billy Goat) allow remote attackers to hijack the authentication of administrators for requests that change an arbitrary password or have other unspecified impact."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en WebCollab anterior a v2.50 (alias Billy Goat) permiten a atacantes remotos el secuestro de la autenticación de los administradores para las peticiones que cambian una contraseña a su elección o tienen otro impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_simpson:webcollab:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35368D38-7D8C-4338-A54E-9EEA5257C87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_simpson:webcollab:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9840E707-2DCC-4585-A74D-CAC8A93D1738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_simpson:webcollab:2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "817D79BC-7532-4797-85C9-79D5BC27BA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_simpson:webcollab:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF67AA63-67C5-4F04-919A-4DBE44977BCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://holisticinfosec.org/content/view/108/45/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34568",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=676245&group_id=75945",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/53781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://holisticinfosec.org/content/view/108/45/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=676245&group_id=75945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/53781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-28T16:30:03.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in admin.php in Malleo 1.2.3 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the module parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en admin.php en Malleo v1.2.3 permite a los administradores remotos autenticados incluir y ejecutar archivos locales a su elección a través de un .. (punto punto) en el módulo de parámetros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stephane_rajalu:malleo:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66FA66DC-6DF3-4032-ADA7-2D856E72DD3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34766",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502763/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502763/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-28T16:30:03.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en player.php en Nuke Evolución Xtreme v2.x permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro defaultVisualExt. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:evolution-extreme:nuke_evolution_xtreme:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D93B042-D50C-4C72-977D-3A6DC8A0A195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:evolution-extreme:nuke_evolution_xtreme:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D8DD43-9FAA-496B-BED6-4DD59E2D0EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:evolution-extreme:nuke_evolution_xtreme:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431822FC-6E77-4290-BD73-F2817575EC1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34783",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-28T16:30:03.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to inject arbitrary web script or HTML via (1) the slab parameter in an edit action, (2) the catname parameter in a showcats action, and (3) the cat parameter in a reordercat action."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en admin/index.php en razorCMS anterior a v0.4 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de (1) el parámetro slab en una acción de edición, (2) el parámetro catname en un acción showcats, y (3) el parámetro cat en una acción reordercat.\r\n\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razorcms:razorcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3",
            "matchCriteriaId" : "52856284-CC33-4779-8A9D-A9A02FEA6654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razorcms:razorcms:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9EDF45-CA3B-44B8-A87E-99083223007C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=123990481506680&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=123998062108561&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://razorcms.co.uk/support/viewtopic.php?f=13&t=325",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34744",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34566",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=123990481506680&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=123998062108561&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://razorcms.co.uk/support/viewtopic.php?f=13&t=325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-28T16:30:03.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in razorCMS before 0.4 allows remote attackers to hijack the authentication of administrators for requests that create a web page containing PHP code."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en razorCMS anterior a v0.4 permite a atacantes remotos secuestrar la autenticación de administradores para las peticiones que crean una pagina web que contiene código PHP.\r\n\r\n\t\t\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razorcms:razorcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3",
            "matchCriteriaId" : "52856284-CC33-4779-8A9D-A9A02FEA6654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razorcms:razorcms:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9EDF45-CA3B-44B8-A87E-99083223007C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razorcms:razorcms:0.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B19BB3-8D38-4D4A-928E-75A45A63D6E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=123990481506680&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=123998062108561&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://razorcms.co.uk/support/viewtopic.php?f=13&t=325",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34744",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=123990481506680&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=123998062108561&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://razorcms.co.uk/support/viewtopic.php?f=13&t=325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1460",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-28T16:30:03.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "razorCMS before 0.4 uses weak permissions for (1) admin/core/admin_config.php, which allows local users to obtain the administrator's password hash and FTP user credentials; and (2) the root directory, (3) datastore/, and (4) admin/core/, which allows local users to have an unspecified impact."
      }, {
        "lang" : "es",
        "value" : "razorCMS anterior a v0.4 utiliza permisos débiles para (1) admin/core/admin_config.php, lo cual permite a los usuarios locales obtener el hash de la contraseña del administrador y las credenciales del usuario FTP; y (2) el directorio raíz, (3) datastore/, y (4) admin/core/, lo cual permite a los usuarios locales a tener un impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razorcms:razorcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3",
            "matchCriteriaId" : "52856284-CC33-4779-8A9D-A9A02FEA6654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razorcms:razorcms:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9EDF45-CA3B-44B8-A87E-99083223007C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razorcms:razorcms:0.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B19BB3-8D38-4D4A-928E-75A45A63D6E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=123990481506680&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=123998062108561&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://razorcms.co.uk/support/viewtopic.php?f=13&t=325",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34744",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34566",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=123990481506680&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=123998062108561&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/53777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://razorcms.co.uk/support/viewtopic.php?f=13&t=325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-28T16:30:03.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Create New Page form in razorCMS 0.3 RC2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Page Title field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el formulario Create New Page en razorCMS v0.3 RC2 y anteriores permite a usuarios remotos autenticados inyectar scripts web arbitrarios o HTML a través del campo Page Title."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razorcms:razorcms:*:rc2:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3",
            "matchCriteriaId" : "5571FE14-5D75-41F7-9C41-96FBC0F79382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razorcms:razorcms:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9EDF45-CA3B-44B8-A87E-99083223007C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=123998062108561&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://razorcms.co.uk/support/viewtopic.php?f=13&t=325",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=123998062108561&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://razorcms.co.uk/support/viewtopic.php?f=13&t=325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-28T16:30:03.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact."
      }, {
        "lang" : "es",
        "value" : "El Security Manager en razorCMS anterior a v0.4 no comprueba los permisos de todos los archivos propiedad de la cuenta de usuario de apache, lo cual es inconsistente con la documentación y permite a los usuarios locales tener un impacto no especificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razorcms:razorcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3",
            "matchCriteriaId" : "52856284-CC33-4779-8A9D-A9A02FEA6654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razorcms:razorcms:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9EDF45-CA3B-44B8-A87E-99083223007C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razorcms:razorcms:0.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B19BB3-8D38-4D4A-928E-75A45A63D6E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=123990481506680&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=123998062108561&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://razorcms.co.uk/support/viewtopic.php?f=13&t=325",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34566",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=123990481506680&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=123998062108561&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://razorcms.co.uk/support/viewtopic.php?f=13&t=325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-28T16:30:03.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Static code injection vulnerability in razorCMS before 0.4 allows remote attackers to inject arbitrary PHP code into any page by saving content as a .php file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático en razorCMS anterior a v0.4 permite a atacantes remotos inyectar código PHP a su eleccion en cualquier página guardando contenido como un fichero .php ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razorcms:razorcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3",
            "matchCriteriaId" : "52856284-CC33-4779-8A9D-A9A02FEA6654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razorcms:razorcms:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9EDF45-CA3B-44B8-A87E-99083223007C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razorcms:razorcms:0.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B19BB3-8D38-4D4A-928E-75A45A63D6E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=123990481506680&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=123998062108561&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://razorcms.co.uk/support/viewtopic.php?f=13&t=325",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34566",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=123990481506680&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=123998062108561&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://razorcms.co.uk/support/viewtopic.php?f=13&t=325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-29T15:30:00.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in useradd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via unknown vectors, a different issue than CVE-2008-1660."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en useradd en HP-UX B.11.11, B.11.23, y B.11.31 permite a usuarios locales acceder a archivos y directorios a su elección a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2008-1660."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:S/C:C/I:C/A:N",
            "baseScore" : 6.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 2.7,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "972D4ABF-2E80-4902-910D-5BD0CBEC9765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C73959-3E02-4847-8962-651D652800EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64BBA96-FB3C-46AC-9A29-50EE02714FE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/503038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34748",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-29T15:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus (SAV) before 10.1 MR8, Symantec Endpoint Protection (SEP) 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, related to \"two parsing errors.\""
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en ccLgView.exe en Symantec Log Viewer, utilizado en Symantec AntiVirus (SAV), anterior a v10.1 MR8, Symantec Endpoint Protection (SEP) v11.0 anteriores a v11.0 MR1, Norton 360 v1.0, y Norton Internet Security 2005 hasta 2008, permite a atacantes remotos inyectar HTML o scripts web arbitrarios a su elección a través de un mensaje de correo electrónico elaborado ,relacionadas con \"dos errores de análisis sintáctico.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "B5F1EF45-537A-4656-BDE8-FA9383A75676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E02FE2FB-514A-48F9-8833-B1EF4CC1E27E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD10A73-3DEF-48BD-9B35-D2BF791560E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03684DB6-9DC6-4EDD-902F-D1EC160330ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D38110-4B50-472E-9743-52A137F2ED93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1004A37-D22B-4690-8625-B631595C8B0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7A5EDA-F1FF-4F66-BC78-DC6429D301CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A664090-5993-4DF2-AD6B-0F4867DB98B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "079D24C8-27D6-4794-8E56-58A7885DFE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "732CB44D-7468-486A-85CA-FA1365DB0F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E236C99A-D524-462A-BD8E-97A07B3BFC69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37456791-164A-489B-A905-8B61C6F91BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39155B8-55BD-4B58-85DB-505876930A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287B278D-A114-4795-8934-64E3C4472481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E269D396-3A70-4C4B-9D79-CBBA75C280D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_360:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00819E08-CC5C-48FC-9F80-95B68AB19C65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2005:*:anti_spyware:*:*:*:*:*",
            "matchCriteriaId" : "803641B7-E099-4CE8-B805-DBB338479E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2005:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "E4BBE123-56E1-46E0-93BE-38F0932D9C63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2005:11.0:*:*:*:*:*:*",
            "matchCriteriaId" : "F39AE3D7-7018-47AB-B332-D40EA5273CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2005:11.0.9:*:*:*:*:*:*",
            "matchCriteriaId" : "82446BA3-92F9-4689-9D67-3CE159AA0F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2005:11.5.6.14:*:*:*:*:*:*",
            "matchCriteriaId" : "98F9F2E3-1775-4EF9-9FE0-0D011307C269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2005_contains_nav_11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FE1A0A-4352-459A-892D-29AB14AA3B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CC64B1-772C-42A9-9B0A-08CA92DC87E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2006:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "1DE91FB9-35C3-4DC7-BE00-7C60EE9FD880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692ECBCD-AB6B-4965-93F4-BDAD4777C018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF87752-C86D-4C89-9DE9-F874068C89EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-29T15:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary commands via a crafted packet whose contents are interpreted as a command to be launched in a new process by the CreateProcessA function."
      }, {
        "lang" : "es",
        "value" : "El LANDesk Common Base Agent (CBA) de Intel en Alert Management System 2 (AMS2) de Symantec, tal y como es usado en System Center (SSS) de Symantec; AntiVirus Server de Symantec; AntiVirus Central Quarantine Server de Symantec; Symantec AntiVirus (SAV) Corporate Edition versiones 9 anteriores a 9.0 MR7, versiones 10.0 y 10.1 anteriores a 10.1 MR8, y versiones 10.2 anteriores a 10.2 MR2; Symantec Client Security (SCS) versiones 2 anteriores a 2.0 MR7 y versiones 3 anteriores a 3.1 MR8; y Symantec Endpoint Protection (SEP) anterior a versión 11.0 MR3, permite a atacantes remotos ejecutar comandos arbitrarios por medio de un paquete diseñado cuyo contenido se interpreta como un comando para ser iniciado en un nuevo proceso mediante la función CreateProcessA."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:*:-:corporate:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "658366BE-0214-4388-9C96-ABEB9E60C213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:*:*:corporate:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "4CD3B130-38CD-4B85-B054-EE43C205E935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:*:*:corporate:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "C754F33C-88E5-45A7-96D9-91C0D0397ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:-:-:srv:*:*:*:*:*",
            "matchCriteriaId" : "91397AE1-03FB-4938-8E4F-6E0A29DD1D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "EEB639EF-B434-42ED-A162-A2593FA78E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "5BA427D2-2F74-4314-B68A-164E2B6B0240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.1.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "549049F7-2698-4F68-A1D0-1E4546B9EB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.2:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "3E86D9CE-8A86-498B-B3A3-8988274A91E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.2.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "BBF13A92-83EF-44EE-AD87-BA0CF8FF266D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.2.2:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "D92B456D-A69E-4B10-8F74-D3DFC242F641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.3:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "643AF180-138C-472A-8BC5-B8B028E77CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.4:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "0D56068D-CEF2-46B7-9914-36AB961839C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.5:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "C8ADDF27-67FF-41D7-BF2E-87AE06FDECD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.6:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "002290DD-589E-404F-BFC0-A1239D0E92E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.7:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "D2854BCF-2D37-4BE9-A590-7E25DF443EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.8:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "4BDB19A7-8DFA-43AD-9C44-16BBCF4531B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.9:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "ED683B68-530A-436F-A49B-32890EDFAC93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_central_quarantine_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8ABFB83-2B3D-4F73-A849-1910D8BCA622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "64CC7EDE-5A85-4D8E-99B0-FF6690BCE35E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDD0E02-306D-4675-B73A-2C2F619CDDCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844A6963-F60C-4D48-8445-9056C99201D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.0.359:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB1C90D-DBC0-4DA0-AF5D-E42C41E84B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.1.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2852548A-39A6-44FB-A73E-96507BA0CD8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.1.1001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9641FC-FF7B-4413-8163-B795AA35C888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.1.1007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17862D7F-7001-46B8-A415-2A15A247E9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.1.1008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "170AEE7B-31AF-44E2-9B63-9703D0DE721C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.1.1009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E651C9BE-201B-4DDC-A650-F9269531290C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56EA0BAC-ED6D-45D2-995C-18B828906E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2.2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63B1A9FC-707C-4F6F-959B-30B28E43D202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2.2001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87E4E013-A819-42E0-8F8E-9B2D409F900E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2.2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B87A8-8176-4426-BDE4-6FDDD272E1B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2.2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBD7767-C352-435B-8963-83F723FFD302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2.2011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FC1708-B643-4489-A59C-EBDAFD9B0078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2.2020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCE0C8A-A97C-4DE1-B0EE-3A2D16A34C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2.2021:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE714705-CEE9-4BA1-8573-FD3765BC7F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0",
            "matchCriteriaId" : "C77B51F3-AB82-4C0A-8341-73CC9650F841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:system_center:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBAB5D5-E3B7-4D65-80E8-C0E5B40A95A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34856",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/8346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34671",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1204",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/8346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-29T15:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allow remote attackers to execute arbitrary code via (1) a crafted packet or (2) data that ostensibly arrives from the MsgSys.exe process."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento múltiple de búfer basado en pila en IAO.EXE en el Intel Alert Originator Service en Symantec Alert Management System 2 (AMS2), tal como se utiliza en Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 anterior a v9.0 MR7, v10.0 y v10.1 anterior a v10.1 MR8, y v10.2 anterior a v10.2 MR2; Symantec Client Security (SCS) v2 anterior a v2.0 MR7 y v3 anterior a v3.1 MR8; y Symantec Endpoint Protection (SEP) anterior a v11.0 MR3, permite a atacantes remotos ejecutar código arbitrario a través de (1) un paquete elaborado o (2) los datos que aparentemente se reciban a del proceso MsgSys.exe."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:*:-:corporate:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "658366BE-0214-4388-9C96-ABEB9E60C213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:*:*:corporate:*:*:*:*:*",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "4CD3B130-38CD-4B85-B054-EE43C205E935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:*:*:corporate:*:*:*:*:*",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "C754F33C-88E5-45A7-96D9-91C0D0397ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:-:-:srv:*:*:*:*:*",
            "matchCriteriaId" : "91397AE1-03FB-4938-8E4F-6E0A29DD1D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "EEB639EF-B434-42ED-A162-A2593FA78E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "5BA427D2-2F74-4314-B68A-164E2B6B0240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.1.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "549049F7-2698-4F68-A1D0-1E4546B9EB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.2:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "3E86D9CE-8A86-498B-B3A3-8988274A91E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.2.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "BBF13A92-83EF-44EE-AD87-BA0CF8FF266D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.2.2:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "D92B456D-A69E-4B10-8F74-D3DFC242F641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.3:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "643AF180-138C-472A-8BC5-B8B028E77CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.4:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "0D56068D-CEF2-46B7-9914-36AB961839C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.5:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "C8ADDF27-67FF-41D7-BF2E-87AE06FDECD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.6:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "002290DD-589E-404F-BFC0-A1239D0E92E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.7:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "D2854BCF-2D37-4BE9-A590-7E25DF443EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.8:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "4BDB19A7-8DFA-43AD-9C44-16BBCF4531B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0.9:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "ED683B68-530A-436F-A49B-32890EDFAC93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_central_quarantine_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8ABFB83-2B3D-4F73-A849-1910D8BCA622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "64CC7EDE-5A85-4D8E-99B0-FF6690BCE35E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDD0E02-306D-4675-B73A-2C2F619CDDCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844A6963-F60C-4D48-8445-9056C99201D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.0.359:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB1C90D-DBC0-4DA0-AF5D-E42C41E84B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.1.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2852548A-39A6-44FB-A73E-96507BA0CD8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.1.1001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9641FC-FF7B-4413-8163-B795AA35C888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.1.1007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17862D7F-7001-46B8-A415-2A15A247E9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.1.1008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "170AEE7B-31AF-44E2-9B63-9703D0DE721C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.1.1009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E651C9BE-201B-4DDC-A650-F9269531290C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56EA0BAC-ED6D-45D2-995C-18B828906E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2.2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63B1A9FC-707C-4F6F-959B-30B28E43D202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2.2001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87E4E013-A819-42E0-8F8E-9B2D409F900E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2.2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B87A8-8176-4426-BDE4-6FDDD272E1B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2.2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBD7767-C352-435B-8963-83F723FFD302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2.2011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FC1708-B643-4489-A59C-EBDAFD9B0078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2.2020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCE0C8A-A97C-4DE1-B0EE-3A2D16A34C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2.2021:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE714705-CEE9-4BA1-8573-FD3765BC7F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0",
            "matchCriteriaId" : "C77B51F3-AB82-4C0A-8341-73CC9650F841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:system_center:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBAB5D5-E3B7-4D65-80E8-C0E5B40A95A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503080/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-018/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503080/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-018/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-29T15:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary code by placing the code on a (1) share or (2) WebDAV server, and then sending the UNC share pathname to this service."
      }, {
        "lang" : "es",
        "value" : "XFR.EXE en el servicio Intel File Transfer en la consola en Symantec Alert Management System 2 (AMS2), tal como se utiliza en Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 anteriores a 9.0 MR7, 10.0 y 10.1 anteriores a 10.1 MR8, y 10.2 anteriores a 10.2 MR2; Symantec Client Security (SCS) 2 anteriores a 2.0 MR7 y 3 anteriores a 3.1 MR8; y Symantec Endpoint Protection (SEP) anteriores a 11.0 MR3, permite a atacantes remotos la ejecución de código arbitrario colocando el código en un (1) compartido o (2) servidor WebDAV y luego enviando la ruta al compartido UNC de este servicio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:*:-:corporate:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "658366BE-0214-4388-9C96-ABEB9E60C213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:*:*:corporate:*:*:*:*:*",
            "versionStartIncluding" : "10",
            "versionEndIncluding" : "10.2",
            "matchCriteriaId" : "DF1F4E2F-B0F3-4FC1-8085-0A7B88586FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:-:-:srv:*:*:*:*:*",
            "matchCriteriaId" : "91397AE1-03FB-4938-8E4F-6E0A29DD1D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_central_quarantine_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8ABFB83-2B3D-4F73-A849-1910D8BCA622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "E740F9D8-BC99-4016-9B2B-E868DE018549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "5DF597A7-8F2D-4C9D-97C6-ACF8F57A771A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0",
            "matchCriteriaId" : "C77B51F3-AB82-4C0A-8341-73CC9650F841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:system_center:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBAB5D5-E3B7-4D65-80E8-C0E5B40A95A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=786",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34856",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34675",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022130",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022131",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022132",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1204",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50179",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "evaluatorImpact" : "Per vendor: http://www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02\r\n\r\n\"Symantec System Center Impact\r\n\r\nSymantec System Center (SSS) is a Microsoft Management Console (MMC) plug-in which allows an administrator to manage all Symantec AntiVirus platforms from a single, centralized location. Alert Management System 2 (AMS2) is an alerting feature of System Center that listens for specific events and sends notifications as specified by the administrator.\r\n\r\nAMS2 is installed by default with Symantec System Center 9.0. AMS2 is an optional component in Symantec System Center 10.0 or 10.1. These vulnerabilities will only impact systems if AMS has been installed.\r\n\r\nSymantec AntiVirus Server Impact\r\n\r\nAMS2 is installed by default with Symantec AntiVirus Server 9.0. AMS2 is an optional component in Symantec AntiVirus Server 10.0 or 10.1. These vulnerabilities will only impact systems if AMS has been installed.\r\n\r\nSymantec AntiVirus and Symantec Endpoint Protection Central Quarantine Server Impact\r\n\r\nAMS2 is installed by default by Central Quarantine Server. These vulnerabilities will only impact systems if Quarantine Server has been installed.\r\n\r\nSymantec is not aware of any customers impacted by these issues, or of any attempts to exploit them. However, we recommend that any affected customers update their product immediately to protect against potential attempts to exploit these issues.\r\n\r\nCertain localized language versions of SCS 2.0/SAV 9.x were not patched due to compatibility issues on the localized platforms. As a result, customers who are running the following versions are strongly recommended to update to a non-vulnerable SCS 2.0/SAV 9 International English version or upgrade to a non-vulnerable version of SEP 11.x:\r\n\r\nSymantec Client Security 2.0/Symantec AntiVirus Corporate Edition 9.x (Chinese Simplified and Chinese Traditional)\r\nSymantec Client Security 2.0/Symantec AntiVirus Business Pack 9.x (Chinese Simplified and Chinese Traditional)\r\nSymantec Client Security 2.0/Symantec AntiVirus Business Pack 9.x (Korean)\r\nSymantec Client Security 2.0/Symantec AntiVirus Business Pack 9.x (Japanese licensed)\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-29T15:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10, and OpenSolaris before snv_114, allow local users to cause a denial of service (panic) via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en los manipuladores DTrace ioctl en Sun Solaris v10 y OpenSolaris anteriores a snv_114, permiten a usuarios locales provocar una denegación de servicio (panic) a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "053A0DA6-483C-49BB-BC7A-E624DB2C269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "447212A4-FACD-475E-A62B-60FE6504F63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-257708-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-171.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-257708-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-171.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-29T18:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to execute arbitrary SQL commands via the fileget parameter in a view action and other unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Pragyan CMS v2.6.4 permite a atacantes remotos ejecutar comandos SQL a través del parámetro fileget en una acción de vista y otros vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pragyan_cms_project:pragyan_cms:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FE4542-6302-4FFA-AEEC-2A2F6D0728C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/502933/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34707",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502933/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-29T18:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in action.asp in PuterJam's Blog (PJBlog3) 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en action.asp en PuterJam's Blog (PJBlog3) v3.0.6.170 permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro cname en la acción checkAlias, como se ha explotado libremente en Abril de 2009. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pjhome:puterjams_blog:3.0.6.170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E7D0C5-34EA-4D78-9668-212847EB0AB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/34701.vbs",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/53939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34897",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34701",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/34701.vbs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/53939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-29T18:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) an AttachFile sub-action in the error_msg function or (2) multiple vectors related to package file errors in the upload_form function, different vectors than CVE-2009-0260."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en action/AttachFile.py en MoinMoin v1.8.2 y anteriores permiten a atacantes remotos inyectar HTML o scripts web arbitrarios a través de (1) una sub-acción AttachFile en la función error_msg o (2) múltiples vectores relacionados con los errores de empaquetado de ficheros en la función upload_form, diferentes vectores que CVE-2009-0260."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmo:moinmoin:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23A64B6E-48D4-4743-97E3-C1EC6C1A2EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "ACB9D53C-D2DE-4FCA-B20B-43FC0EECF9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D2866E-A684-4EB7-A127-5FEC934945E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D41FDF8-B8BD-43D9-8D53-ADCF15F7E16B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BDC4AB6-39BF-4444-9CFE-B654A19814C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD78CAE-9A9D-40AA-AD1F-C124A8315714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8673FFE8-349E-4412-9913-1145DFA1EC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24271A6D-21D9-4E8D-997F-0EC132518FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3072B82-3D5C-46DF-8869-08FAAC5C70DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93508FCF-7852-4CB9-AD91-AB0FCD61BE43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B83ACA6-5C3C-46E3-805C-EE1E759B7331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7EF155-C5E0-4473-B635-C551BF3F8EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFA7F26-835B-4454-91A2-1DBB80C53492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C92D8510-CA34-4E6D-B432-997860C63B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB2354B8-9A1A-4E75-92AC-F16CFDF91761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B44C24B-013E-4769-A200-D59752E0A041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB8DB90E-BEE5-447E-9F78-A96634343815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84317439-A287-4897-9608-65095860AB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FB70477-B0F2-44D6-92A8-0F42F890CF99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013FBB75-8B01-4249-9C6C-5E27964ED2D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361C37DC-CB43-4E6A-A198-313A9D62CD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F3D66C-3D24-41D0-9E4B-BB458DD5517D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4C9F85-C5EF-4991-A005-5839951B9843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690F09A1-6195-404D-BDC3-5F02A4A201C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C82F62-DFBB-4499-8C6D-27DA49A00F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57003BFE-8FB2-480A-AFA1-63817B608F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FD9248-1E4B-46DC-9F78-20787F56D50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23539FCA-FF83-46E5-A9E2-5051D975DC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CFA717-B536-46CF-8D96-B850EB4C6F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FBCD1B-2D05-4C17-B41C-CF8DA75BB05D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51DF4CAC-EDD8-4C71-BC77-0F516692B5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1CAAA6-8D33-4901-88E2-120AB7B4CD53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F89B87E-70F6-4B3C-B684-BE2666342F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C78CF4-D4B3-4AE1-A15F-14C3BB8136D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33BA7179-8A11-41C1-8F54-AC9316E8330D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C423EE-D9F5-4570-A5E8-1AA34F05E0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B12CADC-8939-462C-8D40-DD56B13773AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19C0F96-9054-4DE9-92AD-A9DAF03B4960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C5CDE22-2384-4B78-A76F-B95D5FBAD141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moinmoin:moinmoin:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E706F537-8473-4E45-9165-CA502263DC2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hg.moinmo.in/moin/1.8/rev/5f51246a4df1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://moinmo.in/SecurityFixes",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34821",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-774-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1119",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.moinmo.in/moin/1.8/rev/5f51246a4df1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://moinmo.in/SecurityFixes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-774-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-29T18:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable from index2.php, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in profiles/."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de subida de ficheros sin restricciones en upload-file.php en Adam Patterson Studio Lounge Address Book 2.5, que es accesible desde index2.php, permite a atacantes remotos ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable, accediendo luego a él a través de una solicitud directa al el archivo en los perfiles."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:studiolounge:address_book:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75A02F5-F37B-4574-A77C-C4721BF650CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34761",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/53813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34652",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1111",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/53813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-29T18:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving e-mail messages.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función del interfaz de correo web en AXIGEN Mail Server 6.2.2 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de vectores sin especificar involucrando mensajes de correo electrónico. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gecad:axigen_mail_server:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30879EDE-262D-4CD7-B67C-39ABEB945881"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34402",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-29T18:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The logging feature in eMule Plus before 1.2e allows remote attackers to cause a denial of service (infinite loop) via unspecified attack vectors."
      }, {
        "lang" : "es",
        "value" : "La función de inicio de sesión en eMule Plus anterior a v1.2e permite a atacantes remotos provocar una denegación de servicio (bucle infinito)a través de vectores de ataque sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aemuleplus:emule_plus:1.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F45C29D-CF53-4EFC-82C0-B657CE61767F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2c",
            "matchCriteriaId" : "C4FE2664-2570-4EC2-9E27-A20832483AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06F976C3-CC97-487F-9564-748E94F16207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "534E3D63-5D17-47B8-86DE-CEC7228227F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17805C50-2274-4E79-97D8-EB29787079E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84884CF-5FEE-43C5-AD18-B4C984FFE92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BEE0EA-4AFF-4A01-8069-0B9C27C7DAD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01EE04B0-6D9A-43C8-BA7B-1768B0D74319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BF152E-8F26-4B2C-859B-BB0F32E0DA71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8BFF74-126E-4C7B-8360-1C99D67559AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A27B638-42AE-4E3F-9BAB-A27905B1C437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1.2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89C9524A-0F96-404F-B24E-3465E71804FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1.h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FBABCA-F25E-489D-922E-A37942706866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4EAC23-DDCC-48DE-9CF2-F40FA74E80F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF028BA-1E1E-45DC-A69A-1C516089C299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8294FF0E-C4FD-4135-91E9-99FDAA7835DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A4080F-60C9-4BFC-A33B-1E0FB1F93E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B35FDA4-378C-4EEE-A0B7-C63C99D0E5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A17FC1-2E31-4B6C-9B68-26119CAC5DE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE5D4F9-1E8D-4564-AF9D-D86A56654961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC5A78A5-C32D-4355-8F94-651972AF7D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0E4BA2-1B92-4C0C-A27F-D68A4437E41D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67247E7D-0F34-4CCE-A750-8380703241F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE6276D-63F5-484A-A81C-04CD29DBFEF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9BD63D-5F28-4CDB-B188-8CCA2D464D2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emuleplus:emule_plus:1o:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA0F425-2B41-420B-A506-5470E573C702"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34799",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=676726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=676726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-29T18:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the with parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en pmscript.php en Flatchat 3.0 permite a atacantes remotos incluir y ejecutar archivos locales a su elección a través de un .. (punto punto) en el parámetro with."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ninjadesigns:flatchat:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26668A41-84D0-4EF3-867E-D904D1D9C13A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-29T18:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the login_user (aka username) parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en pages/login.php en FunGamez RC1 permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro login_user (alias username). NOTA: algunos de estos detalles se obtienen a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rens_rikkerink:fungamez:-:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4371BC-9EC3-4424-86E4-1BE9CF2E1973"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=124025031126068&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34610",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1117",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124025031126068&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-29T18:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en admin/load.php en FunGamez RC1 permite a atacantes remotos incluir y ejecutar archivos locales a su elección a través de un .. (punto punto) en el módulo de parámetros para index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rens_rikkerink:fungamez:-:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4371BC-9EC3-4424-86E4-1BE9CF2E1973"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=124025031126068&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34610",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1117",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124025031126068&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-29T18:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by setting the user cookie parameter."
      }, {
        "lang" : "es",
        "value" : "includes/user.php en Fungamez RC1 permite a atacantes remotos eludir la autenticación y obtener acceso administrativo mediante el establecimiento de los parámetros de la cookie de usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rens_rikkerink:fungamez:-:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4371BC-9EC3-4424-86E4-1BE9CF2E1973"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=124025031126068&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1117",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124025031126068&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-30T20:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module 1.49 for Perl might allow context-dependent attackers to execute arbitrary code via unspecified input to an application that uses the getline and pg_getline functions to read database rows."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el módulo DBD::Pg (alias DBD-Pg o libdbd-pg-perl) v1.49 para Perl podría permitir a atacantes, dependiendo del contexto, ejecutar código arbitrario a través de una entrada sin especificar a una aplicación que utiliza las funciones getline y pg_getline para leer filas de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB490BCA-8592-4324-BCE3-396BFD647D5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmu:dbd\\:\\:pg:1.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B17A3CD-3BF4-41AE-B755-6C5FA6401DEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0479.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1067.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-0663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0479.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-0663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-30T20:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The process_stat function in (1) Memcached before 1.2.8 and (2) MemcacheDB 1.2.0 discloses (a) the contents of /proc/self/maps in response to a stats maps command and (b) memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain sensitive information such as the locations of memory regions, and defeat ASLR protection, by sending a command to the daemon's TCP port."
      }, {
        "lang" : "es",
        "value" : "La función process_stat en (1) Memcached antes de v1.2.8 y (2) MemcacheDB v1.2.0 revela (a) el contenido de /proc/self/maps en respuesta a un comando stats maps (estadisticas de mapas) y (b) las estadísticas de la asignación de memoria en respuesta a un comando stats malloc (estadisticas de asignacion de memoria), lo cual permite a atacantes remotos obtener información sensible como la localización de regiones de memoria, y evitar la protección ASLR, mediante el envío de un comando a el demonio del puerto TCP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "82B62E56-CCC2-4239-8B5C-81FF1D6BF32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F664659-721C-4387-A06C-AD30DD9AF762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18A83632-06E4-4978-909A-5E145F7A654F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A511459-F98A-4192-8E79-24766D296A47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC3886A-4C1B-49B9-A334-E9A1C8CA5309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD764B57-6985-4DD2-BA3C-09912715A56A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E433DCE9-8C2E-47AC-907E-8306D322D0A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:1.0.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "8164AFC1-6320-44C1-8872-9C26A5E1C173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:1.0.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "6397D3FD-EF1F-4B0C-BA6C-26131820A653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:1.0.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "2616A383-92BE-4FD2-8A62-8A2CF1F69830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F500EE98-0AAA-4C9E-91DF-313E6812CC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0C217E-B2E4-472A-AE6A-C95D73C8FE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:1.1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "07FCB8CB-1434-4486-858D-BC509246231D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:1.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE87DDD-FF8E-47B2-A30B-7C32ADA6C02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:1.2.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A76FC002-9B7C-4F3D-A2E7-E416CD6C6336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0282.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/memcachedb/source/browse/trunk/ChangeLog?spec=svn98&r=98",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/memcachedb/source/detail?r=98",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/memcachedb/source/diff?spec=svn98&r=98&format=side&path=/trunk/memcachedb.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://groups.google.com/group/memcached/browse_thread/thread/ff96a9b88fb5d40e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34915",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34932",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.positronsecurity.com/advisories/2009-001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503064/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1196",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1197",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00851.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01256.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0282.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://code.google.com/p/memcachedb/source/browse/trunk/ChangeLog?spec=svn98&r=98",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://code.google.com/p/memcachedb/source/detail?r=98",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://code.google.com/p/memcachedb/source/diff?spec=svn98&r=98&format=side&path=/trunk/memcachedb.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://groups.google.com/group/memcached/browse_thread/thread/ff96a9b88fb5d40e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.positronsecurity.com/advisories/2009-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503064/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00851.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01256.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-30T20:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in TIBCO SmartSockets before 6.8.2, SmartSockets Product Family (aka RTworks) before 4.0.5, and Enterprise Message Service (EMS) 4.0.0 through 5.1.1, as used in SmartSockets Server and RTworks Server (aka RTserver), SmartSockets client libraries and add-on products, RTworks libraries and components, EMS Server (aka tibemsd), SmartMQ, iProcess Engine, ActiveMatrix products, and CA Enterprise Communicator, allows remote attackers to execute arbitrary code via \"inbound data,\" as demonstrated by requests to the UDP interface of the RTserver component, and data injection into the TCP stream to tibemsd."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en  TIBCO SmartSockets antes de v6.8.2, SmartSockets Product Family (alias RTworks) antes de v4.0.5, y Enterprise Message Service (EMS) v4.0.0 hasta v5.1.1, utilizado en SmartSockets Server y RTworks Server (alias RTserver), librerias del cliente SmartSockets y productos con el complemento, \r\nlibrerias y componentes RTworks, EMS Server (alias tibemsd), SmartMQ, iProcess Engine, productos ActiveMatrix, y CA Enterprise Communicator, permite a atacantes remotos ejecutar código arbitrario a través de \"inbound data,\" (datos de entrada), como lo demuestran las solicitudes de la interfaz UDP de el componente RTserver, y inyección de datos en el flujo TCP a tibemsd."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:enterprise_message_service:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.1",
            "matchCriteriaId" : "6217FE17-B839-43F5-BE35-F4A01C40DA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:enterprise_message_service:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A391F64-B618-4961-942C-109CE548FBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:enterprise_message_service:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3811EEE8-ED90-4272-BDC9-9FBB7E2ABC50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:enterprise_message_service:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D4BFCE-FD9B-45D8-B23A-B928B86ED2B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:enterprise_message_service:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B14826-B53E-46DC-8AE9-85776867D341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:enterprise_message_service:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50598050-FAC6-42B6-98E5-D02DF85F1A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:enterprise_message_service:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D47D8470-3A41-4A12-95B4-B77A97A2AF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:rtworks:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E49B105-E110-4A0B-A93B-B93A956B9A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:rtworks:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "087EFE3D-85C1-4479-B867-AD32A20693A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:smartsockets:6.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1ABE58C-9AF7-4013-A117-D72FF5991F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:smartsockets:6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0823AC2-9E58-4669-9DC0-41A5A93B427B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:smartsockets_rtserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.8.1",
            "matchCriteriaId" : "E3B33DD3-A164-4C13-A961-1E66ACB87DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:smartsockets_rtserver:6.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DC7F67-3813-4659-9429-78B93C02385B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34911",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.harmonysecurity.com/blog/2009/04/tibco-smartsockets-stack-buffer.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tibco.com/multimedia/security_advisory_ems_tcm8-7558.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/multimedia/security_advisory_rtworks_tcm8-7559.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/multimedia/security_advisory_smartsockets_tcm8-7560.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories/default.jsp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories/smartsockets-sspfm-ems_advisory_20090428.jsp",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1198",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.harmonysecurity.com/blog/2009/04/tibco-smartsockets-stack-buffer.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tibco.com/multimedia/security_advisory_ems_tcm8-7558.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/multimedia/security_advisory_rtworks_tcm8-7559.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/multimedia/security_advisory_smartsockets_tcm8-7560.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories/default.jsp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories/smartsockets-sspfm-ems_advisory_20090428.jsp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1295",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2009-04-30T20:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does not properly remove files from the application's crash-report directory, which allows local users to delete arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Apport anterior a v0.108.4 en Ubuntu v8.04 LTS, antes de v0.119.2 en Ubuntu v8.10, y antes de v1.0-0ubuntu5.2 en Ubuntu v9.04 no elimina adecuadamente los archivos del directorio crash-report,lo cual permite a los usuarios locales borrar archivos a su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apport:apport:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.0.8.1",
            "matchCriteriaId" : "EE304688-05F0-4F7F-8664-E729B6FA5090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu:8.0.4_lts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9245826-44D6-432D-9447-025FD02431D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8893D670-FF80-4297-8EF8-83C6CB165604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24066D17-EE95-4E06-9FAC-DA9B2227195F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "security@ubuntu.com"
      }, {
        "url" : "http://secunia.com/advisories/34947",
        "source" : "security@ubuntu.com"
      }, {
        "url" : "http://secunia.com/advisories/34952",
        "source" : "security@ubuntu.com"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "security@ubuntu.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34776",
        "source" : "security@ubuntu.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-768-1",
        "source" : "security@ubuntu.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/bugs/357024",
        "source" : "security@ubuntu.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1295",
        "source" : "security@ubuntu.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-768-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/bugs/357024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-30T20:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the SRC attribute of an IMG element, a related issue to CVE-2009-1434."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en TWiki anterior a v4.3.1 permite a usuarios remotos autenticados secuestrar la autenticación de usuarios a su elección para las peticiones que actualizan páginas, como se demostró por una URL para un script de guardado en el atributo SRC de un elemento IMG, una cuestión relacionada con CVE-2009-1434."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.0",
            "matchCriteriaId" : "1E38FC46-7F35-4777-87D8-124838860474"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE3EEC6-7E05-4A37-97AA-D73E7D7A0E01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855671F5-C215-4382-B512-4ABD9D66F13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C00515-CFEE-427A-BACE-B3140B0D6C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CF4F9B-7ADF-47A2-A556-10CCF7401DA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DDB420-E707-4319-8395-531FC0D84E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7A5A57-AE7D-4D3E-A280-41676F355AEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/526258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34880",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022146",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_name=7E0723DC-CBFF-4DBD-B26C-8686287FF689%40twiki.net&forum_name=twiki-announce",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2009-1339",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://twiki.org/p/pub/Codev/SecurityAlert-CVE-2009-1339/TWiki-4.3.0-c-diff-cve-2009-1339.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nabble.com/Bug-526258:-CVE-2009-1339:-CSRF-Vulnerability-with-Image-Tag-td23311575.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/526258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_name=7E0723DC-CBFF-4DBD-B26C-8686287FF689%40twiki.net&forum_name=twiki-announce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2009-1339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://twiki.org/p/pub/Codev/SecurityAlert-CVE-2009-1339/TWiki-4.3.0-c-diff-cve-2009-1339.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nabble.com/Bug-526258:-CVE-2009-1339:-CSRF-Vulnerability-with-Image-Tag-td23311575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-30T20:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns."
      }, {
        "lang" : "es",
        "value" : "Fuga de memoria en la función dequote_bytea en quote.c en el módulo DBD::Pg (alias DBD-Pg o libdbd-pg-perl) anterior a v2.0.0 para Perl permite a atacantes, dependiendo del contexto, causar una denegación de servicio (consumo de memoria) obteniendo los datos con columnas BYTEA."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.9",
            "matchCriteriaId" : "4FA7647E-4058-4E2B-AFF8-01BBAB1D1B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613612A7-EC67-4B63-89AB-0A844D1A8782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E75CE2-B819-46BF-ABE9-83C32B22EC42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638D9B29-C654-41E4-AB2D-0047D55673DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E024E548-2D2D-4651-808D-5C0010C13063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C53713A-8B3E-483C-B0B2-1B26C550EB19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5750AA-0347-4A14-B5E9-BA60AFAD26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3630BEA-0EDD-4B42-B652-ACE8E501FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35306D81-3690-4082-8CE3-77512B4F1791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72323A75-2F6F-4D22-9B5C-4691DF6918BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CACFAD2-226E-4DC0-A426-305BB4AF573B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C0B881F-AC4B-4A71-8E1B-051549E5D22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97BA119B-A2BA-4133-BA38-841107A1B404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A4793D-CE46-4E87-835A-AE99B3087331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA32921-F742-4972-9596-23CCEC98009E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A3F494B-D2FB-4DF5-8346-7DEBC6A15C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E0581B-E46B-4D31-B6EF-6B961A149324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E3784A-BAB6-4E1F-BDC8-02471EB9E9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67394C79-025F-4756-847C-37CB48DD6337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26B1B340-723C-423C-B08D-7D5A3D0E69CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD390BD-E49E-4982-BC14-70D893F18DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036A1EB2-AFA1-4279-90C2-B8F69DB44D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC4E34A-1D5D-4C32-A1DD-AAC168E0AB49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9469A86-BDF3-4266-8390-C8E9994ACB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6BB8AB-F316-46F4-A385-F6CAB8BEAAD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC597EB3-913B-40F5-A693-BC49BB89AB2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B35351C-8CE9-4AB6-A4C1-AB01E6A60197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA32BC37-7FDB-43A1-BE17-77D2F82871F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF1C3F4-8C2B-40DA-A8AF-D1492AAD92D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA29146-FB2E-457F-9B79-3C059E659313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D8C17D-6D35-49FC-83F2-968E6CA28CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A568FEB3-4852-4BCE-ADDE-749A216E995C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "753CD595-49CD-48BD-980B-415DDBC4492C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74BC7E-18C0-4399-9240-6A000B23B91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190E89EA-61AE-4EB8-ACBB-4E4FE39ABB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5532D0CB-7001-4C8E-80BF-54EAD32E8A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F54A01-AEFA-4426-977E-677970FE3025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EDF0F1-D0DB-4D84-82DD-8E65E129CD08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCD9E8F-8456-4513-A291-70DA11CF6E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B2F3E1-2D73-499C-A971-31679EE07E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4905713-30CC-4327-A6D8-FACE14B362E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681E2741-C68B-4AED-BAB5-DFC78F10FF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AEF38D8-073C-427D-B4BE-54FF4272054F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E6031E9-B041-43B9-B3C1-796086925821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BEE07CF-260D-4BAF-A1E6-91941293E16E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E810D1-7D96-47E2-83F9-44FF8938BABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A150EC9-2A91-4221-870C-A6B6C3533516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC742FA-EC42-4812-9788-C482DF2A1C4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55C4ECC-ACC8-444B-9DA6-F115659C2D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2092056-CEC1-41EA-B10E-C5519113982E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8CF3B9-6980-47C9-A15A-DC2E3A53A6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875393EA-EADB-4F58-803D-A9FCA1C4B233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F918396-10B5-430F-A046-7EBBA9B58E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28F79BE3-82EC-4643-8D76-74577AC0A0DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE351E89-6E8B-499A-BE04-8CDFDF105DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43AE9FD7-E718-47BA-AFF1-920F560CDC42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:libdbd-pg-perl:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EF22B1-A736-4A9E-A91F-2B60D2182440"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.13.1/Changes",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rt.cpan.org/Public/Bug/Display.html?id=21392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34909",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35058",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0479.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1067.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.13.1/Changes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rt.cpan.org/Public/Bug/Display.html?id=21392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0479.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-30T20:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via (1) an invalid Headflags field in a malformed RAR archive, (2) an invalid Packsize field in a malformed RAR archive, or (3) an invalid Filelength field in a malformed ZIP archive."
      }, {
        "lang" : "es",
        "value" : "El AV engine antes de DAT 5600 en McAfee VirusScan, Total Protection, Internet Security, SecurityShield para Microsoft ISA Server, Security para Microsoft Sharepoint, Security para Email Servers, Email Gateway, y Active Virus Defense permite a atacantes remotos eludir la detección de virus a través de (1) un campo Headflags inválido de un archivo RAR malformado, (2) un campo Packsize inválido de un archivo RAR malformado, o (3) un campo Filelength de un archivo ZIP malformado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:active_virus_defense:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55875615-29A3-4092-975C-60E9C8FAB03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:active_virusscan:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A14000E-6A4C-474B-A92B-473A0EB0C533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:email_gateway:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35188DE1-99A4-42B1-81C3-E2ECBD589605"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:internet_security_suite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C68CA8-9525-4FBA-A873-F17524D3F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:internet_security_suite:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0A7659-25FF-4E18-B2BA-34F6FD6410F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:internet_security_suite:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C22BB62-9790-4D89-B1B4-D5E0F4FFB3C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:internet_security_suite:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E69BB96-F48B-43DA-BA7B-530E5148CCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:internet_security_suite:2009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B978BD2B-D454-49BB-81A4-EABA14E75600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:securityshield_for_email_servers:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC106925-640E-4318-BDED-A9F904961AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:securityshield_for_microsoft_isa_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53275048-EE57-4204-86FA-BC6B8D5D614F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:securityshield_for_microsoft_sharepoint:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7A0A32-C1B6-465D-ABB3-156C570A0E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:total_protection:2009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C7EE0B-F166-478E-B800-B4D429B26F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:total_protection_for_endpoint:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD4E524-C466-4FB5-92FD-7EDAEEAE1F6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_commandline:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1FAB752-311E-4594-AE25-34BD02844578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_enterprise:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BCC0FD-E09A-495A-926A-FE080BE46A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_enterprise:-:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "316D3C1B-D7E4-4FA9-B5CD-72D18BE775EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_enterprise:-:-:sap:*:*:*:*:*",
            "matchCriteriaId" : "C64CDC92-E9CD-446A-9ADE-B10A28E20A3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_enterprise:-:-:storage:*:*:*:*:*",
            "matchCriteriaId" : "019C46AA-7537-4930-BDC8-8EA0F6C5A216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_plus:2009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4CF979-7A55-4712-9B48-D885B746B62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_usb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D0FC30-BAA5-4677-A3E5-C7A6DEB8BE0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.zoller.lu/2009/04/mcafee-multiple-bypassesevasions-ziprar.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34949",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503173/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10001&actp=LIST_RECENT",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://blog.zoller.lu/2009/04/mcafee-multiple-bypassesevasions-ziprar.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503173/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10001&actp=LIST_RECENT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-30T20:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA signatures, which allows remote attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a malformed DSA key that triggers a (1) free of an uninitialized pointer or (2) double free."
      }, {
        "lang" : "es",
        "value" : "lib/pk-libgcrypt.c en libgnutls en GnuTLS anterior a v2.6.6 no maneja correctamente las firmas DSA, lo cual permite a atacantes remotos provocar una denegación de servicio (cuelgue de aplicación) y posiblemente tiene otro impacto no especificado a través de una clave DSA malformada que desencadena (1) una liberación del puntero no inicializado.  (2) una doble liberación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.6",
            "matchCriteriaId" : "0CC336AC-F306-4643-91E0-BA1D4B07DC10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3515",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3502",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34842",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35211",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-04.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3488",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:116",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34783",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022157",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1218",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50257",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50260",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50445",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect versions of gnutls shipped in Red Hat Enterprise Linux 4 and 5 as it only affected gnutls 2.6.x versions.",
        "lastModified" : "2009-09-21T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-30T20:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow remote attackers to spoof signatures on certificates or have unspecified other impact by leveraging an invalid DSA key."
      }, {
        "lang" : "es",
        "value" : "lib/gnutls_pk.c en libgnutls en GnuTLS v2.5.0 hasta v2.6.5 genera claves RSA almacenados en estructuras DSA, en lugar de las claves DSA previstas, lo cual podría permitir a atacantes remotos suplantar firmas en los certificados o tener otro impacto no especificado por el utilizamiento de una clave DSA no es válida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9E7F22-5BC4-4AD5-A630-25947CC1E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6B3DBF9-52EB-4741-85E4-E68645BD81E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350A6845-77D6-4D63-A13C-5DAB55F98727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A456D12-C43A-47B0-AC0D-BF02AEBA0828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D457688-987A-4059-AA58-D9BF19ABC48B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA20043D-EC85-4003-9E7B-27AB50F4E133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18A2C47E-510D-4537-8F51-3763A73E8E52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3516",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://lists.gnu.org/archive/html/help-gnutls/2009-04/msg00018.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34842",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://lists.gnu.org/archive/html/help-gnutls/2009-04/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect versions of gnutls shipped in Red Hat Enterprise Linux 4 and 5 as it only affected gnutls 2.6.x versions.",
        "lastModified" : "2009-09-21T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-30T20:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is (1) not yet valid or (2) no longer valid, related to lack of time checks in the _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls_x509, as used by (a) Exim, (b) OpenLDAP, and (c) libsoup."
      }, {
        "lang" : "es",
        "value" : "gnutls-cli en GnuTLS anteriores a v2.6.6 no verifica la activación y tiempos de caducidad de los certificados X.509, lo cual permite a atacantes remotos presentar con éxito un certificado que (1) aún es válido o (2) ya no es válido, en relación con la falta de controles en el tiempo la función _gnutls_x509_verify_certificate en lib/x509/verify.c en libgnutls_x509, utilizado por (a) Exim, (b) OpenLDAP y (c) libsoup."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.5",
            "matchCriteriaId" : "A5EDD6F6-742C-4A59-AFB5-A7BCFB6AA759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FBB8F2C-498D-4D31-A7D7-9991BABEA7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8856E1B1-8007-42E5-82EF-4700D4DEEDDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9CF40D3-CE03-4C2A-8EEF-EB5989291806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC60D4CC-922C-4941-A400-0CBEAC7F31D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754A0D19-A17A-4007-8355-497D14CFCBF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8140DBE1-8116-4051-9A57-07535586E0AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D2DF7F-DCDD-486D-B906-F9DDE3A1DB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CC840D-AD01-4EE2-8652-06742A6286BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84224A82-6D58-4000-A449-20C1632DAE85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A466931C-769A-4A28-B072-10930CE655E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEE50AC-8730-4F04-B57C-6BDF8B957F6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F621DC-7967-4D97-A562-02E7033C89C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776E5481-399F-45BC-AD20-A18508B03916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D7F972-9128-4A4D-8508-B38CE2F155E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D56873-E8C5-4E4B-BB85-6DCF6526B453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FE4766-32D0-491E-8C71-5B998C468142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F980857-2364-466A-8366-BD017D242222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CDCF1F0-5A78-48FF-B4B0-303AE2420F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2E649D-5C45-4412-927B-E3EDCE07587C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066175C2-6E96-4BAE-B1A6-B23D25547FAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869D3010-67AE-44D0-BB8F-D9C410AEA1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052B40C1-C29B-4189-9A45-DAE873AB716D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F71E61-7455-4E10-B9D8-2B7FDDFB10F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E05A9A1-6B7A-43FB-A9B8-41B68CA5FDCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB08FD9-9AB8-4015-A8BE-FD9F7EBAC6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B588AAE0-8C3F-47C7-812F-8C97BD8795E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB9154B-4254-4F33-8DB2-5B96E2DA4931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D9C191-6A57-40BB-BDD1-6B1A6BBAB51E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EA79D1-2EA8-4040-A5B5-C93EE937945A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61D05BC3-1315-4AC7-884D-41459272C94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.8.1a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2901E522-6F54-4FA5-BF22-463A9D6B53D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738F29DA-9741-4BA5-B370-417443A3AC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52173492-1031-4AA4-A600-6210581059D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB636C36-2884-4F66-B68A-4494AEAF90C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "777A16E4-A1F5-48DC-9BF0-CD9F0DCF8B55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4231BD-201D-4B10-9E35-B9EEFC714F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9200C3-0F46-4238-918B-38D95BF11547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024A9511-7CB4-4681-8429-0FE7FC34DF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CEF5ED-87A5-44B2-8A4A-9896957C057B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B84A4F5-CED7-4633-913F-BE8235F68616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97564ABD-F9CE-4B3C-978A-1622DE3E4924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB6EC88-DCE0-439B-89CD-18229965849B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2C89DD-CDBD-4772-A031-089F32006D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C2FD618-91F4-48E7-B945-90CC0A367DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65DC9555-E76F-4F8D-AE39-5160B34A87FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B61D180-9EEA-4258-9A59-7F004F2C83F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DE1208-BDDC-405B-A34A-B58D00A279DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EF689E-59AA-4619-ADB2-E195CFD4094A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B62AB660-5DA4-4F13-AF9E-DC53D0A18EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22314ED6-D0CD-442E-A645-A9CCFE114AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1C5B2-27BF-4328-9336-98B8828EE4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5C952BF-A135-4B15-8A51-94D66B618469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ADED309-0A25-478D-B542-96217A0DD63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0403DE-76B1-4E24-8014-64F73DCB53DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69EA91B0-249F-41B2-8AD0-0C2AD29BE3D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F714D22-873A-4D64-8151-86BB55EFD084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9181F9-50FF-4995-9554-022CF93376C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED0B40F-3413-40D6-B1EF-E6354D2A91F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E99A7D8-2303-4268-8EF8-6F01A042BEDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C70F69-FB80-4F32-A798-71A5153E6C29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A1E604-500E-4181-BF66-BB69C7C3F425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8120E3-B60F-44E4-B837-4707A9BAEDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D3F16F-2C23-48E9-9F2D-1F1DF74719E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7073EAD-06C9-4309-B479-135021E82B99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "546C56AC-AFCC-47B7-A5A8-D3E3199BEA41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1895868E-E501-42C2-8450-EEED4447BAB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED1FCE0-260B-4FB2-9DBD-F4D0D35639AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199AA36A-3B23-438C-9109-CC9000372986"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6FFF05-37B2-4D69-86AF-921591382D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82BF8600-4E5D-4FF4-953C-F2DC726CA6CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C40F0E-B102-4FE8-9E93-0ACFBF35226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22802660-D33F-4683-B82F-C94AC6170A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3623E9BE-F513-4301-BF0C-6A7F87E78E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DBAF08-1441-4F14-A740-E90044B77042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE9BB7E-DDD8-4CBF-AEC2-40D59A560BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3B6684-3890-4B60-BE67-D06045A86B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81C6C982-21D5-4FE3-A342-FC45BD78D2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69E3A01-D8C6-4C36-8C4E-52B96541D5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D61596-01EB-4936-923B-63537625F926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "599EB59C-7717-47A8-84C6-78B6D79AEB02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A6CBB77-818D-4DFF-9DD9-07EBF9933B06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26E9005E-5034-43F2-B96E-7829E19FE3A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA854EA-29FE-4B91-AEA3-ED649D7FD25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC3A5EE-2892-4548-A0CB-D3289CD64D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F22BF4-A738-438B-8D0B-6993640F0D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3193B7-8FB9-45E4-BFF6-891A3F14F021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF269AE-121B-4982-A765-5C7E806FA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C9F604-7FBE-4759-B039-8F5894574203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191821CD-E4CB-4269-B04C-284A9F9783B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A71474-958D-4689-A652-3E2A731F47FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38169043-17DF-4CF9-963A-8770B8882357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7E5D9C-0976-4C9A-9FEB-AB923845BAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4537676-A72E-4433-B44F-3664EDD6F240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7CCCB66-C7CC-4E5C-8253-C29D57BE9B43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D090B10-68F2-424D-8234-2A280AA96B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23168B77-645D-4A2A-A6E3-7001104064A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D085B16-3116-423F-BDE0-2D93E12650A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59247E9-CDAE-4269-A8E4-F49F617CDD23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6019C0C-E9DD-4831-8E6A-785AE1A930FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F9CF15-8789-49B6-BB6D-B784C8FF20ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DAE798-14C9-4CB6-A39F-69CDF9D8FBB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C51E0C88-B19C-408D-AC17-10CE7462D48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7FBFAA-263C-4B7B-A135-9824DFD8CCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC41482-B3BC-4C93-A850-73A179BAB763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC80BE1-28A6-4348-A061-8FD9C805E945"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8EF703-AE06-4DD7-9235-2D8CCDB24F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8AC314-065B-4BC3-A5EE-CA6D3006F9F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8201FF6-53A8-4850-A2B2-47AA65B2CB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB33002-E5C6-4573-BC94-647DDE4E6F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D7D245A-D983-40AD-89A7-0EA00D38D570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7223691-225D-4649-B410-F41D2C489BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6B3DBF9-52EB-4741-85E4-E68645BD81E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350A6845-77D6-4D63-A13C-5DAB55F98727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A456D12-C43A-47B0-AC0D-BF02AEBA0828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D457688-987A-4059-AA58-D9BF19ABC48B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA20043D-EC85-4003-9E7B-27AB50F4E133"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3517",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34842",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "The Red Hat Security Response Team has rated this issue as having low security impact. The risks associated with fixing this bug are greater than the low severity security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 4, or 5.\n\nFor further details, see: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-1417\n",
        "lastModified" : "2009-08-11T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-30T20:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and the Symantec Endpoint Protection Manager (SEPM) component in Symantec Endpoint Protection (SEP) before 11.0 MR2, allows remote attackers to inject arbitrary text into the login screen, and possibly conduct phishing attacks, via vectors involving a URL that is not properly handled."
      }, {
        "lang" : "es",
        "value" : "Symantec Reporting Server, utilizado en Symantec AntiVirus (SAV) Corporate Edition v10.1 anterior a v10.1 MR8 y v10,2 antes de v10.2 MR2, Symantec Client Security (SCS), antes de v3.1 MR8, y el componente Symantec Endpoint Protection Manager (SEPM) en Symantec Endpoint Protection (SEP) anterior a v11.0 MR2, permite a atacantes remotos inyectar texto arbitrario en la pantalla de inicio de sesión y, posiblemente, realizar ataques de phishing, a través de vectores relacionados con un URL que no está bien manejada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.1:-:*:*:corporate:*:*:*",
            "matchCriteriaId" : "357629A3-1F45-477D-B560-B4AFB6E163E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.1:maintenance_release7:*:*:corporate:*:*:*",
            "matchCriteriaId" : "D2126B10-14E6-4B47-8DA2-361BD51BD378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.2:-:*:*:corporate:*:*:*",
            "matchCriteriaId" : "11C99ECE-8A4E-4DF3-98CF-4B8E15F6662A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.2:maintenance_release1:*:*:corporate:*:*:*",
            "matchCriteriaId" : "D4B0ACE4-1374-40DF-8E52-C1785753ACBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "96B92C62-EB73-4777-9307-677754819F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.1:maintenance_release7:*:*:*:*:*:*",
            "matchCriteriaId" : "A63081A8-FB67-4E43-98CF-CD59D7BA5556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:endpoint_protection:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3B36FF-5C26-4565-A23A-789D1158B867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:endpoint_protection:11.0:maintenance_release1:*:*:*:*:*:*",
            "matchCriteriaId" : "D62FBC34-2CA4-430E-B3DF-8948E9F91B02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34856",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34935",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022136",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1022137",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1022138",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34668",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_00",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1202",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1204",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50172",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/34856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1022137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1022138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-30T20:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests that modify pages, change permissions, or change group memberships, as demonstrated by a URL for a (1) save or (2) view script in the SRC attribute of an IMG element, a related issue to CVE-2009-1339."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Foswiki anterior a v1.0.5 permite a atacantes remotos secuestrar la autenticación de usuarios a su elección para realizar solicitudes que modifiquen las páginas, cambiar los permisos, o cambiar la pertenencia a grupos, como se demuestró mediante una URL para (1) guardar o (2) ver script en el atributo SRC de un elemento IMG, una cuestión relacionada con la CVE-2009-1339."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foswiki:foswiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "E0355BD7-ECE2-415D-8F35-68B0B05DC22F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foswiki:foswiki:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0B6551-9ED0-4D32-A9DC-C1167550ECED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foswiki:foswiki:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9280019F-EBB1-476A-BF19-B9B2FA5F929B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foswiki:foswiki:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE5ADD0-893A-4E5E-AF4D-550562338FB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foswiki:foswiki:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46521E63-4714-4464-AA2F-91E3DC892389"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://foswiki.org/Support/SecurityAlert-CVE-2009-1434",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34863",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_name=49F61C4E.2040806%40lavrsen.dk&forum_name=foswiki-announce",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://foswiki.org/Support/SecurityAlert-CVE-2009-1434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_name=49F61C4E.2040806%40lavrsen.dk&forum_name=foswiki-announce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-30T20:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry with JavaScript code that calls this method with crafted integer arguments."
      }, {
        "lang" : "es",
        "value" : "El método getAnnots Doc en la API de JavaScript en Adobe Reader y Acrobat v9.1, v8.1.4, v7.1.1 y anteriores permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o ejecutar código arbitrario a través de un archivo PDF que contiene una anotación, y tiene una entrada OpenAction con el código JavaScript que llama a este método con argumentos enteros elaborados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "C45837B4-F4F9-45DC-B324-48BD4AB51973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.1.4",
            "matchCriteriaId" : "5C1BEE55-AAE2-4D61-9156-7E34692469C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndIncluding" : "9.1",
            "matchCriteriaId" : "746FE43A-5FB1-4EF1-8004-E5183BAB51B7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndIncluding" : "7.1.1",
            "matchCriteriaId" : "4BB02266-8184-4A96-A1F0-66C9A3F0A329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.1.4",
            "matchCriteriaId" : "07DD4484-A823-4B8B-8939-44A553E2FD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndIncluding" : "9.1",
            "matchCriteriaId" : "0740542B-CD65-4CE7-AA8C-43D252D66498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.adobe.com/psirt/2009/04/potential_adobe_reader_issue.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/54130",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0904-exploits/getannots.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34924",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35055",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35096",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35152",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35358",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-259028-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=926953",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-06.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/970180",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0478.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34736",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022139",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1189",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1317",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50145",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8569",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://blogs.adobe.com/psirt/2009/04/potential_adobe_reader_issue.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/54130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0904-exploits/getannots.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-259028-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=926953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-06.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/970180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0478.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-30T20:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and UNIX allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that triggers a call to this method with a long string in the second argument."
      }, {
        "lang" : "es",
        "value" : "El método spell customDictionaryOpen en la API de JavaScript en Adobe Reader v8.1.4 y v9.1 de Linux permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o ejecutar código arbitrario a través de un archivo PDF que activa una llamada a este método con una larga cadena de en el segundo argumento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61151189-E24C-4AB6-BC60-B9AF720E3D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE16943-CCD8-4A39-832F-F6ED3CF2936B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/54129",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0904-exploits/spell.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34924",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35055",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35096",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35152",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35358",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-259028-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=926953",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-06.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/970180",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0478.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34740",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022139",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1189",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1317",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50146",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8570",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/54129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0904-exploits/spell.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-259028-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=926953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-06.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/970180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0478.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-04-30T20:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The process_stat function in Memcached 1.2.8 discloses memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain potentially sensitive information by sending this command to the daemon's TCP port."
      }, {
        "lang" : "es",
        "value" : "La función process_stat en Memcached v1.2.8 divulga las estadísticas de asignación de memoria en respuesta a un comando stats malloc, lo cual permite a atacantes remotos obtener información potencialmente sensible mediante el envío de este comando al puerto TCP del demonio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A81180-5F55-4E8B-B4AF-8B646D694945"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code.google.com/p/memcachedb/source/browse/trunk/ChangeLog?spec=svn98&r=98",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/memcachedb/source/detail?r=98",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://code.google.com/p/memcachedb/source/diff?spec=svn98&r=98&format=side&path=/trunk/memcachedb.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://groups.google.com/group/memcached/browse_thread/thread/ff96a9b88fb5d40e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://memcached.googlecode.com/files/memcached-1.2.8.tar.gz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/memcachedb/source/browse/trunk/ChangeLog?spec=svn98&r=98",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://code.google.com/p/memcachedb/source/detail?r=98",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://code.google.com/p/memcachedb/source/diff?spec=svn98&r=98&format=side&path=/trunk/memcachedb.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://groups.google.com/group/memcached/browse_thread/thread/ff96a9b88fb5d40e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://memcached.googlecode.com/files/memcached-1.2.8.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1313",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-04-30T21:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors.  NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302."
      }, {
        "lang" : "es",
        "value" : "La función nsTextFrame::ClearTextRun en layout/generic/nsTextFrameThebes.cpp en Mozilla Firefox v3.0.9 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) y, probablemente, ejecutar código arbitrario a través de vectores no especificados. NOTA: esta vulnerabilidad existe porque supuestamente se dio una solución incorrecta para CVE-2009-1302."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34851",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34866",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34910",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34919",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1022126",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1022127",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.350967",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-23.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34743",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-765-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1180",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=489647",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=489676",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=490233",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=497447",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10446",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0449.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.350967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-23.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-765-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=489647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=489676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=490233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=497447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0449.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T16:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/db.mdb."
      }, {
        "lang" : "es",
        "value" : "Web File Explorer v3.1 almacena información sensible bajo la raíz web con insuficiente control de acceso, lo cual permite a atacantes remotos descargar una base de datos a través de una petición directa a data/db.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webfileexplorer:web_file_explorer:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26608C9C-28DD-4C51-BD89-C17F7A9DB766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34648",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T16:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the Cmi Marketplace (com_cmimarketplace) component 0.1 for Joomla! allows remote attackers to list arbitrary directories via a .. (dot dot) in the viewit parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el componente Cmi Marketplace (com_cmimarketplace) v0.1 para Joomla! permite a atacantes remotos listar directorios a su elección a través de un .. (punto punto) en el parámetro viewit a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ijobid:com_cmimarketplace:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B73E027-DE28-4B54-9E92-E3FCB26BB864"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34431",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T16:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in srt2smi.exe in Gretech Online Movie Player (GOM Player) 2.1.16.4635 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long string in an SRT file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en srt2smi.exe en Gretech Online Movie Player (GOM Player) v2.1.16.4635 permite a atacantes remotos provocar una denegación de servicio (cuelgue) o ejecutar código a su elección a través de una larga cadena en un archivo SRT."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gomlab:gom_player:2.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D559D7CC-BE71-4E9D-9930-560DB26C4AE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34639",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.bkis.vn/?p=501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502552/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34427",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.bkis.vn/?p=501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502552/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T16:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in inc/profilemain.php in Game Maker 2k Internet Discussion Boards (iDB) 0.2.5 Pre-Alpha SVN 243 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin parameter in a settings action to profile.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en inc/profilemain.php en Game Maker 2k Internet Discussion Boards (iDB) v0.2.5 Pre-Alpha SVN 243 permite a atacantes remotos incluir y ejecutar archivos locales a través de un .. (punto punto) en el parámetro skin en una acción de configuración a profile.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idb:idb:0.2.5_pre-alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08698D-DF5B-4147-AB2F-0E50695AE526"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34397",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T16:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the article parameter in index.php.  NOTE: SecurityFocus states that this issue has been disputed by the vendor."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en el componente MailTo (alias com_mailto) en Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro artículo (article) en index.php. NOTA: SecurityFocus indica que esta cuestión ha sido discutida por el vendedor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_mailto:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "493019F7-EEEF-4CAE-B4E5-7D455835CD52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34433",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T17:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file."
      }, {
        "lang" : "es",
        "value" : "vulnerabilidad de uso después de liberación (use-after-free) en la librería incrustada GD en libwmf v0.2.8.4 permite a atacantes dependiendo del contexto causar una denegación de servicio (cuelgue de aplicación) o posiblemente ejecutar código a su elección a través de un archivo WMF elaborado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francis_james_franklin:libwmf:0.2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441D6814-A090-4F17-9A15-A1D3904DA554"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10BC294-9196-425F-9FB0-B1625465B47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03117DF1-3BEC-4B8D-AD63-DBBDB2126081"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2015-06/msg00051.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2015-06/msg00053.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0457.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-01.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wvware.cvs.sourceforge.net/viewvc/wvware/libwmf2/src/extra/Makefile.am?hideattic=0&view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-769-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=496864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01263.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01266.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01269.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2015-06/msg00051.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-updates/2015-06/msg00053.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-0457.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wvware.cvs.sourceforge.net/viewvc/wvware/libwmf2/src/extra/Makefile.am?hideattic=0&view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-769-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=496864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01263.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01266.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01269.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "<a href=\"http://cwe.mitre.org/data/definitions/416.html\">CWE-416: Use After Free</a>"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T17:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2, as used in Flash Media Interactive Server and Flash Media Streaming Server, allows remote attackers to execute arbitrary remote procedures within an ActionScript file on the server via RPC requests."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Adobe Flash Media Server (FMS) anterior a v3.0.4 y v3.5.x anterior a v3.5.2, utilizado en Flash Media Interactive Server y Flash Media Streaming Server, permite a atacantes remotos ejecutar procedimientos remotos a su elección dentro de un archivo ActionScript en el servidor a través de peticiones RPC."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_media_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.3",
            "matchCriteriaId" : "EAF97B08-1802-4850-893A-C541E6BFB6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_media_server:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73544702-D995-43BA-92CB-01ED3642D22E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_media_server:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5602CE-0860-46EC-9D31-13A83A81476A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_media_server:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2057CB-905A-4E81-A9EB-898105B2DF0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_media_server:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E05CA6-B186-4213-A46F-C4E0458B2CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_media_server:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9D585C-DBD6-4E13-A8FF-E043EC162D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_media_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4A07B6-E5DA-4781-ABB3-DB2663E2A737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_media_server:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84681400-0CBD-41D1-94D0-B9045958793D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_media_server:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29A5E8DC-E664-4FAF-9ED9-7191433F01E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_media_server:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "897B12DA-8749-44F7-AA1E-AB1F01BB205E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_media_server:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8334A448-0DFF-4571-81BC-81ADEDBD9D7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-05.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34790",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T17:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to execute arbitrary SQL commands via the sn parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en ProjectCMS v1.0 Beta permite a atacantes remotos ejecutar comandos SQL a través del parámetro sn."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projectcms:projectcms:1.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C70C402A-DC54-43A6-A290-ABC6ECB3F56C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/503079/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34767",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503079/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T17:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Exif module 5.x-1.x before 5.x-1.2 and 6.x-1.x-dev before April 13, 2009, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via EXIF tags in an image."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en módulo Exif v5.x-1.x anterior a v5.x-1.2 y v6.x-1.x-dev anterior a 13 de Abril de 2009, un módulo para Drupal, permite a atacantes remotos inyectar HTML o scripts web a su elección a través de las etiquetas EXIF de una imagen."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exif:exif:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3314D997-E262-429B-A5F8-D981EDD608B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exif:exif:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8CF40B-1088-448F-9A29-12DB881A04D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exif:exif:5.x-1.x:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "158689B5-7425-4CBE-BEAB-3D59719410FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exif:exif:6.x-1.x:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "88AE4C03-A1F4-48FE-9BE0-58ACA578E84E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/448958",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34953",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34774",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/448958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T17:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in plugin.php in S-Cms 1.1 Stable and 1.5.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio transversal enplugin.php en S-Cms v1.1 Stable y v1.5.2 permite a atacantes remotos incluir y ejecutar archivos locales a su elección a través de secuencias de salto de directorio en el parámetro de página."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteoiammarrone:s-cms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5920CA-48BC-488A-A450-17F3E95C6047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteoiammarrone:s-cms:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137E0077-5F88-4676-9D1A-7B3D48D5710E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34940",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34771",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T17:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in login.php in Tiger Document Management System (DMS) allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en login.php en Tiger Document Management System (DMS) permiten a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) username  (2) password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigerdms:tigerdms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DABD8C80-E1E1-4181-B6A7-C7B9699CCCA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34784",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T17:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to \"lvl=1&userid=1.\""
      }, {
        "lang" : "es",
        "value" : "Absolute Form Processor XE v1.5 permite a atacantes remotos eludir la autenticación y obtener acceso administrativo mediante el establecimiento de la cookie xlaAFPadmin a \"lvl=1&userid=1.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xigla:absolute_control_panel_xe:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353D91C9-8782-46E5-B90B-719F4D85D420"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T17:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit privileges, to execute arbitrary SQL commands via the Include Words (aka keywords) field."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en el módulo News Page versiones 5.x anteriores a 5.x-1.2 para Drupal, permite a los usuarios autenticados remotos, con nodos de News Page crear y editar privilegios, ejecutar comandos SQL arbitrarios por medio del campo Include Words (también se conoce como keywords)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:news_page:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36113737-4A74-415D-B2A8-804D06E7A2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:news_page:5.x-1.x:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "A58E2A83-AD4D-4C17-BEAA-949BBB5AF9F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/449014",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34954",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34777",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1214",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/449014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T17:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in classes/Xp.php in eLitius 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to banner-details.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en las classes/Xp.php en eLitius v1.0 permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro id a banner-details.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intelliants:elitius:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BE24D22-AB85-49A5-994D-CA8214BD4C47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34769",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T17:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Node Access User Reference module 5.x before 5.x-2.0-beta4 and 6.x before 6.x-2.0-beta6, a module for Drupal, interprets an empty CCK user reference as a reference to the anonymous user, which might allow remote attackers to bypass intended access restrictions to read or modify a node."
      }, {
        "lang" : "es",
        "value" : "El módulo Node Access User Reference v5.x anterior a v5.x-2.0-beta4 y v6.x anterior a v6.x-2.0-beta6, un módulo para Drupal, interpreta un referencia a usuario CCK vacía como una referencia al usuario anónimo, lo cual puede permitir a atacantes remotos eludir las restricciones de acceso para leer o modificar un nodo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "258146DF-AE15-409C-BE70-725982EA136C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1007E9C-8634-4A8E-8A36-5F337F766BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:5.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D3C011-FEBF-4435-8F9D-19B5187D090F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:5.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B92368BC-20A6-42B5-889D-53AB1BA028B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:5.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D553E7-8EBB-4EAC-A9F3-E1524F7AA154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:5.x-2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF88146-F2AB-4A49-BE0B-5EE56BF180DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:5.x-2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6A50E4-6B5C-4683-B3F9-7FDEFB9F0CCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:5.x-2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "A2360CB4-D4F4-462D-B0BC-4E44C91D98E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F30F5EBC-0350-4D2B-9145-DB9AF13A90AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "942B1BC4-11AE-42F4-BD8D-83898432DC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7C7F90-9FEF-4D31-9643-5D92AF7F1D34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:6.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0A18F6-8EE6-41D8-AF69-FFAABEB47661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:6.x-1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66824B75-7E7E-45CA-9D9D-F916D4C8B9D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:6.x-1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADA0F06E-3674-4816-9BBE-8B1668B71E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:6.x-1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7AAAB4-D435-400E-8532-201A96EF93A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:6.x-2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "2102783C-0725-4BC0-B809-BFB32E8E1330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:6.x-2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "08CD2483-246B-4987-B20B-383C0E1A989C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:6.x-2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "00E69FB5-6D7E-4830-B371-C36D4F512030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:6.x-2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "4AEDC123-2E18-4181-A1D7-412641D2249A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodeaccess_userreference:6.x-2.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "5735D8E8-3B78-4ED4-80F5-5C5BC16658AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/449030",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34955",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34778",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/449030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T18:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the xforum_validateUser function in Common.php in X-Forum 0.6.2 allows remote attackers to execute arbitrary SQL commands, as demonstrated via the cookie_username parameter to Configure.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en la función xforum_validateUser en Common.php en X-Forum v0.6.2 permite a atacantes remotos ejecutar comandos SQL, como se ha demostrado a través del parámetro cookie_username a Configure.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keir_davis:x-forum:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C38264-7B0D-4E21-B493-7C7D6474AB6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34302",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T18:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ajaxp_backend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en ajaxp_backend.php en MyioSoft AjaxPortal v3.0 permite a atacantes remotos ejecutar comandos SQL a través de parámetros de la página."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myiosoft:ajaxportal:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65D28AB1-A48F-480C-8590-048197F0D6B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34529",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34338",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T18:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in KoschtIT Image Gallery 1.82 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the file parameter to (1) ki_makepic.php and (2) ki_nojsdisplayimage.php in ki_base/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en KoschtIT Image Gallery v1.82 permite a atacantes remotos incluir y ejecutar archivos locales a su elección a través de secuencias de salto de directorio en el archivo de parámetros de (1) ki_makepic.php y (2) ki_nojsdisplayimage.php en ki_base/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:koschtit:koschtit_image_gallery:1.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1D641A-3051-4F65-9C12-B40DC9FDC26C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34335",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T18:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite loop) via a PNG file that contains a certain large btChunkLen value."
      }, {
        "lang" : "es",
        "value" : "GDI+ en Microsoft Windows XP SP3 permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de un archivo PNG que contiene un determinado valor btChunkLen grande."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34586",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-01T22:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Static code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators to inject arbitrary PHP code into Config.php via the adminEMail parameter to SaveConfig.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático en X-Forum v0.6.2 permite a los administradores remotos autenticados inyectar código PHP arbitrario en Config.php a traves del parámetro adminEMail a SaveConfig.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keir_davis:x-forum:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C38264-7B0D-4E21-B493-7C7D6474AB6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-04T16:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función PATinst en src/load_pat.cpp en libmodplug anteriores a v0.8.7 permite a atacantes remotos asistidos por usuarios, provocar una denegación de servicio y posiblemente la ejecución de código de su elección mediante un nombre de instrumento largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:konstanty_bialkowski:libmodplug:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.6",
            "matchCriteriaId" : "DD0CAE8E-3B2A-4630-868C-79071A5A0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:konstanty_bialkowski:libmodplug:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E90B264-B800-4D01-B9C6-1B1A97702F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:konstanty_bialkowski:libmodplug:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7869CDE5-B184-42EB-B0D6-6E6164AA324A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:konstanty_bialkowski:libmodplug:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA5392B-E9CE-4092-BF72-5A661F1C20F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_pat.cpp?r1=1.3&r2=1.4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms%3Ba=commitdiff%3Bh=c4ebb701be6ee9a296a44fdac5a20b7739ff0595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34927",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-07.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=678622&group_id=1275",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/?func=detail&aid=2777467&group_id=1275&atid=301275",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/29/5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34747",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-771-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1200",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_pat.cpp?r1=1.3&r2=1.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms%3Ba=commitdiff%3Bh=c4ebb701be6ee9a296a44fdac5a20b7739ff0595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=678622&group_id=1275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/?func=detail&aid=2777467&group_id=1275&atid=301275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/29/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-771-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of libmodplug embedded in gstreamer-plugins as shipped with Red Hat Enterprise Linux 3 and 4, as they do not include support for the PAT file type.",
        "lastModified" : "2009-05-12T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-04T16:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a throw statement with a long exception value."
      }, {
        "lang" : "es",
        "value" : "Google Chrome v1.0.154.53 permite a atacantes remotos provocar una denegación de servicio desreferenciación de puntero nulo y caída de aplicación) a través de una declaración con un valor de excepción largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5094C4-1338-4189-B5FD-C9AFFF091D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34786",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-04T16:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the cdf_read_sat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to execute arbitrary code via a crafted compound document file, as demonstrated by a .msi, .doc, or .mpp file.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en la función cdf_read_sat en src/cdf.c en Christos Zoulas file v5.00, permite a atacantes remotos asistidos por usuarios ejecutar código se su elección a través de un componente del fichero de documentación manipulado, como se demuestra por ficheros .msi, .doc o .mpp. NOTA: algunos de estos detalles se han obtenido de terceras partes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:christos_zoulas:file:5.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FF256D-3DD4-41A8-B119-D20A493A6EA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.astron.com/pub/file/file-5.01.tar.gz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mx.gw.com/pipermail/file/2009/000379.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34881",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/54100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34745",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "ftp://ftp.astron.com/pub/file/file-5.01.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mx.gw.com/pipermail/file/2009/000379.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/54100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-04T18:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web application that accepts untrusted input for this method."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el control ActiveX en IceWarpServer.APIObject en api.dll en IceWarp Merak Mail Server v9.4.1, permite a atacantes, dependiendo del contexto, ejecutar código de su elección a través de un valor largo en el segundo argumento del método Base64FileEncode, como se demostró posiblemente por una aplicación web que acepte entradas inseguras de este método."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:merak_mail_server:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082F70CB-C398-4BCB-9F37-D4E932B8486A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34739",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-04T18:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow remote attackers to cause a denial of service (browser crash) and possibly execute arbitrary code via unspecified input to the (1) GetBackupLocationPath, (2) CallUninstall, (3) SetupDeleteVolume, (4) CanUseEasySetup, (5) CallAddInitialProtection, and (6) CallTour methods."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de método inseguro en el control ActiveX Symantec.EasySetup.1 en EasySetupInt.dll v14.0.4.30167 en el asistente EasySetup en Symantec Norton Ghost v14.0 permite a atacantes remotos provocar una denegación de servicio (caída del navegador) y posiblemente ejecución de código de su elección a través de una entrada no específica en los métodos (1) GetBackupLocationPath, (2) CallUninstall, (3) SetupDeleteVolume, (4) CanUseEasySetup, (5) CallAddInitialProtection, y (6) CallTour."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_ghost:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B89097-0763-4CA0-B544-6ACD39765454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34696",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.shinnai.net/xplits/TXT_Gl6RHStS23c9DANArcJE.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.shinnai.net/xplits/TXT_Gl6RHStS23c9DANArcJE.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-04T19:00:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Beltane before 2.3.11 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Beltane anteriores a v2.3.11 permite a atacantes remotos secuestrar la autenticación de víctimas no determinadas a través de vectores no especificados. NOTA: el origen de esta información es desconocido; los detalles han sido obtenidos a partir de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beltane:beltane:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.9",
            "matchCriteriaId" : "FC7CBCAC-103E-421D-A850-3E4F4A48CC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beltane:beltane:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBF5E9F-50F9-437C-A057-413DB8704275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beltane:beltane:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39D3C840-AE30-4DAD-A5F4-ADCC60A63287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beltane:beltane:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1335664-6322-4EC5-9302-E2765BBC02EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34973",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-04T19:00:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Pecio CMS 1.1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the language parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio transversal en index.php en Pecio CMS v1.1.5 permite a atacantes remotos leer ficheros de su elección a través de un .. (punto punto) en el parámetro \"lenguaje\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pecio-cms:pecio_cms:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315D11F1-934F-4A7A-B421-4A5D70611FC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-05T17:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en Cscope anterior a versión 15.7a, permiten a los atacantes remotos ejecutar código arbitrario por medio de cadenas largas en entradas como (1) tokens de código fuente y (2) nombres de ruta, relacionados con desbordamiento de enteros en algunos casos. NOTA: este problema se presenta debido a una corrección incompleta del CVE-2004-2541."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cscope:cscope:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27476BD2-FC3B-46A1-8810-DB3DB29106C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cscope:cscope:15.0bl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C00B4F-D84A-4CF6-B4BF-D0F574CBFD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cscope:cscope:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78590FBB-C9CE-42B7-83C9-1F5FAD11A2A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cscope:cscope:15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E821D0F7-D928-4C2F-89DE-7B46968A2970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cscope:cscope:15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0837A120-86AE-4ABB-AB38-F3D573C5064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cscope:cscope:15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2F1D020-6884-4D6D-AB04-88119CB53F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cscope:cscope:15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16BA0384-4466-467D-80E4-44DAE2B70038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cscope:cscope:15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D85508-318A-43F5-B6C8-E090FB678DAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34978",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35213",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35214",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35462",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=947983",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_name=E1LsGx3-00015K-TN%40ddv4jf1.ch3.sourceforge.com&forum_name=cscope-cvs",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=4664&release_id=679527",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/06/9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1101.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1102.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1238",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=490667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=947983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_name=E1LsGx3-00015K-TN%40ddv4jf1.ch3.sourceforge.com&forum_name=cscope-cvs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=4664&release_id=679527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/06/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1102.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=490667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-05T17:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53 permite a atacantes remotos ejecutar código de forma arbitraria a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E31677CB-1DAC-498C-9372-D442D60A6389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A4986C-97B8-4382-AC4B-55E22C6BAE62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=124146030732511&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/54222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124146030732511&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/54222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-05T17:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17 allows attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el interfaz gráfico de usuario Web en el cliente IBM Tivoli Storage Manager (TSM) desde v5.1.0.0 hasta v5.1.8.2, desde v5.2.0.0 hasta v5.2.5.3, desde v5.3.0.0 hasta v5.3.6.4, desde v5.4.0.0 hasta v5.4.2.6, y desde v5.5.0.0 hasta v5.5.1.17 permite a atacantes producir una denegación de servicio (caída de aplicación) o ejecutar código arbitrario a través de vectores inespecíficos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5249F29D-A30C-47DE-A2E7-1643506833B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8BBC00-2EE5-4679-9A55-C160C3FE0502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE65DEA-32C5-4AF3-BD3F-B6650BC7C3A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0775DC8E-AFEF-4EC8-A42F-ACB266087F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CF5583-AD0F-41A9-A963-077D4592EE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C00917-D04A-480F-AE51-7F666A092A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD374314-ACC9-4F14-A65F-14761B04B483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E0A6F7-EB54-49AC-BA68-FFAFEEBF82B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "488891DD-FDF9-45B6-8E27-9488016617E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC9FD3F9-CADE-4B7F-B44D-87910F093842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E985452D-8819-493B-A505-98E393224AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FADD1A6-5E07-4701-9846-389DBB980040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCA554F-03B3-44E1-A175-E3163445626E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29442ECF-F9F0-42CE-92BD-0C04A8E2556C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02303411-3A86-49B4-BF41-E7103E424F1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.1.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD6AF10-1F26-46AD-8137-E9246D09EC29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E6A344-E062-4179-9CFA-CF912B4AED16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A140293-8F4A-4AB4-9EE8-36D0EB398C66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AABAD076-C9D6-481E-B9DC-CEB95C224979"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/32604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21384389",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IC59994",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/32604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21384389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IC59994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-05T17:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager (TSM) client 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.5, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17, and the TSM Express client 5.3.3.0 through 5.3.6.5, allows attackers to read or modify arbitrary files via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en Java GUI en el cliente IBM Tivoli Storage Manager (TSM) desde v5.2.0.0 hasta v5.2.5.3, desde v5.3.0.0 hasta v5.3.6.5, desde v5.4.0.0 hasta v5.4.2.6, y desde v5.5.0.0 hasta v5.5.1.17, y el cliente TSM Express desde v5.3.3.0 hasta v5.3.6.5, permite a atacantes remotos leer o modificar ficheros de forma arbitraria a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "628DBF06-F69A-4912-B0D8-DEE9EFD830AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A077B803-1CB7-4068-9C03-6E10D24D82A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6A5DEA-1308-4A36-B7CF-4F8B6CEB5994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3EE328-1E1E-4D20-B41A-D381D5E60D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF328830-D1B6-462F-B504-C85495D14229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4881A76F-B6DB-4E9E-90C4-C2773A698EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0832F6E5-99D1-4A27-A308-BDF637F9C417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93E31155-39D3-4EB5-988E-7AAB83C6A3AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4371D56F-F69B-421A-A098-BFD965636B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2775F4-0353-4FEE-89BA-BE18BB933BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A3EF8F-A50D-4C8F-ABFF-73AF3F265F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D721F7-B62A-48C8-9D6D-A69E24AE94BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A527E6-7428-43C6-A313-2B4D4ED9811E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB38022-F071-4ACB-A720-53766F20BDDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C65A37A-AB50-4325-A0BF-E99F46463A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4C86D9-79E2-49C7-AD10-48FB2E4CDF6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E6A344-E062-4179-9CFA-CF912B4AED16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/32604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21384389",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IC59779",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/32604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21384389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IC59779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-05T17:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IBM Tivoli Storage Manager (TSM) client 5.5.0.0 through 5.5.1.17 on AIX and Windows, when SSL is used, allows remote attackers to conduct unspecified man-in-the-middle attacks and read arbitrary files via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "El cliente IBM Tivoli Storage Manager (TSM) desde v5.5.0.0 hasta v5.5.1.17 en AIX y Windows, cuando se utiliza SSL, lo que permite atacantes remotos realizar ataques de man-in-the-middle y leer ficheros de forma arbitraria a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4861ED9D-8A24-47AB-B14F-D2842930C7B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.5.0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8474D87-2420-40D1-8E8B-E0197A5297C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4C86D9-79E2-49C7-AD10-48FB2E4CDF6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.5.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60B8753-DE15-4FF1-A5AB-26410BA345A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/32604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21384389",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IC59781",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/32604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21384389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IC59781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-05T17:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto directorio en el servidor HTTP en Mort Bay Jetty versión 5.1.14, versiones 6.x anteriores a 6.1.17, y versiones 7.x hasta 7.0.0.M2, permite a los atacantes remotos acceder a archivos arbitrarios por medio de secuencias de salto de directorio en el URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.16",
            "matchCriteriaId" : "52DCEE3F-F777-48A8-80B6-1DCD95874432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:*:m2:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.0",
            "matchCriteriaId" : "E598BE4E-A24F-4F59-9C4A-4B2024EBA256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFAED25-216C-4AB0-BAF4-7ACCC04FFB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2825D2-57A6-4DC7-84DC-608AE123E04A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6500547B-8CDD-4595-AF2D-1A2014B66191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D7BAEA-7F58-4FA3-9F34-CF5CBC4362E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58750CF6-E237-4F28-A446-DE0E882BD6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "827C3682-91FA-42D4-A0DD-CC61CB94A9D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45401E9F-9C20-4600-AE6A-CD0A1F30C4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23500C7-2A70-4E28-97E6-13161AE1EBB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8A425F-BBF5-48D2-AD0E-6D97C7808A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916600EC-3D21-4367-878B-8B0E19D10D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4877B638-8D6C-40ED-B6B5-23C8B7787F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "B522D870-8D99-42FB-9F33-4CD314369CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D046A5-C346-4E01-A0B2-0876FD8A3F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A07EEADC-A52B-4F99-9A68-4DED263992BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DD72AC80-DA74-4F06-880A-87317917476E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBA5A992-A7FF-411F-9D8C-02A08090F9FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902C6363-358D-452B-A687-78486B58ABBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279C47D8-6D64-4F70-824F-AA82FDE2BDD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D213EDC8-B7C5-4093-B10B-E7A207F159F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5293F817-6EBB-4B9A-BBA0-852FCC0641B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E067B12-B4D8-4DDB-8F65-63205ABB20E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C32EDFC7-58D0-46B6-B946-72AB8C0A7463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD9BC1D-0205-44CC-91BC-6588CDECB800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9EEBD3B-19A6-4C35-B823-5F99286FC873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA14BB2-E4C0-494A-98A9-5A9916259583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "712FF994-343E-4316-9C6F-B57F95B5FEE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C399FBC5-5133-4977-BD55-4AB1C8067CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59244D30-6A90-40D5-8CD7-79EABBC2D58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A004B7E0-158E-49E0-93D8-38B49B2C0448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.b0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "218A6DB9-D4A2-4063-B87B-953BDD5360D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4793A285-5346-4812-9C26-271F166C13B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:alpha0:*:*:*:*:*:*",
            "matchCriteriaId" : "2B62ACEB-5F1E-4147-ADB0-B16DFB56171D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "265A00C8-C367-426C-BC5F-DD123F02D461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9EC9F5-A7E9-4118-84A5-068CAD51864B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B6D8AE-47C5-422C-980C-58C60BBDD574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A35F3C2D-DC60-4347-90C1-239B233917A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "21109D6D-063C-4502-BDAB-5D255DAFF8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC65F75-0CD7-4F5A-8BCD-F3F0CD494ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A259BF8E-00DD-4559-9925-FDD7D8C16F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C005200-8957-4A58-B7AE-B645C94C4C65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69780249-BE2F-424F-90F6-4CFC43D1DF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD32E82-427E-48F7-8D04-2793C78F855A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2AAA1A-4D81-4B23-88B7-FFD05758A9A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9414F1F6-63F9-4F7C-95EF-91CC4322ECE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8DE3B94-DF72-4E61-B795-A0CD4A10D349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E5B7F4-5543-43DA-8D26-09AE9D3A74E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E32A34-7C0B-4DF3-8CA7-35057EFD7800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C61055B-E90D-4146-AEF2-B369ACE681CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "453715D7-6E59-432D-B88E-A2573298B35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C44D3FB9-7CAA-4D6A-8D69-9E30CA42FFB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A70B1E7-48D3-4EEE-9755-CDA6575D1550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "465F9B9A-C335-4341-A98C-8FECCC018FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DDA3F2-22FA-49EF-8F94-C11495C2CD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E213CE6-0BFE-41DB-82BA-2C6A6D02455C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED8B2C4-1288-4385-B74F-59557F13E1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3511BFF-CFE2-4938-8ACE-3638104CAF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36A7783-041F-4FD7-AEE2-5DFCD18E2343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A795AA0C-A893-4BF8-A991-C997AEBF716C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367F4809-D74B-4C05-9AB8-EE89D605A755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93D0813-EC1B-4301-912B-D1C1D4260F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E82EC442-85DA-4471-9871-67AFA32E8E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C507301A-FDC0-42A5-A385-A4ADC8D4CD09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843E68E4-CD85-4BCB-8216-034FD1567E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45519B5C-9713-4020-AC9E-95742C585152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843235B9-728A-450B-95D6-1FC694EF6D00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "902945F1-4F11-4577-BD28-BB35E815F125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "20A0597E-CFA6-404C-936E-3A8065FF9145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "40951E40-8E30-465E-B1C0-A0C85ADBE217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "21D5C70A-64E4-434E-93CF-9FC6C510D545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "54D7108A-6CB6-46AC-B9CB-DF33F090C738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "D3254B37-125F-44BA-87B6-0C4DEE0B214C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "78ECE463-E0EA-4691-90CA-E548FCACC4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "F466738D-D94C-4D89-AA2C-BE2E8E16FE1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A320CE-96F5-4B2C-B2C7-7E8A7E5334BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34BBDAF7-EBE4-49B4-860A-3719006FFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8529EC-86A5-444A-8656-760DF95258DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608F3AAA-F5CB-4694-90BB-75C66ACA8755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3A4849-E341-4BE6-84AB-57A24E0922A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE6090A-AD1C-4831-8112-B4462980FAF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A840DB6-BAB5-4FA8-B6AE-8DC94A82C791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9094D5D9-B3D4-4050-97C7-6F5FAF49CE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23BF46B5-F614-4074-8C6A-0AE3A8EA3B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2E8FD-6381-43CA-8467-C968DB9A8D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C5F69E-75AF-40A8-9707-F9AEE79A146D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D3A860-1747-47EF-9384-BD83F77E9A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10393155-E386-420A-8699-68A3B49DE29C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9494C7B4-65B0-46E2-B8F4-9325882FCF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4EA2E6E-DD73-4245-B9BA-DE7504AC805A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B973C7-CB4D-4E65-8812-19FF963D1D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5620162-7E20-4AC6-BFCD-3302471B21BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B809408-895A-4909-9609-B529C3F9019E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8EEECA-E493-45AE-BF20-466D90628C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB746413-10C2-4A75-9A8A-DEB839140F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94F6250D-6360-4C9F-A124-CF8389084C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0215E5C6-9CC0-41DE-988A-2810ACD8209E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3B5B55-E4D0-4928-B4EA-D95CB28E81AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B5705E4-BA21-4320-8230-C6B6C3922338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DF706A6-9418-4948-AD1D-989A7A41A464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6196D65-AA3A-46D5-9A59-30846832D4AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CB6CA5-FDF5-495F-A631-ED43DC41C2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.b02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA22B8BC-52C4-4792-8804-24E5B87F701D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.b03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC5AFE5-D0AC-4619-9C60-D151AEDBC27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.b04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5689AB8-C02B-4F97-9AC7-A3EDDE7DB96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.b05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1AA7EE-75BD-4D35-A071-D5F25080CE0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "71684452-6A1D-4023-A10A-D078F24DC7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D28F3815-B209-4409-82EA-A083096F56D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A547D1F8-3916-4D78-8ED6-0B2E1EB87BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4CFA43-DC62-42B5-8E96-9D6EFDF73145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "D117126F-306B-44C7-A2BE-0A114E658847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6B826E-E97E-4287-B604-8810F79DDDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "12CE9A9F-1118-4C96-B37B-8D9D9E53228E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "6F0F93DB-CE46-42C9-A059-8F27FCC59FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "1A9D25B8-D48B-43C5-A5AB-3D60C00A6DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "EE783D81-02E5-4D78-A65C-572A69765D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F236E4-2FB8-434E-A4AE-F5DA7CC94AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F92CFF11-E18D-4D07-81D5-9ACE41084AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54087E79-2212-4B35-A631-6C15AC70D413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E22496A-C88C-47D5-9F29-29CB184A626C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139D9B00-5FDB-48E1-AFB3-098184E73318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1512F40A-E056-42BD-A733-CBA4929CD2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DE25824-2C05-4F96-BA2B-2EE0923CA35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BEAC38-360A-4F4A-B3A2-DA5EF5310ED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34896B7F-3BA0-4D14-A6A8-042DDAE4B787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A926CADB-EE62-4F54-9905-A8900103DBB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEF6355-DE50-4C9F-B96A-92F35714480B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "866E2E49-24D8-4216-9477-0C949EF8AC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEC910E-A2FA-403D-B59C-AFD2BBFBD088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D9F4F9-89A8-4884-9716-EF9FDA250120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0646AD-13A6-40A4-B06A-9BF6B1B8064A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B71502-C203-41B0-A9F4-652A274660A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A73A92E5-5779-4C54-B7E7-6A056B3998C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D306CD82-93BB-4CF1-80EB-B567E9155395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DAA932D-35F9-4052-A3FA-2FB09ED6A19D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03BEBC5F-26C8-480A-B986-64655DED1669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1738719-44A2-44D5-973E-F90282A9B9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E912CA35-FCF6-4F06-9974-CCE2F246D570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBA3DFC-F229-49A6-9191-6A3975C18416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.b0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E8CCB26-4831-47D4-86B3-D15915E18246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8847B6C-6011-44DC-B97D-9D61354D9F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A5135B-C30A-41A3-9E22-97451AAE1931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.d0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583918DB-2E06-4AB0-BCFC-A373C40D72DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.d1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "507E24BC-6C1F-4CAC-B942-15293341162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.d2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ADAC7B-3CE6-444B-BE8A-35B945B028B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.d3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1346595C-0416-40C7-9450-F4F1D17B647C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.d4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C1FB85-81DC-44FB-9960-FC7E2BB0B871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07610E5-454A-44A9-B341-B9642FA56EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "30E203AE-92EF-40EA-B7CD-8BFB88B4256E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE29CB8-80EE-4849-ACC1-A42AD07FEA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE47A5EA-A381-497F-B046-CA34A8940886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "900CA07F-B7CE-4809-A6B6-1F24F7C10313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "C39F3BB4-D4B7-4512-A86B-CB771233DD95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "6A333033-ACCB-4E0C-AF00-C419DEADEC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "EE935CEE-7B99-42EE-AE64-5EBCB776B20D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB0FA4D-E6B1-4495-9D48-245D584F6DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8D7C9F-5E0E-491B-A585-81BC09CA1893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5ABD34-B873-425B-A518-AABB7998C3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D448AAA-51AC-4374-9E31-4FE78C65DF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.b0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1F5F9A-A55C-4FBA-8D79-1C84F3C8E2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5579C03D-B65E-4579-B549-01C1BD339EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.d0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63404EA-0893-487F-AAEC-EF477E7B5B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.d1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE7F716-4C1B-4BF9-BC5C-B44CFA797412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.d2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "737FCDCE-43BB-4DE4-8082-E501EE26BA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D274307-4D78-4F4E-8F0C-2CE51D4EF0F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.0:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "60C25402-0A69-470B-8C9F-580BCC8E704A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4AC5EC-4EE1-4641-A2D7-8D80E53A3800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DD698C-9DB0-4D41-98D9-286DABB51CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F92C801-9C82-4174-A65E-9B6E9D97F5DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CBDAE22-A78D-43EC-BC66-07A571DCB995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEE25A6C-CAEE-463A-A0B4-763058A5F199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93784446-870F-4714-A18C-EE7CF09E9A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.4:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6F6DA2-FF77-45C7-82DB-7699ED4AB1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B32D70B-89DD-4A48-AEBC-0E6E93354808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51419B6C-A11C-4080-A8EE-FDB6E21269A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F37AA5-2602-42BC-9CB0-C6E53335D897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.8_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28527C05-D797-4E26-8BC9-57DD30F3F5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E758E39E-4CAA-438A-B21A-00826C4000CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "829F2EA3-DF4F-4329-96EC-F8DDFD3018A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4FE910-DF31-4CF9-9D20-6D4CD847D423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED8F5AB5-8402-49C5-A28D-433B0227DD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.10:pre0:*:*:*:*:*:*",
            "matchCriteriaId" : "A64CB9CA-BBA1-4863-B54E-1097C8E3851B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.10:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B933981-DE49-4407-BCD5-E5FAC0583B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.10:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "42385DC4-BE2D-4156-8B65-EB0860A36EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6437A8AB-462B-4C4E-B189-58026AE78804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1339AF7-DCCF-449A-A875-AF0AB5118569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.14:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "0499A6D8-43CB-49AA-A1E7-0EE28956E894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8C12E374-9B1B-4952-9631-14143261E938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29BAE0E2-B245-46D8-AA11-D9BF40158A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.15:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "C6446496-9842-4677-8076-E3A720D37100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "535ADA05-0809-4631-8CFD-ED22711995CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8649DCC7-2A43-419C-AAD1-10290034A923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06E26FA-88DF-4F05-B08B-B0D760844453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2218730A-4DC2-492B-A1ED-7721D53CA1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F27BC968-7D4B-4661-9316-DA548BD0F52E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.20:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "E926E761-FD3A-4156-8365-2FA3433D22F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E87A10C-A28D-46C8-B11D-301451FA969C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174E3F20-6784-485A-922F-676FFE5BF406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B09CD0-9523-4333-BD5E-B8DF4AF201B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.23:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "E47CE334-8E29-4063-8957-BAA83B49FDED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B098A9-F324-49A0-9ACB-3E22D9C9F7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.24:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE4C864-32A3-4507-977B-64D583AF74E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.24:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E062D526-F046-4CC4-85B5-68AAF90F50AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A6E02-1969-4F4F-82B6-7508C86FB9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE48DB9C-E0B4-403C-8D02-E7C3D6A6EFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D19EB77-8D76-4B64-B715-8F57358CAECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:alpha0:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2DBF03-E810-4AE2-9A71-AEF6EA4E536B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "040585FC-6BE9-4B71-AD86-0D61FDEDB6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "7B891FCB-0633-4C08-B16F-0A664D2DCE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "54292E8D-D579-4589-BA95-E451C5C8E555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0FB14F-7024-4E40-9F02-CE368A813E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5AAAABB-E5FA-4459-BDEE-FF9CD52CAF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "5884BEE2-3697-4B0E-83E5-1A198323B878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A569C44-3A0B-4909-B649-4CF2E4933DF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7904365A-D0A6-4D28-9FAB-341FE331B075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "23A02116-6B1A-4F9F-8A63-C241ABD070D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70C6274C-1F51-4FDD-BEC2-46B282F1F1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DAACAF6-7CA4-40A2-A9D0-65671FCC56E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E4471A-F016-4B23-A67E-BF25953D325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DE6D4E7F-11FC-4849-A5F5-DCD09752C666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4AC3A1-95B2-4E28-AE87-41ADC45C45DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627AAA2A-0601-4ACD-BD48-369C95626A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C4BFAA-1661-4EAA-840E-AC95B99E39D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "54CE8D50-4F58-4857-8580-84EAD15B73B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8911C3D3-CE91-4F09-AFAF-F27AEA70D744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF1A9C9-8F21-4A10-A801-AA29BC8AA509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.2:pre0:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EC919B-EA06-48DE-B3FC-C50396232C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A32E32-3E8B-46F4-865E-4FCD9DBD3FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE35011-D35C-4B9C-9A79-962D7DD0DB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0591418E-F324-4061-9719-90B64122FC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B367B4F4-4D87-4BDA-B0A1-2603AA85B52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "37E42FDB-3F1C-4810-91F2-2E7292A3C425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FF735C84-651F-4971-A7EE-C73CE79828B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E3BF8D-CE7D-4810-B4C2-F7D1ACC5A350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.4:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "B865666D-3AD2-4F8E-9371-A2CFB40DDE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6283995-B660-4015-881C-36A8CC1869BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.5:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "36D7DF04-644D-4DF3-9005-6C52B00D0A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "224559B0-1A22-427A-AB55-51D6E7084617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AAEF6E-A978-4C2A-BBCB-1726C76E4DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D43081-A6F2-4E50-A4C7-9037EE36C830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E6A4797-85E9-4CE2-A751-F63CEEE07603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.7:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4B1901-CC70-4C02-9133-E7DEA251C316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4497A7-8D80-4F2C-9A92-C171D5497056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98BE423-C6CA-4C34-859E-25D891FDC7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E158EB7-8424-4822-96DF-6308FCA77138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8BC6F9-C78A-4B76-9498-646C03EBDBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.11:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "785057A7-9ECA-4A8C-8497-3AC344D69BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F39F8B-21F7-4D8D-838B-97B5B2B0658B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE0063-9A70-43F4-9427-067BD665BE3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD09DE-8D68-4DE6-B1E1-4308B2D0BCD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D427FB0-D97B-40D7-A03D-FDB972C219FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:alpha0:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B1ACB4-A7B4-4207-8C71-045B4E066474"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBB87BA-6FFA-40F1-9075-CACC03ECF964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "53C17181-13E0-47F2-B35C-2375CC25B0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2ACDC9-9FF6-4A25-9296-2E088606B38D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "8665FE23-C558-4346-9920-36F0AE8A47AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B19D912-0A07-4EED-A7D2-81C7493AE481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta10:*:*:*:*:*:*",
            "matchCriteriaId" : "DB95EB3C-61C4-46FB-AF57-1AEED089D014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta11:*:*:*:*:*:*",
            "matchCriteriaId" : "96B26040-AAD7-4CE2-AFA5-FD711C36A4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta12:*:*:*:*:*:*",
            "matchCriteriaId" : "27027709-B180-4DAE-9385-3E407E3EF4A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta14:*:*:*:*:*:*",
            "matchCriteriaId" : "4E580541-5375-46AA-B42C-55B0F8C15758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta15:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9AA914-09E3-4346-BC9A-9DCBD0D1EA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta16:*:*:*:*:*:*",
            "matchCriteriaId" : "803B064D-32BF-4137-A320-8B8579C269DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta17:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5C42D8-5A59-4A23-A86D-538F285497FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "47FF0752-AB64-4352-9B55-2198EA927625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "7F933B53-4F01-42B8-AC09-1C31D4836093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFD54477-BAE2-4833-AEDF-FAFD80F64F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "9C407D54-6828-4298-9331-7F94E0BF28E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "9861AD14-AFFB-4A4E-91BF-BF323230012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EC131C-BE8C-4F1C-AC83-8E84CF4199C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF4C1FC-9F4C-4763-A7D9-9FFC8F0B392F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta9:*:*:*:*:*:*",
            "matchCriteriaId" : "06E74876-6E82-412C-8B74-019BF7CC71CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:betax:*:*:*:*:*:*",
            "matchCriteriaId" : "B8410DED-A0E5-4318-9370-7994D476CBBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "547FEA12-F46C-4585-92D1-B390452D982A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3956FC00-6776-42B6-8386-50F99F91833D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C831B8-C865-444D-A18B-569D80D27AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "47E41EF8-5DD7-4018-ABF9-1FCEFA631351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "32EDB585-7123-40F1-84B2-36F0282E7C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEA754C-343D-4FB3-BA64-4C7691285126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1CFEDA-5F30-48B9-8B0F-E36CB579DDED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "586B69D3-7734-4ECA-8E84-8FEB2A914471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:pre0:*:*:*:*:*:*",
            "matchCriteriaId" : "D61DE1A4-36B9-4EDD-9628-B736318973C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C981EEAA-1D2B-44BC-9ED5-D3851F31A67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7D5DD4-EB54-4C4C-8090-421C3319EDEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB640DA-460C-45EC-8F02-A03E055ED15F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "079E0899-2130-431E-9805-013A8B853BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "10681635-C15C-44C8-BFB5-67912D4D39E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E75B9E0D-D7CD-47EA-AB0C-86645CA2DF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A877189B-8D9E-4A09-AC1C-831D0E15E686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A411147B-CE7E-4277-A5DF-83B90C4FC97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "0615E5DF-590A-454D-BEE3-ACEB16DD83E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83BFC82-97CF-40FF-B087-3B2B2DC5EE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:pre0:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DE9EF1-22BC-4182-8905-038AA06F8A31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DAB11DB-4B81-4DDA-A29F-DEE72658E903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "2CCEF874-0F28-40F3-84D7-9B2F1510054A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "84A6F86D-B74A-467E-A16C-25A255CC61D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC12C8-98F4-4F41-979C-540F08908199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B5666F-C034-4656-A2D8-5D804CA3AA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EC937F-3C86-4E63-86E2-0118DAD15430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "699F1242-4422-4134-B191-F42CA8EAA91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7810EC-58C5-4BB4-B2E5-6196364B3F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56644769-E21B-46E3-9131-4078500F9B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.4:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "812CC60A-71D8-47E2-BE60-BCE975418047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B860EF7-0F72-45D6-B4B6-D3E29B07F88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C2A9E3-8C89-4D2D-AECA-55415DDD4BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.5:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "F3550007-F89A-4164-BA45-30104347E463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8E5744-F4FB-4D67-9DEA-938FDC66B7FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.6:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "80BFA8A6-2EC8-4BD4-BAA8-768246EC277F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC92AA15-22D9-4213-BC7D-C36FBE4B249D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC998D08-61EC-45EE-AC67-41CB2B96BF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717F839C-2DDC-4D1F-84EE-8F87F4030904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66649F13-2EAE-4F76-B21C-585C57921655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD66FB6-F007-46DA-82B6-5083C75E5C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D85A1B1-4E94-4F7C-B363-1F8C18999E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF21570D-1EEF-4254-9BF2-8CAE8B408407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "01A59DB6-B292-4040-9945-5ADADFBDFC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "41419D41-EE7A-4464-94E7-847BD72EAAE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "5E16D7BC-9BCE-4FFD-9289-E7D951DA254A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "859687C2-C15E-4D6B-B109-39F9AE80397C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F6563B61-601D-4C8A-9572-BD848C3A8313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05A27CC-C36F-425A-B72B-8F3DE19D5587"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76857BA7-99D9-489B-8ED5-292DAA083931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.15:pre0:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4AE268-006A-4EDE-8D2E-3CCD35F8EC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F726A16-C432-4679-A904-37C0FE820883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81586EBF-EDFB-42C9-B5E2-BE29B66CE968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "20E0FB52-1B22-46E5-B83D-D88513A3E314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9C76FD-3612-410F-AB14-A36D2C520439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DF87A1-6CE0-4232-8801-43DE4D0D38E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:7.0.0:m1:*:*:*:*:*:*",
            "matchCriteriaId" : "87F81322-4604-43D5-B57E-3E56A66F22B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:7.0.0:pre0:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6457AD-D323-446C-969D-9714FA13ECB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:7.0.0:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "9104207F-ACD0-4B65-B29B-5F071F7980B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:7.0.0:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C7BEF3-B0F2-451A-8470-59FEDB8B0D36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jira.codehaus.org/browse/JETTY-1004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34975",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35143",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35225",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40553",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/402580",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/CRDY-7RKQCY",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1792",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=499867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01257.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01259.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01262.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jira.codehaus.org/browse/JETTY-1004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/402580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/CRDY-7RKQCY",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=499867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01257.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01259.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01262.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-05T17:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary web script or HTML via a directory listing request containing a ; (semicolon) character."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Mort Bay Jetty anterior a v6.1.17 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de una petición de listado de directorio que contenga el carácter ; (punto y coma)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.16",
            "matchCriteriaId" : "52DCEE3F-F777-48A8-80B6-1DCD95874432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFAED25-216C-4AB0-BAF4-7ACCC04FFB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2825D2-57A6-4DC7-84DC-608AE123E04A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6500547B-8CDD-4595-AF2D-1A2014B66191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D7BAEA-7F58-4FA3-9F34-CF5CBC4362E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58750CF6-E237-4F28-A446-DE0E882BD6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "827C3682-91FA-42D4-A0DD-CC61CB94A9D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45401E9F-9C20-4600-AE6A-CD0A1F30C4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23500C7-2A70-4E28-97E6-13161AE1EBB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8A425F-BBF5-48D2-AD0E-6D97C7808A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916600EC-3D21-4367-878B-8B0E19D10D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4877B638-8D6C-40ED-B6B5-23C8B7787F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "B522D870-8D99-42FB-9F33-4CD314369CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D046A5-C346-4E01-A0B2-0876FD8A3F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A07EEADC-A52B-4F99-9A68-4DED263992BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DD72AC80-DA74-4F06-880A-87317917476E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBA5A992-A7FF-411F-9D8C-02A08090F9FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902C6363-358D-452B-A687-78486B58ABBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279C47D8-6D64-4F70-824F-AA82FDE2BDD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D213EDC8-B7C5-4093-B10B-E7A207F159F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5293F817-6EBB-4B9A-BBA0-852FCC0641B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E067B12-B4D8-4DDB-8F65-63205ABB20E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C32EDFC7-58D0-46B6-B946-72AB8C0A7463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD9BC1D-0205-44CC-91BC-6588CDECB800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9EEBD3B-19A6-4C35-B823-5F99286FC873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA14BB2-E4C0-494A-98A9-5A9916259583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "712FF994-343E-4316-9C6F-B57F95B5FEE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C399FBC5-5133-4977-BD55-4AB1C8067CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59244D30-6A90-40D5-8CD7-79EABBC2D58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A004B7E0-158E-49E0-93D8-38B49B2C0448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.b0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "218A6DB9-D4A2-4063-B87B-953BDD5360D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.1.b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4793A285-5346-4812-9C26-271F166C13B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:alpha0:*:*:*:*:*:*",
            "matchCriteriaId" : "2B62ACEB-5F1E-4147-ADB0-B16DFB56171D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "265A00C8-C367-426C-BC5F-DD123F02D461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9EC9F5-A7E9-4118-84A5-068CAD51864B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B6D8AE-47C5-422C-980C-58C60BBDD574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A35F3C2D-DC60-4347-90C1-239B233917A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "21109D6D-063C-4502-BDAB-5D255DAFF8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC65F75-0CD7-4F5A-8BCD-F3F0CD494ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A259BF8E-00DD-4559-9925-FDD7D8C16F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C005200-8957-4A58-B7AE-B645C94C4C65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69780249-BE2F-424F-90F6-4CFC43D1DF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD32E82-427E-48F7-8D04-2793C78F855A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2AAA1A-4D81-4B23-88B7-FFD05758A9A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9414F1F6-63F9-4F7C-95EF-91CC4322ECE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8DE3B94-DF72-4E61-B795-A0CD4A10D349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E5B7F4-5543-43DA-8D26-09AE9D3A74E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E32A34-7C0B-4DF3-8CA7-35057EFD7800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C61055B-E90D-4146-AEF2-B369ACE681CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "453715D7-6E59-432D-B88E-A2573298B35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C44D3FB9-7CAA-4D6A-8D69-9E30CA42FFB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A70B1E7-48D3-4EEE-9755-CDA6575D1550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "465F9B9A-C335-4341-A98C-8FECCC018FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DDA3F2-22FA-49EF-8F94-C11495C2CD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E213CE6-0BFE-41DB-82BA-2C6A6D02455C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED8B2C4-1288-4385-B74F-59557F13E1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3511BFF-CFE2-4938-8ACE-3638104CAF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36A7783-041F-4FD7-AEE2-5DFCD18E2343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A795AA0C-A893-4BF8-A991-C997AEBF716C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367F4809-D74B-4C05-9AB8-EE89D605A755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93D0813-EC1B-4301-912B-D1C1D4260F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E82EC442-85DA-4471-9871-67AFA32E8E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C507301A-FDC0-42A5-A385-A4ADC8D4CD09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843E68E4-CD85-4BCB-8216-034FD1567E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45519B5C-9713-4020-AC9E-95742C585152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843235B9-728A-450B-95D6-1FC694EF6D00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "902945F1-4F11-4577-BD28-BB35E815F125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "20A0597E-CFA6-404C-936E-3A8065FF9145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "40951E40-8E30-465E-B1C0-A0C85ADBE217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "21D5C70A-64E4-434E-93CF-9FC6C510D545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "54D7108A-6CB6-46AC-B9CB-DF33F090C738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "D3254B37-125F-44BA-87B6-0C4DEE0B214C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "78ECE463-E0EA-4691-90CA-E548FCACC4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.0:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "F466738D-D94C-4D89-AA2C-BE2E8E16FE1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A320CE-96F5-4B2C-B2C7-7E8A7E5334BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34BBDAF7-EBE4-49B4-860A-3719006FFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8529EC-86A5-444A-8656-760DF95258DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608F3AAA-F5CB-4694-90BB-75C66ACA8755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3A4849-E341-4BE6-84AB-57A24E0922A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE6090A-AD1C-4831-8112-B4462980FAF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A840DB6-BAB5-4FA8-B6AE-8DC94A82C791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9094D5D9-B3D4-4050-97C7-6F5FAF49CE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23BF46B5-F614-4074-8C6A-0AE3A8EA3B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2E8FD-6381-43CA-8467-C968DB9A8D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C5F69E-75AF-40A8-9707-F9AEE79A146D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D3A860-1747-47EF-9384-BD83F77E9A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10393155-E386-420A-8699-68A3B49DE29C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9494C7B4-65B0-46E2-B8F4-9325882FCF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4EA2E6E-DD73-4245-B9BA-DE7504AC805A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B973C7-CB4D-4E65-8812-19FF963D1D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5620162-7E20-4AC6-BFCD-3302471B21BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B809408-895A-4909-9609-B529C3F9019E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8EEECA-E493-45AE-BF20-466D90628C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB746413-10C2-4A75-9A8A-DEB839140F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94F6250D-6360-4C9F-A124-CF8389084C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0215E5C6-9CC0-41DE-988A-2810ACD8209E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3B5B55-E4D0-4928-B4EA-D95CB28E81AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B5705E4-BA21-4320-8230-C6B6C3922338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DF706A6-9418-4948-AD1D-989A7A41A464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.a99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6196D65-AA3A-46D5-9A59-30846832D4AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CB6CA5-FDF5-495F-A631-ED43DC41C2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.b02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA22B8BC-52C4-4792-8804-24E5B87F701D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.b03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC5AFE5-D0AC-4619-9C60-D151AEDBC27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.b04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5689AB8-C02B-4F97-9AC7-A3EDDE7DB96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.0.b05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1AA7EE-75BD-4D35-A071-D5F25080CE0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "71684452-6A1D-4023-A10A-D078F24DC7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D28F3815-B209-4409-82EA-A083096F56D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A547D1F8-3916-4D78-8ED6-0B2E1EB87BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4CFA43-DC62-42B5-8E96-9D6EFDF73145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "D117126F-306B-44C7-A2BE-0A114E658847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6B826E-E97E-4287-B604-8810F79DDDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "12CE9A9F-1118-4C96-B37B-8D9D9E53228E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "6F0F93DB-CE46-42C9-A059-8F27FCC59FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "1A9D25B8-D48B-43C5-A5AB-3D60C00A6DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "EE783D81-02E5-4D78-A65C-572A69765D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F236E4-2FB8-434E-A4AE-F5DA7CC94AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F92CFF11-E18D-4D07-81D5-9ACE41084AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54087E79-2212-4B35-A631-6C15AC70D413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E22496A-C88C-47D5-9F29-29CB184A626C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139D9B00-5FDB-48E1-AFB3-098184E73318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1512F40A-E056-42BD-A733-CBA4929CD2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DE25824-2C05-4F96-BA2B-2EE0923CA35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BEAC38-360A-4F4A-B3A2-DA5EF5310ED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34896B7F-3BA0-4D14-A6A8-042DDAE4B787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:3.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A926CADB-EE62-4F54-9905-A8900103DBB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEF6355-DE50-4C9F-B96A-92F35714480B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "866E2E49-24D8-4216-9477-0C949EF8AC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEC910E-A2FA-403D-B59C-AFD2BBFBD088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D9F4F9-89A8-4884-9716-EF9FDA250120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0646AD-13A6-40A4-B06A-9BF6B1B8064A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B71502-C203-41B0-A9F4-652A274660A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A73A92E5-5779-4C54-B7E7-6A056B3998C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D306CD82-93BB-4CF1-80EB-B567E9155395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DAA932D-35F9-4052-A3FA-2FB09ED6A19D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03BEBC5F-26C8-480A-B986-64655DED1669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1738719-44A2-44D5-973E-F90282A9B9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E912CA35-FCF6-4F06-9974-CCE2F246D570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBA3DFC-F229-49A6-9191-6A3975C18416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.b0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E8CCB26-4831-47D4-86B3-D15915E18246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8847B6C-6011-44DC-B97D-9D61354D9F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A5135B-C30A-41A3-9E22-97451AAE1931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.d0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583918DB-2E06-4AB0-BCFC-A373C40D72DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.d1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "507E24BC-6C1F-4CAC-B942-15293341162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.d2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ADAC7B-3CE6-444B-BE8A-35B945B028B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.d3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1346595C-0416-40C7-9450-F4F1D17B647C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.0.d4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C1FB85-81DC-44FB-9960-FC7E2BB0B871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07610E5-454A-44A9-B341-B9642FA56EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "30E203AE-92EF-40EA-B7CD-8BFB88B4256E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE29CB8-80EE-4849-ACC1-A42AD07FEA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE47A5EA-A381-497F-B046-CA34A8940886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "900CA07F-B7CE-4809-A6B6-1F24F7C10313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "C39F3BB4-D4B7-4512-A86B-CB771233DD95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "6A333033-ACCB-4E0C-AF00-C419DEADEC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "EE935CEE-7B99-42EE-AE64-5EBCB776B20D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB0FA4D-E6B1-4495-9D48-245D584F6DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8D7C9F-5E0E-491B-A585-81BC09CA1893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5ABD34-B873-425B-A518-AABB7998C3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D448AAA-51AC-4374-9E31-4FE78C65DF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.b0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1F5F9A-A55C-4FBA-8D79-1C84F3C8E2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5579C03D-B65E-4579-B549-01C1BD339EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.d0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63404EA-0893-487F-AAEC-EF477E7B5B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.d1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE7F716-4C1B-4BF9-BC5C-B44CFA797412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.1.d2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "737FCDCE-43BB-4DE4-8082-E501EE26BA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D274307-4D78-4F4E-8F0C-2CE51D4EF0F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.0:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "60C25402-0A69-470B-8C9F-580BCC8E704A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4AC5EC-4EE1-4641-A2D7-8D80E53A3800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DD698C-9DB0-4D41-98D9-286DABB51CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F92C801-9C82-4174-A65E-9B6E9D97F5DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CBDAE22-A78D-43EC-BC66-07A571DCB995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEE25A6C-CAEE-463A-A0B4-763058A5F199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93784446-870F-4714-A18C-EE7CF09E9A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.4:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6F6DA2-FF77-45C7-82DB-7699ED4AB1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B32D70B-89DD-4A48-AEBC-0E6E93354808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51419B6C-A11C-4080-A8EE-FDB6E21269A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F37AA5-2602-42BC-9CB0-C6E53335D897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.8_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28527C05-D797-4E26-8BC9-57DD30F3F5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E758E39E-4CAA-438A-B21A-00826C4000CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "829F2EA3-DF4F-4329-96EC-F8DDFD3018A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4FE910-DF31-4CF9-9D20-6D4CD847D423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED8F5AB5-8402-49C5-A28D-433B0227DD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.10:pre0:*:*:*:*:*:*",
            "matchCriteriaId" : "A64CB9CA-BBA1-4863-B54E-1097C8E3851B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.10:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B933981-DE49-4407-BCD5-E5FAC0583B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.10:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "42385DC4-BE2D-4156-8B65-EB0860A36EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6437A8AB-462B-4C4E-B189-58026AE78804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1339AF7-DCCF-449A-A875-AF0AB5118569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.14:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "0499A6D8-43CB-49AA-A1E7-0EE28956E894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8C12E374-9B1B-4952-9631-14143261E938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29BAE0E2-B245-46D8-AA11-D9BF40158A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.15:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "C6446496-9842-4677-8076-E3A720D37100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "535ADA05-0809-4631-8CFD-ED22711995CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8649DCC7-2A43-419C-AAD1-10290034A923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06E26FA-88DF-4F05-B08B-B0D760844453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2218730A-4DC2-492B-A1ED-7721D53CA1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F27BC968-7D4B-4661-9316-DA548BD0F52E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.20:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "E926E761-FD3A-4156-8365-2FA3433D22F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E87A10C-A28D-46C8-B11D-301451FA969C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174E3F20-6784-485A-922F-676FFE5BF406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B09CD0-9523-4333-BD5E-B8DF4AF201B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.23:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "E47CE334-8E29-4063-8957-BAA83B49FDED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B098A9-F324-49A0-9ACB-3E22D9C9F7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.24:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE4C864-32A3-4507-977B-64D583AF74E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.24:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E062D526-F046-4CC4-85B5-68AAF90F50AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A6E02-1969-4F4F-82B6-7508C86FB9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE48DB9C-E0B4-403C-8D02-E7C3D6A6EFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:4.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D19EB77-8D76-4B64-B715-8F57358CAECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:alpha0:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2DBF03-E810-4AE2-9A71-AEF6EA4E536B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "040585FC-6BE9-4B71-AD86-0D61FDEDB6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "7B891FCB-0633-4C08-B16F-0A664D2DCE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "54292E8D-D579-4589-BA95-E451C5C8E555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0FB14F-7024-4E40-9F02-CE368A813E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5AAAABB-E5FA-4459-BDEE-FF9CD52CAF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "5884BEE2-3697-4B0E-83E5-1A198323B878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A569C44-3A0B-4909-B649-4CF2E4933DF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7904365A-D0A6-4D28-9FAB-341FE331B075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "23A02116-6B1A-4F9F-8A63-C241ABD070D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70C6274C-1F51-4FDD-BEC2-46B282F1F1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DAACAF6-7CA4-40A2-A9D0-65671FCC56E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.0.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E4471A-F016-4B23-A67E-BF25953D325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DE6D4E7F-11FC-4849-A5F5-DCD09752C666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4AC3A1-95B2-4E28-AE87-41ADC45C45DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627AAA2A-0601-4ACD-BD48-369C95626A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C4BFAA-1661-4EAA-840E-AC95B99E39D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "54CE8D50-4F58-4857-8580-84EAD15B73B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8911C3D3-CE91-4F09-AFAF-F27AEA70D744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF1A9C9-8F21-4A10-A801-AA29BC8AA509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.2:pre0:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EC919B-EA06-48DE-B3FC-C50396232C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A32E32-3E8B-46F4-865E-4FCD9DBD3FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE35011-D35C-4B9C-9A79-962D7DD0DB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0591418E-F324-4061-9719-90B64122FC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B367B4F4-4D87-4BDA-B0A1-2603AA85B52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "37E42FDB-3F1C-4810-91F2-2E7292A3C425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FF735C84-651F-4971-A7EE-C73CE79828B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E3BF8D-CE7D-4810-B4C2-F7D1ACC5A350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.4:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "B865666D-3AD2-4F8E-9371-A2CFB40DDE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6283995-B660-4015-881C-36A8CC1869BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.5:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "36D7DF04-644D-4DF3-9005-6C52B00D0A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "224559B0-1A22-427A-AB55-51D6E7084617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AAEF6E-A978-4C2A-BBCB-1726C76E4DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D43081-A6F2-4E50-A4C7-9037EE36C830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E6A4797-85E9-4CE2-A751-F63CEEE07603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.7:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4B1901-CC70-4C02-9133-E7DEA251C316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4497A7-8D80-4F2C-9A92-C171D5497056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98BE423-C6CA-4C34-859E-25D891FDC7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E158EB7-8424-4822-96DF-6308FCA77138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8BC6F9-C78A-4B76-9498-646C03EBDBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.11:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "785057A7-9ECA-4A8C-8497-3AC344D69BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F39F8B-21F7-4D8D-838B-97B5B2B0658B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE0063-9A70-43F4-9427-067BD665BE3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:5.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD09DE-8D68-4DE6-B1E1-4308B2D0BCD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D427FB0-D97B-40D7-A03D-FDB972C219FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:alpha0:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B1ACB4-A7B4-4207-8C71-045B4E066474"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBB87BA-6FFA-40F1-9075-CACC03ECF964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "53C17181-13E0-47F2-B35C-2375CC25B0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2ACDC9-9FF6-4A25-9296-2E088606B38D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta0:*:*:*:*:*:*",
            "matchCriteriaId" : "8665FE23-C558-4346-9920-36F0AE8A47AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B19D912-0A07-4EED-A7D2-81C7493AE481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta10:*:*:*:*:*:*",
            "matchCriteriaId" : "DB95EB3C-61C4-46FB-AF57-1AEED089D014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta11:*:*:*:*:*:*",
            "matchCriteriaId" : "96B26040-AAD7-4CE2-AFA5-FD711C36A4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta12:*:*:*:*:*:*",
            "matchCriteriaId" : "27027709-B180-4DAE-9385-3E407E3EF4A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta14:*:*:*:*:*:*",
            "matchCriteriaId" : "4E580541-5375-46AA-B42C-55B0F8C15758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta15:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9AA914-09E3-4346-BC9A-9DCBD0D1EA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta16:*:*:*:*:*:*",
            "matchCriteriaId" : "803B064D-32BF-4137-A320-8B8579C269DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta17:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5C42D8-5A59-4A23-A86D-538F285497FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "47FF0752-AB64-4352-9B55-2198EA927625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "7F933B53-4F01-42B8-AC09-1C31D4836093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFD54477-BAE2-4833-AEDF-FAFD80F64F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "9C407D54-6828-4298-9331-7F94E0BF28E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "9861AD14-AFFB-4A4E-91BF-BF323230012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EC131C-BE8C-4F1C-AC83-8E84CF4199C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF4C1FC-9F4C-4763-A7D9-9FFC8F0B392F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:beta9:*:*:*:*:*:*",
            "matchCriteriaId" : "06E74876-6E82-412C-8B74-019BF7CC71CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:betax:*:*:*:*:*:*",
            "matchCriteriaId" : "B8410DED-A0E5-4318-9370-7994D476CBBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "547FEA12-F46C-4585-92D1-B390452D982A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3956FC00-6776-42B6-8386-50F99F91833D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C831B8-C865-444D-A18B-569D80D27AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "47E41EF8-5DD7-4018-ABF9-1FCEFA631351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "32EDB585-7123-40F1-84B2-36F0282E7C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEA754C-343D-4FB3-BA64-4C7691285126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1CFEDA-5F30-48B9-8B0F-E36CB579DDED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "586B69D3-7734-4ECA-8E84-8FEB2A914471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:pre0:*:*:*:*:*:*",
            "matchCriteriaId" : "D61DE1A4-36B9-4EDD-9628-B736318973C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C981EEAA-1D2B-44BC-9ED5-D3851F31A67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7D5DD4-EB54-4C4C-8090-421C3319EDEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB640DA-460C-45EC-8F02-A03E055ED15F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "079E0899-2130-431E-9805-013A8B853BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "10681635-C15C-44C8-BFB5-67912D4D39E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E75B9E0D-D7CD-47EA-AB0C-86645CA2DF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A877189B-8D9E-4A09-AC1C-831D0E15E686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A411147B-CE7E-4277-A5DF-83B90C4FC97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.1:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "0615E5DF-590A-454D-BEE3-ACEB16DD83E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83BFC82-97CF-40FF-B087-3B2B2DC5EE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:pre0:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DE9EF1-22BC-4182-8905-038AA06F8A31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DAB11DB-4B81-4DDA-A29F-DEE72658E903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "2CCEF874-0F28-40F3-84D7-9B2F1510054A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "84A6F86D-B74A-467E-A16C-25A255CC61D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC12C8-98F4-4F41-979C-540F08908199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B5666F-C034-4656-A2D8-5D804CA3AA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EC937F-3C86-4E63-86E2-0118DAD15430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.2:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "699F1242-4422-4134-B191-F42CA8EAA91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7810EC-58C5-4BB4-B2E5-6196364B3F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56644769-E21B-46E3-9131-4078500F9B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.4:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "812CC60A-71D8-47E2-BE60-BCE975418047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B860EF7-0F72-45D6-B4B6-D3E29B07F88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C2A9E3-8C89-4D2D-AECA-55415DDD4BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.5:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "F3550007-F89A-4164-BA45-30104347E463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8E5744-F4FB-4D67-9DEA-938FDC66B7FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.6:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "80BFA8A6-2EC8-4BD4-BAA8-768246EC277F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC92AA15-22D9-4213-BC7D-C36FBE4B249D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC998D08-61EC-45EE-AC67-41CB2B96BF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717F839C-2DDC-4D1F-84EE-8F87F4030904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66649F13-2EAE-4F76-B21C-585C57921655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD66FB6-F007-46DA-82B6-5083C75E5C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D85A1B1-4E94-4F7C-B363-1F8C18999E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF21570D-1EEF-4254-9BF2-8CAE8B408407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "01A59DB6-B292-4040-9945-5ADADFBDFC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "41419D41-EE7A-4464-94E7-847BD72EAAE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "5E16D7BC-9BCE-4FFD-9289-E7D951DA254A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "859687C2-C15E-4D6B-B109-39F9AE80397C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F6563B61-601D-4C8A-9572-BD848C3A8313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05A27CC-C36F-425A-B72B-8F3DE19D5587"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76857BA7-99D9-489B-8ED5-292DAA083931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.15:pre0:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4AE268-006A-4EDE-8D2E-3CCD35F8EC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F726A16-C432-4679-A904-37C0FE820883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81586EBF-EDFB-42C9-B5E2-BE29B66CE968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "20E0FB52-1B22-46E5-B83D-D88513A3E314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9C76FD-3612-410F-AB14-A36D2C520439"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jira.codehaus.org/browse/JETTY-980",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34975",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=499867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jira.codehaus.org/browse/JETTY-980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=499867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-05T19:30:00.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long X- header, as demonstrated by an X-Testing header."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Sendmail anterior a v8.13.2 permite a atacantes remotos producir una denegación de servicio (caída de demonio) y posiblemente  ejecutar código de forma arbitraria a través de la cabecera X- como se demostró mediante la cabecera de prueba X-."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.13.1.2",
            "matchCriteriaId" : "2820FDAE-AA3F-4452-933C-62B4F174D941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA16C02-3B8D-4188-898E-048A93F11ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:2.6:*:nt:*:*:*:*:*",
            "matchCriteriaId" : "3300A5FC-69D9-4F19-AB0E-0273F5ECF45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF12CC4-C9CD-479A-8F85-8F947B5B60A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:2.6.1:*:nt:*:*:*:*:*",
            "matchCriteriaId" : "EC340D43-0E4D-4365-A604-9DDF3BD62039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623A2E07-2122-4ADE-9932-011DCA4396A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C563EF-FDED-4193-A66A-06527878BB1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:3.0:*:nt:*:*:*:*:*",
            "matchCriteriaId" : "E43CBCA0-47B1-4992-A636-A0BF4441B91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A267D3-2F49-4E61-B2C9-D8ED2265665E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:3.0.1:*:nt:*:*:*:*:*",
            "matchCriteriaId" : "2FA4711B-319B-4410-A1B5-C6D8C4B1EC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7199205A-B914-40A1-9C82-A9698511E3C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:3.0.2:*:nt:*:*:*:*:*",
            "matchCriteriaId" : "F4981D22-AA6B-4901-95BA-F1BB893828B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC468AB-8B18-4169-8040-614A32444732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4E6D5E-BD37-4F8E-962C-0438C62BEF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:4.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "111C0FC5-A199-44CA-9512-9E6B12514E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFADCBA-DB24-451F-9E1D-FBBEE41C5D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:5.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFC5B8B-9102-46A9-9BD3-5CC0B671383F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:5.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BC02ED-17B1-44B3-97DB-F626A2BD2524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:5.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF58EBCB-5735-4569-957D-C37CC38F0823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBEEC1F-8382-4FEE-9F7F-60A8D9494DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A34E836-DFF7-404B-9F49-C56DCD81DB4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624CA3E0-1D02-43C8-9BE2-CDB3651D153F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0006A6D0-E3E5-447E-ABCF-6D6E741ADC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85996153-65D0-4697-A01B-F6174CE5B4AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855476CC-21EA-4037-91B7-7B9AAE9E7F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A1136-074A-460D-9794-DDD530626800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A9602B-8E5A-4BF4-81F5-D1152D09FCAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD0B100-D822-4EBF-8EC9-ADAB8141116B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196D77DF-E6D4-46D0-BC2C-8804A587CA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B743E5A3-6B15-4877-9424-A1F1A4214B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A60742-7815-4658-A6F7-147AA48C24B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC773E5-84D2-4084-80DA-EE8423C4925B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1A24F2-9C6B-4DF0-AB04-55D051812DD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120271B8-08A9-4C21-A108-0DA61095A006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E6ECDA-DF65-47FF-A42F-FD5C1D864FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA859AF-4E4E-4077-8E98-523E617A1DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9791650-C367-43B6-A0F4-5BB56CE10778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8340DDA8-77DD-4AEB-B267-F86F64A851B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DCBBEE-1DF0-40FE-B755-1FC35CF16788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581626E7-47B5-4819-B34F-B6DFD07A12F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBE9A4A-8AB9-4A97-A106-970FEB08952C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B754AD41-90A0-4382-B599-E41289C690A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12:beta10:*:*:*:*:*:*",
            "matchCriteriaId" : "BD99394C-5408-4A01-8D4E-417FFFFDE9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12:beta12:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB59A24-87DE-4CAD-A2BA-AFCC0B2A55B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12:beta16:*:*:*:*:*:*",
            "matchCriteriaId" : "97D641EF-0B69-45A1-B85E-3C9C93AB9D42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "8972211B-6A5B-4095-9CBB-CEF4C23C9C65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "8F81A2AD-90A0-4B97-86A3-92690A0FCA71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F74BA-2B71-435E-92B8-9DEADB3311A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A46DF2-8EEB-40C8-B1CA-01BC064BD25E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581E5904-1A2B-49FF-BE3F-D42019AD816B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CC4C83-4FB9-4344-AFCB-C260659F81DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF763B4-58E3-4868-8C92-47DE3E4E5F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4FCB77-7FAC-4A4B-851C-2F352B44D3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEB3923-8F4B-4523-84F9-17D1CFA37F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58CD19B4-4BFD-4DE8-B21F-6B6CDE6793C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B82BBB7-CD72-4A33-97D4-B1E51A595323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1D6A40-5DD1-481C-AF85-85705FCE3680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7125C4-64AF-4A3B-BBD6-1A56660A2D90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83AE5BA5-09FF-4AF8-B4E8-4D372A208E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E0D099-C149-4923-A06C-200A23CEA943"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nmrc.org/~thegnome/blog/apr09/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sendmail.org/releases/8.13.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nmrc.org/~thegnome/blog/apr09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sendmail.org/releases/8.13.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Based on our analysis this issue does not have a security consequence and does not lead to a buffer overflow or denial of service.  For more details of our technical evaluation see\nhttps://bugzilla.redhat.com/show_bug.cgi?id=499252#c18",
        "lastModified" : "2009-05-07T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-05T19:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other vendors, does not scan X- headers for malicious content, which allows remote attackers to bypass virus detection via a crafted message, as demonstrated by a message with an X-Testing header and no message body."
      }, {
        "lang" : "es",
        "value" : "McAfee GroupShield para Microsoft Exchange en Exchange Server 2000, y posiblemente otros productos antivirus y antispam de McAfee y otros vendedores, no escanea las cabeceras X- de los contenidos maliciosos, lo que permite a atacantes remotos evitar la detección vírica a través de un mensaje manipulado, como se ha demostrado con un mensaje con una cabecera X- de prueba y sin cuerpo de mensaje."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:groupshield:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8EEB2A-4BB6-4D3C-8CCC-88D1D0D6D4D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E61FD5F-3B18-4589-B652-FDFE8F234417"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nmrc.org/~thegnome/blog/apr09/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nmrc.org/~thegnome/blog/apr09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1184",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-05-05T20:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux subsystem in the Linux kernel before 2.6.27.22, and 2.6.28.x before 2.6.28.10, when compat_net is enabled, omits calls to avc_has_perm for the (1) node and (2) port, which allows local users to bypass intended restrictions on network traffic.  NOTE: this was incorrectly reported as an issue fixed in 2.6.27.21."
      }, {
        "lang" : "es",
        "value" : "La función selinux_ip_postroute_iptables_compat en security/selinux/hooks.c en el subsistema SELinux en el kernel de Linux anterior a v2.6.27.22, y v2.6.28.x anterior a 2.6.28.10, cuando compat_net esta activado, omite llamadas a avc_has_perm para (1) el nodo y (2) puerto, lo que permite a usuarios locales evitar la restricciones previstas en el trafico de la red. NOTA: Esto fue incorrectamente reportado como una cuestión arreglada en 2.6.27.21."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F9DBB0-8AF7-42CA-95DD-68A344E9D549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD00664-A27C-4514-A2A4-079E8F9B0251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E336C792-B7A1-4318-8050-DE9F03474CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D0159-1A05-4628-9C1C-360DED0F438C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6654B9-42EB-4C2C-8F71-710D50556180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241FF5F5-516B-4F77-ABAF-787DFEFEC1AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FDF616-E410-4540-B377-98D1FB88CE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5313B736-9904-442A-84D6-8FC7B9AC2059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D42BA44-C69B-4170-9867-CABF93CA9BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "085259B8-9D41-42B0-B32B-66B8D365F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A12DE15-E192-4B90-ADB7-A886B3746DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6588E7-F4FA-40F5-8945-FC7B6094376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "AE87E13E-ACF7-4F74-8938-729F3B0D694C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D4965A12-1BBA-4494-A5C1-43E0C0F48C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3069324C-28FB-4BB6-9451-F3AC6A8DA64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3D19AD-4268-45E7-B13D-BC93ABDF2226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E619E6-A515-43BC-B371-C1FF6DAA6CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "388414A1-C9B4-41BA-AD35-6501A463A095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FDBA01DD-C129-48F1-800B-838418F4A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "185F1EF8-04EB-43ED-B909-8BDF60F23E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "3483FAFA-353C-498F-AF68-8F5B84A0F30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6B11A9E1-9D90-46DC-81B5-17A137205AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "07EEC559-9240-46BE-9057-0F17D1F61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BBBC127F-D67E-43FE-BCFE-606C200084F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "42B18945-EE09-4E6B-8C11-E382E5F8F850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "12D0C03A-7D30-485F-8431-638918FE9658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA311B8-D32E-4853-9B07-58EAF1019D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F0F679-43C8-426E-A97E-C3B207A3331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2DF2BB-F94A-4692-AFDC-47C42F04081B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ED7CE5-3388-4CB9-AF60-A2AF19611327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACBB194-1D24-464A-B79C-44B8127EAD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0138807-6313-4A3F-AB5A-4B7D4A9BE287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:git7:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEBA0F6-5453-4993-932B-BB8941DCC5CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8452D554-8DEB-4265-839C-6B40CCFB56B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "62C97D20-4152-47C4-B21B-8206CF49E20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E55450-F6D9-483C-9CC8-E651E5A12AB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=910c9e41186762de3717baaf392ab5ff0c454496",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lwn.net/Articles/331434/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lwn.net/Articles/331435/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://patchwork.ozlabs.org/patch/25238/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:118",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:119",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/04/1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=910c9e41186762de3717baaf392ab5ff0c454496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lwn.net/Articles/331434/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lwn.net/Articles/331435/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://patchwork.ozlabs.org/patch/25238/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/04/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1467",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-05T20:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the body of a message, related to the email view and incorrect HTML filtering in the cleanHTML function in server/inc/tools.php; or the (2) title, (3) link, or (4) description element in an RSS feed, related to the getHTML function in server/inc/rss/item.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en IceWarp eMail Server y WebMail Server anteriores a v9.4.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de (1) el cuerpo del mensaje, relacionado con la vista del correo electrónico y el incorrecto filtrado HTML en la función \"cleanHTML\" en server/inc/tools.php; o (2) el titulo, (3) enlace o (4)el elemento descripción en un RSS, relacionado con la función gerHTML en server/inc/rss/item.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.3.0",
            "matchCriteriaId" : "6EC05573-9E95-4E38-9BB7-8EEC2207F93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65413C6D-2477-46BE-A9E0-DFEBFA4984B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D626E83E-B8D2-488C-86A1-E9EEE26338AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC20926-AA4F-411B-AC96-F411E7A00ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B4CF45-C28E-4F9B-8593-FC3227FD3B5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB40BD9-01B0-43A8-B382-6AF471D4E5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.165:*:*:*:*:*:*:*",
            "matchCriteriaId" : "273ACE18-425A-42F4-A1C4-A729E61C06D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A049A822-9A1D-4A67-B3C7-87F37CE14966"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.190:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6A3368-1C9F-404C-B22C-5BA19F8C89DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421C0DFF-83B4-494F-B56F-80FCB7465383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD09ABFB-431C-4F81-8B75-1E310FF1DEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.220:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D46E21-2A13-4378-B9D9-77B75C574053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.240:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5637C09C-F43E-41DB-A8C1-AE08DEC5E07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.250:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F1E0EB6-D30B-4448-A61D-79F3720ED199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.260:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB1408C-6076-45C4-8532-41B946E9F2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.280:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64040FAE-3457-4153-84F5-DB4C0F298DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.290:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53883B0E-662C-41E6-B0E4-44052243B8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.310:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659D6D8F-6E4F-4961-88D8-93AEBBBACA2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.320:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5CD4B14-457C-493B-8206-63AC78C677BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.330:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD881C18-E67E-431D-BF64-E9AD74B623B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.331:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9498A897-FC1E-42F7-A766-F2F3F3AD73DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.340:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86FD3A63-6985-4557-BCBF-A6C3C62965C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C730232-BE10-485B-B7E6-C7221FF830CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.360:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75BCAB2F-D3DC-446C-B260-E6528D424574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.00.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7517B62B-E8BD-46BE-8876-210AF4BBCFEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.00.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380A25A3-84E8-4660-8E1E-D9F86CCDF451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.00.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F811823-8E74-4940-82BF-0BB874A2EDAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.00.130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D881063-B61C-4C8D-BA5B-C924968284C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.00.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA4F4994-9B1C-4975-80A0-48CFC8A59F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.10.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC092BCB-C03D-489A-8169-A78672DDAC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.10.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82BCBCDB-1C96-4AD9-9BD5-6C6F28B0A59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.00.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377D2092-82CD-4BE5-92CB-1B6970C9B343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5637CE33-3C19-4BF5-9768-B680FC16DD75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27100290-294C-4938-9E31-5E4EC1CC0DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257EF71D-D21C-42D6-B799-0CDE4D48D8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "885DC4F5-0809-4BD0-8EB9-26B6F7AC5D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772781AF-D898-41E0-94CA-5E4E68263B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.10.040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8458C9-BB0B-450A-906E-982183D2D112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.10.050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E554A0-B31E-42EC-AC96-02928324D8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516EB69D-9AA3-4E39-8902-54F1BE74FF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAAD90B-2109-4EA8-B6E9-6DC097E46BB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66CFCE9-52A8-4F40-A256-A4246B9A0345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20CB84F9-D621-4C76-B7FD-7CBE9126C7C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F5651E-AFC4-4ED5-89A3-4FFF17849892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F9E8EF6-6EDA-4204-A9BE-9F0A1FA67F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B52C4762-F008-4A95-9DB2-0187C918D2D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7D1390-BB52-4E73-9D53-AC7C890273FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D2E155-E79B-4F92-8150-49385D9ED683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7243D261-9880-4FC1-A709-B270D451819C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA1EEB6-F96D-4CB4-B19B-FE298A7106CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D65F51-8021-47C5-A587-AC1F08A690E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E5E64D-EBF3-44AA-A986-B3A668CA84FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E436882C-626F-44E0-92C1-AB42679DB36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A838F48D-65D4-4D0A-AD70-770E564C414F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528BA85A-A479-4AE5-AE58-4F223EC70CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4DFEC2-E095-4670-A87D-9686FFBACE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE29A7F9-B10D-43DE-ACF9-82799A5AB622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1CE47F-2420-455E-8D59-9115F8553786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9479F83D-4C9B-4E09-8173-FEF3D648D173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78426705-364D-44A8-9D11-52FA221501F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5E9BC-1925-4109-88CA-BDDA2760A410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34006ADE-3045-4730-9905-F2739F03B37F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C43E85-FCD9-4C27-9D0F-FDBD6C6BE11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BE6199-BDF4-492F-AD3F-8F228B3333D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD60C3BF-BFA2-48DE-BFF8-862BEB55DC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59FE641-F8C2-4499-A68F-4C7B67446B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCB7BC6-8B20-4BA0-A228-FFA64B9D2679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F0B2E0-74A3-40B7-AF4E-547401ABF7A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A59BCD-74B9-4E7F-A79A-293E75ED1457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6AFCD42-008D-47C3-B91F-CDBF753B4DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5318A0-2F46-483C-B4C1-DE5E78E2B206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5203E03-7810-4FBD-BC29-85D4FC0C44F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A978E8-6F27-4FAA-9B1C-EAD110F3A626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB831B3-D03A-4597-9DA0-0C1101751A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E0046D-0F36-4882-BF2E-0C54A6DAF3E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6628764-234B-4B2F-BB96-BC502781D900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "534C2A48-DC12-41D1-A848-5826D8D00A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E40169-02AC-4F18-B085-58B16073CDF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F92171-ACF9-49F7-88FA-662FE6EC05E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C4E23C-34D9-4655-9FEF-E99D94BFCBCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C585DB99-2778-473C-9D20-5B707C12E961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7888DF8-A12C-4583-A4A1-8FD77F258BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39616720-7128-4364-A376-4F272DE6052E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D109C95C-E55B-4E26-818D-1F6A5EF879FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23876D5-6BD5-446A-A8B8-EFF5293E2C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9142EEFA-753E-4CB2-97E0-644EF942E149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90B14DCB-3070-4A68-AE00-4004542739C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:9.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C3C5AF-13AE-482C-ACE8-8E9EA2A104E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.3.0",
            "matchCriteriaId" : "8BE0C1F2-E9EB-441F-BA29-26F8AE5CD53C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B825E8AC-E3E0-4D6F-AEB1-1C8571F42B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B629D1A8-4D8A-4814-B88F-D26DE0A8AD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "626E5CBB-A953-4D6C-9AA3-BD8FC44AC310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00D854B-D34B-41BD-9B28-573B0A66FF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF300F62-E247-4A6F-89B1-F27CD22D2AFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.165:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9F5609-2C2B-4D57-974F-E4AA7A1354F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69EE8E28-E95B-48F9-87BF-9A6A713C614B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.190:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60BE3477-86AF-4301-905C-B2D41347C95D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23CED09C-9C1F-4E98-87E4-FF1AF3FDB3EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A67BBF-D7D2-4780-BB52-6247B1C2BF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.220:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11F50DDD-14C5-430C-BA64-39DBF86C8195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.240:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48D0885-9A43-41CF-97F5-DEE654DEB4FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.250:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36F5040-A148-4D41-AEDE-E2031FC0783A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.260:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D444E7-8533-49C9-BEA5-95B1867D5B20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.280:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9FE52B-976E-45D5-9F72-0DA02A549283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.290:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07F2597-CBEB-4CF4-853B-432C90A0E5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.310:*:*:*:*:*:*:*",
            "matchCriteriaId" : "000C3F0B-5083-4E2A-9C3B-A3BBD8F5FC78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.320:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C2E1F50-0C4F-49BD-837B-E0A6AA897F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.330:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D7527FB-5E18-4E25-A344-6FF3AD48F440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.331:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA4C32D2-A4D3-4D1D-8C40-A19E71D2CD8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.340:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D96B83F5-78EF-46C7-AEF3-B07DC47AD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E812EF7-F33C-4A9E-B21C-9E713EAA5DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.360:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3313DDB5-AB69-4FC6-B404-7161DFD42065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.00.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC5A2472-E80B-453E-AC87-61755089F816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.00.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE775DD-1332-4DBD-B43E-82DEDF65EDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.00.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81AACBDC-A27F-42E9-9503-BEAE6277C38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.00.130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "994FED3B-18B0-43CD-AF69-71363EB69A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.00.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C1006A-9BA2-4E2E-934A-E6D84FE31F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.10.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251150DB-9F36-4024-83E5-CCB61788D591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.10.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E018C4E-3442-43DF-A62C-8EF32F582376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.00.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E5C940-3411-4298-AF22-4E0CD0897068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40084349-0248-4DCA-84FF-BAFC61913B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E67D777-B1EE-467C-A9F6-3FE3AC602BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9BA513-7DFF-4DA5-A850-1932332AB713"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B44F9B-36F5-42A5-8007-F4437C5956FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D9460D-8004-4C48-8435-5BB55E18407F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.10.040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D37D32E-49FF-48AE-AB1D-5F83FB4ABC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.10.050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549C6763-6BAC-418D-801E-BA219BA84306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C15656-8A36-446F-B72E-B5D8D02118C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F6586C-A227-4ABA-BBCD-7608BC3AE986"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35887E35-7075-4DA7-9DA0-43784E83E523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C96A0CF4-4646-42C2-A2D1-D143307AA075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4587B57E-E5CF-46F7-914C-3E3FF62ABF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F92BC1B-439E-497E-AE9A-0962C665EA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2245DA60-68D3-4FF0-9E22-EE469BFDCA51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF984C80-8F2A-444E-8176-AF4207659443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "998D7471-D097-40FF-9749-D1F1F540676C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B349E3F2-5D93-4448-B901-5A51682A095D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "426A5CA3-5AF9-409F-8CC5-8B012F9B4D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB35A154-98E1-4EF7-9B5A-1691023E69AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C34887E6-AB33-48C1-BD0A-015C141498C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CDBBC7-EEF8-40A4-B32D-528370E85361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E324B02-9C59-44D8-AC8A-899130501C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "144BFD52-D569-42B1-BBBA-BA6F3B41C0D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D3B6E6-8B47-4790-9293-254A446256AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0899F9-F7FC-459A-BF39-A2590F4C948A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1571098-025D-4F9E-9F5B-8CF4E47CB0A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC9A8D1-95F8-41F1-B282-548B654AC024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A7C86B-1F63-492E-BDBF-3AD1F27F3ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF58F47-FBA0-472F-84B2-37C40AE9F11E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D208182-D571-4756-953B-84647B7C30DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC5EF5A-FB10-4362-BF83-F2D399677C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6375DB-EAD9-40DB-ABC8-9ED47937335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1465311E-9F28-4D02-87A1-8262F0E91363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4565A0-4CB2-4BB8-8747-88C2E1DB04BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8111EB25-993B-40D4-9A3F-B0A379FF2544"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3932C58-3E6B-4CE8-AD86-5258C657B9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E884468-C200-4994-8073-A06145DD32EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA8B9FC-58C3-4CDB-B3C9-DCE3FC6DD071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F1065B-3CCB-4690-9623-948AE5480388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A195789-BE60-41D0-A09F-297C481E1741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EA6D4D-4818-4B90-A431-F5DB4AEEAC84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC60DE-9C65-48C8-B9F9-CBB99D6E6EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D72538A-63D7-4714-819F-D84E23A477C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C48479D4-85A4-471C-BBE3-95EC7ED42551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17670892-BDEB-435D-92A8-4D362FB48235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0233108-DAE6-42A5-B525-6D8F91298183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FCFDA77-070C-42E6-897C-DB4CA6FDD0E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5090C955-3E5A-4CDF-A2B2-EF5A181BE4FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D199BC-D664-48A8-8D0C-5496C5DFF8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6327BC-34F7-46E9-ABB3-9FA8B9C5F684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93FD709-6918-4F00-8C90-416F0E4208DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A9179B-25BD-4AF6-9ED1-1C0B4439A726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7A7D8F-0669-42D0-A7F8-447E05EB5F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A2049F-CAEC-47A5-9C22-0295B08CAA51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DF0BF3-2284-488D-8C62-DB9766445556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:9.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B1AF41-963E-470C-9EC3-4ECD49EB1BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2009-001",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2009-002",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503225/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503229/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2009-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2009-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503225/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503229/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-05T20:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) sql and (2) order_by elements in an XML search query."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en el formulario de búsqueda en server/webmail.php en el componente Groupware en IceWarp eMail Server y WebMail Server anteriores a v9.4.2 permite a usuarios remotos autenticados ejecutar comandos SQL de forma arbitraria a través de los elementos (1) sql y (2) order_by en un petición de búsqueda XML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.3.0",
            "matchCriteriaId" : "6EC05573-9E95-4E38-9BB7-8EEC2207F93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65413C6D-2477-46BE-A9E0-DFEBFA4984B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D626E83E-B8D2-488C-86A1-E9EEE26338AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC20926-AA4F-411B-AC96-F411E7A00ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B4CF45-C28E-4F9B-8593-FC3227FD3B5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB40BD9-01B0-43A8-B382-6AF471D4E5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.165:*:*:*:*:*:*:*",
            "matchCriteriaId" : "273ACE18-425A-42F4-A1C4-A729E61C06D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A049A822-9A1D-4A67-B3C7-87F37CE14966"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.190:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6A3368-1C9F-404C-B22C-5BA19F8C89DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421C0DFF-83B4-494F-B56F-80FCB7465383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD09ABFB-431C-4F81-8B75-1E310FF1DEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.220:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D46E21-2A13-4378-B9D9-77B75C574053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.240:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5637C09C-F43E-41DB-A8C1-AE08DEC5E07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.250:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F1E0EB6-D30B-4448-A61D-79F3720ED199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.260:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB1408C-6076-45C4-8532-41B946E9F2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.280:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64040FAE-3457-4153-84F5-DB4C0F298DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.290:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53883B0E-662C-41E6-B0E4-44052243B8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.310:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659D6D8F-6E4F-4961-88D8-93AEBBBACA2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.320:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5CD4B14-457C-493B-8206-63AC78C677BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.330:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD881C18-E67E-431D-BF64-E9AD74B623B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.331:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9498A897-FC1E-42F7-A766-F2F3F3AD73DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.340:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86FD3A63-6985-4557-BCBF-A6C3C62965C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C730232-BE10-485B-B7E6-C7221FF830CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.360:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75BCAB2F-D3DC-446C-B260-E6528D424574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.00.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7517B62B-E8BD-46BE-8876-210AF4BBCFEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.00.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380A25A3-84E8-4660-8E1E-D9F86CCDF451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.00.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F811823-8E74-4940-82BF-0BB874A2EDAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.00.130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D881063-B61C-4C8D-BA5B-C924968284C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.00.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA4F4994-9B1C-4975-80A0-48CFC8A59F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.10.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC092BCB-C03D-489A-8169-A78672DDAC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.10.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82BCBCDB-1C96-4AD9-9BD5-6C6F28B0A59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.00.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377D2092-82CD-4BE5-92CB-1B6970C9B343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5637CE33-3C19-4BF5-9768-B680FC16DD75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27100290-294C-4938-9E31-5E4EC1CC0DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257EF71D-D21C-42D6-B799-0CDE4D48D8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "885DC4F5-0809-4BD0-8EB9-26B6F7AC5D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772781AF-D898-41E0-94CA-5E4E68263B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.10.040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8458C9-BB0B-450A-906E-982183D2D112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.10.050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E554A0-B31E-42EC-AC96-02928324D8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516EB69D-9AA3-4E39-8902-54F1BE74FF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAAD90B-2109-4EA8-B6E9-6DC097E46BB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66CFCE9-52A8-4F40-A256-A4246B9A0345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20CB84F9-D621-4C76-B7FD-7CBE9126C7C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F5651E-AFC4-4ED5-89A3-4FFF17849892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F9E8EF6-6EDA-4204-A9BE-9F0A1FA67F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B52C4762-F008-4A95-9DB2-0187C918D2D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7D1390-BB52-4E73-9D53-AC7C890273FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D2E155-E79B-4F92-8150-49385D9ED683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7243D261-9880-4FC1-A709-B270D451819C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA1EEB6-F96D-4CB4-B19B-FE298A7106CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D65F51-8021-47C5-A587-AC1F08A690E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E5E64D-EBF3-44AA-A986-B3A668CA84FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E436882C-626F-44E0-92C1-AB42679DB36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A838F48D-65D4-4D0A-AD70-770E564C414F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528BA85A-A479-4AE5-AE58-4F223EC70CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4DFEC2-E095-4670-A87D-9686FFBACE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE29A7F9-B10D-43DE-ACF9-82799A5AB622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1CE47F-2420-455E-8D59-9115F8553786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9479F83D-4C9B-4E09-8173-FEF3D648D173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78426705-364D-44A8-9D11-52FA221501F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5E9BC-1925-4109-88CA-BDDA2760A410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34006ADE-3045-4730-9905-F2739F03B37F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C43E85-FCD9-4C27-9D0F-FDBD6C6BE11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BE6199-BDF4-492F-AD3F-8F228B3333D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD60C3BF-BFA2-48DE-BFF8-862BEB55DC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59FE641-F8C2-4499-A68F-4C7B67446B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCB7BC6-8B20-4BA0-A228-FFA64B9D2679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F0B2E0-74A3-40B7-AF4E-547401ABF7A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A59BCD-74B9-4E7F-A79A-293E75ED1457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6AFCD42-008D-47C3-B91F-CDBF753B4DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5318A0-2F46-483C-B4C1-DE5E78E2B206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5203E03-7810-4FBD-BC29-85D4FC0C44F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A978E8-6F27-4FAA-9B1C-EAD110F3A626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB831B3-D03A-4597-9DA0-0C1101751A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E0046D-0F36-4882-BF2E-0C54A6DAF3E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6628764-234B-4B2F-BB96-BC502781D900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "534C2A48-DC12-41D1-A848-5826D8D00A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E40169-02AC-4F18-B085-58B16073CDF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F92171-ACF9-49F7-88FA-662FE6EC05E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C4E23C-34D9-4655-9FEF-E99D94BFCBCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C585DB99-2778-473C-9D20-5B707C12E961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7888DF8-A12C-4583-A4A1-8FD77F258BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39616720-7128-4364-A376-4F272DE6052E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D109C95C-E55B-4E26-818D-1F6A5EF879FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23876D5-6BD5-446A-A8B8-EFF5293E2C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9142EEFA-753E-4CB2-97E0-644EF942E149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90B14DCB-3070-4A68-AE00-4004542739C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:9.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C3C5AF-13AE-482C-ACE8-8E9EA2A104E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.3.0",
            "matchCriteriaId" : "8BE0C1F2-E9EB-441F-BA29-26F8AE5CD53C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B825E8AC-E3E0-4D6F-AEB1-1C8571F42B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B629D1A8-4D8A-4814-B88F-D26DE0A8AD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "626E5CBB-A953-4D6C-9AA3-BD8FC44AC310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00D854B-D34B-41BD-9B28-573B0A66FF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF300F62-E247-4A6F-89B1-F27CD22D2AFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.165:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9F5609-2C2B-4D57-974F-E4AA7A1354F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69EE8E28-E95B-48F9-87BF-9A6A713C614B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.190:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60BE3477-86AF-4301-905C-B2D41347C95D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23CED09C-9C1F-4E98-87E4-FF1AF3FDB3EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A67BBF-D7D2-4780-BB52-6247B1C2BF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.220:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11F50DDD-14C5-430C-BA64-39DBF86C8195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.240:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48D0885-9A43-41CF-97F5-DEE654DEB4FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.250:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36F5040-A148-4D41-AEDE-E2031FC0783A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.260:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D444E7-8533-49C9-BEA5-95B1867D5B20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.280:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9FE52B-976E-45D5-9F72-0DA02A549283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.290:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07F2597-CBEB-4CF4-853B-432C90A0E5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.310:*:*:*:*:*:*:*",
            "matchCriteriaId" : "000C3F0B-5083-4E2A-9C3B-A3BBD8F5FC78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.320:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C2E1F50-0C4F-49BD-837B-E0A6AA897F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.330:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D7527FB-5E18-4E25-A344-6FF3AD48F440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.331:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA4C32D2-A4D3-4D1D-8C40-A19E71D2CD8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.340:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D96B83F5-78EF-46C7-AEF3-B07DC47AD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E812EF7-F33C-4A9E-B21C-9E713EAA5DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.360:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3313DDB5-AB69-4FC6-B404-7161DFD42065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.00.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC5A2472-E80B-453E-AC87-61755089F816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.00.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE775DD-1332-4DBD-B43E-82DEDF65EDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.00.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81AACBDC-A27F-42E9-9503-BEAE6277C38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.00.130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "994FED3B-18B0-43CD-AF69-71363EB69A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.00.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C1006A-9BA2-4E2E-934A-E6D84FE31F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.10.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251150DB-9F36-4024-83E5-CCB61788D591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.10.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E018C4E-3442-43DF-A62C-8EF32F582376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.00.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E5C940-3411-4298-AF22-4E0CD0897068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40084349-0248-4DCA-84FF-BAFC61913B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E67D777-B1EE-467C-A9F6-3FE3AC602BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9BA513-7DFF-4DA5-A850-1932332AB713"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B44F9B-36F5-42A5-8007-F4437C5956FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D9460D-8004-4C48-8435-5BB55E18407F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.10.040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D37D32E-49FF-48AE-AB1D-5F83FB4ABC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.10.050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549C6763-6BAC-418D-801E-BA219BA84306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C15656-8A36-446F-B72E-B5D8D02118C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F6586C-A227-4ABA-BBCD-7608BC3AE986"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35887E35-7075-4DA7-9DA0-43784E83E523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C96A0CF4-4646-42C2-A2D1-D143307AA075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4587B57E-E5CF-46F7-914C-3E3FF62ABF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F92BC1B-439E-497E-AE9A-0962C665EA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2245DA60-68D3-4FF0-9E22-EE469BFDCA51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF984C80-8F2A-444E-8176-AF4207659443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "998D7471-D097-40FF-9749-D1F1F540676C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B349E3F2-5D93-4448-B901-5A51682A095D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "426A5CA3-5AF9-409F-8CC5-8B012F9B4D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB35A154-98E1-4EF7-9B5A-1691023E69AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C34887E6-AB33-48C1-BD0A-015C141498C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CDBBC7-EEF8-40A4-B32D-528370E85361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E324B02-9C59-44D8-AC8A-899130501C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "144BFD52-D569-42B1-BBBA-BA6F3B41C0D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D3B6E6-8B47-4790-9293-254A446256AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0899F9-F7FC-459A-BF39-A2590F4C948A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1571098-025D-4F9E-9F5B-8CF4E47CB0A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC9A8D1-95F8-41F1-B282-548B654AC024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A7C86B-1F63-492E-BDBF-3AD1F27F3ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF58F47-FBA0-472F-84B2-37C40AE9F11E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D208182-D571-4756-953B-84647B7C30DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC5EF5A-FB10-4362-BF83-F2D399677C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6375DB-EAD9-40DB-ABC8-9ED47937335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1465311E-9F28-4D02-87A1-8262F0E91363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4565A0-4CB2-4BB8-8747-88C2E1DB04BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8111EB25-993B-40D4-9A3F-B0A379FF2544"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3932C58-3E6B-4CE8-AD86-5258C657B9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E884468-C200-4994-8073-A06145DD32EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA8B9FC-58C3-4CDB-B3C9-DCE3FC6DD071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F1065B-3CCB-4690-9623-948AE5480388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A195789-BE60-41D0-A09F-297C481E1741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EA6D4D-4818-4B90-A431-F5DB4AEEAC84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC60DE-9C65-48C8-B9F9-CBB99D6E6EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D72538A-63D7-4714-819F-D84E23A477C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C48479D4-85A4-471C-BBE3-95EC7ED42551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17670892-BDEB-435D-92A8-4D362FB48235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0233108-DAE6-42A5-B525-6D8F91298183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FCFDA77-070C-42E6-897C-DB4CA6FDD0E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5090C955-3E5A-4CDF-A2B2-EF5A181BE4FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D199BC-D664-48A8-8D0C-5496C5DFF8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6327BC-34F7-46E9-ABB3-9FA8B9C5F684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93FD709-6918-4F00-8C90-416F0E4208DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A9179B-25BD-4AF6-9ED1-1C0B4439A726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7A7D8F-0669-42D0-A7F8-447E05EB5F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A2049F-CAEC-47A5-9C22-0295B08CAA51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DF0BF3-2284-488D-8C62-DB9766445556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:9.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B1AF41-963E-470C-9EC3-4ECD49EB1BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2009-003",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503226/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34820",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2009-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503226/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-05T20:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server before 9.4.2 makes it easier for remote attackers to trick a user into disclosing credentials via CRLF sequences preceding a Reply-To header in the subject element of an XML document, as demonstrated by triggering an e-mail message from the server that contains a user's correct credentials, and requests that the user compose a reply that includes this message."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección CRLF en la implementación Forgot Password en server/webmail.php en IceWarp eMail Server y WebMail Server anterior a v9.4.2 hace mas facil para atacantes remotos engañar a un usuario para la revelación de credenciales a través de secuencias CRLF precediendo una cabecera de respuesta en el elemento \"subject\" de un documento XML, como se demostró mediante el envío de un mensaje de correo electrónico que contenga las credenciales de usuario desde el servidor, las peticiones para componer la respuesta al usuario, incluyen este mensaje."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.3.0",
            "matchCriteriaId" : "6EC05573-9E95-4E38-9BB7-8EEC2207F93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65413C6D-2477-46BE-A9E0-DFEBFA4984B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D626E83E-B8D2-488C-86A1-E9EEE26338AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC20926-AA4F-411B-AC96-F411E7A00ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B4CF45-C28E-4F9B-8593-FC3227FD3B5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB40BD9-01B0-43A8-B382-6AF471D4E5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.165:*:*:*:*:*:*:*",
            "matchCriteriaId" : "273ACE18-425A-42F4-A1C4-A729E61C06D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A049A822-9A1D-4A67-B3C7-87F37CE14966"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.190:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6A3368-1C9F-404C-B22C-5BA19F8C89DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421C0DFF-83B4-494F-B56F-80FCB7465383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD09ABFB-431C-4F81-8B75-1E310FF1DEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.220:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D46E21-2A13-4378-B9D9-77B75C574053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.240:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5637C09C-F43E-41DB-A8C1-AE08DEC5E07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.250:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F1E0EB6-D30B-4448-A61D-79F3720ED199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.260:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB1408C-6076-45C4-8532-41B946E9F2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.280:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64040FAE-3457-4153-84F5-DB4C0F298DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.290:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53883B0E-662C-41E6-B0E4-44052243B8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.310:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659D6D8F-6E4F-4961-88D8-93AEBBBACA2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.320:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5CD4B14-457C-493B-8206-63AC78C677BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.330:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD881C18-E67E-431D-BF64-E9AD74B623B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.331:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9498A897-FC1E-42F7-A766-F2F3F3AD73DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.340:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86FD3A63-6985-4557-BCBF-A6C3C62965C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C730232-BE10-485B-B7E6-C7221FF830CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:2.10.360:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75BCAB2F-D3DC-446C-B260-E6528D424574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.00.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7517B62B-E8BD-46BE-8876-210AF4BBCFEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.00.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380A25A3-84E8-4660-8E1E-D9F86CCDF451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.00.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F811823-8E74-4940-82BF-0BB874A2EDAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.00.130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D881063-B61C-4C8D-BA5B-C924968284C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.00.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA4F4994-9B1C-4975-80A0-48CFC8A59F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.10.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC092BCB-C03D-489A-8169-A78672DDAC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:3.10.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82BCBCDB-1C96-4AD9-9BD5-6C6F28B0A59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.00.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377D2092-82CD-4BE5-92CB-1B6970C9B343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5637CE33-3C19-4BF5-9768-B680FC16DD75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27100290-294C-4938-9E31-5E4EC1CC0DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257EF71D-D21C-42D6-B799-0CDE4D48D8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "885DC4F5-0809-4BD0-8EB9-26B6F7AC5D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772781AF-D898-41E0-94CA-5E4E68263B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.10.040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8458C9-BB0B-450A-906E-982183D2D112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:4.10.050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E554A0-B31E-42EC-AC96-02928324D8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516EB69D-9AA3-4E39-8902-54F1BE74FF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAAD90B-2109-4EA8-B6E9-6DC097E46BB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66CFCE9-52A8-4F40-A256-A4246B9A0345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20CB84F9-D621-4C76-B7FD-7CBE9126C7C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F5651E-AFC4-4ED5-89A3-4FFF17849892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F9E8EF6-6EDA-4204-A9BE-9F0A1FA67F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B52C4762-F008-4A95-9DB2-0187C918D2D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7D1390-BB52-4E73-9D53-AC7C890273FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D2E155-E79B-4F92-8150-49385D9ED683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7243D261-9880-4FC1-A709-B270D451819C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA1EEB6-F96D-4CB4-B19B-FE298A7106CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D65F51-8021-47C5-A587-AC1F08A690E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E5E64D-EBF3-44AA-A986-B3A668CA84FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E436882C-626F-44E0-92C1-AB42679DB36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A838F48D-65D4-4D0A-AD70-770E564C414F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528BA85A-A479-4AE5-AE58-4F223EC70CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4DFEC2-E095-4670-A87D-9686FFBACE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE29A7F9-B10D-43DE-ACF9-82799A5AB622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1CE47F-2420-455E-8D59-9115F8553786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9479F83D-4C9B-4E09-8173-FEF3D648D173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:5.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78426705-364D-44A8-9D11-52FA221501F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5E9BC-1925-4109-88CA-BDDA2760A410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34006ADE-3045-4730-9905-F2739F03B37F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C43E85-FCD9-4C27-9D0F-FDBD6C6BE11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BE6199-BDF4-492F-AD3F-8F228B3333D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD60C3BF-BFA2-48DE-BFF8-862BEB55DC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59FE641-F8C2-4499-A68F-4C7B67446B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCB7BC6-8B20-4BA0-A228-FFA64B9D2679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F0B2E0-74A3-40B7-AF4E-547401ABF7A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A59BCD-74B9-4E7F-A79A-293E75ED1457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6AFCD42-008D-47C3-B91F-CDBF753B4DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5318A0-2F46-483C-B4C1-DE5E78E2B206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5203E03-7810-4FBD-BC29-85D4FC0C44F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A978E8-6F27-4FAA-9B1C-EAD110F3A626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB831B3-D03A-4597-9DA0-0C1101751A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E0046D-0F36-4882-BF2E-0C54A6DAF3E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:7.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6628764-234B-4B2F-BB96-BC502781D900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "534C2A48-DC12-41D1-A848-5826D8D00A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E40169-02AC-4F18-B085-58B16073CDF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F92171-ACF9-49F7-88FA-662FE6EC05E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C4E23C-34D9-4655-9FEF-E99D94BFCBCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C585DB99-2778-473C-9D20-5B707C12E961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7888DF8-A12C-4583-A4A1-8FD77F258BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39616720-7128-4364-A376-4F272DE6052E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D109C95C-E55B-4E26-818D-1F6A5EF879FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:8.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23876D5-6BD5-446A-A8B8-EFF5293E2C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9142EEFA-753E-4CB2-97E0-644EF942E149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90B14DCB-3070-4A68-AE00-4004542739C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:email_server:9.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C3C5AF-13AE-482C-ACE8-8E9EA2A104E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.3.0",
            "matchCriteriaId" : "8BE0C1F2-E9EB-441F-BA29-26F8AE5CD53C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B825E8AC-E3E0-4D6F-AEB1-1C8571F42B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B629D1A8-4D8A-4814-B88F-D26DE0A8AD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "626E5CBB-A953-4D6C-9AA3-BD8FC44AC310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00D854B-D34B-41BD-9B28-573B0A66FF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF300F62-E247-4A6F-89B1-F27CD22D2AFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.165:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE9F5609-2C2B-4D57-974F-E4AA7A1354F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.170:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69EE8E28-E95B-48F9-87BF-9A6A713C614B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.190:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60BE3477-86AF-4301-905C-B2D41347C95D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23CED09C-9C1F-4E98-87E4-FF1AF3FDB3EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A67BBF-D7D2-4780-BB52-6247B1C2BF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.220:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11F50DDD-14C5-430C-BA64-39DBF86C8195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.240:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48D0885-9A43-41CF-97F5-DEE654DEB4FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.250:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36F5040-A148-4D41-AEDE-E2031FC0783A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.260:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D444E7-8533-49C9-BEA5-95B1867D5B20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.280:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9FE52B-976E-45D5-9F72-0DA02A549283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.290:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07F2597-CBEB-4CF4-853B-432C90A0E5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.310:*:*:*:*:*:*:*",
            "matchCriteriaId" : "000C3F0B-5083-4E2A-9C3B-A3BBD8F5FC78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.320:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C2E1F50-0C4F-49BD-837B-E0A6AA897F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.330:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D7527FB-5E18-4E25-A344-6FF3AD48F440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.331:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA4C32D2-A4D3-4D1D-8C40-A19E71D2CD8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.340:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D96B83F5-78EF-46C7-AEF3-B07DC47AD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.350:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E812EF7-F33C-4A9E-B21C-9E713EAA5DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:2.10.360:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3313DDB5-AB69-4FC6-B404-7161DFD42065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.00.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC5A2472-E80B-453E-AC87-61755089F816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.00.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE775DD-1332-4DBD-B43E-82DEDF65EDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.00.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81AACBDC-A27F-42E9-9503-BEAE6277C38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.00.130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "994FED3B-18B0-43CD-AF69-71363EB69A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.00.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C1006A-9BA2-4E2E-934A-E6D84FE31F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.10.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251150DB-9F36-4024-83E5-CCB61788D591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:3.10.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E018C4E-3442-43DF-A62C-8EF32F582376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.00.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E5C940-3411-4298-AF22-4E0CD0897068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40084349-0248-4DCA-84FF-BAFC61913B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E67D777-B1EE-467C-A9F6-3FE3AC602BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9BA513-7DFF-4DA5-A850-1932332AB713"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B44F9B-36F5-42A5-8007-F4437C5956FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D9460D-8004-4C48-8435-5BB55E18407F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.10.040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D37D32E-49FF-48AE-AB1D-5F83FB4ABC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:4.10.050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549C6763-6BAC-418D-801E-BA219BA84306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C15656-8A36-446F-B72E-B5D8D02118C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F6586C-A227-4ABA-BBCD-7608BC3AE986"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35887E35-7075-4DA7-9DA0-43784E83E523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C96A0CF4-4646-42C2-A2D1-D143307AA075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4587B57E-E5CF-46F7-914C-3E3FF62ABF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F92BC1B-439E-497E-AE9A-0962C665EA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2245DA60-68D3-4FF0-9E22-EE469BFDCA51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF984C80-8F2A-444E-8176-AF4207659443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "998D7471-D097-40FF-9749-D1F1F540676C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B349E3F2-5D93-4448-B901-5A51682A095D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "426A5CA3-5AF9-409F-8CC5-8B012F9B4D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB35A154-98E1-4EF7-9B5A-1691023E69AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C34887E6-AB33-48C1-BD0A-015C141498C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CDBBC7-EEF8-40A4-B32D-528370E85361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E324B02-9C59-44D8-AC8A-899130501C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "144BFD52-D569-42B1-BBBA-BA6F3B41C0D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D3B6E6-8B47-4790-9293-254A446256AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0899F9-F7FC-459A-BF39-A2590F4C948A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1571098-025D-4F9E-9F5B-8CF4E47CB0A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC9A8D1-95F8-41F1-B282-548B654AC024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:5.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A7C86B-1F63-492E-BDBF-3AD1F27F3ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF58F47-FBA0-472F-84B2-37C40AE9F11E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D208182-D571-4756-953B-84647B7C30DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC5EF5A-FB10-4362-BF83-F2D399677C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6375DB-EAD9-40DB-ABC8-9ED47937335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1465311E-9F28-4D02-87A1-8262F0E91363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4565A0-4CB2-4BB8-8747-88C2E1DB04BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8111EB25-993B-40D4-9A3F-B0A379FF2544"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3932C58-3E6B-4CE8-AD86-5258C657B9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E884468-C200-4994-8073-A06145DD32EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA8B9FC-58C3-4CDB-B3C9-DCE3FC6DD071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F1065B-3CCB-4690-9623-948AE5480388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A195789-BE60-41D0-A09F-297C481E1741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EA6D4D-4818-4B90-A431-F5DB4AEEAC84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC60DE-9C65-48C8-B9F9-CBB99D6E6EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D72538A-63D7-4714-819F-D84E23A477C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:7.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C48479D4-85A4-471C-BBE3-95EC7ED42551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17670892-BDEB-435D-92A8-4D362FB48235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0233108-DAE6-42A5-B525-6D8F91298183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FCFDA77-070C-42E6-897C-DB4CA6FDD0E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5090C955-3E5A-4CDF-A2B2-EF5A181BE4FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D199BC-D664-48A8-8D0C-5496C5DFF8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6327BC-34F7-46E9-ABB3-9FA8B9C5F684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93FD709-6918-4F00-8C90-416F0E4208DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A9179B-25BD-4AF6-9ED1-1C0B4439A726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:8.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7A7D8F-0669-42D0-A7F8-447E05EB5F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A2049F-CAEC-47A5-9C22-0295B08CAA51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DF0BF3-2284-488D-8C62-DB9766445556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:webmail_server:9.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B1AF41-963E-470C-9EC3-4ECD49EB1BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2009-004",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503227/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2009-004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503227/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-05T20:30:00.280",
      "lastModified" : "2025-12-16T21:04:43.900",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter during a restore action."
      }, {
        "lang" : "es",
        "value" : "CMD_DB en JBMC Software DirectAdmin anterior a v1.334 permite a usuarios remotos autenticados conseguir privilegios a través de metacaracteres del interprete de comandos en el parámetro \"name\" durante una acción \"restore\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:directadmin:directadmin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.33.4",
            "matchCriteriaId" : "A460BFF8-D494-41FB-950E-F74A37A81D36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/54015",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34861",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.directadmin.com/features.php?id=968",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "Release Notes" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50167",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/54015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.directadmin.com/features.php?id=968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "Release Notes" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-05T20:30:00.297",
      "lastModified" : "2025-12-16T21:05:20.883",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this temporary file in the PATH_INFO to the CMD_DB script during a backup action."
      }, {
        "lang" : "es",
        "value" : "JBMC Software DirectAdmin anterior a v1.334 permite a usuarios locales crear o sobreescribir cualquier fichero a través de un ataque de enlace simbólico en un directorio temporal concreto, relacionada con una petición para ese fichero temporal en PATH_INFO en la secuencia de comandos CMD_DB durante una acción de copia de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:directadmin:directadmin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.33.4",
            "matchCriteriaId" : "A460BFF8-D494-41FB-950E-F74A37A81D36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/54014",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34861",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.directadmin.com/features.php?id=968",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "Release Notes" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/54014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/34861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.directadmin.com/features.php?id=968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-05T20:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the ptrace_attach function in kernel/ptrace.c in the Linux kernel before 2.6.30-rc4 allows local users to gain privileges via a PTRACE_ATTACH ptrace call during an exec system call that is launching a setuid application, related to locking an incorrect cred_exec_mutex object."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en la función ptrace_attach en kernel/ptrace.c en el kernel de Linux anterior a 2.6.40-rc4 permite a usuarios locales conseguir privilegios a través de la llamada PTRACE_ATTACH ptrace durante una ejecución de sistema que esta lanzando una aplicacion setuid, relacionada con el incorrecto bloqueo del objeto cred_exec_mutex."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.29",
            "matchCriteriaId" : "3871E973-1DCE-4C2D-8FF0-9330AF928297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:-:*:*:*:*:*:*",
            "matchCriteriaId" : "77B40D2B-9AAA-49A4-9C74-7A94A82DBCCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "45273823-29EA-44DE-8444-3933402C5793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "88F60E74-09DB-4D4A-B922-4A46EED0EC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E242D3DE-D1DC-406A-BCC3-C4380B7EC369"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cad81bc2529ab8c62b6fdc83a1c0c7f4a87209eb",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34977",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35120",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0084",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc4",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/04/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54188",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503610/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34799",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1236",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50293",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cad81bc2529ab8c62b6fdc83a1c0c7f4a87209eb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/04/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503610/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5, or Red Hat Enterprise MRG.",
        "lastModified" : "2009-05-06T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T15:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in BluSky CMS allows remote attackers to execute arbitrary SQL commands via the news_id parameter in a read action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en BluSky CMS, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"news_id\" en una acción \"read\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qsix:blusky_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FABBD6-13ED-4E11-A6A8-CD81A8F79CA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T15:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AGTC MyShop 3.2b allows remote attackers to bypass authentication and obtain administrative access setting the log_accept cookie to \"correcto.\""
      }, {
        "lang" : "es",
        "value" : "AGTC MyShop v3.2b, permite a atacantes remotos evitar la autenticación y obtener acceso como administrador estableciendo la cookie log_accept a \"correcto\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agtc:agtc_myshop:3.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EA7E30B-7EF2-4A19-BA2C-6F2A81844258"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T15:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zakkis Technology ABC Advertise 1.0 does not properly restrict access to admin.inc.php, which allows remote attackers to obtain the administrator login name and password via a direct request."
      }, {
        "lang" : "es",
        "value" : "Zakkis Technology ABC Advertise v1.0 no restringe adecuadamente el archivo admin.inc.php, lo que permite a atacantes remotos obtener el login y contraseña de administrador a través de una petición directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zakkis:abc_advertise:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C4C8E4-9D12-44D5-B68C-A2BD71DB81F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T15:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Qt quickteam 2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) qte_web_path parameter to qte_web.php and the (2) qte_root parameter to bin/qte_init.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de fichero PHP en Qt quickteam v2, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en los parámetros (1) qte_web_path a qte_web.php y  (2) qte_root parameter y bin/qte_init.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt-cute:quickteam:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FBE06A-57A5-41A4-82FC-FC6F11486D4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T15:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the IGMP driver in SCO Unixware Release 7.1.4 Maintenance Pack 4 allows attackers to cause a denial of service (system panic) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el controlador IGMP en SCO Unixware Release v7.1.4 Maintenance Pack 4, permite a atacantes remotos provocar una denegación de servicio (error irrecuperable del sistema) a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:unixware:7.1.4:mp4:*:*:*:*:*:*",
            "matchCriteriaId" : "26CAE535-EADD-49E9-8B64-4A4335FA8BEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/unixware7/714/security/p535283/p535283.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34951",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34781",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/unixware7/714/security/p535283/p535283.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T16:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) applications/applications.jsf, (2) configuration/configuration.jsf, (3) customMBeans/customMBeans.jsf, (4) resourceNode/resources.jsf, (5) sysnet/registration.jsf, or (6) webService/webServicesGeneral.jsf; or the name parameter to (7) configuration/auditModuleEdit.jsf, (8) configuration/httpListenerEdit.jsf, or (9) resourceNode/jdbcResourceEdit.jsf."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Admin Console en Sun GlassFish Enterprise Server  v2.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de una consulta a (1) applications/applications.jsf, (2) configuration/configuration.jsf, (3) customMBeans/customMBeans.jsf, (4) resourceNode/resources.jsf, (5) sysnet/registration.jsf, o (6) webService/webServicesGeneral.jsf; o del parámetro \"name\" a (7) configuration/auditModuleEdit.jsf, (8) configuration/httpListenerEdit.jsf, or (9) resourceNode/jdbcResourceEdit.jsf."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBDD6781-CF9E-4ED3-861F-99217EE0711C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=134",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN73653977/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000027.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-258528-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nabble.com/-DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p22595435.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nabble.com/Re:--DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p23002524.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503236/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34824",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29668",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29669",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29675",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN73653977/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-258528-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nabble.com/-DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p22595435.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nabble.com/Re:--DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p23002524.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503236/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T16:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ThemeServlet.java in Sun Woodstock 4.2, as used in Sun GlassFish Enterprise Server and other products, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 string in the PATH_INFO, which is displayed on the 404 error page, as demonstrated by the PATH_INFO to theme/META-INF."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en ThemeServlet.java in Sun Woodstock v4.2 usado  en Sun GlassFish Enterprise Server y otros productos, permite a atacantes remotos inyectar secuencias de comandos web  o HTML de su elección a través de una cadena UTF-7 en PATH_INFO, lo que muestra un error 404 en la página web, como se ha demostrado mediante PATH_INFO a theme/META-INF."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772D2025-C240-45A5-9B55-2B7F5331444D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:1.0:ur1:*:*:*:*:*:*",
            "matchCriteriaId" : "3152B8B7-3B48-492A-8A9E-3DD6638679EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:1.0:ur1_po1:*:*:*:*:*:*",
            "matchCriteriaId" : "CAFDA3BE-54A3-49F3-ABF1-76437AD2DBB6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6AD5FD-8A44-4184-B5F5-9FC0DF24B475"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBDD6781-CF9E-4ED3-861F-99217EE0711C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E80F5AC-A2EF-4D8A-AE8F-5DD0FF9B48C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2813A2-A847-45F5-80C9-95E1D82C36FD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AAEB5-E5A5-44A4-8B82-0C465122F2C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:woodstock:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4A1DA0-F06A-4A61-BADF-1840AB440D55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=138",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/54220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nabble.com/-DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p22595435.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nabble.com/Re:--DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p23002524.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503239/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34829",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://woodstock.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=4041",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/54220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nabble.com/-DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p22595435.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nabble.com/Re:--DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p23002524.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503239/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://woodstock.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=4041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T16:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 sends configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by reading the SetupWizard.exe process memory, a related issue to CVE-2008-4390."
      }, {
        "lang" : "es",
        "value" : "La video cámara inalámbrica  Cisco Linksys WVC54GCA con firmware v1.00R22  y v1.00R24,  envía los datos de configuración en respuesta al comando Setup Wizard remote-management, lo que permite a atacantes remotos obtener información sensible como contraseñas leyendo el proceso en memoria SetupWizard.exe. Cuestión relacionada con el CVE-2008-4390."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B11DD9-A05C-4209-8EEF-60330E2B31DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wvc54gca:1.00r24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EFFA763-8152-4085-A6EE-73F313676289"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34767",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1173",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T16:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "img/main.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote authenticated users to read arbitrary files in img/ via a filename in the next_file parameter, as demonstrated by reading .htpasswd to obtain the admin password, a different vulnerability than CVE-2004-2507."
      }, {
        "lang" : "es",
        "value" : "img/main.cgi en la video cámara inalámbrica  Cisco Linksys WVC54GCA con firmware v1.00R22  y v1.00R24, permite a usuarios autenticados remotamente leer archivos de su elección en img/ a través de un nombre de archivo en el parámetro \"next_file\", como se ha demostrado mediante la lectura de .htpasswd para obtener la contraseña de administrador. Una vulnerabilidad distinta de CVE-2004-2507."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B11DD9-A05C-4209-8EEF-60330E2B31DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wvc54gca:1.00r24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EFFA763-8152-4085-A6EE-73F313676289"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34767",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1173",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T16:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allow remote attackers to inject arbitrary web script or HTML via the next_file parameter to (1) main.cgi, (2) img/main.cgi, or (3) adm/file.cgi; or (4) the this_file parameter to adm/file.cgi."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados  en la video cámara inalámbrica  Cisco Linksys WVC54GCA con firmware v1.00R22  y v1.00R24, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"next_file\" a (1) main.cgi, (2) img/main.cgi, o (3) adm/file.cgi; o (4) el parámetro \"this_file\" a adm/file.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B11DD9-A05C-4209-8EEF-60330E2B31DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wvc54gca:1.00r24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EFFA763-8152-4085-A6EE-73F313676289"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34767",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1173",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T16:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote attackers to read arbitrary files via a %2e. (encoded dot dot) or an absolute pathname in the next_file parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en adm/file.cgi en la video cámara inalámbrica  Cisco Linksys WVC54GCA con firmware v1.00R22  y v1.00R24, permite a atacantes remotos leer ficheros de su elección a través de %2e. (codificación de \"..\") o sobre un nombre absoluto de ruta en el parámetro \"next_file\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B11DD9-A05C-4209-8EEF-60330E2B31DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wvc54gca:1.00r24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EFFA763-8152-4085-A6EE-73F313676289"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34713",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1173",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T16:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R24 and possibly 1.00R22 allows remote attackers to read arbitrary files via an absolute pathname in the this_file parameter.  NOTE: traversal via a .. (dot dot) is probably also possible."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio absoluto en adm/file.cgi en la video cámara inalámbrica  Cisco Linksys WVC54GCA con firmware v1.00R24 y posiblemente v1.00R22, permite a atacantes remoto leer archivos de su elección a través de una ruta absoluta en el parámetro \"this_file\". NOTA: es posible que el salto de directorio se pueda realizar a través de la secuencia .. (punto punto)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B11DD9-A05C-4209-8EEF-60330E2B31DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wvc54gca:1.00r24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EFFA763-8152-4085-A6EE-73F313676289"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1173",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T16:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 stores passwords and wireless-network keys in cleartext in (1) pass_wd.htm and (2) Wsecurity.htm, which allows remote attackers to obtain sensitive information by reading the HTML source code."
      }, {
        "lang" : "es",
        "value" : "La video cámara inalámbrica  Cisco Linksys WVC54GCA con firmware  v1.00R22 y v1.00R24 almacena las contraseñas y las claves de red inalámbricas en texto plano en (1) pass_wd.htm y (2) Wsecurity.htm, lo que permite a atacantes remotos obtener información sensible leyendo el código fuente HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wvc54gc:1.00r22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C69CAF-596D-4DB4-95B6-842B3C7277F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wvc54gc:1.00r24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED0FC7A-A6BD-4708-A6D0-D82C1FE1596D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1173",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T16:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware 1.05.7 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that change the administrator password via the sysPasswd and sysConfirmPasswd parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSFR) en administration.cgi  en el router  Cisco Linksys WRT54GC con firmware v1.05.7, permite a atacantes remotos secuestrar la conectividad de la intranet de usuarios de su elección para peticiones que modifican la contraseña de administrador a través de los parámetros \"sysPasswd\" y \"sysConfirmPasswd\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wrt54gc:1.05.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D5B1F5-59CF-469F-B889-A802E6262341"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-04/0198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0904-exploits/linksysadmin-passwd.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34805",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.falandodeseguranca.com/?p=17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34616",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1172",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-04/0198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0904-exploits/linksysadmin-passwd.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.falandodeseguranca.com/?p=17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T17:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error."
      }, {
        "lang" : "es",
        "value" : "El  demonio BGP (bgpd) in Quagga v0.99.11 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) a través de una ruta AS que contiene elementos ASN cuya representación de cadena es mayor que la esperada, lo que provoca un error de aserción."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.99.11",
            "matchCriteriaId" : "D0ADB352-4A60-4B8E-A231-7498E0EE1A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7A8AD5-A315-4242-960C-05E792B30547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B83BCE2-24D0-4B5B-A034-62BFF1894AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.96.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDD63DD9-1809-4CEC-AB69-955A7B127CA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.96.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2AD1AD-DDE2-477B-8EFD-767B6FD8EDBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.96.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99BD881B-9B53-4E12-B083-87C9C87CDF62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.96.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F910313F-FFE1-470A-A9B6-8A854C73DC97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.96.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B0A9232-968D-4D3E-82A0-F5CC858EAF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.97.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5F4CFB-BE1F-4424-8D2F-B921704E3AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.97.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A55FF13-8E56-4A27-B7FD-A855735E1045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.97.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DDBC3B-99BB-4404-9A73-90ED6581D69A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.97.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB09A713-E91E-44E7-8B82-F70F655A97B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.97.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10173750-690B-4576-AB3F-11A0861AA78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.97.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF8693A-D561-4D2E-BD60-5630601C6A94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.98.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE43983A-73CB-41A5-889B-1AEA9A27F440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.98.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB589E9-85C0-4E87-856B-A2832383B129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.98.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CF5EB8A-8E46-4490-BA88-03D4BED3EB84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.98.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6445BEF-245C-47CE-9779-96C97CFD4DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.98.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48D007FD-C1AD-477E-9AA5-DDB4522D3248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.98.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6ADB9F6-B519-45D0-966F-F095372FBB49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.98.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E914BAF-2E3A-415E-BAA7-FA02B4A22E25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55FCB7EC-8060-434B-B485-0DC7DBFE117D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9524E069-2A80-4068-9945-2752EF2126EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E1B30CC-478C-4BD1-AF4C-D126B8CCE8D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.99.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D713119-F9C6-4656-92C9-A5B863A4B72F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5E99C8-3778-416B-915F-7335C72435B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.99.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578DCE6D-3360-43DA-B22E-E0005A6AF388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.99.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D7B93B-0CF5-4CAF-B1F4-8A816A427BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.99.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDAF214-1851-4DFC-ACAA-37D8CD83D323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.99.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B41BBCA6-237B-4CB6-9208-571D47251E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.99.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD6CAB29-56F9-4C54-97D8-CBB338658EB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526311",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=quagga-dev&m=123364779626078&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34999",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35061",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35203",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://thread.gmane.org/gmane.network.quagga.devel/6513",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1788",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/01/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/01/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/54200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-775-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01037.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01107.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=quagga-dev&m=123364779626078&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://thread.gmane.org/gmane.network.quagga.devel/6513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/01/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/01/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/54200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-775-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01107.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of zebra as shipped with Red Hat Enterprise Linux 2.1, and the versions of quagga as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
        "lastModified" : "2009-05-18T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T17:30:09.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain privileges by listing the process and its arguments."
      }, {
        "lang" : "es",
        "value" : "xvfb-run v1.6.1 en Debian GNU/Linux, Ubuntu, Fedora 10 y posiblemente otros sistemas operativos, ubican la magic cookie (MCOOKIE) en la línea de comandos, lo que permite a usuarios locales obtener privilegios listando los procesos y sus argumentos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C8919F1-CD33-437E-9627-69352B276BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA70E035-8475-4046-ABD7-5AE59F874EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BB6CD8-43ED-4998-8D68-6934B93EA833"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:branden_robinson:xvfb-run:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4D5938-DC01-4CA6-A493-A34FB2EEEA14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526678",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/05/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/05/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-939-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/05/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/05/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-939-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T17:30:09.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "racoon/isakmp_frag.c en ipsec-tools anterior a v0.7.2, permite a atacantes remotos provocar una denegación de servicio (caída) a través de paquetes fragmentados sin carga, que lanza un deferencia a puntero NULL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.1",
            "matchCriteriaId" : "BE498F5F-16FD-476B-8C6B-44F511A1EB22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B6F6FD-EC31-4C7E-9DA5-6F09185BCB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7562F975-4035-44A7-94C1-C2AC45EF7202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00684A2E-376D-41C0-99A2-37114002CBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D0B23A-CE0B-45B2-A077-86F70F5BFBB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF3626E-39A4-4DFA-BD87-9E8A884B49FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC97B47-AC72-4CFB-B088-F92C9B9918A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADAAFB6A-A22F-4539-8B12-AD5BE5829208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C23DEC80-8884-4C8E-92FD-7C8B5D7430E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C63A048D-DA8F-495F-AF07-137A1777329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "33C0E99B-AA38-4A22-90C7-41C7B49E762B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "BBF6E87C-3A10-443C-8F5A-5B51F3F888AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBFDCE2-FFF4-4A22-94E9-40115663CC97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BC2543-F91E-40A0-AF3D-47A8EC7A5FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B05AF4-3F58-439D-BADD-C9758C4BBA0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB016E3-49FE-4ADF-8D4A-479D0D1C5AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EA2BBE-4871-429C-A1A9-C956C0467804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1FFEBAAB-5991-480E-985D-064A2FECFD34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5630CFB-58BF-4B58-90AB-B44793D91FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF78AECE-073F-4CDE-B988-47E72637C6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0740E4E3-9888-48E2-B7A3-CF8376FBA90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89CEEF7-3EE3-4CAA-92DC-C7D2E9376EE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02E57AC3-9656-4830-84E4-6972AC8D5012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85EF4DB2-4D4C-42F0-85E4-4FF39EB0019E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC5FD67-B39E-4262-A48C-1F87E401C2B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD877C6-CBFE-483E-B556-56FCDA1BFC15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-03.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=74601&release_id=677611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT4298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/29/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/04/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1036.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-785-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=497990",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00725.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00746.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00789.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=74601&release_id=677611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/29/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/04/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-785-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=497990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00725.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00746.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00789.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T17:30:09.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows remote attackers to inject arbitrary web script or HTML via crafted UTF-8 byte sequences before the Content-Type meta tag, which are treated as UTF-7 by Internet Explorer 6 and 7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Drupal v5.x anterior a v5.17 y v6.x anterior a v6.11, usado en vbDrupal anterior a v5.17.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de secuencias con bytes UTF-8 previas a los meta tags Content-Type que se tratan como UTF-7 en Internet Explorer 6 y 7."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "45BE66AB-3491-42CB-8594-AB041D15EA23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F6334858-DF62-467A-9126-6F0AD32D325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A677D3A4-F15C-4287-94B3-4CAADA4679D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "24DAB8DE-2459-484C-88B5-9812CFBDC60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.1_rev1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BF63E1-FB1A-4D76-BF0D-F07267127504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF34F79B-6B1B-45CA-82BA-24D4254B26DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4C5857-3690-4D74-B135-B6AB7E766FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC12E03-C4B0-4B2F-B70B-0EB19C450AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.5.:*:*:*:*:*:*:*",
            "matchCriteriaId" : "698B4A81-4A20-4BD8-B0E5-3335B7DC190C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD50E551-7609-45EF-B2C6-3873D9CF8DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327712EE-8E9B-4A62-94A8-504C9CD2DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4FC56B-0289-411C-88BF-144D7338D456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3ECEA7-E6D3-43E8-A281-56C7F95A0B7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE4DF7-6884-49BA-99D0-FCAE6DB75242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7287CD-A5FB-4428-8656-F466A8E47463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2860C3D-CB93-4355-882E-BF8B7A23CB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD400243-3FFE-457C-A977-6688D9181FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2686FD-9643-4B8A-A8BF-C67120E44A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F851EC4-6148-4C13-890F-8260D4DF5A1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30282489-9168-4F7E-8465-1FE6521056B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B892365-3060-4065-B887-B41820339AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB79C70-36C8-4F89-88DD-A071FB2F942A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE07AAD-9207-4C5F-A108-7F7753E4F48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D4149703-F7BB-4513-9379-992C089532D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "FCBC7BB8-2B50-476D-BD96-C968F105CE10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "550778E2-BEE5-403D-8744-0B18C5D3AFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "31B9F954-3A10-4378-A842-4061E97056DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:rc-1:*:*:*:*:*:*",
            "matchCriteriaId" : "7954FAA5-0455-407F-B16F-CB1FD24F9FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:rc-2:*:*:*:*:*:*",
            "matchCriteriaId" : "B254CD4E-51A2-4E8D-9B59-FA5610F76683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:rc-3:*:*:*:*:*:*",
            "matchCriteriaId" : "A4DF0926-E487-4F3B-B85B-2690127FE1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:rc-4:*:*:*:*:*:*",
            "matchCriteriaId" : "D05C77D9-E816-41A6-80DB-F4815980A83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D8F291-CBEB-4EAA-9388-F63066A2DFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D76BC5-0409-4D78-8064-A78B923E9167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB73B2E1-2554-4CA2-9C82-B694509CE43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7827ED-D8AF-42B3-B514-39A04EB0879A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F491DE31-8DBB-4F4E-8798-F82DC855D08F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADEA9E5-10EB-4AB4-BD90-1F64A15708AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D0A167-BE47-4E4E-8467-0AD2F38A3431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7CBB558-D5A3-4D68-9C62-D1D521BCFEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D25FA1-2F31-40DB-AD54-DB233E060B0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/449078",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34948",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34950",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/54152",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vbdrupal.org/forum/showthread.php?p=9953#post9953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1216",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00108.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00133.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/449078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/54152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vbdrupal.org/forum/showthread.php?p=9953#post9953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00108.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00133.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-06T17:30:09.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows user-assisted remote attackers to obtain sensitive information by tricking victims into visiting the front page of the site with a crafted URL and causing form data to be sent to an attacker-controlled site, possibly related to multiple / (slash) characters that are not properly handled by includes/bootstrap.inc, as demonstrated using the search box.  NOTE: this vulnerability can be leveraged to conduct cross-site request forgery (CSRF) attacks."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Drupal 5.x anterior a v5.17 y v6.x anterior a v6.11, usado en  vbDrupal anterior a v5.17.0, permite a atacantes remotos asistidos por el usuario obtener información sensible engañando a las víctimas para que visiten la página de inicio a través de una URL manipulada y provocando que los datos de los formularios sean enviados a un sitio controlado por el atacante. Posiblemente relacionado con múltiples caracteres \"/\" (Slash) que no son manejados adecuadamente  por includes/bootstrap.inc como ha sido demostrado usando el formulario de búsqueda. NOTA: esta vulnerabilidad puede ser aprovechada para llevar a cabo ataques de falsificación de petición en sitios cruzados (CSFR)"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "45BE66AB-3491-42CB-8594-AB041D15EA23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F6334858-DF62-467A-9126-6F0AD32D325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A677D3A4-F15C-4287-94B3-4CAADA4679D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "24DAB8DE-2459-484C-88B5-9812CFBDC60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.1_rev1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BF63E1-FB1A-4D76-BF0D-F07267127504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE4DF7-6884-49BA-99D0-FCAE6DB75242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7287CD-A5FB-4428-8656-F466A8E47463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2860C3D-CB93-4355-882E-BF8B7A23CB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD400243-3FFE-457C-A977-6688D9181FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2686FD-9643-4B8A-A8BF-C67120E44A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F851EC4-6148-4C13-890F-8260D4DF5A1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30282489-9168-4F7E-8465-1FE6521056B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D4149703-F7BB-4513-9379-992C089532D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "FCBC7BB8-2B50-476D-BD96-C968F105CE10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "550778E2-BEE5-403D-8744-0B18C5D3AFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "31B9F954-3A10-4378-A842-4061E97056DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:rc-1:*:*:*:*:*:*",
            "matchCriteriaId" : "7954FAA5-0455-407F-B16F-CB1FD24F9FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:rc-2:*:*:*:*:*:*",
            "matchCriteriaId" : "B254CD4E-51A2-4E8D-9B59-FA5610F76683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:rc-3:*:*:*:*:*:*",
            "matchCriteriaId" : "A4DF0926-E487-4F3B-B85B-2690127FE1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:rc-4:*:*:*:*:*:*",
            "matchCriteriaId" : "D05C77D9-E816-41A6-80DB-F4815980A83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D8F291-CBEB-4EAA-9388-F63066A2DFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D76BC5-0409-4D78-8064-A78B923E9167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB73B2E1-2554-4CA2-9C82-B694509CE43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7827ED-D8AF-42B3-B514-39A04EB0879A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F491DE31-8DBB-4F4E-8798-F82DC855D08F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADEA9E5-10EB-4AB4-BD90-1F64A15708AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D0A167-BE47-4E4E-8467-0AD2F38A3431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7CBB558-D5A3-4D68-9C62-D1D521BCFEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D25FA1-2F31-40DB-AD54-DB233E060B0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/files/sa-core-2009-005/SA-CORE-2009-005-5.16.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/449078",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34948",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34950",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/54153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vbdrupal.org/forum/showthread.php?p=9953#post9953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1216",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00108.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00133.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/files/sa-core-2009-005/SA-CORE-2009-005-5.16.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/449078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/54153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vbdrupal.org/forum/showthread.php?p=9953#post9953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00108.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00133.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-07T17:30:04.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the ParamTraits<SkBitmap>::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región heap de la memoria en la función ParamTraits(SkBitmap)::Read en Chrome de Google anterior a versión 1.0.154.64, permite a los atacantes aprovechar el acceso al renderizador para causar una denegación de servicio (bloqueo de aplicación) o posiblemente ejecutar código arbitrario por medio de vectores relacionados con un mapa de bits grande que llega por medio del canal IPC."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.154.53",
            "matchCriteriaId" : "22A411BE-895D-4D8F-B14B-AAEB3112F9F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8FF77A-7802-4963-B532-3F16C7BB012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73576CF-76EE-42A3-9955-D7991384B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=10869",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35014",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1266",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=10869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-07T17:30:04.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted (1) image or (2) canvas."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbodamientos de enteros en Skia, utilizado en Google Chrome v1.x anteriores a v1.0.154.64 y v2.x, y posiblemente Android, debería permitir a los atacantes remotos ejecutar arbitrariamente código en el proceso de renderizado a través de (1) imagenes o (2) canvas manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.154.53",
            "matchCriteriaId" : "22A411BE-895D-4D8F-B14B-AAEB3112F9F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8FF77A-7802-4963-B532-3F16C7BB012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73576CF-76EE-42A3-9955-D7991384B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F95770-F36F-43C0-986F-5C819648271E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCE1FD3-8D27-4304-97F9-6F9689F2498D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6CA696-49AA-4445-B978-96C1D8CE58DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CFA3BF-6C07-448B-8C83-AD4C524A6577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8497F93-D88A-4FFA-B988-7210608530A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=10736",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://code.google.com/p/skia/source/detail?r=159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=10736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://code.google.com/p/skia/source/detail?r=159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1577",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-05-07T17:30:04.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted remote attackers to execute arbitrary code via a long (1) function name or (2) symbol in a source-code file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función putstring en el archivo find.c en Cscope anteriores a v15.6 permite a los atacantes remotos asistidos por el usuario ejecutar arbitrariamente código a través de un (1) nombre de función largo o (2) un símbolo largo en un archivo de código fuente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cscope:cscope:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "15.5",
            "matchCriteriaId" : "7D9324B0-3391-4D44-AA10-FAF870445F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cscope:cscope:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27476BD2-FC3B-46A1-8810-DB3DB29106C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cscope:cscope:15.0bl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C00B4F-D84A-4CF6-B4BF-D0F574CBFD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cscope:cscope:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78590FBB-C9CE-42B7-83C9-1F5FAD11A2A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cscope:cscope:15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E821D0F7-D928-4C2F-89DE-7B46968A2970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cscope:cscope:15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0837A120-86AE-4ABB-AB38-F3D573C5064B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cscope.cvs.sourceforge.net/viewvc/cscope/cscope/src/find.c?r1=1.18&r2=1.19",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cscope.cvs.sourceforge.net/viewvc/cscope/cscope/src/find.c?view=log#rev1.19",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://cvs.fedoraproject.org/viewvc/rpms/cscope/devel/cscope-15.5-putstring-overflow.patch",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35213",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/05/1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/06/10",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/06/9",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1101.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=189666",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=499174",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50366",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9837",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://cscope.cvs.sourceforge.net/viewvc/cscope/cscope/src/find.c?r1=1.18&r2=1.19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cscope.cvs.sourceforge.net/viewvc/cscope/cscope/src/find.c?view=log#rev1.19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.fedoraproject.org/viewvc/rpms/cscope/devel/cscope-15.5-putstring-overflow.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/05/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/06/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/06/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=189666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=499174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-07T23:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Million Dollar Text Links 1.0 does not properly restrict administrator access to admin.home.php, which allows remote attackers to bypass intended restrictions and gain privileges via a direct request to admin.home.php after visiting admin.php."
      }, {
        "lang" : "es",
        "value" : "Million Dollar Text Links 1.0 no restringe apropiadamente el acceso administrativo para admin.home.php, lo que permite a los atacantes remotos evitar las restricciones previstas y ganar privilegios a través de una petición directa a admin.home.php después de visitar admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kalptarudemos:million_dollar_text_links:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9209D4E-9E68-4ACC-B5BA-8D06D1CC1DFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34994",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-07T23:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in TemaTres 1.0.3 and 1.031 allow remote attackers to inject arbitrary web script or HTML via the (1) search form; (2) _expresion_de_busqueda, (3) letra, (4) estado_id, and (5) tema parameters to index.php; the (6) PATH_INFO to index.php; (7) unspecified parameters when editing a term as specified by the edit_id and tema parameters to index.php; and the (7) y, (8) ord, and (9) m parameters to sobre.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en TemaTres versiones 1.0.3 y 1.031, permiten a los atacantes remotos inyectar script web o HTML arbitrario por medio de los parámetros (1) formulario de búsqueda; (2) _expresion_de_busqueda, (3) letra, (4) estado_id y (5) tema en el archivo index.php; el (6) PATH_INFO en el archivo index.php; (7) parámetros no especificados en la edición de un término según lo especificado por los parámetros edit_id y tema en el archivo index.php; y los parámetros (7) y, (8) ord, y (9) m en el archivo sobre.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:r020:tematres:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82636BD4-87EE-4E09-ADA0-72EB0F6383C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:r020:tematres:1.031:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2823931E-7528-415E-85AD-A49544446EB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34983",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34990",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503252/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34830",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503252/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-07T23:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in TemaTres 1.0.3 and 1.031, when magic_quotes_gpc is disabled, allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) mail, (2) password, and (3) letra parameters to index.php; (4) y and (5) m parameters to sobre.php; and the (6) dcTema, (7) madsTema, (8) zthesTema, (9) skosTema, and (10) xtmTema parameters to xml.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección múltiples SQL en TemaTres 1.0.3 y 1.031, cuando magic_quotes_gpc es deshabilitada, permite a los atacantes remotos o usuarios remotos autenticados para ejecutar arbitrariamente comandos SQL a través de (1) mail, (2) password, y (3) el parámetro letra para index.php; (4) y (5) m parámetros para sobre.php; y el (6) dcTema, (7) madsTema, (8) zthesTema, (9) skosTema, y (10) parámetros xtmTema para xml.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:r020:tematres:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82636BD4-87EE-4E09-ADA0-72EB0F6383C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:r020:tematres:1.031:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2823931E-7528-415E-85AD-A49544446EB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34983",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503252/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503256",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34830",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503252/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1585",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-07T23:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in TemaTres 1.031, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id_correo_electronico and (2) id_password parameters to login.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección múltiple SQL en TemaTres 1.031, cuando magic_quotes_gpc es deshabilitado, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de los parámetros (1) id_correo_electronico y (2) id_password para login.php. NOTA: la procedencia de esta información es deconocida, los detalles han sido obtenidos únicamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:r020:tematres:1.031:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2823931E-7528-415E-85AD-A49544446EB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34983",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-07T23:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to execute arbitrary code via a crafted DTD reference in a DOCTYPE element in an NZB file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la característica del importador NZB en GrabIt 1.7.2 Beta 3 y anteriores, que permite a los atacantes remotos ejecutar arbitrariamente código a través de referencias DTD manipulada en un elemento DOCTYPE en un archivo NZB."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shemes:grabit:*:beta3:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "63D3C24A-9303-4A37-B283-0B255B039C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shemes:grabit:1.5.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4FAFF4-AAAB-4487-99DC-93BB84214FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shemes:grabit:1.5.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "EFCE0B20-A57A-43CB-85E0-11FAECB4AEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shemes:grabit:1.5.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "C97E45F1-18EA-4259-867E-9C5339F2F43C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shemes:grabit:1.5.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D56088FE-7CE2-4061-8ADB-A77F3EC7DF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shemes:grabit:1.6.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACA2866-0BB6-4D47-95B7-0AFF898D7D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shemes:grabit:1.6.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "280FAAD8-687C-43B4-9912-766AF3C3D074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shemes:grabit:1.7.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "5D34BC0B-2402-4562-B1AA-CBC72C6EF5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shemes:grabit:1.7.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B60949D3-D24E-44D2-B727-6B8DBC454B99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shemes:grabit:1.7.2:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "74D3B18C-2150-4ED1-8DB5-3F5EE156FE95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.teusink.net/2009/05/grabit-172-beta-3-nzb-file-parsing.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34893",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503184/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.shemes.com/index.php?p=whatsnew",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.teusink.net/2009/05/grabit-172-beta-3-nzb-file-parsing.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503184/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.shemes.com/index.php?p=whatsnew",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-07T23:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in PHP Site Lock 2.0 allows remote attackers to bypass authentication and obtain administrative access by setting the login_id, group_id, login_name, user_id, and user_type cookies to certain values."
      }, {
        "lang" : "es",
        "value" : "archivo index.php en PHP Site Lock 2.0 permite a los atacantes remotos evitar la autenticación y obtener acceso administrativo estableciendo las cookies login_id, group_id, login_name, user_id, and user_type a ciertos valores"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kalptarudemos:php_site_lock:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C84B62E-0E3C-4AD4-BE15-A5F792FE07A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54203",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34995",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1249",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-08T18:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in CGI RESCUE MiniBBS 8t before 8.95t, 8 before 8.95, 9 before 9.08, and 10 before 10.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en CGI RESCUE MiniBBS v8t anteriores a v8.95t, v8 anteriores a v8.95, v9 anteriores a v9.08, y v10 anteriores a v10.32 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cgi_rescue:cgi_rescue_minibbs:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE1BE50-D586-4144-BA8C-7A58A1CC3237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cgi_rescue:cgi_rescue_minibbs:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B785E-3253-4C8F-B4CA-C8C5EA21AB74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cgi_rescue:cgi_rescue_minibbs:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F833D59B-0034-46C0-96B9-0B39937DA052"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN11396739/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34887",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN11396739/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-08T18:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in CGI RESCUE MiniBBS22 before 1.01 allows remote attackers to send email to arbitrary recipients via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en CGI RESCUE MiniBBS22 anterior a 1.01 permite a atacantes remotos enviar correos electrónicos a destinatarios de su elección mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cgi_rescue:cgi_rescue_minibbs22:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "FE5CC03A-6A0A-4D23-8462-38FD19CD9E23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN36982346/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN36982346/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-08T18:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in CGI RESCUE FORM2MAIL before 1.42 allows remote attackers to send email to arbitrary recipients via a web form."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en CGI RESCUE FORM2MAIL anterior a v1.42 permite a atacantes remotos enviar correos electrónicos a destinatarios de su elección mediante un formulario web."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cgi_rescue:form2mail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.41",
            "matchCriteriaId" : "7B8CFF75-94F5-4446-AC63-1B436F268BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cgi_rescue:form2mail:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF964ECF-BBBF-4C3F-8C89-C5C5879E6962"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN76370393/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000023.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54097",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34869",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN76370393/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-08T18:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cross-site scripting (XSS) or HTTP response splitting attacks, via CRLF sequences in an unspecified web form."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección CRLF (se refiere a CR (retorno de carro) y LF (salto de línea)) en CGI RESCUE Web Mailer anteriores a v1.04 permite a atacantes remotos inyectar cabeceras HTTP de su elección, y dirigir ataques de secuencias de comandos en sitios cruzados (XSS) o de partición de respuesta (response splitting), mediante secuencias CRLF (retorno de carro y salto de línea) en un formulario web no especificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cgi_rescue:cgi_web_mailer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.03",
            "matchCriteriaId" : "8A9065E7-5A8A-4ABA-BEF6-A82243800B8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN28020230/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000024.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34862",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20090209180123",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN28020230/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20090209180123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-08T18:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long banner.  NOTE: this might overlap CVE-2003-1368."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en ElectraSoft 32bit FTP v09.04.24 permite a servidores FTP remotos ejecutar código de su elección mediante un \"banner\" olarge. NOTA: este podría coincidir con CVE-2003-1368."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electrasoft:32bit_ftp:09.04.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7485B20-DFD9-46D7-BDE1-B72EA071C104"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34822",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T14:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action."
      }, {
        "lang" : "es",
        "value" : "La implementación jabber:iq:auth en IQAuthHandler.java de Ignite Realtime Openfire v3.6.5 permite a usuarios remotos autenticados cambiar las contraseñas de cuentas de usuario de su elección a través de un elemento \"username\" (nombre de usuario) modificado en la acción passwd_change."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.3",
            "matchCriteriaId" : "455B36AC-BD2F-4357-9806-BE8432BC9F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20332EC7-FD3C-4118-8FE9-CF8DF62FC2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44EE43D4-190A-4188-AB48-34C87FA1CC10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E425C2-E94D-41A9-A0A7-22498B138E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1438E68-1149-49A8-AC38-4D65D19D7B8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A6F7A2-1AFB-41DB-9C2D-BE0785BAC6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD75603-FE40-47CB-9810-F91C983F8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CC033A-F03B-4486-A27D-042FF0D3AB4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF90E1E8-1635-4A20-9EA1-4BAE1C63EB32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "972DEE02-8707-473D-9BB9-A6A04F4B239C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9819365-ACD9-4801-B277-9B6D2A9CF3BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B640A2-A662-4BDC-970E-D71F6C1AC7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF31BC81-E6B0-4B98-95C1-27C4F163A146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DC95549-3BC1-4296-9993-3C917FE895F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "664BCEB5-F38C-4FB2-95B3-E8F88FB8FC29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EA88D8-C41E-4CE1-85EB-8A0A23811FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B16CECC-131F-4463-B8CE-101BD597C210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "650101D4-7395-4C4E-8862-84CE365259BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04EA1DCB-633A-4942-B039-F68113885F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A848F149-C5EC-4E1E-B3EB-98066C5AE0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2746D5-0081-4065-97D0-2DBF5B8F00AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B870602-8455-4DDD-8CEE-0A4016714E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE94D0C3-188D-42D1-B868-D32AF4D3432C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B845B1D-DC2D-47F0-A3DF-32AE01DDB6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1F4DD7-1B60-4006-842E-AE286302247F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A469BBA3-5DD6-42B5-ABBD-A9342ADC703A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.6.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D89EA95-DC8B-4C47-A865-63C42EA63F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9306708-219D-44A8-9FE3-B2EC8EF77DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8691783F-7F3C-4264-9030-F89B607C35A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34976",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.igniterealtime.org/builds/openfire/docs/latest/changelog.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.igniterealtime.org/community/message/190280",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.igniterealtime.org/issues/browse/JM-1531",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34804",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1237",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.igniterealtime.org/builds/openfire/docs/latest/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.igniterealtime.org/community/message/190280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.igniterealtime.org/issues/browse/JM-1531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T14:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password (aka canChangePassword) console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwd_change IQ packet."
      }, {
        "lang" : "es",
        "value" : "Ignite Realtime Openfire antes de v3.6.5 no implementa correctamente la propiedad de configuración de la consola register.password (alias canChangePassword), lo que permite eludir la política de seguridad a usuarios remotos autenticados, así como cambiar sus propias contraseñas a través de un paquete passwd_change IQ."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.5",
            "matchCriteriaId" : "65A725C1-F775-4A44-A855-4FB8A8BE77A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34984",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.igniterealtime.org/community/message/190280",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.igniterealtime.org/issues/browse/JM-1532",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54189",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34804",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50291",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/34984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.igniterealtime.org/community/message/190280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.igniterealtime.org/issues/browse/JM-1532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0194",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-05-11T15:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The domain-locking implementation in the GARMINAXCONTROL.GarminAxControl_t.1 ActiveX control in npGarmin.dll in the Garmin Communicator Plug-In 2.6.4.0 does not properly enforce the restrictions that (1) download and (2) upload requests come from a web site specified by the user, which allows remote attackers to obtain sensitive information or reconfigure Garmin GPS devices via unspecified vectors related to a \"synchronisation error.\""
      }, {
        "lang" : "es",
        "value" : "La implementación del bloqueo de dominio en el control ActiveX GARMINAXCONTROL.GarminAxControl_t.1 de npGarmin.dll en Garmin Communicator Plug-In v2.6.4.0 no aplica adecuadamente las restricciones para peticiones de (1) descarga (2) subida que proceden de un sitio web especificado por el usuario, lo que permite a atacantes remotos obtener información sensible o reconfigurar los dispositivos Garmin GPS a través de vectores no especificados relacionados con un \"error de sincronización\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:garmin:garmin_communicator_plugin:2.6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B771DDAB-4FD0-4BD2-9057-DD2CE1C7B580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54258",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/34326",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-16/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022173",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503319/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34858",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50360",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://osvdb.org/54258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503319/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1194",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-05-11T15:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer overflow, as demonstrated by a long document.location value in Firefox."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de entero en la función pango_glyph_string_set_size en pango/glyphstring.c en Pango antes de la versión v1.24 permite causar una denegación de servicio (mediante caída de la aplicación) a atacantes dependientes del contexto y posiblemente también ejecutar código arbitrario a través de una cadena glifo demasiado larga que desencadena un desbordamiento de búfer basado en montículo, como se ha demostrado por un valor document.location demasiado largo en Firefox."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pango:pango:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.22",
            "matchCriteriaId" : "A8B42FA2-C5FA-4F4B-8542-889AEF8BD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pango:pango:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A419445-E8C0-4BC1-A592-9B63FCC8354C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pango:pango:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31EA2429-07F7-4569-9D4D-0397BD2708BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pango:pango:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F64E49C-25CF-4C59-AD1A-AA804AA1D746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pango:pango:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C554F1-F4B7-47C3-B6E0-8822B205B79B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pango:pango:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE0ECCE2-76E8-4A4B-A6CA-EEC45E3D7403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pango:pango:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6322FCB-DC34-4C4B-A8AE-9983927F6B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pango:pango:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CB58A0-A452-40EE-818F-A56723BBBF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pango:pango:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30BA57EA-8702-4247-8A75-DB5D2AD18F4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pango:pango:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F73FC80-FB3C-4AEA-BB27-961CD378B1B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pango:pango:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B78E87B1-4879-42AE-9B98-9AA176C8ECC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://github.com/bratsche/pango/commit/4de30e5500eaeb49f4bf0b7a07f718e149a2ed5e",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/54279",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35018",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35021",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35027",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35038",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1798",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-36.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/07/1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0476.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503349/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34870",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022196",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-773-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1269",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=480134",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=496887",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50397",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1194",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://github.com/bratsche/pango/commit/4de30e5500eaeb49f4bf0b7a07f718e149a2ed5e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/07/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0476.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503349/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-773-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=480134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=496887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T15:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.  NOTE: the researcher reports that Adobe's position is \"a PDF file is active content.\""
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox ejecuta llamadas a DOM en respuesta a un \"javascript: URI\" en el atributo target de un elemento submit en un formulario contenido en un fichero PDF, lo que podría permitir a atacantes remotos eludir las restricciones JavaScript al acceder al objeto de documento, como lo demuestran un sitio web que permite subir archivos PDF por usuarios no confiables, y por lo tanto disponer de un document.domain compartido entre el sitio web y este \"javascript: URI\". NOTA: El investigador informa de que la posición de Adobe es \"un archivo PDF es contenido activo\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6A30E-7577-4569-9309-53A0AF7FE3AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503183/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503183/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T15:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.  NOTE: the researcher reports that Adobe's position is \"a PDF file is active content.\""
      }, {
        "lang" : "es",
        "value" : "Google Chrome ejecuta llamadas a DOM en respuesta a un \"javascript: URI\" en el atributo target de un elemento submit en un formulario contenido en un fichero PDF, lo que podría permitir a atacantes remotos eludir las restricciones JavaScript al acceder al objeto de documento, como lo demuestran un sitio web que permite subir archivos PDF por usuarios no confiables, y por lo tanto disponer de un document.domain compartido entre el sitio web y este \"javascript: URI\". NOTA: El investigador informa de que la posición de Adobe es \"un archivo PDF es contenido activo\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39B565E1-C2F1-44FC-A517-E3130332B17C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503183/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503183/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T15:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.  NOTE: the researcher reports that Adobe's position is \"a PDF file is active content.\""
      }, {
        "lang" : "es",
        "value" : "Opera ejecuta llamadas a DOM en respuesta a un \"javascript: URI\" en el atributo target de un elemento submit en un formulario contenido en un fichero PDF, lo que podría permitir a atacantes remotos eludir las restricciones JavaScript al acceder al objeto de documento, como lo demuestran un sitio web que permite subir archivos PDF por usuarios no confiables, y por lo tanto disponer de un document.domain compartido entre el sitio web y este \"javascript: URI\". NOTA: El investigador informa de que la posición de Adobe es \"un archivo PDF es contenido activo\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D89F03D-7980-4385-8EE1-30A1B70EE257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503183/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503183/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T15:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.  NOTE: the researcher reports that Adobe's position is \"a PDF file is active content.\""
      }, {
        "lang" : "es",
        "value" : "Apple Safari ejecuta llamadas DOM en respuesta a un javascript en el atributo \"target\" (objetivo) de un elemento submit dentro de un formulario contenido en un fichero PDF en línea, lo que puede permitir a usuarios remotos evitar las restricciones de Adobe Acrobat JavaScript de acceder al documento objeto, como se ha demostrado en un wervidor web que permite subir ficheros PDF por usuarios no confiables, y tener un document.domain compartido entre el servidor web y este javascript. NOTA: el investigador ha informado de que la posición de Adobe es \"un fichero PDF es un contenido activo.\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE370CAA-04B3-434E-BD5B-1D87DE596C10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503183/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503183/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T15:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ubuntu clamav-milter.init script in clamav-milter before 0.95.1+dfsg-1ubuntu1.2 in Ubuntu 9.04 sets the ownership of the current working directory to the clamav account, which might allow local users to bypass intended access restrictions via read or write operations involving this directory."
      }, {
        "lang" : "es",
        "value" : "El script Ubuntu-clamav milter.init de clamav-milter antes de la versión v0.95.1+dfsg-1ubuntu1.2 en Ubuntu v9.04 establece la propiedad del directorio de trabajo actual a la cuenta clamav, lo que podría permitir eludir las restricciones de acceso a los usuarios locales a través de operaciones lectura o escritura o en este directorio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA1B57C-E00F-44E7-AB2E-24D689EC878C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35000",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34818",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-770-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://launchpad.net/bugs/365823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-770-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/365823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Per https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/365823\r\n\r\nA clean install of clamav-milter (0.95.1+dfsg-1ubuntu1.1) causes the root directory to become owned by the clamav user.\r\n\r\nThis was witnessed breaking ssh chroot environment.\r\n\r\nTEST CASE:\r\n- purge any existing clamav-milter installation, make sure you don't have any old /etc/init.d/clamav-milter init script around\r\n- check root directory's owner (should be root:root)\r\n- sudo apt-get install clamav-milter (the last one in Jaunty is 0.95.1+dfsg-1ubuntu1.1)\r\n- after installing the package, clamav-milter will start automatically (at least 'init.d/clamav-milter start' will execute)\r\n- check the root directory's owner:"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T15:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service (daemon outage or CPU consumption) via multiple long SMTP commands, as demonstrated by HELO commands."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el servidor de correo Pablo Software Solutions Quick 'n Easy Mail Server v3.3 que permite a usuarios remotos provocar una denegación de servicio (caída del servicio o excesivo consumo de CPU) a través de múltiples comandos SMTP largos como se ha demostrado con los comandos HELO."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pablosoftwaresolutions:quick\\'n_easy_mail_server:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F4E151-3D52-462F-AD70-C5F3F21A26A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34992",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34814",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T16:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en src/tools/pkcs11-tool.c en pkcs11-tool de OpenSC v0.11.7. Cuando se utiliza con modulos PKCS#11 de terceras partes sin especificar, genera claves RSA con exponentes públicos incorrectos, lo que permite a usuarios remotos leer en texto claro mensajes que se pretendió que fueran encriptados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensc-project:opensc:0.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39AD15A8-CAB8-4C9C-896B-FB59465FCB58"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "743CBBB1-C140-4FEF-B40E-FAE4511B1140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB5EDB-520B-4DEF-B06E-65CA13152824"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35035",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35293",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35309",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36074",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-01.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:123",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.opensc-project.org/pipermail/opensc-announce/2009-May/000025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/08/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1295",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00095.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00097.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01420.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01432.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/35035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.opensc-project.org/pipermail/opensc-announce/2009-May/000025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/08/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00097.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01432.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T20:00:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in LimeSurvey before 1.82 allows remote attackers to execute commands and obtain sensitive data via unknown attack vectors related to /admin/remotecontrol/."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en LimeSurvey en sus versiones anteriores a la v1.82 que permite a usuarios remotos ejecutar comandos y obtener información confidencial a través de un vector de ataque desconocido relacionado con /admin/remotecontrol/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limesurvey:limesurvey:1.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FED3FCC-EF18-4C93-B0ED-71D49B2B3EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limesurvey:limesurvey:1.80:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "F17F04CC-4044-4A48-880B-9A946F3BB283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limesurvey:limesurvey:1.80\\+:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97967070-D35E-4F10-A86A-12F9CF284ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limesurvey:limesurvey:1.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA98BBD-2A40-42EA-A26D-05C2F7FFCAB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limesurvey:limesurvey:1.81\\+:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4D779A-A8AE-4170-8FAF-B443AD431D7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34946",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.limesurvey.org/content/view/169/1/lang%2Cen/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1219",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.limesurvey.org/content/view/169/1/lang%2Cen/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T20:00:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF file.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en la función loadexponentialfunc en mupdf/pdf_function.c de MuPDF en el paquete mupdf-20090223-win32. Cuando se utilizada en SumatraPDF v0.9.3 y versiones anteriores, permite a usuarios remotos ejecutar código de su elección a través de un fichero PDF modificado maliciosamente. NOTA: algunos de estos detalles han sido obtenidos de información de terceras partes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.3",
            "matchCriteriaId" : "71864658-0498-4E97-A1F4-47AC4E2835B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE8A6DE-5EB6-47C5-BBCA-5ED94783414D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E763B24-5035-476D-8244-D876707FE4B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678C49B5-A9F0-4A5C-8CDC-E85E5E509959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084084EE-CD7D-4D26-9F92-D6C1363C1127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "968776E8-58DE-4D07-B81F-69D751E78569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22988B78-E426-4885-8B1A-55CD875325BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB75661-4385-4C96-ADA6-5E57DF401CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE3A563-DC97-4B03-939F-E183C612BBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA284413-F016-4604-BFBA-8C26BED5AD75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB1D911-1EA5-4231-8B2C-97B4346B865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1640649C-D190-4FB5-BDC5-9A5B89945A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568130AC-C49F-4C09-9336-C8E3F454C675"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0258.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34916",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1185",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1186",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=690555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=451373e028f82fa2f1cc2a6a669df31d85c877bd",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0258.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T20:00:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based and heap-based buffer overflows in Dafolo DafoloControl ActiveX control (DafoloFFControl.dll) 1.108.6.195 allow remote attackers to execute arbitrary code via long (1) baseurl, (2) kommune, (3) felter, (4) afdeling, (5) Flags, (6) HelpURL, (7) caburl, or (8) filename properties; or (9) a long argument to the Open method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en pila y en montículo en el control ActiveX Dafolo DafoloControl (DafoloFFControl.dll) v1.108.6.195 permiten a atacantes remotos ejecutar código arbitrario a través un texto demasiado largo en alguno de los siguientes campos de propiedades: (1) baseURL, (2) kommune, (3) felter, (4) afdeling, (5) Banderas (6), HelpURL, (7) caburl, o (8) filename, o (9) a través de un argumento demasiado largo al método Open. NOTA: La procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dafolo:dafolocontrol:1.108.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D8C29AC-50D9-4B95-A9D3-3ABBB5340D63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T20:00:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the username in a registration, which is not properly handled when the administrator accesses the Users menu."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el panel de administrador de phpForm.net LinkBase v2.0 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del nombre de usuario en un proceso de registro, cuya información no se maneja adecuadamente cuando el administrador accede al menú de usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linkbase:linkbase:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA81FF43-E711-44AE-A27A-E8C45D64EF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34844",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T20:00:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrary code via a .MCP project file with long (1) FILE_INFO, (2) CAT_FILTERS, and possibly other fields."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en MPLAB IDE v8.30 y posiblemente versiones anteriores. Permiten a atacantes remotos asistidos por el usuario ejecutar código de su elección a través de un fichero de proyecto .MCP con largos (1) FILE_INFO, (2) CAT_FILTERS y posiblemente otros campos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microchip:mplab_ide:8.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30940343-3164-4F3F-B5AB-D6BEB9E1C458"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35054",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.bkis.vn/?p=654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503400/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34897",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.bkis.vn/?p=654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503400/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T20:00:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de subida de fichero sin restricción en admin/uploadform.asp en Battle Blog v1.25 que permite a usuarios remotos ejecutar código de su elección mediante la subida de un fichero con extensión de fichero ejecutable y accediendo a él mediante una petición directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:battleblog:battle_blog:1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0496228E-5295-424E-9421-328426C8BF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35023",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T20:00:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/changepassword.php in Job Script Job Board Software 2.0 allows remote attackers to change the administrator password and gain administrator privileges via a direct request."
      }, {
        "lang" : "es",
        "value" : "admin/changepassword.php en Job Script Job Board Software v2.0 permite cambiar la contraseña del administrador a atacantes remotos y obtener así privilegios de administrador a través de una solicitud directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jobscript:job_script_job_board_software:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20B0AE02-2F1F-4E6B-A20F-BADCB4F46059"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35029",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34874",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T20:00:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 257 reply to a CWD command."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en ElectraSoft 32bit FTP v09.04.24 permite a servidores FTP remotos ejecutar código arbitrario a través de una respuesta 257 demasiado larga a un comando CWD."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electrasoft:32bit_ftp:09.04.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7485B20-DFD9-46D7-BDE1-B72EA071C104"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34822",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T20:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 3.09.04.17 and earlier are also affected."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región stack de la memoria en el control ActiveX de MPS.StormPlayer.1 en la biblioteca mps.dll versión 3.9.4.27 en Storm de Baofeng, permite a los atacantes remotos ejecutar código arbitrario por medio de un argumento largo en el método OnBeforeVideoDownload, como se explotó “in the wild” en abril y mayo de 2009. NOTA: algunos de estos datos fueron obtenidos de la información de terceros. NOTA: más tarde se informó que versiones 3.09.04.17 y anteriores también están afectadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baofeng:storm:2.7.9_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F52CD8D-3166-4A06-BB43-B7DEE653FBDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baofeng:storm:2.7.9_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD543322-FB0F-45E0-9E93-347425B470BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baofeng:storm:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF09EE7-F241-4EDE-8266-FD2413C6E1AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baofeng:storm:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93399125-BFCD-4EEC-B187-3E89A8DB82D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baofeng:storm:3.9.3_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC200C6-F6EB-4F14-9D58-4112C8078B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baofeng:storm:3.9.3_30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F85752-B5F0-4360-AE95-ECC7B6F72BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baofeng:storm:3.9.4_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5C704D6-6BF0-4C71-8AB8-35FC13C80FC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baofeng:storm:3.9.4_27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEA74EA-14ED-4586-B437-FF92D21A0132"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34944",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisrt.org/enblog/read.php?245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34789",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8579",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisrt.org/enblog/read.php?245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T20:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchterm or (2) email parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en el fichero leap.php de Leap CMS v0.1.4, cuando magic_quotes_gpc está desactivado, permiten a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) searchterm o (2) email."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gowondesigns:leap:0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E611E6C-54F9-4A63-95BE-104F2D8B7F6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34943",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T20:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the msg parameter (aka the message in an article comment) or (2) the searchterm parameter (aka the search post form).  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados(XSS) en Leap CMS v0.1.4 permiten a atacantes remotos inyectar HTML o scripts web arbitrarios a través de (1) el parámetro msg (alias el mensaje a un comentario de un artículo) o (2) el parámetro searchterm (alias el formulario de búsqueda). NOTA: Algunos de estos detalles se obtienen a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gowondesigns:leap:0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E611E6C-54F9-4A63-95BE-104F2D8B7F6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34943",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T20:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in Leap CMS 0.1.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via an admin.system.files (aka Manage Files) request to the default URI, then accessing the file via a direct request."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de carga de archivos sin \r\nrestricciones en Leap CMS v0.1.4 permite a atacantes remotos ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable a través de una solicitud admin.system.files (alias Administrar Archivos) a la URI por defecto, para a continuación acceder al archivo a través de una solicitud directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gowondesigns:leap:0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E611E6C-54F9-4A63-95BE-104F2D8B7F6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-11T20:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el fichero docs/showdoc.php de Coppermine Photo Gallery (CPG), antes de la versión 1.4.22 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro css. Se trata de un vector diferente que CVE-2008-0505."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1A0B6A-B8F7-4A2C-B290-FB4794D1D3F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.coppermine-gallery.net/index.php/topic%2C59237.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.coppermine-gallery.net/index.php/topic%2C59247.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34961",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34782",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://forum.coppermine-gallery.net/index.php/topic%2C59237.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.coppermine-gallery.net/index.php/topic%2C59247.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-12T16:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Teraway LinkTracker 1.0 allows remote attackers to bypass authentication and gain administrative access via a userid=1&lvl=1 value for the twLTadmin cookie."
      }, {
        "lang" : "es",
        "value" : "Teraway LiveHelp v2.0 permite a atacantes remotos evitar la autenticación y obtener acceso administrativo a través de un valor userid=1&lvl=1 para la cookie twLTadmin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teraway:linktracker:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79B2CF5-E8E7-4047-AF10-5532BE8FC07D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34903",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34735",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-12T16:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Teraway LiveHelp 2.0 allows remote attackers to bypass authentication and gain administrative access via a pwd=&lvl=1&usr=&alias=admin&userid=1 value for the TWLHadmin cookie."
      }, {
        "lang" : "es",
        "value" : "Teraway LiveHelp v2.0 permite a atacantes remotos evitar la autenticación y obtener acceso administrativo a través de un valor pwd=&lvl=1&usr=&alias=admin&userid=1 para la cookie TWLHadmin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teraway:livehelp:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB23876-07AD-495D-856D-4DCBD8C69C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34802",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34735",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-12T16:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Teraway FileStream 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the twFSadmin cookie to 1."
      }, {
        "lang" : "es",
        "value" : "Teraway FileStream v1.0 permite a atacantes remotos evitar la autenticación y obtener acceso administrativo estableciendo la cookie twFSadmin a 1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teraway:filestream:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09179A-59FF-465D-8C18-5472365742B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34818",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34735",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-12T16:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in input.php in MataChat allow remote attackers to inject arbitrary web script or HTML via the (1) nickname and (2) color parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados(XSS) en input.php en MataChat permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1)nickname (2)color."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mata:matachat:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A647BF-2124-4A0D-B49F-DC4F47394D94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/503014/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34722",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503014/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-12T16:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the route parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php en OpenCart v1.1.8 permite a atacantes remotos leer archivos de su elección a través de un .. (punto punto) en el parámetro route."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencart:opencart:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5896D2-BD35-45A6-98E5-27D6EE6C4E61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34313",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/532233/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34724",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/532233/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-12T16:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via the order_sn parameter in an order_query action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en user.php en EcShop v2.5.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro order_sn en una acción order_query."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecshop:ecshop:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69763CE1-9892-4FCF-BA8D-A3ADFDCC9DBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34733",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1623",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-12T16:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to inject arbitrary web script or HTML via the PID parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en Dew-NewPHPLinks v2.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro PID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dew-code:dew-newphplinks:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667913A3-8920-461D-B7FE-8F9ABBB41160"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34732",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1624",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-12T16:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the show parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php en Dew-NewPHPLinks v2.0 permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro show."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dew-code:dew-newphplinks:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667913A3-8920-461D-B7FE-8F9ABBB41160"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34732",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-12T16:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ln parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php en Thickbox Gallery v2 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en el parámetro ln."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davlin:thickbox_gallery:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "546CDD37-8754-4167-9736-A1661A01A168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34906",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34741",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-12T16:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en public/specific.php en EZ-Blog anterior a Beta 2 20090427, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"category\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:will_kraft:ez-blog:*:beta2:*:*:*:*:*:*",
            "versionEndIncluding" : "-",
            "matchCriteriaId" : "5523211B-D87C-415B-AA00-6DE7DFA18C29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:will_kraft:ez-blog:-:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "70E696F1-7233-48B4-BEF6-1CA212BC6888"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=678562&group_id=243152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34729",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=678562&group_id=243152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1627",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-12T16:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Streaming Download Project (SDP) Downloader 2.3.0 allows remote attackers to execute arbitrary code via a long .asf URL in the HREF attribute of a REF element in a .asx file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Streaming Download Project (SDP) Downloader v2.3.0 permite a atacantes remotos ejecutar código de su elección a través de una URL .asf larga en el atributo \"HREF\" de un elemento REF en un fichero .asx"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sdp_multimedia:streaming_download_project:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B61A8105-A81D-4E09-BDE8-0FB5FCDA41E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34883",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34712",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1171",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0220",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-05-12T22:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in the PowerPoint 4.0 importer (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via crafted formatting data for paragraphs in a file that uses a PowerPoint 4.0 native file format, related to (1) an incorrect calculation from a record header, or (2) an interget that is used to specify the number of bytes to copy, aka \"Legacy File Format Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en la región stack de la memoria en el importador de PowerPoint versión 4.0 (biblioteca PP4X32. DLL) en Office PowerPoint 2000 SP3, 2002 SP3 y 2003 SP3 de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de datos de formato diseñados para párrafos en un archivo que utiliza un formato de archivo nativo de PowerPoint versión 4.0 , relacionado con (1) un cálculo incorrecto a partir de un encabezado record, o (2) un interget que se utiliza para especificar el número de bytes a copiar, también se conoce como \"Legacy File Format Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "34EA27E8-657D-4600-936C-423D753880F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC12B313-5CBB-4590-A252-C6A406772CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F57325F6-A2E0-4127-9A2F-DE6929AB29F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=790",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54386",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34833",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5610",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0221",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-05-12T22:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint file containing a crafted record type for \"collaboration information for different slides\" that contains a field that specifies a large number of records, which triggers an under-allocated buffer and a heap-based buffer overflow, aka \"Integer Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en Microsoft Office PowerPoint 2002 SP3 y 2003 SP3 permite a atacantes remotos ejecutar código de su elección a través un tipo de registro inválido en un fichero PowerPoint que lanza una corrupción de memoria, también conocido como \"Vulnerabilidad de desbordamiento de entero\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC12B313-5CBB-4590-A252-C6A406772CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F57325F6-A2E0-4127-9A2F-DE6929AB29F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=796",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54394",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34835",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6127",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0222",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-05-12T22:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to a \"pointer overwrite\" and memory corruption, aka \"Legacy File Format Vulnerability,\" a different vulnerability than CVE-2009-0223, CVE-2009-0226, CVE-2009-0227, and CVE-2009-1137."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office PowerPoint 2000 SP3, 2002 SP3, y 2003 SP3 permite a atacantes remotos ejecutar código de su elección a través de datos de sonido manipulados en un fichero que utiliza un formato de fichero nativo en PowerPoint 4.0, que lleva a \"sobreescritura de puntero\" y corrupción de memoria, también conocido como \"Vulnerabilidad de formato de fichero legado\", una vulnerabilidad diferente a CVE-2009-0223, CVE-2009-0226, CVE-2009-0227, y CVE-2009-1137."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "34EA27E8-657D-4600-936C-423D753880F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC12B313-5CBB-4590-A252-C6A406772CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F57325F6-A2E0-4127-9A2F-DE6929AB29F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54382",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34831",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/exploits/Microsoft_PowerPoint_Memory_Corruption_Code_Execution_Exploit_MS09_017_1290124.php",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/exploits/Microsoft_PowerPoint_Pointer_Overwrite_Code_Execution_Exploit_MS09_017_1290123.php",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6143",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/exploits/Microsoft_PowerPoint_Memory_Corruption_Code_Execution_Exploit_MS09_017_1290124.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/exploits/Microsoft_PowerPoint_Pointer_Overwrite_Code_Execution_Exploit_MS09_017_1290123.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0223",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-05-12T22:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka \"Legacy File Format Vulnerability,\" a different vulnerability than CVE-2009-0222, CVE-2009-0226, CVE-2009-0227, and CVE-2009-1137."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office PowerPoint 2000 SP3, 2002 SP3, ay 2003 SP3 permite a atacantes remotos ejecutar código de su elección a través de datos de sonido manipulados en un fichero que utiliza un formato de fichero nativo en PowerPoint 4.0, que lleva a  una corrupción de memoria, también conocido como \"Vulnerabilidad de formato de fichero legado\" una vulnerabilidad diferente a CVE-2009-0222, CVE-2009-0226, CVE-2009-0227, y CVE-2009-1137."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "34EA27E8-657D-4600-936C-423D753880F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC12B313-5CBB-4590-A252-C6A406772CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F57325F6-A2E0-4127-9A2F-DE6929AB29F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34834",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6269",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0224",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-05-12T22:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and SP2; PowerPoint in Microsoft Office 2004 for Mac and 2008 for Mac; Open XML File Format Converter for Mac; Microsoft Works 8.5 and 9.0; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly validate PowerPoint files, which allows remote attackers to execute arbitrary code via multiple crafted BuildList records that include ChartBuild containers, which triggers memory corruption, aka \"Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, y 2007 SP1 y SP2; PowerPoint Viewer 2003 y 2007 SP1 y SP2; PowerPoint en Microsoft Office 2004 para Mac y 2008 para Mac; Open XML File Format Converter para Mac; Microsoft Works 8.5 y 9.0; y Microsoft Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats SP1 y SP2 no valida adecuadamente la lista de registros en ficheros PowerPoint, lo que permite a atantes remotos ejecutar código de su elección a través de ficheros manipulados que lanzan una corrupción de memoria relacionada con un tipo de registro inválido, también conocido como \"Vulnerabilidad de corrupción de memoria\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB5FE646-2516-4E38-BE3F-9F987CBBB70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB896B5-611E-4457-B438-C6CC937D63FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD97FF64-64A5-467C-B352-45B89B4A6536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:sp1:*:*:*:*:*",
            "matchCriteriaId" : "5E8B5977-31FA-4018-80E1-908016F3C224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3382DE96-A3CD-4094-9828-2955472BBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "34EA27E8-657D-4600-936C-423D753880F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC12B313-5CBB-4590-A252-C6A406772CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F57325F6-A2E0-4127-9A2F-DE6929AB29F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "995D5C53-7C55-4BD9-859D-F4573AA6D238"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5440EF5-462B-4BAC-AF60-44C5D649D0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9C3119-B118-41E2-9622-FD40C6CC4B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "B55849C3-649E-487B-B702-E2F4B25ECAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "794FCFBF-2D55-4ECE-825E-180616DB35FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2008:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "DBF95693-8941-4F28-8860-87F038724823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EE0CCD-69AD-4705-9BB0-24688F7957F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0579650D-24E9-46FF-8876-5164D4397E10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=793",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34879",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6023",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0225",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-05-12T22:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to improper \"array indexing\" and memory corruption, aka \"PP7 Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Office PowerPoint 2002 SP3 permite a atacantes remotos ejecutar código de su elección a través de datos de sonido manipulados en un fichero que utiliza un formato de fichero nativo en PowerPoint 95, que lleva a un \"indexado del array\" y una corrupción de memoria inadecuados, también conocido como \"Vulnerabilidad de corrupción de memoria PP7\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC12B313-5CBB-4590-A252-C6A406772CAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54388",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34880",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/exploits/Microsoft_PowerPoint_Array_Indexing_Code_Execution_Exploit_MS09_017_1290125.php",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5526",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/exploits/Microsoft_PowerPoint_Array_Indexing_Code_Execution_Exploit_MS09_017_1290125.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0226",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-05-12T22:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka \"Legacy File Format Vulnerability,\" a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0227, and CVE-2009-1137."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región stack de la memoria en el filtro de conversión de PowerPoint versión 4.2 en Office PowerPoint 2000 SP3, 2002 SP3 y 2003 SP3 de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de una cadena larga en datos de sonido en un archivo que utiliza un formato de archivo nativo de PowerPoint versión 4.0, conllevando a una corrupción de memoria, también se conoce como \"Legacy File Format Vulnerability\", una vulnerabilidad diferente de los CVE-2009-0222, CVE-2009-0223, CVE-2009-0227 y CVE-2009-1137."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "34EA27E8-657D-4600-936C-423D753880F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC12B313-5CBB-4590-A252-C6A406772CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F57325F6-A2E0-4127-9A2F-DE6929AB29F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=789",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34881",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6106",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0227",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-05-12T22:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the PowerPoint 4.2 conversion filter (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a large number of structures in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka \"Legacy File Format Vulnerability,\" a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0226, and CVE-2009-1137."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región stack de la memoria en el filtro de conversión de PowerPoint versión 4.2 (biblioteca PP4X32. DLL) en Office PowerPoint 2000 SP3, 2002 SP3 y 2003 SP3 de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de un gran número de estructuras en datos de sonido en un archivo que utiliza un formato de archivo nativo de PowerPoint versión 4.0, conllevando a una corrupción de memoria, también se conoce como \"Legacy File Format Vulnerability\", una vulnerabilidad diferente a los CVE-2009-0222, CVE-2009-0223, CVE-2009-0226 y CVE-2009-1137."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "34EA27E8-657D-4600-936C-423D753880F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC12B313-5CBB-4590-A252-C6A406772CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F57325F6-A2E0-4127-9A2F-DE6929AB29F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=787",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54384",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34882",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6239",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1128",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-05-12T22:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to memory corruption, aka \"PP7 Memory Corruption Vulnerability,\" a different vulnerability than CVE-2009-1129."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office PowerPoint 2000 SP3, 2002 SP3, y 2003 SP permite a atacantes remotos ejecutar código de su eleccióna  través de datos de sonido manipulados en un fichero que utiliza un formato de fichero nativo en PowerPoint 95, que lleva a una corrupción de memoria, también conocido como \"Vulnerabilidad de corrupción de memoria PP7\" una vulnerabilidad diferente a CVE-2009-1129."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "34EA27E8-657D-4600-936C-423D753880F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC12B313-5CBB-4590-A252-C6A406772CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F57325F6-A2E0-4127-9A2F-DE6929AB29F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34837",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5416",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1129",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-05-12T22:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka \"PP7 Memory Corruption Vulnerability,\" a different vulnerability than CVE-2009-1128."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en la región stack de la memoria en el importador de PowerPoint 95 (biblioteca PP7X32. DLL) en Office PowerPoint 2000 SP3, 2002 SP3 y 2003 SP3 de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de una longitud de registro inconsistente en datos de sonido en un archivo que utiliza un formato de archivo nativo de PowerPoint 95 (PPT95), también se conoce como \"PP7 Memory Corruption Vulnerability\", una vulnerabilidad diferente de CVE-2009-1128."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "34EA27E8-657D-4600-936C-423D753880F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC12B313-5CBB-4590-A252-C6A406772CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F57325F6-A2E0-4127-9A2F-DE6929AB29F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=791",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54387",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34839",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6176",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1130",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-05-12T22:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted structure in a Notes container in a PowerPoint file that causes PowerPoint to read more data than was allocated when creating a C++ object, leading to an overwrite of a function pointer, aka \"Heap Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región heap de la memoria en Office PowerPoint 2002 SP3 y 2003 SP3, y PowerPoint en Office 2004 para Mac, de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de una estructura diseñada en un contenedor de Notes en un archivo de PowerPoint que causa que PowerPoint lea más datos de los que se asignaron al crear un objeto C++, conllevando a una sobrescritura de un puntero de función, también se conoce como \"Heap Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC12B313-5CBB-4590-A252-C6A406772CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F57325F6-A2E0-4127-9A2F-DE6929AB29F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=794",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503454",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34840",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-020/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5961",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1131",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-05-12T22:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in Microsoft Office PowerPoint 2000 SP3 allow remote attackers to execute arbitrary code via a large amount of data associated with unspecified atoms in a PowerPoint file that triggers memory corruption, aka \"Data Out of Bounds Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos del búfer basados en pila en Microsoft Office PowerPoint 2000 SP3 permite a atacantes remotos ejecutar código de su elección a través de una cantidad grande de datos asociados con átomos sin especificar en un fichero PowerPoint que provoca una corrupción de memoria, también conocido como \"Vulnerabilidad de datos fuera de los límites\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "34EA27E8-657D-4600-936C-423D753880F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54393",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2008-46/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503451",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/34841",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5351",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2008-46/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1137",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-05-12T22:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka \"Legacy File Format Vulnerability,\" a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0226, and CVE-2009-0227."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office PowerPoint 2000 SP3, 2002 SP3, y 2003 SP3 permite a atacantes remotos ejecutar código de su elección a través de datos de sonido manipulados en un fichero que utiliza un formato de fichero nativo en PowerPoint 4.0, que lleva a una corrupción de memoria, también conocido como \"Vulnerabilidad de formato de fichero legado\" una vulnerabilidad diferente a VE-2009-0222, CVE-2009-0223, CVE-2009-0226, y CVE-2009-0227."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "34EA27E8-657D-4600-936C-423D753880F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC12B313-5CBB-4590-A252-C6A406772CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F57325F6-A2E0-4127-9A2F-DE6929AB29F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54381",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34876",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50425",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5946",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/32428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, and Apple QuickTime before 7.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a crafted 0x77 Poly tag and a crafted length field, which triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento inferior de entero en QuickDraw Manager en Apple Mac OS X v10.4.11 y v10.5 antes de v10.5.7 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicacion) a través de una imagen PICT elaborada que desencadena un desbordamiento de búfer basado en pila."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503878/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/exploits/Apple_QuickTime_PICT_Poly_Tag_Parsing_Heap_Overflow_PoC_Exploit_1407144.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-021/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503878/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/exploits/Apple_QuickTime_PICT_Poly_Tag_Parsing_Heap_Overflow_PoC_Exploit_1407144.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-021/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing the network for \"secure cookies\" that are sent over unencrypted HTTP connections."
      }, {
        "lang" : "es",
        "value" : "CFNetwork en Apple Mac OS X v10.5 antes de v10.5.7 no analiza adecuadamente las cabeceras Set-Cookie no válidas, lo cual permite a atacantes remotos obtener información sensible mediante la captura de trafico de la red de \"cookies seguras\" que son enviados a través de conexiones HTTP sin encriptar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CoreGraphics in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file that triggers memory corruption."
      }, {
        "lang" : "es",
        "value" : "CoreGraphics en Apple Mac OS X v10.4.11 y v10.5 antes de v10.5.7 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de un archivo PDF manipulado que provoca la corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (application crash) by attempting to mount a crafted sparse disk image that triggers memory corruption."
      }, {
        "lang" : "es",
        "value" : "Apple Mac OS X v10.4.11 y v10.5 antes de v10.5.7 permite a usuarios locales obtener privilegios o provocar una denegación de servicio (cuelgue de aplicación) por tratar de montar una imagen de disco (disperso) elaborado lo cual provoca la corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (application crash) by attempting to mount a crafted sparse disk image."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Apple Mac OS X v10.5 antes de v10.5.7 permite a usuarios locales obtener privilegios o provocar una denegación de servicio (cuelgue de aplicación) por tratar de montar una imagen de disco dispersa elaborada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in certain circumstances that are inconsistent with the Require SSL setting, which allows remote attackers to obtain sensitive information by sniffing the network."
      }, {
        "lang" : "es",
        "value" : "iChat en Apple Mac OS X v10.5 antes de v10.5.7 desactiva SSL para la comunicación de AOL Instant Messenger (AIM) en determinadas circunstancias que sean incompatibles con la configuración \"Require SSL\", lo cual permite a atacantes remotos obtener información sensible capturando el tráfico de la red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5.0",
            "versionEndExcluding" : "10.5.7",
            "matchCriteriaId" : "14EDAEBB-D669-4439-A088-7A7AB31C98FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5.0",
            "versionEndExcluding" : "10.5.7",
            "matchCriteriaId" : "7F269296-49E2-41A2-893B-7A03B0008C4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022212",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50487",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences during Unicode conversion, which might allow remote attackers to conduct cross-site scripting (XSS) attacks."
      }, {
        "lang" : "es",
        "value" : "International Components para Unicode (ICU) en Apple Mac OS X v10.5 antes de v10.5.7 no maneja correctamente las secuencias de bytes no válidos durante la conversión a Unicode, lo cual podría permitir a atacantes remotos realizar ataques de secuencias de comandos en sitios cruzados (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.icu-project.org/trac/ticket/5691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1122.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00336.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00478.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.icu-project.org/trac/ticket/5691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1122.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00336.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00478.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code via a crafted Compact Font Format (CFF) font."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Apple Type Services (ATS) en Apple Mac OS X v10.4.11 y v10.5 antes de v10.5.7 permite a atacantes remotos ejecutar código arbitrario a través de una fuente Compact Font Format (CFF) elaborada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503597/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503597/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer underflow in CoreGraphics in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file that triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento inferior de enteros en CoreGraphics en Apple Mac OS X v10.5 antes de v10.5.7 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de un archivo PDF elaborado creado que desencadena un desbordamiento de búfer basado en pila."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Launch Services in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to cause a denial of service (persistent Finder crash) via a crafted Mach-O executable that triggers an out-of-bounds memory read."
      }, {
        "lang" : "es",
        "value" : "Launch Services en Apple Mac OS X v10.4.11 y v10.5 antes de v10.5.7 permite a atacantes remotos provocar una denegación de servicio (cuelgue persistente de Finder) a través de un ejecutable elaborado \"Mach-O\" que desencadena una lectura fuera de los límites de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in CFNetwork in Apple Mac OS X 10.5 before 10.5.7 allows remote web servers to execute arbitrary code or cause a denial of service (application crash) via long HTTP headers."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado pila en CFNetwork en Apple Mac OS X v10.5 antes de v10.5.7 permite a servidores web remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de cabeceras HTTP largas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in telnet in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long hostname for a telnet server."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en telnet en Apple Mac OS X v10.4.11 y v10.5 antes de v10.5.7 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de un nombre de host largo para un servidor telnet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=136482797910018&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=136482797910018&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image that triggers memory corruption."
      }, {
        "lang" : "es",
        "value" : "QuickDraw Manager en Apple Mac OS X v10.4.11 y v10.5 antes de v10.5.7 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de una imagen PICT elaborado lo que provoca la corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an unspecified invalid response as a successful OCSP certificate validation, which might allow remote attackers to spoof certificate authentication via a revoked certificate."
      }, {
        "lang" : "es",
        "value" : "El módulo OpenSSL::OCSP de Ruby en Apple Mac OS X v10.5 anterior a v10.5.7 malinterpreta una respuesta no válida no especificada como un certificado de validación OCSP válido, lo que podría permitir a atacantes remotos falsear certificados de autenticación a través de un certificado revocados"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 before 10.5.7 and Windows allows remote attackers to inject arbitrary web script or HTML via a crafted feed: URL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Safari v3.2.3 y v4 Beta Pública, en el Apple Mac OS X v10.5 y anteriores a v10.5.7 y Windows permite a atacantes remotos inyectar script web arbitrario o HTML a través de una suscripción manipulada: URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2",
            "matchCriteriaId" : "B6E139B2-65BD-4416-9D99-48E132BEC3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F4ADD0-449B-4DDD-9878-DE86CBD56756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A419AE8-F5A2-4E25-9004-AAAB325E201A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "64FE1AA1-32D1-4825-8B2B-E66093937D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E760CD65-A10E-44F1-B835-DA6B77057C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A09DA0-83E9-491D-A0A5-AF97B5463D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C7EF0-A56B-40E6-9CED-1228405D034E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6078B0-4756-4E04-BAC4-C4EC90548A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87EDB53-FB6E-4B10-B890-A7195D841C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:85.8:*:*:*:*:*:*",
            "matchCriteriaId" : "957FCFC4-565A-4F2F-8D3D-D0982E1723F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*",
            "matchCriteriaId" : "22A450DC-CDF5-4EA0-A703-AFB3DEFE1395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857C92E2-6870-409A-9457-75F8C5C7B959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD75A4F-F529-4F5E-957D-380215F7B21B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834EC299-2010-4306-8CEE-35D735583101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443FF271-A3AB-4659-80B2-89F771BF5371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D29B98E-2F62-4F6F-976D-FEC4EB07F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3112AFEB-7893-467C-8B45-A44D5697BB79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC83309-3A97-4619-B5C1-574610838BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891514D5-50C8-4EDC-81C5-24ABF8BCC022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25032A3A-9D05-4E69-9A22-C9B332976769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9315ADD-5B97-4639-9B59-806EFD7BC247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:312.5:*:*:*:*:*:*",
            "matchCriteriaId" : "21BAC0B8-063C-4772-8F1B-EB9A2F7A585C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:312.6:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAB4071-A883-4E04-BDDF-A121C4738E61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E44913D-BC8B-4AA1-84EB-EFEAC531B475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B74019F-C365-4E13-BBB4-D84AD9C1F87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*",
            "matchCriteriaId" : "018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*",
            "matchCriteriaId" : "1082B33F-33B5-453A-A5AA-10F65AB2E625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDCF83E-620C-40FA-9901-5D939E315143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BAE980-449F-4F8C-A5BC-6CB7226E971A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A33F900-D405-40A8-A0A5-3C80320FF6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4444A309-5A97-4E1C-B4EA-C4A070A98CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E78F43-07BD-4D62-9512-DA738A92BC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3180366-2240-467E-8AB9-BEA0430948F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB9CC52-E533-4306-9E92-73C84B264D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "912A26D1-3264-464F-B101-1796B35437E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D8C2EF-D552-4279-A12E-70E292F39E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C453B588-15FD-4A9C-8BC1-6202A21DAE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD634B1-4986-4E80-8BDC-58941893F6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BB6761-3581-4AE6-85E0-1609D15D7618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA1A4C8-9F87-449F-A11F-52E5D52247E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC87F61-3463-468A-BF0B-070816BBC3CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets (CSS) are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files."
      }, {
        "lang" : "es",
        "value" : "Help Viewer de Apple Mac OS X v10.4.11 y v10.5 anterior a v10.5.7 no comprueba que ciertas Hojas de Estilo en Cascada (CSS) se encuentran en un libro de ayuda registrado, lo cual permite a atacantes remotos ejecutar código arbitrario a través de una URL help: lo cual desencadena invocación de archivos AppleScript."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that HTML pathnames are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files."
      }, {
        "lang" : "es",
        "value" : "Help Viewer de Apple Mac OS X v10.4.11 y v10.5 anteriores a v10.5.7 no verifica que las rutas HTML esten localizadas en un libro de ayuda registrado, lo cual permite a atacantes remotos ejecutar código arbitrario a través de una URL help: la que desencadena la invocación de archivos AppleScript."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T15:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Office Spotlight Importer in Spotlight in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not properly validate Microsoft Office files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a file that triggers memory corruption."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office Spotlight Importer en Apple Mac OS X v10.4.11 y v10.5 anterior a  v10.5.7 no valida adecuadamente los archivos de Microsoft Office, lo cual permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de un archivo que provoca la corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-13T17:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption."
      }, {
        "lang" : "es",
        "value" : "WebKit, utilizado en Safari anterior a v3.2.3 y v4 Public Beta, en Apple Mac OS X v10.4.11 y v10.5 y anteriores a v10.5.7 y Windows permite a atacantes remotos ejecutar código arbitrario a través de un objeto elaborado SVGList que provoca una corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2",
            "matchCriteriaId" : "B6E139B2-65BD-4416-9D99-48E132BEC3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F4ADD0-449B-4DDD-9878-DE86CBD56756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A419AE8-F5A2-4E25-9004-AAAB325E201A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "64FE1AA1-32D1-4825-8B2B-E66093937D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E760CD65-A10E-44F1-B835-DA6B77057C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A09DA0-83E9-491D-A0A5-AF97B5463D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C7EF0-A56B-40E6-9CED-1228405D034E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6078B0-4756-4E04-BAC4-C4EC90548A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87EDB53-FB6E-4B10-B890-A7195D841C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:85.8:*:*:*:*:*:*",
            "matchCriteriaId" : "957FCFC4-565A-4F2F-8D3D-D0982E1723F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*",
            "matchCriteriaId" : "22A450DC-CDF5-4EA0-A703-AFB3DEFE1395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857C92E2-6870-409A-9457-75F8C5C7B959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD75A4F-F529-4F5E-957D-380215F7B21B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834EC299-2010-4306-8CEE-35D735583101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443FF271-A3AB-4659-80B2-89F771BF5371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D29B98E-2F62-4F6F-976D-FEC4EB07F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3112AFEB-7893-467C-8B45-A44D5697BB79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC83309-3A97-4619-B5C1-574610838BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891514D5-50C8-4EDC-81C5-24ABF8BCC022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25032A3A-9D05-4E69-9A22-C9B332976769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9315ADD-5B97-4639-9B59-806EFD7BC247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:312.5:*:*:*:*:*:*",
            "matchCriteriaId" : "21BAC0B8-063C-4772-8F1B-EB9A2F7A585C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:312.6:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAB4071-A883-4E04-BDDF-A121C4738E61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E44913D-BC8B-4AA1-84EB-EFEAC531B475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B74019F-C365-4E13-BBB4-D84AD9C1F87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*",
            "matchCriteriaId" : "018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*",
            "matchCriteriaId" : "1082B33F-33B5-453A-A5AA-10F65AB2E625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDCF83E-620C-40FA-9901-5D939E315143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BAE980-449F-4F8C-A5BC-6CB7226E971A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A33F900-D405-40A8-A0A5-3C80320FF6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4444A309-5A97-4E1C-B4EA-C4A070A98CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E78F43-07BD-4D62-9512-DA738A92BC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3180366-2240-467E-8AB9-BEA0430948F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB9CC52-E533-4306-9E92-73C84B264D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "912A26D1-3264-464F-B101-1796B35437E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D8C2EF-D552-4279-A12E-70E292F39E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C453B588-15FD-4A9C-8BC1-6202A21DAE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD634B1-4986-4E80-8BDC-58941893F6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BB6761-3581-4AE6-85E0-1609D15D7618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA1A4C8-9F87-449F-A11F-52E5D52247E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC87F61-3463-468A-BF0B-070816BBC3CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=9019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/05/stable-update-bug-fix.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1130.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503594/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-822-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-836-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/823-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00303.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=9019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/05/stable-update-bug-fix.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1130.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503594/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-822-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-836-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/823-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-14T17:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application crash) or read portions of memory via one or more crafted packets."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el módulo dpwinsup (dpwinsup.dll) para dpwingad (dpwingad.exe) en HP Data Protector Express y Express SSE 3.x en versiones anteriores a build 47065 y Express y Express SSE 4.x en versiones anteriores a build 46537, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o lectura de porciones de memoria a través de uno o más paquetes manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:novell:netware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF45C68A-5F83-4090-A0C1-A09EC2987706"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B133DAC8-2B0D-4F83-9025-AD071740187A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:suse_linux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB65EF0-0E6A-4178-8564-3CC96891A072"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:data_protector_express:3.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0B416366-2680-41E2-ABF9-5CD8D89C7FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:data_protector_express:3.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3F5B5D2E-4692-4DA5-805E-B449CFD9DA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:data_protector_express:3.5:sp2:*:*:sse:*:*:*",
            "matchCriteriaId" : "95F46633-43B3-416F-89CC-EA6A03EFAA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:data_protector_express:4.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "AED70E63-BA67-4A68-A121-C3E80F2D1EF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:data_protector_express:4.0:sp1:*:*:sse:*:*:*",
            "matchCriteriaId" : "4D5B564A-E034-4E65-BCF9-224CBB175F98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01697543",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ivizsecurity.com/security-advisory-iviz-sr-09002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35084",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34955",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022220",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1309",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/9006",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/9007",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01697543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://ivizsecurity.com/security-advisory-iviz-sr-09002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/9006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/9007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-14T17:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application Access Server (A-A-S) 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary programs via a command job, (2) stop services via a setservice job, or (3) terminate processes via a killprocess job."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en index.aas en la Aplicación del Servidor de Acceso (A-A-S) v2.0.48 permite a atacantes remotos secuestrar la autenticación de los administradores para peticiones que (1) ejecutan programas de su elección a través de una tarea \"command\", (2) parar servicios a través de una tarea \"setservice\", o (3) terminar procesos a través de una tarea \"killprocess\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:klinzmann:application_access_server:2.0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC440C8-91C2-49B3-B023-C3B8F9D0E1D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35034",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503434/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.syhunt.com/advisories/?id=aas-multiple",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.syhunt.com/advisories/aashack.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503434/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.syhunt.com/advisories/?id=aas-multiple",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.syhunt.com/advisories/aashack.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-14T17:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Application Access Server (A-A-S) 2.0.48 has \"wildbat\" as its default password for the admin account, which makes it easier for remote attackers to obtain access."
      }, {
        "lang" : "es",
        "value" : "Aplicación del Servidor de Acceso (A-A-S) v2.0.48 tiene \"wildbat\" como su contraseña por defecto para la cuenta administrador, lo cual hace sencillo a atacantes remotos obtener el acceso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:klinzmann:application_access_server:2.0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC440C8-91C2-49B3-B023-C3B8F9D0E1D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1022204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503434/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.syhunt.com/advisories/?id=aas-multiple",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503434/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.syhunt.com/advisories/?id=aas-multiple",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1466",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-14T17:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file."
      }, {
        "lang" : "es",
        "value" : "Aplicación de Servidor de Acceso (A-A-S) v2.0.48 almacena (1) contraseñas y (2) las palabras clave del puerto en texto claro en aas.ini, lo cual permite a usuarios locales obtener información sensible a través de la lectura del fichero."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:klinzmann:application_access_server:2.0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC440C8-91C2-49B3-B023-C3B8F9D0E1D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1022204",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503434/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34911",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.syhunt.com/advisories/?id=aas-multiple",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50590",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1022204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503434/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.syhunt.com/advisories/?id=aas-multiple",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-14T17:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING)."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en SquirrelMail versiones anteriores a v1.4.18 permite a atacantes remotos inyectar web script o HTML a través de vectores envueltos en (1) determinadas cadenas encriptadas en cabeceras de correos electrónicos, relacionado con contrib/decrypt_headers.php; (2) PHP_SELF; y (3) la cadena \"query\" (también conocido como QUERY_STRING)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FF0DF6-AEEC-4099-B1C4-19EDC1FDD564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.17",
            "matchCriteriaId" : "B23AEC37-88CE-488D-B9D2-2B0322D0FC8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C2F0267-47D5-436F-B9F6-505CEC582AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "565E131D-56A9-46AB-800D-12B097FE3B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAB6F43-2DAE-4E02-8F0A-EE4D4FB3E005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DB6243-3A4A-419E-B6C5-D61F5B0A1E7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2805F37-B8E6-4647-9E90-50763C7E4952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E543F-6AC3-45CD-8448-3A1D4D3DD469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7E957E-81C0-4FA3-9944-5E514874BED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.3pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF0DACB-F875-448B-86DF-D40531A2A762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.3pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "651432C3-1EE9-4BBA-A1CF-DCC9F19954D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C84D0-13B5-4298-B9F3-BF5C6F927793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.4pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEE72FA1-E635-436B-A650-A8D4040925B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.4pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "512F2AB5-EB24-4846-B924-377D040C131A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F42A76-BF06-4DA9-8667-0E81D17B5B9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.5pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02410BAB-C1D7-4883-A27B-C13A72707CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.5pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8509AAEE-225C-4907-884D-F9796ACA40F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD41781D-1F7E-43A7-AD59-ADFE1D04D825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78650B7E-9638-46FF-9656-38E8DFE3FA93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CBBB8E-E0AB-4F7B-A55E-F7BD5F83EAAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1E1172-9D9E-439E-BD4B-4EF372344F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBF40C5-6272-427C-97A1-3CE3B1D47B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB15C5DD-2D76-47ED-883C-D1901B96F391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E249ED-76DA-44B3-A3A7-788F4B1A19DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD0A21F-CD80-4B01-B5D3-9B2281E4F143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA516843-2A45-4705-9669-4B719F722192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA068C0-8067-4A94-9F74-0D1DACF9A9EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F37AD5-120E-4FEA-ADA5-F6C3434B9BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C059835E-8FD9-40DF-BA6F-7E313E49F511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E28A825-56F4-4EC5-9D62-661C0F4B477F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "545CD944-7C64-49E3-A32E-3388B5F3ECF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55A98B3-34ED-4A90-BB78-50CB56B1B51F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22E1FA6-7C9C-4D01-A645-CF41939C1988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5143ED-D4C5-4830-9C96-0B54D03679CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B765AEC-09E9-456C-8B57-09927E55D119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AAFC3B0-DCE3-4190-B279-E095C666FA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9291A565-0BD6-4B5E-B45F-9DE65AB8159D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F53A84-FC66-4963-A728-7285F63D4761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A941FF-423E-49C5-AE1F-FE7ED016CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B34FDB1D-881B-4343-A76E-F23B93A0469A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052914F8-B52C-4AB4-8F85-68D788B588C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617C554F-8E7D-4F8A-AF63-C193934C8215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F11950-A2E4-4F57-BF87-57788B841A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F886B99-E996-4BF7-9BE3-14A6713A997F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65801122-2E5D-4244-9D37-5483F5C731F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A29559D-0DB8-40C8-A6E6-4F37DDD27571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026730B8-3919-4100-8607-C640ADBDD662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C179A3C-8C8C-429B-BACA-8ADAE4170465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F869F3-6D8D-4C95-95F7-5AE42C67362B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B96BB4F-12B0-460A-B5CC-8BA6D69911FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD31177-05BB-4623-AED7-765DB7E44E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18AF3BC6-E33B-44BD-A2F6-A7F5244AA4FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77776503-3258-400D-8404-233EAFA940AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682BC5E2-F2C5-4B6F-8EF0-E05152BB9B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC24558-B7C1-4DE7-BC24-AF092DF0DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0986D113-C9F9-4645-8968-D165EC6B917D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.15_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85F80F3-DC0E-4228-9FA3-D870BC2200D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8608AE1-7930-47CF-B2E8-9E86E2FB5A20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.gna.org/nasmail/nasmail-1.7.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/60468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35052",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35073",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/40220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/contrib/decrypt_headers.php?r1=13672&r2=13671&pathrev=13672",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/global.php?r1=13670&r2=13669&pathrev=13670",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13670",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13672",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:110",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1066.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34916",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2009-05-08",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2009-05-09",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1296",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gna.org/forum/forum.php?forum_id=2146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://download.gna.org/nasmail/nasmail-1.7.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/60468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/40220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/contrib/decrypt_headers.php?r1=13672&r2=13671&pathrev=13672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/global.php?r1=13670&r2=13669&pathrev=13670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1066.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2009-05-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2009-05-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gna.org/forum/forum.php?forum_id=2146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-14T17:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program."
      }, {
        "lang" : "es",
        "value" : "La función map_yp_alias en functions/imap_general.php en SquirrelMail versiones anteriores a v1.4.18 permite a atacantes remotos ejecutar comandos de su elección a través de metacaracteres de intérprete de comandos en una cadena de nombre de usuario que está utilizada por el programa ypmatch."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FF0DF6-AEEC-4099-B1C4-19EDC1FDD564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.17",
            "matchCriteriaId" : "B23AEC37-88CE-488D-B9D2-2B0322D0FC8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C2F0267-47D5-436F-B9F6-505CEC582AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "565E131D-56A9-46AB-800D-12B097FE3B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAB6F43-2DAE-4E02-8F0A-EE4D4FB3E005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DB6243-3A4A-419E-B6C5-D61F5B0A1E7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2805F37-B8E6-4647-9E90-50763C7E4952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E543F-6AC3-45CD-8448-3A1D4D3DD469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7E957E-81C0-4FA3-9944-5E514874BED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.3pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF0DACB-F875-448B-86DF-D40531A2A762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.3pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "651432C3-1EE9-4BBA-A1CF-DCC9F19954D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C84D0-13B5-4298-B9F3-BF5C6F927793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.4pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEE72FA1-E635-436B-A650-A8D4040925B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.4pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "512F2AB5-EB24-4846-B924-377D040C131A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F42A76-BF06-4DA9-8667-0E81D17B5B9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.5pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02410BAB-C1D7-4883-A27B-C13A72707CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.5pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8509AAEE-225C-4907-884D-F9796ACA40F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD41781D-1F7E-43A7-AD59-ADFE1D04D825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78650B7E-9638-46FF-9656-38E8DFE3FA93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CBBB8E-E0AB-4F7B-A55E-F7BD5F83EAAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1E1172-9D9E-439E-BD4B-4EF372344F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBF40C5-6272-427C-97A1-3CE3B1D47B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB15C5DD-2D76-47ED-883C-D1901B96F391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E249ED-76DA-44B3-A3A7-788F4B1A19DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD0A21F-CD80-4B01-B5D3-9B2281E4F143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA516843-2A45-4705-9669-4B719F722192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA068C0-8067-4A94-9F74-0D1DACF9A9EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F37AD5-120E-4FEA-ADA5-F6C3434B9BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C059835E-8FD9-40DF-BA6F-7E313E49F511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E28A825-56F4-4EC5-9D62-661C0F4B477F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "545CD944-7C64-49E3-A32E-3388B5F3ECF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55A98B3-34ED-4A90-BB78-50CB56B1B51F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22E1FA6-7C9C-4D01-A645-CF41939C1988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5143ED-D4C5-4830-9C96-0B54D03679CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B765AEC-09E9-456C-8B57-09927E55D119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AAFC3B0-DCE3-4190-B279-E095C666FA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9291A565-0BD6-4B5E-B45F-9DE65AB8159D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F53A84-FC66-4963-A728-7285F63D4761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A941FF-423E-49C5-AE1F-FE7ED016CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B34FDB1D-881B-4343-A76E-F23B93A0469A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052914F8-B52C-4AB4-8F85-68D788B588C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617C554F-8E7D-4F8A-AF63-C193934C8215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F11950-A2E4-4F57-BF87-57788B841A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F886B99-E996-4BF7-9BE3-14A6713A997F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65801122-2E5D-4244-9D37-5483F5C731F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A29559D-0DB8-40C8-A6E6-4F37DDD27571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026730B8-3919-4100-8607-C640ADBDD662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C179A3C-8C8C-429B-BACA-8ADAE4170465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F869F3-6D8D-4C95-95F7-5AE42C67362B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B96BB4F-12B0-460A-B5CC-8BA6D69911FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD31177-05BB-4623-AED7-765DB7E44E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18AF3BC6-E33B-44BD-A2F6-A7F5244AA4FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77776503-3258-400D-8404-233EAFA940AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682BC5E2-F2C5-4B6F-8EF0-E05152BB9B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC24558-B7C1-4DE7-BC24-AF092DF0DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0986D113-C9F9-4645-8968-D165EC6B917D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.15_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85F80F3-DC0E-4228-9FA3-D870BC2200D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8608AE1-7930-47CF-B2E8-9E86E2FB5A20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.gna.org/nasmail/nasmail-1.7.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35052",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35073",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/40220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/imap_general.php?r1=13674&r2=13673&pathrev=13674",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13674",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:110",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1066.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34916",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2009-05-10",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1296",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gna.org/forum/forum.php?forum_id=2146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://download.gna.org/nasmail/nasmail-1.7.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/40220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/imap_general.php?r1=13674&r2=13673&pathrev=13674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1066.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2009-05-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gna.org/forum/forum.php?forum_id=2146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-14T17:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a crafted cookie."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de fijación de sesión en SquirrelMail versiones anteriores a v1.4.18 permite a atacantes remotos secuestrar sesiones web a través de una cookie manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.17",
            "matchCriteriaId" : "B23AEC37-88CE-488D-B9D2-2B0322D0FC8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C2F0267-47D5-436F-B9F6-505CEC582AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "565E131D-56A9-46AB-800D-12B097FE3B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAB6F43-2DAE-4E02-8F0A-EE4D4FB3E005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DB6243-3A4A-419E-B6C5-D61F5B0A1E7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2805F37-B8E6-4647-9E90-50763C7E4952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E543F-6AC3-45CD-8448-3A1D4D3DD469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7E957E-81C0-4FA3-9944-5E514874BED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.3pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF0DACB-F875-448B-86DF-D40531A2A762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.3pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "651432C3-1EE9-4BBA-A1CF-DCC9F19954D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C84D0-13B5-4298-B9F3-BF5C6F927793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.4pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEE72FA1-E635-436B-A650-A8D4040925B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.4pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "512F2AB5-EB24-4846-B924-377D040C131A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F42A76-BF06-4DA9-8667-0E81D17B5B9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.5pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02410BAB-C1D7-4883-A27B-C13A72707CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.5pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8509AAEE-225C-4907-884D-F9796ACA40F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD41781D-1F7E-43A7-AD59-ADFE1D04D825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78650B7E-9638-46FF-9656-38E8DFE3FA93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CBBB8E-E0AB-4F7B-A55E-F7BD5F83EAAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1E1172-9D9E-439E-BD4B-4EF372344F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBF40C5-6272-427C-97A1-3CE3B1D47B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB15C5DD-2D76-47ED-883C-D1901B96F391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E249ED-76DA-44B3-A3A7-788F4B1A19DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD0A21F-CD80-4B01-B5D3-9B2281E4F143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA516843-2A45-4705-9669-4B719F722192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA068C0-8067-4A94-9F74-0D1DACF9A9EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C059835E-8FD9-40DF-BA6F-7E313E49F511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E28A825-56F4-4EC5-9D62-661C0F4B477F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "545CD944-7C64-49E3-A32E-3388B5F3ECF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55A98B3-34ED-4A90-BB78-50CB56B1B51F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7F3531-E0EE-48AA-BCB4-872BEB853531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5143ED-D4C5-4830-9C96-0B54D03679CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B765AEC-09E9-456C-8B57-09927E55D119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AAFC3B0-DCE3-4190-B279-E095C666FA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9291A565-0BD6-4B5E-B45F-9DE65AB8159D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F53A84-FC66-4963-A728-7285F63D4761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A941FF-423E-49C5-AE1F-FE7ED016CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B34FDB1D-881B-4343-A76E-F23B93A0469A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052914F8-B52C-4AB4-8F85-68D788B588C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617C554F-8E7D-4F8A-AF63-C193934C8215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F11950-A2E4-4F57-BF87-57788B841A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F886B99-E996-4BF7-9BE3-14A6713A997F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026730B8-3919-4100-8607-C640ADBDD662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D1297B-EE36-46E2-8722-34F385A54751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C179A3C-8C8C-429B-BACA-8ADAE4170465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3A6CFE-CFA4-4B48-9738-063A2B1025FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:rc2a:*:*:*:*:*:*",
            "matchCriteriaId" : "2664D22F-B0E6-48AB-BBBA-C653C1AF77A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD31177-05BB-4623-AED7-765DB7E44E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20247A22-9AB9-4BCE-BF28-350B52FBC62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E6734C-EE1C-40B6-9759-15298707A6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "F66D66B1-992E-4EE0-A189-0974B96FE721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "70484027-647C-47DF-85FD-3323F4685613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4071B2-3D4F-4755-98B1-E28CEB05EA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3aa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AAFE2B-77AB-4AC3-A22C-C3C256E2E45A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6591E5-5F36-4663-85A6-9D870FD49FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "03D847B0-DE1D-49D7-9ED4-30C0A82209AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4CFD4D-EAC3-4325-A87F-9D5F4C513208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A884536-4D27-4350-B815-AB4E625879DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4429B95B-273A-45F3-A066-9AF548AC3FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD89F143-EEBF-472D-9653-E7534F5799FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.8.4fc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A901766-B49B-4983-98AB-880B333C284B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9851AD9-5093-4482-A632-487C6D104C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA5BA42-F53A-4E0D-B04C-D70D2291E408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77776503-3258-400D-8404-233EAFA940AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682BC5E2-F2C5-4B6F-8EF0-E05152BB9B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC24558-B7C1-4DE7-BC24-AF092DF0DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0986D113-C9F9-4645-8968-D165EC6B917D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3893B3D9-BAA3-4FCD-BC58-C4B664E688B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8608AE1-7930-47CF-B2E8-9E86E2FB5A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C44025-C79D-4791-8EF6-3E26786E194E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35052",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35073",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/40220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13676",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34916",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2009-05-11",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1296",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/40220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2009-05-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-14T17:30:00.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from Cascading Style Sheets (CSS) positioning in HTML e-mail messages, which allows remote attackers to spoof the user interface, and conduct cross-site scripting (XSS) and phishing attacks, via a crafted message."
      }, {
        "lang" : "es",
        "value" : "functions/mime.php en SquirrelMail versiones anteriores a v1.4.18 no protege el contenido de la aplicación de Cascading Style Sheets (CSS) posicionado en mensajes de correo HTML, lo cual permite a atacantes remotos falsear la interfaz de usuario, y conducir ataques de secuencias de comandos en sitios cruzados (XSS) y phishing, a través de mensajes manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FF0DF6-AEEC-4099-B1C4-19EDC1FDD564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.17",
            "matchCriteriaId" : "B23AEC37-88CE-488D-B9D2-2B0322D0FC8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C2F0267-47D5-436F-B9F6-505CEC582AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "565E131D-56A9-46AB-800D-12B097FE3B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAB6F43-2DAE-4E02-8F0A-EE4D4FB3E005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DB6243-3A4A-419E-B6C5-D61F5B0A1E7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2805F37-B8E6-4647-9E90-50763C7E4952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E543F-6AC3-45CD-8448-3A1D4D3DD469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7E957E-81C0-4FA3-9944-5E514874BED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.3pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF0DACB-F875-448B-86DF-D40531A2A762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.3pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "651432C3-1EE9-4BBA-A1CF-DCC9F19954D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11C84D0-13B5-4298-B9F3-BF5C6F927793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.4pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEE72FA1-E635-436B-A650-A8D4040925B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.4pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "512F2AB5-EB24-4846-B924-377D040C131A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F42A76-BF06-4DA9-8667-0E81D17B5B9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.5pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02410BAB-C1D7-4883-A27B-C13A72707CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.5pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8509AAEE-225C-4907-884D-F9796ACA40F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD41781D-1F7E-43A7-AD59-ADFE1D04D825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78650B7E-9638-46FF-9656-38E8DFE3FA93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CBBB8E-E0AB-4F7B-A55E-F7BD5F83EAAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1E1172-9D9E-439E-BD4B-4EF372344F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBF40C5-6272-427C-97A1-3CE3B1D47B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB15C5DD-2D76-47ED-883C-D1901B96F391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E249ED-76DA-44B3-A3A7-788F4B1A19DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD0A21F-CD80-4B01-B5D3-9B2281E4F143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA516843-2A45-4705-9669-4B719F722192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA068C0-8067-4A94-9F74-0D1DACF9A9EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F37AD5-120E-4FEA-ADA5-F6C3434B9BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C059835E-8FD9-40DF-BA6F-7E313E49F511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E28A825-56F4-4EC5-9D62-661C0F4B477F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "545CD944-7C64-49E3-A32E-3388B5F3ECF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55A98B3-34ED-4A90-BB78-50CB56B1B51F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22E1FA6-7C9C-4D01-A645-CF41939C1988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5143ED-D4C5-4830-9C96-0B54D03679CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B765AEC-09E9-456C-8B57-09927E55D119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AAFC3B0-DCE3-4190-B279-E095C666FA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9291A565-0BD6-4B5E-B45F-9DE65AB8159D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F53A84-FC66-4963-A728-7285F63D4761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A941FF-423E-49C5-AE1F-FE7ED016CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B34FDB1D-881B-4343-A76E-F23B93A0469A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052914F8-B52C-4AB4-8F85-68D788B588C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617C554F-8E7D-4F8A-AF63-C193934C8215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F11950-A2E4-4F57-BF87-57788B841A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F886B99-E996-4BF7-9BE3-14A6713A997F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65801122-2E5D-4244-9D37-5483F5C731F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A29559D-0DB8-40C8-A6E6-4F37DDD27571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026730B8-3919-4100-8607-C640ADBDD662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C179A3C-8C8C-429B-BACA-8ADAE4170465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F869F3-6D8D-4C95-95F7-5AE42C67362B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B96BB4F-12B0-460A-B5CC-8BA6D69911FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD31177-05BB-4623-AED7-765DB7E44E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18AF3BC6-E33B-44BD-A2F6-A7F5244AA4FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77776503-3258-400D-8404-233EAFA940AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682BC5E2-F2C5-4B6F-8EF0-E05152BB9B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC24558-B7C1-4DE7-BC24-AF092DF0DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0986D113-C9F9-4645-8968-D165EC6B917D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.15_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85F80F3-DC0E-4228-9FA3-D870BC2200D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8608AE1-7930-47CF-B2E8-9E86E2FB5A20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35052",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35073",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/40220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/mime.php?r1=13667&r2=13666&pathrev=13667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT4188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1066.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2009-05-12",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1296",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500356",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/40220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/mime.php?r1=13667&r2=13666&pathrev=13667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1066.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2009-05-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1629",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-14T17:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScript functions, which makes it easier for remote attackers to (1) hijack a session or (2) cause a denial of service (session ID exhaustion) via a brute-force attack."
      }, {
        "lang" : "es",
        "value" : "ajaxterm.js in AjaxTerm v0.10 y versiones anteriores genera IDs de sesión con números aleatorios predecibles basados en determinadas funciones JavaScript, lo cual hace más sencillo a atacantes remotos (1) secuestrar una sesión o (2) provocar una denegación de servicio (agotamiento de ID de sesión) a través de ataques por fuerza bruta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:antony_lesuisse:ajaxterm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10",
            "matchCriteriaId" : "3B6FD790-D7B3-49BB-A79F-8B84928DEEA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:antony_lesuisse:ajaxterm:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B884461C-97D0-48F0-9E88-F63E109FC9B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:antony_lesuisse:ajaxterm:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CD90AC-E887-4330-82A2-092782A4FCF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:antony_lesuisse:ajaxterm:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4049CE69-FB1C-42A8-846F-F211D63028BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:antony_lesuisse:ajaxterm:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD0D43B-9252-442C-9270-00DEA7FD94F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052655.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/42784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/11/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503421/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052655.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/42784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/11/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503421/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-14T17:30:00.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver."
      }, {
        "lang" : "es",
        "value" : "La función nfs_permission en fs/nfs/dir.c en la implementación cliente  NFS en Linux kernel v2.6.29.3 y versiones anteriores, cuando atomic_open está activo, no comprueba la ejecución (también conocido como EXEC or MAY_EXEC) de permisos de bits, lo cual permite a usuarios locales evitar permisos y ejecutar ficheros, como lo demostrado por ficheros en un servidor de ficheros NFSv4."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.29.3",
            "matchCriteriaId" : "F8F01798-4A0A-405B-A70E-C858868A49E0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0507E91-567A-41D6-A7E5-5088A39F75FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFD8D25-7FDF-48DF-8728-5875C44FFB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902BA958-06AA-4EDF-9F9E-1030083EA361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF29100-E124-4416-95CF-18B4246D43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC337BB7-9A45-4406-A783-851F279130EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://article.gmane.org/gmane.linux.nfs/26592",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://bugzilla.linux-nfs.org/show_bug.cgi?id=131",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://linux-nfs.org/pipermail/nfsv4/2006-November/005313.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://linux-nfs.org/pipermail/nfsv4/2006-November/005323.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35106",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35298",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35847",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36327",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0111",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1809",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1865",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:148",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/13/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1157.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505254/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34934",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1331",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500297",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8543",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9990",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://article.gmane.org/gmane.linux.nfs/26592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://bugzilla.linux-nfs.org/show_bug.cgi?id=131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://linux-nfs.org/pipermail/nfsv4/2006-November/005313.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://linux-nfs.org/pipermail/nfsv4/2006-November/005323.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/13/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1157.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505254/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, and 3.\n\nIt was addressed in Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2009-1132.html , https://rhn.redhat.com/errata/RHSA-2009-1106.html , and https://rhn.redhat.com/errata/RHSA-2009-1157.html .",
        "lastModified" : "2009-09-10T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1631",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-14T17:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files."
      }, {
        "lang" : "es",
        "value" : "El componente Mailer en Evolution v2.26.1 y versiones anteriores utiliza permisos de lectura para todos para el directorio .evolution, y determinados directorios y ficheros bajo .evolution/ relacionados con el correo local, lo cual permite a usuarios locales obtener información sensible a través de la lectura de esos ficheros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.26.1",
            "matchCriteriaId" : "0DAA1168-4962-46F2-BEF1-BCB537D154E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10AA832-0C56-4447-BAAB-D6D1F56D59DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9FBE67-2901-426F-9CA6-70022077B2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B11C791D-6E3D-4C96-B5CE-A82D870F61D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38225EC0-5966-4316-B45E-AB1BD4BB5328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3EBC9CD-DFBF-40E1-8F28-F64E27E8EBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101552BA-C509-4767-901B-279C3B0C21F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FBC98A-111A-4E78-AAA5-CF76B7B32D36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA12263C-AD34-405E-B27B-6536DFD77093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180B84B3-8AF2-4C0F-BB49-789D4C403B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E9C9CC-FDEB-45C4-AF92-D3AE7DFEFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F21156-9E93-4936-B16F-1C243B937C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29AB66CF-0B1B-4762-A596-4FC451977D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600F1CB5-B0F8-443C-A25D-34B335931494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7A5DBB-9259-4F0F-A7EA-A4E96D7B2C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA640B6-B155-4503-BB05-4F17E6A71D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C26725-D869-49B0-8405-4472E1639799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2160DB09-250B-4BB4-A77D-79326EB9969C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "854DCABF-696A-4800-8B92-5CCB8F1B5333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526409",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=581604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/12/6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=498648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=581604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/12/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=498648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat does not consider this to be a security issue. By default, user home directories are created with mode 0700 permissions, which would not expose the ~/.evolution/ directory regardless of its own permissions.\n\nIf a user intentionally relaxes permissions on their home directory, they should be auditing all files and directories in order to not expose unwanted files to other local users.",
        "lastModified" : "2009-12-07T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1632",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-14T17:30:00.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in src/racoon/crypto_openssl.c; and (2) the NAT-Traversal (aka NAT-T) keepalive implementation, related to src/racoon/nattraversal.c."
      }, {
        "lang" : "es",
        "value" : "Múltiples fugas de memoria en Ipsec-tools versiones anteriores a v0.7.2 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de vectores envueltos (1) en la verificación de firma durante la autenticación de usuarios con certificados X.509, relacionado con la función eay_check_x509sign en src/racoon/crypto_openssl.c; y (2) la implementación NAT-Traversal (aka NAT-T) keepalive, relacionado con src/racoon/nattraversal.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.1",
            "matchCriteriaId" : "BE498F5F-16FD-476B-8C6B-44F511A1EB22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B6F6FD-EC31-4C7E-9DA5-6F09185BCB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7562F975-4035-44A7-94C1-C2AC45EF7202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00684A2E-376D-41C0-99A2-37114002CBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D0B23A-CE0B-45B2-A077-86F70F5BFBB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF3626E-39A4-4DFA-BD87-9E8A884B49FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC97B47-AC72-4CFB-B088-F92C9B9918A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADAAFB6A-A22F-4539-8B12-AD5BE5829208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C23DEC80-8884-4C8E-92FD-7C8B5D7430E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C63A048D-DA8F-495F-AF07-137A1777329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "33C0E99B-AA38-4A22-90C7-41C7B49E762B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "BBF6E87C-3A10-443C-8F5A-5B51F3F888AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBFDCE2-FFF4-4A22-94E9-40115663CC97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BC2543-F91E-40A0-AF3D-47A8EC7A5FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B05AF4-3F58-439D-BADD-C9758C4BBA0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB016E3-49FE-4ADF-8D4A-479D0D1C5AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B925C34-CB57-443E-8190-34D490377F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F534ABF0-F79F-4BDD-AD0C-705868AD72C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF7C24-5329-491C-B5F5-E2C2513B244C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69EE38D7-0EC3-4349-ADA6-121D0A0C2DE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "947B349F-6D8D-4EE2-8350-F544F8B152C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EA2BBE-4871-429C-A1A9-C956C0467804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1FFEBAAB-5991-480E-985D-064A2FECFD34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5630CFB-58BF-4B58-90AB-B44793D91FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "001D8969-A212-4FD5-BF76-0C269EEB0959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA224969-79DD-4908-8B72-ADEEE1126EE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7654CC3F-2EA0-484E-BA60-A5051DDB27B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF78AECE-073F-4CDE-B988-47E72637C6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0740E4E3-9888-48E2-B7A3-CF8376FBA90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89CEEF7-3EE3-4CAA-92DC-C7D2E9376EE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02E57AC3-9656-4830-84E4-6972AC8D5012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85EF4DB2-4D4C-42F0-85E4-4FF39EB0019E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC5FD67-B39E-4262-A48C-1F87E401C2B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9C46E0E-FABC-44A6-9FE4-E282100B392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipsec-tools:ipsec-tools:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD877C6-CBFE-483E-B556-56FCDA1BFC15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/crypto_openssl.c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/crypto_openssl.c.diff?r1=1.11.6.4&r2=1.11.6.5&f=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/nattraversal.c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/nattraversal.c.diff?r1=1.6&r2=1.6.6.1&f=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=124101704828036&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-03.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_name=20090422151825.GB46988%40zeninc.net&forum_name=ipsec-tools-announce",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=74601&release_id=677611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/12/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1036.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-785-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://trac.ipsec-tools.net/ticket/303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/crypto_openssl.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/crypto_openssl.c.diff?r1=1.11.6.4&r2=1.11.6.5&f=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/nattraversal.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/nattraversal.c.diff?r1=1.6&r2=1.6.6.1&f=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=124101704828036&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_name=20090422151825.GB46988%40zeninc.net&forum_name=ipsec-tools-announce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=74601&release_id=677611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/12/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-785-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://trac.ipsec-tools.net/ticket/303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0688",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-05-15T15:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en la librería CMU Cyrus SASL versiones anteriores a v2.1.23 puede permitir a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de cadenas que son utilizadas como entradas en la función sasl_encode64 en lib/saslutil.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.22",
            "matchCriteriaId" : "BE960939-A4EB-48EF-AF34-55594AE7DC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BEB28E-8CB4-40D1-8C1C-C9176FF85375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6C6AED-7F54-4833-AD7A-DBA943D556CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2480238-1543-41F8-8AE8-8B39C435909F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA3AD0B1-CA87-4781-859D-817AC36C0E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3420B0EC-C2B5-4391-994D-A379A84375D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C792FC66-0903-4339-9594-286E22A332B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFC1662-FC2F-4F0C-9F54-A593D2272728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9163D050-653D-4E19-8650-C63AAE756A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1355304-ECEB-465C-B4E4-61F280B93083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838325C9-9F9F-438C-A3A7-E88C29D0D508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64D37E3-5068-4773-A0E4-DF48CB1B5988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B91E81-E4DF-402D-AFC9-106F8E7BE280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C8037E-E7C5-41F2-8200-6BCF1F4231AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729258B3-E537-4B7D-8C4D-2257B86C746C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2651BC-04DB-4807-95FC-E4DD48A504F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE4D1B8-61E1-4862-B014-C3B4306643F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340A8945-CDC4-4C27-829A-526E7ABE8AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8322F46-565E-4FBE-B42B-A369DB971954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6F481C-5209-499F-94CC-D552961AC4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2103985B-3283-4A60-B8E1-54E3243E0CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33BCA1DC-E392-4BAB-B988-D4EAC2D0762D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FCE614-FC84-4533-B40B-F71B4CA9259A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1FB96F-9A6E-4CAB-8D1D-3B980B1BE125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A6FD48-AB9B-49E9-8987-7791E0CB8CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041EE0B5-4125-4A93-B91B-DD6A49C34FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F34DD-5645-46D1-A256-CFBC5A399B76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A81A7CD5-5E03-45BA-9F49-E2A6AEB7C353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB9648A-2393-41D8-8B2E-72A6E1B3FB68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220421BF-64E7-4014-9143-5699FDF41024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5948936A-076E-48B7-ACE0-C53067780AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237344AF-AE16-40EF-AECE-F7659193B3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662552C9-0BE5-42DF-81BA-DE0DDF72F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E226EA-AD15-4DB9-9599-F7A91FDA879F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A09BFB5-E2B0-43EE-AA80-EE2E58A188AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E838CB52-C13A-45C6-9B21-87A3D8701F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B99BDFC9-2002-4C2A-A3ED-C4FB49A77C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E18DC9D-A315-4A26-816D-86F90E198660"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF41DE28-AD62-4591-8541-0CA3D0397F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F32C986-EAF2-45A1-8DCE-222F422FC3C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22094743-3B1A-42CD-B30C-B4E986C0F511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF7D594-6111-435A-8689-F5B23CB0457B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "413902AD-3EFE-480E-B8EC-C6F28AF84C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A181DAC2-112F-4C6A-8292-7526DD592A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8F6313-9CC5-4685-8E26-BD7CF8CBFDE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923C3D5B-A676-40C2-B8BC-C25A1B5FC1E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-2.1.23.tar.gz",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://osvdb.org/54514",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://osvdb.org/54515",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35094",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35097",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35102",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35206",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35239",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35321",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35497",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35746",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/39428",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-09.xml",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.448834",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-259148-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264248-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-273910-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020755.1-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021699.1-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-184.htm",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0091",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1807",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/238019",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:113",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1116.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34961",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022231",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-790-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103B.html",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1313",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2012",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50554",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10687",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6136",
        "source" : "cret@cert.org"
      }, {
        "url" : "ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-2.1.23.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.448834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-259148-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264248-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-273910-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020755.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021699.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-184.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/238019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1116.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-790-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "The upstream fix for this issue is not backwards compatible and introduces an ABI change not allowed in Red Hat Enterprise Linux.  Therefore, there is no plan to address this problem directly in cyrus-sasl packages.\n\nAll applications shipped in Red Hat Enterprise Linux and using affected sasl_encode64() function were investigated and patched if their use of the function could have security consequences.  See following bug report for further details: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0688#c20",
        "lastModified" : "2009-06-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-15T15:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and password via the email and password parameters."
      }, {
        "lang" : "es",
        "value" : "profile.php en Simple Customer v1.3 no requiere autenticación de administración, lo cual permite a atacantes remotos cambiar la dirección de correo electrónico y la contraseña del administrador a través de los parámetros \"email\" y \"password\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplecustomer:simple_customer:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E61BB74-C185-455F-A1FB-56451C047D09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35030",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34872",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-15T15:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Techno Dreams Job Career Package 3.0 allows remote attackers to bypass authentication and obtain administrative access by setting the JobCareerAdmin cookie to Login."
      }, {
        "lang" : "es",
        "value" : "Techno Dreams Job Career Package v3.0 permite a atacantes remotos evitar la autenticación y obtener acceso de administración \t\r\nmediante el establecimiento de la cookie JobCareerAdmin de inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:t-dreams:job_career_package:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC076E2-33E4-41B9-9BEB-762059CFCD01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54278",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34996",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34865",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-15T15:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Novell 4.03 allows user-assisted attackers to execute arbitrary code via a crafted .NKNT file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Nucleus Data Recovery Kernel Recovery for Novell v4.03 permite a atacantes asistidos por usuario ejecutar código de su elección a través de un fichero .NKNT manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleustechnologies:kernel_recovery:4.03:novell:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2E0D7B-F372-4B9B-895C-5DB9FA73B49C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34798",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.insight-tech.org/index.php?p=Kernel-recovery-for-Novell-Traditional-volumes-v-4-03-Code-Execution-and-DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.insight-tech.org/xploits/KernelrecoveryforNovell%28Traditionalvolumes%29v.4.03CodeExecutionandDoS.py",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.insight-tech.org/index.php?p=Kernel-recovery-for-Novell-Traditional-volumes-v-4-03-Code-Execution-and-DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.insight-tech.org/xploits/KernelrecoveryforNovell%28Traditionalvolumes%29v.4.03CodeExecutionandDoS.py",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-15T15:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Macintosh 4.04 allows user-assisted attackers to execute arbitrary code via a crafted .AMHH file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Nucleus Data Recovery Kernel Recovery for Macintosh v4.04 permite a atacantes asistidos por usuario ejecutar código de su elección a través de un fichero .AMHH manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleustechnologies:kernel_recovery:4.04:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "C9FB2A8D-AEEE-4AEE-BEA3-589F70FE9364"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34860",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.insight-tech.org/index.php?p=Kernel-recovery-for-Macintosh-v-4-04-Buffer-Overflow",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.insight-tech.org/xploits/KernelrecoveryforMacintoshv.4.04BufferOverflow.py",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.insight-tech.org/index.php?p=Kernel-recovery-for-Macintosh-v-4-04-Buffer-Overflow",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.insight-tech.org/xploits/KernelrecoveryforMacintoshv.4.04BufferOverflow.py",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-15T15:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en pila en Mini-stream Ripper v3.0.1.1 permiten a atacantes remotos ejecutar código de su elección a través de (1) una URL rtsp larga en un fichero .ram y (2) una cadena larga en el atributo HREF de un elemento REF en un fichero .asx."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-stream:ripper:3.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F4D1F4-1928-47BC-8060-694755E8441E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34860",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34864",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-15T15:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file.  NOTE: the latter was also subsequently reported in \"prior to 3.1.3.7.\""
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basado en pila en Mini-stream ASX to MP3 Converter 3.0.0.7 permiten que atacantes remotos ejecuten código arbitrario mediante (1) una URL rtsp larga en un archivo .ram y (2) una cadena larga en el atributo HREF de un elemento REF en un archivo .asx. NOTA: sobre este último también se informó en \"anteriores a la 3.1.3.7\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-stream:mini-stream_to_mp3_converter:3.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51126A92-E438-44F7-910C-23768A36CBD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34860",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34864",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://packetstormsecurity.com/files/144558/ASX-To-MP3-Converter-Stack-Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://packetstormsecurity.com/files/144558/ASX-To-MP3-Converter-Stack-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-15T15:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Sorinara Soritong MP3 Player 1.0 allows remote attackers to execute arbitrary code via a crafted .m3u file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Sorinara Soritong MP3 Player v1.0 permite a atacantes remotos ejecutar código de su elección a través de un fichero .m3u manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sorinara:soritong_mp3_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A1C3ED-8DC2-4EB9-8B3C-DD22E6281153"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34863",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-15T15:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Sorinara Streaming Audio Player 0.9 allows remote attackers to execute arbitrary code via a crafted .pla file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Sorinara Streaming Audio Player v0.9 permite a atacantes remotos ejecutar código de su elección a través de un fichero .pla manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sorinara:streaming_audio_player:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FCE893-D63E-45D4-BDAA-28B1E3AA1D75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34861",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-15T15:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en pila en Mini-stream Easy RM-MP3 Converter v3.0.0.7 permiten a atacantes remotos ejecutar código de su elección a través de (1) una URL stsp larga en un fichero .ram y (2) una cadena larga en el atributo HREF de un elemento REF en un fichero .asx."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-stream:easy_rm-mp3_converter:3.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E07D7B-4A2C-40B1-8C3E-A11EC674085B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34860",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34864",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-15T15:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long rtsp URL in a .ram file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Mini-stream RM Downloader v3.0.0.9 permite a atacantes remotos ejecutar código de su elección a través de una URL rtsp larga en un fichero .ram."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-stream:mini-stream_rm_downloader:3.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B76CAF8-6A21-4D01-95CD-77B3F2E008AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34860",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-15T15:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in popcorn.exe in Ultrafunk Popcorn 1.87 allows remote POP3 servers to cause a denial of service (application crash) via a long string in a +OK response.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Ultrafunk Popcorn v1.87 permite a servidores POP3 remotos provocar una denegación de servicio (caída de aplicación) a través de una cadena larga en una respuesta +OK.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultrafunk:popcorn:1.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F089DBD7-FEE3-41F5-B32D-7E45C3F9A85B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34699",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1170",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-16T18:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in arch.php in beLive 0.2.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the arch parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en arch.php en beLive v0.2.3 permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro \"arch\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bicluc:belive:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3119AC-5544-42FF-8E43-CB8555FB8516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35059",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34968",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-16T18:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) albumID, (2) tagID, and (3) photoID parameters to index.html."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en photos.php en Shutter v0.1.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) albumID, (2) tagID, y (3) photoID de index.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenfourzero:shutter:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A11852-04AF-48A7-BEB0-3A21778780FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35049",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503493",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34967",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-16T18:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/member_details.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/member_details.php en 2daybiz Business Community Script permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"mid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2daybiz:business_community_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433A8944-1E6D-4D6B-BB7D-736A712844AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35071",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34976",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-16T18:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request."
      }, {
        "lang" : "es",
        "value" : "admin/adminaddeditdetails.php en Business Community Script no restringe adecuadamente el acceso, lo cual permite a atacantes remotos conseguir privilegios y añadir administradores a través de peticiones directas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2daybiz:business_community_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433A8944-1E6D-4D6B-BB7D-736A712844AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35071",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34976",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-16T18:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in examples/tbs_us_examples_0view.php in TinyButStrong 3.4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the script parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en examples/tbs_us_examples_0view.php en TinyButStrong v3.4.0 permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro \"script\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinybutstrong:tinybutstrong:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9443B3CE-501E-4C03-BAB9-6CFE52C0D0FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2009/1304",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-16T18:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in questiondetail.php in Easy Scripts Answer and Question Script allows remote attackers to inject arbitrary web script or HTML via the questionid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en questiondetail.php en Easy Scripts Answer and Question Script permite a atacantes remotos inyectar web script o HTML a través del parámetro \"questionid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy-scripts:answer_and_question_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCC2FA6-9913-4232-A74D-07B1658198D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35067",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34975",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-16T18:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question Script allow remote authenticated users to execute arbitrary SQL commands via the (1) user name (userid parameter) and (2) password."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en myaccount.php en Easy Scripts Answer y Question Script  permite a usuarios remotos autenticados ejecutar comandos SQL de su elección a través de (1) el nombre de usuario (parámetro \"userid\") y (2) contraseña."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy-scripts:answer_and_question_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCC2FA6-9913-4232-A74D-07B1658198D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35067",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34975",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1656",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-16T18:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka \"command injection vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Xerox WorkCentre y WorkCentre Pro v232, v238, v245, v255, v265, v275; y WorkCentre v5632, v5638, v5645, v5655, v5665, v5675, v5687, v7655, v7656, y v7675 permite a atacantes remotos ejecutar comandos de su elección a través de vectores de ataque desconocidos, también conocido como \"vulnerabilidad de inyección de comando\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:232:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7192AC1-4618-4C6C-BFFF-C6273F27C997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:232:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "DF466CEA-E094-4113-A381-130EE1AC321B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:238:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7975D5-BAD5-4354-930E-3FFEB41A11E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:238:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "FA751FA5-E060-4C5B-9DB2-D89465A7043C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:245:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9836D15-5A61-44B4-B442-500DC6E2748B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:245:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "2FFE7B1B-4F8D-4437-8C9A-F0E11E2CF3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:255:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAAD7494-4F32-46FE-B320-1F06DA02081A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:255:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "2A3CE77F-1CDF-4E1C-8CBC-C107A2A0F12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:265:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE43B88-9033-4AA1-8046-DE58FF02484B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:265:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "8E62E735-5432-4478-AF06-BF7A36BE64BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:275:*:*:*:*:*:*:*",
            "matchCriteriaId" : "885D96FF-CEED-4347-BC9F-228F2D4B8D90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:275:pro:*:*:*:*:*:*",
            "matchCriteriaId" : "E010DD9E-0031-47CA-8CEC-FAACB5180C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:5632:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D26F3542-F758-4E46-B8BF-9E72448F6091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:5638:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E206503-ED89-4281-8B02-57B6F2ED6C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:5645:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CE7A70-8F68-4DFA-B2F0-FEFA1A084BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:5655:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541DA578-0E64-4FDB-BFB2-52D40FF36F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:5665:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95F5D811-6AF6-4F0C-9453-9398F2080AFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:5675:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D0EF74-2943-4B7C-802F-924D62018DF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:5687:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5835A11D-0D4A-4B5F-A97D-2C39BB87D6BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:7655:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D834AA44-1B04-42B2-9E31-0CF9202679B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:7665:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6297E5B9-28C5-4F7B-A60C-09287D381EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre:7675:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C69CB8A-DD99-4C73-A789-FACD73316ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35101",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1328",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX09-02_v1.0.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX09-02_v1.0.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T12:00:01.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7 for b2evolution allow remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en el plugin Starrating para b2evolution antes de v0.7.7 permiten a atacantes remotos ejecutar comandos SQL a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:b2evolution:b2evolution:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E867DDE0-B4EE-403A-B472-D2A128445B8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b2evolution:starrating_plugin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.6",
            "matchCriteriaId" : "B5CA3A10-8A9B-4DB4-B5A5-CCA6C992BD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b2evolution:starrating_plugin:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8BBD5B-86C1-4334-8BD6-E09FA599FEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b2evolution:starrating_plugin:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E9EF71-9FF3-47E8-B2EB-BE92EA84664C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b2evolution:starrating_plugin:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DD0346A-3FB7-41FC-BA8B-E7F31AE162DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35053",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=681352&group_id=160495",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=681352&group_id=160495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T12:00:01.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in admin/admin.php in Realty Webware Technologies Realty Web-Base 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user (username) and (2) password parameters.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en admin/admin.php en Realty Web-Base v1.0 de Realty Webware permiten a atacantes remotos ejecutar comandos SQL a través de los parámetros (1)usuario (username) y (2) password. Nota: algunas de estas informaciones se obtienen de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realtywebware:realty_web-base:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D93444-1F4A-4FF4-A683-55B1BE321844"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54372",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35033",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34886",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1659",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T12:00:01.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files via an avatar file with an accepted Content-Type such as image/gif, then requesting the file in admin/banners/."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de carga de archivos sin restricciones en admin/uploadimage.php en eLitius v1.0  permite a atacantes remotos saltarse las restricciones de acceso puestas y subir y ejecutar ficheros de su elección a través de un fichero de avatar con un tipo de contenido como image/gif, y a continuación solicitando el fichero en admin/banners."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intelliants:elitius:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BE24D22-AB85-49A5-994D-CA8214BD4C47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34813",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1248",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T12:00:01.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in URUWorks ViPlay3 3.0 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file entry in a .vpl file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en URUWorks ViPlay3 v3.0 y anteriores permite a atacantes remotos provocar una denegación de servicio (mediante caída de la aplicación) y posiblemente ejecutar código arbitrario a través de una entrada en un archivo .VPL"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urusoft:viplay3:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25B4E5C8-388B-46B9-8B45-68DE3D12C2B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T12:00:01.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/ utopic.php en uTopic v1.0, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a través del parámetro rating en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anoldman:utopic:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3DC1181-2B54-4AF2-8DC0-1D26AAC2AB2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35051",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=261386&release_id=680474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503422/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34907",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1288",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=261386&release_id=680474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503422/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T12:00:01.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in admin/login.php in Wright Way Services Recipe Script 5 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) Password fields, as reachable from admin/index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en admin/login.php en Wright Way Services Recipe Script v5, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los campos (1) nombre de usuario y (2) password, como a los que se accede desde admin/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recipescript:recipe_script:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D57AC7C-01F8-402F-AFFD-9D8E917C20AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34885",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T12:00:01.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads/[username] directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de carga de archivos sin restricciones en myaccount.php en Easy scripts Answer and Question Script permite a atacantes remotos ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable para, a continuación, acceder a él a través de una solicitud directa al archivo en el directorio uploads/[nombre de usuario]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy-scripts:answer_and_question_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCC2FA6-9913-4232-A74D-07B1658198D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T12:00:01.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via modified userid, txtpassword, and txtRpassword parameters."
      }, {
        "lang" : "es",
        "value" : "myaccount.php en Easy Scripts Answer y Question Script no verifica la contraseña actual antes de cambiar contraseña, lo que permite a atacantes remotos cambiar la contraseña de otros usuarios y obtener privilegios mediante la modificación de parámetros: userid,  txtpassword, y txtRpassword."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy-scripts:answer_and_question_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCC2FA6-9913-4232-A74D-07B1658198D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T12:00:01.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to remove arbitrary user accounts via a modified userid parameter without specifying any additional fields."
      }, {
        "lang" : "es",
        "value" : "myaccount.php en Easy Scripts Answer and Question Script permite a atacantes remotos eliminar aleatoriamente cuentas de usuario a través de una modificación en el parámetro userid sin especificar ningún parámetro adicional."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy-scripts:answer_and_question_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCC2FA6-9913-4232-A74D-07B1658198D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T18:30:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Easy Login in the Sender module in HP Remote Graphics Software (RGS) 4.0.0 through 5.2.4 allows remote attackers to execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad no especificada en Easy Login en el módulo Sender de HP Graphics Software (RGS) v4.0.0 a v5.2.4 permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13875F9-8644-49D0-9183-9404E8DEB62B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCEF21E-75F6-4DE2-B425-6DD55ED5DE24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3EE3F1-E170-48E5-8696-D40063D8815D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF60515-706F-440F-B15C-463616E92174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62BDD91-0C35-4DA9-9EED-28C5F275093C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "247AFF9F-CE1C-4F81-8039-6C53CBB9A372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0AAAA26-6AAE-44CD-B174-87F39A8D4493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "694C4C6D-F626-4432-A71C-0211EF2BD614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DFB171-34C4-4E43-A37E-0D54D50864A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C1A968-7DC0-4343-BF41-9A66B2D4EE30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC75895C-CE1B-412A-9978-F869BE33D745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74D480B3-8E4C-498A-8F55-EE894A021214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C10CC058-9DED-49B1-A9A3-F9ACDAA99223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD9C41B-6E00-4CF8-B4FC-EBE5293E5F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1406753-ECC8-4556-AE82-C86D3B58F8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89D247E-366C-4E94-BA90-B5EF22EB0545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8895029D-B8E9-4FA6-915E-CC5C28379ABF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35087",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35089",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022221",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01731970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1323",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01731970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T18:30:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in CycloMedia CycloScopeLite 2.50.3.0 allow remote attackers to execute arbitrary code via the ReturnConnection method in (1) CM_ADOConnection.dll, (2) CM_AddressInfoDBC.dll, and (3) CM_RecordingLocationDBC.dll, related to improper dereferencing.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabildiades no especificadas en CycloMedia CycloScopeLite v2.50.3.0 permite a atacantes remotos ejecutar codigo de su elección a través del método ReturnConnection en (1) CM_ADOConnection.dll, (2) CM_AddressInfoDBC.dll, y (3) CM_RecordingLocationDBC.dll, relativo a una desreferenciación inapropiada. NOTA: el origen de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyclomedia:cycloscopelite:2.50.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07BFCAD1-761F-40D3-8B0F-0A3A770C63B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35046",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T18:30:00.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long entry in a .m3u file, a different vector than CVE-2009-5137."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región stack de la memoria en CastRipper de Mini-stream versión 2.50.70, permite a los atacantes remotos ejecutar código arbitrario por medio de una entrada larga en un archivo .m3u, un vector diferente de CVE-2009-5137."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-stream:castripper:2.50.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC6E9D71-B555-45E0-8BF7-BAC7F3785921"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T18:30:00.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TYPSoft FTP Server 1.11 allows remote attackers to cause a denial of service (CPU consumption) by sending an ABOR (abort) command without an active file transfer."
      }, {
        "lang" : "es",
        "value" : "TYPSoft FTP Server V1.11 permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) enviando un comando ABOR (abortar) sin una transferencia de fichero activa.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typsoft:typsoft_ftp_server:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B3FAD7-8C90-4F05-8824-96752D4F0814"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34901",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T18:30:00.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The smarty_function_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the equation attribute of the math function.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "La función smarty_function_math en libs/plugins/function.math.php en Smarty v2.6.22 permite que atacantes, dependiendo del contexto, ejecutar comandos de su elección a través de metacaracteres en el atributo equation de la función math. NOTE: algunos de esos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smarty:smarty:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B95000D-10A0-4D15-946E-24E432C6A464"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35072",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34918",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-791-3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01274.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01283.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01287.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-791-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01274.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01283.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01287.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Per http://secunia.com/advisories/35072\r\n\"The vulnerability is confirmed in version 2.6.22 on Windows. Other versions may also be affected.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T18:30:01.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin accounts via unspecified vectors.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "user/index.php en TCPDB v3.8 no requiere autenticación administrativa, lo que permite a atacantes remotos añadir cuentas a través de vectores no específicos. NOTA: algunos de estos detalles se han obtenido de información de terceros.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdb:tcpdb:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3433803A-1D69-4DC0-A5E1-ED856554F684"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34966",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T18:30:01.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the (1) setInstallerType, (2) setAdditionalPackages, (3) compareVersion, (4) getStaticCLSID, or (5) launch method."
      }, {
        "lang" : "es",
        "value" : "Múltiple desbordamiento de búfer en el control ActiveX Deployment Toolkit en deploytk.dll v6.0.130.3 en Sun Java SE Runtime Environment (también conocido como JRE) v6 Update 13 permite a atacantes remotos ejecutar código de su elección a través de un argumento string largo sobre los métodos (1) setInstallerType, (2) setAdditionalPackages, (3) compareVersion, (4) getStaticCLSID, o (5) launch."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "26826BB7-0EF6-439B-87F4-5BCCEA3A8907"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34931",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T18:30:01.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allows remote attackers to (1) execute arbitrary code via a .jnlp URL in the argument to the launch method, and might allow remote attackers to launch JRE installation processes via the (2) installLatestJRE or (3) installJRE method."
      }, {
        "lang" : "es",
        "value" : "El control ActiveX Deployment Toolkit en deploytk.dll v6.0.130.3 en Sun Java SE Runtime Environment (también conocido como JRE) v6 Update 13 permite a atacantes remotos (1) ejecutar código arbitrario a través de una URL .jnlp  en el argumentos del método launch y posiblemente permita a atacantes remotos lanzar el proceso de instalación de JRE a través de (2) installLatestJRE y (3) método installJRE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "26826BB7-0EF6-439B-87F4-5BCCEA3A8907"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34931",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T18:30:01.063",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Sun Solaris 9 allows local users to cause a denial of service (panic) by calling fstat with a first argument of AT_FDCWD."
      }, {
        "lang" : "es",
        "value" : "El Kernel en Sun Solaris v9 permite a usuarios locales provocar una denegación de servicio (panic) llamando a fstat con un primer argumento de AT_FDCWD."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-40-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-257988-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-188.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1315",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-40-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-257988-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-188.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T18:30:01.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a [TOOL_SETTINGS] section in a .mcp file, possibly a related issue to CVE-2009-1608."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Microchip MPLAB IDE v8.30 permite a atacantes remotos asistidos por usuarios, ejecutar código de su elección a través de un nombre de Path .cof largo en una sección [TOOL_SETTINGS] en un fichero .mcp, posiblemente relacionado con CVE-2009-1608."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microchip:mplab_ide:8.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30940343-3164-4F3F-B5AB-D6BEB9E1C458"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35054",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T18:30:01.110",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en ElectraSoft 32bit FTP v09.04.24 permite a servidores FTP remotos ejecutar código de su elección a través de una réplica 227 larga a un comando PASV."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electrasoft:32bit_ftp:09.04.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7485B20-DFD9-46D7-BDE1-B72EA071C104"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34838",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T18:30:01.127",
      "lastModified" : "2023-11-07T02:03:58.533",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-1535.  Reason: This candidate is a duplicate of CVE-2009-1535.  Notes: All CVE users should reference CVE-2009-1535 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ],
      "evaluatorImpact" : "Per http://www.microsoft.com/technet/security/advisory/971492.mspx\r\n\r\nAffected Software\r\n\r\nMicrosoft Internet Information Services 5.0\r\n\r\nMicrosoft Internet Information Services 5.1\r\n\r\nMicrosoft Internet Information Services 6.0"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T18:30:01.157",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allow (1) remote authenticated users to inject arbitrary PHP code into files by placing PHP sequences into the account's \"display name\" setting and then invoking boards/boards_rss.php, and might allow (2) remote attackers to inject arbitrary PHP code into files via the HTTP Host header in a request to boards/boards_rss.php."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de inyección de código estático en la función savefeed en rss/feedcreator.class.php en Bitweaver v2.6 y anteriores permite (1) a usuarios remotos autenticados, inyectar código PHP de su elección en ficheros, introduciendo secuencias PHP en la configuración \"display name\" de las cuentas, y ejecutando boards/boards_rss.php, y podría permitir (2) a atacantes remotos inyectar código php de su elección en ficheros a través de la cabecera HTTP Host en una respuesta a boards/boards_rss.php"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6",
            "matchCriteriaId" : "B2241EB6-A886-4C04-8632-997D6CA4F228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A31BF87D-6D73-442A-9C6C-7926A2A3E8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.1.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C0A41-841E-48B2-88D3-B94A43F56D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6E9A08-F938-4E3F-BA68-E307E839335B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5657A816-9C53-4D97-90C4-357FCCA7057D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D44BA4-E55B-4E4A-B7CE-C5C347FB3902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E3F9B77-302B-4EB0-B103-594CB366F880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA2896F-D3E4-489D-A08F-7B2E926182C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA9025B9-B31C-4D82-9FA0-864C3F19C7A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35057",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-18T18:30:01.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the version parameter to boards/boards_rss.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio transversal en la función saveFeed en rss/feedcreator.class.php en Bitweaver v2.6 y anteriores  permite a atacantes remotos crear o sobreescribir ficheros de su elección a través de un .. (punto punto) en el parámetro \"version\" sobre boards/boards_rss.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6",
            "matchCriteriaId" : "B2241EB6-A886-4C04-8632-997D6CA4F228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A31BF87D-6D73-442A-9C6C-7926A2A3E8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.1.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C0A41-841E-48B2-88D3-B94A43F56D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6E9A08-F938-4E3F-BA68-E307E839335B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5657A816-9C53-4D97-90C4-357FCCA7057D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D44BA4-E55B-4E4A-B7CE-C5C347FB3902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E3F9B77-302B-4EB0-B103-594CB366F880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA2896F-D3E4-489D-A08F-7B2E926182C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA9025B9-B31C-4D82-9FA0-864C3F19C7A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35057",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-19T19:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función crypto_recv en ntp_crypto.c en ntpd en NTP anteriores a v4.2.4p7 y v4.2.5 anterior a v4.2.5p74, cuando OpenSSL y autokey están activados, permite a atacantes remotos ejecutar código de forma arbitraria a través de paquetes manipulados que contienen un campo de extension."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4p0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA843BCD-372A-42F5-A8C0-1AD32FA9E94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B980A178-2958-4B36-8AD8-3932B12C5A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D65210A-F80E-4019-91DA-49838369E03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4p3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29FAB224-3493-4273-A655-10BE44F5B5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4p4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093F0DD2-9E88-4138-AFF5-69105E7F2C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4p5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3590927-E242-411D-822A-33337D6B8A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.4p6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20FCD55C-D4A8-4544-81AF-C920B3B48A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881ED983-01B5-4A02-B671-8744EC0E1904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3897870-1724-4018-8F77-122548022535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7012720C-D4BD-40C5-8521-6859BE46DDDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8474ADA-F2A8-494D-BB6F-6EA4D4B865B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFC396E-2E5C-4576-94D3-96C619523CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F55042-5CA1-453E-A786-A8B346C02BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C5930E-7792-4940-9EC3-CD5AE78D51B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87004177-C6F2-4057-919D-20D91D01A8B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01570E4-447A-4F60-BD5C-40D201A464F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440B4315-C7B3-4930-BD4D-B55BD3EEEE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760050D5-5F8E-41CE-98DA-31E5BFB8A6C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E4FED4-A7F0-44C0-9405-1AB07D9B0079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78977FE3-FF1E-47CA-9B97-3E6EC18894B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E24A99-575E-42EB-9463-29021A33C914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB88D29-930C-4552-889D-4DBF23EC3760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E13EE5C4-594E-4004-A8BC-AD4D3608FF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16009504-A8ED-43E9-A7F9-E8E1628449BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4A86DA-E8CB-44B5-9E7D-A69A149FAF8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F918DA-D4F3-4016-861E-78A8A00F9FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD908ABD-5A18-436B-830B-7F252E22B3CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8152815-3510-4FE7-A8B9-51EB857D7262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C03D4FCB-A0CE-45EA-80FC-523F388E51A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86CBFD14-8B03-4F0D-8B0F-670629334D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "656E046B-C3F2-4DD5-B3C2-C60ACEBC808C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014A6026-C4B9-4E09-9170-059D1FD8D95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BAB21E-C818-492A-A537-EFDF57E412EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CACCD1-DF24-4226-A891-6FD7EBB0E57C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DE9A3-5ABF-4E9F-985D-0633893CAECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A27E0EA-38B8-49F0-818B-BB4CAA7EF7B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8347419F-6B7F-4BA6-B03C-3A52E5F7148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D73277-B636-4F50-88F0-A79278EB6AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4701E3A4-FE51-4A48-8ABB-67DFE815BBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2E5F24-1242-4819-8787-4F2EB9E97C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD55122C-2983-4193-BC46-6269A348EC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4199168-912C-4702-801C-A36394ED494B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D89067A-7F24-458A-AD6F-ADFB92C24F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362FDB7C-EA5E-480D-96FB-2BCEF7F4E64A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3E2B20-E6B7-47DB-8A02-CAAF6C2B1597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F3B4EA-053B-4A25-88F8-A788F88488A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B31D93-005E-498A-8935-EC31DC104B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "125D14D2-3443-46E6-AC58-967683604B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2969C79-0B8F-4759-9978-7432BA388ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485E789D-B602-477E-BD10-0054AEE98D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83284150-1E06-45B0-BD75-7BE895EB99B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3298B973-D08A-44A6-AD60-0E18A9FF55AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06314717-CF64-4269-A049-F70396CA000A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF909823-66E7-49AE-9385-DCDA7CD5EB51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FE8C8E-6051-4DB8-B03B-6EF211992545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FF094E-49CA-41BB-A568-2BA49D770270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE0D9B6F-3838-40ED-9998-89E66EEA79EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8076E3B3-57DA-425A-9CBD-426ADE3735F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66A89E0-B31A-4469-859C-6C323399A706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6813F72B-4D8B-4903-BCB7-5A0EDE288B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8F957C-632F-4E5D-82E3-B3DF6572C924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC1DBF1-C2EE-4241-A50F-40E837B84C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7826192-660B-49AC-B1B8-BD799712DF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3443D451-1845-4440-AFB8-D6432585CBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88C81B35-94C8-4881-B2FA-AF8214AAEBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D3BDB8B-21E7-45EB-B39A-8822B64196ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "808929AC-EC57-49FF-9FCC-FE593743EE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28C8CE4D-6C53-490E-8223-A6A4EEEA2CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C49B2C1E-5653-4DA9-96A1-8E84A0AAB95E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DCD5198-26B4-4334-8077-916EA21F0760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD533741-97B8-4726-A7C4-4B7D0723817E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0336E989-FB7F-49CC-9FC9-F10B5C6716CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD72509-2E02-4C18-8AB1-7FAB7016EB34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD88BB1-C82A-4021-BEA3-40B23CA2A5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79740F38-3210-4AF2-80C7-692DA5C5E315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1FB0C1-3A68-41A3-9290-1CAA09042716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA193DE-E94C-4229-8FBC-1E35884F310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.5p73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76D8727-2324-4A2B-B73A-99E452FD07E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1039.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1040.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-09:11.ntpd.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.566238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/853097",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=499694",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.ntp.org/bugs/show_bug.cgi?id=1151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/777-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00293.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1039.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-09:11.ntpd.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.566238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/853097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=499694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.ntp.org/bugs/show_bug.cgi?id=1151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/777-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00293.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1377",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-05-19T19:30:00.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of \"future epoch\" DTLS records that are buffered in a queue, aka \"DTLS record buffer limitation bug.\""
      }, {
        "lang" : "es",
        "value" : "La función dtls1_buffer_record en ssl/d1_pkt.c en OpenSSL 0.9.8k y anteriores permite a atacantes remotos producir una denegación de servicio (consumo de memoria) a través de series largas de registros DTLS de \"eras futuras\" que se almacenan en búfer en una cola, también conocido como \"fallo de limitación de la grabación de búfer DTLS\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.9.8",
            "versionEndExcluding" : "0.9.8m",
            "matchCriteriaId" : "EA054F35-6E05-4A24-9195-F80C0C2761DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://cvs.openssl.org/chngview?cn=18187",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=openssl-dev&m=124247675613888&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35128",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35461",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35571",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35729",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36533",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37003",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38761",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42724",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42733",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200912-01.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:120",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/18/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35001",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022241",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-792-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1377",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://kb.bluecoat.com/index?page=content&id=SA50",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1377",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6683",
        "source" : "secalert@redhat.com",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9663",
        "source" : "secalert@redhat.com",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://cvs.openssl.org/chngview?cn=18187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=openssl-dev&m=124247675613888&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200912-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/18/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-792-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://kb.bluecoat.com/index?page=content&id=SA50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect versions of openssl as shipped in Red Hat Enterprise Linux 3 and 4.\n\nThis issue was addressed for Red Hat Enterprise Linux 5 \nby http://rhn.redhat.com/errata/RHSA-2009-1335.html\n\nNote that both the DTLS specification and OpenSSLs implementation is still in development and unlikely to be used in production environments.  There is no component shipped in Red Hat Enterprise Linux 5 using OpenSSLs DTLS implementation, except for OpenSSLs testing command line client - openssl.",
        "lastModified" : "2009-09-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1378",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-05-19T19:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka \"DTLS fragment handling memory leak.\""
      }, {
        "lang" : "es",
        "value" : "Múltiples fugas de memoria en la función dtls1_process_out_of_seq_message en ssl/d1_both.c en OpenSSL v0.9.8k y anteriores permite a atacantes remotos producir una denegación de servicio (consumo de memoria) a través de registros DTLS que (1) son duplicados o (2) tienen una secuencia de números mucho mayor que la actual secuencia de números, conocido también como \"fuga de memoria en el manejo de fragmentos DTLS\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "0.9.8",
            "versionEndExcluding" : "0.9.8m",
            "matchCriteriaId" : "5DC47E9C-E7B1-4EF7-AAEE-7D7746544D47"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://cvs.openssl.org/chngview?cn=18188",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=openssl-dev&m=124247679213944&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=openssl-dev&m=124263491424212&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rt.openssl.org/Ticket/Display.html?id=1931&user=guest&pass=guest",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35128",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35461",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35571",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35729",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36533",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37003",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38761",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42724",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42733",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200912-01.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:120",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/18/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35001",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022241",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-792-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1377",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://kb.bluecoat.com/index?page=content&id=SA50",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1378",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11309",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7229",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Tool Signature" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8720",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://cvs.openssl.org/chngview?cn=18188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=openssl-dev&m=124247679213944&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=openssl-dev&m=124263491424212&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rt.openssl.org/Ticket/Display.html?id=1931&user=guest&pass=guest",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200912-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/18/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-792-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://kb.bluecoat.com/index?page=content&id=SA50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Tool Signature" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect versions of openssl as shipped in Red Hat Enterprise Linux 3 and 4.\n\nThis issue was addressed for Red Hat Enterprise Linux 5 \nby http://rhn.redhat.com/errata/RHSA-2009-1335.html\n\nNote that both the DTLS specification and OpenSSLs implementation is still in development and unlikely to be used in production environments.  There is no component shipped in Red Hat Enterprise Linux 5 using OpenSSLs DTLS implementation, except for OpenSSLs testing command line client - openssl.\n",
        "lastModified" : "2009-09-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1379",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-05-19T19:30:00.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso después de la liberación en (use-after-free) en la función dtls1_retrieve_buffered_fragment en ssl/d1_both.c en OpenSSL v1.0.0 Beta 2 permite a atacantes remotos producir una denegación de servicio (caída de openssl s_client) a posiblemente tenga un impacto sin especificar a través de un paquete DTLS, como se demostró mediante un paquete de un servidor que utiliza un certificado de servidor manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rt.openssl.org/Ticket/Display.html?id=1923&user=guest&pass=guest",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35461",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35571",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36533",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37003",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/38761",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/42724",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/42733",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200912-01.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/18/4",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35138",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022241",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-792-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50661",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://kb.bluecoat.com/index?page=content&id=SA50",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1379",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6848",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9744",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rt.openssl.org/Ticket/Display.html?id=1923&user=guest&pass=guest",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/42724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/42733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200912-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/18/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-792-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kb.bluecoat.com/index?page=content&id=SA50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/bugs/cve/2009-1379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect versions of openssl as shipped in Red Hat Enterprise Linux 3 and 4.\n\nThis issue was addressed for Red Hat Enterprise Linux 5 \nby http://rhn.redhat.com/errata/RHSA-2009-1335.html\n\nNote that both the DTLS specification and OpenSSLs implementation is still in development and unlikely to be used in production environments.  There is no component shipped in Red Hat Enterprise Linux 5 using OpenSSLs DTLS implementation, except for OpenSSLs testing command line client - openssl.\n",
        "lastModified" : "2009-09-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-19T19:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 3.0.1.73 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en HP System Management Homepage (SMH) anteriores a v3.0.1.73 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de vectores inespecíficos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0-68",
            "matchCriteriaId" : "904009FC-0506-4119-A26D-7CF3CE5EBDEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9A9442-18B7-4858-AB3A-19FE272A5C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90042282-9151-4D8E-8093-D85E57BD332C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.0.1.104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDEA64C-7511-4E71-8DFA-6E66531AC461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3EF92B4-AAC3-4957-9D8F-1796C2045962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.0.2.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F304AB45-8298-4426-91B3-B99ED7FF6C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D44CEFC1-CE95-4549-A981-C3F259075B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.0-103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C035D5C-90ED-4259-B05C-BEF93D81F42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.0-103\\(a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "824996A5-C2CC-4FC5-8705-F6B4D69F39B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.0-109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBF9F0E-AA30-4E5A-B23E-DD895303245C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.0-118:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2005B3-1914-4B4B-892A-8CCC0F39EF6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.0.121:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61ED0B94-3CC3-427C-A038-90C6CEF768BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA42455-F9B9-49BD-BAFA-4A02C554ECE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6426924C-AA5C-4C93-AB8B-9314CD010139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.2-127:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D7DCF4F-609A-497B-A32E-3D946EC2EE07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.2.127:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEAE287-0A13-4DB3-A36D-BD50148BE9B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E5C789-9827-47DF-A47C-454DF7687E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.3.132:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D85F0390-B076-4B54-9E4E-67472FF3759E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29FE29FC-AD24-4C89-9AAC-9D49C54A5CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.4-143:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECF53BE-0E3A-41F8-AFD2-29CA3F2D0C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.4.143:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D25EAF-145F-4D96-836E-1B7C3FE53E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EBB25A-A1DE-4943-9EE5-0FCF21A55666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.5-146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C43EF082-E9AB-41D3-B7AF-936B84BB6AEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.5.146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5379C7-0061-4C53-8B81-45F8063956DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.5.146:b:*:*:*:*:*:*",
            "matchCriteriaId" : "FD94C7BD-B398-42BF-9FB9-EB4581AF98E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B61485E4-6EC1-4886-AB47-F5BC8E72A08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.6-156:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203163D8-15E8-4F2D-A807-7643EA0D6920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.6.156:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF2CB88-3E10-48BF-8D49-994A3E6014E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E354FF4-5CDD-4B79-B56C-2C774B235D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.7-168:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC9CEFE-23C2-4455-BE6F-51D26487D3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.7.168:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1A3FCF-B0AD-45DF-96D3-09BE755F94A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3DACC6F-DCE8-4890-BE47-488CB7B2DF77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.8-177:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0DA8D6-3B1D-4935-855E-9431EB4BA683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.8.179:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75CC6FB-FB51-42DD-B708-54A99B10F70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AFAF26C-7BFE-479E-880C-B13E78780625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.9-178:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC95912B-8C95-4CA8-BDA7-76074E20E362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3162C720-A042-48D8-A598-5CC9845C5715"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.10-186:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDD728B-9E92-4EC8-BD61-6E1AE300CE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.10.186:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D573A1-93F3-4652-9E64-EDED09731EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.10.186:b:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6EF4B8-AF43-4777-9556-CA6DFF864B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.10.186:c:*:*:*:*:*:*",
            "matchCriteriaId" : "42050FEF-5456-4340-9AD1-00448E4B5E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEEE1E4-1883-411E-A4BA-985041880439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.11-197:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3E3BC1-A986-4942-80FA-5911428F8E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.11.197:a:*:*:*:*:*:*",
            "matchCriteriaId" : "96B6DA99-20FA-4622-8F1C-3086143CAE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.12-118:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7038AC00-8A30-49CB-956D-715053A920D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.12-200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F425004A-EC16-44E8-A297-21F33F802FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.12.201:*:*:*:*:*:*:*",
            "matchCriteriaId" : "849BE02B-513B-405E-A430-DF9D02C0A666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.14.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B2D3D-1B9A-4AE4-BDE2-4E6C388356EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.15-210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD611329-F5D3-455D-A275-4D61429357E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.15.210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09857263-747C-40F5-9744-21FD03187CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14DB20-E22E-466E-A3CD-C841CFDF2A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8881820B-29B4-41DB-AEED-5513A347E290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:3.0.0.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C78C2C5A-F788-4F25-BD19-50C76C802329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01745065",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN02331156/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000029.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022242",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01745065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN02331156/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Per: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01745065\r\n\r\n\r\n\"SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.\r\n\r\nHP System Management Homepage (SMH) before v3.0.1.73 running on Linux and Windows Server 2003, 2008.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-20T18:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en NetMechanica NetDecision TFTP Server v4.2, permite a los atacantes remotos leer o modificar arbitrariamente archivos a través de una secuencia de salto de directorio en el comandos (1) GET o (2) PUT"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmechanica:netdecision_tftp_server:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78134BCD-15B2-42AF-8629-F684465915A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35131",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.princeofnigeria.org/blogs/index.php/2009/05/17/netdecision-tftp-server-4-2-tftp-directo?blog=1",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.princeofnigeria.org/blogs/index.php/2009/05/17/netdecision-tftp-server-4-2-tftp-directo?blog=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-20T18:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in panel/index.php in MLFFAT 2.1 allows remote attackers to execute arbitrary SQL commands via a base64-encoded supervisor cookie."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en panel/index.php en MLFFAT v2.1 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de una cookie de supervisor codificada en base64."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlffat:mlffat:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC01F84B-F780-45C9-BAAF-4C92ED78AD05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/exploitalert/6198",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.sebug.net/exploit/11292/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34982",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1308",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/exploitalert/6198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.sebug.net/exploit/11292/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-20T19:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin/usermanager in IPplan 4.91a allows remote attackers to inject arbitrary web script or HTML via the grp parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en admin/usermanager en IPplan versión 4.91a permite a los atacantes remotos inyectar script web o HTML arbitrario mediante el parámetro grp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:richard_ellerbrock:ipplan:4.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14228614-7FE5-402B-8A02-BB2AFD2996B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://holisticinfosec.org/content/view/113/45/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34985",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://holisticinfosec.org/content/view/113/45/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-20T19:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of administrators for requests that (1) change the password, (2) add users, or (3) delete users via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en IPplan v4.91a permite a los atacantes remotos secuestrar la autenticación del administración, por peticiones que (1) cambian la contraseña, (2)añaden usuarios, o (3) borran usuarios a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:richard_ellerbrock:ipplan:4.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14228614-7FE5-402B-8A02-BB2AFD2996B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://holisticinfosec.org/content/view/113/45/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34985",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://holisticinfosec.org/content/view/113/45/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-20T19:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in listing_video.php in VidSharePro allows remote attackers to execute arbitrary SQL commands via the catid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en listing_video.php en VidSharePro permite a los atacantes remotos, ejecutar arbitrariamente comandos SQL a través del parámetro catid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omnisoftsol:vidsharepro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F30391-E2EB-4E9A-A5A3-3E38F0161A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35149",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35033",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-20T19:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in VidSharePro allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en search.php en VidSharePro, permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro searchtxt. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omnisoftsol:vidsharepro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F30391-E2EB-4E9A-A5A3-3E38F0161A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35149",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35033",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-20T19:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the GridSupport (GS) Ticket System (com_gsticketsystem) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a viewCategory action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente GridSupport (GS) Ticket System (com_gsticketsystem) para Joomla! que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro catid en la acción viewCategory para index.php"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_gsticketsystem:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A04942-E95F-4655-AC62-30606D3E6B96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35025",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-20T19:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in bom.php in MyPic 2.1 allows remote attackers to list files in arbitrary directories via a .. (dot dot) in the dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en bom.php en MyPic v2.1 que permite a los atacantes remotos, listar archivos en directorios arbitrarios a través de .. (punto punto) en el parámetro dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:diqiye:mypic:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C8789F-6CE1-42B4-92E9-6EF97FB480B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hi.baidu.com/hirfire/blog/item/c3c0f6dda3ca47d18d10291a.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35092",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hi.baidu.com/hirfire/blog/item/c3c0f6dda3ca47d18d10291a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-20T19:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Feed Block 6.x-1.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with administrator feed permissions to inject arbitrary web script or HTML via unspecified vectors in \"aggregator items.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Feed Block v6.x-1.x anteriores a v6.x-1.1, un módulo para Drupal, que permite a los usuarios remotos autenticados con permisos de administrador, inyectar arbitrariamente una secuencia de comandos web o HTML a través de vectores no especificados en \"aggregator items\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanjaros:feed_block:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F52F6528-6695-41F6-A467-04A7895009E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanjaros:feed_block:6.x-1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBA9F82-D55C-4181-9BA1-944F6F1E78B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanjaros:feed_block:6.x-1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D932C90A-6A7F-4761-A13F-24AB2D47138C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanjaros:feed_block:6.x-1.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "4812D146-36AB-40F4-AAD0-5CED5F78E401"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B1170D-AD33-4C7A-892D-63AC71B032CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/453098",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/461706",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35044",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1319",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/453098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/461706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-20T19:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PAD Site Scripts 3.6 allows remote attackers to bypass authentication and gain privileges as other users, including administrative privileges, by setting the authuser cookie parameter to a valid username."
      }, {
        "lang" : "es",
        "value" : "PAD Site Scripts v3.6 permite a los atacantes remotos evitar la autenticación y obtener privilegios como otros usuarios, incluyendo privilegios administrativos, estableciendo el parámetro de la cookie authuser a un usuario válido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpeasycode:pad_site_scripts:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67B7D27-8236-4948-9A64-8895634231A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35155",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35027",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-20T19:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in the D-Link MPEG4 Viewer ActiveX Control (csviewer.ocx) 2.11.918.2006 allow remote attackers to execute arbitrary code via a long argument to the (1) SetFilePath and (2) SetClientCookie methods.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento múltiple de búfer basado en montículo en D-Link MPEG4 Viewer ActiveX Control (csviewer.ocx) v2.11.918.2006 que permite a los atacantes remotos ejecutar arbitrariamente código a través de un argumento largo para los métodos (1) SetFilePath y (2) SetClientCookie. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dlink:mpeg4_viewer_activex_control:2.11.918.2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E8B846-84A2-4A92-B665-5EDDEF4A7568"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35066",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-20T19:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in login.php in DM FileManager 3.9.2, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en login.php in DM FileManager v3.9.2, cuando magic_quotes_gpc es deshabilitado, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de los campos (1) Usuario y (2) Contraseña."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dutchmonkey:dm_filemanager:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC55C936-2850-4E42-BE95-81E3743FCD45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35167",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35035",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-20T19:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks via crafted keyword sequences that are removed from a filter in the id parameter in a banner action, as demonstrated via the \"UNIunionON\" string, which is collapsed into \"UNION\" by the filter_sql function."
      }, {
        "lang" : "es",
        "value" : "code.php en PC4Arb Pc4 Uploader v9.0 y anteriores, hace más fácil para atacantes remotos llevar a cabo ataques de inyección SQL a través de una secuencia de palabras clave manipuladas que son borradas desde un filtro en el parámetro id en una acción de un banner, como se demuestra a través de la cadena \"UniunionON\", lo que colapsa dentro \"UNION\" por la función filter_sql."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pc4arb:pc4_uploader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "4B561086-F1AB-41C8-BB09-91CD800C39F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54572",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35122",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1364",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-21T00:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remote attackers to create and overwrite arbitrary files via a filename containing a ..\\ (dot dot backslash) sequence in a Hollywood FX Compressed Archive (.hfz) file.  NOTE: this can be leveraged for code execution by decompressing a file to a Startup folder.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en InstallHFZ.exe 6.5.201.0 en Pinnacle Hollywood Effects 6, un módulo en Pinnacle Systems Pinnacle Studio 12, permite a los atacantes remotos crear y sobrescribir archivos arbitrarios a través de un nombre de archivo que contiene la secuencia ..\\ (punto punto barra invertida) en una archivo Hollywood FX Compressed Archive (.hfz). NOTA: esto puede ser aprovechado para ejecución de código, descomprimiendo un archivo en las carpetas de inicio. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:pinnaclesys:pinnacle_hollywood_effects:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39E2BECD-E8CF-4AC5-9726-DD2E2711F74F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pinnaclesys:pinnacle_studio:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BBC208-A112-4C12-B044-EF16770AB406"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/9sg_pinnacle_studio_12_hfz.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35078",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503476/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34936",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://retrogod.altervista.org/9sg_pinnacle_studio_12_hfz.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503476/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-21T01:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remote attackers to cause a denial of service (application crash) via a crafted Hollywood FX Compressed Archive (.hfz) file."
      }, {
        "lang" : "es",
        "value" : "InstallHFZ.exe 6.5.201.0 en Pinnacle Hollywood Effects 6, un módulo en Pinnacle Systems Pinnacle Studio 12, permite a los atacantes remotos causar una denegación de servicio (caída de la aplicación) a través de un archivo manipulado Hollywood FX Compressed Archive (.hfz)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pinnaclesys:pinnacle_studio:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BBC208-A112-4C12-B044-EF16770AB406"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1161",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-05-21T14:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows remote attackers to access arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el servicio TFTP en Cisco CiscoWorks Common Services (CWCS) v3.0.x hasta v3.2.x en Windows, también utilizado en Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager y otros productos, lo que permite atacantes remotos acceder a ficheros arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_common_services:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "EFFC3AE9-1B61-44F8-938B-6363EDB2DD5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_common_services:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1BB12692-8BCD-4601-83AE-12F1AFD1EF03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_common_services:3.0.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1017A34C-A119-41D4-AE10-1E35FAFF0547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_common_services:3.0.6:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5399066A-658B-4494-A291-DB20E0CE7687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_common_services:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BD8374C6-D8A3-43CB-A9F7-8A71CD69BE9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_common_services:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "DC455CA4-A1F7-4614-9A6F-ABCB0C9026E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_common_services:3.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "F5941482-DB47-49E8-90BA-650073C3A233"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_health_and_utilization_monitor:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC556B9-7073-41E3-8099-00B796F8B68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_health_and_utilization_monitor:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87814504-DC6B-41CA-873E-F46B2F71A3FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_lan_management_solution:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB783DD2-C6B7-406B-9DC4-E1BC832D025C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_lan_management_solution:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57CBDA0C-EE71-459C-AFA1-9879C6727287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_lan_management_solution:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6CF9518-2D68-4E95-862B-54B622622B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_lan_management_solution:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C446E75-5404-4875-AD94-DF953A7874FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_qos_policy_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30B25F2-2DEB-4254-88DB-FA31AB6CA04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_qos_policy_manager:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F77163A8-3F2F-473F-B776-A155D94011DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_voice_manager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F143B9-20B4-4140-805F-5F709290D6E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_voice_manager:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562CA8A8-C17E-4985-8EA0-E2CB61355FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:security_manager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE4D6E7-9884-4C7B-BD40-F8C08E78E93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:security_manager:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921F93B3-84A8-471B-9A3A-780C76BA3685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:security_manager:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4686AD6B-CAB3-4CE5-9B13-D30613C614CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_readiness_assessment_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "668AEB8D-4923-4EAE-A67A-979D7B816108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_operations_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC421340-135D-45AD-8E59-F1B62805ABEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_operations_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5510F4F-93C9-4722-97F5-37A05B48C23D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_operations_manager:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73FD728-7A22-4248-B4DA-62AB2704A411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_operations_manager:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930EA844-7016-4EC3-833D-70D1B1DE6DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_provisioning_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C453852A-D639-4872-B8FE-AE7E2BC019A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_provisioning_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4D4CAE-582C-47F5-A3D5-CC1D3BE00308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_provisioning_manager:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0337CC9-B682-4135-B5C8-745B41474EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_provisioning_manager:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FC0DD7-81A3-4294-ACA5-0F8B05E7CC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_service_monitor:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5A8958-B3DE-443B-921F-3AE25FFBF615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_service_monitor:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2F5BDC-A768-4A07-92A2-1C9DF484C3A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_service_monitor:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6041F558-D641-4067-BBC8-EC23D0A1ED18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_service_monitor:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56101F5A-4099-4027-859D-07CFE598F1B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN62527913/index.html",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000032.html",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/54616",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/35179",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://securitytracker.com/id?1022263",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080ab7b56.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35040",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1390",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN62527913/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080ab7b56.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-21T14:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the \"negative model,\" which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element."
      }, {
        "lang" : "es",
        "value" : "Armorlogic Profense Web Application Firewall anteriores a v2.2.22, y v2.4.x anteriores a v2.4.4, no implementa apropiadamente el \"modelo negativo\", lo que permite a los atacantes realizar un ataque de ejecución de secuencias de comandos en sitios cruzados - XSS - a través de modificar etiquetas finales de un elemento SCRIPT."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armorlogic:profense_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.21",
            "matchCriteriaId" : "4A5BDDC1-14DC-4D05-B3B5-766A5CB761EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armorlogic:profense_web_application_firewall:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A5DFAE-BD74-448C-95E9-C10D1696BE43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503649/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503649/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-21T14:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the \"positive model,\" which allows remote attackers to bypass certain protection mechanisms via a %0A (encoded newline), as demonstrated by a %0A in a cross-site scripting (XSS) attack URL."
      }, {
        "lang" : "es",
        "value" : "Armorlogic Profense Web Application Firewall anteriores a v2.2.22, y v2.4.x anteriores a v2.4.4, no implemente apropiadamente el \"modelo positivo\", lo que permite a los atacantes remotos evitar ciertos mecanismos de protección a través de %0A (codificación de nueva línea), como se demuestra por una %0A en un ataque URL de ejecución de secuencias de comandos en sitios cruzados - XSS"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armorlogic:profense_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.21",
            "matchCriteriaId" : "4A5BDDC1-14DC-4D05-B3B5-766A5CB761EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armorlogic:profense_web_application_firewall:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A5DFAE-BD74-448C-95E9-C10D1696BE43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503649/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503649/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-21T14:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6 2005Q4 (aka 6.2) and 6.3 allow remote attackers to inject arbitrary web script or HTML via (1) the abperson_displayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Address Book component or (2) the temporaryCalendars parameter to uwc/base/UWCMain."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados - XSS - en Sun Java System Communications Express 6 2005Q4 (también conocido como v6.2) y v6.3 que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro (1) abperson_displayName para uwc/abs/search.xml en la implementación añadir contacto en el componente libro de direcciones personales o el parámetros (2) temporaryCalendars para uwc/base/UWCMain."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_communications_express:6.2:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FBA91911-ED19-46D7-971B-6EF9DA615B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_communications_express:6.3:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B65186B3-C977-43F3-BBC8-EC5B34FCE0F5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_communications_express:6.2:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "80691D37-4CB9-4923-A7CB-BF827D1FBA3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_communications_express:6.3:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D5580EF9-DA16-42FE-B0C9-5525F38C6298"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_communications_express:6.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "A8E7C46B-2200-48A1-8E9F-EEA79AF6B298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_communications_express:6.3:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "B9EC75A9-17BB-4B21-B2C6-01FD9D2C1A12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/May/0177.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/32474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2009/May/1022266.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-122793-26-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-258068-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/sun-communications-express",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503675/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34154",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34155",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/May/0177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/32474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/alerts/2009/May/1022266.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-122793-26-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-258068-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/sun-communications-express",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503675/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-21T15:30:01.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Partner Gateway (WPG) 6.1.0 before 6.1.0.1 and 6.1.1 before 6.1.1.1 allows remote authenticated users to obtain sensitive information via vectors related to the \"schema DB2 instance id\" and the bcgarchive (aka the archiver script)."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Partner Gateway (WPG) v6.1.0 anteriores a v6.1.0.1 y v6.1.1 anterior a v6.1.1.1 permite a usuarios autenticados, obtener información sensible a través de vectores relativos a \"schema DB2 instance id\" y bcgarchive (también conocido como la secuencia de comandos archiver)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E55335-9BDD-451B-A610-9389F072279D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC33F02F-2381-4A6F-B322-B22E416B6887"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21366016",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21366016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-21T15:30:01.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote attackers to obtain access."
      }, {
        "lang" : "es",
        "value" : "Cortafuegos Armorlogic Profense Web Application anteriores a v2.2.22, y v2.4.x anteriores a v2.4.4, tiene un hash de la contraseña por defecto de root, y permite el acceso a root basado en password sobre SSH, lo que hace más fácil para atacantes remotos obtener acceso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armorlogic:profense_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.21",
            "matchCriteriaId" : "4A5BDDC1-14DC-4D05-B3B5-766A5CB761EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armorlogic:profense_web_application_firewall:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A5DFAE-BD74-448C-95E9-C10D1696BE43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503649/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503649/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-21T15:30:01.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in berita.php in Dian Gemilang DGNews 3.0 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de injección SQL en berita.php en Dian Gemilang DGNews v3.0 Beta permite a los atacantes remotos, ejecutar arbitrariamente comandos SQL a través del parámetro id en una acción de detalle."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:diangemilang:dgnews:3.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9F9E60-1AA0-4A73-911A-6F5A88DED013"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35016",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T11:52:38.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in 26th Avenue bSpeak 1.10 allows remote attackers to execute arbitrary SQL commands via the forumid parameter in a post action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en 26th Avenue bSpeak v1.10\r\n, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro forumid en una acción POST."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:26thavenue:bspeak:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B0B174-4743-455B-ACBA-ED228AC01910"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35139",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35049",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T11:52:38.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in index.php in Catviz 0.4.0 Beta 1 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) webpages_form or (2) userman_form parameter."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de salto de directorio en index.php en Catviz v0.4.0 Beta 1, permite a atacantes remotos leer  archivos de su elección a través de un .. (punto punto) en los parámetros (1) webpages_form o (2) userman_form parameter.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joost_horward:catviz:0.4.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD24AFF0-F3A3-4B8B-B9B6-E38BC8EA908A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35042",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T11:52:38.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Catviz 0.4.0 beta 1 allow remote attackers to inject arbitrary web script or HTML via the (1) userman_form and (2) webpages_form parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en Catviz v0.4.0 beta 1, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de los parámetros (1) userman_form y (2) webpages_form."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joost_horward:catviz:0.4.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD24AFF0-F3A3-4B8B-B9B6-E38BC8EA908A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35042",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T11:52:38.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in VidSharePro allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de envío de archivo no restringido en VidSharePro, permite a atacantes remotos ejecutar código de su elección mediante la subida de un archivo  con extensión ejecutable, entonces accediendo a él a través de vectores no especificados.\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omnisoftsol:vidsharepro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F30391-E2EB-4E9A-A5A3-3E38F0161A7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T11:52:38.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in list_list.php in Realty Webware Technologies Web-Base 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en list_list.php en Realty Webware Technologies Web-Base v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realtywebware:realty_web-base:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D93444-1F4A-4FF4-A683-55B1BE321844"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35043",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T11:52:39.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "exJune Office Message System 1 does not properly restrict access to (1) configure.asp and (2) addmessage2.asp, which allows remote attackers to gain privileges a direct request.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "exJune Office Message System v1 no restringe el acceso de forma adecuada a (1) configure.asp y (2) addmessage2.asp, lo que permite a atacantes remotos obtener privilegios a través de una petición directa.  NOTE: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exjune:office_message_system:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6940CD4-76A8-4E88-AAB1-C36E6DFEDE20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35172",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T11:52:40.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and process_query_section in query.c in nsd 2.3.7, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Error de superación del límite en la función packet_read_query_section en packet.c en nsd v3.2.1, y process_query_section en query.c en nsd v2.3.7, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de vectores no específicos que provocan el desbordamiento de búfer.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA12233C-34CA-4A3B-AB2C-401829B8DA05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F345D78-50BC-4864-8B53-7B1A1835DBDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F6182D-40D3-4C1E-BFB3-D40ED196EC19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0327A1-9C84-46B7-860E-D44B5B9D92F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC9FC9E-AE68-4456-84E4-51E9E07958E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A138F0-65EA-445E-A20B-7D1693CF220F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B07B18F-6812-4081-859C-1F8528B90D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11EA7531-BBFB-4F37-8A17-F7437F753A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EDDA911-2FB6-433D-A283-086CF62366F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "452610BB-AD3B-4E11-B5A4-F0EDB01E83BE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1FD4DE-683C-461F-B9E5-0C6AA44B3AC1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382C31E7-2975-45D9-8C46-CB9B2F07C6AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E71B058-E805-421F-BD38-F1A4C626215E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10037B7D-EF60-455F-9FF1-6550D0E92FC6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC7774E2-D0E8-4909-AF4E-54661D2C0973"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC85A36-702E-4B52-9938-CACEADECD68F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8E0AF8-5E1A-4D74-8942-35C9E2350132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7104EE-D481-495E-B06E-ADBCC1A6ACA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E347F8C-AB1F-4967-9C85-055214798ECE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEDA235-5B80-4816-86C5-C83A45878A3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22BC2EBF-9241-4FE1-A730-9F9BB6E2777C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3180CAA2-1518-4750-98DE-F64821297034"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BCFAEA-AC1F-4D3E-B473-A6081D423BEB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA25A60-DD5F-4FE8-A6CC-1695232E3D95"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C326A66B-457E-4130-A214-ED265576F448"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140464BA-39D7-4B63-92F9-9D6E09CFF6DE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86C924A-6CD8-4D9A-8CFC-E4AD4CC9331E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A818B06C-8798-460D-AE5A-93162CB758A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3755E217-23CB-42EF-90E8-020D5796226B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F341E55C-DB91-4D7B-91AE-076525C52A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:nsd:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760CF611-A8BF-4E96-9F21-0796FBC8A521"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529418",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529420",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.nlnetlabs.nl/publications/NSD_vulnerability_announcement.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/19/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.nlnetlabs.nl/publications/NSD_vulnerability_announcement.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/19/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T11:52:40.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments."
      }, {
        "lang" : "es",
        "value" : "SLiM Simple Login Manager versión 1.3.0, coloca la cookie magic (mcookie) de autoridad X en la línea de comando cuando se invoca xauth desde los archivos (1) app.cpp y (2) switchuser.cpp, que permite a los usuarios locales acceder a la sesión X mediante la enumeración del proceso y sus argumentos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simone_rota:slim_simple_login_manager:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6893FC98-7B50-494A-BE62-E3B27F44D572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529306",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/54583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35132",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38070",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/18/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/54583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/18/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T11:52:40.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Transmission v1.5 anterior a v1.53 y v1.6 anterior a v1.61, permite a los atacantes remotos secuestrar la autenticación de víctimas no especificadas a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:transmissionbt:transmission:1.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C570DD0B-CB0D-4451-AC24-47853DCE4E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:transmissionbt:transmission:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8976E88E-6F6C-4E77-87A4-8F1AAA854C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:transmissionbt:transmission:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C53FAA2E-0DA8-4E61-A27F-B3A163664848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:transmissionbt:transmission:1.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A94B6D-5A85-413D-AE62-BF3AA92DF907"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/21/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.transmissionbt.com/index.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/21/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.transmissionbt.com/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T11:52:40.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to cause a denial of service (kernel oops) of the guest OS by triggering a segmentation fault in \"certain address ranges.\""
      }, {
        "lang" : "es",
        "value" : "La función hypervisor_callback en Xen, posiblemente anteriores a v3.4.0, como la que se aplica al kernel de linux v2.6.30-rc4, 2.6.18 y posiblemente otroas versiones permiten a aplicaciones del usuario guess provocar una denegación de servicio (kernel opps) en el sistema invitado mediante cuando se provoca un fallo de segmentación en \"determinados rangos de direcciones\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:x86_32:*:*:*:*:*",
            "matchCriteriaId" : "A2B1B229-B325-4D8C-B326-1FF6D85891F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc4:x86_32:*:*:*:*:*",
            "matchCriteriaId" : "06EFB3F7-2EAE-4A56-A9A1-E8C734E6B91E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xen:xen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.1",
            "matchCriteriaId" : "07CFE66F-0105-42D4-80D5-427977D8757A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xen:xen:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A61248-160C-42F4-A803-20948FEA72CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xen:xen:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0D9D45-1F2E-4236-858B-BBA54B17C8F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xen:xen:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AFDE72E-1997-48BA-A065-E0DD4ABE6E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xen:xen:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E1D892-3A6C-4CC4-8237-231E593884EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xen:xen:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C0C052-D6BA-4BC8-A64B-1A90CA572186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xen:xen:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54C61369-9EED-45CD-943C-DF26E818F09A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xen:xen:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D791DFF8-173B-49DB-AA8C-C1BBB8DB3611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xen:xen:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26281E48-3854-4C4B-8F71-2C2ED207F19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xen:xen:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B242BA78-F752-414B-8DB9-D24E241EAE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xen:xen:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717A9642-5033-47B1-B795-5676E950286B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xen:xen:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E18B3B-B562-49DF-AA75-13445B54CD1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xen:xen:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A9504C4-8826-40D8-823C-8E42F2453B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xen:xen:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92646AED-BF1E-4471-96A0-1926932AF4C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.xensource.com/archives/html/xen-devel/2009-05/msg00561.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/14/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.xensource.com/archives/html/xen-devel/2009-05/msg00561.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/14/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, and Red Hat Enterprise MRG. It was addressed in Red Hat Enterprise Linux 4 and 5 via https://rhn.redhat.com/errata/RHSA-2009-1132.html and https://rhn.redhat.com/errata/RHSA-2009-1106.html .",
        "lastModified" : "2009-09-10T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T11:52:40.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Torrent file containing a long path."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función btFiles::BuildFromMI  (trunk/btfiles.cpp) en Enhanced CTorrent (tambien conocido como dTorrent) v3.3.2 y probablemente anteriores, y CTorrent v1.3.4 permite a atacantes remotos provocar una denegación de servicio (caida) y posiblemente ejecución de código de su elección a través del un fichero Torrent que contenga una path muy largo.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rahul:dtorrent:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "635B8CC2-3E3C-4CDB-A410-EC21DB1CB83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rahul:dtorrent:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F338CE81-62C9-4FF1-B592-2435EDFE1B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rahul:dtorrent:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C453F7B5-A499-464C-B2C7-51D5CF0FE754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rahul:dtorrent:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30840374-880E-4B76-B7DA-6EF056F6CEA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rahul:ctorrent:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3FDFB-0B63-4194-8A4C-D56666086D1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dtorrent.svn.sourceforge.net/viewvc/dtorrent/dtorrent/trunk/btfiles.cpp?r1=296&r2=301&view=patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34752",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/tracker/?func=detail&aid=2782875&group_id=202532&atid=981959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/20/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34584",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1092",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=501813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01102.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dtorrent.svn.sourceforge.net/viewvc/dtorrent/dtorrent/trunk/btfiles.cpp?r1=296&r2=301&view=patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/tracker/?func=detail&aid=2782875&group_id=202532&atid=981959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/20/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=501813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01102.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0786",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-05-22T11:53:45.640",
      "lastModified" : "2023-11-07T02:03:44.133",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This was originally intended for a report about TCP Wrappers and the hosts_ctl API function, but further investigation showed that this was documented behavior by that function. Notes: Future CVE identifiers might be assigned to applications that mis-use the API in a security-relevant fashion."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T11:53:48.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Coccinelle 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on an unspecified \"result file.\""
      }, {
        "lang" : "es",
        "value" : "Coccinelle v0.1.7 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico sobre un \"fichero resultado\" no especificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emn:coccinelle:0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E562DC4D-4ABB-4555-B581-8BBD0B1DF0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packages.debian.org/changelogs/pool/main/c/coccinelle/coccinelle_0.1.7.deb-3/changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35012",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/06/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00731.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packages.debian.org/changelogs/pool/main/c/coccinelle/coccinelle_0.1.7.deb-3/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/06/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00731.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T16:48:42.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to inject arbitrary web script or HTML via (1) the User.lang parameter to the login page (aka gw/webacc), (2) style expressions in a message that contains an HTML file, or (3) vectors associated with incorrect protection mechanisms against scripting, as demonstrated using whitespace between JavaScript event names and values."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en el componente WebAccess en GroupWise de Novell versiones 7.x anteriores a 7.03 HP3 y versiones 8.x anteriores a 8.0 HP2, permiten a los atacantes remotos inyectar script web o HTML arbitrarios por medio de (1) el parámetro User.lang en la página de inicio de sesión (también se conoce como gw/webacc), (2) expresiones de estilo en un mensaje que contiene un archivo HTML, o (3) vectores asociados con mecanismos de protección incorrectos contra scripting, como es demostrado utilizando espacios en blanco entre los nombres y valores de eventos de JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE640E9A-762B-4AF4-8677-818CBF16EA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FBB457-FDC0-485F-951A-C0A7661A92B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8661AFFB-5CAF-4D44-A617-E0330C764BDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CF66EFEE-DAB2-4455-96F2-50D3E9456485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "422F4B8A-8133-4DE2-9749-41E3DE0031DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DD25DC76-F3BE-4A0E-86DC-D27F4948446E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0AA3F3-6BE4-4CCC-838F-E8BD1F06590B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D3BCF9F-9CDA-4DFD-AC39-2624BCFAAD96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DB474F-D101-4210-9DC1-7230E9CAE80D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.02x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D861C5BE-825C-4EED-994A-9DE38AB6EA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D75C8A8-8162-4160-9295-2DA4D710AD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*",
            "matchCriteriaId" : "84293DF8-D11D-4CB4-99EC-EB60AF027B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:hp2:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D63B03-C0A1-4366-B853-0D36CA0E6912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E2ABC-20AE-437A-83B0-2E0753787FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:8.0:hp1:*:*:*:*:*:*",
            "matchCriteriaId" : "97206FE4-E1F1-40EC-BC01-A0125FB3B20F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstorm.linuxsecurity.com/0905-exploits/groupwise-xss.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/support/search.do?cmd=displayKC&externalId=7003271",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7003267&sliceId=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7003268&sliceId=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503700/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503885/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=472987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=474500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=484942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0905-exploits/groupwise-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/support/search.do?cmd=displayKC&externalId=7003271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7003267&sliceId=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7003268&sliceId=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503700/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503885/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=472987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=474500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=484942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T16:48:42.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess login page (aka gw/webacc) in Novell GroupWise 7.x before 7.03 HP2 allow remote attackers to inject arbitrary web script or HTML via the (1) GWAP.version or (2) User.Theme (aka User.Theme.index) parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en la página de acceso WebAccess  (también conocido como gw/webacc) en Novell GroupWise v7.x anteriores a v7.03 HP2 , permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de (1) GWAP.version o (2) parámetro User.Theme (también conocido como User.Theme.index)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE640E9A-762B-4AF4-8677-818CBF16EA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FBB457-FDC0-485F-951A-C0A7661A92B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8661AFFB-5CAF-4D44-A617-E0330C764BDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CF66EFEE-DAB2-4455-96F2-50D3E9456485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "422F4B8A-8133-4DE2-9749-41E3DE0031DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DD25DC76-F3BE-4A0E-86DC-D27F4948446E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0AA3F3-6BE4-4CCC-838F-E8BD1F06590B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D3BCF9F-9CDA-4DFD-AC39-2624BCFAAD96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DB474F-D101-4210-9DC1-7230E9CAE80D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.02x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D861C5BE-825C-4EED-994A-9DE38AB6EA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D75C8A8-8162-4160-9295-2DA4D710AD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*",
            "matchCriteriaId" : "84293DF8-D11D-4CB4-99EC-EB60AF027B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:hp2:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D63B03-C0A1-4366-B853-0D36CA0E6912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstorm.linuxsecurity.com/0905-exploits/groupwise-xss.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/support/search.do?cmd=displayKC&externalId=7003271",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503700/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=484942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0905-exploits/groupwise-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/support/search.do?cmd=displayKC&externalId=7003271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503700/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=484942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T16:48:42.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Solaris Secure Digital slot driver (aka sdhost) in Sun OpenSolaris snv_105 through snv_108 on the x86 platform allows local users to gain privileges or cause a denial of service (filesystem or memory corruption) via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulerabilidad no específica en el slot driver de Solaris Secure Digital (también conocido como sdhost) en Sun OpenSolaris snv_105 hasta  snv_108 en la plataforma x86, permite a los usuarios locales obtener provilegios o provocar una denegación de servicio (corrupción del sistema de ficheros o memoria) a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-259408-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-259408-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T18:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a digg action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en inc/ajax.asp in MaxCMS v2.0, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id en una acción digg.\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bokecc:maxcms:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F156BFE9-5F2C-47CC-8298-066412BC10F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34981",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T18:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in pluck 4.6.2, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the langpref parameter to (1) data/modules/contactform/module_info.php, (2) data/modules/blog/module_info.php, and (3) data/modules/albums/module_info.php, different vectors than CVE-2008-3194."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en pluck v4.6.2, permite a atacantes remotos crear y ejecutar archivos de su elección a través de un .. (punto punto) en el parámtro langpref sobre (1) data/modules/contactform/module_info.php, (2) data/modules/blog/module_info.php, y (3) data/modules/albums/module_info.php, es un vector distinto a CVE-2008-3194."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluck-cms:pluck:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3E7597-2215-4213-B377-92295EC50A4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35145",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35007",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T18:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in LightOpenCMS 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en LightOpenCMS v0.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teozkr:lightopencms:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695282F0-6020-422F-91A0-5CBF944E56BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/504101/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504101/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T18:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3) email, (4) firstname, or (5) lastname parameter."
      }, {
        "lang" : "es",
        "value" : "admin/edituser.php en 2daybiz Template Monster Clone no requiere autenticación administrativa, lo que permite a atacantes remotos modificar cuentas de su elección a través de los parámetros: (1) loginname, (2) password, (3) email, (4) firstname, o (5) lastname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2daybiz:template_monster_clone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22BADE3-F86E-492F-9E7B-0F92B6D8C2BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35090",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34977",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T18:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in download.php in Rama Zaiten CMS 0.9.8 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en download.php en Rama Zaiten CMS v0.9.8 y anteriores, permite a atacantes remotos leer archivos de su elección a través de un .. (punto punto) en el parámetro file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ramazeiten:ramazaitencms0.9.7.5:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E144B4A-4789-438E-B374-06E999373979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ramazeiten:ramazaitencms0.9.7.6:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB60CF4-ED5F-400B-9C59-F5B07AE0E3C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ramazeiten:ramazaitencms0.9.7.8:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2858845F-9CBF-46C6-962C-9C288DD45596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ramazeiten:ramazaitencms0.9.8:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD3B11B-E3DF-4DE1-9113-4F7D18D708AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54546",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35116",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34995",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1343",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T18:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames."
      }, {
        "lang" : "es",
        "value" : "La interfaz web en Open Computer and Software Inventory Next Generation (OCS Inventory NG) versión 1.01 genera diferentes mensajes de error dependiendo de si un nombre de usuario es válido, lo que permite a los atacantes remotos enumerar nombres de usuarios válidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9ACDD1-0586-47F1-9421-F4D176BF438E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35157",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35313",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=133&cntnt01returnid=69",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00050.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00057.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00063.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=133&cntnt01returnid=69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00050.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00063.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T18:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en includes/database/examples/addressbook.php in Flyspeck CMS v6.8, permite a atacantes remotos crear y ejecutar archivos locales de su elección a través de un .. (punto punto) en el parámetro lang."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flyspeck:flyspeck_cms:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219D979F-2296-4C25-8514-F2E4EED0CFAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35011",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T18:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Flyspeck CMS 6.8 does not require administrative authentication for the updateExistingContent action, which allows remote attackers to create or modify admin accounts via the (1) users[fullname], (2) users[email], (3) users[role_id], (4) users[username], and (5) users[password] parameters."
      }, {
        "lang" : "es",
        "value" : "index.php en Flyspeck CMS v 6.8 no requiere autenticación administrativa para la acción updateExistingContent, lo que permite a atacantes remotos crear o modificar cuentas a través de los parámetros: (1) users[fullname], (2) users[email], (3) users[role_id], (4) users[username], y (5) users[password]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flyspeck:flyspeck_cms:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219D979F-2296-4C25-8514-F2E4EED0CFAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35011",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T18:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in activeCollab 2.1 Corporate allows remote attackers to inject arbitrary web script or HTML via the re_route parameter to the login script."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en activeCollab v2.1 Corporate, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de del parámetro re_route sobre el script de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activecollab:activecollab:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A256ABB-5B9E-4E19-95C1-969560113A9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35079",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T18:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid re_route parameter to the login script, which reveals the installation path in an error message."
      }, {
        "lang" : "es",
        "value" : "activeCollab v2.1 Corporate permite a atacantes remotos conseguir información sensible a través de un valor erróneo en el parámetro re_route, sobre el script de autenticación, lo que revela el path de la instalación en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activecollab:activecollab:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A256ABB-5B9E-4E19-95C1-969560113A9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35079",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T18:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter to example/index.php.  NOTE: this was originally reported as an issue affecting the do parameter, but traversal with that parameter might depend on a modified example/index.php.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en plugins/ddb/foot.php en Strawberry v1.1.1, permite a atacantes remotos incluir y ejecutar archivos de su elección a través de un .. (punto punto) en el parámetro file sobre example/index.php. NOTA: esto fué originalmente reportado como una característica que afecta al parámetro do, pero transversalmente con este parámetro podría depender de una modificación de example/index.php. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strawberry:strawberry:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A62191-E066-49E4-B608-BF529E37E334"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/28330",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34971",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/28330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1381",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-05-22T20:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.19-1 on Debian GNU/Linux, and possibly other operating systems and versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program.  NOTE: this issue exists because of an incomplete fix for CVE-2009-1579."
      }, {
        "lang" : "es",
        "value" : "La función map_yp_alias en functions/imap_general.php en SquirrelMail anteriores a v1.4.19-1 en Debian GNU/Linux, y posiblemente otras versiones y sistemas operativos, permite a atacantes remotos ejecutar comandos de su elección a través de metacaracteres shell en una cadena de nombre de usuario, que es usada por el programa ypmatch. NOTA: Esta característica existe por una resolución deficiente de la vulnerabilidad CVE-2009-1579."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:imap_general.php:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "181400A1-714E-4CC1-A8C4-071C4C7ADAB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F53A84-FC66-4963-A728-7285F63D4761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A941FF-423E-49C5-AE1F-FE7ED016CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6-rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80FE1297-04B7-4F1D-B932-1015EE3070C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B34FDB1D-881B-4343-A76E-F23B93A0469A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052914F8-B52C-4AB4-8F85-68D788B588C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617C554F-8E7D-4F8A-AF63-C193934C8215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F11950-A2E4-4F57-BF87-57788B841A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C179A3C-8C8C-429B-BACA-8ADAE4170465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0-r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6B4BA8-1379-44CF-B87D-9DA66B5F2484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD31177-05BB-4623-AED7-765DB7E44E47"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20247A22-9AB9-4BCE-BF28-350B52FBC62D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0ABD26-2EA3-4884-BA0B-FFB88177CFDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC479F3-6F3B-46CB-9D28-2DB7D76FDAE5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EDC2C56-E977-452F-9263-541091356B67"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B743DEC2-1ED2-4CAC-87F4-4EFDF16159FF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCE37B1-932D-4A4A-B4CA-056E26D78659"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08E51F1-3764-4146-89C1-20B9B8EE1222"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F28456D-EA59-4900-AEAD-F8CB06F5129D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail1.4.19-1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1EC97E5-CD9F-42F9-B2B5-E5909339CC40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://release.debian.org/proposed-updates/stable_diffs/squirrelmail_1.4.15-4+lenny2.debdiff",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35140",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1802",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:122",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503718/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01195.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01202.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://release.debian.org/proposed-updates/stable_diffs/squirrelmail_1.4.15-4+lenny2.debdiff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503718/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01195.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01202.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of squirrelmail as shipped with Red Hat Enterprise Linux 3, 4, or 5.\n\nUpdates for squirrelmail released via RHSA-2009:1066 (https://rhn.redhat.com/errata/RHSA-2009-1066.html) fixed original flaw CVE-2009-1579 without introducing CVE-2009-1381.",
        "lastModified" : "2009-05-26T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T20:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Ulteo Open Virtual Desktop 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) admin/applications.php, (2) admin/appsgroup.php, (3) admin/users.php, (4) admin/usersgroup.php, and (5) admin/tasks.php; (6) show parameter to admin/logs.php; and (7) mode parameter to admin/configuration-partial.php.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Ulteo Open Virtual Desktop v1.0 , permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro id sobre (1) admin/applications.php, (2) admin/appsgroup.php, (3) admin/users.php, (4) admin/usersgroup.php, y (5) admin/tasks.php; (6) parámetro show sobre admin/logs.php; y (7) parámetro mode sobre admin/configuration-partial.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ulteo:open_virtual_desktop:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC4E3088-DD8C-4AF4-AC92-93B428C5D461"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34923",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.insight-tech.org/index.php?p=Ulteo-Open-Virtual-Desktop-v1-0-multiple-XSS",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ulteo.com/home/en/ovdi/openvirtualdesktop/downloadnow?autolang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.insight-tech.org/index.php?p=Ulteo-Open-Virtual-Desktop-v1-0-multiple-XSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ulteo.com/home/en/ovdi/openvirtualdesktop/downloadnow?autolang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T20:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via javascript: URIs in the (1) request and (2) return_link_url parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en FormMail.pl in Matt Wright FormMail v1.92 y posiblemente anteriores, permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de direcciones URIs en los parámetros (1) request y (2) return_link_url."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matt_wright:formmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.92",
            "matchCriteriaId" : "4DE05358-2AA2-484F-A16A-AEFC8924F83A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35068",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503446/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ush.it/team/ush/hack-formmail_192/adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503446/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ush.it/team/ush/hack-formmail_192/adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T20:30:00.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the redirect parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección CRLF (se refiere a CR (retorno de carro) y LF (salto de línea)) en FormMail.pl en Matt Wright FormMail v1.92 y posiblemente anteriores, permite a atacantes remotos inyectar cabeceras HTTP de su elección y llevar a cabo ataques de separación de respuesta HTTP a través del parámetro redirect."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matt_wright:formmail:1.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45929A3B-C4BF-4E62-8F04-BA3A42960EE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35068",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503446/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ush.it/team/ush/hack-formmail_192/adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503446/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ush.it/team/ush/hack-formmail_192/adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T20:30:00.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la nueva característica de registro de nuevo usuario en BigACE CMS v2.5, cuando magic_quotes_gpc está desactivada, permite a atacantes remotos ejecutar comandos SQL de su elección a través de del parámetro username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigace:bigace_cms:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7150445D-BC67-4292-836E-552D91442671"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35063",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bigace.de/BIGACE-2.6.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bigace.de/Security-Fix-for-2.5.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503448/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34920",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bigace.de/BIGACE-2.6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bigace.de/Security-Fix-for-2.5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503448/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T20:30:00.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the form_include_template parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de fichero PHP remoto en admin.php en Frax.dk Php Recommend v1.3 y anteriores permite a atacantes ejecutar código PHP de su elección mediante una URL en el parámetro form_include_template."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frax:php_recommend:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "A51944E8-682D-413D-8F47-FC322760FA0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34909",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1287",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8658",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T20:30:00.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote attackers to gain administrative privileges via modified form_admin_user and form_admin_pass parameters."
      }, {
        "lang" : "es",
        "value" : "admin.php en Frax.dk Php Recommend v1.3 y anteriores no requieren autenticación cuando se cambia la contraseña de los usuarios, lo que permite a atacantes remotos obtener privilegios administrativos mediante la modificación de los parámetros form_admin_user y form_admin_pass."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frax:php_recommend:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "A51944E8-682D-413D-8F47-FC322760FA0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34909",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1287",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8658",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T20:30:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Static code injection vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to inject arbitrary PHP code into phpre_config.php via the form_aula parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático en admin.php en Frax.dk Php Recomended v1.3 y anteriores permite a atacantes remotos inyectar código PHP de su elección en phpre_config.php mediante el parámetro form_aula."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frax:php_recommend:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "A51944E8-682D-413D-8F47-FC322760FA0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34909",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1287",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8658",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T20:30:00.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, Windows 6.61 and earlier, and Linux 2.16 and earlier; Internet Security 2009 and earlier, Anti-Virus 2009 and earlier, Client Security 8.0 and earlier, and others; allow remote attackers to bypass malware detection via a crafted (1) ZIP and (2) RAR archive."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos antivirus F-Secure, incluidos: Anti-Virus for Microsoft Exchange v7.10 y anteriores; Internet Gatekeeper for Windows v6.61 y anteriores, Windows v6.61 y anteriores, y Linux v2.16 y anteriores; Internet Security 2009 y anteriores, Anti-Virus 2009 y anteriores, Client Security v8.0 y anteriores y otros; permiten a atacantes remotos saltar la detección de software malicioso mediante archivos (1) .ZIP y (2) .RAR manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:anti-virus:*:-:linux_servers:*:*:*:*:*",
            "versionEndIncluding" : "4.65",
            "matchCriteriaId" : "5AE96CC9-08DC-49F0-94C4-89810D8BFE01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:anti-virus:*:-:inux_client_security:*:*:*:*:*",
            "versionEndIncluding" : "5.54",
            "matchCriteriaId" : "8651DBB2-EC4B-474E-8431-CD7252AC4862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:anti-virus:*:-:linux_server_security:*:*:*:*:*",
            "versionEndIncluding" : "5.54",
            "matchCriteriaId" : "BD9FDABD-6F42-47E3-8424-559D5DD46EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:anti-virus:*:-:mime_sweeper:*:*:*:*:*",
            "versionEndIncluding" : "5.61",
            "matchCriteriaId" : "2012AC4D-0F75-4389-9165-28930368AE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:anti-virus:*:-:microsoft_exchange:*:*:*:*:*",
            "versionEndIncluding" : "6.62",
            "matchCriteriaId" : "AB4ED58A-B715-467B-A463-FB0BA3653FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:anti-virus:*:-:citrix_servers:*:*:*:*:*",
            "versionEndIncluding" : "7.00",
            "matchCriteriaId" : "863CFFAF-FD5B-4150-A063-CB2851D689BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:anti-virus:*:-:microsoft_exchange:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "29A9B0A7-FFB2-460B-8BCB-1C7D9DD55A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:anti-virus:*:-:microsoft_exchange:*:*:*:*:*",
            "versionEndIncluding" : "7.10",
            "matchCriteriaId" : "EC9E56D7-C642-46FB-8425-A3A7F22B62D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:anti-virus:*:-:windows_server:*:*:*:*:*",
            "versionEndIncluding" : "8.00",
            "matchCriteriaId" : "E829D765-4473-4D6E-AA51-7EC44CB09A2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:anti-virus:*:-:workstations:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "ECE7F2A4-E673-4B59-BAC2-B3D01AD0E1A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:anti-virus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2009",
            "matchCriteriaId" : "732265B4-ED48-4C91-8C96-4E2A8D0DB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:client_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "0B1D2491-0097-40BA-9B35-AA0708A822BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:home_server_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2009",
            "matchCriteriaId" : "90F7894C-9891-4E09-BE4B-DCA045361D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:*:-:linux:*:*:*:*:*",
            "versionEndIncluding" : "2.16",
            "matchCriteriaId" : "A0941F91-C6FF-492B-908C-51C46D373BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:*:-:linux_japanese:*:*:*:*:*",
            "versionEndIncluding" : "3.01",
            "matchCriteriaId" : "C8E837C1-A444-4573-8F8E-4488D2917BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "6.61",
            "matchCriteriaId" : "06B35ABF-C401-4DF4-9935-55E797E60220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2009",
            "matchCriteriaId" : "2ECC7480-20F5-453B-A417-BB2B7BD198E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:linux_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.01",
            "matchCriteriaId" : "FD234E72-8306-4262-A12A-1B5E18B34E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:linux_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.02",
            "matchCriteriaId" : "162C76E3-5AB6-4C72-A47A-F2820ED8BF46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35008",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2009-1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1262",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2009-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T20:30:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple FRISK Software F-Prot anti-virus products, including Antivirus for Exchange, Linux on IBM zSeries, Linux x86 File Servers, Linux x86 Mail Servers, Linux x86 Workstations, Solaris Mail Servers, Antivirus for Windows, and others, allow remote attackers to bypass malware detection via a crafted CAB archive."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos antivirus FRISK Software F-Prot, incluidos: Antivirus for Exchange, Linux on IBM zSeries, Linux x86 File Servers, Linux x86 Mail Servers, Linux x86 Workstations, Solaris Mail Servers, Antivirus for Windows y otros, permiten a atacantes remotos saltar la detección de software malicioso mediante un fichero .CAB manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-prot:f-prot_antivirus:*:exchange:*:*:*:*:*:*",
            "matchCriteriaId" : "E235C40F-068D-4529-910B-DFFC78D3E8B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-prot:f-prot_antivirus:*:linux_on_ibm_zseries:*:*:*:*:*:*",
            "matchCriteriaId" : "EEF8C31A-2B41-41F2-91A3-2F16DE5B4119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-prot:f-prot_antivirus:*:linux_x86_file_servers:*:*:*:*:*:*",
            "matchCriteriaId" : "44F21EE4-5335-41D0-AB4B-CA36137772F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-prot:f-prot_antivirus:*:linux_x86_mail_servers:*:*:*:*:*:*",
            "matchCriteriaId" : "EC65F491-E7B3-405F-B734-6AB4DA175735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-prot:f-prot_antivirus:*:linux_x86_workstations:*:*:*:*:*:*",
            "matchCriteriaId" : "5B4C47DB-7B40-4322-B41C-16F7FFC888BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-prot:f-prot_antivirus:*:solaris_mail_servers:*:*:*:*:*:*",
            "matchCriteriaId" : "866B0D8C-6F5E-48A0-B891-C41B2A33DD15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-prot:f-prot_antivirus:*:windows:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAF39F4-835D-4BAF-ACE3-3C39625EBBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-prot:f-prot_antivirus:*:windows_mail_servers:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE486C5-CCE9-49EF-B8A3-FEF0BB0137AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-prot:f-prot_aves:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C33C37C9-BC92-4BB4-AF0C-264384A63190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-prot:f-prot_milter:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6D5B56C-C89D-42B4-BEB9-297C1DC0497B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.zoller.lu/2009/04/advisory-f-prot-frisk-cab-bypass.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503393/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.zoller.lu/2009/04/advisory-f-prot-frisk-cab-bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503393/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T20:30:00.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerk Edition, Server Edition für Linux/FreeBSD, Anti-Virus SBS Edition, and others allows remote attackers to bypass malware detection via a crafted (1) RAR and (2) ZIP archive."
      }, {
        "lang" : "es",
        "value" : "El motor de análisis AVG 8.5 323, como se usa en varios productos antivirus AVG, incluida la Edición de red antivirus, la Edición de Internet Security Netzwerk, la Edición de servidor para Linux / FreeBSD, la Edición antivirus SBS y otros permite a los atacantes remotos evitar la detección de malware a través de un (1) archivo RAR y (2) ZIP especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:avg_anti-virus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.156",
            "matchCriteriaId" : "5BA92C19-E04F-45FF-A0D1-50D639C6EBF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:avg_anti-virus:6.0.710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACBDC1AD-F439-49E0-8068-7BE3C4F44239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:avg_anti-virus:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279AB9A2-1660-49C9-8AE8-26F7B0B6C51A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:avg_anti-virus:7.0.251:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6D8EA9-E270-4331-995C-D4D378988031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:avg_anti-virus:7.0.323:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C61BD5-365F-4BC6-82E3-68B57B01B8D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:avg_anti-virus:7.1.308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2862A586-9B51-4F73-A395-79B9B526E2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:avg_anti-virus:7.1.407:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90909A9-4032-4604-8FE6-16374BA21BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:avg_anti-virus:7.5.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3D2B2C-1325-4712-97D3-AC3779B82210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:avg_anti-virus:7.5.448:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8722A8E-1848-44E6-BFC3-C16072976F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:avg_anti-virus:7.5.476:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDAD78A-7497-4EF3-8EE5-1C256BE931A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:avg_anti-virus:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B85F998-DACB-46BC-9181-DF8D768D0C62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.zoller.lu/2009/04/avg-zip-evasion-bypass.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503392/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.zoller.lu/2009/04/avg-zip-evasion-bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503392/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-22T20:30:00.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Ulteo Open Virtual Desktop 1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter to header.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Ulteo Open Virtual Desktop v1.0, permite a los atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro de error en header.php. NOTA: La procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ulteo:open_virtual_desktop:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC4E3088-DD8C-4AF4-AC92-93B428C5D461"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34923",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ulteo.com/home/en/ovdi/openvirtualdesktop/downloadnow?autolang=en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ulteo.com/home/en/ovdi/openvirtualdesktop/downloadnow?autolang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1373",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-05-26T15:30:05.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en XMPP SOCKS5 bytestream server en Pidgin anteriores a v2.5.6 permite a usuarios remotos autenticados ejecutar código de forma arbitraria a través de vectores que incluyen una transferencia de fichero saliente XMPP. NOTA: Algunos de los detalles fueron obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.5",
            "matchCriteriaId" : "6FC23273-E322-40E0-AD26-2F272EB5E7A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC2EBF3-73A7-4542-8E9C-47A4241A224C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF62072D-4956-4FE6-931E-E6EE9C49F3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6499D8D5-0801-498C-BD4D-508506918CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "5C5B2A50-6734-4B64-AFD0-DB34C3BDA86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CC76CD-FF35-4B3A-9F1E-4E5A65963057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E216BC-29E4-4C31-9CF0-DE22C2E84968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD203F7-B983-4FDD-9837-D68D4F388A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8E3CBA-2B33-49EF-9105-8DDBB938F519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AA3282-CA7D-438C-A07C-A63392333630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEEFF420-2868-422B-BD22-9A5749C2398F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B139D83D-7D18-42C7-988C-2070B66CB943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047D9636-BCCE-4956-B5A3-D276F1C2EF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8A794E-E1CB-4F0F-9739-D625E94EA566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64EEEA0-89CE-46BD-B387-A96521E76A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E96AA3-B567-4E97-979A-D97A4F786D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C407C0-99A2-477B-87CF-6BE9F7B367E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBEF0457-39D8-465B-86A7-8DFA44A1F820"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://debian.org/security/2009/dsa-1805",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35188",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35194",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35202",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35215",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35294",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35329",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35330",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:140",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:173",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.pidgin.im/news/security/?id=29",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1059.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1060.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35067",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-781-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-781-2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1396",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500488",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50682",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17722",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://debian.org/security/2009/dsa-1805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pidgin.im/news/security/?id=29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1059.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-781-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-781-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1374",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-05-26T15:30:05.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the decrypt_out function in Pidgin (formerly Gaim) before 2.5.6 allows remote attackers to cause a denial of service (application crash) via a QQ packet."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función decrypt_out en Pidgin anteriores a v2.5.6 permite a atacantes remotos producir una denegación de servicio (caída de aplicación)a través de un paquete QQ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.5",
            "matchCriteriaId" : "6FC23273-E322-40E0-AD26-2F272EB5E7A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC2EBF3-73A7-4542-8E9C-47A4241A224C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF62072D-4956-4FE6-931E-E6EE9C49F3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6499D8D5-0801-498C-BD4D-508506918CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "5C5B2A50-6734-4B64-AFD0-DB34C3BDA86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CC76CD-FF35-4B3A-9F1E-4E5A65963057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E216BC-29E4-4C31-9CF0-DE22C2E84968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD203F7-B983-4FDD-9837-D68D4F388A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8E3CBA-2B33-49EF-9105-8DDBB938F519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AA3282-CA7D-438C-A07C-A63392333630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEEFF420-2868-422B-BD22-9A5749C2398F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B139D83D-7D18-42C7-988C-2070B66CB943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047D9636-BCCE-4956-B5A3-D276F1C2EF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8A794E-E1CB-4F0F-9739-D625E94EA566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64EEEA0-89CE-46BD-B387-A96521E76A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E96AA3-B567-4E97-979A-D97A4F786D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C407C0-99A2-477B-87CF-6BE9F7B367E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBEF0457-39D8-465B-86A7-8DFA44A1F820"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35188",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35194",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35202",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35294",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35329",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:173",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.pidgin.im/news/security/?id=30",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1060.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35067",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-781-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1396",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500490",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50684",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11654",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18201",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pidgin.im/news/security/?id=30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-781-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1375",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-05-26T15:30:05.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PurpleCircBuffer implementation in Pidgin (formerly Gaim) before 2.5.6 does not properly maintain a certain buffer, which allows remote attackers to cause a denial of service (memory corruption and application crash) via vectors involving the (1) XMPP or (2) Sametime protocol."
      }, {
        "lang" : "es",
        "value" : "La implementación PurpleCircBuffer en Pidgin anteriores a v2.5.6 no mantienen de forma adecuada cierto búfer, lo que permite a atacantes remotos producir una denegación de servicio (corrupción de memoria y caída de aplicación) a través de vectores que incluyen los protocolos (1) XMPP o (2) Sametime."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.5",
            "matchCriteriaId" : "6FC23273-E322-40E0-AD26-2F272EB5E7A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC2EBF3-73A7-4542-8E9C-47A4241A224C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF62072D-4956-4FE6-931E-E6EE9C49F3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6499D8D5-0801-498C-BD4D-508506918CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "5C5B2A50-6734-4B64-AFD0-DB34C3BDA86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CC76CD-FF35-4B3A-9F1E-4E5A65963057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E216BC-29E4-4C31-9CF0-DE22C2E84968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD203F7-B983-4FDD-9837-D68D4F388A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8E3CBA-2B33-49EF-9105-8DDBB938F519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AA3282-CA7D-438C-A07C-A63392333630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEEFF420-2868-422B-BD22-9A5749C2398F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B139D83D-7D18-42C7-988C-2070B66CB943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047D9636-BCCE-4956-B5A3-D276F1C2EF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8A794E-E1CB-4F0F-9739-D625E94EA566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64EEEA0-89CE-46BD-B387-A96521E76A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E96AA3-B567-4E97-979A-D97A4F786D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C407C0-99A2-477B-87CF-6BE9F7B367E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBEF0457-39D8-465B-86A7-8DFA44A1F820"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://debian.org/security/2009/dsa-1805",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/54649",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35188",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35194",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35202",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35215",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35294",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35329",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:173",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.pidgin.im/news/security/?id=31",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1060.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35067",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-781-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1396",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500491",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50683",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10829",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://debian.org/security/2009/dsa-1805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pidgin.im/news/security/?id=31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-781-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1376",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-05-26T15:30:05.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows.  NOTE: this issue exists because of an incomplete fix for CVE-2008-2927."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de entero en las funciones msn_slplink_process_msg en el manejador del protocolo de MSN en (1) libpurple/protocols/msn/slplink.c y (2) libpurple/protocols/msnp9/slplink.c en Pidgin anterior a v2.5.6 en plataformas de 32 bits permite a atacantes remotos ejecutar código arbitrario a través de un mensaje mal formado con un valor de offset manipulado, que produce un desbordamiento de búfer. NOTA: Este hecho se produce por un arreglo incompleto de CVE-2008-2927."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.5",
            "matchCriteriaId" : "6FC23273-E322-40E0-AD26-2F272EB5E7A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.0:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D1DFC7-4B7F-4006-9058-8335A292821E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.1:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "12095F49-8DFD-4C74-9454-5C3A5992A3FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.2:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "C62110B5-61D7-406D-B1A5-65AEC202DDFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.3:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "CD01B8C6-7D3E-4FF9-A5B5-AAF33F4CEBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.0:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6D98DC-06FC-46E7-A790-98A0B43A4E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.2:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEE4F73-A426-4B47-8BAF-1C7D2F955850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.3:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "777EF35C-195A-4784-986D-3811CF1DCF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.4:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD21F1-7A08-4F2D-B8EA-C02771E960FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://debian.org/security/2009/dsa-1805",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35188",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35194",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35202",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35215",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35294",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35329",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35330",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37071",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:140",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:173",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.pidgin.im/news/security/?id=32",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1059.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1060.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35067",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-781-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-781-2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1396",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500493",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50680",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18432",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://debian.org/security/2009/dsa-1805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pidgin.im/news/security/?id=32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1059.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-781-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-781-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-26T15:30:05.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in lib/load_http.c in ippool in Darren Reed IPFilter (aka IP Filter) 4.1.31 allows local users to gain privileges via vectors involving a long hostname in a URL."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en lib/load_http.c en ippool en Darren Reed IPFilter (también conocido como IP Filter) v4.1.31 permite a usuarios locales conseguir privilegios a través de vectores relacionados con un nombre de servidor largo en la URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:darren_reed:ipfilter:4.1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C2E385-9268-49B9-82E6-00D093EC4F8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/ipf/lib/load_http.c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/ipf/lib/load_http.c.diff?r1=1.1&r2=1.2&f=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/62",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/ipf/lib/load_http.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/ipf/lib/load_http.c.diff?r1=1.1&r2=1.2&f=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-26T15:30:05.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El componente WebAccess en Novell GroupWise v7.x anterior a v7.03 HP3 y v8.x anterior a v8.0 HP2 no implementa adecuadamente los mecanismos de manejo de sesión, lo que permite a atacantes remotos conseguir acceso a cuentas de usuario a través de vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE640E9A-762B-4AF4-8677-818CBF16EA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "422F4B8A-8133-4DE2-9749-41E3DE0031DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DD25DC76-F3BE-4A0E-86DC-D27F4948446E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0AA3F3-6BE4-4CCC-838F-E8BD1F06590B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D3BCF9F-9CDA-4DFD-AC39-2624BCFAAD96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*",
            "matchCriteriaId" : "84293DF8-D11D-4CB4-99EC-EB60AF027B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:hp2:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D63B03-C0A1-4366-B853-0D36CA0E6912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E2ABC-20AE-437A-83B0-2E0753787FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:8.0:hp1:*:*:*:*:*:*",
            "matchCriteriaId" : "97206FE4-E1F1-40EC-BC01-A0125FB3B20F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35177",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7003266&sliceId=1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1393",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=472979",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7003266&sliceId=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=472979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-26T15:30:05.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the Internet Agent (aka GWIA) component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary code via (1) a crafted e-mail address in an SMTP session or (2) an SMTP command."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en el componente the Internet Agent (tambien conocido como GWIA) en Novell GroupWise v7.x anteriores a v7.03 HP3 y v8.x anteriores v8.0 HP2 permite a atacantes remotos ejecutar código arbitrario a través de (1) una dirección de correo electrónico manipulada en una sesión SMTP o (2) un comando SMTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE640E9A-762B-4AF4-8677-818CBF16EA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FBB457-FDC0-485F-951A-C0A7661A92B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8661AFFB-5CAF-4D44-A617-E0330C764BDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CF66EFEE-DAB2-4455-96F2-50D3E9456485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "422F4B8A-8133-4DE2-9749-41E3DE0031DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DD25DC76-F3BE-4A0E-86DC-D27F4948446E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0AA3F3-6BE4-4CCC-838F-E8BD1F06590B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D3BCF9F-9CDA-4DFD-AC39-2624BCFAAD96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DB474F-D101-4210-9DC1-7230E9CAE80D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*",
            "matchCriteriaId" : "84293DF8-D11D-4CB4-99EC-EB60AF027B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.03:hp2:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D63B03-C0A1-4366-B853-0D36CA0E6912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:8.0:hp1:*:*:*:*:*:*",
            "matchCriteriaId" : "97206FE4-E1F1-40EC-BC01-A0125FB3B20F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35177",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7003272&sliceId=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7003273&sliceId=1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503724/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1393",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/exploits/Novell_GroupWise_GWIA_Email_Address_Remote_Buffer_Overflow_Exploit_1393141.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/exploits/Novell_GroupWise_GWIA_SMTP_Command_Remote_Buffer_Overflow_PoC_Exploit_1393140.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=478892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=482914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7003272&sliceId=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7003273&sliceId=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503724/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/exploits/Novell_GroupWise_GWIA_Email_Address_Remote_Buffer_Overflow_Exploit_1393141.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/exploits/Novell_GroupWise_GWIA_SMTP_Command_Remote_Buffer_Overflow_PoC_Exploit_1393140.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=478892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=482914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-26T15:30:05.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PackageManagerService class in services/java/com/android/server/PackageManagerService.java in Android 1.5 through 1.5 CRB42 does not properly check developer certificates during processing of sharedUserId requests at an application's installation time, which allows remote user-assisted attackers to access application data by creating a package that specifies a shared user ID with an arbitrary application."
      }, {
        "lang" : "es",
        "value" : "La clase PackageManagerService en services/java/com/android/server/PackageManagerService.java en Android v1.5 a v1.5 CRB42 no comprueba adecuadamente los certificados de desarrollador durante el procesado de las peticiones sharedUserId en el momento de instalar aplicaciones, lo que permite a atacantes remotos acceder a datos de la aplicación mediante la creación de un paquete que especifique un sharedUserId con una aplicación de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C354829-6BEB-4C67-972A-60367073753C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=5d6d773fab559fdc12e553d60d789f3991ac552c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/22/14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=5d6d773fab559fdc12e553d60d789f3991ac552c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/22/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-26T15:30:05.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows local users to create or overwrite arbitrary files via a symlink attack on the log file associated with the MALLOCDEBUG environment variable."
      }, {
        "lang" : "es",
        "value" : "El subsistema malloc en libc en IBM AIX v5.3 y v6.1 permite a usuarios locales crear o sobrescribir ficheros de forma arbitraria a través de un ataque de enlace simbólico en el fichero log asociado con la variable de entorno MALLOCDEBUG."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD518B94-9CD7-4C45-8766-578CF427B4CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/libc_advisory.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35146",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022261",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ50121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ50129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ50139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ50445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ50447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ50500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ50517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/54617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/libc_advisory.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ50121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ50129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ50139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ50445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ50447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ50500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ50517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/54617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-26T16:30:02.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PHP Dir Submit (aka WebsiteSubmitter and Submitter Script) allow remote attackers to bypass authentication and gain administrative access via the (1) username and (2) password parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en PHP Dir Submit (también conocido como WebsiteSubmitter y Submitter Script), permite a atacantes remotos evitar la autenticación y obtener privilegios de acceso como administrador a través de los parámetros (1) \"username\" y (2) \"password\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpdirsubmit:php_dir_submit:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D4E8BA-785F-4B02-AA66-8010C002EFC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35003",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-26T16:30:02.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a VOC file with an invalid header value."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en voc_read_header en libsndfile desde v1.0.15 hasta v1.0.19, cuando se utiliza en Winamp v5.552 y posiblemente otros programas multimedia, permite a atacantes remotos producir una denegación de servicio (caída de aplicación) y posiblemente la ejecución arbitraria de código a través de un fichero VOC con una valor de cabecera no valido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "570D85F0-F757-488A-A059-54BF0810F1E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28BC682-E6B1-4A63-9734-FDB6019B9AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8823A84B-4694-4838-A877-AE66400B26BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C2B0D1-AE8A-4978-85B0-C5E0ABE89E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "759BBF60-8964-4590-A5EB-F21EB4049E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E02CCF2-2335-4F08-8061-6CFD7C8B265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FEE5A4C-770A-458B-AC1A-8F1F99A0951A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58E9493-556E-4085-B337-AE211A28DA6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6E95D5-D855-4CD4-B44B-66FF029EC823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "218E9850-70F5-4579-9549-47DD16ECD2B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951898A7-A060-4853-8C4E-99927794C0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.552:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA20F35-AC57-4B5B-9EF1-8A4393BD1B33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35076",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trapkit.de/advisories/TKADV2009-006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mega-nerd.com/erikd/Blog/CodeHacking/libsndfile/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mega-nerd.com/libsndfile/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34978",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1324",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1348",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trapkit.de/advisories/TKADV2009-006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mega-nerd.com/erikd/Blog/CodeHacking/libsndfile/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mega-nerd.com/libsndfile/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-26T16:30:02.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy.  NOTE: this issue exists because of an incorrect fix for CVE-2007-2807."
      }, {
        "lang" : "es",
        "value" : "mod/server.mod/servmsg.c en Eggheads Eggdrop y Windrop v1.6.19 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída) a través de un PRIVMSG manipulado que crea una cadena vacía que provoca una copia de longitud de cadena negativa. NOTA: esta vulnerabilidad existe por una incorrecta corrección del CVE-2007-2807."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B949FDB5-004E-4D1A-B231-B12B0530D8B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "122A9276-FBAE-4ACB-8B57-1F11316AE6CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38C0C2B5-D834-481B-B0F4-52815D5F05D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA76910-DA6A-431E-A4D3-65F67B06DE8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC43937-427B-440C-9057-81B030F703CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9BC3A5-F83F-4A54-8F1D-01A26F4CE7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85C89850-5063-4A3F-AD36-A7BB9C277196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B027835C-D277-404A-8663-B11DAD15200A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2468A8A0-0916-40AF-B666-37F4E09D2F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2FAD548-8685-4C1B-85EB-EDA5A3490A6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "591CEC1D-0E78-4F06-897E-5EFC6C3EB22D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AFEFA8F-E0BD-4B16-91F0-0D0CCAFD9A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "846E8578-2E43-40FB-AFBE-8002B3C6360F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A966576E-C1E1-413B-9BC7-13A581F8C278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC103352-44FE-4629-9E78-4398B8E621C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "392B2FDA-0BB1-4525-B892-96074BCD68D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A36497B-FC48-458D-9637-E5FD49DAD515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B44064-F334-42C0-AC66-B82DC2227857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344C8A04-1E35-4F1D-8283-3E520867489C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop:1.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "641DAB73-091A-45E2-850D-EB3E852645FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eggheads:eggdrop_irc_bot:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.19",
            "matchCriteriaId" : "3ACCBBE9-03EC-496E-8163-1BEC53651211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.19",
            "matchCriteriaId" : "2F67FC40-34BD-4266-85F8-10CEEE66C377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.4.4:*:final:*:*:*:*:*",
            "matchCriteriaId" : "8D6C2110-D8D8-4864-A556-E907B98E185F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D82640-7F8A-45F8-9B41-A09BB37B62A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.5.4:*:final:*:*:*:*:*",
            "matchCriteriaId" : "58730915-EE80-4CDF-9196-CC96B7835C27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.5.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BD84BF3B-F6D9-41CA-9A2C-F09F6F00B39F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.5.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D83AD2BC-CD73-4A85-8E12-E15EEE74D85F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.5.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3774084D-7BB9-4F70-BDB3-FE7796EE513B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.0:*:final:*:*:*:*:*",
            "matchCriteriaId" : "0C86A3CE-5522-4924-B2B9-2C81710BEF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "537EA552-06C8-4AFE-960D-468A70157318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.0:rc1-rel2:*:*:*:*:*:*",
            "matchCriteriaId" : "4112B1DF-6883-45B4-823A-145275FE672A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98797B0A-5979-493D-968F-ED20F26F9EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.2\\+bindsfix:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5239C772-554E-4E90-904C-499D419E87FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D43A10B-66AE-429B-B939-E3862D4F1EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.4:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "75918B14-B217-47D1-988C-B47CFA6D142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3115178C-6CF4-45B5-A84F-2D770DAFC600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57740B2C-08DA-41E2-9F1B-69789A32DC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D02A42B-C8A5-46D4-9E59-F06D3490DCDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02DFF7AE-89EF-4E1B-8EF6-D6505EC5CDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D566B296-E828-4FF5-A6CC-3A4216EF4200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7380F17C-1AA5-4A02-A9FD-B7A45EE612CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB09FFB8-9A04-4874-823D-5140D2F0AC15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8D2814-F718-4EDE-B56F-D392FB7B534F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCAF4B0-4C86-4C47-9C31-CFBAFFB8B739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DBC15B0-5E0A-4B6D-AAE9-C25E59450BAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC921FD5-53F7-4430-8EFA-E7363597099A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_moore:windrop:1.6.19\\+ctcpfix:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1724543-C2ED-48F3-8DEC-61CA586CB505"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0129.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.eggheads.org/viewvc/viewvc.cgi/eggdrop1.6/doc/Changes1.6?revision=1.20&view=markup",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35104",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1340",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01333.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01337.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0129.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.eggheads.org/viewvc/viewvc.cgi/eggdrop1.6/doc/Changes1.6?revision=1.20&view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01333.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01337.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-26T16:30:02.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in CGI RESCUE Trees before 2.11 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en CGI RESCUE Trees anterior a v2.11 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de parámetros inespecíficos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cgi_rescue:rescue:*:2.10:*:*:*:*:*:*",
            "versionEndIncluding" : "cgi_rescue_trees",
            "matchCriteriaId" : "1AF8749D-1396-48F6-BB81-C54D8CBD5C33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN28521500/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000028.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35123",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20090512155247",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34999",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50579",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN28521500/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20090512155247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-26T17:30:02.063",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an AIFF file with an invalid header value."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en aiff_read_header en libsndfile desde v1.0.15 hasta v1.0.19, como se utiliza en Winamp v5.552 y posiblemente otros programas multimedia, permite a atacantes remotos producir una denegación (caída de aplicación) y posiblemente la ejecución de código de modo arbitrario a través de un fichero AIFF con un valor de cabecera no valido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "570D85F0-F757-488A-A059-54BF0810F1E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28BC682-E6B1-4A63-9734-FDB6019B9AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8823A84B-4694-4838-A877-AE66400B26BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C2B0D1-AE8A-4978-85B0-C5E0ABE89E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mega-nerd:libsndfile:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "759BBF60-8964-4590-A5EB-F21EB4049E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E02CCF2-2335-4F08-8061-6CFD7C8B265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FEE5A4C-770A-458B-AC1A-8F1F99A0951A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58E9493-556E-4085-B337-AE211A28DA6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6E95D5-D855-4CD4-B44B-66FF029EC823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "218E9850-70F5-4579-9549-47DD16ECD2B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951898A7-A060-4853-8C4E-99927794C0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.552:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA20F35-AC57-4B5B-9EF1-8A4393BD1B33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35076",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mega-nerd.com/erikd/Blog/CodeHacking/libsndfile/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mega-nerd.com/libsndfile/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34978",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1324",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200905-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mega-nerd.com/erikd/Blog/CodeHacking/libsndfile/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mega-nerd.com/libsndfile/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-26T22:30:00.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to an error page."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Sun Java System Portal Server v6.3.1, v7.1, y v7.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores relacionados con una pagina de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_portal_server:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5079DD4A-F14E-4ABD-B5DA-4DC75135EF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_portal_server:6.3.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "9701D793-7080-4272-B657-C17B5CEBE20C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_portal_server:6.3.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E5AFFD01-488F-43DE-BAAD-8D77AB2AEE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_portal_server:6.3.1:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BA6693B-153C-4A7B-BE2C-3897F9B74346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_portal_server:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A29331A7-9D72-489D-A8DF-5B4C18A19692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_portal_server:7.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "A67F6B05-8B6D-4C48-8094-01600589863E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_portal_server:7.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E7CFAA-1CBF-4671-8602-E1160F25504C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_portal_server:7.1:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0E4E8DC1-130F-40EB-9C7F-E951C457406D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_portal_server:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D63923-869B-4156-BBED-DFB417B19420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_portal_server:7.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "3BDF3AEA-DD1C-4BE1-A8B1-CEA5A5F6DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_portal_server:7.2:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FAA736B8-818E-4F17-BE10-BA8BDD08A41F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_portal_server:7.2:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CCF640FC-9D89-4B02-B6FA-C789FDFD37C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118950-38-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256588-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35082",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118950-38-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256588-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0588",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-05-27T16:30:01.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field."
      }, {
        "lang" : "es",
        "value" : "agent/request/op.cgi en el componente Registration Authority (RA) en Red Hat Certificate System (RHCS) 7.3 y Dogtag Certificate System permiten a atacantes remotos autenticados aprobar peticiones de certificado en cola para grupos de agentes de su elección mediante una petición de campo ID modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:certificate_system:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2654E6A-190C-4D5C-ABC0-89011DD8E293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:dogtag_certificate_system:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D606EF-447B-42C5-ADBE-14515257262B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35242",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35263",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1065.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35104",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022278",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=484828",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=488706",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1065.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=484828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=488706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-27T16:30:01.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java client program for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 has a hardcoded AES encryption key, which makes it easier for man-in-the-middle attackers to (1) execute arbitrary Java code, or (2) gain access to machines connected to the switch, by hijacking a session."
      }, {
        "lang" : "es",
        "value" : "El programa cliente JAVA para los switches ATEN KH1516i IP KVM con firmware 1.0.063 y KN9116 IP KVM con firmware 1.1.104 tiene una clave de cifrado AES fija, lo que facilita a los atacantes de tipo \"hombre en el medio\" (man-in-the-middle) (1) ejecutar código Java de su elección  o (2) obtener acceso a las máquinas conectadas al switch mediante el secuestro de la sesión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:aten:kh1516i_ip_kvm_switch:1.0.063:-:java_client:*:*:*:*:*",
            "matchCriteriaId" : "50ACA9FF-A214-4911-B3EC-39B3950FA5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:aten:kn9116_ip_kvm_switch:1.1.104:-:java_client:*:*:*:*:*",
            "matchCriteriaId" : "43CC1042-AB83-4B46-984B-98D98D133DAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/503827/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503827/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-27T16:30:01.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) Windows and (2) Java client programs for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not properly use RSA cryptography for a symmetric session-key negotiation, which makes it easier for remote attackers to (a) decrypt network traffic, or (b) conduct man-in-the-middle attacks, by repeating unspecified \"client-side calculations.\""
      }, {
        "lang" : "es",
        "value" : "Los programas cliente (1) Windows and (2) Java para los switches ATEN KH1516i IP KVM con firmware 1.0.063 y KN9116 IP KVM con firmware 1.1.104 no usan de manera apropiada la criptografía RSA en una negociación de clave de sesión simétrica, lo que facilita a atacantes remotos (a) desencriptar el tráfico de red o (b) llevar a cabo ataques del tipo \"man in the middle (hombre en el medio)\", mediante la repetición de \"cálculos en el lado del cliente\" no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:aten:kh1516i_ip_kvm_switch:1.0.063:-:java_client:*:*:*:*:*",
            "matchCriteriaId" : "50ACA9FF-A214-4911-B3EC-39B3950FA5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:aten:kh1516i_ip_kvm_switch:1.0.063:-:windows_client:*:*:*:*:*",
            "matchCriteriaId" : "BBB7093D-2C92-43E5-9FCC-6455F2814307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:aten:kn9116_ip_kvm_switch:1.1.104:-:java_client:*:*:*:*:*",
            "matchCriteriaId" : "43CC1042-AB83-4B46-984B-98D98D133DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:aten:kn9116_ip_kvm_switch:1.1.104:-:windows_client:*:*:*:*:*",
            "matchCriteriaId" : "3111EE0D-155E-4031-9003-B9013BABEA76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503827/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503827/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-27T16:30:01.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not (1) encrypt mouse events, which makes it easier for man-in-the-middle attackers to perform mouse operations on machines connected to the switch by injecting network traffic; and do not (2) set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session."
      }, {
        "lang" : "es",
        "value" : "El switch ATEN KH1516i IP KVM con firmware 1.0.063 y el switch KN9116 IP KVM con firmware 1.1.104 no (1) cifran los eventos del ratón, lo que permite a atacantes de tipo \"hombre en el medio\" (man-in-the-middle) realizar operaciones de ratón en máquinas conectadas al switch mediante la inyección de tráfico de red; y no (2) no habilitan el flag 'secure' para la cookie de sesión en una sesión https, lo que faciita a los atacantes remotos el capturar esta cookie interceptando su transmisión dentro de una sesión http.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:aten:kh1516i_ip_kvm_switch:1.0.063:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F67B9DD1-E02A-4C5B-A580-BFD9ABD8A8E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:aten:kn9116_ip_kvm_switch:1.1.104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C48202DF-1036-45C0-AEBB-6F133649D537"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503827/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503827/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-27T16:30:01.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The https web interfaces on the ATEN KH1516i IP KVM switch with firmware 1.0.063, the KN9116 IP KVM switch with firmware 1.1.104, and the PN9108 power-control unit have a hardcoded SSL private key, which makes it easier for remote attackers to decrypt https sessions by extracting this key from their own switch and then sniffing network traffic to a switch owned by a different customer."
      }, {
        "lang" : "es",
        "value" : "Las interfaces web en el switch ATEN KH1516i IP KVM con firmware 1.0.063, el switch KN9116 IP KVM con firmware 1.1.104 y la unidad de control de energía PN108 tienen una clave privada SSL fija, lo que facilita a atacantes remotos desencriptar sesiones https mediante la extracción de esta clave de su propio switch y posteriormente capturar tráfico de red dirigido a un switch propiedad de otro cliente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:aten:kh1516i_ip_kvm_switch:1.0.063:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F67B9DD1-E02A-4C5B-A580-BFD9ABD8A8E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:aten:kn9116_ip_kvm_switch:1.1.104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C48202DF-1036-45C0-AEBB-6F133649D537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:aten:pn9108_power_over_the_net:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDE53F8-D607-44AF-8379-A0C1FD71BF7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/503827/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503827/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-28T14:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the getGalleryImage function in st_admin/gallery_output.php in ST-Gallery 0.1 alpha, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) gallery_category or (2) gallery_show parameter to example.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en la función getGalleryImage en st_admin/gallery_output.php en ST-Gallery 0.1 alpha, cuando magic_quotes_gpc está deshabilitado, permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) gallery_category o (2) gallery_show para example.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sebastian-thiele:st-gallery:0.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D52278C-53A6-464D-85B4-771FCEC201FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=124171333011782&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34875",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124171333011782&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-28T14:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Chinagames CGAgent ActiveX control 1.x in CGAgent.dll, as distributed in Chinagames iGame 2009, allows remote attackers to execute arbitrary code via a long argument to the CreateChinagames method, as exploited in the wild in April and May 2009.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el control 1.x ActiveX Chinagames CGAgent en CGAgent.dll, tal como se distribuye en Chinagames iGame 2009, permite a atacantes remotos ejecutar código de su elección mediante un argumento largo a el método CreateChinagames, como se ha explotado libremente en Abril de 2009. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chinagames:igame:2009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607B31FB-237D-4057-8ABC-CB83DB3C3F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bbs.pediy.com/showthread.php?t=87615",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/34871.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://hi.baidu.com/wi4r/blog/item/8b1c06fb2e3de8819f514671.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35005",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisrt.org/enblog/read.php?245",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34871",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://bbs.pediy.com/showthread.php?t=87615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/34871.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://hi.baidu.com/wi4r/blog/item/8b1c06fb2e3de8819f514671.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisrt.org/enblog/read.php?245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-28T14:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to inject arbitrary web script or HTML via the (1) display parameter to reports.php, the (2) order and (3) extdisplay parameters to config.php, and the (4) sort parameter to recordings/index.php. NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados(XSS) en FreePBX v2.5.1, y otras v2.4.x, v2.5.x, y versiones pre-release v2.6.x, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través (1) del parámetro display a reports.php, (2) el order y (3) el parámetro extdisplay a config.php, y (4) el parámetro sort a recordings/index.php. NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E97D6-B069-49D6-B510-3D4112A9E1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.4.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1E1278-3114-4BD1-B589-30B5313C9502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.4.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D216B0-31D6-4288-8773-FB2438944492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A09E3F0-E1A6-4CC4-8134-89DF5DB6EA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.5.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11ACC1C9-A2C3-41CA-B608-C474B642A380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.5.0rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A021AB-A142-4DAD-9EB0-2352C625D8CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.5.0rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0B173F-2161-4E40-A712-90DA6B997820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613A39A4-976E-4535-9408-533F957F7F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5B657C6-A2DF-432A-9F46-1157C630CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9734B50E-BEA8-41DF-835F-7B15A9BB31E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9645D4F-BB03-49AD-AE79-6FE990BF18FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freepbx.org/trac/ticket/3660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34772",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34857",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freepbx.org/trac/ticket/3660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-28T14:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to hijack the authentication of admins for requests that create a new admin account or have unspecified other impact."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en FreePBX 2.5.1, y otros 2.4.x, 2.5.x, y versiones pre-lanzamiento 2.6.x, permiten a atacantes remotos secuestrar la autenticación de administradores en peticiones que crean una nueva cuenta de administrador o tener otros impactos no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E97D6-B069-49D6-B510-3D4112A9E1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.4.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1E1278-3114-4BD1-B589-30B5313C9502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.4.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D216B0-31D6-4288-8773-FB2438944492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A09E3F0-E1A6-4CC4-8134-89DF5DB6EA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B2C1156-93B6-4D71-8D9C-ED6FC6C0AE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.5.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11ACC1C9-A2C3-41CA-B608-C474B642A380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.5.0rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A021AB-A142-4DAD-9EB0-2352C625D8CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.5.0rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0B173F-2161-4E40-A712-90DA6B997820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613A39A4-976E-4535-9408-533F957F7F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5B657C6-A2DF-432A-9F46-1157C630CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9734B50E-BEA8-41DF-835F-7B15A9BB31E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9645D4F-BB03-49AD-AE79-6FE990BF18FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freepbx.org/trac/ticket/3660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34772",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34857",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://freepbx.org/trac/ticket/3660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-28T14:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, generates different error messages for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames."
      }, {
        "lang" : "es",
        "value" : "FreePBX v2.5.1, v2.4.x, v2.5.x, y pre-release v2.6.x, genera distintos errores tras intentos de login fallidos dependiendo de si la cuenta de usuario existe o no, lo que permite a atacantes remotos listar nombres de usuarios váalidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E97D6-B069-49D6-B510-3D4112A9E1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.4.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1E1278-3114-4BD1-B589-30B5313C9502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.4.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D216B0-31D6-4288-8773-FB2438944492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A09E3F0-E1A6-4CC4-8134-89DF5DB6EA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B2C1156-93B6-4D71-8D9C-ED6FC6C0AE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.5.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11ACC1C9-A2C3-41CA-B608-C474B642A380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.5.0rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A021AB-A142-4DAD-9EB0-2352C625D8CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.5.0rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0B173F-2161-4E40-A712-90DA6B997820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613A39A4-976E-4535-9408-533F957F7F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freepbx:freepbx:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5B657C6-A2DF-432A-9F46-1157C630CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9734B50E-BEA8-41DF-835F-7B15A9BB31E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9645D4F-BB03-49AD-AE79-6FE990BF18FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freepbx.org/trac/ticket/3660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34772",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34857",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://freepbx.org/trac/ticket/3660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-28T14:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in admin/index.php in VideoScript.us YouTube Video Script allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en admin/index.php en VideoScript.us YouTube Video Script permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) username and (2) password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videoscript:youtube_video_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C616E299-17C5-40EC-A587-A791BA127939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34868",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1195",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-05-28T20:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file."
      }, {
        "lang" : "es",
        "value" : "El Servidor HTTP de Apache v2.2.11 y anteriores a versiones 2.2 no maneja adecuadamente Options=IncludesNOEXEC en la directiva AllowOverride, lo que permite a usuarios locales obtener privilegios configurando (1) Options Includes, (2) Options +Includes, o (3) Options +IncludesNOEXEC en un fichero .htaccess, y después insertar un elemento exec en un fichero .shtml."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67AD11FB-529C-404E-A13B-284F145322B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "733D62FE-180A-4AE8-9DBF-DA1DC18C1932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCBBB7FE-35FC-4515-8393-5145339FCE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F519633F-AB68-495A-B85E-FD41F9F752CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A894BED6-C97D-4DA4-A13D-9CB2B3306BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D5B52AA-B059-47D1-87CD-D2F002387FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF3A0F5-4E5C-4278-9927-1F94F25CCAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB63EBE5-CF14-491E-ABA5-67116DFE3E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C2A33DE-F55F-4FD8-BB00-9C1E006CA65C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=apache-httpd-dev&m=124048996106302&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129190899612998&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/54733",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35261",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35264",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35395",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35453",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35721",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37152",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-04.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=772997",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0142",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1816",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:124",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1075.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1156.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507852/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507857/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35115",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022296",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-787-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1444",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=489436",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50808",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11094",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12377",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8704",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=apache-httpd-dev&m=124048996106302&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129190899612998&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/54733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=772997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1075.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507852/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507857/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-787-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=489436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1384",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-05-28T20:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames."
      }, {
        "lang" : "es",
        "value" : "pam_krb5 v2.2.14 a v2.3.4, tal como se usa Red Hat Enterprise Linux (RHEL) 5, genera diferentes peticiones de contraseña dependiendo de si existe la cuenta de usuario, lo que permite a atacantes remotos enumerar los nombres de usuario válidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9B3CC0-DF1C-4A86-B2A3-A9D428A5A6E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5:*:client:*:*:*:*:*",
            "matchCriteriaId" : "7361D8F0-FE84-41D0-9C62-F180339DD40A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5:*:client_workstation:*:*:*:*:*",
            "matchCriteriaId" : "5454336D-724E-4027-A642-1EFCB79C1ADC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5:*:server:*:*:*:*:*",
            "matchCriteriaId" : "5833A489-D6DE-4D51-9E74-189CBC2E28CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:2.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D57B9A37-0003-4E3D-B0FE-9BEA46D26FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81821DD4-343A-4CDE-A7A6-CA606662971C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyrie:pam-krb5:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F34ECE-67B4-4B0A-BB57-A0A8F666669C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54791",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35230",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/43314",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:054",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/27/1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35112",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1448",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=502602",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7081",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9652",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/54791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/27/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=502602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of the pam_krb5 packages, as shipped with Red Hat Enterprise Linux 3 and 4.\n\nThe issue was addressed in the pam_krb5 packages as shipped with Red Hat Enterprise Linux 5 via:\nhttps://rhn.redhat.com/errata/RHSA-2010-0258.html",
        "lastModified" : "2010-03-31T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1633",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-28T20:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service (memory corruption) and possibly have unspecified other impact via (1) a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or (2) long Unicode characters, related to fs/cifs/cifssmb.c and the cifs_readdir function in fs/cifs/readdir.c."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en el subsistema cifs en el kernel de Linux anterior a v2.6.29.4  permite a servidores remotos CIFS provocar una denegación de servicio (corrupción de memoria) y posiblemente tener otros impactos sin identificar a través de (1) una cadena Unicode mal formada, relacionado con el área de alineación de cadena Unicode en fs/cifs/sess.c; o (2) carateres largos _Unicode, relacionado con fs/cifs/cifssmb.c y la función cifs_readdir en fs/cifs/readdir.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.29.4",
            "matchCriteriaId" : "9369E3E3-C1E6-43BB-AFBC-321034D58A31"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commit%3Bh=7b0c8fcff47a885743125dd843db64af41af5a61",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commit%3Bh=968460ebd8006d55661dec0fb86712b40d71c413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=27b87fe52baba0a55e9723030e76fce94fabcea4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=124099284225229&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=124099371726547&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35217",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35226",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35298",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35847",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36327",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37351",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0111",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1809",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1865",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:148",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/14/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/14/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/15/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1157.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505254/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34612",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=496572",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8588",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9525",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01271.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commit%3Bh=7b0c8fcff47a885743125dd843db64af41af5a61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commit%3Bh=968460ebd8006d55661dec0fb86712b40d71c413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=27b87fe52baba0a55e9723030e76fce94fabcea4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=124099284225229&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=124099371726547&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/14/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/14/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/15/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1157.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505254/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=496572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01271.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, and 3.\n\nIt was addressed in Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2009-1211.html , https://rhn.redhat.com/errata/RHSA-2009-1106.html , and https://rhn.redhat.com/errata/RHSA-2009-1157.html .",
        "lastModified" : "2009-09-10T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-28T20:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server (VIOS) partitions.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en IBM Hardware Management Console (HMC) 7 release v3.4.0 SP2, cuando la memoria activa compartida es utilizada, tiene un impacto y vectores de ataque desconocidos, relacionado con una partición de memoria compartida y una pila de memoria compartida con particiones de paginación virtual I/O de servidores (VIOS) \r\nredundantes. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:hardware_management_console:7.3.4.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "439903D2-9407-4358-BB27-E1250500EE0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1MB03011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-933.ibm.com/support/fixcentral/firmware/readme?fixid=MH01181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4671",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1MB03011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-933.ibm.com/support/fixcentral/firmware/readme?fixid=MH01181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-28T20:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by calling the SetAttributeValue method, as exploited in the wild in April and May 2009."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Config.dll en productos Baofeng  v3.09.04.17 y anteriores permite a atacantes remotos ejecutar código de su elección llamando al método SetAttributeValue, como se ha explotado libremente en Abril y Mayo de 2009."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baofeng:storm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.09.04.17",
            "matchCriteriaId" : "562E2843-2197-4945-8141-DC06F55D6F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baofeng:storm:2.7.9_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F52CD8D-3166-4A06-BB43-B7DEE653FBDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baofeng:storm:2.7.9_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD543322-FB0F-45E0-9E93-347425B470BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baofeng:storm:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF09EE7-F241-4EDE-8266-FD2413C6E1AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baofeng:storm:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93399125-BFCD-4EEC-B187-3E89A8DB82D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisrt.org/enblog/read.php?245",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisrt.org/enblog/read.php?245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-28T20:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows XP SP3 allows local users to cause a denial of service (system crash) by making an SPI_SETDESKWALLPAPER SystemParametersInfo call with an improperly terminated pvParam argument, followed by an SPI_GETDESKWALLPAPER SystemParametersInfo call."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows XP SP3 permite a usuarios locales provocar una denegación de servicio (caída de sistema) haciendo una llamada SystemParametersInfo SPI_SETDESKWALLPAPER con un argumento \"pvParam\" terminado incorrectamente, seguido por una llamada SystemParametersInfo SPI_GETDESKWALLPAPER"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:home:*:*:*:*:*",
            "matchCriteriaId" : "D586C749-9D00-4546-9941-CCFBD41BAABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:media_center:*:*:*:*:*",
            "matchCriteriaId" : "72AF15F9-4AE2-40FE-A598-1284BA3A06D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:professional:*:*:*:*:*",
            "matchCriteriaId" : "471B4ADA-8627-48BC-B13F-FF5F38F55C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "21BCA9B5-A8B0-4273-8C5E-665E118695DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:x64:*:*:*:*:*",
            "matchCriteriaId" : "1BBAA93E-FF26-4C28-9515-A444FCD4B853"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ragestorm.net/blogs/?p=78",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35120",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ragestorm.net/blogs/?p=78",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T16:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in myColex 1.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the year parameter to modules/kalender.php, (2) the Page parameter in a List action to modules/ereignis.php, (3) the Kontext parameter in a Search action to modules/kategorie.php, or (4) the image parameter to modules/image.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados(XSS) en myColex v1.4.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través (1)el parámetro year en modules/kalender.php, (2) el parámetro Page en una acción List en modules/ereignis.php, (3) el parámetro Kontext en una acción Search en modules/kategorie.php, o (4) el parámetro image en modules/image.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:collector:mycolex:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F45192-F9E0-444F-AE18-29DDCFE38F01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35112",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34997",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T16:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute arbitrary SQL commands via (1) the formUser parameter (aka the Name field) to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail action to (2) kategorie.php, (3) medium.php, (4) person.php, or (5) schlagwort.php in modules/, related to classes/class.perform.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en myColex v1.4.2 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de (1) el parámetro formUser(también conocido con el campo Name) en common/login.php, y permite a usuarios remotos autenticados ejecutar comandos SQL de su elección a través del parámetro ID en una acción Detail en (2) kategorie.php, (3) medium.php, (4) person.php, o (5) schlagwort.php en modules/, relacionado con classes/class.perform.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:collector:mycolex:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F45192-F9E0-444F-AE18-29DDCFE38F01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35111",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.collector.ch/drupal5/?q=node/39",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34997",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.collector.ch/drupal5/?q=node/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T16:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to inject arbitrary web script or HTML via (1) the Page parameter in a List action to modules/ereignis.php, (2) the Kontext parameter in a Search action to modules/kategorie.php, (3) the image parameter to modules/image.php, or (4) the ID parameter in a Detail action to modules/sitzung.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados(XSS) en myGesuad v0.9.14 (también conocido como v0.9) permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través (1) el parámetro Page en una acción List en modules/ereignis.php, (2) el parámetro Kontext en una acción Search en modules/kategorie.php, (3) el parámetro image en modules/image.php, o (4) el parámetro ID en una acción Detail en modules/sitzung.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:collector:mygesuad:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F74413D-2C26-4E50-AFC2-8F52FEF61199"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35136",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34998",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T16:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to execute arbitrary SQL commands via (1) the formUser parameter (aka the Name field) to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail action to (2) kategorie.php, (3) budget.php, (4) zahlung.php, or (5) adresse.php in modules/, related to classes/class.perform.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en myGesuad v0.9.14 (también conocido como v0.9)permite a atacantes remotos ejecutar comandos SQL de su elección a través de (1) el parámetro formUser (también conocido como el campo de nombre) en common/login.php, y permite a usuarios remotos autenticados ejecutar comandos SQL de su elección a través del parámetro ID en una acción Detail en (2) kategorie.php, (3) budget.php, (4) zahlung.php, o (5) adresse.php en modules/, relacionado con classes/class.perform.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:collector:mygesuad:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F74413D-2C26-4E50-AFC2-8F52FEF61199"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35110",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.collector.ch/drupal5/?q=node/39",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34998",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.collector.ch/drupal5/?q=node/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T16:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote attackers to execute arbitrary SQL commands via (1) the uNev parameter (aka the username field) or (2) the uJelszo parameter (aka the Password field)."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en admin/index.php en Submitter Script v2 permite a atacantes remotos ejecutar comandos SQL de su elección a través de (1) el parámetro uNev (también conocido como campo de nombre de usuario) o (2) el parámetro uJelszo (también conocido como el campo de contraseña)"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:submitterscript:submitterscript:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D33C1F-B087-4F02-83DB-02A94099416C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54475",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35088",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34970",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1327",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T16:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter.  NOTE: the profile.php vector is already covered by CVE-2006-0074."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en mail.php en PHPenpals v1.1 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"ID\". NOTA: el vector profile.php start_date/reserve.php ya ha sido tratado en CVE-2006-0074."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jevontech:phpenpals:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "20159690-6CFE-4577-B115-5A4D792E172B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18269",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34996",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1342",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T16:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Sonic Spot Audioactive Player 1.93b allows remote attackers to execute arbitrary code via a long string in a playlist file, as demonstrated by a long .mp3 URL in a .m3u file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Sonic Spot Audioactive Player v1.93b permite a atacantes remotos ejecutar código de su elección a través de una cadena larga en un fichero playlis, como se ha demostrado en ficheros largos .mp3 URL en un .m3u"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonicspot:audioactive_player:1.93b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730D7D96-7DF2-429F-9718-35888C022742"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34987",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1339",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1816",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T16:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin.php in My Game Script 2.0 allows remote attackers to execute arbitrary SQL commands via the user parameter (aka the username field).  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin.php in My Game Script v2.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro user (también conocido como el campo de nombre de usuario). NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros.\r\n\r\n\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mygamescript:my_game_script:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB986441-6178-4368-8A05-A1A2AD01B445"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54459",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35085",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34963",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1817",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T16:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in DigiMode Maya 1.0.2 allow remote attackers to execute arbitrary code via a long string in a malformed (1) .m3u or (2) .m3l playlist file."
      }, {
        "lang" : "es",
        "value" : "Múltiple desbordamiento de búfer en DigiMode Maya v1.0.2 permite a atacantes remotos ejecutar código de su elección a través de una cádena larga en un fichero mal formado (1) .m3u o (2) .m3l playlist"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digimode10:maya:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161B407E-600E-4053-BA8B-EC0FB3BD0410"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34960",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1818",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T16:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/admin_manager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via an m_username cookie in an add action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/admin_manager.asp en MaxCMS v2.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través de una cookie m_username en una acción add."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxcms:maxcms:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A159CA-F32B-45BA-BDA6-F285C6535E90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2009/1307",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T16:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en product.php en 2daybiz Custom T-shirt Design Script permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2daybiz:custom_t-shirt_design_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A17E088-42D5-4DC2-8F4D-F419152DC566"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35114",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34992",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1341",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T16:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to inject arbitrary web script or HTML via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en product.php en 2daybiz Custom T-shirt Design Script permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2daybiz:custom_t-shirt_design_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A17E088-42D5-4DC2-8F4D-F419152DC566"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34992",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1341",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T16:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DMXReady Registration Manager 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for databases/webblogmanager.mdb."
      }, {
        "lang" : "es",
        "value" : "DMXReady Registration Manager v1.1 almacena información sensible bajo la raíz web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar el fichero de base de datos a través de una petición directa a databases/webblogmanager.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmxready:registration_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "885A9272-DCCB-44B8-95A8-263B7CB90FD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2009/1347",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1822",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T16:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) imgcaptcha.php or (2) mp3captcha.php in assets/captcha/includes/captchaform/, or (3) assets/captcha/includes/captchatalk/swfmovie.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de fichero PHP en el componente InterJoomla ArtForms (com_artforms) v2.1b7 para Joomla! permite a atacantes remotos ejecutar código PHP de su elección a través de el parámetro mosConfig_absolute_path en imgcaptcha.php o (2) mp3captcha.php en assets/captcha/includes/captchaform/, o (3) assets/captcha/includes/captchatalk/swfmovie.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gonzalo_maser:com_artforms:2.1b7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E18AC0-71D1-4251-90A2-9DA5C1650CCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34986",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1823",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T16:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.7 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML by modifying a document head, before the Content-Type META element, to contain crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, a related issue to CVE-2009-1575."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Print (también conocido como versiones Printer, e-mail y PDF) v5.x anteriores a v5.x-4.7 y v6.x anteriores a v6.x-1.7, un módulo para Drupal, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección modificando la cabecera de un documento, antes del elemento Content-Type META, contiene secuencias UTF-8 byte manipuladas que se tratan como UTF-7 en Internet Explorer 6 and 7, un caso relacionado con CVE-2009-1575."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13532942-BC0A-4B25-9FE3-679E5A698F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1DFE95-5788-4C00-8D24-FD2068352293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35122AE-7CAB-4AB1-88E7-EAF882618E33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD3428DA-1459-4B1F-A19B-C66F8FB75BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ABFF4E5-8F49-4AC4-8CEB-F502E6882087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7EF9D6-39D2-4922-B516-44B31E38DB32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "030BC1EE-8ED5-4955-AD4B-1745690ABB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-2.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989C2B4B-2CAA-4F85-899B-2E85C7C1AD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18D750A-6F98-4A72-B040-9A448EC007BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5029B78B-0160-4547-9934-19A891AB2652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE82C4B9-F7F2-424F-9AF9-9D945FD563EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0F5EE5-217D-40BF-BEF8-224FBDFB8E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C88506DA-94A1-4559-BCD8-D6DA9D438AF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0A448C-470C-4AA9-BAB5-8EAC14A6141E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D315DA5E-3012-4F25-8C7D-21C2BA172A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961AEFF7-499F-4709-BB2F-BB623A4CE19F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7267D96A-43CC-418B-B115-DE77154BCDAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9302C93E-C85F-4EA3-8BE2-3575592B50B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03EC0689-1246-4E34-948B-6380BB2BAC90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746A3749-36A4-49EA-B705-922B9D260CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ECD6FD0-0A42-4445-9524-DE02E568FF98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DCB040D-45EC-4E44-8D66-4C796247EBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:5.x-4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED8F5659-A54C-4956-A7F0-6DF982CC7CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F41A6973-2C38-418D-A16F-93F77F902206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6DF7D4-0992-4677-BA0A-860F329E6D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8A1B8F-021C-4558-880F-9E7FCFE2D323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF939A54-5458-4FD5-916D-301CD3B57F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF7248F-2CD2-4551-AD81-3207FE1D45A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.0-rc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD956162-E836-4777-8346-DF6DAA100A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82398A3C-DB58-42DE-BC16-56D92FAB55B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33406F84-81BF-492E-9C22-171311E519A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB084C5-BE56-4128-8A5D-8F536B276A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6B609E-4AD4-46CD-B9C7-5D0690B83326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EFCA9EB-0A08-4FC2-BF40-DA3BD154DEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:print:6.x-1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8244420-574B-48C0-A714-F122A0788170"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/461674",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35040",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1320",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/461674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1537",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-05-29T18:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka \"DirectX NULL Byte Overwrite Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerailidad sin especificar en el filtro QuickTime Movie Parser en quartz.dll en DirectShow en Microsoft DirectX v7.0 hasta v9.0c en Windows 2000 SP4, Windows XP SP2 y SP3, y Windows Server 2003 SP2 permite a atacantes remotos ejecutar código de su elección a través de un fichero multimedia QuickTime manipulado, como se ha explotado libremente en Mayo de 2009."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BFE77B9-6C2A-45D3-A4B5-2679CC4B0DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:7.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459D411C-4994-41DB-9594-F460EADA3351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F01F75D-4C20-4DA2-BD3B-4A3BD466F773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF0278F-AFA7-48BA-8762-5569EC174AEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:8.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBFBDA6-90F5-4A8A-BD47-2DCA5CA8D5AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2936E9C2-65E6-4D26-A277-FF2AE13A3FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:9.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F096A3-DD19-4D54-94F4-027DBDF1A705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:9.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A8E96E-F752-43D2-83C3-877DE1042B80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:9.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44C68B75-2B7A-450B-BA1B-03E77E03B59B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2936E9C2-65E6-4D26-A277-FF2AE13A3FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:9.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F096A3-DD19-4D54-94F4-027DBDF1A705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:9.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A8E96E-F752-43D2-83C3-877DE1042B80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:9.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44C68B75-2B7A-450B-BA1B-03E77E03B59B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2978BF86-5A1A-438E-B81F-F360D0E30C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EFB032-47F4-4497-B16B-CB9126EAC9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "6881476D-81A2-4DFD-AC77-82A8D08A0568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/msrc/archive/2009/05/28/microsoft-security-advisory-971778-vulnerability-in-microsoft-directshow-released.aspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=6481",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54797",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/35268",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/971778.mspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35139",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022299",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1445",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1886",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2009/05/28/microsoft-security-advisory-971778-vulnerability-in-microsoft-directshow-released.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=6481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/971778.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Per: http://www.microsoft.com/technet/security/advisory/971778.mspx\r\n\r\n\"Microsoft is aware of limited, active attacks that use this exploit code. While our investigation is ongoing, our investigation so far has shown that Windows 2000 Service Pack 4, Windows XP, and Windows Server 2003 are vulnerable; all versions of Windows Vista and Windows Server 2008 are not vulnerable.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T18:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer Web) 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument (the sURL argument)."
      }, {
        "lang" : "es",
        "value" : "La función system.openURL en StoneTrip Ston3D StandalonePlayer (tambien conocido como S3DPlayer StandAlone) v1.6.2.4 y v1.7.0.1 y WebPlayer (también conocido como S3DPlayer Web) v1.6.0.0 permite a atacantes remotos ejecutar comandos de su elección a através de de metacaracteres del intérprete de comandos en el primer argumento (el argumento sURL.)"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stonetrip:s3dplayer_standalone:1.6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C5D62C-CCD9-44A1-B120-15B462A14802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stonetrip:s3dplayer_standalone:1.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FBC588-1328-47C7-8F41-33C969FF6373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stonetrip:s3dplayer_web:1.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B41CBD9C-064D-41C0-9FDE-E1A6C4278A06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stonetrip:s3dplayer_standalone:1.6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C5D62C-CCD9-44A1-B120-15B462A14802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stonetrip:s3dplayer_web:1.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B41CBD9C-064D-41C0-9FDE-E1A6C4278A06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C56F007-5F8E-4BDD-A803-C907BCC0AF55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155AD4FB-E527-4103-BCEF-801B653DEA37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stonetrip:s3dplayer_standalone:1.6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C5D62C-CCD9-44A1-B120-15B462A14802"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/content/StoneTrip-S3DPlayers",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503887/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/content/StoneTrip-S3DPlayers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503887/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1824",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T18:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ps_drv.sys kernel driver in ArcaBit ArcaVir 2009 Antivirus Protection 9.4.3201.9 and earlier, ArcaVir 2009 Internet Security 9.4.3202.9 and earlier, ArcaVir 2009 System Protection 9.4.3203.9 and earlier, and ArcaBit 2009 Home Protection 9.4.3204.9 and earlier, allows local users to gain privileges via crafted METHOD_NEITHER IOCTL requests to \\Device\\ps_drv containing arbitrary kernel addresses, as demonstrated using the (1) 0x2A7B802B and possibly (2) 0x2A7B8004 and (3) 0x2A7B802F IOCTLs."
      }, {
        "lang" : "es",
        "value" : "El controlador de Kernel ps_drv.sys en ArcaBit ArcaVir 2009 Antivirus Protection v9.4.3201.9 y anteriores, ArcaVir 2009 Internet Security v9.4.3202.9 y anteriores, ArcaVir 2009 System Protection v9.4.3203.9 y anteriores, y ArcaBit 2009 Home Protection v9.4.3204.9 y anteriores, permite a usuarios locales obtener privilegios a través de una petición METHOD_NEITHER IOCTL manipulada en \\Device\\ps_drv que contiene direcciones de Kernel arbitrarias, como se ha demostrado utilizando el (1) 0x2A7B802B y posiblemente (2) 0x2A7B8004 y (3) 0x2A7B8004 IOCTLs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcabit:arcavir_2009_antivirus_protection:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.4.3201.9",
            "matchCriteriaId" : "D6FA1FD6-1798-487B-AE30-16B1C8426C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcabit:arcavir_2009_home_protection:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.4.3204.9",
            "matchCriteriaId" : "115CF860-C225-4AFC-ACE5-24A30E591A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcabit:arcavir_2009_internet_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.4.3202.9",
            "matchCriteriaId" : "20878584-D85E-4B24-98C3-0ED50D018361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcabit:arcavir_2009_system_protection:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.4.3203.9",
            "matchCriteriaId" : "9C278D41-EA2B-468B-AECE-18771DFF6F9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ntinternals.org/ntiadv0814/PsDrv_Exp.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://ntinternals.org/ntiadv0814/ntiadv0814.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35100",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1428",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ntinternals.org/ntiadv0814/PsDrv_Exp.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://ntinternals.org/ntiadv0814/ntiadv0814.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1825",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T20:30:00.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "modules/admuser.php in myColex 1.4.2 does not require administrative authentication, which allows remote authenticated users to list user accounts via a Find action."
      }, {
        "lang" : "es",
        "value" : "modules/admuser.php en myColex v1.4.2 no requiere autenticación administrativa, lo que permite a usuarios autenticados remotamente listar las cuentas de usuarios a través de una acción Find."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:collector:mycolex:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F45192-F9E0-444F-AE18-29DDCFE38F01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.collector.ch/drupal5/?q=node/39",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.collector.ch/drupal5/?q=node/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T20:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "modules/admuser.php in myGesuad 0.9.14 (aka 0.9) does not require administrative authentication, which allows remote authenticated users to list user accounts via a Find action."
      }, {
        "lang" : "es",
        "value" : "modules/admuser.php en myGesuad v0.9.14 (también conocido como v0.9) no requiere autenticación administrativa, lo que permite a usuarios autenticados remotamente listar las cuentas de usuarios a través de una acción Find."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:collector:mygesuad:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F74413D-2C26-4E50-AFC2-8F52FEF61199"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.collector.ch/download/mygesuad-0.9.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.collector.ch/drupal5/?q=node/39",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.collector.ch/download/mygesuad-0.9.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.collector.ch/drupal5/?q=node/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T20:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SVG component in Mozilla Firefox 3.0.4 allows remote attackers to cause a denial of service (application hang) via a large value in the r (aka Radius) attribute of a circle element, related to an \"unclamped loop.\""
      }, {
        "lang" : "es",
        "value" : "El componente SVG en Mozilla Firefox v3.0.4 permite a atacantes remotos provocar una denegación de servicio (cuelgue de aplicación) a través de un valor largo en el r (también conocido como Radius) atributo de un elemnto \"circle\", relacionado con un \"bucle sin fijado\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-05/0270.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-05/0271.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-05/0272.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.zoller.lu/2009/04/advisory-firefox-dos-condition.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503825/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=393832",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=465615",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-05/0270.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-05/0271.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-05/0272.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://blog.zoller.lu/2009/04/advisory-firefox-dos-condition.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503825/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=393832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=465615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T20:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3.0.10 allows remote attackers to cause a denial of service (infinite loop, application hang, and memory consumption) via a KEYGEN element in conjunction with (1) a META element specifying automatic page refresh or (2) a JavaScript onLoad event handler for a BODY element. NOTE: it was later reported that earlier versions are also affected."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox v3.0.10 permite a atacantes remotos provocar una denegación de servicio (bucle infinito, cuelgue de aplicación y consumo de memoria) a través de un elemento KEYGEN en conjunción con (1) un elemento META especificando página de refresco automático o (2) un gestor de evento onLoad JavaScript para un elemento BODY."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0247.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0263.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.zoller.lu/2009/04/advisory-firefox-denial-of-service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3194/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503876/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506328/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=469565",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0263.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://blog.zoller.lu/2009/04/advisory-firefox-denial-of-service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3194/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503876/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506328/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=469565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T22:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the PCNFSD dissector in Wireshark 0.8.20 through 1.0.7 allows remote attackers to cause a denial of service (crash) via crafted PCNFSD packets."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el analizador PCNFSD en Wireshark v0.8.20 hasta v1.0.7 permite a atacantes remotos provocar una denegación de servicio (caída) a través de paquetes PCNFSD manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.8.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C934EF8B-1B73-412E-9874-E1AC0223506B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8E63FC-A3AA-455E-8AA7-E3577468F022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DFC6BB8-5A74-4F6A-AFC8-959623D4236F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B432986-F5AE-4506-B584-3B4E943A9C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60178790-62CC-41A9-8B5A-78CF49069E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41535173-00D3-4E52-9441-D7ED44BE9B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3017F8E8-F28D-46E0-A256-0121BAD588A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E7F73-0E2A-442C-9B76-679A2AD03052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF374E8-36A3-43AA-B86C-092F5B244841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C422E5-3252-48C2-B4FF-E32AA5463D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C43A78-E578-4B1C-8E33-24529E973E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1074B30-F2E6-47CD-8491-29163811E07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB52B779-7A2D-43E0-9F12-C65053002EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A85B028-7384-403A-817C-B5001F02A8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801B1795-3DC4-4BE3-A693-37B6BD116B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17808311-AC2A-428A-BB8B-B08549C5DAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978C483C-A6F7-456F-9488-833D520D4A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB94CE6-03D3-43C3-B765-AC36961CD83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FADA30-FD98-42F3-80F1-E8794C77AC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3F8A55-10DE-4197-9F9D-5F6570A94860"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35201",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1100.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35081",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1408",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-03.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1100.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T22:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Soulseek 156 and 157 NS allows remote attackers to execute arbitrary code via a long search query."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Soulseek v156 and v157 NS permite a atacantes remotos ejecutar código de su elección a través de una petición de búsqueda larga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slsknet:soulseek:156:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D9949A-9AE9-4061-A7D1-C2A17D5E7B5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slsknet:soulseek:157_ns:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2FF66A-D1C6-4269-8A17-36D80CB9235D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0210.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35186",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35091",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0210.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-05-29T22:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "El módulo de Nullsoft Modern Skins Support (biblioteca gen_ff.dll) en Winamp de Nullsoft anterior a versión 5.552, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo MAKI diseñado, que desencadena una extensión de signo incorrecta, un desbordamiento de enteros y un desbordamiento de búfer en la región stack de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.55",
            "matchCriteriaId" : "4D8F363B-DB47-4691-9821-7F351D6F43B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAFFD8E7-A443-4131-9CFB-67AA9739E6E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2787A5F-5B74-4691-A2AD-BA5038D14784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5217B6-B543-4F2C-89DF-CE986AE0BADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.6x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5E3DB21-0E4F-409E-A60B-CBFFD71BBB1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.7x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F7F13A-D45B-4AA9-9CD3-D4E285791E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0581F9-9B99-43F6-852E-BD28BB47B169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95EA0F31-8818-434C-9965-78764D00F148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C999742-75BD-463F-865F-93662B17330F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDFC131-873D-4564-B342-569DF45F31F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.60:*:full:*:*:*:*:*",
            "matchCriteriaId" : "30C29FDB-A37E-4126-BE1B-DB32F38DC75F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.60:*:lite:*:*:*:*:*",
            "matchCriteriaId" : "E7254BFD-8301-4E99-AB73-7D1D9E7939FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEBD661-3253-47CC-91D9-B8F8E1211014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.61:*:full:*:*:*:*:*",
            "matchCriteriaId" : "27826A30-3E5C-4B7D-B86B-8B0A68D2F944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45D7DD1-AFF9-441D-ABF1-A62FA0A9E05B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.62:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "665C2A54-AF79-4315-BFEF-FA44E015B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AE4866-33D1-4596-BA42-E70ABD0CDC6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.64:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0DB02A8B-71ED-4FBF-9D01-D16F1351E702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D708182-E39F-44E4-9C67-52A85ACBA43C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053A71B1-EF83-4750-ACCD-7ABEFF593BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.70:*:full:*:*:*:*:*",
            "matchCriteriaId" : "F07CC71D-A616-483B-ABCB-AA6DDCE3531F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5286A1-C8ED-4783-9278-D30D9B1C588A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3513F3C2-CDD6-461C-985E-E06151AEA804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6CB5C4-0FEC-4F85-B874-E06229265457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.73:*:full:*:*:*:*:*",
            "matchCriteriaId" : "C700DFBF-9B22-4633-947C-840CF01423C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6E478F-D058-482B-B027-605B7A769900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D8698A-B1AE-4041-9055-B6690F671E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2CC66AF-0CB8-4E15-98A3-4704CB2AD78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E36F70C-F578-425E-A97F-1BD196F7F08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEDAD5F1-5B42-40ED-919C-65343567261C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAC79237-791C-4830-BC81-D534FA537D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AFA764-16B4-4E5E-8F9C-46098E758CC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F260E7-5145-4FDC-9759-67EA27CEFC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD15C7B-64FF-42CF-ABD7-8973DDE89FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEA7967-D737-4B46-9382-A391DF832219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "830610D8-1B42-4560-ABB4-BA79DD145110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF89B4A2-37A6-4702-A057-7B70C6157A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19C64AF2-CF9D-4052-85E9-BAFF713382F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13EFF2D1-D88F-436F-8E82-EAE681DE7AA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F898DA-A260-4A81-8E94-DE85154B88DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4510C850-49A0-4082-81CF-333829FE8639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828226F9-29AA-437F-8385-B75A6F4F3B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8A3244-F6FF-4865-BCAD-EAF784AE93DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD7DE0D-1018-4E04-A771-B2C619E95C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798885D9-B518-4C10-81B9-32AEB512C14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5EF1ED-9AA1-41D0-8781-619F8F50F4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D38D15-3588-49E4-9396-11DB96FBD448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.03a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF39A44-528E-4BE8-A923-FFB53C2378F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED120987-6F27-4D8E-95DF-E19EBCB0B8D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF40252-7E87-4EE6-B2C7-19E8D78C4025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E02CCF2-2335-4F08-8061-6CFD7C8B265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48A746C-1020-4A9C-A9D4-94B6FFFA1FDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF272FF7-68ED-4D8B-9C17-D9D46AA33335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D8C02C8-508A-4A6C-8911-12FB9B183C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08:c:*:*:*:*:*:*",
            "matchCriteriaId" : "5785692F-D8FA-4D49-8872-CB8B2F173557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08:d:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E85C52-1974-4F83-89AE-BB29FC897E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08:e:*:*:*:*:*:*",
            "matchCriteriaId" : "CB082F8B-A052-4D82-9D73-2BB35FBA19F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FAD29A-6A61-4201-A0E6-1F04BF093600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EE09C3-B49C-4D7D-BCD1-2AA2104A271A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4497A5-6E95-4CB3-999E-53BF890A23F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057B033C-7836-41E0-B184-F9D5DFC42C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20168350-2AD1-4AF4-B0AA-4C2EBF616259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39A6931-A3CD-44A7-B170-53B803F321AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A651DB07-0A59-41C5-8788-6A3594A5023C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199953E2-C5A4-4D7B-9BB4-EF0B1364F117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE765893-71E4-4945-891C-976B97762CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF245AA-7038-4BD4-B2CB-8B0E59200875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DEF8714-56FC-4D6C-AE87-072ADD7698A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E808BCEF-FE45-44D3-B22B-404BC97B89C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6E29C6-CDC9-4C0B-8D79-8A5A11B563CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14B9D39-BF74-4C69-92BF-DE6E71FDD911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD83F571-1A58-4159-AC2F-7261F135EF45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB054736-2F91-4EF3-B04F-80403676374F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E954F-6A04-442A-B93E-CDD2ABEB357E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FEE5A4C-770A-458B-AC1A-8F1F99A0951A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58E9493-556E-4085-B337-AE211A28DA6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4F66E7-7F61-4F59-9213-21598A3DFD50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6E95D5-D855-4CD4-B44B-66FF029EC823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.091:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6A1F15-A3FA-40FB-980A-569F77E1D104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.093:*:*:*:*:*:*:*",
            "matchCriteriaId" : "684ABC3F-57CB-490B-ADCB-501E0D234E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.094:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB30030-A195-4626-AAED-D421454D911D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.111:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB3FCB9-6CF4-4513-9FB9-D01C58079060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.112:*:*:*:*:*:*:*",
            "matchCriteriaId" : "913962D9-84AA-4474-800E-5DABF37D52A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951898A7-A060-4853-8C4E-99927794C0FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://vrt-sourcefire.blogspot.com/2009/05/winamp-maki-parsing-vulnerability.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35052",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://vrt-sourcefire.blogspot.com/2009/05/winamp-maki-parsing-vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-01T14:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en main/tracking/userLog.php en Francisco Burzi PHP-Nuke v8.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante la cabecera \"HTTP Referer\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnuke:php-nuke:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DB1D99-9F35-43A2-AD72-4B495B5F31BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gsasec.blogspot.com/2009/05/php-nuke-v80-referer-sql-injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35117",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gsasec.blogspot.com/2009/05/php-nuke-v80-referer-sql-injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-01T14:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands via the (1) quiz parameter to (a) num_questions.php, (b) answers.php, (c) high_score.php, (d) high_score_web.php, (e) results_table_web.php, and (f) question.php; and the (2) order_number parameter to (g) answers.php and (h) question.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Flash Quiz Beta v2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) \"quiz\" en (a) num_questions.php, (b) answers.php, (c) high_score.php, (d) high_score_web.php, (e) results_table_web.php, y (f) question.php; y el parámetro (2) order_number parameter en (g) answers.php y (h) question.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glenn_mcgurrin:flash_quiz:beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C061D1-8173-411E-AC3F-6B67BBD13FAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/503701/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35060",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503701/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-01T14:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow (1) remote authenticated users to inject arbitrary web script or HTML via crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, which are not properly handled in the \"HTML exports of books\" feature; and (2) allow remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via the help text of an arbitrary vocabulary.  NOTE: vector 1 exists because of an incomplete fix for CVE-2009-1575."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados(XSS) en Drupal v5.x anteriores a v5.18 y v6.x anteriores a v6.12 permite (1) a usuarios remotos autenticados inyectar secuencias de comandos web o HTML de su elección a través de secuencias UTF de 8 bytes que son tratadas como UTF 7 bytes por Internet Explorer 6 y 7, ya que no son manejadas de forma adecuada por la característica \"HTML exports of books\"; y (2) permite a usuarios remotos autenticados con una taxonomía de permisos de administrador, inyectar inyectar secuencias de comandos web o HTML de su elección a través del texto de ayuda de un vocabulario de su elección. NOTA: El vector (1) existe, debido a una solucion incompleta de la CVE-2009-1575."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF34F79B-6B1B-45CA-82BA-24D4254B26DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4C5857-3690-4D74-B135-B6AB7E766FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC12E03-C4B0-4B2F-B70B-0EB19C450AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD50E551-7609-45EF-B2C6-3873D9CF8DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327712EE-8E9B-4A62-94A8-504C9CD2DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4FC56B-0289-411C-88BF-144D7338D456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3ECEA7-E6D3-43E8-A281-56C7F95A0B7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE4DF7-6884-49BA-99D0-FCAE6DB75242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7287CD-A5FB-4428-8656-F466A8E47463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2860C3D-CB93-4355-882E-BF8B7A23CB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD400243-3FFE-457C-A977-6688D9181FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2686FD-9643-4B8A-A8BF-C67120E44A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F851EC4-6148-4C13-890F-8260D4DF5A1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30282489-9168-4F7E-8465-1FE6521056B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE07AAD-9207-4C5F-A108-7F7753E4F48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D8F291-CBEB-4EAA-9388-F63066A2DFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D76BC5-0409-4D78-8064-A78B923E9167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB73B2E1-2554-4CA2-9C82-B694509CE43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7827ED-D8AF-42B3-B514-39A04EB0879A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F491DE31-8DBB-4F4E-8798-F82DC855D08F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADEA9E5-10EB-4AB4-BD90-1F64A15708AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D0A167-BE47-4E4E-8467-0AD2F38A3431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7CBB558-D5A3-4D68-9C62-D1D521BCFEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D25FA1-2F31-40DB-AD54-DB233E060B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F91E944-26C4-4886-B9B9-F32BD15569BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/461886",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/461886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-01T19:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745, VMware Fusion 2.x before 2.0.2 build 147997, VMware ESXi 3.5, and VMware ESX 3.0.2, 3.0.3, and 3.5, when the Descheduled Time Accounting Service is not running, allows guest OS users on Windows to cause a denial of service via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el controlador VMware Descheduled Time Accounting en VMware Workstation v6.5.1 y anteriores, VMware Player v2.5.1 y anteriores, VMware ACE v2.5.1 y anteriores, VMware Server v1.x anteriores a v1.0.9 build 156507 y v2.x anteriores a v2.0.1 build 156745, VMware Fusion v2.x anteriores a v2.0.2 build 147997, VMware ESXi v3.5, y VMware ESX v3.0.2, v3.0.3, y v3.5, cuando el servicio Descheduled Time Accounting no se está ejecutando, permite a usuarios invitados del sistema operativo en Windows provocar una denegación de servicio mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "8D249F86-E463-4AB1-BEEE-0828D5A2D761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F20A8E8-E07D-41B2-899F-2ABA9DD1C2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700C0BB4-2272-4405-9D9A-A636E3D22461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC82A8C-E561-4E35-A84D-66A4D6C90264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D346E48-887C-4D02-BFD3-D323B7F3871C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9C6150A-2DF3-4F7B-B024-0F3DBB686124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.3_build_54075:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B6602F-EF25-4E20-B4AA-955C026F7AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40192EE1-A300-42C3-BC98-286C9E5A281E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87291B27-442C-4CAB-94A1-67FC766486EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B04862-4377-422E-931A-B17FE1CA1884"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B6730-F05B-4B62-B4DE-07C61A4924F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E1A5AA-BD9F-4263-B7C6-E744323C4D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D22E40D-C362-49FD-924C-262A64555934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.1_build_55017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D438AB9-825C-4A9B-A3FF-55F2E5743B19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A48CEB4-5864-4A0F-B14C-CFE4699C3311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78957047-FB9F-4D1D-B3D9-91257A6B4D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A04DB52-C66C-4AA9-9D6F-9D2DC202C5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280033C5-90EF-4825-A87D-B23650D8C71A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71537AE-346D-4BA9-90E7-EA0AB0CD0886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:esx:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78322B97-DBE0-4C7E-9826-11727254500E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:esx:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6F7416-E694-4EC9-9FE5-0C24448ECB34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:esx:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5ECA1B-7415-4390-8018-670F2C3CDF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD59C463-F352-4F6C-853F-415E3FB4ABDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "4004A38A-01A6-41BE-84EB-1D7C7FAD0214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E18541B-36B6-40A7-9749-FA47A10379C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "BC1C154A-3869-4189-A781-D3071D54143F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E76D03A3-DB55-48A2-B5A5-64002D28B95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EAC68CA-DCA3-4399-807D-E7AC67C9C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B13A58-1876-4322-AC25-107D43BABD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D04A928-4421-4BEE-9500-7398E4DB929B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2F6AF4-5987-43BC-9183-5DF7D6DE1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088450C4-9C6F-4651-8D59-C36F1B0601BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA35C066-90A9-4DE2-A97A-38A6CFC59A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462EEAD5-A78C-4381-847E-B6F1BE4CB379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E666A5E4-4CDD-4915-B0F3-C63998D01846"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7AD12A-26C9-48AD-A32A-0F56545DF8E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73C45BB0-C0DB-42B8-A238-B81D836CF91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297226F7-05CB-4721-9D02-51FE2919D2DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3F9D4D-2116-49A7-9292-AF6B4456E175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2EAA90-B24A-45E7-B99F-DA3554A16F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446F2959-C42B-403B-AE1C-BA7D305C60CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE944A70-CB9C-4712-9802-509531396A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.8",
            "matchCriteriaId" : "B24C0071-58F9-4971-951B-7AA12294F7D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EC33AB-E92A-4AA8-A523-C341133BB515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53197903-0614-4460-8944-C1B5257D71A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.1_build_29996:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB051A5C-5F66-4732-949A-48B0FDE4AFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F037B05F-6F92-4BE1-B672-F677CBEFD075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DD6D27-1335-44EF-8B69-A9163A67BC2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFEAE8-0118-4548-A6EA-E90FA8FE7AF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.4_build_56528:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87489138-7756-453C-A149-F2C4F95EFF9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42049891-38B7-4BB7-8DA5-A87169E2D958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07139DF7-C36B-4FED-8558-7FA49BE0BCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0D7307-5946-45DC-88D3-6BC72EF50184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2786E370-6108-4695-B0A8-9F19D8E3C0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5.1",
            "matchCriteriaId" : "E4D69FD9-F162-4623-A475-9FA7A3A6DF30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBF029A-103D-4BB6-B037-25EC2224DF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D00C4D90-3697-4F3F-8FFF-FE63F3AD0DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A717A5-60C2-4470-943E-CA53781D4B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8FBC02-7F2F-4AEF-A5A3-E283D192937C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29AA2B37-BF5F-4AC5-844D-34CF56EC621C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07131E56-53EE-4CE1-A135-050792EA3C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86334051-8763-4CD9-9480-CAEAE756DFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66596F04-9C2E-4091-85A7-40239F3F920E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E831531-60FE-4DFC-994E-7409E6C69D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:3.2.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1A275E-2152-4A37-8CFE-34E8900E3426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A688A2-3E9C-4AA3-832B-300A5A311C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89098CFF-4696-4BD9-9BC9-D7C2D92FE729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30DFFE7-EB73-4A88-A23B-9B386C091314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.0.1_build_5289:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F1481E-A07D-4913-BCF3-630561F0FBC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6C230D-7BAA-4A77-9E96-B1B994F4AAC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0FE7C5-2C46-4B59-9242-A03B986C07DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.5.2_build_8848:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8F9694-8556-4990-A867-592D6A927498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:4.5.2_build_8848:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "0C605123-69F9-44AC-A17E-3C728059E628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37595A89-52C5-4699-A463-C9D91B91716B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53FBB074-4EAC-4CEC-AFC5-33C66B135F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.0.0_build_13124:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B54C61-FB19-4900-A635-2F6B63BEC88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3CF9F67-DE1A-4CB0-B3AB-B28DC8C02C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525D50A3-2943-4B96-B354-F81F814A7707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.0_build_13124:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BCB22F-7B9A-493B-AE19-18D0C15EA778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294B621F-6C1A-4571-AE13-49495680D255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.1_build_19175:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D6D4DD-13D2-4EA0-A7D7-367C3809ABAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCF51A7F-59DA-4F64-A4F7-3A250C950D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA47458-E783-4A6A-ABF1-59E8D87E9B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.3:42958:*:*:*:*:*:*",
            "matchCriteriaId" : "559D2177-ECB9-4AFF-A8B4-BCB47A1B4637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.3_build_34685:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51C6D608-64DE-4CC4-9869-3342E8FD707F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.3_build_42958:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDEAB605-03F6-4968-8A48-126C7C711043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A1141D-9718-4A22-8FF2-AEAD28E07291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.4_build_44386:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2ADE72-4F19-4E73-AC3E-7038FE0D38B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75ED54E-8E55-48BF-A52E-19FCCE895C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.5_build_56455:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B27D214D-2BEF-4445-802A-5E02E9E5E5CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53297E3-0C74-421B-8058-DAF7357D421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACDEFCEF-F943-449B-91D8-A8CB290C7AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97957D6F-0249-4814-8755-5C4537B58E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89329F80-7134-4AB2-BDA3-E1B887F633B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4408849A-21F1-40F5-A528-0BD47E1BF823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.1_build_55017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0692E537-A36E-470B-BECE-A17D531B925C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9938CB4F-96D1-4852-9694-28A93E13AA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB61760-87FD-4E60-ADC6-407EFA13773C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBDE6D5-7131-421A-BABE-32F281615597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AA4FEF-FF8F-4706-89BC-8396F7614EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC6B629-30B3-4C45-B5E9-1B4310F186FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35269",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503912/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503912/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-01T19:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitrary web script or HTML via the RequestName parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en ajax/updatecheck.php en Lussumo Vanilla v1.1.5 y v1.1.7 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"RequestName\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lussumo:vanilla:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FDD129-FE07-40B7-A3AB-43DD888DFB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lussumo:vanilla:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6223303-36BD-4938-BA50-FF57D6ECEB52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gsasec.blogspot.com/2009/05/vanilla-v117-cross-site-scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lussumo.com/community/discussion/9524/vanilla-118-released/#Item_0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35234",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503847/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gsasec.blogspot.com/2009/05/vanilla-v117-cross-site-scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lussumo.com/community/discussion/9524/vanilla-118-released/#Item_0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503847/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-01T19:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the THEME_FOLDER parameter to (1) Corporate/homepage.php, (2) Fusion/homepage.php, (3) Joombo/homepage.php, (4) Streamline/homepage.php, and (5) Structure/homepage.php in themes/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en SiteX v0.7.4 Build 418 y anteriores permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar los caracteres .. (punto punto) en el parámetro \"THEME_FOLDER\" en (1) Corporate/homepage.php, (2) Fusion/homepage.php, (3) Joombo/homepage.php, (4) Streamline/homepage.php, y (5) Structure/homepage.php en themes/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bjsintay:sitex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.4",
            "matchCriteriaId" : "2953F919-509E-40A3-95EF-16C317A90682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bjsintay:sitex:0.6.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951E33C7-198C-498D-AF83-FCD236062151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bjsintay:sitex:0.7.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE848393-6934-4109-9351-082CD8CDCCCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bjsintay:sitex:0.7.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D745639E-E4A5-4A2A-AD21-FE58D46E48F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bjsintay:sitex:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6417454F-0B3C-4CE4-83B5-6DFADD0E4A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bjsintay:sitex:0.7.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2C715F-7D4F-4CBD-9D4F-88F070682F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bjsintay:sitex:0.7.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9208853-CB93-45B8-A27B-3B6883446A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bjsintay:sitex:0.7_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D22B7D-5FD1-42FD-B9FE-FE1AE36A7D6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35122",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-01T19:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the fiche parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php en Easy PX 41 CMS v9.0 B1 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) en el parámetro \"fiche\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easypx41:easy_px_41_cms:9.0_b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2861C708-0AEE-44DD-9585-A5D0FEEEE0BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35252",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35119",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-01T19:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the JoomlaMe AgoraGroups (aka AG or com_agoragroup) component 0.3.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a groupdetail action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente JoomlaMe AgoraGroups (también conocido como AG o com_agoragroup) v0.3.5.3 para Joomla!, permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción groupdetail sobre index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomlame:com_agoragroup:0.3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F171888-BD18-4760-B6EE-1CBDB5BAB45A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35118",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-01T19:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en función Monitor_Bandwidth en PRTG Traffic Grapher v6.2.2.977 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.977",
            "matchCriteriaId" : "7EB46CD8-7E79-48E6-ACA8-58646CD5DFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.0.7.139:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF160BB3-D13E-46A6-8223-524440C3F993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.0.8.154:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858DE93A-F8D5-421F-9A9A-407F0FC60890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.1.0.256:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBE495A-FAAD-4DE8-913D-CAC6F8B5F29A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.1.0.257:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9FCC4E3-BB37-4BC9-9046-06952FC2571A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.1.0.265:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7510E041-535F-4925-B7DA-3E34C59EC1CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.1.0.266:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42B8D289-3CC2-49C3-82ED-20A80CCD824E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.0.356:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA086843-99C5-489F-8036-3DCCE7046A94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.0.357:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E35BEC0-4FEE-48D9-9748-72C76B2330DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.0.363:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1103E40-44D6-47CB-AA49-69454FB5AA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.0.364:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E733A72C-C955-43A0-82FA-018859620751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.1.385:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB0961E2-BDEA-4F4E-BF99-91E468CD5E4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.1.386:*:*:*:*:*:*:*",
            "matchCriteriaId" : "737308B8-F130-4C5E-A7E8-11BB93EF1FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.0.470:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EAD7DC-3EE5-4CA2-BC65-CC3AEA65DC78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.0.471:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D464FD9D-EBC7-44CE-85FA-02F78CA98ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.498:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05A59D2-BA10-4165-93FC-43B8C204871D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.505:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975137E-8EE2-4190-92EA-13A40DD01454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.510:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3BFEC7-FD2F-40EE-B9FF-BF386E5A803E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.522:*:*:*:*:*:*:*",
            "matchCriteriaId" : "687C3053-7089-475F-A276-01A01A17ACFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.534:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3C6AB-CBEC-4F19-9AC7-858DDF2B5DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.562:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B95DF35-45CE-497E-8602-061E1C84DD0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.566:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480EB1A5-54EC-4089-9D96-62D39C58BFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.1.300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE4A952-49D7-4D56-A7F6-C18641BBFA38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.1.310:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8D0B8B-DB77-498D-AEDC-566A0A87DC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.1.356:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31119ED0-80F5-41DE-B8AF-AC443791B58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.3.379:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC55092F-F428-48ED-8345-DCD620B2BFE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.3.398:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A62E3B-2727-4B5F-BF8C-52099F901C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.1.0.452:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DB3915-E534-44E4-87F5-63D614B7899A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.1.1.474:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4539CCB-6727-4068-93AA-601EF54818BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.548:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AD54E2-8F65-47E5-805E-EE249D44A148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.549:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A40DC9A-6AFB-47F3-BD83-CB046F3EB73D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.559:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC50905-5919-4F54-94DD-081FAF99DCCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.560:*:*:*:*:*:*:*",
            "matchCriteriaId" : "060873E0-FECA-49AD-A116-78F8979853E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.565:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1A2C75-B4C8-42C7-B28A-E82BAFC893C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.566:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5742D1-8BA7-4FBC-8F8F-E62D5551F9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.574:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF7EF38-CD51-4A73-AFC2-1F3669C6276A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.575:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B65DA1-587C-497F-9950-9D809C5AAE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.581:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DECA3D57-6886-49AD-AA8C-1BFC2B95AC9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.582:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04789BF9-8D3B-4DBB-A5D1-EE1422FF5609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.687:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEDDEEA-0DB1-4F70-B92D-B08CA65E7893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.738:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89C9927F-9723-4BA8-8AEE-09C1835D33EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.739:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A56729-2F74-43F7-A9B6-33E765C581A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.758:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB7985A-0484-4741-9A39-78105AE1B690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.759:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5D7BD1-9F60-4C85-9E23-7DB1D6F14F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.812:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A296F328-B1B4-4B95-AEA9-DC7A899852EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.813:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D933F67-548C-438A-96F5-42706125123E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.833:*:*:*:*:*:*:*",
            "matchCriteriaId" : "985A84B5-1EA8-4939-AE5A-DDF3BF24530E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.834:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F19FDECF-1D4C-41A6-828F-933E47E21419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.862:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E9B0D4-D408-4383-9B0E-D931B350A035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.863:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6222BC-C31B-4168-AC89-DB34F85115C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.2.255:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523BA24F-AEF3-401B-A4C8-4AE2A6F1FA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.2.256:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF35DFBC-ABFE-4776-A9FE-4ED1FD4DA7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.258:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AE82434-3D52-4DD6-860B-A259F55CB86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.259:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DE8E48-D315-42F1-933D-4048F8C868CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.261:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75EDE82-5D59-462A-8792-FE7585F03673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.262:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7B8FF0-5E19-4527-947D-124B6E4BDF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.284:*:*:*:*:*:*:*",
            "matchCriteriaId" : "628D9547-8661-4FB5-A5D7-593B93CDF666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.285:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23AAC1E-6081-46D4-9B91-DBA79656642F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.332:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BED3603-BD98-4C6D-AD86-C0E8FDAF530E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.333:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC7F90A-0DE4-4D70-8CC7-2313DDA5791A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.335:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27FE080A-B2EF-415C-A6A6-762C8DDBF959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.336:*:*:*:*:*:*:*",
            "matchCriteriaId" : "593B0A84-0DFC-414F-8A34-6C8790876EE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.393:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0456E733-F112-4B54-AECC-32EC933F5920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.394:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E53FD0B-DD3F-4C66-97C1-04609556286F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.417:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFCC4D4-682E-480C-B1F8-83DB43B6B9D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.441:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8786AC61-7441-4E3E-AE9F-E985D737BD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.442:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678CAD17-2B48-4C29-B025-AF0D3A51DA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.450:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199E6F79-1EAE-458A-A6FB-A60C3D211751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.451:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D11D880-AC3B-433B-82E2-88E6F11ACD4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.585:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0557C778-CE93-4494-96A4-F5FCD30C1009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.586:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9657EEAB-9901-4AFA-B136-84AF9394242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB7DDF4-6E0B-41E7-8853-6A92E5557768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.602:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4871FE92-DF4D-44B6-9A36-6F3B04F46A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.625:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D673D1D0-174A-4C89-85B4-14674DE2DF2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.626:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34AC3B6A-F9AE-4E9F-9FEC-A2CB8519F774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.675:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97DE6BC8-9C96-4484-A316-6DF8D14D5973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.676:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7649A66-3DA0-4B8E-9600-55F973015887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.683_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "236A9603-3512-4E2F-9219-B2A7618BC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47944B-1875-4E78-BD04-9A5B42B946DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BDACFEB-6371-4410-B1CC-73444DABD7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F4B6B4-3929-4615-BB24-B7A9162D39FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758DBBC9-840F-449A-92B2-CF57618C2D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BBBDC5-2E05-418B-B304-50A13EB7DDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670477DE-6EA7-40F6-95CB-890F5AE95EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.1.854:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA10F36E-8CB5-47CB-966B-A8EA437582E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.1.855:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52209A39-851A-4EED-9F82-336A5289BD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.0.907:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F1D13B-DEA2-4FAC-BDE3-CC5BDBDCF314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.0.908:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468F35D5-9E88-40FB-B59B-0FCC65D561FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.950:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A41779-9099-40FB-840B-77CA6E0EC3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.951:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F03F66F5-5964-4D6E-9FA8-9A16A7E925CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.957:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC3282B-7F9D-4733-9885-A62EF09BC4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.958:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A54E0D31-6FC6-40D9-AD6E-3E1A04188627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.963:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFF0A3D-E902-4337-B934-C04F481C78FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.964:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98DAB8C9-8DBD-4BD5-A165-DEC63206C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_traffic_grapher6.0.5.416:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34B19C37-5393-432D-98BF-4261528C92B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.bkis.com/?p=704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35249",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.paessler.com/support/kb/questions/prtg6history",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.bkis.com/?p=704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.paessler.com/support/kb/questions/prtg6history",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-01T19:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL commands via the password parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en PhpBugTracker v1.0.3 permite que atacantes remotos ejecutar comandos SQL de su elección a tracés del parámetro password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0297FBB7-1C0F-40E4-9CEE-3EC6FCE32B99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35101",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-01T19:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in include.php in phpBugTracker 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en include.php en phpBugTracker v1.0.4 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"username\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "DF93E6C1-91C6-4212-8D72-A20FC038CFB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3BA80E-DCDB-4626-9432-2D9C4A174974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B150B31-055A-481E-BE37-974873D8CA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46680DAC-C1E6-4D8F-A98A-C95A9245CECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5125EEFE-782B-4C91-8F1F-6D978A0B72DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD640E3-B782-4C19-BDB0-408F88C38797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA146ADC-6FCD-4D48-92D2-267808A97900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0732EFEF-8637-491E-AF11-564FE3C6B7E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153F372C-838F-4B9C-AB38-C6004D0B0E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29D95754-6DF1-46AF-A926-B1284246E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A33199-2806-4C02-8B18-D4A28B420213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98CFE7AD-074F-4654-8DB1-4D3B2C41A4E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E082D90C-2CAD-4F11-A073-C4F59A17FAD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82BCF58C-71DE-4647-B6F4-0F9D5FFFAF3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B69D4976-25F3-4F7A-BCD9-10BFA8104C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178541BF-BB04-4EEE-BFDE-DE18B34A75E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5BFAE1-CF8F-44B9-89B2-DD5516F12424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB5B8-6D35-4472-9BE9-8B2854EAA2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB976AE8-32EC-42E4-B322-1486EE2DB2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B68B176-77CC-47BC-9652-D198AF537322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA30267F-FD6F-413E-8A07-BA900751C163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191454A8-1398-4F9A-95FD-68FA5B8161C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571B8160-444F-449C-BD44-E906B258FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D24C18E-94BB-4B37-85E2-BA5AB85BBE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE262CB-5CA3-44F8-86D5-9935EECF366C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D6258F-08EC-439E-A2DA-F220EC660887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61386352-BC17-4B68-9730-647175A6E40B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D6E5F7F-173A-4DE3-BA1B-E2F809ECF306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B5DB887-5E14-4331-88B0-414501D5EA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B0A940-44AA-414E-BA14-F8A480ECDA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B9C1A9-D65B-4AF4-8154-248D8A92E347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0297FBB7-1C0F-40E4-9CEE-3EC6FCE32B99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_curtis:phpbugtracker:1.x:dev1:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCE2423-CD30-48C3-A0B9-187FB1AF77C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1432",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-01T19:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de de inyección SQL en raphiks MyForum v1.3, permite que atacantes remotos ejecuten comandos SQL de su elección a través de los campos (1) Username y (2) Password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphiks:myforum:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6593767F-16EC-4BC5-8FD7-3C9D090540AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35096",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-01T19:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA (aka 2.0.0b) and earlier allow remote attackers to execute arbitrary SQL commands via the (1) f and (2) t parameters in a showforum action."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de de inyección SQL en index.php en Kensei Board v2.0 Beta (también conocida como v2.0.0b) y anteriores, permite que atacantes remotos ejecuten comandos SQL de su elección a través de los parámetros (1) f y (2) t en una acción showforum."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kenseiboard:kensei_board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0b",
            "matchCriteriaId" : "AA75E3C3-5575-4547-A12B-5FDFA4D7178C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kenseiboard:kensei_board:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C12BB605-4499-4FCE-91DC-EE4ED1A104D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-01T19:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the userid cookie to 1."
      }, {
        "lang" : "es",
        "value" : "Million Dollar Text Links v1.0 permite a atacantes remotos saltarse la autenticación y obtener acceso  administrativo fijando el valor de la cookie userid a 1.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsnx:million_dollar_text_links:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F251FF9-877E-49E4-AAEB-2CD519586A9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-01T20:30:00.280",
      "lastModified" : "2023-11-07T02:04:36.563",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-3870.  Reason: This candidate is a duplicate of CVE-2008-3870.  A typo caused the wrong ID to be used.  Notes: All CVE users should reference CVE-2008-3870 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-02T15:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MT312 REP-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) model.php and (2) config.php with timestamps before 20090521."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en MT312 REP-BBS permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores sin especificar relacionados con (1) model.php y (2) config-php con timestamp anteriores a 20090521."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mt312:rep-bbs:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87CAD9CC-AA99-4992-AB8D-CCAD750F95E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN01115659/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000033.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35251",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN01115659/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-02T15:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MT312 IMG-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to model.php with a timestamp before 20090521."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en MT312 IMG-BBS permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores sin especificar relacionados con model.php con un time stamp anterior a 20090521."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mt312:img-bbs:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB34B3D6-32A6-418A-98BD-2FA2E0794515"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN70836284/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000034.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35275",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN70836284/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000034.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-02T15:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF file, which triggers a buffer overflow.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función XMakeImage en magick/xwindow.c en ImageMagick v6.5.2-8 permite a atacantes remotos producir una denegación de servicio (caída) y posiblemente ejecutar arbitraria a través de un fichero TIFF manipulado, lo que inicia el desbordamiento de búfer. NOTA: Algunos detalles fueron obtenidos de información de terceras partes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.5.2-8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35578647-CFFF-4005-9C4C-111B7B1EFFE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://imagemagick.org/script/changelog.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033766.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033833.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mirror1.smudge-it.co.uk/imagemagick/www/changelog.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35216",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/55721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201311-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2010-0074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/08/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/514516/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/784-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://imagemagick.org/script/changelog.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033766.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033833.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mirror1.smudge-it.co.uk/imagemagick/www/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/55721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201311-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2010-0074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/08/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/514516/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/784-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0185",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-06-02T18:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted MS ADPCM encoded audio data in an AVI movie file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en Apple QuickTime anterior a la v7.6.2 permite a atacantes remotos ejecutar código arbitrario o producir una denegación de servicio (caída de aplicación) a través de datos de audio codificados como MS ADPCM en un fichero de película AVI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.1",
            "matchCriteriaId" : "1D23D725-2D79-4E21-9273-30D8753B8E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "ACE0F153-80B3-4469-AE49-4B7517218574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "53527707-E903-4A12-AB87-6EC5FA9F2EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A91242F5-485E-4125-A19C-4C20B602DD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "63D7214C-FAF6-4DCA-8520-8A539BDCD98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D02D35D-E957-4949-B5DA-F3654B13A308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8399665C-F8A8-4133-A0CD-E767F8266E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ADED98-62C6-4961-894C-1D26E3B3EE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "6469AEDC-6F9D-4CAC-84B2-F13107626FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F522CEA4-B3BB-4C94-B070-6679EEA43439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "904FA4B7-A6CB-48B4-B887-4B349479D1A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CB2DFC1B-6452-4575-A099-2E5FD387A8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B630944-F838-4C02-90D4-F5EB2A073CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "01A24DD9-5AB8-4091-A293-1A2D7953D455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9066C81B-A69F-450D-8606-5E29AF1AD286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BB113931-F886-425C-A0F8-171F6D71A02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D282FA67-0089-4ED5-8168-E3CE8B510BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71285AD2-3966-4817-B630-8335BE985D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2B5928A2-C989-4B27-91E1-7019277B2E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458480E-F222-452A-AB21-933F924F8F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "05AA3258-E556-4443-AF79-96882A9CF33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "51292C8C-4905-4C30-B166-ACCE39D9DEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C83A78-6BB9-443E-B508-CC6F8D157A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "546B9E74-E86B-462B-A58E-017E3B780B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3433487A-98ED-4C28-8659-609BF395E23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61463F4F-BBE0-42AA-AC22-8F39E94EB520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "335F4D89-983A-4C05-937A-EEE802A260D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "49477EAA-5AA2-4B55-8BEF-AB3E118DE618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7F189FAB-3BA1-4C1B-975F-E174D5CB8771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "19AAC0DE-53D7-42E4-90D2-939C5DF6F651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "284BAF97-86BC-4520-BAB6-D75D18FFA1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3F4075B0-0F9F-466B-8521-2156849247C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E1B24679-4C63-4320-A79F-E19CCFA537D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0D28529-2A0A-4398-98C2-C35BABB9373A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F8BF6A6A-F734-4395-9305-2E9F52EE888F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AFCB45F3-397E-42A8-8D08-ECF667939FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "60500521-46FC-4734-901C-0A5E5D3DB9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F45B47BB-E14F-4437-8828-EF059496BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "682C7A59-6F3C-4E50-A145-D081614CD42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B353211-F90E-4F38-9D0B-B8C7EC00E66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D69BB04E-E696-4B34-95DE-B42F46697F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C0638BF3-4B18-4747-AD33-D04B3B4E217F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B8F4241-551B-492D-8602-06146B05CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "CF370413-96F7-4882-899F-577A8F3DAD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2BA9C6F7-513B-426F-90AD-7E826433CEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5B709D68-8474-4AAE-AA11-777EF510E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:vista:*:*:*:*:*",
            "matchCriteriaId" : "6F1AC0EA-202C-47F8-8104-C10A5BBEDF1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84D320E-ACA2-4B6E-B682-00202B9ADF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "4DCEE583-6CD2-4098-9A2A-B006A5023318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "268B4FBA-D6AC-4595-898A-721E284F3399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "52AD56F9-0CE6-4949-9853-3274A2C81601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FEBA83-C845-4334-9B9A-921BA0F44DE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "DA476E79-5145-4EE3-BD81-3773C6B19825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "555B1A2A-95F5-4B06-8774-FF952BEC2FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CEA210F5-71F6-4528-B2B4-507AA4A435EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "081712FF-C6B8-423B-8F20-C79D25DE782F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CF045B49-11A3-447A-9D05-1E8794980A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "939BE521-A385-4A1A-B4B0-C4687751D4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "304CFC80-E925-4CB8-8251-0FD0F09B8410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22D0674-0EC7-4176-97FB-940F2F7D6AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "4DDB8D28-183F-4B16-8610-592A210311E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6470EC-B72B-404C-9E69-03C3FEFD56F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54879",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-6/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504006/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35163",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50894",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15727",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0188",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-06-02T18:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie composed of a Sorenson 3 video file."
      }, {
        "lang" : "es",
        "value" : "Apple QuickTime anterior a v7.6.2 permite a atacantes remotos ejecutar código de forma arbitraria o producir una denegación de servicio (corrupción de la memoria o caída de aplicación) a través de un una película manipulada compuesta de un fichero de vídeo de Sorenson 3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.1",
            "matchCriteriaId" : "1D23D725-2D79-4E21-9273-30D8753B8E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "ACE0F153-80B3-4469-AE49-4B7517218574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "53527707-E903-4A12-AB87-6EC5FA9F2EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A91242F5-485E-4125-A19C-4C20B602DD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "63D7214C-FAF6-4DCA-8520-8A539BDCD98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D02D35D-E957-4949-B5DA-F3654B13A308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8399665C-F8A8-4133-A0CD-E767F8266E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ADED98-62C6-4961-894C-1D26E3B3EE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "6469AEDC-6F9D-4CAC-84B2-F13107626FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F522CEA4-B3BB-4C94-B070-6679EEA43439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "904FA4B7-A6CB-48B4-B887-4B349479D1A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CB2DFC1B-6452-4575-A099-2E5FD387A8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B630944-F838-4C02-90D4-F5EB2A073CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "01A24DD9-5AB8-4091-A293-1A2D7953D455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9066C81B-A69F-450D-8606-5E29AF1AD286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BB113931-F886-425C-A0F8-171F6D71A02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D282FA67-0089-4ED5-8168-E3CE8B510BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71285AD2-3966-4817-B630-8335BE985D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2B5928A2-C989-4B27-91E1-7019277B2E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458480E-F222-452A-AB21-933F924F8F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "05AA3258-E556-4443-AF79-96882A9CF33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "51292C8C-4905-4C30-B166-ACCE39D9DEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C83A78-6BB9-443E-B508-CC6F8D157A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "546B9E74-E86B-462B-A58E-017E3B780B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3433487A-98ED-4C28-8659-609BF395E23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61463F4F-BBE0-42AA-AC22-8F39E94EB520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "335F4D89-983A-4C05-937A-EEE802A260D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "49477EAA-5AA2-4B55-8BEF-AB3E118DE618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7F189FAB-3BA1-4C1B-975F-E174D5CB8771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "19AAC0DE-53D7-42E4-90D2-939C5DF6F651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "284BAF97-86BC-4520-BAB6-D75D18FFA1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3F4075B0-0F9F-466B-8521-2156849247C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E1B24679-4C63-4320-A79F-E19CCFA537D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0D28529-2A0A-4398-98C2-C35BABB9373A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F8BF6A6A-F734-4395-9305-2E9F52EE888F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AFCB45F3-397E-42A8-8D08-ECF667939FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "60500521-46FC-4734-901C-0A5E5D3DB9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F45B47BB-E14F-4437-8828-EF059496BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "682C7A59-6F3C-4E50-A145-D081614CD42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B353211-F90E-4F38-9D0B-B8C7EC00E66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D69BB04E-E696-4B34-95DE-B42F46697F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C0638BF3-4B18-4747-AD33-D04B3B4E217F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B8F4241-551B-492D-8602-06146B05CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "CF370413-96F7-4882-899F-577A8F3DAD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2BA9C6F7-513B-426F-90AD-7E826433CEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5B709D68-8474-4AAE-AA11-777EF510E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:vista:*:*:*:*:*",
            "matchCriteriaId" : "6F1AC0EA-202C-47F8-8104-C10A5BBEDF1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84D320E-ACA2-4B6E-B682-00202B9ADF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "4DCEE583-6CD2-4098-9A2A-B006A5023318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "268B4FBA-D6AC-4595-898A-721E284F3399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "52AD56F9-0CE6-4949-9853-3274A2C81601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FEBA83-C845-4334-9B9A-921BA0F44DE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "DA476E79-5145-4EE3-BD81-3773C6B19825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "555B1A2A-95F5-4B06-8774-FF952BEC2FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CEA210F5-71F6-4528-B2B4-507AA4A435EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "081712FF-C6B8-423B-8F20-C79D25DE782F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CF045B49-11A3-447A-9D05-1E8794980A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "939BE521-A385-4A1A-B4B0-C4687751D4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "304CFC80-E925-4CB8-8251-0FD0F09B8410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22D0674-0EC7-4176-97FB-940F2F7D6AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "4DDB8D28-183F-4B16-8610-592A210311E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6470EC-B72B-404C-9E69-03C3FEFD56F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-10/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504007/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35159",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50886",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16085",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504007/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-02T18:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore library in Xvid before 1.2.2, as used by Windows Media Player and other applications, allow remote attackers to execute arbitrary code by providing a crafted macroblock (aka MBlock) number in a video stream in a crafted movie file that triggers heap memory corruption, related to a \"missing resync marker range check\" and the (1) decoder_iframe, (2) decoder_pframe, and (3) decoder_bframe functions."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de memoria basados en memoria dinámica en xvidcore/src/decoder.c en la librería xvidcore en Xvid anteriores a v1.2.2, tal y como es utilizado en Windows Media Player y otras aplicaciones, permite a atacantes remotos ejecutar código de forma arbitraria mediante un numero \"macroblock\" (también conocido como MBlock) en una difusión de vídeo en un fichero de película manipulado que inicia la corrupción de la memoria dinámica, relacionado con una \"comprobación de perdida de sincronización de marcador\" y las funciones (1) decoder_iframe, (2) decoder_pframe, y (3) decoder_bframe."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xvid:xvid:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "64677D58-FD33-49D1-9CF4-FDDAA276BBA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xvid:xvid:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AB2BD9-FBE3-44E9-85AD-CFDD89036096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xvid:xvid:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC174AC0-DAC0-4416-8886-57A360426A86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xvid:xvid:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBF71AE-3B19-45F8-9ED7-ED59885E33B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xvid:xvid:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF0BE91-717E-45B4-B10D-3B31D8D91305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xvid:xvid:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012DC76F-FD6D-4AC8-B0DD-E9613A5B1B3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c?r1=1.80&r2=1.81",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35274",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1468",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.xvid.org/News.64.0.html?&cHash=0170b4e439&tx_ttnews%5BbackPid%5D=64&tx_ttnews%5Btt_news%5D=7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.it-isac.org/postings/cyber/alertdetail.php?id=4634&selyear=2009&menutype=menupublic",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c?r1=1.80&r2=1.81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.xvid.org/News.64.0.html?&cHash=0170b4e439&tx_ttnews%5BbackPid%5D=64&tx_ttnews%5Btt_news%5D=7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.it-isac.org/postings/cyber/alertdetail.php?id=4634&selyear=2009&menutype=menupublic",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-02T18:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the decoder_create function in the initialization functionality in xvidcore/src/decoder.c in Xvid before 1.2.2, as used by Windows Media Player and other applications, allows remote attackers to execute arbitrary code via vectors involving the DirectShow (aka DShow) frontend and improper handling of the XVID_ERR_MEMORY return code during processing of a crafted movie file. NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la funcion decoder_create en la inicialización de la funcionalidad en xvidcore/src/decoder.c en Xvid anteriores a v1.2.2, tal y como se utiliza en Windows Media Player y otras aplicaciones, permite a atacantes remotos ejecutar código de forma arbitraria a través de vectores relacionados con el frontend de DirectShow (aka DShow) y el maneja inadecuado del código de retorno de XVID_ERR_MEMORY durante el proceso de manejo de un fichero de película manipulado. NOTA: Algunos de los detalles de esta información fueron obtenidos de terceras partes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xvid:xvid:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "64677D58-FD33-49D1-9CF4-FDDAA276BBA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xvid:xvid:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AB2BD9-FBE3-44E9-85AD-CFDD89036096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xvid:xvid:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC174AC0-DAC0-4416-8886-57A360426A86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xvid:xvid:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBF71AE-3B19-45F8-9ED7-ED59885E33B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xvid:xvid:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF0BE91-717E-45B4-B10D-3B31D8D91305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xvid:xvid:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012DC76F-FD6D-4AC8-B0DD-E9613A5B1B3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c?r1=1.80&r2=1.81",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xvid.org/News.64.0.html?&cHash=0170b4e439&tx_ttnews%5BbackPid%5D=64&tx_ttnews%5Btt_news%5D=7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.it-isac.org/postings/cyber/alertdetail.php?id=4635&selyear=2009&menutype=menupublic",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c?r1=1.80&r2=1.81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xvid.org/News.64.0.html?&cHash=0170b4e439&tx_ttnews%5BbackPid%5D=64&tx_ttnews%5Btt_news%5D=7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.it-isac.org/postings/cyber/alertdetail.php?id=4635&selyear=2009&menutype=menupublic",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-02T18:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región stack de la memoria en iTunes de Apple anterior a versión 8.2, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de una URL itms: con un componente URL largo después de dos puntos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:-:mac:*:*:*:*:*",
            "versionEndIncluding" : "8.1.1",
            "matchCriteriaId" : "22597F4D-64AC-41CD-B43B-E0C8326A1311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "8.1.1",
            "matchCriteriaId" : "96EE562D-15E7-4176-87AB-4002A7D207D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8659A87-1197-4C3B-A076-90FE3A453205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "49DC3DDC-8758-4D28-B2D5-161994C0E669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D88F7A4A-5A12-4D97-B05F-79487082A573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "EEEFF5EC-A455-4B11-9B22-1E79DE3EC45E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E15C097-98DE-4217-8814-95B54CE418F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4179C0-CA2C-42D7-AD72-A19668662A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D0E3B53-AFAE-47F1-B7E3-395406819357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A1309426-7C10-4732-AAC7-5A9D0075DF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5C697C09-C952-4A8F-A1AE-06F423AE7D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A8AD07-07A4-4384-BE4D-8DB0F2E902A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5CF3BB89-1AEF-4B00-AF87-C9BAF7E23EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C9D9076A-A8FB-4E1A-8DC4-32D36D8A74C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "46297466-0506-4767-B49F-9914ACDB2A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD3FBB2-EF88-42B5-8745-0DE5A3BB340C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "389B617F-29D2-4171-B4E0-9E65BBFAF369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "5C912111-DB93-4019-B4D6-06D5873A8538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "699424D3-E59B-448C-8157-282701759851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA630BC5-DF1D-4602-A3AA-3319F3C5C9B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "696D5986-155D-446C-A5FE-49C0DF1868AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B16F29E-E502-406E-9F6F-30664C1DBE61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "60639271-2C1D-41BD-BEA4-8D1CDAB9E224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1EB1098-87E1-45DC-BD44-2B374BAA758C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3370179D-5E8A-4036-AA23-252674C6D807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9DF402D2-E1DA-44D6-B1F9-FE35EF5798CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C9A3F04A-2FC3-48F2-B7C3-A159CB14D3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DD3B1C-1743-434B-B67F-A3C1B350059A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2B71E645-F15B-43FE-931B-819F9ABA89C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "FB9DFC99-4A94-45CF-A999-0D4A5F153D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "A4F5B268-399F-4CEC-9996-01BD55841141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E27E1D8-0303-4F91-B1B0-38C64A8F04F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "E90B5E1A-4D90-4252-8E34-649F33F1A088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BDD9C9F2-5F86-4606-95B3-A8688D9F4B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "28C2D685-7064-4F75-9100-21212557933A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F995CF65-E3DD-4C54-B3F5-417C6F75D930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1D0D1162-36F7-4F7E-94C0-ABB86B9FC4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44964DEC-DC35-4DCE-B28D-687348758163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF23791B-F73D-4CF4-BAC3-591FF0F0B0C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F1A117-8508-4274-99EA-D58F54EBBA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E74DB1C-208B-42DE-9A5E-E9010140C5B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBD58D1-C40D-4F6D-816F-A3842897EB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "78B0CA16-044C-44D5-B63F-548D2D0EFEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "262CAFD7-07C2-4C71-B2FC-165A88977881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C910CA4-5EA5-4507-BDE9-3E6C1434B666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "018AC033-ACF0-496D-96E1-A03CC4162CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "3395F4BA-C317-4F34-8E47-7AB8F9E7BDF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3CA9634F-A553-4B72-BBA2-AD7EAE4DFA81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4490461A-84C7-42C3-A61B-4E6EF5980B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A698DDBE-B79B-4F59-AFBC-0A0682B1EF1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0415D4B8-0281-4ED5-B3A1-A97BDD0F8D36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9C210688-EA10-4FE2-A0C2-EA0BBDB1FDE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E91D9ACF-2595-4A9A-B581-46F177300B7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D365C93F-D06C-4FB0-8192-A4E84B6B2F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC9B5471-F1B1-4E8B-B991-FDE231BA30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B4195D-1550-42D1-B562-0E438F7ACC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9EBF09D5-D19E-4A84-8979-6FC44D2268B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2320B809-DE44-49AA-9C96-196BF39749C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.2.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42486BD7-4371-46EE-B670-CED685872E6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.2.72:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "F2899F21-F01F-4C95-93AA-40C528EE56DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B6A66A-AC5F-48E0-ABCE-68828207B106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDD1695A-271B-4832-B4B1-E5A9D7DE4E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1206A192-A22C-4C55-A323-1D28D89BED21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D65B8D79-6147-480A-AC94-627D58644D07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FD00E684-506B-4ED6-B48C-7D565CDA188C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071BFB1F-402B-4D8C-8155-671792AEDB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.6:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "9136E8D6-310D-4D4E-A6AC-2F89218B8666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E156DE-12B4-4E7A-B8C4-C2FC0AC2B2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.6.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "FB8D37E9-1419-4DC3-B74D-7919F5F08AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "28519DE2-61CA-4943-9247-9F6BCB0367DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBA60E9-C5B5-4B4C-9FA3-7FE0F3F6871C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "78A3FEC0-F135-41F9-A260-52157B283B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93748DFC-6003-4BED-87F9-98713F6897EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1E88F87C-D724-4D06-B770-532E04B0AF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "822F3D7E-810F-41B9-823F-D0B54BD1A3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB9D7E1-B715-4A93-9CDB-99A89C7D85B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "79591197-B671-46B2-9EB2-03A75A838CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7CC79D8C-A4FF-4584-BE34-D75D17DF1604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "359C82A7-F6FB-4140-BD11-2B38B323933A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00EDB73-7A1B-4847-903A-88729269E1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.1.30:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A2DD1A9D-4AF4-452A-99C2-AE93611C985D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A8873F1-4792-41A1-83B5-B85C9F4A7D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07040FC1-6BFE-4E8F-A089-1166404BE33B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.8:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "8DEABC06-3FF2-4B6A-AAFF-F38B00BA2967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB84AFE4-2694-475A-80D3-4D50C524EE18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.8.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "5CBA468F-4D1A-4A17-AC00-C7A377766A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.8.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E9B16D5E-9EF4-4253-8E07-75C8E5E0E33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6573035-D208-4C4C-98A4-A7BA26C6AB15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.9:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6514E3F5-3B5D-43BE-A26D-5167B519F3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB20AA2E-5DF0-420C-A1FE-BB6EBA9649FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.9.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F8E95857-BBE4-461B-885D-61B42D5F4D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.9.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CA2B6657-6E0F-4915-ACB9-219F76D8E38A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48FDD0A-6DE5-44DD-B144-32B91DB26C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "23C49853-8616-4769-90BC-B6D85B24A36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8343D87F-FA37-4225-B27D-BCCDD2433C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C235A75A-0D08-42AD-836A-B550EF6257BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "10A63976-A435-4F6C-8B09-3001CA3EDC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B591AE1E-02DB-462A-B71F-48947525D232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "7C1EC2F5-FBE8-4EC8-9D28-83C736F2DC01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2D6F98F8-0B9B-4CE5-B1B8-305C6740799A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "B97DF98E-792B-474E-8820-DF88C4B28A94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD0C29E-FB9F-41DE-968F-46DD0EA55003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "8DDAAC1F-03CA-4DCC-9E9B-A68181261BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34B5892B-0377-4D81-9E0E-94B8D8CE72C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "5C86DB01-FCCD-47C8-9F6A-51E2A8BBBD0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "97558F66-FA78-454B-B25C-DA2A39CA1A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2276BED4-82F0-4F62-AA6F-7E1667F28E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D5AE8F59-2DF8-403B-BAB9-6465E618897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D1354FF7-467B-4F76-81BB-28901E01ACDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "B3F084A8-A293-4151-80F6-72C14582E31F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45D47548-1C4D-4368-99D1-929905DD6B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "F37B39AB-2D5B-417E-BCEF-29C18D386C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "509D04DE-62F8-4D80-8CAB-95EA149CA8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7426FDD0-F909-48AB-97C9-C4B25C05E6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28AE8D2D-63CA-4091-9D59-CE919EB1FD75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A1DCEED8-8174-4319-BAA2-E0A70A7EAFC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9F5C3AD7-0C07-4972-B789-EE5D1B098107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "372C1609-E534-41E0-87CD-C654BBF0B88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC9E22D2-551A-4CDF-B9F0-C45A3A2B7695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "9730866D-DFE9-448F-9D4E-6B21B3942737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E15502B6-B54C-4817-B929-4512E890A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "03FCF3E7-0649-43B7-90C8-521E90079156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52A433A5-3EFF-405D-8285-97EC88857968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.4.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "E20BC99A-13FC-446C-A27A-6C2D859C172B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62A1C5D-C25E-4E56-8FD0-F90C8E39C7F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "DD300F1B-EE8F-4606-B024-A14CA2EF4D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "265E54E3-A5BC-42F2-B085-400BDD67BEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "407AD48A-EA07-456F-B46B-24383E416A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582D1FE8-C4E8-4385-B4EB-34320F019E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "18D9E538-FDF6-4112-9BF9-FFB48785439A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C5B51908-CB81-492D-A437-D0508ABE05FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF61CE34-5130-4B1A-B7A2-B28C1A18B9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9997A5A2-104E-449E-ADF2-79F7C52C8D1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0E826E91-CBBF-48D8-A4AD-7FB6830F3769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEE6DEC-9B26-47F4-A2CF-CA49981C8864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2690D789-B1DC-40A5-8CC6-BBB499E9A550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "5B892A2F-6052-41BE-B74F-7A81C7C1C794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "066FC8C7-5A0B-4B2E-A51E-BFB42153FD21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2223B8E2-346A-4C37-9F6C-879F9CA64C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8879A44A-8EFC-4F3B-9187-371EEA971AEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D2412E1-745B-4CFC-B075-1960A1410335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93E5227C-0621-43EE-A0F2-4B4545D71852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BB11F50-AD2A-438B-8028-29AC8AF9AB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "45F36172-97A7-4767-BC9E-8DC0444A8635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB69B123-7A09-4855-9846-E8ACACB3C6F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F9BD3983-B891-41D2-88A5-25B98F89B5F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D0D889C7-320C-4674-834F-93C8B1701EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0CC53F2-3827-4CA3-8726-C481B57B4AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "63EC82F8-9726-41B5-821E-2782D211F9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "23B4660B-D22B-4AC5-B6F2-87F83A2251A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1AFF8F-BBCA-4C93-A401-F8B478327BFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B0A35E88-2C3D-40B7-9268-F46AB909B198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7F61B45F-86CA-43F6-BA12-62AB0FBAD352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA3571F-9221-45CD-9798-CC72CA428D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC37C091-02B8-4B39-9253-52C1008ADEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7E95C92E-ED71-4260-8648-DDBC098A513E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9F7D1E31-E28F-4EAD-AAE5-01AE478003B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129ABCA4-FBF6-41B8-BF6B-65467D56D297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "70A4EEE2-1DD2-4936-8939-4683523670B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "017E5A35-D778-46FD-A536-E57A13162675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "31403D57-0D0F-46D8-8F89-A6CC5B6AAFAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "91FB2868-DDF9-4D33-B78C-2A5180F9D260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122C685-4F02-476F-9A41-9C62D3D92651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "95B58CD1-03CB-4C35-A290-7157941D210D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F7A7BAD1-61DE-4FCE-A2ED-10B7D7837A93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AEEC5C0E-DDC5-4B28-8C04-DF69C152E1AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D37426-00A0-40E5-A27A-CF31D8CBAEEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A27B736F-317F-4538-AA3B-72D6EF0D2D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A44D692D-C489-4853-91E1-4AF638309A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2F688163-C543-4D58-BF71-DF50FFB0A112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E11CADC-AFCC-4A98-9271-C35BC9752B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "481E736B-0A83-4422-B1D3-4BD0F9565A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11F1530E-9E63-4A39-9056-3A946A34B650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3BB09ABD-C1F1-4101-BDC2-FC3E8C422631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3856A348-A0D6-4A0A-A8C9-D369CC863A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "17DE00AF-2551-4C20-9670-9B39C1E3C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0C0CB6DE-46C4-4F9D-B8FD-47C01922D2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29E92D8D-68AB-4FC4-A37A-D6D48829B58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A7448F89-CC4A-4B18-887F-B47C0B57404C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670656BF-2BE2-41ED-854A-466DC4068FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9A404797-C734-4A70-BC32-6AED52DD96AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "040B2DB5-8F7D-4272-A0D1-2872B289B125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDE7F79F-54F5-4315-98BD-414CA2D1C51E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "4F173E7D-3EEC-4698-B0FE-5CCE6F990829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EA53A8ED-07F9-4882-A253-9E2FDAB731F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "1A957B0E-9A86-40D4-8A39-01895C32838A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBBF2E9F-0F37-4DDA-9704-B31D94745257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "B2943C2E-0DDD-498A-9439-E9394CB06081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1AC8825C-76AD-4640-A5CE-7557DF74133D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B7DBB76-5A86-42A3-8A0A-19D616357619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBA5AB05-ADF6-4B5D-A4FD-9C149EC4577F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D41DA19A-4403-40A8-A3DB-01A12FD4F267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1143A4DE-F75B-4396-9D01-CE14EF8FCB39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2EFA38A0-EA7C-40C7-B9B7-FE9D9EBB95A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC16747F-9F32-4186-9824-487163276EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDF87AB4-B3F3-4774-8CE3-A2B46C3D8DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "25E7EF0A-D79E-44E3-B0D4-3C6E8F6FD666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7990DED7-1E8B-4787-A057-BFEF14462157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F2043A3A-3578-42D8-AF54-7C8073CA0DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "816395FD-EA69-4994-8004-D699831649DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C0A6DD25-D4A7-42C4-90AB-005B682B45BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "8524DF4C-9607-42A9-92DF-815F501C2133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02D076B-5900-401D-9B47-5136B9CEAA15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7D4903B1-40F3-4137-9F4C-07EC7D208674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E7A71D45-7715-4B1A-BC64-6F6287A324FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E479501-8832-41B0-A63C-360AE5A1B420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "5DE81009-8CE1-456D-AFFA-CF2DB21D57D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "17517493-027E-4844-85DD-D8ABCDEB1BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "0D450451-C7BB-429D-8FFA-C3706303127B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5A653FFB-16BF-439D-A03A-1C9FB6B6AB16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "3CA2DDCE-8EB9-4FB8-AD64-4F2C7A1D811B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "891B1042-2F02-4D3A-9F2E-2567B2C0A63C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://redpig.dataspill.org/2009/05/drive-by-attack-for-itunes-811.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35314",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://static.dataspill.org/releases/itunes/itms_overflow.rb",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3592",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504043/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35157",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1470",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://redpig.dataspill.org/2009/05/drive-by-attack-for-itunes-811.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://static.dataspill.org/releases/itunes/itms_overflow.rb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504043/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-02T18:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC compression file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap)  en Apple QuickTime anterior a  v7.6.2, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de un archivo de compresión FLC manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.1",
            "matchCriteriaId" : "1D23D725-2D79-4E21-9273-30D8753B8E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "ACE0F153-80B3-4469-AE49-4B7517218574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "53527707-E903-4A12-AB87-6EC5FA9F2EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A91242F5-485E-4125-A19C-4C20B602DD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "63D7214C-FAF6-4DCA-8520-8A539BDCD98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D02D35D-E957-4949-B5DA-F3654B13A308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8399665C-F8A8-4133-A0CD-E767F8266E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ADED98-62C6-4961-894C-1D26E3B3EE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "6469AEDC-6F9D-4CAC-84B2-F13107626FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F522CEA4-B3BB-4C94-B070-6679EEA43439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "904FA4B7-A6CB-48B4-B887-4B349479D1A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CB2DFC1B-6452-4575-A099-2E5FD387A8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B630944-F838-4C02-90D4-F5EB2A073CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "01A24DD9-5AB8-4091-A293-1A2D7953D455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9066C81B-A69F-450D-8606-5E29AF1AD286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BB113931-F886-425C-A0F8-171F6D71A02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D282FA67-0089-4ED5-8168-E3CE8B510BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71285AD2-3966-4817-B630-8335BE985D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2B5928A2-C989-4B27-91E1-7019277B2E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458480E-F222-452A-AB21-933F924F8F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "05AA3258-E556-4443-AF79-96882A9CF33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "51292C8C-4905-4C30-B166-ACCE39D9DEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C83A78-6BB9-443E-B508-CC6F8D157A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "546B9E74-E86B-462B-A58E-017E3B780B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3433487A-98ED-4C28-8659-609BF395E23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61463F4F-BBE0-42AA-AC22-8F39E94EB520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "335F4D89-983A-4C05-937A-EEE802A260D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "49477EAA-5AA2-4B55-8BEF-AB3E118DE618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7F189FAB-3BA1-4C1B-975F-E174D5CB8771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "19AAC0DE-53D7-42E4-90D2-939C5DF6F651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "284BAF97-86BC-4520-BAB6-D75D18FFA1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3F4075B0-0F9F-466B-8521-2156849247C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E1B24679-4C63-4320-A79F-E19CCFA537D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0D28529-2A0A-4398-98C2-C35BABB9373A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F8BF6A6A-F734-4395-9305-2E9F52EE888F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AFCB45F3-397E-42A8-8D08-ECF667939FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "60500521-46FC-4734-901C-0A5E5D3DB9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F45B47BB-E14F-4437-8828-EF059496BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "682C7A59-6F3C-4E50-A145-D081614CD42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B353211-F90E-4F38-9D0B-B8C7EC00E66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D69BB04E-E696-4B34-95DE-B42F46697F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C0638BF3-4B18-4747-AD33-D04B3B4E217F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B8F4241-551B-492D-8602-06146B05CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "CF370413-96F7-4882-899F-577A8F3DAD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2BA9C6F7-513B-426F-90AD-7E826433CEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5B709D68-8474-4AAE-AA11-777EF510E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:vista:*:*:*:*:*",
            "matchCriteriaId" : "6F1AC0EA-202C-47F8-8104-C10A5BBEDF1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84D320E-ACA2-4B6E-B682-00202B9ADF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "4DCEE583-6CD2-4098-9A2A-B006A5023318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "268B4FBA-D6AC-4595-898A-721E284F3399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "52AD56F9-0CE6-4949-9853-3274A2C81601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FEBA83-C845-4334-9B9A-921BA0F44DE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "DA476E79-5145-4EE3-BD81-3773C6B19825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "555B1A2A-95F5-4B06-8774-FF952BEC2FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CEA210F5-71F6-4528-B2B4-507AA4A435EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "081712FF-C6B8-423B-8F20-C79D25DE782F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CF045B49-11A3-447A-9D05-1E8794980A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "939BE521-A385-4A1A-B4B0-C4687751D4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "304CFC80-E925-4CB8-8251-0FD0F09B8410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22D0674-0EC7-4176-97FB-940F2F7D6AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "4DDB8D28-183F-4B16-8610-592A210311E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6470EC-B72B-404C-9E69-03C3FEFD56F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-02T18:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted compressed PSD image."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer  en Apple QuickTime anterior a  v7.6.2, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de una imagen PSD comprimida y manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.1",
            "matchCriteriaId" : "1D23D725-2D79-4E21-9273-30D8753B8E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "ACE0F153-80B3-4469-AE49-4B7517218574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "53527707-E903-4A12-AB87-6EC5FA9F2EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A91242F5-485E-4125-A19C-4C20B602DD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "63D7214C-FAF6-4DCA-8520-8A539BDCD98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D02D35D-E957-4949-B5DA-F3654B13A308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8399665C-F8A8-4133-A0CD-E767F8266E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ADED98-62C6-4961-894C-1D26E3B3EE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "6469AEDC-6F9D-4CAC-84B2-F13107626FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F522CEA4-B3BB-4C94-B070-6679EEA43439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "904FA4B7-A6CB-48B4-B887-4B349479D1A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CB2DFC1B-6452-4575-A099-2E5FD387A8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B630944-F838-4C02-90D4-F5EB2A073CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "01A24DD9-5AB8-4091-A293-1A2D7953D455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9066C81B-A69F-450D-8606-5E29AF1AD286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BB113931-F886-425C-A0F8-171F6D71A02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D282FA67-0089-4ED5-8168-E3CE8B510BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71285AD2-3966-4817-B630-8335BE985D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2B5928A2-C989-4B27-91E1-7019277B2E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458480E-F222-452A-AB21-933F924F8F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "05AA3258-E556-4443-AF79-96882A9CF33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "51292C8C-4905-4C30-B166-ACCE39D9DEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C83A78-6BB9-443E-B508-CC6F8D157A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "546B9E74-E86B-462B-A58E-017E3B780B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3433487A-98ED-4C28-8659-609BF395E23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61463F4F-BBE0-42AA-AC22-8F39E94EB520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "335F4D89-983A-4C05-937A-EEE802A260D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "49477EAA-5AA2-4B55-8BEF-AB3E118DE618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7F189FAB-3BA1-4C1B-975F-E174D5CB8771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "19AAC0DE-53D7-42E4-90D2-939C5DF6F651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "284BAF97-86BC-4520-BAB6-D75D18FFA1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3F4075B0-0F9F-466B-8521-2156849247C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E1B24679-4C63-4320-A79F-E19CCFA537D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0D28529-2A0A-4398-98C2-C35BABB9373A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F8BF6A6A-F734-4395-9305-2E9F52EE888F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AFCB45F3-397E-42A8-8D08-ECF667939FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "60500521-46FC-4734-901C-0A5E5D3DB9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F45B47BB-E14F-4437-8828-EF059496BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "682C7A59-6F3C-4E50-A145-D081614CD42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B353211-F90E-4F38-9D0B-B8C7EC00E66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D69BB04E-E696-4B34-95DE-B42F46697F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C0638BF3-4B18-4747-AD33-D04B3B4E217F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B8F4241-551B-492D-8602-06146B05CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "CF370413-96F7-4882-899F-577A8F3DAD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2BA9C6F7-513B-426F-90AD-7E826433CEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5B709D68-8474-4AAE-AA11-777EF510E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:vista:*:*:*:*:*",
            "matchCriteriaId" : "6F1AC0EA-202C-47F8-8104-C10A5BBEDF1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84D320E-ACA2-4B6E-B682-00202B9ADF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "4DCEE583-6CD2-4098-9A2A-B006A5023318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "268B4FBA-D6AC-4595-898A-721E284F3399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "52AD56F9-0CE6-4949-9853-3274A2C81601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FEBA83-C845-4334-9B9A-921BA0F44DE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "DA476E79-5145-4EE3-BD81-3773C6B19825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "555B1A2A-95F5-4B06-8774-FF952BEC2FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CEA210F5-71F6-4528-B2B4-507AA4A435EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "081712FF-C6B8-423B-8F20-C79D25DE782F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CF045B49-11A3-447A-9D05-1E8794980A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "939BE521-A385-4A1A-B4B0-C4687751D4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "304CFC80-E925-4CB8-8251-0FD0F09B8410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22D0674-0EC7-4176-97FB-940F2F7D6AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "4DDB8D28-183F-4B16-8610-592A210311E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6470EC-B72B-404C-9E69-03C3FEFD56F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-02T18:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en Apple QuickTime anterior a  v7.6.2, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de una imagen PICT manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.1",
            "matchCriteriaId" : "1D23D725-2D79-4E21-9273-30D8753B8E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "ACE0F153-80B3-4469-AE49-4B7517218574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "53527707-E903-4A12-AB87-6EC5FA9F2EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A91242F5-485E-4125-A19C-4C20B602DD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "63D7214C-FAF6-4DCA-8520-8A539BDCD98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D02D35D-E957-4949-B5DA-F3654B13A308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8399665C-F8A8-4133-A0CD-E767F8266E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ADED98-62C6-4961-894C-1D26E3B3EE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "6469AEDC-6F9D-4CAC-84B2-F13107626FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F522CEA4-B3BB-4C94-B070-6679EEA43439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "904FA4B7-A6CB-48B4-B887-4B349479D1A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CB2DFC1B-6452-4575-A099-2E5FD387A8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B630944-F838-4C02-90D4-F5EB2A073CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "01A24DD9-5AB8-4091-A293-1A2D7953D455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9066C81B-A69F-450D-8606-5E29AF1AD286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BB113931-F886-425C-A0F8-171F6D71A02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D282FA67-0089-4ED5-8168-E3CE8B510BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71285AD2-3966-4817-B630-8335BE985D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2B5928A2-C989-4B27-91E1-7019277B2E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458480E-F222-452A-AB21-933F924F8F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "05AA3258-E556-4443-AF79-96882A9CF33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "51292C8C-4905-4C30-B166-ACCE39D9DEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C83A78-6BB9-443E-B508-CC6F8D157A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "546B9E74-E86B-462B-A58E-017E3B780B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3433487A-98ED-4C28-8659-609BF395E23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61463F4F-BBE0-42AA-AC22-8F39E94EB520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "335F4D89-983A-4C05-937A-EEE802A260D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "49477EAA-5AA2-4B55-8BEF-AB3E118DE618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7F189FAB-3BA1-4C1B-975F-E174D5CB8771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "19AAC0DE-53D7-42E4-90D2-939C5DF6F651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "284BAF97-86BC-4520-BAB6-D75D18FFA1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3F4075B0-0F9F-466B-8521-2156849247C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E1B24679-4C63-4320-A79F-E19CCFA537D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0D28529-2A0A-4398-98C2-C35BABB9373A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F8BF6A6A-F734-4395-9305-2E9F52EE888F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AFCB45F3-397E-42A8-8D08-ECF667939FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "60500521-46FC-4734-901C-0A5E5D3DB9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F45B47BB-E14F-4437-8828-EF059496BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "682C7A59-6F3C-4E50-A145-D081614CD42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B353211-F90E-4F38-9D0B-B8C7EC00E66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D69BB04E-E696-4B34-95DE-B42F46697F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C0638BF3-4B18-4747-AD33-D04B3B4E217F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B8F4241-551B-492D-8602-06146B05CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "CF370413-96F7-4882-899F-577A8F3DAD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2BA9C6F7-513B-426F-90AD-7E826433CEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5B709D68-8474-4AAE-AA11-777EF510E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:vista:*:*:*:*:*",
            "matchCriteriaId" : "6F1AC0EA-202C-47F8-8104-C10A5BBEDF1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84D320E-ACA2-4B6E-B682-00202B9ADF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "4DCEE583-6CD2-4098-9A2A-B006A5023318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "268B4FBA-D6AC-4595-898A-721E284F3399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "52AD56F9-0CE6-4949-9853-3274A2C81601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FEBA83-C845-4334-9B9A-921BA0F44DE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "DA476E79-5145-4EE3-BD81-3773C6B19825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "555B1A2A-95F5-4B06-8774-FF952BEC2FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CEA210F5-71F6-4528-B2B4-507AA4A435EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "081712FF-C6B8-423B-8F20-C79D25DE782F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CF045B49-11A3-447A-9D05-1E8794980A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "939BE521-A385-4A1A-B4B0-C4687751D4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "304CFC80-E925-4CB8-8251-0FD0F09B8410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22D0674-0EC7-4176-97FB-940F2F7D6AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "4DDB8D28-183F-4B16-8610-592A210311E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6470EC-B72B-404C-9E69-03C3FEFD56F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-02T18:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie file containing crafted Clipping Region (CRGN) atom types."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en Apple QuickTime anterior a v7.6.2 en Windows permite a atacantes remotos ejecutar código arbitrario o producir una denegación de servicio (caída de aplicación) a través de un fichero de película que contenga una tipos de regiones de clipping manipuladas (CRNG)"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.1",
            "matchCriteriaId" : "1D23D725-2D79-4E21-9273-30D8753B8E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "63D7214C-FAF6-4DCA-8520-8A539BDCD98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D02D35D-E957-4949-B5DA-F3654B13A308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ADED98-62C6-4961-894C-1D26E3B3EE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "6469AEDC-6F9D-4CAC-84B2-F13107626FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F522CEA4-B3BB-4C94-B070-6679EEA43439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CB2DFC1B-6452-4575-A099-2E5FD387A8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B630944-F838-4C02-90D4-F5EB2A073CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "01A24DD9-5AB8-4091-A293-1A2D7953D455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9066C81B-A69F-450D-8606-5E29AF1AD286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D282FA67-0089-4ED5-8168-E3CE8B510BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71285AD2-3966-4817-B630-8335BE985D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2B5928A2-C989-4B27-91E1-7019277B2E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458480E-F222-452A-AB21-933F924F8F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "51292C8C-4905-4C30-B166-ACCE39D9DEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C83A78-6BB9-443E-B508-CC6F8D157A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3433487A-98ED-4C28-8659-609BF395E23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61463F4F-BBE0-42AA-AC22-8F39E94EB520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "335F4D89-983A-4C05-937A-EEE802A260D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7F189FAB-3BA1-4C1B-975F-E174D5CB8771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "284BAF97-86BC-4520-BAB6-D75D18FFA1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3F4075B0-0F9F-466B-8521-2156849247C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F8BF6A6A-F734-4395-9305-2E9F52EE888F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AFCB45F3-397E-42A8-8D08-ECF667939FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F45B47BB-E14F-4437-8828-EF059496BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B353211-F90E-4F38-9D0B-B8C7EC00E66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B8F4241-551B-492D-8602-06146B05CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2BA9C6F7-513B-426F-90AD-7E826433CEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5B709D68-8474-4AAE-AA11-777EF510E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84D320E-ACA2-4B6E-B682-00202B9ADF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "4DCEE583-6CD2-4098-9A2A-B006A5023318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "52AD56F9-0CE6-4949-9853-3274A2C81601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FEBA83-C845-4334-9B9A-921BA0F44DE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "555B1A2A-95F5-4B06-8774-FF952BEC2FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CEA210F5-71F6-4528-B2B4-507AA4A435EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "081712FF-C6B8-423B-8F20-C79D25DE782F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CF045B49-11A3-447A-9D05-1E8794980A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "939BE521-A385-4A1A-B4B0-C4687751D4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "304CFC80-E925-4CB8-8251-0FD0F09B8410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22D0674-0EC7-4176-97FB-940F2F7D6AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6470EC-B72B-404C-9E69-03C3FEFD56F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35167",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-02T18:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted image description atoms in an Apple video file, related to a \"sign extension issue.\""
      }, {
        "lang" : "es",
        "value" : "Apple QuickTime v7.6.2, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de una descripción imagen  manipulada en un archivo de video Apple, relacionado con la \"la firma de extensión\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:-:mac:*:*:*:*:*",
            "versionEndIncluding" : "7.6.1",
            "matchCriteriaId" : "FBBE7D6D-5D75-48D9-AF41-E57D1E1B913D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "7.6.1",
            "matchCriteriaId" : "C4D2A738-C558-4FF4-AD8B-B24213FB3A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "ACE0F153-80B3-4469-AE49-4B7517218574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "53527707-E903-4A12-AB87-6EC5FA9F2EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A91242F5-485E-4125-A19C-4C20B602DD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "63D7214C-FAF6-4DCA-8520-8A539BDCD98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D02D35D-E957-4949-B5DA-F3654B13A308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8399665C-F8A8-4133-A0CD-E767F8266E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ADED98-62C6-4961-894C-1D26E3B3EE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "6469AEDC-6F9D-4CAC-84B2-F13107626FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F522CEA4-B3BB-4C94-B070-6679EEA43439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "904FA4B7-A6CB-48B4-B887-4B349479D1A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CB2DFC1B-6452-4575-A099-2E5FD387A8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B630944-F838-4C02-90D4-F5EB2A073CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "01A24DD9-5AB8-4091-A293-1A2D7953D455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9066C81B-A69F-450D-8606-5E29AF1AD286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BB113931-F886-425C-A0F8-171F6D71A02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D282FA67-0089-4ED5-8168-E3CE8B510BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71285AD2-3966-4817-B630-8335BE985D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2B5928A2-C989-4B27-91E1-7019277B2E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458480E-F222-452A-AB21-933F924F8F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "05AA3258-E556-4443-AF79-96882A9CF33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "51292C8C-4905-4C30-B166-ACCE39D9DEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C83A78-6BB9-443E-B508-CC6F8D157A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "546B9E74-E86B-462B-A58E-017E3B780B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3433487A-98ED-4C28-8659-609BF395E23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61463F4F-BBE0-42AA-AC22-8F39E94EB520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "335F4D89-983A-4C05-937A-EEE802A260D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "49477EAA-5AA2-4B55-8BEF-AB3E118DE618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7F189FAB-3BA1-4C1B-975F-E174D5CB8771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "19AAC0DE-53D7-42E4-90D2-939C5DF6F651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "284BAF97-86BC-4520-BAB6-D75D18FFA1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3F4075B0-0F9F-466B-8521-2156849247C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E1B24679-4C63-4320-A79F-E19CCFA537D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0D28529-2A0A-4398-98C2-C35BABB9373A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F8BF6A6A-F734-4395-9305-2E9F52EE888F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AFCB45F3-397E-42A8-8D08-ECF667939FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "60500521-46FC-4734-901C-0A5E5D3DB9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F45B47BB-E14F-4437-8828-EF059496BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "682C7A59-6F3C-4E50-A145-D081614CD42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B353211-F90E-4F38-9D0B-B8C7EC00E66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D69BB04E-E696-4B34-95DE-B42F46697F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C0638BF3-4B18-4747-AD33-D04B3B4E217F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B8F4241-551B-492D-8602-06146B05CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "CF370413-96F7-4882-899F-577A8F3DAD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2BA9C6F7-513B-426F-90AD-7E826433CEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5B709D68-8474-4AAE-AA11-777EF510E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:vista:*:*:*:*:*",
            "matchCriteriaId" : "6F1AC0EA-202C-47F8-8104-C10A5BBEDF1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84D320E-ACA2-4B6E-B682-00202B9ADF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "4DCEE583-6CD2-4098-9A2A-B006A5023318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "268B4FBA-D6AC-4595-898A-721E284F3399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "52AD56F9-0CE6-4949-9853-3274A2C81601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FEBA83-C845-4334-9B9A-921BA0F44DE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "DA476E79-5145-4EE3-BD81-3773C6B19825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "555B1A2A-95F5-4B06-8774-FF952BEC2FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CEA210F5-71F6-4528-B2B4-507AA4A435EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "081712FF-C6B8-423B-8F20-C79D25DE782F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CF045B49-11A3-447A-9D05-1E8794980A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "939BE521-A385-4A1A-B4B0-C4687751D4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "304CFC80-E925-4CB8-8251-0FD0F09B8410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "4DDB8D28-183F-4B16-8610-592A210311E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "6ED97A46-DE85-4019-AE15-CDFF0E1371F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F3ECF41A-8B4E-4A9B-BEE7-5F0EB0ED6791"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35166",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-02T18:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie containing a user data atom of size zero."
      }, {
        "lang" : "es",
        "value" : "Apple QuickTime anterior a v7.6.2 no inicializa adecuadamente la memoria antes de manejar ficheros de películas, lo que permite a atacantes remotos ejecutar código de forma arbitraria o producir una denegación de servicio (caída de aplicación) a través de una película que contenga unos datos de usuario de tamaño cero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.1",
            "matchCriteriaId" : "1D23D725-2D79-4E21-9273-30D8753B8E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "ACE0F153-80B3-4469-AE49-4B7517218574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "53527707-E903-4A12-AB87-6EC5FA9F2EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A91242F5-485E-4125-A19C-4C20B602DD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "63D7214C-FAF6-4DCA-8520-8A539BDCD98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D02D35D-E957-4949-B5DA-F3654B13A308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8399665C-F8A8-4133-A0CD-E767F8266E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ADED98-62C6-4961-894C-1D26E3B3EE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "6469AEDC-6F9D-4CAC-84B2-F13107626FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F522CEA4-B3BB-4C94-B070-6679EEA43439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "904FA4B7-A6CB-48B4-B887-4B349479D1A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CB2DFC1B-6452-4575-A099-2E5FD387A8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B630944-F838-4C02-90D4-F5EB2A073CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "01A24DD9-5AB8-4091-A293-1A2D7953D455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9066C81B-A69F-450D-8606-5E29AF1AD286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BB113931-F886-425C-A0F8-171F6D71A02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D282FA67-0089-4ED5-8168-E3CE8B510BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71285AD2-3966-4817-B630-8335BE985D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2B5928A2-C989-4B27-91E1-7019277B2E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458480E-F222-452A-AB21-933F924F8F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "05AA3258-E556-4443-AF79-96882A9CF33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "51292C8C-4905-4C30-B166-ACCE39D9DEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C83A78-6BB9-443E-B508-CC6F8D157A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "546B9E74-E86B-462B-A58E-017E3B780B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3433487A-98ED-4C28-8659-609BF395E23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61463F4F-BBE0-42AA-AC22-8F39E94EB520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "335F4D89-983A-4C05-937A-EEE802A260D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "49477EAA-5AA2-4B55-8BEF-AB3E118DE618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7F189FAB-3BA1-4C1B-975F-E174D5CB8771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "19AAC0DE-53D7-42E4-90D2-939C5DF6F651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "284BAF97-86BC-4520-BAB6-D75D18FFA1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3F4075B0-0F9F-466B-8521-2156849247C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E1B24679-4C63-4320-A79F-E19CCFA537D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0D28529-2A0A-4398-98C2-C35BABB9373A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F8BF6A6A-F734-4395-9305-2E9F52EE888F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AFCB45F3-397E-42A8-8D08-ECF667939FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "60500521-46FC-4734-901C-0A5E5D3DB9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F45B47BB-E14F-4437-8828-EF059496BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "682C7A59-6F3C-4E50-A145-D081614CD42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B353211-F90E-4F38-9D0B-B8C7EC00E66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D69BB04E-E696-4B34-95DE-B42F46697F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C0638BF3-4B18-4747-AD33-D04B3B4E217F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B8F4241-551B-492D-8602-06146B05CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "CF370413-96F7-4882-899F-577A8F3DAD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2BA9C6F7-513B-426F-90AD-7E826433CEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5B709D68-8474-4AAE-AA11-777EF510E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:vista:*:*:*:*:*",
            "matchCriteriaId" : "6F1AC0EA-202C-47F8-8104-C10A5BBEDF1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84D320E-ACA2-4B6E-B682-00202B9ADF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "4DCEE583-6CD2-4098-9A2A-B006A5023318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "268B4FBA-D6AC-4595-898A-721E284F3399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "52AD56F9-0CE6-4949-9853-3274A2C81601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FEBA83-C845-4334-9B9A-921BA0F44DE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "DA476E79-5145-4EE3-BD81-3773C6B19825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "555B1A2A-95F5-4B06-8774-FF952BEC2FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CEA210F5-71F6-4528-B2B4-507AA4A435EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "081712FF-C6B8-423B-8F20-C79D25DE782F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CF045B49-11A3-447A-9D05-1E8794980A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "939BE521-A385-4A1A-B4B0-C4687751D4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "304CFC80-E925-4CB8-8251-0FD0F09B8410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22D0674-0EC7-4176-97FB-940F2F7D6AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "4DDB8D28-183F-4B16-8610-592A210311E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6470EC-B72B-404C-9E69-03C3FEFD56F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35162",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-02T18:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 image."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en Apple QuickTime v7.6.2, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de una imagen JP2 manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "ACE0F153-80B3-4469-AE49-4B7517218574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "53527707-E903-4A12-AB87-6EC5FA9F2EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A91242F5-485E-4125-A19C-4C20B602DD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "63D7214C-FAF6-4DCA-8520-8A539BDCD98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D02D35D-E957-4949-B5DA-F3654B13A308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8399665C-F8A8-4133-A0CD-E767F8266E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ADED98-62C6-4961-894C-1D26E3B3EE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "6469AEDC-6F9D-4CAC-84B2-F13107626FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F522CEA4-B3BB-4C94-B070-6679EEA43439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "904FA4B7-A6CB-48B4-B887-4B349479D1A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CB2DFC1B-6452-4575-A099-2E5FD387A8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B630944-F838-4C02-90D4-F5EB2A073CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "01A24DD9-5AB8-4091-A293-1A2D7953D455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9066C81B-A69F-450D-8606-5E29AF1AD286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BB113931-F886-425C-A0F8-171F6D71A02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D282FA67-0089-4ED5-8168-E3CE8B510BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71285AD2-3966-4817-B630-8335BE985D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2B5928A2-C989-4B27-91E1-7019277B2E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458480E-F222-452A-AB21-933F924F8F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "05AA3258-E556-4443-AF79-96882A9CF33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "51292C8C-4905-4C30-B166-ACCE39D9DEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C83A78-6BB9-443E-B508-CC6F8D157A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "546B9E74-E86B-462B-A58E-017E3B780B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3433487A-98ED-4C28-8659-609BF395E23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61463F4F-BBE0-42AA-AC22-8F39E94EB520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "335F4D89-983A-4C05-937A-EEE802A260D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "49477EAA-5AA2-4B55-8BEF-AB3E118DE618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7F189FAB-3BA1-4C1B-975F-E174D5CB8771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "19AAC0DE-53D7-42E4-90D2-939C5DF6F651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "284BAF97-86BC-4520-BAB6-D75D18FFA1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3F4075B0-0F9F-466B-8521-2156849247C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E1B24679-4C63-4320-A79F-E19CCFA537D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0D28529-2A0A-4398-98C2-C35BABB9373A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F8BF6A6A-F734-4395-9305-2E9F52EE888F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AFCB45F3-397E-42A8-8D08-ECF667939FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "60500521-46FC-4734-901C-0A5E5D3DB9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F45B47BB-E14F-4437-8828-EF059496BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "682C7A59-6F3C-4E50-A145-D081614CD42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B353211-F90E-4F38-9D0B-B8C7EC00E66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D69BB04E-E696-4B34-95DE-B42F46697F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C0638BF3-4B18-4747-AD33-D04B3B4E217F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B8F4241-551B-492D-8602-06146B05CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "CF370413-96F7-4882-899F-577A8F3DAD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2BA9C6F7-513B-426F-90AD-7E826433CEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5B709D68-8474-4AAE-AA11-777EF510E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:vista:*:*:*:*:*",
            "matchCriteriaId" : "6F1AC0EA-202C-47F8-8104-C10A5BBEDF1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84D320E-ACA2-4B6E-B682-00202B9ADF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "4DCEE583-6CD2-4098-9A2A-B006A5023318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "268B4FBA-D6AC-4595-898A-721E284F3399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "52AD56F9-0CE6-4949-9853-3274A2C81601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FEBA83-C845-4334-9B9A-921BA0F44DE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "DA476E79-5145-4EE3-BD81-3773C6B19825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "555B1A2A-95F5-4B06-8774-FF952BEC2FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CEA210F5-71F6-4528-B2B4-507AA4A435EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "081712FF-C6B8-423B-8F20-C79D25DE782F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CF045B49-11A3-447A-9D05-1E8794980A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "939BE521-A385-4A1A-B4B0-C4687751D4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "304CFC80-E925-4CB8-8251-0FD0F09B8410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "4DDB8D28-183F-4B16-8610-592A210311E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35165",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-03T17:00:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the queue manager in IBM WebSphere MQ 6.x before 6.0.2.7 and 7.x before 7.0.1.0 allows remote attackers to execute arbitrary code via a crafted request."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el gestor de cola en IBM WebSphere MQ v6.x anterior a v6.0.2.7 y v7.x anterior a v7.0.1.0, permite a atacantes remotos ejecutar código de su elección a través de una petición manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6D2279B-482A-4CA6-9EF2-C57A95969BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9728448F-E295-4C33-B2F4-17FAAFCDF169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F36C644-664C-4758-9762-E808C80AE904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C670A3F-7BBB-4115-A037-B5E732ABB6BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CD8F97-39E0-455C-92CA-F0FE9AE5A0CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97EC1D0-CA59-4E2C-84EB-054BF27D1BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CCD33A5-6567-43CB-909D-D1851ACF4AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3664585-D0B4-467C-9B6D-4F8E239F7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2216808-BAE9-4034-9618-5EC4CCB80E7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6263B9D-A62A-4E41-958A-968F9ACA0CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19983CDF-4769-4B56-98ED-CE7EE0C1AFF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "594287A4-AF30-4872-A5B8-1421FAB5C674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "896273C9-11F9-45A0-BA46-66F37DFACCC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF396289-8409-4FE2-96DB-99818D5680B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35303",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21386826",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ50784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21386826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ50784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-03T17:00:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM WebSphere Portal Server 5.1 through 6.0, and IBM Integrated Solutions Console (ISC) 6.0.1 do not properly set the IsSecurityEnabled security flag during migration of WebSphere Member Manager (WMM) to Virtual Member Manager (VMM) and a Federated Repository, which allows attackers to obtain sensitive information from repositories via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server (WAS) v6.1 a la v6.1.0.24 y v7.0 a la v7.0.0.4, IBM WebSphere Portal Server v5.1 a la v6.0, e IBM Integrated Solutions Console (ISC) v6.0.1, no establecen adecuadamente la opción de seguridad IsSecurityEnabled durante la migración de WebSphere Member Manager (WMM) a Virtual Member Manager (VMM) y a Federated Repository, lo que permite a atacantes obtener información sensible de los repositorios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:integrated_solutions_console:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "767F0F9A-B9C9-46DB-855D-1ADA1089C073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "versionEndIncluding" : "6.1.0.24",
            "matchCriteriaId" : "73FB17BC-7C69-4F4F-A343-48FD7E78AA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndIncluding" : "7.0.0.4",
            "matchCriteriaId" : "B05A31C2-4115-4398-BBD8-979CF465D340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_portal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1",
            "versionEndExcluding" : "6.0.0.0",
            "matchCriteriaId" : "612E369F-B0DA-4863-B76B-C3DD6283DAC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21375859",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK78134",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35406",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50882",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21375859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK78134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-03T17:00:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The secure login page in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 does not redirect to an https page upon receiving an http request, which makes it easier for remote attackers to read the contents of WAS sessions by sniffing the network."
      }, {
        "lang" : "es",
        "value" : "la página de \"secure login\" en el componente Administrative console en IBM WebSphere Application Server (WAS)v6.0.2 anterior a v6.0.2.35 no redirecciona a una página https hasta que recibe una petición http, lo que facilita a atacantes remotos la lectura de los contenidos de las sesiones WAS capturando paquetes de la red."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.2.33",
            "matchCriteriaId" : "37136805-596C-4FE4-896C-15FFF1E109D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2604E01-E43E-4882-8896-5E646E850286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B68EE27-CC4F-4530-9DFE-D94171C45F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E5AEC-5C35-4962-B9BB-32D66290D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEBF289-F630-4386-8F79-5A1BF73BE6F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521DB050-3C94-49BF-8666-6EC2C358AA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98E5593-1534-48E2-8CD5-B2D1CACDDAB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4AB6BD-4439-4100-A3CE-4600AED10B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD71D5EA-9AF5-422C-810A-D136A5F132F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9D6BDA-39E1-4D15-9D86-E212809998FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2A78FE-8FA6-4532-9E9E-CF6F860EFAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BEDD70-B6DB-448F-A998-3E8774B0DB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63099EF9-0512-44CD-946A-9B25144E50D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9132BB1-5E2E-4CA6-9B63-027CF2A7229D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D839EDB9-A44F-4F7F-94EF-1A77371D705C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4421929D-C4B9-43C5-BE61-E68484D3B198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB622117-C91F-47D2-9832-B7DB340796E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D87691D-0719-4447-B258-5FA2BD10F11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5594891-E790-44E7-BC9E-0A413B385E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C286007A-361F-47BB-A099-E041D5CF6E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD464F13-942D-40EC-8144-6D23A0AEAA81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35301",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK77010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1464",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK77010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-03T17:00:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Administrative Configservice API in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5 on z/OS allows remote authenticated users to obtain sensitive information via unknown use of the wsadmin scripting tool, related to a \"security exposure in wsadmin.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente Management/Repository en IBM WebSphere Application Server (WAS) v6.0.2 anterior a 6.0.2.35 tiene un impacto y vectores de ataque desconocidos. Relacionado con \"exposición de seguridad en wsadmin\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.2.33",
            "matchCriteriaId" : "37136805-596C-4FE4-896C-15FFF1E109D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2604E01-E43E-4882-8896-5E646E850286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B68EE27-CC4F-4530-9DFE-D94171C45F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E5AEC-5C35-4962-B9BB-32D66290D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEBF289-F630-4386-8F79-5A1BF73BE6F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521DB050-3C94-49BF-8666-6EC2C358AA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98E5593-1534-48E2-8CD5-B2D1CACDDAB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4AB6BD-4439-4100-A3CE-4600AED10B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD71D5EA-9AF5-422C-810A-D136A5F132F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9D6BDA-39E1-4D15-9D86-E212809998FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2A78FE-8FA6-4532-9E9E-CF6F860EFAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BEDD70-B6DB-448F-A998-3E8774B0DB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63099EF9-0512-44CD-946A-9B25144E50D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9132BB1-5E2E-4CA6-9B63-027CF2A7229D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D839EDB9-A44F-4F7F-94EF-1A77371D705C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4421929D-C4B9-43C5-BE61-E68484D3B198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB622117-C91F-47D2-9832-B7DB340796E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D87691D-0719-4447-B258-5FA2BD10F11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5594891-E790-44E7-BC9E-0A413B385E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C286007A-361F-47BB-A099-E041D5CF6E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD464F13-942D-40EC-8144-6D23A0AEAA81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35301",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK77495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1464",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK77495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-03T17:00:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Configservice APIs in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5, when tracing is enabled, allow remote attackers to obtain sensitive information via unspecified use of the wsadmin scripting tool."
      }, {
        "lang" : "es",
        "value" : "El Configservice APIs en el  Administrative Console component en IBM WebSphere Application Server (WAS) v6.0.2 anterior a v6.0.2.35, permite a atacantes obtener información sensible a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.2.33",
            "matchCriteriaId" : "37136805-596C-4FE4-896C-15FFF1E109D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2604E01-E43E-4882-8896-5E646E850286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B68EE27-CC4F-4530-9DFE-D94171C45F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E5AEC-5C35-4962-B9BB-32D66290D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEBF289-F630-4386-8F79-5A1BF73BE6F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521DB050-3C94-49BF-8666-6EC2C358AA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98E5593-1534-48E2-8CD5-B2D1CACDDAB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4AB6BD-4439-4100-A3CE-4600AED10B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD71D5EA-9AF5-422C-810A-D136A5F132F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9D6BDA-39E1-4D15-9D86-E212809998FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2A78FE-8FA6-4532-9E9E-CF6F860EFAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BEDD70-B6DB-448F-A998-3E8774B0DB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63099EF9-0512-44CD-946A-9B25144E50D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9132BB1-5E2E-4CA6-9B63-027CF2A7229D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D839EDB9-A44F-4F7F-94EF-1A77371D705C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4421929D-C4B9-43C5-BE61-E68484D3B198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB622117-C91F-47D2-9832-B7DB340796E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D87691D-0719-4447-B258-5FA2BD10F11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5594891-E790-44E7-BC9E-0A413B385E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C286007A-361F-47BB-A099-E041D5CF6E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD464F13-942D-40EC-8144-6D23A0AEAA81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35301",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK84999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1464",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK84999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-03T17:00:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 permits \"non-standard http methods,\" which has unknown impact and remote attack vectors."
      }, {
        "lang" : "es",
        "value" : "El componente Security en IBM WebSphere Application Server (WAS) v6.0.2 anterior a v6.0.2.35 permite ·métodos http no estándares\" que tienen vectores de ataque e impacto desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.2.33",
            "matchCriteriaId" : "37136805-596C-4FE4-896C-15FFF1E109D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2604E01-E43E-4882-8896-5E646E850286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B68EE27-CC4F-4530-9DFE-D94171C45F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E5AEC-5C35-4962-B9BB-32D66290D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEBF289-F630-4386-8F79-5A1BF73BE6F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521DB050-3C94-49BF-8666-6EC2C358AA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98E5593-1534-48E2-8CD5-B2D1CACDDAB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4AB6BD-4439-4100-A3CE-4600AED10B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD71D5EA-9AF5-422C-810A-D136A5F132F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9D6BDA-39E1-4D15-9D86-E212809998FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2A78FE-8FA6-4532-9E9E-CF6F860EFAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BEDD70-B6DB-448F-A998-3E8774B0DB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63099EF9-0512-44CD-946A-9B25144E50D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9132BB1-5E2E-4CA6-9B63-027CF2A7229D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D839EDB9-A44F-4F7F-94EF-1A77371D705C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4421929D-C4B9-43C5-BE61-E68484D3B198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB622117-C91F-47D2-9832-B7DB340796E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D87691D-0719-4447-B258-5FA2BD10F11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5594891-E790-44E7-BC9E-0A413B385E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C286007A-361F-47BB-A099-E041D5CF6E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD464F13-942D-40EC-8144-6D23A0AEAA81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK73246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1464",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK73246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1902",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-03T17:00:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service (crash) via a multipart form datapost request with a missing part header name, which triggers a NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "El procesador multipart en ModSecurity anterior a v2.5.9, permite a atacantes remotos provocar una denegación de servicio (caída) a través de una petición multipart form datapost con un \"part header name\" perdido, lo que provoca una deferencia a puntero nulo (NULL)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trustwave:modsecurity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.9",
            "matchCriteriaId" : "4ADDC663-AE89-4AFF-84EA-698613A17A12"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "743CBBB1-C140-4FEF-B40E-FAE4511B1140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34256",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34311",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35687",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-02.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=667542&group_id=68846",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/52553",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501968",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34096",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0703",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49212",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8241",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00487.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00529.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/34256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=667542&group_id=68846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/52553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/501968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00487.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00529.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-03T17:00:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PDF XSS protection feature in ModSecurity before 2.5.8 allows remote attackers to cause a denial of service (Apache httpd crash) via a request for a PDF file that does not use the GET method."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad de protección de PDF XSS en ModSecurity anterior a v2.5.8, permite a atacantes remotos provocar una denegación de servicio (caída del httpd Apacche) a través de una petición a un archivo PDF que no emplea el método GET."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trustwave:modsecurity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.8",
            "matchCriteriaId" : "69C158C1-C19E-4913-9ED1-3E54E83285A2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "743CBBB1-C140-4FEF-B40E-FAE4511B1140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34256",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34311",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35687",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-02.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=667538",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/52552",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34096",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0703",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49211",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00487.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00529.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=667538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/52552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00487.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00529.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-03T21:00:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Common Code Infrastructure component in IBM DB2 8 before FP17, 9.1 before FP7, and 9.5 before FP4, when LDAP security (aka IBMLDAPauthserver) and anonymous bind are enabled, allows remote attackers to bypass password authentication and establish a database connection via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El componente Code Infrastructure en IBM DB2 v8 anterior a FP17 v9.1, anterior a FP7, y v9.5 anterior a FP4, cuando están activadas la seguridad LDAP (aka IBMLDAPauthserver) y las vinculaciones (bind) anónimas, permite a atacantes remotos evitar la autenticación mediante contraseña y establecer una conexión con la base de datos a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:fp16:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "8A94F484-424C-4DF3-9327-95CFC7B4A83E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:fp4:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1",
            "matchCriteriaId" : "D205DCFE-B7B2-424F-9C50-AE7E9250F2F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:fp1:*:*:*:*:*:*",
            "versionEndIncluding" : "9.5",
            "matchCriteriaId" : "DED8AD3B-99A5-4531-8762-A80B22B05C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fix_pack15:*:*:*:*:*:*",
            "matchCriteriaId" : "7D94A061-0B20-4FCA-B2C0-1564F7EF0113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DE35AE57-E7D6-4CD0-AE86-D414009C361E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp10:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE50207-5779-445A-B3E7-FA548242BD8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp11:*:*:*:*:*:*",
            "matchCriteriaId" : "940D9A1D-DD61-4C78-8ADC-434F78E5626B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp12:*:*:*:*:*:*",
            "matchCriteriaId" : "2185F942-DCEC-4EE4-840E-62C4C6F1D6FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*",
            "matchCriteriaId" : "333F67D2-27CC-4013-B3FA-63BF6F557269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*",
            "matchCriteriaId" : "77D67C50-31B6-4058-9B4D-F06EF8D9B3BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp15:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA59598-F121-491D-BE8C-D7712A3D6E99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF01163-F805-4FC8-9836-462034D1B5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*",
            "matchCriteriaId" : "E570E88C-35F8-4E12-8121-20536AC8A0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*",
            "matchCriteriaId" : "B31F9D02-25FD-4ED1-9D1C-B244BC9426B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "84C925CD-E753-401F-9EC0-6E3D9861C818"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/31787",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35235",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1JR32268",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1JR32272",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1JR32273",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21293566",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21318189",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21386689",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/31787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1JR32268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1JR32272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1JR32273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21293566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21318189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21386689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-03T21:00:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DRDA Services component in IBM DB2 9.1 before FP7 and 9.5 before FP4 allows remote attackers to cause a denial of service (memory corruption and application crash) via an IPv6 address in the correlation token in the APPID string, as demonstrated by an APPID string sent by the third-party DataDirect JDBC driver 3.7.32."
      }, {
        "lang" : "es",
        "value" : "El componente DRDA Services en IBM DB2 v9.1 anterior a FP7 y v9.5 anterior a FP4, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de una dirección IPv6 en el testigo de correlación  en la cadena APPID, como se ha demostrado enviando una cadena APPID por el controlador de terceros DataDirect JDBC v3.7.32."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF01163-F805-4FC8-9836-462034D1B5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*",
            "matchCriteriaId" : "E570E88C-35F8-4E12-8121-20536AC8A0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "757E30FB-2EFB-4B3D-9931-17D584D433A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*",
            "matchCriteriaId" : "B31F9D02-25FD-4ED1-9D1C-B244BC9426B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "47455B4A-6E10-417F-9974-B0AA7F3180FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "84156C5B-EFC6-4733-A868-C3C51CFBA7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp6a:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8ABABB-F84D-41F0-A894-56911AF6E7E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "58147402-53D5-4F15-862B-EE3DCCD75E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "84C925CD-E753-401F-9EC0-6E3D9861C818"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35235",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ36683",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ38874",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21293566",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ36683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ38874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21293566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1385",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-04T16:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet (aka e1000) before 7.5.5 allows remote attackers to cause a denial of service (panic) via a crafted frame size."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento inferior de entero en la función 1000_clean_rx_irq en drivers/net/e1000/e1000_main.c en el controlador e1000 en Linux kernel anterior a v2.6.30-rc8, el controlador e1000e en el kernel de Linux, y Intel Wired Ethernet (también conocido como e1000) anteriores a v7.5.5 permite a los atacantes remotos causar una denegación de servicios (panic) a través de un tamaño de marco manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4.35",
            "matchCriteriaId" : "5D5A3319-0284-4AD3-90C1-51A5B1DEC589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:5.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F900E9-03F9-4300-827C-30D5FCB05C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:5.2.30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4EDE6D-A095-48B3-BE17-E0E736875944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:5.2.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931C9D7B-9E51-4D15-8B08-2AFDADAF938B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:5.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47D7EBDF-CC20-4EAE-93A8-1F69EC3DFE75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:5.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7003DA69-4ACA-4C83-B223-021FE59FFB2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44C0CB29-E22E-4866-A5FC-8BFF030451B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:5.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895280E8-958D-4F03-865D-E7F9F11162E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:5.6.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2671C674-18DE-4A94-9E0D-C40CD3AE2141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:5.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818FDED7-7BB0-491E-856F-8795ABB683AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:6.0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C7240F-6FB6-44A4-802B-81ECCE038312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:6.0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A86028-EAB0-462D-97D4-9DF00148B4FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:6.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2451466-AB8B-4E64-B25B-CF7801B24F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:6.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBA12ED-F5FB-4CD0-A098-88DBCE2E11F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:6.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC547B-9EE1-4A1E-969C-A8A3D0B487D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:7.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC19339-25C7-4A88-BF12-194AA67E81A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:7.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B878098A-958E-412C-BCB6-6F5BDBBBD5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:7.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E25EC32-DF88-42AE-B36C-1B1CAC607EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799672BF-A7EC-426D-8A44-183312B962C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:7.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA010350-3589-44CA-867E-D709D2E044FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:7.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2BF5D-283C-44DF-8044-B25AF793BDE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:7.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F81628-D03C-4646-8BD0-229DF0392E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:e1000:7.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE0F106-5017-4D0B-9824-53708D59D3C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux:kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760FDC9-BB79-4299-8A6D-482085EE5BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux:kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56EEB157-5037-4EAD-8625-35B91B167111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.28",
            "matchCriteriaId" : "9B5B312F-E76A-43E1-A73F-31535848D55B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:rc7-git6:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.30",
            "matchCriteriaId" : "FBD48C54-738D-4559-A43C-A37F80CB5640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F9DBB0-8AF7-42CA-95DD-68A344E9D549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD00664-A27C-4514-A2A4-079E8F9B0251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E336C792-B7A1-4318-8050-DE9F03474CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D0159-1A05-4628-9C1C-360DED0F438C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6654B9-42EB-4C2C-8F71-710D50556180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FDF616-E410-4540-B377-98D1FB88CE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5313B736-9904-442A-84D6-8FC7B9AC2059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3069324C-28FB-4BB6-9451-F3AC6A8DA64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3D19AD-4268-45E7-B13D-BC93ABDF2226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E619E6-A515-43BC-B371-C1FF6DAA6CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "388414A1-C9B4-41BA-AD35-6501A463A095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FDBA01DD-C129-48F1-800B-838418F4A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "185F1EF8-04EB-43ED-B909-8BDF60F23E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "3483FAFA-353C-498F-AF68-8F5B84A0F30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6B11A9E1-9D90-46DC-81B5-17A137205AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "07EEC559-9240-46BE-9057-0F17D1F61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BBBC127F-D67E-43FE-BCFE-606C200084F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "42B18945-EE09-4E6B-8C11-E382E5F8F850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386B13F-9D7C-45F8-B86A-886384144A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:git1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F95AB2-319C-4BDE-8D34-9FBE69A2FB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D48FD9D7-E775-4E26-AEBF-01A09C404D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "89EA3CF3-0AB7-4648-96BA-25E978D2C8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc2_git7:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4DB179-F78F-4D36-A47D-557FB1B945DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc8-kk:*:*:*:*:*:*",
            "matchCriteriaId" : "23859759-4748-4A03-9D78-083C77CFF4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A701E87D-B807-426E-9CD4-6721DBCABE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5FC0A9-A78A-4D09-BDCC-208AFC899824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBFC9DD-B7C2-4FB2-A8F6-29FF50EFAAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.rc2-git1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B3BFC1-4B0A-4D63-BFA2-CF6A51A8D2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "45273823-29EA-44DE-8444-3933402C5793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "88F60E74-09DB-4D4A-B922-4A46EED0EC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E242D3DE-D1DC-406A-BCC3-C4380B7EC369"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ea30e11970a96cfe5e32c03a29332554573b4a10",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/54892",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35265",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35566",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35623",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35847",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36131",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=504022&group_id=42302",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0111",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1865",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.intel.com/support/network/sb/CS-030543.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc8",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:148",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/03/2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1157.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1193.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505254/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/512019/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35185",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=502981",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11598",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11681",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8340",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1550.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01048.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01094.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01193.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ea30e11970a96cfe5e32c03a29332554573b4a10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=504022&group_id=42302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.intel.com/support/network/sb/CS-030543.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/03/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1157.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1193.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505254/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/512019/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=502981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1550.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01048.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01094.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01193.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1386",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-04T16:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello."
      }, {
        "lang" : "es",
        "value" : "ssl/s3_pkt.c en OpenSSL anteriores a v0.9.8i permite a los atacantes remotos, causar una denegación de servicios (puntero NULO desreferenciado y caída del \"daemon\"), a través de un paquete ChangeCipherSpec DTLs que ocurre antes de ClientHello."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "0.9.8",
            "versionEndExcluding" : "0.9.8i",
            "matchCriteriaId" : "CD28B423-FF29-4983-9FBD-68641B1C142A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openssl:0.9.6-15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8C80A1-D1E7-42D4-8DBC-CB7637D7598E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openssl:0.9.6b-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB3990A-3457-4CD6-9EEC-F2D4BC143932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openssl:0.9.7a-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06110A61-8857-46D5-BEE1-882197756DED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://cvs.openssl.org/chngview?cn=17369",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rt.openssl.org/Ticket/Display.html?id=1679&user=guest&pass=guest",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35571",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35729",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36533",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/02/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35174",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-792-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50963",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11179",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7469",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Tool Signature" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8873",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://cvs.openssl.org/chngview?cn=17369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rt.openssl.org/Ticket/Display.html?id=1679&user=guest&pass=guest",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/02/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-792-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Tool Signature" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1387",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-04T16:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a \"fragment bug.\""
      }, {
        "lang" : "es",
        "value" : "La función dtls1_retrieve_buffered_fragment en ssl/d1_both.c en OpenSSL anteriores a v1.0.0 Beta 2 permite a los atacantes causar una denegación de servicios (puntero NULO desreferenciado y caída de \"daemon\") a través de un mensaje \"handshake\" DTLS fuera de secuencia, relativo a \"fragment bug\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.9.8",
            "versionEndExcluding" : "0.9.8m",
            "matchCriteriaId" : "EA054F35-6E05-4A24-9195-F80C0C2761DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openssl:0.9.6-15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8C80A1-D1E7-42D4-8DBC-CB7637D7598E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openssl:0.9.6b-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB3990A-3457-4CD6-9EEC-F2D4BC143932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openssl:0.9.7a-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06110A61-8857-46D5-BEE1-882197756DED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://cvs.openssl.org/chngview?cn=17958",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rt.openssl.org/Ticket/Display.html?id=1838&user=guest&pass=guest",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35571",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35729",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36533",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37003",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200912-01.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/02/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-792-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10740",
        "source" : "secalert@redhat.com",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7592",
        "source" : "secalert@redhat.com",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://cvs.openssl.org/chngview?cn=17958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rt.openssl.org/Ticket/Display.html?id=1838&user=guest&pass=guest",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200912-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/02/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-792-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-04T16:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in claroline/linker/notfound.php in Claroline 1.8.11 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en claroline/linker/notfound.php en Claroline v1.8.11 permite a los atacante remoto inyectar arbitrariamente una secuencia de comandos web o HTML a través de la cabecera HTTP Referer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AEDBF98-5293-4FAF-BC4D-18A9B1D50EE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.claroline.net/viewtopic.php?f=69&t=16193&p=42102#p42099",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://gsasec.blogspot.com/2009/05/claroline-v1811-cross-site-scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35019",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503365/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34883",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.claroline.net/viewtopic.php?f=69&t=16193&p=42102#p42099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://gsasec.blogspot.com/2009/05/claroline-v1811-cross-site-scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503365/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-04T16:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS en) en Skip v1.0.2 y anteriores, y v1.1RC2 anteriores a versiones v1.1RC,permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openskip:skip:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "6627567A-C9A1-4E36-869D-B6742879B1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openskip:skip:*:rc:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "3594018B-142D-4248-86D3-8407EAA977D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openskip:skip:*:rc2:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "BB302414-BA9A-4C74-B9F6-6ECEB624D919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openskip:skip:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD612E3-9D4C-4927-BAD7-219FA007C3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openskip:skip:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0DEEDB5-8F0B-4935-AC17-4A44CDC57B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openskip:skip:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3E5318-0969-445B-9358-9D080D745183"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.openskip.org/redmine/issues/show/677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN43233160/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000025.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://portal.openskip.org/top/releasenote-ver1-0-0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35041",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.openskip.org/redmine/issues/show/677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN43233160/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://portal.openskip.org/top/releasenote-ver1-0-0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-04T16:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Skip v1.0.2 y anteriores, y v1.1RC2 anteriores a versiones 1.1RC, permite a los atacantes ejecutar arbitrariamente comandos SQL a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openskip:skip:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "6627567A-C9A1-4E36-869D-B6742879B1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openskip:skip:*:rc:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "3594018B-142D-4248-86D3-8407EAA977D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openskip:skip:*:rc2:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "BB302414-BA9A-4C74-B9F6-6ECEB624D919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openskip:skip:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD612E3-9D4C-4927-BAD7-219FA007C3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openskip:skip:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0DEEDB5-8F0B-4935-AC17-4A44CDC57B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openskip:skip:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3E5318-0969-445B-9358-9D080D745183"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.openskip.org/redmine/issues/show/677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN03114223/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000026.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://portal.openskip.org/top/releasenote-ver1-0-0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35041",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.openskip.org/redmine/issues/show/677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN03114223/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://portal.openskip.org/top/releasenote-ver1-0-0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-04T16:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in RTWebalbum 1.0.462 allows remote attackers to execute arbitrary SQL commands via the AlbumId parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en RTWebalbum v1.0.462 permite a los atacantes remotos, ejecutar arbitrariamente comandos SQL a través del parámetro AlbumId."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rafal_kucharski:rtwebalbum:1.0.462:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0FD519-40B1-43A3-8393-2E2981498573"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rtwebalbum.svn.sourceforge.net/viewvc/rtwebalbum/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rtwebalbum.svn.sourceforge.net/viewvc/rtwebalbum/index.php?view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35022",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503374/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34888",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rtwebalbum.svn.sourceforge.net/viewvc/rtwebalbum/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rtwebalbum.svn.sourceforge.net/viewvc/rtwebalbum/index.php?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503374/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-04T16:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery (TWG) 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to admin/index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en .include/init.php (también conocido como admin/_include/init.php) en QuiXplorer v2.3.2 y anteriores, utilizado en TinyWebGallery v1.7.6 y anteriores, permite a los atacantes remotos, incluir y ejecutar arbitrariamente archivos locales a través de ..(punto punto) en el parámetro \"lang\" para admin/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.6",
            "matchCriteriaId" : "EA7075F8-B97F-4B8D-8BB4-A4990FFA1604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC860783-7018-4421-8ACE-6F6C522E41DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21630514-7C0A-4B74-8E3A-4F32F9366EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5E4CEDD-095B-40E1-9AD5-419CC63CAA50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C5722B-0221-4CE2-84E9-C4A6007DFB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634AAE01-C70F-4B79-9FFB-E902AED7A6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2F0E0E-D32E-49C0-8710-B93E9D825925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91115B08-3533-4027-B80A-3CDFDC38A915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE1A1DE-DD29-4A96-B483-1CA2B5AA59F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F0C7694-9978-4F85-8B81-A5AA558780BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CDEB37-98C9-42AD-BC50-415FEF0E5943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A20998-E0B8-4AA4-9525-16451E163EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.3c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8E7335-EEA2-42AB-BFB3-D2F00303419F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3EE4A5E-DE0F-45E1-8950-53A1C35AEF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF8C28C-3AE4-4031-949A-B120097B93EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08EB1FD6-A790-40D0-A931-EAD9983D983C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E6D0D3-10F2-4D8C-BC26-BA4AB513B33B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16028F35-AE2B-4C10-96C5-8C3ABBD59B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "372DA1CA-691A-4510-9ECE-86B4914ABE15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99F2224-6DF4-4E8F-B5AD-6D474C4F27D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C0289F-F5D6-46D1-9D5F-4BBB7762E396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "864C47CE-7BE4-4927-83F1-F563C3E12034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04274BC9-E353-4FD9-8BB6-7F431453B95C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9BA5727-3AD1-4169-8E94-231BD2CAFD24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73AD8BD9-03BB-4E89-9D4D-50D095C38F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7468212F-EB58-4E20-888B-679D4242AC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.0.1_15.08.2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D00E3AF-4649-4AE6-AD50-1166BC89FC93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.0.2_17.08.2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B0E1423-82D3-42E8-B90E-E0A2DECF9948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.1_03.09.2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511C256A-649F-47AD-88A7-4DF6CCAB4DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.2.1_20.09.2006_1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35930C6-663F-49A8-9C05-5F9CC985ABE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.2.2_21.09.2006_1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19C91295-E4A9-45B8-916F-7A34BF553611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.2_17.09.2006_1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0028B129-B45A-46A8-BD09-D3F8B383B9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.3.1_11.10.2006_1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B7DE42-BE41-4827-966F-BFE294CD9F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.3.2_12.10.2006_1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D2C36F4-9F45-4E37-923A-5A3650132997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.3_08.10.2006_1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F324A21B-69A7-4618-BB0B-0A5BF85A8655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.4_13.10.2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2772FF4-E46F-4859-B7B1-BA1E2966BEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.5_30.10.2006_2200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "660D356C-164C-47DA-8DB4-9E45DD876FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "080E4F0F-16E8-402F-9A11-2326469D65C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC23AAE-37F6-4842-9BB7-E46BB6348B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F8B14D-F020-4C93-A9A6-EEBF14A910B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FFFABF7-960A-4BB9-BCCC-C7CB4FCEA946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.6.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EE1C8F-F520-4E77-BF1E-CDFC4F33FD5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1A7E5B-A04E-48E2-8761-11C8661C1D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8412E8AF-BDB8-4DCF-AFEA-E3E69F37DC0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.2-18.04.2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B77756A-09FA-4B82-BF4F-FB15EEB66F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.3-12.05.2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153B15B9-280D-437A-B605-73879A0A1CCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12116393-BFD8-473F-956F-5F6C0B27C63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363CC2F1-493E-42EB-ABF5-AECBBAEE64DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1591D7EE-1188-4EF4-8271-00B1F54EC92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6546FC7A-5392-4741-B942-EACC360C958D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E0B254B-F9CF-4484-B7BE-331D009DDDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CCB8A7-BA0E-46AF-90FC-C2AE98A570F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754912C5-01EF-4F98-9AF7-FFC4FEC5A5C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3FAC1D-008A-4088-86EC-8A96DBDA8614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EFCC874-3498-4F1A-8B51-DCA83B4C2B80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D8EFE9-B6A9-44BC-9041-2E1CCE8FB520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30C4A2A-6759-474C-82EC-FFD97BFCEA1A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claudio_klingler:quixplorer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.2",
            "matchCriteriaId" : "CE67329A-7862-470A-AF78-DA135587E442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claudio_klingler:quixplorer:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354BBE12-96AA-4F3C-8B51-CFE80E4808D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claudio_klingler:quixplorer:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCFC487-FDA2-4D26-8140-1F16BAA7A658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claudio_klingler:quixplorer:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19E0034-0B67-4A71-83E8-98A148FF89F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claudio_klingler:quixplorer:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F06FAD64-5233-44BB-9FDA-ED019967B7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claudio_klingler:quixplorer:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9541428-5609-43FE-BF9B-49414E64D0B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claudio_klingler:quixplorer:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE410E3-E0AB-4C47-AB4A-7290460BB9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claudio_klingler:quixplorer:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF42BE37-1569-4D22-9302-B1F5AB12C0B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claudio_klingler:quixplorer:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF152CB-58C1-4B9A-87E0-16A7E9EFF7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claudio_klingler:quixplorer:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83892CE6-D168-4B03-94C8-CE167326FA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claudio_klingler:quixplorer:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3907B16C-0DEC-40AE-BB6F-5E6317E083BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claudio_klingler:quixplorer:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D221E893-172F-49F7-BA83-149F88BADB7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35020",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35060",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503396/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34892",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.tinywebgallery.com/forum/viewtopic.php?t=1653",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503396/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.tinywebgallery.com/forum/viewtopic.php?t=1653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-04T16:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to include and execute arbitrary local .php files via a .. (dot dot) in a language cookie. NOTE: this can be leveraged for SQL injection by including awards.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en src/func/language.php en webSPELL v4.2.0e y anteriores, permite a los atacantes remotos incluir y ejecutar arbitrariamente archivos locales .php a través de ..(punto punto) en una cookie de lenguaje. NOTA: esto puede ser aprovechado por una inyección SQL incluyendo awards.php"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.0e",
            "matchCriteriaId" : "FA50D95F-FD41-4CB8-B57B-C2B22679CA44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8511CDAC-8292-4696-A0BE-7DC321CF6500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:4.0.2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE172AFC-0C9B-4128-862C-7F46026E5BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CE7D68-2638-4ED7-AFA5-8B9FC398B5CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:4.01.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E9ED52-3AF4-4215-A828-B8D4EE9A597A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F5B8975-C514-457E-95FE-84FF3C44275F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:4.01.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D16B895D-B1C0-4727-A06C-518F7E22421C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:4.01.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF027B3-CC1B-48C1-9EED-E5A3A2CD585A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B5F7643-A1B4-4195-A59B-33F3F9D31C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:4.2.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45223AEF-D151-4C08-993F-1537BC02DA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:4.2.0d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DDF25B-8DEE-4406-800F-FF05C64BD9F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35016",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54296",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34862",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.webspell.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.webspell.org/index.php?site=files&file=30",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.webspell.org/index.php?site=news_comments&newsID=130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.webspell.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.webspell.org/index.php?site=files&file=30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.webspell.org/index.php?site=news_comments&newsID=130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-04T16:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in manager.php in LuxBum 0.5.5, when magic_quotes_gpc is disabled and dotclear authentication is used, allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en manager.php en LuxBum v0.5.5, cuando magic_quotes_gpc es deshabilitado y la atenticación \"dotclear\" es utilizada, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro \"username\" en una acción \"login\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxbum:luxbum:0.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27AC8E82-6410-4E3D-82F3-598E7C14F205"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35032",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34889",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1281",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-04T16:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The pci_register_iommu_region function in arch/sparc/kernel/pci_common.c in the Linux kernel before 2.6.29 on the sparc64 platform allows local users to cause a denial of service (system crash) by reading the /proc/iomem file, related to uninitialized pointers and the request_resource function."
      }, {
        "lang" : "es",
        "value" : "La función pci_register_iommu_region de arch/sparc/kernel/pci_common.c del kernel de Linux anterior a v2.6.29 en la plataforma sparc64, permite a usuarios locales provocar una denegación de servicio (caída del sistema), al leer el fichero /proc/iomem. Está relacionado con punteros no iniciados  y la función request_resource."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.28.10",
            "matchCriteriaId" : "6E29A038-1FE8-42C7-9788-BDBD1136F6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACBB194-1D24-464A-B79C-44B8127EAD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0138807-6313-4A3F-AB5A-4B7D4A9BE287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA2227-F259-499D-BF50-5074B1E7DD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A896D0-032C-4467-9D57-E47E8C612704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=192d7a4667c6d11d1a174ec4cad9a3c5d5f9043c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/03/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=192d7a4667c6d11d1a174ec4cad9a3c5d5f9043c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/03/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG. Red Hat does not provide support for the Linux kernel on the SPARC64 architecture.",
        "lastModified" : "2009-06-05T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-04T17:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial of service (persistent crash) and possibly execute arbitrary code via an Internet shortcut .URL file containing a long URL parameter, which triggers a crash when browsing a folder that contains this file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en URL Search Hook (ICQToolBar.dll) en ICQ v6.5, permite a atacantes remotos provocar una denegación de servicio (caída persistente) y posiblemente la ejecución de código de su elección a través de un acceso directo de un fichero .URL a Internet, lo que provoca una caída al navegar por una carpeta que contiene este archivo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icq:icq:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DFE7914-6DA6-4A0E-B9C2-719DD148F938"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503935/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503935/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-04T17:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the ns parameter."
      }, {
        "lang" : "es",
        "value" : "dig.php en GScripts.net DNS Tools, permite a atacantes remotos la ejecución de comandos de su elección a través de meta-caracteres de consola en el parámetro \"ns\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gscripts:dns_tools:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE79F01-6B31-466B-9512-CFBDD79CF22A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34773",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34559",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-04T20:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in the (1) user_info_callback, (2) user_endrow_callback, and (3) gst_pngdec_task functions (ext/libpng/gstpngdec.c) in GStreamer Good Plug-ins (aka gst-plugins-good or gstreamer-plugins-good) 0.10.15 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PNG file, which triggers a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de entero en las funciones  (1) user_info_callback, (2) user_endrow_callback, (3) gst_pngdec_task  en(ext/libpng/gstpngdec.c) enn GStreamer Good Plug-ins (también conocido como gst-plugins-good or gstreamer-plugins-good) v0.10.15, permite a atacante remotos provocar una denegación de servicio y posiblemente la ejecución de código de su elección a través de un archivo PNG manipulado lo que lanza un desbordamiento de entero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer:good_plug-ins:0.10.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D530EC6B-860D-4A13-99F6-BE52F6A593D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=d9544bcc44adcef769cbdf7f6453e140058a3adc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/54827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1123.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=d9544bcc44adcef769cbdf7f6453e140058a3adc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/54827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1123.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0033",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-05T16:00:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header."
      }, {
        "lang" : "es",
        "value" : "Apache Tomcat v4.1.0 hasta v4.1.39, v5.5.0 hasta v5.5.27 y v6.0.0 hasta v6.0.18, cuando se utilizan el conector Java AJP y el balanceo de carga mod_jk; permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de una solicitud manipulada con cabeceras inválidas. Está relacionado con el bloqueo temporal de los conectores que han encontrado errores, tal como se ha demostrado por un error que implica una cabecera HTTP Host mal formada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E300013-0CE7-4313-A553-74A6A247B3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D7414-8D0C-45D6-8E87-679DF0201D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB15C5DB-0DBE-4DAD-ACBD-FAE23F768D01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60CFD9CA-1878-4C74-A9BD-5D581736E6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E52BE7-5281-4430-8846-E41CF34FC214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02860646-1D72-4D9A-AE2A-5868C8EDB3AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BE4B9B5-9C2E-47E1-9483-88A17264594F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BE92A9B-4B8C-468E-9162-A56ED5313E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE21D455-5B38-4B07-8E25-4EE782501EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9AE125C-EB8E-4D33-BB64-1E2AEE18BF81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47588ABB-FCE6-478D-BEAD-FC9A0C7D66DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.9:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA8066-294D-431E-B026-C03707DFBCD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C92F3744-C8F9-4E29-BF1A-25E03A32F2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084B3227-FE22-43E3-AE06-7BB257018690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DDA1D1-1DB2-4FD6-90A6-7DDE2FDD73F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BFF1D5-2E34-4A01-83A7-6AA3A112A1B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D536FF4-7582-4351-ABE3-876E20F8E7FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C03E4C9-34E3-42F7-8B73-D3C595FD7EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB43F47F-5BF9-43A0-BF0E-451B4A8F7137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFFE700-AAFE-4F5B-B0E2-C3DA76DE492D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DDD82E-5D83-4581-B2F3-F12655BBF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0F0C91-171E-421D-BE86-11567DEFC7BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22D2621-D305-43CE-B00D-9A7563B061F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5D55E8-D3A3-4784-8AC6-CCB07E470AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F4245BA-B05C-49DE-B2E0-1E588209ED3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8633532B-9785-4259-8840-B08529E20DCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D9BD7E-FCC2-404B-A057-1A10997DAFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F935ED72-58F4-49C1-BD9F-5473E0B9D8CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADB75DC-8713-4F0C-9F06-30DA6F6EF6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EA52901-2D16-4F7E-BF5E-780B42A55D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A79DA2C-35F3-47DE-909B-8D8D1AE111C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF6952D-6308-4029-8B63-0BD9C648C60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94941F86-0BBF-4F30-8F13-FB895A11ED69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17522878-4266-432A-859D-C02096C8AC0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951FFCD7-EAC2-41E6-A53B-F90C540327E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1F2738-C7D6-4206-9227-43F464887FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98EEB6F2-A721-45CF-A856-0E01B043C317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02FDE602-A56A-477E-B704-41AF92EEBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A28B11A-3BC7-41BC-8970-EE075B029F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD3E84C-9A2E-4586-A09E-CBDEB1E7F695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EF54C08-5FF1-4D02-AA16-B13096BD566C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F3B31D-8974-4016-ACAF-E7A917C99F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB203AEC-2A94-48CA-A0E0-B5A8EBF028B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E98B82A-22E5-4E6C-90AE-56F5780EA147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34672E90-C220-436B-9143-480941227933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92883AFA-A02F-41A5-9977-ABEAC8AD2970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989A78F8-EE92-465F-8A8D-ECF0B58AFE7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5B6627-B4A4-4E2D-B96C-CA37CCC8C804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFB09F3-32D1-479C-8C39-D7329D9A6623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56581E2-9ECD-426A-96D8-A9D958900AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717F6995-5AF0-484C-90C0-A82F25FD2E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0C01D5-773F-469C-9E69-170C2844AAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB03FDFB-4DBF-4B70-BFA3-570D1DE67695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5CF79C-759B-4FF9-90EE-847264059E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "357651FD-392E-4775-BF20-37A23B3ABAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585B9476-6B86-4809-9B9E-26112114CB59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6145036D-4FCE-4EBE-A137-BDFA69BA54F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E437055A-0A81-413F-AB08-0E9D0DC9EA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9276A093-9C98-4617-9941-2276995F5848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C9C36C-EF7E-4D42-9749-E2FF6CE35A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98575E2-E39A-4A8F-B5B5-BD280B8367BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDA08E7-A417-44E8-9C89-EB22BEEC3B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD1B6BE-CF07-4DA8-A703-4A48506C8AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5878E08E-2741-4798-94E9-BA8E07386B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F6BAB7-C099-4345-A632-7287AEA555B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3AAF031-D16B-4D51-9581-2D1376A5157B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51120689-F5C0-4DF1-91AA-314C40A46C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F67477AB-85F6-421C-9C0B-C8EFB1B200CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D0C265-2ED9-42CF-A7D6-C7FAE4246A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D70CFD9-B55D-4A29-B94C-D33F3E881A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E3C039-A949-4F1B-892A-57147EECB249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F28C7801-41B9-4552-BA1E-577967BCBBEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25B21085-7259-4685-9D1F-FF98E6489E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "635EE321-2A1F-4FF8-95BE-0C26591969D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A81B035-8598-4D2C-B45F-C6C9D4B10C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1096947-82A6-4EA8-A4F2-00D91E3F7DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C95ADA4-66F5-45C4-A677-ACE22367A75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11951A10-39A2-4FF5-8C43-DF94730FB794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "351E5BCF-A56B-4D91-BA3C-21A4B77D529A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC2BBB4-171E-4EFF-A575-A5B7FF031755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6B0504-27C1-4824-A928-A878CBBAB32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D903956B-14F5-4177-AF12-0A5F1846D3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F847DC-A2F5-456C-9038-16A0E85F4C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN87272440/index.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127420533226623&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129070310906557&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=133469267822771&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=136485229118404&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35326",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35344",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35788",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/42368",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1022331",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=742915&view=rev",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=781362&view=rev",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-6.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2011/dsa-2207",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:136",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:138",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:176",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504044/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35193",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1496",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1856",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50928",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10231",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19110",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5739",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN87272440/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127420533226623&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129070310906557&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=133469267822771&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=136485229118404&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/42368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=742915&view=rev",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=781362&view=rev",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2011/dsa-2207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504044/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0580",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-05T16:00:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter."
      }, {
        "lang" : "es",
        "value" : "Apache Tomcat v4.1.0 hasta v4.1.39, v5.5.0 hasta v5.5.27, y v6.0.0 hasta v6.0.18, cuando se utiliza autenticación FORM, permite a atacantes remotos enumerar nombres de usuarios válidos a través de una solicitud a /j_security_check con codificación malformada de URL de contraseñas. Está relacionado con una comprobación de errores incorrecta en los entornos de autenticación (1) MemoryRealm, (2) DataSourceRealm y (3) JDBCRealm; como se ha demostrado con un valor % (porcentaje) en el parámetro j_password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E300013-0CE7-4313-A553-74A6A247B3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D7414-8D0C-45D6-8E87-679DF0201D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB15C5DB-0DBE-4DAD-ACBD-FAE23F768D01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60CFD9CA-1878-4C74-A9BD-5D581736E6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E52BE7-5281-4430-8846-E41CF34FC214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02860646-1D72-4D9A-AE2A-5868C8EDB3AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BE4B9B5-9C2E-47E1-9483-88A17264594F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BE92A9B-4B8C-468E-9162-A56ED5313E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE21D455-5B38-4B07-8E25-4EE782501EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9AE125C-EB8E-4D33-BB64-1E2AEE18BF81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47588ABB-FCE6-478D-BEAD-FC9A0C7D66DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.9:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDA8066-294D-431E-B026-C03707DFBCD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C92F3744-C8F9-4E29-BF1A-25E03A32F2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "084B3227-FE22-43E3-AE06-7BB257018690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DDA1D1-1DB2-4FD6-90A6-7DDE2FDD73F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BFF1D5-2E34-4A01-83A7-6AA3A112A1B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D536FF4-7582-4351-ABE3-876E20F8E7FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C03E4C9-34E3-42F7-8B73-D3C595FD7EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB43F47F-5BF9-43A0-BF0E-451B4A8F7137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFFE700-AAFE-4F5B-B0E2-C3DA76DE492D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DDD82E-5D83-4581-B2F3-F12655BBF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0F0C91-171E-421D-BE86-11567DEFC7BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22D2621-D305-43CE-B00D-9A7563B061F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5D55E8-D3A3-4784-8AC6-CCB07E470AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F4245BA-B05C-49DE-B2E0-1E588209ED3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8633532B-9785-4259-8840-B08529E20DCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D9BD7E-FCC2-404B-A057-1A10997DAFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F935ED72-58F4-49C1-BD9F-5473E0B9D8CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADB75DC-8713-4F0C-9F06-30DA6F6EF6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EA52901-2D16-4F7E-BF5E-780B42A55D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A79DA2C-35F3-47DE-909B-8D8D1AE111C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF6952D-6308-4029-8B63-0BD9C648C60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94941F86-0BBF-4F30-8F13-FB895A11ED69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17522878-4266-432A-859D-C02096C8AC0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951FFCD7-EAC2-41E6-A53B-F90C540327E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1F2738-C7D6-4206-9227-43F464887FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98EEB6F2-A721-45CF-A856-0E01B043C317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02FDE602-A56A-477E-B704-41AF92EEBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A28B11A-3BC7-41BC-8970-EE075B029F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD3E84C-9A2E-4586-A09E-CBDEB1E7F695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EF54C08-5FF1-4D02-AA16-B13096BD566C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:4.1.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F3B31D-8974-4016-ACAF-E7A917C99F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB203AEC-2A94-48CA-A0E0-B5A8EBF028B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E98B82A-22E5-4E6C-90AE-56F5780EA147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34672E90-C220-436B-9143-480941227933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92883AFA-A02F-41A5-9977-ABEAC8AD2970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989A78F8-EE92-465F-8A8D-ECF0B58AFE7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5B6627-B4A4-4E2D-B96C-CA37CCC8C804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFB09F3-32D1-479C-8C39-D7329D9A6623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56581E2-9ECD-426A-96D8-A9D958900AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717F6995-5AF0-484C-90C0-A82F25FD2E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0C01D5-773F-469C-9E69-170C2844AAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB03FDFB-4DBF-4B70-BFA3-570D1DE67695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5CF79C-759B-4FF9-90EE-847264059E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "357651FD-392E-4775-BF20-37A23B3ABAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585B9476-6B86-4809-9B9E-26112114CB59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6145036D-4FCE-4EBE-A137-BDFA69BA54F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E437055A-0A81-413F-AB08-0E9D0DC9EA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9276A093-9C98-4617-9941-2276995F5848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C9C36C-EF7E-4D42-9749-E2FF6CE35A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98575E2-E39A-4A8F-B5B5-BD280B8367BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDA08E7-A417-44E8-9C89-EB22BEEC3B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD1B6BE-CF07-4DA8-A703-4A48506C8AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5878E08E-2741-4798-94E9-BA8E07386B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F6BAB7-C099-4345-A632-7287AEA555B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3AAF031-D16B-4D51-9581-2D1376A5157B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51120689-F5C0-4DF1-91AA-314C40A46C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F67477AB-85F6-421C-9C0B-C8EFB1B200CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D0C265-2ED9-42CF-A7D6-C7FAE4246A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D70CFD9-B55D-4A29-B94C-D33F3E881A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E3C039-A949-4F1B-892A-57147EECB249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F28C7801-41B9-4552-BA1E-577967BCBBEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25B21085-7259-4685-9D1F-FF98E6489E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "635EE321-2A1F-4FF8-95BE-0C26591969D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A81B035-8598-4D2C-B45F-C6C9D4B10C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1096947-82A6-4EA8-A4F2-00D91E3F7DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C95ADA4-66F5-45C4-A677-ACE22367A75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11951A10-39A2-4FF5-8C43-DF94730FB794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "351E5BCF-A56B-4D91-BA3C-21A4B77D529A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC2BBB4-171E-4EFF-A575-A5B7FF031755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6B0504-27C1-4824-A928-A878CBBAB32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D903956B-14F5-4177-AF12-0A5F1846D3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F847DC-A2F5-456C-9038-16A0E85F4C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127420533226623&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129070310906557&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=133469267822771&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=136485229118404&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35326",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35344",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35788",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/42368",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1022332",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=747840&view=rev",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=781379&view=rev",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=781382&view=rev",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-6.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2011/dsa-2207",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:136",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:138",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:176",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504045/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504108/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504125/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35196",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1496",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1856",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50930",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18915",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6628",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127420533226623&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129070310906557&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=133469267822771&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=136485229118404&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/42368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=747840&view=rev",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=781379&view=rev",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=781382&view=rev",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2011/dsa-2207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504045/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504108/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504125/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0783",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-05T16:00:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application."
      }, {
        "lang" : "es",
        "value" : "Apache Tomcat v4.1.0 hasta la v4.1.39, v5.5.0 hasta la v5.5.27 y v6.0.0 hasta la v6.0.18 permite a las aplicaciones web reemplazar un \"parser\" (extractor de información) XML utilizado por otras aplicaciones web, lo que permite a los usuarios locales leer o modificar los ficheros (1) web.xml, (2) context.xml o (3) ficheros tld de aplicaciones web de su elección a través de una aplicacion manipulada que es cargada antes de la aplicación web objetivo del ataque."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndIncluding" : "4.1.39",
            "matchCriteriaId" : "FABEAD3F-1066-4802-BDFD-5F42406D2963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.27",
            "matchCriteriaId" : "88DD2300-F68E-4BD9-A511-7E9F1A6DD43B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.18",
            "matchCriteriaId" : "7888A749-8246-491C-AF4E-10762170ECE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127420533226623&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129070310906557&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=136485229118404&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35788",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42368",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=652592&view=rev",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=681156&view=rev",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=739522&view=rev",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=781542&view=rev",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=781708&view=rev",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-6.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2011/dsa-2207",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:136",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:138",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:176",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504090/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35416",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022336",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1856",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3056",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51195",
        "source" : "secalert@redhat.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/bugzilla/show_bug.cgi?id=29936",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://issues.apache.org/bugzilla/show_bug.cgi?id=45933",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10716",
        "source" : "secalert@redhat.com",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18913",
        "source" : "secalert@redhat.com",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6450",
        "source" : "secalert@redhat.com",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127420533226623&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129070310906557&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=136485229118404&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=652592&view=rev",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=681156&view=rev",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=739522&view=rev",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=781542&view=rev",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?rev=781708&view=rev",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tomcat.apache.org/security-6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2011/dsa-2207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504090/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/bugzilla/show_bug.cgi?id=29936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://issues.apache.org/bugzilla/show_bug.cgi?id=45933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1162",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-06-05T16:00:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Spam Quarantine login page in Cisco IronPort AsyncOS before 6.5.2 on Series C, M, and X appliances allows remote attackers to inject arbitrary web script or HTML via the referrer parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la página de login Spam Quarantine en Cisco IronPort AsyncOS anterior a v6.5.2 en las Series C, M y X, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del parámetro \"referer\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ironport_asyncos:6.0.0-754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477A66C5-9B97-4363-8374-7AAD50A6203A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ironport_asyncos:6.0.0-757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DB8C2D-5C38-4171-AE6F-FB224AEC3225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ironport_asyncos:6.1.0-301:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1913AA9-2FF7-43BF-902A-A0730D375580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ironport_asyncos:6.1.0-304:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22339A19-2486-4916-B63F-8D0095CE2CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ironport_asyncos:6.1.0-306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD01E9B8-6787-4658-9E45-2B4916BB0409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ironport_asyncos:6.1.0-307:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30A807C2-CE36-4760-BC2A-D9A6AEA1D65B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ironport_asyncos:6.1.5-110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5134EEAA-DE71-4283-B3D3-2923749EE92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ironport_asyncos:6.1.6-003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB855ED-197C-4CAC-A5B8-E02D598320EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ironport_asyncos:6.3.5-003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99C6CBC-4044-45A1-B79C-C54E4A13F41B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ironport_asyncos:6.3.6-003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29EB3C86-E8EF-4AE2-A8DC-C0B912F27F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ironport_asyncos:6.5.0-405:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4716DAB7-C9E9-47DE-946B-B5B8F0768985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ironport_asyncos:6.5.1-005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F240870-D97A-458A-9485-24CAD3816E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ironport_asyncos:6.6.4.0-273:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A6548C-217F-4496-8DF2-4EF2A775BF7D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_email_security_appliances:*:c:*:*:*:*:*:*",
            "matchCriteriaId" : "C9211A16-3F60-4FEF-9164-93A8DC447A76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_email_security_appliances:*:m:*:*:*:*:*:*",
            "matchCriteriaId" : "202BD85B-AE22-4638-A344-E5C75C4CC243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ironport_email_security_appliances:*:x:*:*:*:*:*:*",
            "matchCriteriaId" : "79F52D0C-C0D9-4802-9A07-968F6F68C038"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54884",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/34895",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18365",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35203",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022335",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50948",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/54884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T16:00:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Terminal in Apple Mac OS X 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted size value in a CSI[4 xterm resize escape sequence that triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de entero en Terminal de Apple Mac OS X en sus versiones v10.5  anteriores a v10.5.7. Permite a atacantes remotos ejecutar código de su elección o ejecutar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de valores de tamaño manipulados en la secuencia de escape de redimensionamiento de xterm CSI[4, lo que provoca un desbordamiento de buffer de la memoria dinámica (heap)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dvlabs.tippingpoint.com/advisory/TPTI-09-04",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022322",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504031/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35182",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dvlabs.tippingpoint.com/advisory/TPTI-09-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504031/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T16:00:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kerberos in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_117, does not properly manage credential caches, which allows local users to access Kerberized NFS mount points and Kerberized NFS shares via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Kerberos in Sun Solaris 8, 9, y 10, y OpenSolaris anterior a snv_117, no administra adecuadamente las credenciales de caché, lo que permite a usuarios locales acceder a puntos de montaje \"Kerberized NFS\" y recursos compartidos \"Kerberized NFS\" a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_107",
            "matchCriteriaId" : "193ABD0A-63E6-40C2-83B8-28DD57578CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_116",
            "matchCriteriaId" : "DBA048BA-7DEB-4B74-90FD-4ABEE29969C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_116",
            "matchCriteriaId" : "7312C64F-4DA3-4382-82B7-BB47733CB03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "053A0DA6-483C-49BB-BC7A-E624DB2C269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "447212A4-FACD-475E-A62B-60FE6504F63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB694DC0-407A-4555-8B72-DAF3C169DCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "78B80C92-7EB5-4343-B830-32E8C011E572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "535FF689-13A2-40C6-8706-7782038FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DBDFD8C-371E-42D2-9635-D8CDD1775984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140841-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-252787-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-210.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140841-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-252787-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-210.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T16:00:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Reverse Proxy Plug-in in Sun Java System Web Server 6.1 before SP11 allows remote attackers to inject arbitrary web script or HTML via the query string in situations that result in a 502 Gateway error."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Reverse Proxy Plug-in en Sun Java System Web Server v6.1 anterior a SP11, permite a atacantes remotos la inyección de código web y HTML de su elección a través de una consulta de cadena en situaciones resultantes de un error \"502 Gateway\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp10:aix:*:*:*:*:*",
            "matchCriteriaId" : "C432A6A6-E063-49F5-9784-0E34B5F843EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp4:aix:*:*:*:*:*",
            "matchCriteriaId" : "389FD567-59F5-47C3-B000-E916357889DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp5:aix:*:*:*:*:*",
            "matchCriteriaId" : "A58B50D0-CBEA-43D5-9537-E9418B13CDA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp6:aix:*:*:*:*:*",
            "matchCriteriaId" : "131D4D0F-D73B-434A-845E-9788EE48915B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp7:aix:*:*:*:*:*",
            "matchCriteriaId" : "698DCBEF-41C5-474E-BE60-0BC285A89B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp8:aix:*:*:*:*:*",
            "matchCriteriaId" : "D0518BE3-1E9A-4974-9805-E70CB95ADC40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp9:aix:*:*:*:*:*",
            "matchCriteriaId" : "A53CE597-7827-4BDD-A922-23829485A1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "566250FE-D1E1-43CE-9255-99B8AC1FD0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp1:aix:*:*:*:*:*",
            "matchCriteriaId" : "9A6494E5-72D1-43E0-ABEE-16D23D167801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp2:aix:*:*:*:*:*",
            "matchCriteriaId" : "1AD96005-4158-4962-BD8E-3CED7CF3E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp3:aix:*:*:*:*:*",
            "matchCriteriaId" : "725A8D67-7742-4BE2-AADE-E76BC880A9E3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp10:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "43511DA8-A07B-4927-9FB2-CF2429BC50C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp4:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "F84E3EFA-4013-4538-A32B-59B4EE874D4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp5:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "2E956D83-8463-4A5C-9D7F-CED9A43E3C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp6:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "84E5E3A8-1938-4CB4-9673-196F4E6D37C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp7:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "E2281A43-3C8D-470F-8F95-B63AA5F27BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp8:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "98952019-7F68-4A6B-810C-829A82A472E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp9:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "4E3A50B8-050E-401E-8B7C-700B3B478FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "92F78B4D-89AC-4941-9E32-8FD21F3DC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp1:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "B80D8913-987A-4316-BC53-16236B4356F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp2:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "3E69834C-A381-4AC6-B42E-F19E199D5A93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp3:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "57A273B7-CDB6-4F47-AFE3-3864DCC01E4A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp10:linux:*:*:*:*:*",
            "matchCriteriaId" : "99520DA9-10F0-43E8-8A77-2FDA676922C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp4:linux:*:*:*:*:*",
            "matchCriteriaId" : "5165C493-78EC-44FC-9401-4BC9BB4D857B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp5:linux:*:*:*:*:*",
            "matchCriteriaId" : "7A4F803A-14B6-47FB-92C6-7E4BE435A2C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp6:linux:*:*:*:*:*",
            "matchCriteriaId" : "7276CA8E-4DEC-4B84-8D3B-1F59AE192987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp7:linux:*:*:*:*:*",
            "matchCriteriaId" : "9CE812CB-48A5-44AB-AB92-420C1F9B8396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp8:linux:*:*:*:*:*",
            "matchCriteriaId" : "8C227B78-F34D-48B3-B150-EA91B6CA74FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp9:linux:*:*:*:*:*",
            "matchCriteriaId" : "1004FBF0-AD2A-45A0-A4D7-E24EFC41A558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "88A61895-37FC-462F-928D-65BF02A0676D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp1:linux:*:*:*:*:*",
            "matchCriteriaId" : "DE360D60-0894-4E3F-AE2A-A135C4382D3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp2:linux:*:*:*:*:*",
            "matchCriteriaId" : "361DF0F9-1808-495E-8189-BFBC3AD082F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp3:linux:*:*:*:*:*",
            "matchCriteriaId" : "2DD5222B-BFF5-4FFF-BD91-5B2CBDE14312"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp10:windows:*:*:*:*:*",
            "matchCriteriaId" : "A7BDC9E6-87C4-4AE1-AEAD-518CCFF853E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp4:windows:*:*:*:*:*",
            "matchCriteriaId" : "A018481B-EB48-4C4E-A1E4-324DCC437441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp5:windows:*:*:*:*:*",
            "matchCriteriaId" : "B0FEC983-91A6-4708-8308-B77B0FD2D9DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp6:windows:*:*:*:*:*",
            "matchCriteriaId" : "431D609A-AA61-4C7C-8F4A-8B01DB2E32E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp7:windows:*:*:*:*:*",
            "matchCriteriaId" : "37CBE122-47ED-4659-B15A-55FAF15BA63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp8:windows:*:*:*:*:*",
            "matchCriteriaId" : "E3866A08-0CFA-473D-BBE5-4736282A6446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp9:windows:*:*:*:*:*",
            "matchCriteriaId" : "4541C58C-45F1-4F17-82B9-E33BE693D8DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3B3825DF-E190-4B15-8160-CAFACDDE7686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp1:windows:*:*:*:*:*",
            "matchCriteriaId" : "91B10E76-4D66-42B2-BC3B-86F158078CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp2:windows:*:*:*:*:*",
            "matchCriteriaId" : "D2311610-C676-4F41-8F64-224C074C8295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp3:windows:*:*:*:*:*",
            "matchCriteriaId" : "A3C45222-B840-446B-ADF3-08C09A8B52CE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp10:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A280F4D8-13D9-407B-A5C7-E85D7E83A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp4:sparc:*:*:*:*:*",
            "matchCriteriaId" : "348671B8-279F-426B-A00B-5948297EDFFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp5:sparc:*:*:*:*:*",
            "matchCriteriaId" : "45088B1A-D4C7-4FA9-AE39-5B0D2941A8AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp6:sparc:*:*:*:*:*",
            "matchCriteriaId" : "55BC4F3F-51D0-432A-96D5-65C7599F9832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp7:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C434356D-DAB3-4B78-B1D2-AEB8EC69CE32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp8:sparc:*:*:*:*:*",
            "matchCriteriaId" : "300FA553-5FE3-4036-B80B-C4806C865660"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp9:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D35923A0-BF2C-400F-BE43-A13B67E4ED89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4DB66630-4A2A-44F2-971C-3B353F687868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp1:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CB79BECF-1413-438F-9741-CC3BE256E1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp2:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ACAFC237-58BC-4CB1-948C-A2D9B3742809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp3:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4B0293BA-6694-4FD0-93FE-7F674AA2A604"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp10:x86:*:*:*:*:*",
            "matchCriteriaId" : "80CB7673-2A98-434B-99A3-24DB4686CDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp4:x86:*:*:*:*:*",
            "matchCriteriaId" : "6BBCB1B9-965D-41C9-81A4-A7470AE46D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp48:x86:*:*:*:*:*",
            "matchCriteriaId" : "B2F944E7-F894-42D8-8167-BCC2DEE10BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp5:x86:*:*:*:*:*",
            "matchCriteriaId" : "09FB3270-1242-4EE9-86B7-7B841DEF2533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp6:x86:*:*:*:*:*",
            "matchCriteriaId" : "70901AC0-E2E5-4C8C-B903-105AF7528D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp7:x86:*:*:*:*:*",
            "matchCriteriaId" : "440814EC-4215-4ACB-912F-DA75C5CD1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp9:x86:*:*:*:*:*",
            "matchCriteriaId" : "17466643-0B26-4D65-B2FD-C958D906BE91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DF9C742B-C0C4-46D5-A7DA-025852069BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp1:x86:*:*:*:*:*",
            "matchCriteriaId" : "3378607F-5EF7-4C11-8254-6A44A03B8BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "7ACFC436-5A5C-4E31-957F-ED5127ECDB02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.1:sp3:x86:*:*:*:*:*",
            "matchCriteriaId" : "D5E51FAA-1DD4-478F-B439-D344C33AE355"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35338",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-116648-23-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-259588-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-211.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-116648-23-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-259588-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-211.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T18:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "_functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass a protection mechanism to conduct remote file inclusion and directory traversal attacks, execute arbitrary PHP code, or read arbitrary files via the GLOBALS[prefix] parameter, a different vector than CVE-2003-1500."
      }, {
        "lang" : "es",
        "value" : "_functions.php de cpCommerce v.1.2.x, posiblemente incluyendo la 1.2.9, envía una redirección pero no finaliza cuando es llamado directamente, lo que permite a atacantes remotos evitar el mecanismo de protección para evitar los ataques de inclusión de ficheros remotos y de salto de directorio, ejecutar código PHP o leer archivos de su elección, a través del parámetro GLOBALS[prefix], un vector de ataque diferente al CVE-2003-1500."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpcommerce_project:cpcommerce:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndIncluding" : "1.2.9",
            "matchCriteriaId" : "47DF7292-D606-4D4E-A8B0-F1475210AF26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35245",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35103",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8790",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/35245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1937",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T18:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the comment posting feature in LightNEasy 2.2.1 \"no database\" (aka flat) and 2.2.2 SQLite allows remote attackers to inject arbitrary web script or HTML via the (1) commentname (aka Author), (2) commentemail (aka Email), and (3) commentmessage (aka Comment) parameters.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en funcionalidad de realizar comentarios de LightNEasy v2.2.1 \"no database\" (sin base de datos o \"flat\") and 2.2.2 SQLite. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de los parámetros (1) \"commentname\" (autor), (2) \"commentemail\" (dirección de correo) y (3) \"commentmessage\" (comentario).  NOTA: algunos de estos detalles han sido obtenidos de información proveniente de terceras partes"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lightneasy:lightneasy:2.2.1:*:no_database:*:*:*:*:*",
            "matchCriteriaId" : "F4B08A25-69F3-4396-B9B6-37BB0B2B7DED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lightneasy:lightneasy:2.2.2:*:sqlite:*:*:*:*:*",
            "matchCriteriaId" : "EBFCAB31-D17F-4C40-A81B-66B0C7500EAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1081-intern0t-lightneasy-2-2-2-html-injection-vulnerability.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35354",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504092/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1081-intern0t-lightneasy-2-2-2-html-injection-vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504092/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T18:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to database output and the frontend administrative panel."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Joomla! v.1.5.x hasta la v1.5.10. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de vectores de ataque no especificados relacionados con la salida de la base de datos y el panel de administración de \"frontend\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2017D307-89B3-4D94-A266-C7D8D45960A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "302D47E2-CFA8-438C-82DB-335319454448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "94B01AD8-2B71-4A6A-8932-E61B0FE54246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1058A361-4B10-4D7C-B789-64A38FE7E201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D548B3C9-483F-492C-A6BB-694B7217FEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9813E813-2983-4471-9E56-6F254810A66B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F4F9E7-BA44-4235-A246-DB6C432C3873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "495BD724-45BE-4214-B120-3A83BD9AD11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCDBF4D-A797-4828-A084-8C775FA94BDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1B7CF2-B717-4F37-A923-0E188FF3C47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3333C204-A022-4B53-B61F-3C5601F21FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2752717-AA95-4398-8091-24FD5925C4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B3B3FB-E67D-4D9A-BE01-855FA2545772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29D3E39-7B43-4D19-B39F-2EB56E30F737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F155C3B-AAF5-4393-A964-E655113D84DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DA8EEE-F091-49D0-9F9D-4C83574B6A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "731CC868-70FC-44A0-8CC2-D0A4AC5CE094"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.joomla.org/security/news/297-20090602-core-frontend-xss.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35278",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/announcements/release-news/5235-joomla-1511-security-release-now-available.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/54868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35189",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.joomla.org/security/news/297-20090602-core-frontend-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/announcements/release-news/5235-joomla-1511-security-release-now-available.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/54868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T18:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the JA_Purity template for Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en plantilla \r\nJA_Purity para Joomla! v1.5.x hasta v1.5.10 permite a atacantes remotos inyectar HTML y secuencias de comandos web a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F243A8-5513-4BB7-AB55-5A715D5AE546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F95550B4-3620-42D8-99AC-369126CDDFAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0429EF-3848-4E72-999E-719DB54A7429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F12537ED-A4EB-40F9-AC00-B796169E114D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCDBF4D-A797-4828-A084-8C775FA94BDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1B7CF2-B717-4F37-A923-0E188FF3C47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3333C204-A022-4B53-B61F-3C5601F21FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2752717-AA95-4398-8091-24FD5925C4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B3B3FB-E67D-4D9A-BE01-855FA2545772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29D3E39-7B43-4D19-B39F-2EB56E30F737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F155C3B-AAF5-4393-A964-E655113D84DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DA8EEE-F091-49D0-9F9D-4C83574B6A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "731CC868-70FC-44A0-8CC2-D0A4AC5CE094"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.joomla.org/security/news/296-20090602-core-japurity-xss.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35278",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/announcements/release-news/5235-joomla-1511-security-release-now-available.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35189",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.joomla.org/security/news/296-20090602-core-japurity-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/announcements/release-news/5235-joomla-1511-security-release-now-available.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T18:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the administrator panel in the com_users core component for Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el panel panel administrador del componente com_users de Joomla! en las versiones v.1.5.x hasta la v1.5.10. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de vectores de ataque no especificados.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2017D307-89B3-4D94-A266-C7D8D45960A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCDBF4D-A797-4828-A084-8C775FA94BDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1B7CF2-B717-4F37-A923-0E188FF3C47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3333C204-A022-4B53-B61F-3C5601F21FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2752717-AA95-4398-8091-24FD5925C4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B3B3FB-E67D-4D9A-BE01-855FA2545772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29D3E39-7B43-4D19-B39F-2EB56E30F737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F155C3B-AAF5-4393-A964-E655113D84DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DA8EEE-F091-49D0-9F9D-4C83574B6A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "731CC868-70FC-44A0-8CC2-D0A4AC5CE094"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.joomla.org/security/news/295-20090601-core-comusers-xss.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54869",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35278",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/announcements/release-news/5235-joomla-1511-security-release-now-available.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35189",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.joomla.org/security/news/295-20090601-core-comusers-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/announcements/release-news/5235-joomla-1511-security-release-now-available.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T18:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PAD Site Scripts 3.6 stores sensitive information under the web document root with insufficient access control, which allows remote attackers to download the database and obtain sensitive information via a direct request for dbbackup.txt."
      }, {
        "lang" : "es",
        "value" : "PAD Site Scripts v3.6 almacena información sensible bajo la carpeta raiz del servicio web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar la base de datos y obtener información sensible a través de peticiones directas a dbbackup.txt."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpeasycode:pad_site_scripts:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67B7D27-8236-4948-9A64-8895634231A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T18:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Quiz module 5.x, 6.x-2.x before 6.x-2.2, and 6.x-3.x before 6.x-3.0, a module for Drupal, allows remote authenticated users, with create quizzes or quiz questions access, to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el modulo para Drupal, Quiz v5.x, v6.x-2.x anterior a v6.x-2.2, v6.x-3.x anterior a v6.x-3.0, permite a usuarios remotos autenticados con acceso a la creación de cuestionarios o acceso a las preguntas de los cuestionarios, se podría inyectar secuencias de comandos web o HTML a través de vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:quiz:5.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1300BA4-0341-40A2-A580-4CEF4D70E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:quiz:6.x-2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAB35A7-147B-4EB2-B5E3-C1A1A205CC1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:quiz:6.x-2.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6466C8-070E-403D-A44D-4719BCB66ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:quiz:6.x-2.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18685B6-CC2B-4B82-8523-787E36D0856F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:quiz:6.x-2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D902AFF-0677-4299-9B7E-1082F7ABF979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:quiz:6.x-2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A34B6BBC-243C-4BE5-B069-20A2C2F9727C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:quiz:6.x-2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "38A5A7C7-869B-4FCC-A94E-12B3A09D94CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:quiz:6.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DDDB0A-D9BE-46E6-A26C-E8F88ACC3692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:quiz:6.x-2.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "6288701C-B559-4EE4-A5B3-48B779A1BD7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:quiz:6.x-3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70267A32-8329-417A-967E-8844E6CE6942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:quiz:6.x-3.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B51E500-6694-42A4-B3B9-FB15562CBA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:quiz:6.x-3.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "71A9F973-592A-41D7-AECD-80A633595277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:quiz:6.x-3.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "753F8DDB-DF9E-4B4C-9CA1-2A20510D57E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:quiz:6.x-3.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "C18710D5-4138-4D97-AD0E-68489E4D305F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:quiz:6.x-3.x:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E62D2DB-67CE-4747-B81C-DF1B8BC6D201"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/481270",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/481274",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/481308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54880",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35345",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35199",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/481270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/481274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/481308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T21:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers to execute arbitrary code via a long request to UDP port 62514."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el servicio IKE (ireIke.exe) en SafeNet SoftRemote anterior a v10.8.6, permite a atacantes remotos ejecutar código de su elección a través de una petición larga UDP al puerto 62514."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.5",
            "matchCriteriaId" : "73F3BFF9-3B88-4AD1-B9FC-C0A3AAD9D826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E58D092-7AEE-4930-BA65-6ABDCEA81941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B27AA9E6-544A-485F-9E44-9F66937AFCA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F911EB9-18A7-4B47-B8F1-A6E1A076D47B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C67DB6B-7FCB-400B-B269-0C0F710DC3CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B5B449-9A76-4D62-9B1F-1D108D0ABCA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CABA49-A4B1-41B2-A0C5-7F8CDDC253BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:10.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1457398-B204-4997-8091-EC943C4E1D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:10.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4525CF5B-5F19-4B0F-A068-B5D0557474F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:10.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC36359D-D57D-4CA0-B858-944593461DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:10.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA9352-5194-4F72-94DB-10696EA6E9D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:10.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B977AD44-76F4-4D43-9B06-D52046721AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote1.4:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E7D346-1F64-486D-A13F-FDA432A466A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35280",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503981/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1472",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-024/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-024/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T21:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in AIMP 2.51 build 330 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en AIMP v2.51 Build 330 permite a los atacantes remotos ejecutar arbitrariamente a través de un fichero MP3 con una etiqueta larga ID3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aimp:aimp:2.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3962078F-C5C3-4063-A940-E300D5107BBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35295",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://zeroscience.org/codes/aimp2_poc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://zeroscience.org/codes/aimp2_poc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T21:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in webCal3_detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL commands via the event_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en webCal3_detail.asp en WebCal v3.04 permite a los atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro envent_id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tzo:webcal:3.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D67B07-92A7-4DEA-B16A-B409A194FD4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T21:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in latestposts.php in AdaptBB 1.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the forumspath parameter."
      }, {
        "lang" : "es",
        "value" : "Inclusión remota de fichero PHP en latestposts.php de AdaptBB 1.0, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro forumspath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptbb:adaptbb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F879E3-0E12-416E-886C-7CCD2C9A1C7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54832",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35315",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T21:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the UnbDbEncode function in unb_lib/database.lib.php in Unclassified NewsBoard (UNB) 1.6.4 allows remote attackers to execute arbitrary SQL commands via the Query parameter in a search action to forum.php, a different vector than CVE-2005-3686."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la función UnbDbEncode en unb_lib/database.lib.php en Unclassified NewsBoard (UNB) v.1.6.4, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"Query\" en una acción de búsqueda a forum.php. Vector distinto de CVE-2005-3686."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsboard:unclassified_newsboard:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D7BF479-F568-458D-AC15-9E9D23D1F82A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35299",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35183",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T21:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in forum.php in Unclassified NewsBoard (UNB) 1.6.4, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to (1) read arbitrary recently-modified files via a .. (dot dot) in the GLOBALS[filename] parameter or (2) include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[UTE][__tplCollection][a][file] parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en forum.php en Unclassified NewsBoard (UNB) 1.6.4, cuando register_globals esta activado y magic_quotes_gpc desactivado, permite a los atacantes remotos (1) leer ficheros recientes de forma arbitraria a través de ..(punto punto) en el parámetro GLOBALS[nombre de fichero] o (2) incluir y ejecutar ficheros locales a través de un ..(punto punto) en el parámetro GLOBALS[UTE][__tplCollection][a][file]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unclassified:newsboard:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F786CD1-87EB-468C-8988-65F04CB0BACC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35299",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35183",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T21:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "import_wbb1.php in Unclassified NewsBoard (UNB) 1.6.4 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message."
      }, {
        "lang" : "es",
        "value" : "import_wbb1.php en Unclassified NewsBoard  (UNB) v1.6.4 permite a atacantes remotos obtener información sensible a través de una petición directa que muestra el directorio de instalación en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unclassified:newsboard:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F786CD1-87EB-468C-8988-65F04CB0BACC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T21:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in yorum.asp in WebEyes Guest Book 3 allows remote attackers to execute arbitrary SQL commands via the mesajid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en yorum.asp en WebEyes Guest Book 3, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"mesajid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahmet_donmez:webeyes_guest_book:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0691C10-4181-4F41-84BE-BA108D4D8ECE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35290",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T21:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in PropertyMax Pro FREE 0.3 allows remote attackers to inject arbitrary web script or HTML via the pl parameter in a mi action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en PropertyMax Pro FREE v0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"pl\" en una acción \"mi\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:propertymaxpro:propertymax_pro_free:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4398A7-F574-4B56-BF8D-BC81C146AAFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35289",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-05T21:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the administrative login feature in PropertyMax Pro FREE 0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en la funcionalidad de autenticación administrativa de PropertyMax Pro FREE v0.3, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) username -nombre de usuario- y (2) password -contraseña-."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:propertymaxpro:propertymax_pro_free:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4398A7-F574-4B56-BF8D-BC81C146AAFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35289",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0023",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-08T01:00:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server, (2) the SVNMasterURI directive in the mod_dav_svn module in the Apache HTTP Server, (3) the mod_apreq2 module for the Apache HTTP Server, or (4) an application that uses the libapreq2 library, which triggers a heap-based buffer underflow."
      }, {
        "lang" : "es",
        "value" : "La función apr_strmatch_precompile en strmatch/apr_strmatch.c en Apache APR-util anteriores a v1.3.5 permite a los atacantes remotos causar una denegación de servicio (caída del demonio) a través de una entrada manipulada en 1) un fichero .htaccess utilizado con el Servidor Apache HTTP, (2) la directiva SVNMasterURI en el módulo mod_dav_svn en el Servidor Apache HTTP, (3) el módulo mod_apreq2 para el Servidor Apache HTTP, o (4) una aplicación que utiliza la librería libapreq2, relativa a un \"bandera de desbordamiento inferior\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.4",
            "matchCriteriaId" : "16176496-B955-4F98-A395-9709C927D9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EC87975-74CA-42E6-84ED-0DD2BF9FFC78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A896FA5-D3FC-4BD9-965A-C9A72D62780D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8EDB1D0-82A9-462F-9B3B-0EDF452341E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DFFEDC-F5C7-47C7-95A9-6BF4208A1B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87B09F2-ECEA-409D-B27B-0747280D4AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67AB6223-9546-4906-B502-C82E3969FC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6459BE22-2334-48B3-85B8-5BEEB05A5399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A24FB91C-33BC-4305-AD53-0385E3B3F091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617C8C4B-8367-4EFB-8DA1-88986F6CDACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D85D6B73-F2CB-427D-9896-6BA79BE96FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39B4A447-29CC-4D35-B25D-FA845785E66B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08B50283-4187-42F7-A2A3-F5789706708B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FD8140-F1E0-4F99-ACDA-926C0ACDC00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61D253E8-528E-47B3-887A-C540A8D91E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1CD8A7-6F0A-4BEB-8E8A-BEDAB71921E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D0594C-E2FF-4557-80E6-8F51A4D94F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E706184-E7BC-452F-82FE-72EA8C37F4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "867962AD-8EF4-4DC4-96F6-77896CEF3F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB78030-8C3B-4ACA-B62B-DC5DC5FBD073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53CBDDE-D914-49A8-B65C-9352487B3CBA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.12",
            "matchCriteriaId" : "8BBBCFC4-2CFE-42A2-BE6F-2710EB3921A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129190899612998&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34724",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35284",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35360",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35395",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35444",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35487",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35565",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35710",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35797",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35843",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37221",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-03.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.538210",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=779880",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0144",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK88341",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1812",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:131",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1107.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1108.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507855/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35221",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-786-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-787-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1907",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503928",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50964",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10968",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12321",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129190899612998&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.538210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=779880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK88341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1107.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1108.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507855/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-786-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-787-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T01:00:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.0.0 through 2.52, 7.50, and 7.51 on Windows allows remote attackers to access DDMI agents via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en HP Discovery & Dependency Mapping Inventory (DDMI) v2.0.0 hasta v2.52, v7.50 y v7.51 para Windows, permite a atacantes remotos acceder a agentes DDMI a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC9B663-FDB9-4F2D-9CBA-8659EA3D948D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AB308F9-8C1A-4A3D-AC33-D7DE3A241214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB9AE16-BB49-4A13-8B5A-DEDECC4433AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E2EBF0-7D21-4858-9D62-0544E6B54730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C965C9-63D4-4C44-B0F3-04AFD61ABD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EAE4D4E-522E-49AB-8D28-6BAD7E724B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93CF3351-84A7-4544-9D8F-478E59D5C053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27E22AF8-A097-44CD-9800-B5A35C6DAB36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AD06D9-F51D-41A9-9FC2-3DC4687D1A8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0463A9-A315-4C33-8205-13AF41FD9B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A23EEEEE-C00D-4529-9E7E-C6833C795E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF9E5202-3BE0-45A9-AC47-0B1DABDE16AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D68B93-258D-41AE-A151-9FA31F1186CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50164877-9D15-427D-B0D8-F6142902FA73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B34CE45-D8E0-4C97-80EB-3787E680852F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044B28F0-C1C5-4BE6-ADA7-28341024A1C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:7.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "146FFF61-C7B7-404C-9697-97AAF1138FAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=124423677616704&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35270",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1514",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124423677616704&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T01:00:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM FileNet Content Manager 4.0, 4.0.1, and 4.5, as used in IBM WebSphere Application Server (WAS) and Oracle BEA WebLogic Application Server, when the CE Web Services listener has a certain WSEAF configuration, does not properly restrict use of a cached Subject, which allows remote attackers to obtain access with the credentials of a recently authenticated user via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "IBM FileNet Content Manager v4.0, v4.0.1, y 4.5, usado en IBM WebSphere Application Server (WAS) y Oracle BEA WebLogic Application Server, cuando el \"listener\" (aplicación a la escucha)CE Web Services tiene una configuración WSEAF determinada, no restringe adecuadamente el uso de un \"Subject\" cacheado, lo que permite a atacantes remotos obtener acceso con credenciales de usuarios autenticados recientemente, a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:filenet_content_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3053EC9-6BCE-44CF-8CB7-432E91C3356D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:filenet_content_manager:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEDD182-2A22-44AB-A325-57C307819C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:filenet_content_manager:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19EF97D8-1C12-4E03-B3A6-D477A991DA02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35347",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21389281",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21389281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T01:00:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in portmapper (aka portmap) in IBM AIX 5.3 allows attackers to cause a denial of service (daemon hang) via unknown vectors, related to libtli."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en portmapper  (también conocido como portmap) en IBM AIX v5.3, permite a atacantes provocar una denegación de servicio (cuelgue de demonio) a través de vectores desconocidos, relacionado con libtli."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.software.ibm.com/aix/efixes/iz50802/IZ50802.53TL8SP6.epkg.Z",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ50802",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35211",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.software.ibm.com/aix/efixes/iz50802/IZ50802.53TL8SP6.epkg.Z",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ50802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T01:00:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564."
      }, {
        "lang" : "es",
        "value" : "El parseador XML en el interfaz apr_xml_* en xml/apr_xml.c en Apache APR-util anteriores a v1.3.7 tal y como es utilizado en los módulos mod_dav y mod_dav_svn en el servidor HTTP de Apache, permite a atacantes remotos producir una denegación de servicio (agotamiento de memoria) a través de un documento XML manipulado que contiene un gran numero de referencias anidadas, como se demostró en la petición PROPFIND, una vulnerabilidad similar a CVE-2003-1564."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-776"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.7",
            "matchCriteriaId" : "13B90E83-A762-4896-9E77-908FBA4B154A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.6.2",
            "matchCriteriaId" : "8333C974-DF5B-4098-A766-EB8D875817F5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD2D897-E321-4CED-92E0-11A98B52053C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "743CBBB1-C140-4FEF-B40E-FAE4511B1140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB5EDB-520B-4DEF-B06E-65CA13152824"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E290BD43-5AB2-4641-B4AC-BC99FFBF7833"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.12",
            "matchCriteriaId" : "8BBBCFC4-2CFE-42A2-BE6F-2710EB3921A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=apr-dev&m=124396021826125&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129190899612998&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/34724",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35284",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35360",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35395",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35444",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35487",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35565",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35710",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35797",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35843",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36473",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37221",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-03.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.538210",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=781403",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0123",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK88342",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1812",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:131",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/03/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1107.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1108.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506053/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35253",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-786-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-787-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1907",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1107",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10270",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12473",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8842",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "VDB Entry" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=apr-dev&m=124396021826125&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129190899612998&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/34724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.538210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=781403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK88342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/03/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1107.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1108.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506053/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-786-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-787-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "VDB Entry" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T01:00:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input."
      }, {
        "lang" : "es",
        "value" : "Error de superación de límite (off-by-one) en la función apr_brigade_vprintf de Apache APR-util anterior a v1.3.5 en plataformas big-endian, permite a atacantes remotos obtener información sensible o provocar una denegación de servicio (caída de la aplicación) a través de una entrada manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.4",
            "matchCriteriaId" : "16176496-B955-4F98-A395-9709C927D9BC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.12",
            "matchCriteriaId" : "8BBBCFC4-2CFE-42A2-BE6F-2710EB3921A9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129190899612998&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34724",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35284",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35395",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35487",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35565",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35710",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35797",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35843",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37221",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-03.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=768417",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK88341",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mail-archive.com/dev%40apr.apache.org/msg21591.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mail-archive.com/dev%40apr.apache.org/msg21592.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:131",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/06/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1107.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1108.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35251",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-786-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-787-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1907",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=504390",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11567",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12237",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129190899612998&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=768417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK88341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mail-archive.com/dev%40apr.apache.org/msg21591.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mail-archive.com/dev%40apr.apache.org/msg21592.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1107.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1108.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-786-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-787-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=504390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T01:00:00.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "charon/sa/ike_sa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid IKE_SA_INIT request that triggers \"an incomplete state,\" followed by a CREATE_CHILD_SA request."
      }, {
        "lang" : "es",
        "value" : "charon/sa/ike_sa.c del demonio charon de strongSWAN anterior a v4.3.1, permite a atacantes remotos provocar una denegación de servicio (referenca a puntero nulo y caída) a través de una solicitud IKE_SA_INIT no válida que provoca \"un estado incompleto\", seguido de una solicitud CREATE_CHILD_SA."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.0",
            "matchCriteriaId" : "A0771FD2-9FB2-4F00-AFB3-B44D124FC5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60B8687-A72A-4AF6-BDE9-795A1AC2F98B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5EA677-BC73-4139-BF09-ADE65C2502A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B10EB8-0A5B-4C63-9A7D-2F034C286E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F13A264-EA51-4B92-B102-5316E45DB32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "406E1E6C-EA61-4FB8-9B0F-CE823046B09E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F31D56AC-D037-42AE-B70F-C7700929DDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A3A15C-122A-4564-A2E3-CB0E7C314797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6806075C-2433-4CCB-919B-27979C79C8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3809AE25-E840-4DB3-879E-F678305EC11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "959DA882-CC63-45F7-BF08-55F38DD8E999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9313C88D-1C24-4623-87B4-ECA8285E28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08474171-A617-4163-BEAD-AA14F53A2BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5516113A-F0F6-478F-95F7-9B4FB2DC68B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D5E9376-3ED9-4A3D-83CE-7E1725F8F366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BFC4CB-91E9-4181-A390-F0CE0D12EE2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339E325D-B76C-400C-B332-7CA675C4F72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90373CD-E5C7-46BE-8C5F-22D3DE12A3E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8C12F9-A14F-4BC5-A2CC-18DADE8454C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C78E4DAD-B255-4666-927F-D82AC7396FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B602806-1420-4640-AD17-A2FEFDA6A967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A203ADA7-54C9-4F37-A254-0A5378BB9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1C417F-C18A-4902-B409-09DD023974B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235DBD81-E542-4FF7-A620-1872DC81D618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489F9DFA-5B24-4206-A306-0BAE849C2D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382D76A4-C2C6-4C1C-A0C0-757C372154DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BD021C-FDAC-4938-9390-D455577D30B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90B1AC8-4C97-49B8-B82B-6F2FF295FDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A977F561-D324-48EA-BAC5-66920F6BD584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBD1B4B-E11F-46D0-A7AE-5E0749F6E216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D09EEB6-386C-4A73-BC08-4243BDC49EE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE3B5F4-063F-4AE9-B589-932751182101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFD8D5D-7FB7-4B25-B1F2-7850348A6924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F75943-1327-4868-88D5-917D06BCF5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4BE9083-EF34-4B1A-A139-E779E9704F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC07651-4412-40B7-A6C2-9CBCC010CBE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC0D725F-4161-45BA-B1CE-99C2A75B7220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0050370A-4CF0-4772-B287-DD05C5827E92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5518A917-D5D1-4985-BF71-B1A34BD3D5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778D7442-F54A-47DF-B87B-3CFA3CF08799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4B1F28-B3B8-4E31-8E4E-25F5A29F3AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16984E6E-7CA8-4DC3-B800-FFE007617FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C85F0BE-7E89-4B79-A036-9238785BE705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFF4780-2F92-4DF3-878A-C7E2BD57E39C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C794994-9367-4BBB-8940-BBB44B7C1C5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082272D3-0FE4-4959-978A-FFF795B52CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFEF9B3-C7F7-4588-A174-FAFD39C04116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64C5AB11-3B59-4677-B544-28A22C413C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E595C454-4456-477A-BE51-75CEAB547E98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A40E983-4721-48FF-9EFB-702BA78DCB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E7FA4C-69EE-4225-99FF-0EAB4A6C0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DDF25EB-5509-4D79-8D26-A1CA1092089E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A558368F-D9B1-49DF-A64F-95909A4EE7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74348E15-FF47-4B4D-B062-2EAE3141C84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90985506-224F-4AE2-899E-93CA64025396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3386A9-3740-4861-84B0-AAAC5C01378E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E823F7-7162-440E-A113-7B1F437BF508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1DEE61-13CB-4810-81B6-2AEBF13619CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D82E08-D6BF-41E3-9C3D-52552C8753CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF06C431-DE35-4CCD-9DCE-ED9EE6A17464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C826191-A68F-4E02-945B-73F35AA580F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A316AF53-7E95-4E4F-8E50-22145F144CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D3F068-778E-4BB7-AB22-368714BE1BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96330C24-C1AB-4B00-A3CC-5CCD291E0069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF630C7-2AAB-4106-BAC9-AAE6FF278E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF58206E-3086-45AC-91B6-032EF55D5552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D636603-65D5-45DB-AF7F-DD01B3932914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97027262-849C-4DE9-90C9-0D9FBBC9F96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8658539D-27D8-47EE-9468-A6B625E6D45F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F9E10-000D-4F3B-BEA6-DEE87405B89B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.strongswan.org/CHANGES4.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.readme",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.strongswan.org/pipermail/users/2009-May/003457.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://download.strongswan.org/CHANGES4.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.readme",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.strongswan.org/pipermail/users/2009-May/003457.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T01:00:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "charon/sa/tasks/child_create.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKE_AUTH request without a (1) TSi or (2) TSr traffic selector."
      }, {
        "lang" : "es",
        "value" : "charon/sa/tasks/child_create.c en el demonio charon en strongSWAN anteriores a v4.3.1 conmuta el test NULL por cargas destructivas TSi y TSr, lo que permite a los atacantes remotos causar una denegación de servicio a través de una petición IKE__AUTH sin un (1) TSi o (2) un selector de tráfico TSr."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.9",
            "matchCriteriaId" : "A6739FBA-95D4-4C8F-B320-F27856A4D832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60B8687-A72A-4AF6-BDE9-795A1AC2F98B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5EA677-BC73-4139-BF09-ADE65C2502A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B10EB8-0A5B-4C63-9A7D-2F034C286E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F13A264-EA51-4B92-B102-5316E45DB32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "406E1E6C-EA61-4FB8-9B0F-CE823046B09E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F31D56AC-D037-42AE-B70F-C7700929DDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A3A15C-122A-4564-A2E3-CB0E7C314797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6806075C-2433-4CCB-919B-27979C79C8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3809AE25-E840-4DB3-879E-F678305EC11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "959DA882-CC63-45F7-BF08-55F38DD8E999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9313C88D-1C24-4623-87B4-ECA8285E28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08474171-A617-4163-BEAD-AA14F53A2BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5516113A-F0F6-478F-95F7-9B4FB2DC68B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D5E9376-3ED9-4A3D-83CE-7E1725F8F366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BFC4CB-91E9-4181-A390-F0CE0D12EE2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339E325D-B76C-400C-B332-7CA675C4F72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90373CD-E5C7-46BE-8C5F-22D3DE12A3E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8C12F9-A14F-4BC5-A2CC-18DADE8454C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C78E4DAD-B255-4666-927F-D82AC7396FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B602806-1420-4640-AD17-A2FEFDA6A967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A203ADA7-54C9-4F37-A254-0A5378BB9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1C417F-C18A-4902-B409-09DD023974B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235DBD81-E542-4FF7-A620-1872DC81D618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489F9DFA-5B24-4206-A306-0BAE849C2D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382D76A4-C2C6-4C1C-A0C0-757C372154DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BD021C-FDAC-4938-9390-D455577D30B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90B1AC8-4C97-49B8-B82B-6F2FF295FDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A977F561-D324-48EA-BAC5-66920F6BD584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBD1B4B-E11F-46D0-A7AE-5E0749F6E216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D09EEB6-386C-4A73-BC08-4243BDC49EE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE3B5F4-063F-4AE9-B589-932751182101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFD8D5D-7FB7-4B25-B1F2-7850348A6924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F75943-1327-4868-88D5-917D06BCF5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4BE9083-EF34-4B1A-A139-E779E9704F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC07651-4412-40B7-A6C2-9CBCC010CBE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC0D725F-4161-45BA-B1CE-99C2A75B7220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0050370A-4CF0-4772-B287-DD05C5827E92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5518A917-D5D1-4985-BF71-B1A34BD3D5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778D7442-F54A-47DF-B87B-3CFA3CF08799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4B1F28-B3B8-4E31-8E4E-25F5A29F3AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16984E6E-7CA8-4DC3-B800-FFE007617FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C85F0BE-7E89-4B79-A036-9238785BE705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFF4780-2F92-4DF3-878A-C7E2BD57E39C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C794994-9367-4BBB-8940-BBB44B7C1C5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082272D3-0FE4-4959-978A-FFF795B52CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFEF9B3-C7F7-4588-A174-FAFD39C04116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64C5AB11-3B59-4677-B544-28A22C413C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E595C454-4456-477A-BE51-75CEAB547E98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A40E983-4721-48FF-9EFB-702BA78DCB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E7FA4C-69EE-4225-99FF-0EAB4A6C0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DDF25EB-5509-4D79-8D26-A1CA1092089E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A558368F-D9B1-49DF-A64F-95909A4EE7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74348E15-FF47-4B4D-B062-2EAE3141C84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90985506-224F-4AE2-899E-93CA64025396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3386A9-3740-4861-84B0-AAAC5C01378E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E823F7-7162-440E-A113-7B1F437BF508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1DEE61-13CB-4810-81B6-2AEBF13619CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D82E08-D6BF-41E3-9C3D-52552C8753CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF06C431-DE35-4CCD-9DCE-ED9EE6A17464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C826191-A68F-4E02-945B-73F35AA580F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A316AF53-7E95-4E4F-8E50-22145F144CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D3F068-778E-4BB7-AB22-368714BE1BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96330C24-C1AB-4B00-A3CC-5CCD291E0069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF630C7-2AAB-4106-BAC9-AAE6FF278E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF58206E-3086-45AC-91B6-032EF55D5552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D636603-65D5-45DB-AF7F-DD01B3932914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97027262-849C-4DE9-90C9-0D9FBBC9F96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8658539D-27D8-47EE-9468-A6B625E6D45F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89ACA351-D10F-4D1A-95B0-4B2E329F1E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4D6E89-5313-4016-8A7E-036579330DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A8E226-FCEC-4545-A628-24F5A8103BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B944D80-A8B9-4034-A95B-BA92ADC8D4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5267BCC-A51C-4F3B-840C-49EF9C2A15F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CDCDB4B-2DF5-4394-B33A-08A4B6604D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66206A52-373C-4DBB-A3D7-2A7569C0181E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F9E10-000D-4F3B-BEA6-DEE87405B89B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F37DFE8-2996-4904-B733-7BAECA95CB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38209DC9-3BE6-49EF-8BA1-6E2BC5D24FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155EB8F5-7C3C-4293-91EE-62DA561DA54A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.strongswan.org/CHANGES4.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.readme",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.strongswan.org/pipermail/users/2009-May/003457.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://download.strongswan.org/CHANGES4.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.readme",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.strongswan.org/pipermail/users/2009-May/003457.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T01:00:00.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service (crash) via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow."
      }, {
        "lang" : "es",
        "value" : "Error de superación de límite (Off-by-one) en loa función event_wallops en fe-common/irc/fe-events.c en irssi v0.8.13, permite a los servidores de IRC remotos provocar una denegación de servicio (caída) a través de un comando vacío, lo que lanza un lectura de búfer por debajo de un byte (one-byte) o por el desbordamiento de búfer inferior de un byte (one-byte)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FFA993F-4826-4937-B51D-438CFF4E08EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.irssi.org/index.php?do=details&task_id=662",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.irssi.org/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/29/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-800-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://xorl.wordpress.com/2009/05/28/irssi-event_wallops-off-by-one-readwrite/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00146.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.irssi.org/index.php?do=details&task_id=662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.irssi.org/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/29/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-800-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xorl.wordpress.com/2009/05/28/irssi-event_wallops-off-by-one-readwrite/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00146.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T01:00:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the config_cascade[main][default][] parameter to doku.php.  NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp:// URLs."
      }, {
        "lang" : "es",
        "value" : "inc/init.php de DokuWiki 2009-02-14, rc2009-02-06 y rc2009-01-30, cuando register_globals está habilitado, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través del parámetro config_cascade[main][default][] de doku.php. NOTA: también es posible una inclusión remota de fichero PHP en PHP v5 que utilice URLs ftp://."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokuwiki:dokuwiki:2009-02-14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1517AA-3CF0-4B87-BC19-09D1E58EDFFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokuwiki:dokuwiki:rc2009-01-30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB7EDB7-794F-4180-93B4-1C15D754F3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokuwiki:dokuwiki:rc2009-02-06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71C079F7-4C88-4D24-9392-4BA7816DA6B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.splitbrain.org/index.php?do=details&task_id=1700",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev.splitbrain.org/darcsweb/darcsweb.cgi?r=dokuwiki%3Ba=commitdiff%3Bh=20090526145030-7ad00-c0483e021f47898c8597f3bfbdd26c637f891d86.gz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35218",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.splitbrain.org/index.php?do=details&task_id=1700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev.splitbrain.org/darcsweb/darcsweb.cgi?r=dokuwiki%3Ba=commitdiff%3Bh=20090526145030-7ad00-c0483e021f47898c8597f3bfbdd26c637f891d86.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T01:00:00.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions."
      }, {
        "lang" : "es",
        "value" : "El código de doble bloqueo del inodo de fs/ocfs2/file.c del kernel de Linux v2.6.30 anterior a v2.6.30-rc3, v2.6.27 anterior a v2.6.27.24, v2.6.29 anterior a v2.6.29.4 y puede que otras versiones anteriores a v2.6.19; permite a usuarios locales provocar una denegación de servicio (prevención de creación y borrado de ficheros) a través de una serie de llamadas al sistema anidadas que provocan un bloqueo mutuo -deadlock- entre las funciones generic_file_splice_write, splice_from_pipe y ocfs2_file_splice_write."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.19",
            "matchCriteriaId" : "D7346ED4-8185-4408-BE3C-C242CE8BB11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.27",
            "versionEndExcluding" : "2.6.27.24",
            "matchCriteriaId" : "04980CC6-D46C-4DD4-A0B1-7B18822AFE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.29",
            "versionEndExcluding" : "2.6.29.4",
            "matchCriteriaId" : "7DA28DF5-A572-475C-BCE8-09B70A808FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "45273823-29EA-44DE-8444-3933402C5793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "88F60E74-09DB-4D4A-B922-4A46EED0EC20"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B68DF-1440-4587-8458-9C5F4D1E43F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1608E282-2E96-4447-848D-DBE915DB0EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6C1408-671A-4436-A825-12170CFB5C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F13F07CC-739B-465C-9184-0E9D708BD4C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=7bfac9ecf0585962fe13584f5cf526d8c8e76f17",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35847",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1022307",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:148",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/29/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/30/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/02/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/03/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1157.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35143",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=7bfac9ecf0585962fe13584f5cf526d8c8e76f17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/35390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1022307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/29/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/05/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/02/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/03/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1157.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-793-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and 5. It was addressed in Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1157.html",
        "lastModified" : "2009-07-15T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T01:00:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1) xfig-eps[PID], (2) xfig-pic[PID].pix, (3) xfig-pic[PID].err, (4) xfig-pcx[PID].pix, (5) xfig-xfigrc[PID], (6) xfig[PID], (7) xfig-print[PID], (8) xfig-export[PID].err, (9) xfig-batch[PID], (10) xfig-exp[PID], or (11) xfig-spell.[PID] temporary files, where [PID] is a process ID."
      }, {
        "lang" : "es",
        "value" : "Xfig en Debian GNU/Linux, posiblemente v3.2.5, permite a usuarios locales leer y escribir archivos de su elección a través de un enlace simbólico a los ficheros temporales (1) xfig-eps[PID], (2) xfig-pic[PID].pix, (3) xfig-pic[PID].err, (4) xfig-pcx[PID].pix, (5) xfig-xfigrc[PID], (6) xfig[PID], (7) xfig-print[PID], (8) xfig-export[PID].err, (9) xfig-batch[PID], (10) xfig-exp[PID], or (11) xfig-spell.[PID] donde [PID] es el ID (identificador) del proceso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfig:xfig:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD269541-F1A0-4FFD-BFB6-423BC806D076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "F5114DA3-FBB9-47C4-857B-3212404DAD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "4D5F5A52-285E-4E7E-83B8-508079DBCEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "674BE2D9-009B-46C5-A071-CB10368B8D48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "703486E5-906B-4BDB-A046-28D4D73E3F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "ABB5AC0D-2358-4C8E-99B5-2CE0A678F549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "38B37184-BA88-44F1-AC9E-8B60C2419111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "0D8C9247-3E18-4DD9-AF5B-B2996C76443F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "0EEA2CDD-7FCD-461E-90FC-CDB3C3992A32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "D7B877A8-5318-402E-8AE1-753E7419060F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "A3938420-087D-4D92-A2F8-EAE54D9837EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:s\\/390:*:*:*:*:*",
            "matchCriteriaId" : "0331E302-352E-457D-BF75-3C12AD5E206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "10F42CF8-FB98-4AFC-96C5-FD7D442B0FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "CF03E406-5B00-4C49-9705-45DCDB4008DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "7020CA7E-FB01-4F6D-9BA7-A0D88980C21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "234806CB-272F-4EFA-9FBB-C031A9C3D71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:armel:*:*:*:*:*",
            "matchCriteriaId" : "2A76BD7E-C96E-4279-A55A-5DC5EDB49A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "636EE19C-B240-463C-A283-F4E78D99717E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "421F6F87-777E-411F-9F68-1CA0D6F70451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "29D886A2-920A-4FA6-9499-E0C25A178783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "04376A10-26EB-400E-B2A1-F5C594A026DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "D9595A0F-BF18-4C50-B7FD-61685A83D8C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "47A7B824-7355-4F51-9316-B1EB3D9EB9AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "2E6CFC20-96B6-46B2-9DD7-024E0775757A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:s\\/390:*:*:*:*:*",
            "matchCriteriaId" : "9403840E-C30B-44F1-A115-BA0A00520EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1D65FD67-8F21-4BEE-BD29-FDF69B9A437B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/01/6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/04/01/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T19:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative access by setting the (1) c7portal and (2) cookname cookies to \"admin.\""
      }, {
        "lang" : "es",
        "value" : "Password Protector SD v1.3.1 de Ascad Networks permite a usuarios remotos evitar la autenticación y obtener acceso de administrador asignando las cookies (1) c7portal y (2) cookname a \"admin.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ascadnetworks:password_protector_sd:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F629D3-5F1F-4A1B-9AC4-D356DB9C2EC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/34930",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T19:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in main/mySpace/myStudents.php in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) student and (2) course parameters, a different vector than CVE-2007-2902."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de inyección SQL en main/mySpace/myStudents.php de Dokeos 1.8.5 permiten a usuarios remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"student\" (estudiante) y (2) \"course\" (curso), un vector de ataque diferente al descrito en CVE-2007-2902."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:dokeos:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC93EA9A-727E-41DF-BB6C-EFD976EF0042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://holisticinfosec.org/content/view/112/45/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34879",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1300",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://holisticinfosec.org/content/view/112/45/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T19:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de falsificación de petición en sitios cruzados(CSRF) en Dokeos v1.8.5 y posiblemente versiones anteriores permiten a usuarios remotos secuestrar la autenticación de víctimas no especificadas y añadir entradas en la agenda personal a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:dokeos:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC93EA9A-727E-41DF-BB6C-EFD976EF0042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://holisticinfosec.org/content/view/112/45/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34879",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1300",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://holisticinfosec.org/content/view/112/45/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T19:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) search_term parameter to main/auth/courses.php; the (2) frm_title and (3) frm_content parameters in a new personal agenda item action; the (4) title and (5) tutor_name parameters in a new course action; and the (6) student and (7) course parameters to main/mySpace/myStudents.php.  NOTE: vectors 2 and 3 might only be exploitable via a separate CSRF vulnerability."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Dokeos v1.8.5, y posiblemente versiones anteriores, permiten a usuarios remotos inyectar codigo web script o código HTML a través de (1) el parámetro search_term de main/auth/courses.php, (2) los parámetros frm_title y (3) frm_content en una acción de objeto de nueva agenda personal, (4) el parámetro title y (5) tutor_name en una acción de nuevo curso y (6) los parámetros student y (7) course de main/mySpace/myStudents.php. NOTA: los vectores de ataque (2) y (3) sólo pueden ser explotados a través de una vulnerabilidad distinta de falsificación de petición en sitios cruzados (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:dokeos:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC93EA9A-727E-41DF-BB6C-EFD976EF0042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://holisticinfosec.org/content/view/112/45/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34879",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1300",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://holisticinfosec.org/content/view/112/45/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T19:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to (1) read portions of arbitrary files via a .. (dot dot) and a ..\\ (dot dot backslash) in the lang parameter to main/exercice/hotspot_lang_conversion.php and (2) read arbitrary files via a .. (dot dot) in the doc_url parameter to main/exercice/Hpdownload.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en Dokeos v1.8.5, y posiblemente versiones anteriores, permiten a usuarios remotos (1) leer porciones de ficheros de su elección a través de las secuencias de caracteres .. (punto punto) y ..\\ (punto punto barra invertida) en el parámetro lang de main/exercice/hotspot_lang_conversion.php y (2) leer ficheros de su elección a través de los caracteres .. (punto punto) en el parámetro doc_url de main/exercice/Hpdownload.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:dokeos:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC93EA9A-727E-41DF-BB6C-EFD976EF0042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34879",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1300",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T19:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) uInfo parameter to main/tracking/userLog.php and the (2) course parameter to main/mySpace/lp_tracking.php, a different vector than CVE-2009-2006.2."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Dokeos v1.8.5 y posiblemente versiones anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"uInfo\" a main/tracking/userLog.php y (2) \"course\" a main/mySpace/lp_tracking.php. Vector distinto de CVE-2009-2006."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:dokeos:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC93EA9A-727E-41DF-BB6C-EFD976EF0042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1300",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T19:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) curdirpath parameter to main/document/slideshow.php and the (2) file parameter to main/exercice/testheaderpage.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Dokeos v1.8.5 y posiblemente versiones anteriores, permite a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"curdirpath\" a main/document/slideshow.php y  (2) \"file\" a main/exercice/testheaderpage.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:dokeos:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC93EA9A-727E-41DF-BB6C-EFD976EF0042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1300",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-08T19:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) thread parameter to messageboard.php, (2) member parameter to profile.php, (3) pid parameter to gallery/index.php, and the (4) fcms_login_id cookie parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Haudenschilt Family Connections CMS (FCMS) v1.9 y anteriores, permite a usuarios autenticados ejecutar comandos SQL de su elección a través de los parámetros (1) \"thread\" a messageboard.php, (2) \"member\" a profile.php, (3) \"pid\" a gallery/index.php, y (4) \"fcms_login_id cookie\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haudenschilt:family_connections_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "9E3BC0B4-9DA5-49B3-BAE1-B05014167EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haudenschilt:family_connections_cms:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A3DC010-D142-4DEB-B425-04B8E10D9AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haudenschilt:family_connections_cms:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "505E59AC-08C9-4D13-8470-76191D73F6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haudenschilt:family_connections_cms:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA041C5-5FF4-46A8-9F1D-74025E742EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haudenschilt:family_connections_cms:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D025AEE2-75AF-4959-9E78-E9AB6E163664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haudenschilt:family_connections_cms:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F32130D-8C69-4E23-BC2D-985AF5D41E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haudenschilt:family_connections_cms:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E84E4E37-EAD0-4069-9A23-12941E8E3B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haudenschilt:family_connections_cms:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C009F6D-C0CB-4CE9-9B0A-9532167FBAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haudenschilt:family_connections_cms:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4790A62-6E63-4D9A-87FF-2D1020E7C7E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haudenschilt:family_connections_cms:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B944B953-EA7F-4B7D-A8B7-6A7807851ACC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35039",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503477/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34935",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1306",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503477/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0791",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-09T17:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de entero en el filtro pdftops en CUPS v1.1.17, v1.1.22 y v1.3.7 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o posiblemente ejecutar código de su elección mediante un fichero PDF manipulado que dispara una desbordamiento de búfer basado en memoria dinámica (heap), posiblemente relacionado con (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx y (5) PSOutputDev.cxx en pdftops/. NOTA: el vector JBIG2Stream.cxx podría solapar CVE-2009-1179."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8335D4E3-563D-4288-B708-A9635BCA595F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96592A93-4967-4B91-BCF7-558DC472E7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BD64BB-BDA7-4F82-8324-B7C7C941133C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35340",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37023",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37028",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37037",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37043",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37079",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1022326",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:334",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1083.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35195",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1488",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2928",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=491840",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10534",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1500.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1501.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1502.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1503.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1512.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1083.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=491840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1500.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1501.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1502.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1503.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1512.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-09T17:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags."
      }, {
        "lang" : "es",
        "value" : "La función ippReadIO en cups/ipp.c en cupsd en CUPS antes de la versión 1.3.10 no inicia de manera apropiada la memoria para paquetes de solicitud IPP, lo que permite a atacantes remotos provocar una denegación de servicio (referencia a puntero nulo y caída del demonio) mediante una solicitud de programación (scheduler) con dos etiquetas IPP_TAG_UNSUPPORTED consecutivas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.10",
            "matchCriteriaId" : "DB4D1818-1AE2-42FE-9856-5519EF7E0DAA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E8A89-7A16-411F-9D31-676313BB7244"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.4.11",
            "matchCriteriaId" : "2F5DEE66-117C-4844-8FD4-065D0820A808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5.0",
            "versionEndExcluding" : "10.5.8",
            "matchCriteriaId" : "7A880FA4-5DBF-4894-8DAC-C3CD147D1EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.4.11",
            "matchCriteriaId" : "B9ACE85A-56A0-404C-AB58-A4F5CA73243C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5.0",
            "versionEndExcluding" : "10.5.8",
            "matchCriteriaId" : "7F74FAC0-CC05-4797-9DE2-F7CE5CB8FC19"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B68DF-1440-4587-8458-9C5F4D1E43F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise:9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C3243C77-D635-480D-908C-328A479719E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise:10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AED08A6F-CD23-4405-B1CF-C96BB8AE7D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/35322",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35328",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35340",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35342",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1022321",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/AppleCUPS-null-pointer-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1811",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1082.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1083.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504032/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35169",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-780-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500972",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50926",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9631",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/35322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1022321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/AppleCUPS-null-pointer-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1083.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504032/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-780-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1196",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-09T17:30:10.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a \"pointer use-after-delete flaw.\""
      }, {
        "lang" : "es",
        "value" : "La funcionalidad directory-services en el planificador (scheduler) en CUPS v1.1.17 y v1.1.22 permite a atacantes remotos provocar una denegación de servicio (parada o caída del demonio cupsd) mediante la manipulación de la cadencia de los paquetes de navegación CUPS, en relación con el problema de punteros \"uso después de borrado\" (\"pointer use-after-delete flaw\")."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8335D4E3-563D-4288-B708-A9635BCA595F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96592A93-4967-4B91-BCF7-558DC472E7BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35340",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1083.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35194",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1488",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=497135",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50944",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11217",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1083.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=497135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-09T17:30:10.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in idmap in Sun OpenSolaris snv_88 through snv_110, when a CIFS server is enabled, allows local users to cause a denial of service (idpmapd daemon crash and idmapd outage) via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en idmap en Sun OpenSolaris snv_88 a snv_110, cuando el servidor CIFS está habilitado, permite a atacantes remotos provocar una denegación de servicio (caída del demonio idpmapd y parada de idmapd) mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:sparc:*:*:*:*:*:*",
            "matchCriteriaId" : "D05BBA43-DF35-4B0C-BCA7-3D0D7AA4802D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:x86:*:*:*:*:*:*",
            "matchCriteriaId" : "FB134C5D-D0FF-436C-8304-5CED1EC54A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-260508-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-260508-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-09T19:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in bin/aps_browse_sources.php in Frontis 3.9.01.24 allows remote attackers to execute arbitrary SQL commands via the source_class parameter in a browse_classes action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en bin/aps_browse_sources.php en Frontis v3.9.01.24 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"source_class\" en una acción browse_classes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frontisgroup:frontis:3.9.01.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D97C94-2DB6-4C2E-84A5-080EFE7A9D66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35369",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-09T19:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the ComSchool (com_school) component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the classid parameter in a showclass action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente ComSchool (com_school) v1.4 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"classid\" en una acción showclass a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_school:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22104252-F150-45B8-A85F-9EA699469B44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35257",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-09T19:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in includes/file_includer.php in the Ideal MooFAQ (com_moofaq) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en includes/file_includer.php en el componente Ideal MooFAQ (com_moofaq) v1.0 para Joomla! permite a atacantes remotos leer ficheros de su elección mediante un .. (punto punto) en el parámetro \"file\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal:com_moofaq:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4976D60-448F-4514-81B2-5222E82A19A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35259",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-09T19:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in products.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the cid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en products.php en Virtue Shopping Mall permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtuenetz:virtue_shopping_mall:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDE2F05-92BC-4600-B8B0-35A818896B36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35374",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-09T19:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en products.php en Virtue Book Store permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtuenetz:virtue_book_store:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C08C8B3-CB62-4207-B03C-9F22CB38731D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35375",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-09T19:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/index.php in Jared Eckersley MyCars, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authuserid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/index.php en Jared Eckersley MyCars, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"authuserid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaredeckersley:mycars:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "389CA0C9-51FC-4390-B07B-109CC7441394"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35281",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1523",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-09T19:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in news_detail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en news_detail.php en Virtue News Manager permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"nid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtuenetz:virtue_news_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A794E8-8B1B-471F-A33A-9040E64CCF6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35368",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1528",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-09T19:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in news_detail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or HTML via the nid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en news_detail.php en Virtue News Manager permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"nid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtuenetz:virtue_news_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A794E8-8B1B-471F-A33A-9040E64CCF6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2009/1528",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-09T19:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL commands via the category parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en search.php en Virtue Classifieds permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro category."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtuenetz:virtue_classifieds:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036EDD51-FC03-48E4-887E-A8D7585F7731"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35376",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1525",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-09T19:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain sensitive information via a direct request for _fipsdb/db.mdb."
      }, {
        "lang" : "es",
        "value" : "fipsCMS Light v2.1 almacena información sensible en la raíz del directorio web con insuficiente control de acceso, lo que permite a atacantes remotos descargar la base de datos y obtener información sensible a través de una petición directa a _fipsdb/db.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fipsasp:fipscms_light:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3663D798-A005-45DB-9D4D-06945784F568"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-09T19:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Shop-Script Pro 2.12, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the current_currency parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Shop-Script Pro v2.12, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro current_currency."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shop-script:shop-script:2.12:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "7430B79D-EB68-4BCD-8543-7F02216AA444"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33634",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1533",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-09T19:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain usernames and passwords via a direct request for zHk8dEes3.txt."
      }, {
        "lang" : "es",
        "value" : "Vlad Titarenko ASP VT Auth v1.0 almacena información sensible sensible bajo la raiz de la web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar la base de datos y obtener nombres de usuario y contraseñas a través de una petición directa para zHk8dEes3.txt."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vt.rovno:asp_vt_auth:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D60F678E-980F-4CA5-A96E-A2F4CFDE332F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-09T19:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID cookies to certain values."
      }, {
        "lang" : "es",
        "value" : "admin/login.php en DM FileManager v3.9.2, permite a atacantes remotos evitar la autenticación y obtener acceso como administradores estableciendo con valores determinados las cookies (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dutchmonkey:dm_filemanager:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC55C936-2850-4E42-BE95-81E3743FCD45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35167",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1532",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1296",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2009-06-09T20:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installation logs, which might allow local users to obtain access to the filesystem by reading the log files from disk.  NOTE: the log files are only readable by root."
      }, {
        "lang" : "es",
        "value" : "Las utilidades de soporte eCryptfs (ecryptfs-utils) 73-0ubuntu6.1 sobre Ubuntu v9.04, almacena almacena la \"passphrase\" de (frase clave) de montaje en los registros de instalación, lo que podría permitir a usuarios locales obtener acceso al sistema de ficheros mediante la lectura de los archivos de registro desde el disco. NOTA: los registros de archivos únicamente pueden ser leídos por el usuario root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubuntu:73-oubuntu:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6E6F4C-968E-475C-9BF1-4D34ABBA8BE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24066D17-EE95-4E06-9FAC-DA9B2227195F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35383",
        "source" : "security@ubuntu.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022347",
        "source" : "security@ubuntu.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-783-1",
        "source" : "security@ubuntu.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51191",
        "source" : "security@ubuntu.com"
      }, {
        "url" : "http://secunia.com/advisories/35383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-783-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of ecryptfs-utils as shipped with Red Hat Enterprise Linux 5.  eCryptfs encrypted home directories are not set up during the system installation, so theres no possibility for leaking encryption passwords to the installation log file.",
        "lastModified" : "2009-06-10T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1535",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T14:30:00.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-based protection mechanisms, and list folders or read, create, or modify files, via a %c0%af (Unicode / character) at an arbitrary position in the URI, as demonstrated by inserting %c0%af into a \"/protected/\" initial pathname component to bypass the password protection on the protected\\ folder, aka \"IIS 5.1 and 6.0 WebDAV Authentication Bypass Vulnerability,\" a different vulnerability than CVE-2009-1122."
      }, {
        "lang" : "es",
        "value" : "La extensión de WebDAV en Microsoft Internet Information Services (IIS) v5.1 y v6.0 permite a atacantes remotos eludir los mecanismos de protección basados en URL, y listar carpetas o leer, crear o modificar archivos, a través de un %c0%af (Unicode / carácter) en una posición arbitraria en la URL, como se ha demostrado mediante la inserción de %c0%af en la ruta inicial de componente \"/protected/\" para evitar la protección por contraseña en la carpeta protected\\ , alias \"IIS v5.1 y v6.0 Vulnerabilidad de evasión de autenticación WebDAV\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_information_services:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25100F8C-58A0-49D5-8247-8CCD099A734B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:-:*",
            "matchCriteriaId" : "C5D2C681-EB06-4B72-BD34-47AEE35CC227"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:professional:*:-:*",
            "matchCriteriaId" : "81E8A3CB-9110-4D65-BCAE-261FF7135544"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_information_services:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B4DF95D-B4B1-4FB6-9D27-A6D359EEACFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*",
            "matchCriteriaId" : "9F98AE07-3995-4501-9804-FEA5A87ADFAD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "A7371547-290D-4D0D-B98D-CA28B4D2E8B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*",
            "matchCriteriaId" : "C6109348-BC79-4ED3-8D41-EA546A540C79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0135.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0139.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0144.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-05/att-0135/IIS_Advisory.pdf",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://blog.zoller.lu/2009/05/iis-6-webdac-auth-bypass-and-data.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://isc.sans.org/diary.html?n&storyid=6397",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://view.samurajdata.se/psview.php?id=023287d6&page=1",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-June/002192.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-020",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6029",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0135.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0139.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0144.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-05/att-0135/IIS_Advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://blog.zoller.lu/2009/05/iis-6-webdac-auth-bypass-and-data.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://isc.sans.org/diary.html?n&storyid=6397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://view.samurajdata.se/psview.php?id=023287d6&page=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-June/002192.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T14:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not prevent web sites from loading third-party content into a subframe, which allows remote attackers to bypass the Same Origin Policy and conduct \"clickjacking\" attacks via a crafted HTML document."
      }, {
        "lang" : "es",
        "value" : "WebKit en Apple Safari anteriores a v4.0 no previene que páginas web sean cargadas en contenidos de terceros dentro de un \"submarco\", lo que permite a los atacantes remotos evitar la Política Original Misma y conduce a un ataque de \"clickjacking\" a través de un documento HTML manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "2AA3463B-FB1D-4957-A738-946399B1B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1F5F96DD-BD44-497B-A05E-326819BC46F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B00DC91-9895-405E-B9B4-211ABC3728DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "82C4A098-7EAC-4611-B621-3F0EB1B15960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "56B016E7-C403-42AC-BF75-9BA723122A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "83CFAFD2-630E-4DB9-B187-6918CFE3075C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "F03B8DC9-B295-42A8-904F-3D1F827FFECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "03BBCC9D-E160-4614-B2B8-6359FE644E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CDB6B46E-30E1-4E16-A941-F5E19AB34493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "E783789C-C5D4-47A2-A947-D19793B182E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE3C68CF-21A2-47D8-84F2-FD3219E90043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T14:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari before 4.0 does not properly check for revoked Extended Validation (EV) certificates, which makes it easier for remote attackers to trick a user into accepting an invalid certificate."
      }, {
        "lang" : "es",
        "value" : "Apple Safari antes de v4.0 no comprueba adecuadamente la revocación de certificados Extended Validation (EV), lo cual hace más fácil a atacantes remotos engañar a un usuario para aceptar un certificado no válido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "D72FE38B-BD04-4FC7-AE41-6459CBDF207A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7F7275FE-C28A-4067-B9EF-BC99E10188DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E2249206-EF91-4168-B7C2-C1DB35CDFA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "641D655F-E210-4795-836C-BBF6D90B92E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A6EED222-BF5E-475A-B255-18041B4A5B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1FC456E7-727C-4932-A0D0-B0D168E8C523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "303E4616-1BB6-4D2D-8437-47F3D1B3C13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "03C2A522-2D71-4909-B86F-DBEE2C703F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E75B3EAD-A9D3-4497-B3B0-E31E807010A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F837BE0E-9255-41C5-8E49-57090A574A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "586ED537-9BB4-4931-8891-E60740983C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "73B23547-9710-44E9-A32A-6320C8E7A780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EBFEED2C-8822-44EB-9296-82862DB14DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "FD35EC3D-01E2-4FA7-95AC-A2E57C652649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C23C022E-293E-4247-A9AD-2F27C29E92A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "75359A0E-823A-45C5-8C61-ABE225FB939F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F8283078-D722-40AC-AF7A-7BC9AD19D051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "66132AA6-F3EA-408D-9C43-8E6C577C8F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D8CFE8E7-B970-4B86-99E9-AC3F8626737C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "7E203D81-FABE-4A63-8930-1DA15A86E113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "49875E29-AA30-4D96-9ED9-538823DD5E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C5471735-D9C0-491B-9A6A-07B39AA215CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "1E5C52F3-2109-40FD-9945-A9A9D42C076E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "151DEB6D-5857-4B0B-8449-5735768024A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "476EBE1F-66E1-4EF5-8344-BEDA97F306A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "480ED2AC-0DA4-44DA-A902-8534335077B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C9AD216D-0C95-4843-A1A1-C3C9A6219277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "04B8652D-BE06-49CB-A636-8B53B2DF9168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T14:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via an event handler that triggers script execution in the context of the next loaded document."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en WebKit en Apple Safari anteriores a v4.0, permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de un procesador de evento que lanza la ejecución de una secuencia de comandos en el contexto del próximo documento cargado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "2AA3463B-FB1D-4957-A738-946399B1B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1F5F96DD-BD44-497B-A05E-326819BC46F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B00DC91-9895-405E-B9B4-211ABC3728DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "82C4A098-7EAC-4611-B621-3F0EB1B15960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "56B016E7-C403-42AC-BF75-9BA723122A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "83CFAFD2-630E-4DB9-B187-6918CFE3075C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "F03B8DC9-B295-42A8-904F-3D1F827FFECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "03BBCC9D-E160-4614-B2B8-6359FE644E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CDB6B46E-30E1-4E16-A941-F5E19AB34493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "E783789C-C5D4-47A2-A947-D19793B182E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE3C68CF-21A2-47D8-84F2-FD3219E90043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T14:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML by overwriting the document.implementation property of (1) an embedded document or (2) a parent document."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WebKit en Apple Safari antes de v4.0 permite a atacantes remotos inyectar HTML o secuencias de comandos web arbitrarios sobrescribiendo  la propiedad document.implementation de (1) un documento embebido o (2) un documento padre."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "2AA3463B-FB1D-4957-A738-946399B1B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1F5F96DD-BD44-497B-A05E-326819BC46F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B00DC91-9895-405E-B9B4-211ABC3728DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "82C4A098-7EAC-4611-B621-3F0EB1B15960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "56B016E7-C403-42AC-BF75-9BA723122A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "83CFAFD2-630E-4DB9-B187-6918CFE3075C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "F03B8DC9-B295-42A8-904F-3D1F827FFECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "03BBCC9D-E160-4614-B2B8-6359FE644E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CDB6B46E-30E1-4E16-A941-F5E19AB34493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "E783789C-C5D4-47A2-A947-D19793B182E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE3C68CF-21A2-47D8-84F2-FD3219E90043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T14:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle constant (aka const) declarations in a type-conversion operation during JavaScript exception handling, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document."
      }, {
        "lang" : "es",
        "value" : "WebKit en Apple Safari antes de v4.0 no maneja adecuadamente constantes (alias const) declaradas en una operación de conversión de tipo durante el manejo de excepciones en JavaScript, lo cual permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y cuelgue de aplicación) a través de un documento HTML elaborado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "D72FE38B-BD04-4FC7-AE41-6459CBDF207A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7F7275FE-C28A-4067-B9EF-BC99E10188DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E2249206-EF91-4168-B7C2-C1DB35CDFA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "641D655F-E210-4795-836C-BBF6D90B92E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A6EED222-BF5E-475A-B255-18041B4A5B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1FC456E7-727C-4932-A0D0-B0D168E8C523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "303E4616-1BB6-4D2D-8437-47F3D1B3C13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "03C2A522-2D71-4909-B86F-DBEE2C703F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E75B3EAD-A9D3-4497-B3B0-E31E807010A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F837BE0E-9255-41C5-8E49-57090A574A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "586ED537-9BB4-4931-8891-E60740983C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "73B23547-9710-44E9-A32A-6320C8E7A780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EBFEED2C-8822-44EB-9296-82862DB14DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "FD35EC3D-01E2-4FA7-95AC-A2E57C652649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C23C022E-293E-4247-A9AD-2F27C29E92A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "75359A0E-823A-45C5-8C61-ABE225FB939F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F8283078-D722-40AC-AF7A-7BC9AD19D051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D8CFE8E7-B970-4B86-99E9-AC3F8626737C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "7E203D81-FABE-4A63-8930-1DA15A86E113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "49875E29-AA30-4D96-9ED9-538823DD5E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C5471735-D9C0-491B-9A6A-07B39AA215CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "1E5C52F3-2109-40FD-9945-A9A9D42C076E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "151DEB6D-5857-4B0B-8449-5735768024A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "476EBE1F-66E1-4EF5-8344-BEDA97F306A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "480ED2AC-0DA4-44DA-A902-8534335077B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "66132AA6-F3EA-408D-9C43-8E6C577C8F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C9AD216D-0C95-4843-A1A1-C3C9A6219277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "04B8652D-BE06-49CB-A636-8B53B2DF9168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T14:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document that triggers write access to an \"offset of a NULL pointer.\""
      }, {
        "lang" : "es",
        "value" : "El JavaScript garbage collector en WebKit en Apple Safari anteriores a v4.0 no maneja adecuadamente la localización de fallos, lo que permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (consumo de memoria y caída de aplicación) a través de un documento HTML manipulado que lanza acceso de escritura a un \"offset de un puntero NULL\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "2AA3463B-FB1D-4957-A738-946399B1B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1F5F96DD-BD44-497B-A05E-326819BC46F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B00DC91-9895-405E-B9B4-211ABC3728DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "82C4A098-7EAC-4611-B621-3F0EB1B15960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "56B016E7-C403-42AC-BF75-9BA723122A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "83CFAFD2-630E-4DB9-B187-6918CFE3075C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "F03B8DC9-B295-42A8-904F-3D1F827FFECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "03BBCC9D-E160-4614-B2B8-6359FE644E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CDB6B46E-30E1-4E16-A941-F5E19AB34493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "E783789C-C5D4-47A2-A947-D19793B182E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE3C68CF-21A2-47D8-84F2-FD3219E90043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-822-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-836-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-822-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-836-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T14:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to determining a security context through an approach that is not the \"HTML 5 standard method.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en WebKit en Apple Safari anteriores a v4.0 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de vectores relativos a determinados contextos de seguridad un desarrollo que no es el \"método estándar HTML 5\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "2AA3463B-FB1D-4957-A738-946399B1B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1F5F96DD-BD44-497B-A05E-326819BC46F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B00DC91-9895-405E-B9B4-211ABC3728DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "82C4A098-7EAC-4611-B621-3F0EB1B15960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "56B016E7-C403-42AC-BF75-9BA723122A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "83CFAFD2-630E-4DB9-B187-6918CFE3075C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "F03B8DC9-B295-42A8-904F-3D1F827FFECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "03BBCC9D-E160-4614-B2B8-6359FE644E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CDB6B46E-30E1-4E16-A941-F5E19AB34493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "E783789C-C5D4-47A2-A947-D19793B182E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE3C68CF-21A2-47D8-84F2-FD3219E90043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T14:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving submission of a form to the about:blank URL, leading to security-context replacement."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WebKit en Apple Safari anteriores v4.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores qeu implican la presentación de un formulario la direccion about:blank, referido a un reemplazo en un contexto de seguridad.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "D72FE38B-BD04-4FC7-AE41-6459CBDF207A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7F7275FE-C28A-4067-B9EF-BC99E10188DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E2249206-EF91-4168-B7C2-C1DB35CDFA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "641D655F-E210-4795-836C-BBF6D90B92E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A6EED222-BF5E-475A-B255-18041B4A5B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1FC456E7-727C-4932-A0D0-B0D168E8C523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "303E4616-1BB6-4D2D-8437-47F3D1B3C13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "03C2A522-2D71-4909-B86F-DBEE2C703F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E75B3EAD-A9D3-4497-B3B0-E31E807010A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F837BE0E-9255-41C5-8E49-57090A574A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "586ED537-9BB4-4931-8891-E60740983C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "73B23547-9710-44E9-A32A-6320C8E7A780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EBFEED2C-8822-44EB-9296-82862DB14DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "FD35EC3D-01E2-4FA7-95AC-A2E57C652649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C23C022E-293E-4247-A9AD-2F27C29E92A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "75359A0E-823A-45C5-8C61-ABE225FB939F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F8283078-D722-40AC-AF7A-7BC9AD19D051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "66132AA6-F3EA-408D-9C43-8E6C577C8F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D8CFE8E7-B970-4B86-99E9-AC3F8626737C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "7E203D81-FABE-4A63-8930-1DA15A86E113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "49875E29-AA30-4D96-9ED9-538823DD5E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C5471735-D9C0-491B-9A6A-07B39AA215CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "1E5C52F3-2109-40FD-9945-A9A9D42C076E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "151DEB6D-5857-4B0B-8449-5735768024A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "476EBE1F-66E1-4EF5-8344-BEDA97F306A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "480ED2AC-0DA4-44DA-A902-8534335077B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C9AD216D-0C95-4843-A1A1-C3C9A6219277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "04B8652D-BE06-49CB-A636-8B53B2DF9168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1690",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T14:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs, related to \"recursion in certain DOM event handlers.\""
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de uso de memoria previamente liberada en WebKit, como es usado en Safari de Apple anterior a versión 4.0, iPhone OS versiones 1.0 hasta 2.2.1, iPhone OS para iPod touch versiones 1.1 hasta 2.2.1, Chrome de Google versión 1.0.154.53, y posiblemente otros productos, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) mediante el establecimiento de una propiedad no especificada de una etiqueta HTML que causa que los elementos secundarios se liberen y más adelante se tenga acceso cuando se produce un error HTML, relacionado con \"recursion in certain DOM event handlers\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "2AA3463B-FB1D-4957-A738-946399B1B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1F5F96DD-BD44-497B-A05E-326819BC46F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B00DC91-9895-405E-B9B4-211ABC3728DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "82C4A098-7EAC-4611-B621-3F0EB1B15960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "56B016E7-C403-42AC-BF75-9BA723122A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "83CFAFD2-630E-4DB9-B187-6918CFE3075C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "F03B8DC9-B295-42A8-904F-3D1F827FFECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "03BBCC9D-E160-4614-B2B8-6359FE644E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CDB6B46E-30E1-4E16-A941-F5E19AB34493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "E783789C-C5D4-47A2-A947-D19793B182E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE3C68CF-21A2-47D8-84F2-FD3219E90043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DB23F0-7226-4D0B-A3FA-A801F02EBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "B669868B-F358-4D5B-9D64-4A462F261553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "A14B31DE-AA3D-4FA2-A4F4-0A6A51AFA7FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4AEDE82-E317-4066-A34F-BB3BCD3F53E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "4261E5C1-DC93-437E-B84F-A30380AFDC40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "079BB54C-25FD-4B26-B171-368911960F76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "DF292FED-19A4-4031-9B1F-151C0146F3B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "5183082C-556F-479F-9FC1-42B59BBB840B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "AAC3FBF0-F128-412D-9FD5-13BB2EB92DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "2FFCFEA4-C5E2-4C46-B8C3-ADCDBA4B85EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "7E7AA027-8CF9-49BD-A000-82880E41D622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "4FA51920-223B-4DF4-802C-188F5A8B0563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "4385635D-46F2-4642-9C78-1346DC120492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "2C63C36E-1997-4F44-80AD-E665CE46A278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "20DAE911-C037-4F10-82A3-EF42D5FB71D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "02BFDD6F-B9C3-42BB-A84A-828193FAA137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "0A66D6DC-9A48-4BD6-9E01-0D9FF388457C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "CFD4325B-A86A-4C1B-930F-56C17FB6281D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "C59B8C50-BF5D-4E9A-8E5B-99B34E974B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "2904DEFA-7769-43DB-B3D0-B552AE8F06A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "D4CE4199-BBF5-4F42-8BBC-BD946079C912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "0AD5106E-CD7C-4952-A9B1-5F72D99276E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "34346F55-4972-427B-8F96-780FA91DB95D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "B7235341-983F-4578-98DC-39BC278A7556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "AE65CA8B-68CB-428C-AC32-6F9100F9E507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "BA5C2D75-4019-45EB-8AF9-A850B5349507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "AD136376-331D-494F-9D12-7E631546E8CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5094C4-1338-4189-B5FD-C9AFFF091D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36057",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36062",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36790",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-822-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-836-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-822-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-836-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T14:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to insufficient access control for standard JavaScript prototypes in other domains."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WebKit en Apple Safari anterior a v4.0 permite a atacantes remotos inyectar secuencias de comandos web a su elección o HTML a través de vectores relacionados con el control insuficiente de acceso a los prototipos estándar de JavaScript en otros dominios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "D72FE38B-BD04-4FC7-AE41-6459CBDF207A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7F7275FE-C28A-4067-B9EF-BC99E10188DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E2249206-EF91-4168-B7C2-C1DB35CDFA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "641D655F-E210-4795-836C-BBF6D90B92E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A6EED222-BF5E-475A-B255-18041B4A5B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1FC456E7-727C-4932-A0D0-B0D168E8C523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "303E4616-1BB6-4D2D-8437-47F3D1B3C13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "03C2A522-2D71-4909-B86F-DBEE2C703F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E75B3EAD-A9D3-4497-B3B0-E31E807010A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F837BE0E-9255-41C5-8E49-57090A574A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "586ED537-9BB4-4931-8891-E60740983C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "73B23547-9710-44E9-A32A-6320C8E7A780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EBFEED2C-8822-44EB-9296-82862DB14DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "FD35EC3D-01E2-4FA7-95AC-A2E57C652649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C23C022E-293E-4247-A9AD-2F27C29E92A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "75359A0E-823A-45C5-8C61-ABE225FB939F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F8283078-D722-40AC-AF7A-7BC9AD19D051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "66132AA6-F3EA-408D-9C43-8E6C577C8F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D8CFE8E7-B970-4B86-99E9-AC3F8626737C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "7E203D81-FABE-4A63-8930-1DA15A86E113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "49875E29-AA30-4D96-9ED9-538823DD5E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C5471735-D9C0-491B-9A6A-07B39AA215CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "1E5C52F3-2109-40FD-9945-A9A9D42C076E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "151DEB6D-5857-4B0B-8449-5735768024A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "476EBE1F-66E1-4EF5-8344-BEDA97F306A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "480ED2AC-0DA4-44DA-A902-8534335077B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C9AD216D-0C95-4843-A1A1-C3C9A6219277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "04B8652D-BE06-49CB-A636-8B53B2DF9168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1693",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T14:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to read images from arbitrary web sites via a CANVAS element with an SVG image, related to a \"cross-site image capture issue.\""
      }, {
        "lang" : "es",
        "value" : "WebKit en Apple Safari anteriores a v4.0 permite a atacantes remotos leer imágenes desde sitios Web de su elección a través de un elemento CANVAS con una imagen SVG, relativo a \"Característica de captura de imagen en sitio cruzado\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "D72FE38B-BD04-4FC7-AE41-6459CBDF207A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7F7275FE-C28A-4067-B9EF-BC99E10188DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E2249206-EF91-4168-B7C2-C1DB35CDFA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "641D655F-E210-4795-836C-BBF6D90B92E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A6EED222-BF5E-475A-B255-18041B4A5B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1FC456E7-727C-4932-A0D0-B0D168E8C523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "303E4616-1BB6-4D2D-8437-47F3D1B3C13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "03C2A522-2D71-4909-B86F-DBEE2C703F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E75B3EAD-A9D3-4497-B3B0-E31E807010A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F837BE0E-9255-41C5-8E49-57090A574A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "586ED537-9BB4-4931-8891-E60740983C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "73B23547-9710-44E9-A32A-6320C8E7A780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EBFEED2C-8822-44EB-9296-82862DB14DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "FD35EC3D-01E2-4FA7-95AC-A2E57C652649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C23C022E-293E-4247-A9AD-2F27C29E92A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "75359A0E-823A-45C5-8C61-ABE225FB939F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F8283078-D722-40AC-AF7A-7BC9AD19D051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "66132AA6-F3EA-408D-9C43-8E6C577C8F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D8CFE8E7-B970-4B86-99E9-AC3F8626737C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "7E203D81-FABE-4A63-8930-1DA15A86E113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "49875E29-AA30-4D96-9ED9-538823DD5E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C5471735-D9C0-491B-9A6A-07B39AA215CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "1E5C52F3-2109-40FD-9945-A9A9D42C076E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "151DEB6D-5857-4B0B-8449-5735768024A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "476EBE1F-66E1-4EF5-8344-BEDA97F306A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "480ED2AC-0DA4-44DA-A902-8534335077B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C9AD216D-0C95-4843-A1A1-C3C9A6219277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "04B8652D-BE06-49CB-A636-8B53B2DF9168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T14:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read images from arbitrary web sites via vectors involving a CANVAS element and redirection, related to a \"cross-site image capture issue.\""
      }, {
        "lang" : "es",
        "value" : "WebKit en Apple Safari anterior a v4.0 no redirecciona correctamente, lo que permite a atacantes remotos leer las imágenes de sitios web a su eleccion a traves de vectores relacionados al elemento CANVAS y redirección, relacionado con una \"incidencia de captura de imagen de sitios cruzados.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "2AA3463B-FB1D-4957-A738-946399B1B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1F5F96DD-BD44-497B-A05E-326819BC46F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B00DC91-9895-405E-B9B4-211ABC3728DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "82C4A098-7EAC-4611-B621-3F0EB1B15960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "56B016E7-C403-42AC-BF75-9BA723122A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "83CFAFD2-630E-4DB9-B187-6918CFE3075C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "F03B8DC9-B295-42A8-904F-3D1F827FFECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "03BBCC9D-E160-4614-B2B8-6359FE644E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CDB6B46E-30E1-4E16-A941-F5E19AB34493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "E783789C-C5D4-47A2-A947-D19793B182E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE3C68CF-21A2-47D8-84F2-FD3219E90043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0228",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:00:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service (win32spl.dll) in Microsoft Windows 2000 SP4 allows remote printer servers to execute arbitrary code via a crafted ShareName in a response to an RPC request, related to \"printing data structures,\" aka \"Buffer Overflow in Print Spooler Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de buffer basado en pila en la función EnumeratePrintShares en Windows Print Spooler Service (win32spl.dll) en Microsoft Windows 2000 SP4 permite a servidores de impresión remotos ejecutar código arbitrario a través de un ShareName manipulado en respuesta a una petición RPC, relacionado con \"estructuras de datos impresos\", también conocido como \"Buffer Overflow in Print Spooler Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=806",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54932",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/35365",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35206",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022352",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1541",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-022",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6317",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0229",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:00:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka \"Print Spooler Read File Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Servicio de impresión de Windows en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1 y SP2, y Server 2008 SP2 permite a usuarios locales leer archivos arbitrarios a través de un separador de página elaborado, alias \"Vulnerabilidad de lectura de archivo en cola de impresión\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:sp4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11AFB73A-1C61-40F1-8415-E4D40BB2699B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377F7D0C-6B44-4B90-BF90-DAF959880C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "D21D1DFE-F61B-407E-A945-4F42F86947B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "3461CEA0-6CCF-4AA9-B83A-420E1310C83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:x32:*:*:*:*:*:*",
            "matchCriteriaId" : "33331586-245C-4C11-9869-DD00578F9725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:x32:*:*:*:*:*:*",
            "matchCriteriaId" : "9517571A-BC1A-4838-A094-30081A86D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:x64:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7CA7F0-9C4D-4172-91BD-90A8C86EE337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F99773-D1AF-4596-856A-CA164D4B68E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F916C0D-3B99-46F3-A7AE-BAF067361499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47EBFCC-1828-45AB-BC6D-FB980929A81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:sp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E69F8C21-5996-4083-A02A-F04AE948CEA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54933",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/35365",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35208",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022352",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1541",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-022",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5815",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0230",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:00:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that triggers loading of a DLL file from an arbitrary directory, aka \"Print Spooler Load Library Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "La cola de impresión de Windows en Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 SP2 permite a usuraio autenticados remotamente obtener privilegios a través de un mensaje RCP manipulado que lanza la carga de un archivo DLL desde un directorio de su elección, también conocido como \"Vulnerabilidad en la  carga librería de la cola de impresión\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2978BF86-5A1A-438E-B81F-F360D0E30C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:itanium:*",
            "matchCriteriaId" : "39F303CD-DB64-4FE6-AB4F-461E5E8AFB83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "17804445-2C63-4381-A721-7F3BB3DC645F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:2008:*:*:*:*:*:itanium:*",
            "matchCriteriaId" : "EF19CAA4-DAF7-4237-9F1F-153E28E19A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:2008:*:sp2:*:*:*:itanium:*",
            "matchCriteriaId" : "E8C46066-5DDF-4FB1-8EEC-CDFA8D588DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "BAB70FD5-09F3-4215-99C4-299EDE8D26DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "06E7E0F7-AA6F-477C-AAA7-C0419CD2F3BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "ABBA5D64-4184-4420-B7D0-A4E41359AA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54934",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35365",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35209",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022352",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1541",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-022",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6287",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/54934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0239",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:00:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result, aka \"Script Execution in Windows Search Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Windows Search v4.0 para Microsoft Windows XP SP2 y SP3 y Server 2003 SP2, permite a atacantes remotos asistidos por usuarios inyectar secuencias de comandos web o HTML de su elección a través un fichero manipulado que aparece en una vita previa como  resultado de una búsqueda, también conocido como \"Vulnerabilidad de Ejecución de secuencia de comandos en Búsqueda en Windows\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_search:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE057D58-FD03-4AC8-8000-0690961D9458"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54935",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/35366",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022353",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1542",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-023",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5428",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0563",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:00:00.313",
      "lastModified" : "2026-04-22T13:52:28.770",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Viewer 2003 SP3; Microsoft Office Word Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a crafted tag containing an invalid length field, aka \"Word Buffer Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región stack de la memoria en Office Word 2002 SP3, 2003 SP3 y 2007 SP1 y SP2 de Microsoft; Office para Mac 2004 y 2008 de Microsoft; Open XML File Format Converter para Mac; Office Word Viewer 2003 SP3 de Microsoft; Office Word Viewer de Microsoft; y Office Compatibility Pack para formatos de archivo de Word, Excel y PowerPoint 2007 SP1 y SP2 de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de un documento de Word con una etiqueta diseñada que contiene un campo de longitud no válido, también se conoce como \"Word Buffer Overflow Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-06-08",
      "cisaActionDue" : "2022-06-22",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Office Buffer Overflow Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "0B191155-67F2-4C6E-BD0C-AF5AF6F04BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "08AF794A-435D-4171-9DBB-EB7FAED96DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2008:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "421ACF1B-1B21-4416-98ED-BAA5C210EAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C94F2C-786B-45E4-B80A-FC668D917014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B44889-AEEB-4713-A047-C27B802DB257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64B2636-8F96-48BA-921F-A8FA0E62DE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B148CC-6C58-411B-8503-01F3BE1D5906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:open_xml_file_format_converter:-:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "4BC69733-551E-4535-B851-4A3EF71E98CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54959",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504204/100/0/threaded",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35188",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022356",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1546",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-035",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-027",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6133",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/54959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504204/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0563",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0565",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:00:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a malformed record that triggers memory corruption, aka \"Word Buffer Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Microsoft Office Word 2000 SP3, 2002 SP3, y 2007 SP1 y SP2; Microsoft Office para Mac 2004 y 2008; Conversor de formato de archivo Open XML para Mac; y Microsoft Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats SP1 y SP2, permite a los atacantes remotos ejecutar arbitrariamente código a través de un documento Word con un registro malformado que lanza una corrupción de memoria, también conocido como \"Vulnerabilidad de desbordamiento de búfer Word\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "5BA91840-371C-4282-9F7F-B393F785D260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3382DE96-A3CD-4094-9828-2955472BBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B2B207-751F-4596-B805-B4622E312B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E99B12F-0DB7-4D0F-AD54-DD906CC8E3BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA5243A-BA58-41BC-8FFC-317239E511C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "413DBB72-E807-46EC-AD7B-4D62C6217CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0B3ECA7D-1B9B-44EF-B76C-01CB36CCC33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E647A7B3-7A92-4584-BDA7-81752FF59411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B148CC-6C58-411B-8503-01F3BE1D5906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54960",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securityreason.com/securityalert/8206",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35190",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022356",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1546",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-027",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6334",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/8206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0568",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:00:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly maintain its internal state, which allows remote attackers to overwrite arbitrary memory locations via a crafted RPC message that triggers incorrect pointer reading, related to \"IDL interfaces containing a non-conformant varying array\" and FC_SMVARRAY, FC_LGVARRAY, FC_VARIABLE_REPEAT, and FC_VARIABLE_OFFSET, aka \"RPC Marshalling Engine Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El motor RPC Marshalling (también conocido como NDR) en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 SP2 no mantiene de forma adecuada su estado interno, lo que permite a atacantes remotos sobrescribir posiciones de memoria de su elección a través de un mensaje RPC manipulado que provoca una lectura de puntero incorrecta, relativo a \"Interfaces IDL que contienen una tabla variable no conforme\" y FC_SMVARRAY, FC_LGVARRAY, FC_VARIABLE_REPEAT, y FC_VARIABLE_OFFSET, tambien conocido como \"Vulnerabilidad dl motor RPC Marshalling\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2978BF86-5A1A-438E-B81F-F360D0E30C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:itanium:*",
            "matchCriteriaId" : "39F303CD-DB64-4FE6-AB4F-461E5E8AFB83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "17804445-2C63-4381-A721-7F3BB3DC645F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:2008:*:*:*:*:*:itanium:*",
            "matchCriteriaId" : "EF19CAA4-DAF7-4237-9F1F-153E28E19A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:2008:*:sp2:*:*:*:itanium:*",
            "matchCriteriaId" : "E8C46066-5DDF-4FB1-8EEC-CDFA8D588DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "BAB70FD5-09F3-4215-99C4-299EDE8D26DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "283F5DF4-B68A-4C1D-822A-1C0EB67C2C35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "F8216946-5F76-48B9-91CC-207F657D7D3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "B36BFDA7-596B-45EA-AACE-F8A796CECDBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "06E7E0F7-AA6F-477C-AAA7-C0419CD2F3BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAEEA81-5037-4B68-98D9-83AAEBC98E20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "ABBA5D64-4184-4420-B7D0-A4E41359AA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/srd/archive/2009/06/09/ms09-026-how-a-developer-can-know-if-their-rpc-interface-is-affected.aspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54936",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35219",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022357",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1545",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-026",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6227",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/06/09/ms09-026-how-a-developer-can-know-if-their-rpc-interface-is-affected.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1138",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:00:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests, which allows remote attackers to execute arbitrary code via a request that uses hexadecimal encoding, whose associated memory is not released, related to a \"DN AttributeValue,\" aka \"Active Directory Invalid Free Vulnerability.\"  NOTE: this issue is probably a memory leak."
      }, {
        "lang" : "es",
        "value" : "El servicio LDAP en Active Directory en Microsoft Windows 2000 SP4 no habilita correctamente la memoria para las solicitudes LDAP y LDAPS, lo que permite a los atacantes remotos ejecutar código arbitrario a través de una solicitud que utiliza codificación hexadecimal, cuya memoria asociada no es liberada, relacionado con un \"DN AttributeValue,\" o \"vulnerabilidad libre inválida de Active Directory.\" Nota: este problema es probablemente una fuga de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=804",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54937",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/35355",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-214.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35226",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022349",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1537",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-018",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6180",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-214.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1139",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:00:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and Server 2003 SP2, allows remote attackers to cause a denial of service (memory consumption and service outage) via (1) LDAP or (2) LDAPS requests with unspecified OID filters, aka \"Active Directory Memory Leak Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Fuga de memoria en el servicio LDAP en Active Directory en Microsoft Windows 2000 SP4 y Server 2003 SP2, y Active Directory Application Mode (ADAM) en Windows XP SP2 y SP3 y Server 2003 SP2, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y parada del servicio) a través de (1) LDAP o (2) peticiones LDAPS con filtros OID sin especificar, también conocido como \"Vulnerabilidad de fuga de memoria en el Directorio Activo\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:adam:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED2AEC0-0BD2-4537-8910-99EED39F34DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "E0BBA081-24D5-4990-882F-69CB05CC28CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional:*:*:*:*:*",
            "matchCriteriaId" : "C29F02ED-85FC-4D22-A6DE-5F9C77ECCD70"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:professional:*:*:*:*:*",
            "matchCriteriaId" : "471B4ADA-8627-48BC-B13F-FF5F38F55C9D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54938",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/35355",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-214.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35225",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022349",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1537",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-018",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6253",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-214.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1533",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:00:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka \"File Converter Buffer Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en los conversores de documentos Works para Windows en Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, y Works v8.5 y v9 permite a atacantes remotos ejecutar código arbitrario a través de un archivo .wps elaborado que provoca la corrupción de memoria , también conocido como \"Vulnerabilidad de desbordamiento de buffer en el conversor de ficheros\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_xp:sp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8158B4-CF89-4545-9EBF-6AB868D63648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EE0CCD-69AD-4705-9BB0-24688F7957F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0579650D-24E9-46FF-8876-5164D4397E10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/srd/archive/2009/06/09/ms09-024.aspx",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN70858401/index.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54939",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/35371",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35184",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022354",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022355",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1543",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-024",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6292",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/06/09/ms09-024.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN70858401/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving access to frame contents after completion of a page transition."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WebKit de Apple Safari anterior a v4.0, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de vectores que incluyen acceso a contenidos de marco después de finalizar la transición de una página."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "2AA3463B-FB1D-4957-A738-946399B1B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1F5F96DD-BD44-497B-A05E-326819BC46F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B00DC91-9895-405E-B9B4-211ABC3728DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "82C4A098-7EAC-4611-B621-3F0EB1B15960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "56B016E7-C403-42AC-BF75-9BA723122A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "83CFAFD2-630E-4DB9-B187-6918CFE3075C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "F03B8DC9-B295-42A8-904F-3D1F827FFECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "03BBCC9D-E160-4614-B2B8-6359FE644E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CDB6B46E-30E1-4E16-A941-F5E19AB34493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "E783789C-C5D4-47A2-A947-D19793B182E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE3C68CF-21A2-47D8-84F2-FD3219E90043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 uses predictable random numbers in JavaScript applications, which makes it easier for remote web servers to track the behavior of a Safari user during a session."
      }, {
        "lang" : "es",
        "value" : "WebKit en Apple Safari anterior a v4.0 emplea números aleatorios predecibles en las aplicaciones JavaScript, esto simplifica a los servidores Web remotos seguir el comportamiento de un usuario de Safari en una sesión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "2AA3463B-FB1D-4957-A738-946399B1B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1F5F96DD-BD44-497B-A05E-326819BC46F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B00DC91-9895-405E-B9B4-211ABC3728DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "82C4A098-7EAC-4611-B621-3F0EB1B15960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "56B016E7-C403-42AC-BF75-9BA723122A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "83CFAFD2-630E-4DB9-B187-6918CFE3075C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "F03B8DC9-B295-42A8-904F-3D1F827FFECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "03BBCC9D-E160-4614-B2B8-6359FE644E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CDB6B46E-30E1-4E16-A941-F5E19AB34493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "E783789C-C5D4-47A2-A947-D19793B182E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE3C68CF-21A2-47D8-84F2-FD3219E90043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject HTTP headers and bypass the Same Origin Policy via a crafted HTML document, related to cross-site scripting (XSS) attacks that depend on communication with arbitrary web sites on the same server through use of XMLHttpRequest without a Host header."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección CRLF (se refiere a CR (retorno de carro) y LF (salto de línea)) en WebKit en Apple Safari anterior a v4.0. Permite a atacantes remotos inyectar cabeceras HTTP y saltarse la política \"Same Origin\" a través de un documento HTML manipulado, relativo a ataques de secuencias de comandos en sitios cruzados (XSS) que dependen de la comunicación con sitios Web arbitrarios dentro del mismo servidor Web, mediante el uso de XMLHttpRequest sin la cabecera Host."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "2AA3463B-FB1D-4957-A738-946399B1B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1F5F96DD-BD44-497B-A05E-326819BC46F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B00DC91-9895-405E-B9B4-211ABC3728DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "82C4A098-7EAC-4611-B621-3F0EB1B15960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "56B016E7-C403-42AC-BF75-9BA723122A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "83CFAFD2-630E-4DB9-B187-6918CFE3075C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "F03B8DC9-B295-42A8-904F-3D1F827FFECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "03BBCC9D-E160-4614-B2B8-6359FE644E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CDB6B46E-30E1-4E16-A941-F5E19AB34493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "E783789C-C5D4-47A2-A947-D19793B182E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE3C68CF-21A2-47D8-84F2-FD3219E90043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document."
      }, {
        "lang" : "es",
        "value" : "WebKit en Apple Safari anteriores a v4.0 no inicializa un puntero durante el proceso de llamada de función attr Cascading Style Sheets (CSS) con un argumento numérico largo, lo que permite a los atacantes remotos ejecutar arbitrariamente código o causar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de documentos HTML manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2",
            "matchCriteriaId" : "B6E139B2-65BD-4416-9D99-48E132BEC3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B74019F-C365-4E13-BBB4-D84AD9C1F87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*",
            "matchCriteriaId" : "018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*",
            "matchCriteriaId" : "1082B33F-33B5-453A-A5AA-10F65AB2E625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*",
            "matchCriteriaId" : "EC348464-F08D-4ABF-BB90-3FA93C786F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDCF83E-620C-40FA-9901-5D939E315143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A33F900-D405-40A8-A0A5-3C80320FF6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4444A309-5A97-4E1C-B4EA-C4A070A98CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B29951B-9A98-45B7-8E4B-5515C048EC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED950D-38AB-4D66-B97A-FB982D86057F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FDEB4F-133A-43DF-A89B-53E249F1293D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E78F43-07BD-4D62-9512-DA738A92BC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE25E9E-826E-4782-AED8-AC6297B18D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3180366-2240-467E-8AB9-BEA0430948F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E834B8-545E-4472-9D60-B4CF1340D62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB9CC52-E533-4306-9E92-73C84B264D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A5CA99-8B1C-4C35-85E3-DB0495444A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D8C2EF-D552-4279-A12E-70E292F39E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00082E3-EBF5-4C23-9F57-BF73E587FC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C453B588-15FD-4A9C-8BC1-6202A21DAE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BB6761-3581-4AE6-85E0-1609D15D7618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA1A4C8-9F87-449F-A11F-52E5D52247E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340C4071-1447-477F-942A-8E09EA29F917"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FA2602-DDAB-4E23-A3D2-FB712970AAD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.zoller.lu/2009/05/advisory-apple-safari-remote-code.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1128.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504173/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504295/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-822-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-836-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-032/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.zoller.lu/2009/05/advisory-apple-safari-remote-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1128.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504173/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504295/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-822-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-836-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-032/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as demonstrated by a file:///etc/passwd URL in an entity declaration, related to an \"XXE attack.\""
      }, {
        "lang" : "es",
        "value" : "La implementación de la hoja de estilo XSL en WebKit en Apple Safari anterior a v4.0 no maneja adecuadamente las entidades externas XML, lo cual permite a atacantes remotos leer ficheros arbitrarios a través de un DTD elaborado, como lo demuestra un fichero: ///etc/passwd URL en una declaración de entidad, relacionado con un \"ataque XXE\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0",
            "matchCriteriaId" : "212BF588-5C81-4801-A76D-73FB1DE211EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "614C28E3-3645-4B20-95E5-42E7F123ADDB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01C8B7E-EB19-40EA-B1D2-9AE5EA536C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5646FDE9-CF21-46A9-B89D-F5BBDB4249AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://osvdb.org/54972",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://scarybeastsecurity.blogspot.com/2009/06/apples-safari-4-fixes-local-file-theft.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35321",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8907",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://osvdb.org/54972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://scarybeastsecurity.blogspot.com/2009/06/apples-safari-4-fixes-local-file-theft.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read XML content from arbitrary web pages via a crafted document."
      }, {
        "lang" : "es",
        "value" : "La implementación XSLT en WebKit en Apple Safari anteriores a 4.0 no trata apropiadamente las redirecciones, lo que permite a los atacantes remotos leer contenido XML desde páginas web arbitrarias a través de documentos manipudados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2",
            "matchCriteriaId" : "B6E139B2-65BD-4416-9D99-48E132BEC3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B74019F-C365-4E13-BBB4-D84AD9C1F87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*",
            "matchCriteriaId" : "018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*",
            "matchCriteriaId" : "1082B33F-33B5-453A-A5AA-10F65AB2E625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*",
            "matchCriteriaId" : "EC348464-F08D-4ABF-BB90-3FA93C786F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDCF83E-620C-40FA-9901-5D939E315143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A33F900-D405-40A8-A0A5-3C80320FF6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4444A309-5A97-4E1C-B4EA-C4A070A98CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B29951B-9A98-45B7-8E4B-5515C048EC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED950D-38AB-4D66-B97A-FB982D86057F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FDEB4F-133A-43DF-A89B-53E249F1293D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E78F43-07BD-4D62-9512-DA738A92BC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE25E9E-826E-4782-AED8-AC6297B18D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3180366-2240-467E-8AB9-BEA0430948F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E834B8-545E-4472-9D60-B4CF1340D62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB9CC52-E533-4306-9E92-73C84B264D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A5CA99-8B1C-4C35-85E3-DB0495444A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D8C2EF-D552-4279-A12E-70E292F39E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00082E3-EBF5-4C23-9F57-BF73E587FC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C453B588-15FD-4A9C-8BC1-6202A21DAE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BB6761-3581-4AE6-85E0-1609D15D7618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA1A4C8-9F87-449F-A11F-52E5D52247E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FA2602-DDAB-4E23-A3D2-FB712970AAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340C4071-1447-477F-942A-8E09EA29F917"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by destroying a document.body element that has an unspecified XML container with elements that support the dir attribute."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso después de la liberación en la implementación en WebKit en Apple Safari anteriores a v4.0, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de la aplicación) destruyendo un elemento document.body que tiene un contenedor XML no especificado con elementos que soportan el atributo dir. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2",
            "matchCriteriaId" : "B6E139B2-65BD-4416-9D99-48E132BEC3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B74019F-C365-4E13-BBB4-D84AD9C1F87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*",
            "matchCriteriaId" : "018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*",
            "matchCriteriaId" : "1082B33F-33B5-453A-A5AA-10F65AB2E625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*",
            "matchCriteriaId" : "EC348464-F08D-4ABF-BB90-3FA93C786F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDCF83E-620C-40FA-9901-5D939E315143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A33F900-D405-40A8-A0A5-3C80320FF6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4444A309-5A97-4E1C-B4EA-C4A070A98CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B29951B-9A98-45B7-8E4B-5515C048EC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED950D-38AB-4D66-B97A-FB982D86057F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FDEB4F-133A-43DF-A89B-53E249F1293D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E78F43-07BD-4D62-9512-DA738A92BC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE25E9E-826E-4782-AED8-AC6297B18D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3180366-2240-467E-8AB9-BEA0430948F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E834B8-545E-4472-9D60-B4CF1340D62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB9CC52-E533-4306-9E92-73C84B264D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A5CA99-8B1C-4C35-85E3-DB0495444A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D8C2EF-D552-4279-A12E-70E292F39E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00082E3-EBF5-4C23-9F57-BF73E587FC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C453B588-15FD-4A9C-8BC1-6202A21DAE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BB6761-3581-4AE6-85E0-1609D15D7618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA1A4C8-9F87-449F-A11F-52E5D52247E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FA2602-DDAB-4E23-A3D2-FB712970AAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340C4071-1447-477F-942A-8E09EA29F917"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504172/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-033/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504172/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-033/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to improper handling of Location and History objects."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WebKit en Apple Safari anteriores a v4.0 permite a atacantes remotos inyectar secuencias de comandos web i HTML a traves de vctores relacionados con la gestion inadecuada de los objetos \"Location\" y \"History\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2",
            "matchCriteriaId" : "B6E139B2-65BD-4416-9D99-48E132BEC3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B74019F-C365-4E13-BBB4-D84AD9C1F87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*",
            "matchCriteriaId" : "018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*",
            "matchCriteriaId" : "1082B33F-33B5-453A-A5AA-10F65AB2E625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*",
            "matchCriteriaId" : "EC348464-F08D-4ABF-BB90-3FA93C786F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDCF83E-620C-40FA-9901-5D939E315143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A33F900-D405-40A8-A0A5-3C80320FF6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4444A309-5A97-4E1C-B4EA-C4A070A98CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B29951B-9A98-45B7-8E4B-5515C048EC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED950D-38AB-4D66-B97A-FB982D86057F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FDEB4F-133A-43DF-A89B-53E249F1293D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E78F43-07BD-4D62-9512-DA738A92BC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE25E9E-826E-4782-AED8-AC6297B18D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3180366-2240-467E-8AB9-BEA0430948F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E834B8-545E-4472-9D60-B4CF1340D62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB9CC52-E533-4306-9E92-73C84B264D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A5CA99-8B1C-4C35-85E3-DB0495444A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D8C2EF-D552-4279-A12E-70E292F39E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00082E3-EBF5-4C23-9F57-BF73E587FC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C453B588-15FD-4A9C-8BC1-6202A21DAE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BB6761-3581-4AE6-85E0-1609D15D7618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA1A4C8-9F87-449F-A11F-52E5D52247E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FA2602-DDAB-4E23-A3D2-FB712970AAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340C4071-1447-477F-942A-8E09EA29F917"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and (2) video elements, which allows remote attackers to determine the existence of arbitrary files via a crafted HTML document."
      }, {
        "lang" : "es",
        "value" : "WebKit en Apple Safari anterior a v4.0 no prevé las referencias a archivos; URLs con elementos de (1) audio y (2) vídeo, lo que permite a atacantes remotos determinar la existencia de archivos de su elección a través de un documento HTML manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "2AA3463B-FB1D-4957-A738-946399B1B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1F5F96DD-BD44-497B-A05E-326819BC46F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B00DC91-9895-405E-B9B4-211ABC3728DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "82C4A098-7EAC-4611-B621-3F0EB1B15960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "56B016E7-C403-42AC-BF75-9BA723122A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "83CFAFD2-630E-4DB9-B187-6918CFE3075C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "F03B8DC9-B295-42A8-904F-3D1F827FFECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "03BBCC9D-E160-4614-B2B8-6359FE644E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CDB6B46E-30E1-4E16-A941-F5E19AB34493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "E783789C-C5D4-47A2-A947-D19793B182E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE3C68CF-21A2-47D8-84F2-FD3219E90043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CFNetwork in Apple Safari before 4.0 misinterprets downloaded image files as local HTML documents in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript code by placing it in an image file."
      }, {
        "lang" : "es",
        "value" : "CFNetwork en Apple Safari anteriores a v4.0 malinterpreta los ficheros de imagen descargados como ficheros locales HTML en circunstancias sin especificar, lo que permite a atacantes remotos ejecutar código  JavaScript de forma arbitraria incluyendo este en un fichero de imagen."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "2AA3463B-FB1D-4957-A738-946399B1B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1F5F96DD-BD44-497B-A05E-326819BC46F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B00DC91-9895-405E-B9B4-211ABC3728DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "82C4A098-7EAC-4611-B621-3F0EB1B15960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "56B016E7-C403-42AC-BF75-9BA723122A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "83CFAFD2-630E-4DB9-B187-6918CFE3075C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "F03B8DC9-B295-42A8-904F-3D1F827FFECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "03BBCC9D-E160-4614-B2B8-6359FE644E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CDB6B46E-30E1-4E16-A941-F5E19AB34493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "E783789C-C5D4-47A2-A947-D19793B182E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE3C68CF-21A2-47D8-84F2-FD3219E90043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022343",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted font data."
      }, {
        "lang" : "es",
        "value" : "CoreGraphics en Apple Safari anteriores a v4.0 en Windows no utiliza adecuadamente la aritmética durante la inicialización automática de las fuentes TrueType, lo que permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (consumo de memoria y caída de aplicación) a través de una fuente de datos manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "7E203D81-FABE-4A63-8930-1DA15A86E113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "49875E29-AA30-4D96-9ED9-538823DD5E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C5471735-D9C0-491B-9A6A-07B39AA215CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "1E5C52F3-2109-40FD-9945-A9A9D42C076E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "151DEB6D-5857-4B0B-8449-5735768024A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "476EBE1F-66E1-4EF5-8344-BEDA97F306A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "480ED2AC-0DA4-44DA-A902-8534335077B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C9AD216D-0C95-4843-A1A1-C3C9A6219277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "04B8652D-BE06-49CB-A636-8B53B2DF9168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Private Browsing feature in Apple Safari before 4.0 on Windows does not remove cookies from the alternate cookie store in unspecified circumstances upon (1) disabling of the feature or (2) exit of the application, which makes it easier for remote web servers to track users via a cookie."
      }, {
        "lang" : "es",
        "value" : "La característica de Navegación Privada de Apple Safari anterior a v4.0 en Windows no elimina las cookies del almacenamiento de cookies alternativo en circunstancias no especificadas en relación con (1) la desactivación de la característica o (2) la salida de la aplicación, esto hace que sea más sencillo a los servidores Web remotos seguir a los usuarios mediante una cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "7E203D81-FABE-4A63-8930-1DA15A86E113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "49875E29-AA30-4D96-9ED9-538823DD5E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C5471735-D9C0-491B-9A6A-07B39AA215CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "1E5C52F3-2109-40FD-9945-A9A9D42C076E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "151DEB6D-5857-4B0B-8449-5735768024A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "476EBE1F-66E1-4EF5-8344-BEDA97F306A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "480ED2AC-0DA4-44DA-A902-8534335077B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C9AD216D-0C95-4843-A1A1-C3C9A6219277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "04B8652D-BE06-49CB-A636-8B53B2DF9168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the Reset Safari implementation in Apple Safari before 4.0 on Windows might allow local users to read stored web-site passwords via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en la implementación de \"Reset Safari\" en Apple Safari anteriores a la v4.0 en Windows permitiría a usuarios locales leer contraseñas web a través de vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "905F4A8A-49EE-40EB-983C-72C4AFBD98DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari before 4.0 does not prevent calls to the open-help-anchor URL handler by web sites, which allows remote attackers to open arbitrary local help files, and execute arbitrary code or obtain sensitive information, via a crafted call."
      }, {
        "lang" : "es",
        "value" : "Apple Safari anterior a v4.0 no previene las llamadas al manejador URL  open-help-anchor por los sitios web, lo que permite a atacantes remotos abrir archivos de ayuda locales, ejecutar código de su elección u obtener información sensible a través de una llamada manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "D72FE38B-BD04-4FC7-AE41-6459CBDF207A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7F7275FE-C28A-4067-B9EF-BC99E10188DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E2249206-EF91-4168-B7C2-C1DB35CDFA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "641D655F-E210-4795-836C-BBF6D90B92E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A6EED222-BF5E-475A-B255-18041B4A5B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1FC456E7-727C-4932-A0D0-B0D168E8C523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "303E4616-1BB6-4D2D-8437-47F3D1B3C13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "03C2A522-2D71-4909-B86F-DBEE2C703F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E75B3EAD-A9D3-4497-B3B0-E31E807010A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F837BE0E-9255-41C5-8E49-57090A574A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "586ED537-9BB4-4931-8891-E60740983C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "73B23547-9710-44E9-A32A-6320C8E7A780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EBFEED2C-8822-44EB-9296-82862DB14DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "FD35EC3D-01E2-4FA7-95AC-A2E57C652649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C23C022E-293E-4247-A9AD-2F27C29E92A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "75359A0E-823A-45C5-8C61-ABE225FB939F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F8283078-D722-40AC-AF7A-7BC9AD19D051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "66132AA6-F3EA-408D-9C43-8E6C577C8F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D8CFE8E7-B970-4B86-99E9-AC3F8626737C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "7E203D81-FABE-4A63-8930-1DA15A86E113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "49875E29-AA30-4D96-9ED9-538823DD5E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C5471735-D9C0-491B-9A6A-07B39AA215CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "1E5C52F3-2109-40FD-9945-A9A9D42C076E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "151DEB6D-5857-4B0B-8449-5735768024A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "476EBE1F-66E1-4EF5-8344-BEDA97F306A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "480ED2AC-0DA4-44DA-A902-8534335077B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C9AD216D-0C95-4843-A1A1-C3C9A6219277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "04B8652D-BE06-49CB-A636-8B53B2DF9168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via an SVG animation element, related to SVG set objects, SVG marker elements, the targetElement attribute, and unspecified \"caches.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso después de la liberación en la implementación de la recolección de basura en  WebCore en WebKit en Apple Safari anteriores a v4.0 que permite a los atacantes remotos ejecutar arbitrariamente código o causar una denegación de servicio (corrupción de memoria dinámica y caída de la aplicación) a través de un elemento de animación SVG, en relación a objetos establecidos SVG, elementos indicadores SVG, el atributo targetElement, y \"caches\" no especificadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "D72FE38B-BD04-4FC7-AE41-6459CBDF207A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7F7275FE-C28A-4067-B9EF-BC99E10188DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E2249206-EF91-4168-B7C2-C1DB35CDFA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "641D655F-E210-4795-836C-BBF6D90B92E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A6EED222-BF5E-475A-B255-18041B4A5B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1FC456E7-727C-4932-A0D0-B0D168E8C523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "303E4616-1BB6-4D2D-8437-47F3D1B3C13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "03C2A522-2D71-4909-B86F-DBEE2C703F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E75B3EAD-A9D3-4497-B3B0-E31E807010A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F837BE0E-9255-41C5-8E49-57090A574A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "586ED537-9BB4-4931-8891-E60740983C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "73B23547-9710-44E9-A32A-6320C8E7A780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EBFEED2C-8822-44EB-9296-82862DB14DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "FD35EC3D-01E2-4FA7-95AC-A2E57C652649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C23C022E-293E-4247-A9AD-2F27C29E92A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "75359A0E-823A-45C5-8C61-ABE225FB939F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F8283078-D722-40AC-AF7A-7BC9AD19D051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "66132AA6-F3EA-408D-9C43-8E6C577C8F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D8CFE8E7-B970-4B86-99E9-AC3F8626737C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "7E203D81-FABE-4A63-8930-1DA15A86E113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "49875E29-AA30-4D96-9ED9-538823DD5E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C5471735-D9C0-491B-9A6A-07B39AA215CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "1E5C52F3-2109-40FD-9945-A9A9D42C076E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "151DEB6D-5857-4B0B-8449-5735768024A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "476EBE1F-66E1-4EF5-8344-BEDA97F306A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "480ED2AC-0DA4-44DA-A902-8534335077B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C9AD216D-0C95-4843-A1A1-C3C9A6219277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "04B8652D-BE06-49CB-A636-8B53B2DF9168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1130.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-034/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/823-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1130.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-034/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/823-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of (1) the host name, (2) security indicators, and unspecified other UI elements via a custom cursor in conjunction with a modified CSS3 hotspot property."
      }, {
        "lang" : "es",
        "value" : "WebKit en Apple Safari anteriores a v4.0 permite a atacantes remotos suplantar en la pantalla del navegador el (1) nombre del equipo, (2) indicadores de seguridad, y otros elementos de la interface del usuario a través de un cursor personalizado junto a la propiedad hotspot de CSS3 modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "D72FE38B-BD04-4FC7-AE41-6459CBDF207A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7F7275FE-C28A-4067-B9EF-BC99E10188DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E2249206-EF91-4168-B7C2-C1DB35CDFA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "641D655F-E210-4795-836C-BBF6D90B92E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A6EED222-BF5E-475A-B255-18041B4A5B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1FC456E7-727C-4932-A0D0-B0D168E8C523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "303E4616-1BB6-4D2D-8437-47F3D1B3C13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "03C2A522-2D71-4909-B86F-DBEE2C703F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E75B3EAD-A9D3-4497-B3B0-E31E807010A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F837BE0E-9255-41C5-8E49-57090A574A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "586ED537-9BB4-4931-8891-E60740983C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "73B23547-9710-44E9-A32A-6320C8E7A780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EBFEED2C-8822-44EB-9296-82862DB14DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "FD35EC3D-01E2-4FA7-95AC-A2E57C652649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C23C022E-293E-4247-A9AD-2F27C29E92A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "75359A0E-823A-45C5-8C61-ABE225FB939F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F8283078-D722-40AC-AF7A-7BC9AD19D051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "66132AA6-F3EA-408D-9C43-8E6C577C8F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D8CFE8E7-B970-4B86-99E9-AC3F8626737C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "7E203D81-FABE-4A63-8930-1DA15A86E113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "49875E29-AA30-4D96-9ED9-538823DD5E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C5471735-D9C0-491B-9A6A-07B39AA215CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "1E5C52F3-2109-40FD-9945-A9A9D42C076E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "151DEB6D-5857-4B0B-8449-5735768024A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "476EBE1F-66E1-4EF5-8344-BEDA97F306A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "480ED2AC-0DA4-44DA-A902-8534335077B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C9AD216D-0C95-4843-A1A1-C3C9A6219277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "04B8652D-BE06-49CB-A636-8B53B2DF9168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebKit in Apple Safari before 4.0 does not properly initialize memory for Attr DOM objects, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document."
      }, {
        "lang" : "es",
        "value" : "WebKit en Apple Safari anterior a v4.0 no inicializa correctamente memoria para los objetos Attr DOM, lo cual permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de la aplicación) a través de un documento HTML elaborado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "2AA3463B-FB1D-4957-A738-946399B1B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1F5F96DD-BD44-497B-A05E-326819BC46F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B00DC91-9895-405E-B9B4-211ABC3728DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "82C4A098-7EAC-4611-B621-3F0EB1B15960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "56B016E7-C403-42AC-BF75-9BA723122A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "83CFAFD2-630E-4DB9-B187-6918CFE3075C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "F03B8DC9-B295-42A8-904F-3D1F827FFECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "03BBCC9D-E160-4614-B2B8-6359FE644E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CDB6B46E-30E1-4E16-A941-F5E19AB34493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "E783789C-C5D4-47A2-A947-D19793B182E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE3C68CF-21A2-47D8-84F2-FD3219E90043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "905F4A8A-49EE-40EB-983C-72C4AFBD98DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-836-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-836-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which allows remote attackers to execute arbitrary code, gain privileges, or obtain sensitive information via an APPLET or OBJECT element."
      }, {
        "lang" : "es",
        "value" : "WebKit de Apple Safari anterior a v4.0 no previene la carga remota de los applets de Java locales, esto permite a atacante remotos ejecutar código de su elección, aumentar sus privilegios u obtener información sensible a través de un APPLET o elemento OBJECT."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "2AA3463B-FB1D-4957-A738-946399B1B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1F5F96DD-BD44-497B-A05E-326819BC46F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B00DC91-9895-405E-B9B4-211ABC3728DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "82C4A098-7EAC-4611-B621-3F0EB1B15960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "56B016E7-C403-42AC-BF75-9BA723122A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "83CFAFD2-630E-4DB9-B187-6918CFE3075C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "F03B8DC9-B295-42A8-904F-3D1F827FFECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "03BBCC9D-E160-4614-B2B8-6359FE644E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CDB6B46E-30E1-4E16-A941-F5E19AB34493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "E783789C-C5D4-47A2-A947-D19793B182E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE3C68CF-21A2-47D8-84F2-FD3219E90043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-836-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-836-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which allows remote attackers to read (1) arbitrary local files and (2) files from different security zones via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad XSLT en WebKit en Apple Safari anteriores a v4.0 no implementa adecuadamente la función \"document\", lo que permite a atacantes remotos leer (1) ficheros locales arbitrariamente (2) ficheros de diferentes zonas de seguridad a través de vectores inespecíficos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "2AA3463B-FB1D-4957-A738-946399B1B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1F5F96DD-BD44-497B-A05E-326819BC46F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B00DC91-9895-405E-B9B4-211ABC3728DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "82C4A098-7EAC-4611-B621-3F0EB1B15960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "56B016E7-C403-42AC-BF75-9BA723122A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "83CFAFD2-630E-4DB9-B187-6918CFE3075C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "F03B8DC9-B295-42A8-904F-3D1F827FFECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "03BBCC9D-E160-4614-B2B8-6359FE644E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CDB6B46E-30E1-4E16-A941-F5E19AB34493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "E783789C-C5D4-47A2-A947-D19793B182E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE3C68CF-21A2-47D8-84F2-FD3219E90043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to the improper escaping of HTML attributes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Web Inspector en WebKit in Apple Safari anterior a v4.0, permite a atacantes asistidos por el usuario, inyectar secuencias comandos web o HTML de su elección y leer archivos locales, a través de vectores relacionado con caracteres de escape HTML inapropiados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "D72FE38B-BD04-4FC7-AE41-6459CBDF207A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7F7275FE-C28A-4067-B9EF-BC99E10188DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E2249206-EF91-4168-B7C2-C1DB35CDFA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "641D655F-E210-4795-836C-BBF6D90B92E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A6EED222-BF5E-475A-B255-18041B4A5B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1FC456E7-727C-4932-A0D0-B0D168E8C523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "303E4616-1BB6-4D2D-8437-47F3D1B3C13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "03C2A522-2D71-4909-B86F-DBEE2C703F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E75B3EAD-A9D3-4497-B3B0-E31E807010A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F837BE0E-9255-41C5-8E49-57090A574A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "586ED537-9BB4-4931-8891-E60740983C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "73B23547-9710-44E9-A32A-6320C8E7A780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EBFEED2C-8822-44EB-9296-82862DB14DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "FD35EC3D-01E2-4FA7-95AC-A2E57C652649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C23C022E-293E-4247-A9AD-2F27C29E92A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "75359A0E-823A-45C5-8C61-ABE225FB939F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F8283078-D722-40AC-AF7A-7BC9AD19D051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "66132AA6-F3EA-408D-9C43-8E6C577C8F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D8CFE8E7-B970-4B86-99E9-AC3F8626737C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "7E203D81-FABE-4A63-8930-1DA15A86E113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "49875E29-AA30-4D96-9ED9-538823DD5E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C5471735-D9C0-491B-9A6A-07B39AA215CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "1E5C52F3-2109-40FD-9945-A9A9D42C076E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "151DEB6D-5857-4B0B-8449-5735768024A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "476EBE1F-66E1-4EF5-8344-BEDA97F306A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "480ED2AC-0DA4-44DA-A902-8534335077B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C9AD216D-0C95-4843-A1A1-C3C9A6219277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "04B8652D-BE06-49CB-A636-8B53B2DF9168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to script execution with incorrect privileges."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Web Inspector en WebKit en Apple Safari anteriores a v4.0 permite a atacantes remotos ayudados por por el usuario inyectar secuencias de comandos web o HTML, y leer ficheros locales, a través de vectores relacionados con la ejecución de secuencias de comandos con privilegios incorrectos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "2AA3463B-FB1D-4957-A738-946399B1B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1F5F96DD-BD44-497B-A05E-326819BC46F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B00DC91-9895-405E-B9B4-211ABC3728DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "82C4A098-7EAC-4611-B621-3F0EB1B15960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "56B016E7-C403-42AC-BF75-9BA723122A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "83CFAFD2-630E-4DB9-B187-6918CFE3075C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "F03B8DC9-B295-42A8-904F-3D1F827FFECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "03BBCC9D-E160-4614-B2B8-6359FE644E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CDB6B46E-30E1-4E16-A941-F5E19AB34493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "E783789C-C5D4-47A2-A947-D19793B182E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE3C68CF-21A2-47D8-84F2-FD3219E90043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "905F4A8A-49EE-40EB-983C-72C4AFBD98DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CFNetwork in Apple Safari before 4.0 on Windows does not properly protect the temporary files created for downloads, which allows local users to obtain sensitive information by reading these files."
      }, {
        "lang" : "es",
        "value" : "CFNetwork en Apple Safari anterior a v4.0 sobre Windows, no protege adecuadamente los ficheros temporales de las descargas que crea, lo que permite a usuarios locales obtener información sensible leyendo éstos archivos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "D72FE38B-BD04-4FC7-AE41-6459CBDF207A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7F7275FE-C28A-4067-B9EF-BC99E10188DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E2249206-EF91-4168-B7C2-C1DB35CDFA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "641D655F-E210-4795-836C-BBF6D90B92E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A6EED222-BF5E-475A-B255-18041B4A5B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1FC456E7-727C-4932-A0D0-B0D168E8C523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "303E4616-1BB6-4D2D-8437-47F3D1B3C13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "03C2A522-2D71-4909-B86F-DBEE2C703F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E75B3EAD-A9D3-4497-B3B0-E31E807010A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F837BE0E-9255-41C5-8E49-57090A574A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "586ED537-9BB4-4931-8891-E60740983C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "73B23547-9710-44E9-A32A-6320C8E7A780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EBFEED2C-8822-44EB-9296-82862DB14DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "FD35EC3D-01E2-4FA7-95AC-A2E57C652649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C23C022E-293E-4247-A9AD-2F27C29E92A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "75359A0E-823A-45C5-8C61-ABE225FB939F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F8283078-D722-40AC-AF7A-7BC9AD19D051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "66132AA6-F3EA-408D-9C43-8E6C577C8F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D8CFE8E7-B970-4B86-99E9-AC3F8626737C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "7E203D81-FABE-4A63-8930-1DA15A86E113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "49875E29-AA30-4D96-9ED9-538823DD5E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C5471735-D9C0-491B-9A6A-07B39AA215CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "1E5C52F3-2109-40FD-9945-A9A9D42C076E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "151DEB6D-5857-4B0B-8449-5735768024A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "476EBE1F-66E1-4EF5-8344-BEDA97F306A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "480ED2AC-0DA4-44DA-A902-8534335077B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C9AD216D-0C95-4843-A1A1-C3C9A6219277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "04B8652D-BE06-49CB-A636-8B53B2DF9168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T18:00:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to obtain sensitive information via vectors involving drag events and the dragging of content over a crafted web page."
      }, {
        "lang" : "es",
        "value" : "Webkit de Apple Safari anterior a v4.0, permite a atacantes remotos con la ayuda del usuario obtener información sensible a través de vectores que utilizan eventos drag -arrastrar- y el arrastre de contenidos a través de una página Web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0_beta",
            "matchCriteriaId" : "2AA3463B-FB1D-4957-A738-946399B1B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1F5F96DD-BD44-497B-A05E-326819BC46F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B00DC91-9895-405E-B9B4-211ABC3728DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "82C4A098-7EAC-4611-B621-3F0EB1B15960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "56B016E7-C403-42AC-BF75-9BA723122A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "83CFAFD2-630E-4DB9-B187-6918CFE3075C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "F03B8DC9-B295-42A8-904F-3D1F827FFECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "03BBCC9D-E160-4614-B2B8-6359FE644E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CDB6B46E-30E1-4E16-A941-F5E19AB34493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "E783789C-C5D4-47A2-A947-D19793B182E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE3C68CF-21A2-47D8-84F2-FD3219E90043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9270F5C4-63B9-48C5-9D6D-9CDA1461205C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0549",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Microsoft Office Excel Viewer 2003 SP3 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka \"Record Pointer Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Excel en Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, y Office 2004 y 2008 para Mac; Open XML File Format Converter para Mac; y Microsoft Office Excel Viewer 2003 SP3 permite a atacantes remotos ejecutar codigo de forma arbitraria a través de un fichero Excel con un objeto \"record\" deformado, también conocido como \"Vulnerabilidad de Corrupción de Puntero \"Record\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "5BA91840-371C-4282-9F7F-B393F785D260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3382DE96-A3CD-4094-9828-2955472BBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "806086B6-AB83-4008-A1A2-73BC35A95925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "AD22DBA8-40B0-4197-9D56-38D5D9E1ED89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "297A9F48-13DF-4042-AC21-B8B764B217BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F03E302A-83DE-46FF-9044-09230841BD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2613CE-C469-43AE-A590-87CE1FAADA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B18C291F-57C2-4328-8FCF-3C1A27B0D18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*",
            "matchCriteriaId" : "E013CE59-0ABF-4542-A9E9-D295AA0FC2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*",
            "matchCriteriaId" : "C0AEECDD-BBD0-4042-8A47-D66670A6DC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*",
            "matchCriteriaId" : "91A3E58F-E2FE-4346-9083-58C963171A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "6BE07062-6299-4371-BD74-BA7F7840DBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54952",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35215",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022351",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1540",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5830",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0557",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.203",
      "lastModified" : "2026-04-22T13:52:31.190",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka \"Object Record Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Excel en Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, y Office 2004 y 2008 para Mac; Excel en  Microsoft Office 2007 System SP1 y SP2; Open XML File Format Converter para Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; y Microsoft Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats SP1 y SP2 permiten a atacantes remotos ejecutar código de su elección a través de un fichero manipulado con un objeto grabado de forma incorrecta, también conocida como \"Vulnerabilidad de corrupción de objeto grabado\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-06-08",
      "cisaActionDue" : "2022-06-22",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Office Object Record Corruption Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "0B191155-67F2-4C6E-BD0C-AF5AF6F04BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "08AF794A-435D-4171-9DBB-EB7FAED96DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2008:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "421ACF1B-1B21-4416-98ED-BAA5C210EAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C94F2C-786B-45E4-B80A-FC668D917014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B44889-AEEB-4713-A047-C27B802DB257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "940DEFD7-4281-46A9-9962-4E15048EB22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B18C291F-57C2-4328-8FCF-3C1A27B0D18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F007E987-9CCF-4786-AB23-C5F4AE51D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "875D8BED-E54F-4C54-9071-A3BAAF4493A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:open_xml_file_format_converter:-:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "4BC69733-551E-4535-B851-4A3EF71E98CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54953",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35241",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022351",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1540",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5564",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/54953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0557",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0558",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka \"Array Indexing Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Error de índice de matriz en Excel en Office 2000 SP3 y Office 2004 y 2008 para Mac, y Open XML File Format Converter para Mac, de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo de Excel diseñado con un objeto de registro malformado, también se conoce como \"Array Indexing Memory Corruption Vulnerability”."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "5BA91840-371C-4282-9F7F-B393F785D260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3382DE96-A3CD-4094-9828-2955472BBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "806086B6-AB83-4008-A1A2-73BC35A95925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "AD22DBA8-40B0-4197-9D56-38D5D9E1ED89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "297A9F48-13DF-4042-AC21-B8B764B217BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F03E302A-83DE-46FF-9044-09230841BD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2613CE-C469-43AE-A590-87CE1FAADA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B18C291F-57C2-4328-8FCF-3C1A27B0D18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*",
            "matchCriteriaId" : "E013CE59-0ABF-4542-A9E9-D295AA0FC2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*",
            "matchCriteriaId" : "C0AEECDD-BBD0-4042-8A47-D66670A6DC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*",
            "matchCriteriaId" : "91A3E58F-E2FE-4346-9083-58C963171A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "6BE07062-6299-4371-BD74-BA7F7840DBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54954",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-1/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504188/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35242",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022351",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1540",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11525",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504188/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0559",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka \"String Copy Stack-Based Overrun Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Excel en Microsoft Office 2000 SP3 y Office XP SP3, permite a atacantes remotos ejecutar código de su elección a través de un archivo Excel con un objeto de registro mal formado, también conocido como \"Vulnerabilidad String Copy Stack-Based Overrun\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "5BA91840-371C-4282-9F7F-B393F785D260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3382DE96-A3CD-4094-9828-2955472BBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "806086B6-AB83-4008-A1A2-73BC35A95925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "AD22DBA8-40B0-4197-9D56-38D5D9E1ED89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "297A9F48-13DF-4042-AC21-B8B764B217BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F03E302A-83DE-46FF-9044-09230841BD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2613CE-C469-43AE-A590-87CE1FAADA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B18C291F-57C2-4328-8FCF-3C1A27B0D18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*",
            "matchCriteriaId" : "E013CE59-0ABF-4542-A9E9-D295AA0FC2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*",
            "matchCriteriaId" : "C0AEECDD-BBD0-4042-8A47-D66670A6DC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*",
            "matchCriteriaId" : "91A3E58F-E2FE-4346-9083-58C963171A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "6BE07062-6299-4371-BD74-BA7F7840DBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35243",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022351",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1540",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6273",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0560",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka \"Field Sanitization Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Excel en Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, y Office 2004 y 2008 para Mac; Excel en 2007 Microsoft Office System SP1 y SP2; Open XML File Format Converter para Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; y Microsoft Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats SP1 y SP2 permite a atacantes remotos ejecutar código de su elección a través de un archivo Excel manipulado con un objeto record mal formado, también conocido como \"Vulnerabilidad de corrupción de memoria en la limpieza de campos\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "5BA91840-371C-4282-9F7F-B393F785D260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3382DE96-A3CD-4094-9828-2955472BBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "806086B6-AB83-4008-A1A2-73BC35A95925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "AD22DBA8-40B0-4197-9D56-38D5D9E1ED89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "297A9F48-13DF-4042-AC21-B8B764B217BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F03E302A-83DE-46FF-9044-09230841BD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2613CE-C469-43AE-A590-87CE1FAADA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B18C291F-57C2-4328-8FCF-3C1A27B0D18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*",
            "matchCriteriaId" : "E013CE59-0ABF-4542-A9E9-D295AA0FC2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*",
            "matchCriteriaId" : "C0AEECDD-BBD0-4042-8A47-D66670A6DC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*",
            "matchCriteriaId" : "91A3E58F-E2FE-4346-9083-58C963171A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "6BE07062-6299-4371-BD74-BA7F7840DBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54956",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35244",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022351",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1540",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6178",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0561",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; and Microsoft Office SharePoint Server 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via an Excel file with a Shared String Table (SST) record with a numeric field that specifies an invalid number of unique strings, which triggers a heap-based buffer overflow, aka \"Record Integer Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento enteros en Excel en Office 2000 SP3, Office XP SP3, Office 2003 SP3 y Office 2004 y 2008 para Mac de Microsoft; Excel en 2007 Office System SP1 y SP2 de Microsoft; Open XML File Format Converter para Mac; Office Excel Viewer 2003 SP3 de Microsoft; Office Excel Viewer de Microsoft; Office Compatibility Pack para formatos de archivo de Word, Excel y PowerPoint 2007 SP1 y SP2 de Microsoft; y Office SharePoint Server 2007 SP1 y SP2 de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo de Excel con un registro de tabla de cadenas compartidas (SST) con un campo numérico que especifica un número no válido de cadenas únicas, lo que desencadena un desbordamiento de búfer en la región heap de la memoria, también se conoce como \"Record Integer Overflow Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "5BA91840-371C-4282-9F7F-B393F785D260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3382DE96-A3CD-4094-9828-2955472BBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "806086B6-AB83-4008-A1A2-73BC35A95925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "AD22DBA8-40B0-4197-9D56-38D5D9E1ED89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "297A9F48-13DF-4042-AC21-B8B764B217BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F03E302A-83DE-46FF-9044-09230841BD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2613CE-C469-43AE-A590-87CE1FAADA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B18C291F-57C2-4328-8FCF-3C1A27B0D18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*",
            "matchCriteriaId" : "E013CE59-0ABF-4542-A9E9-D295AA0FC2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*",
            "matchCriteriaId" : "C0AEECDD-BBD0-4042-8A47-D66670A6DC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*",
            "matchCriteriaId" : "91A3E58F-E2FE-4346-9083-58C963171A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "6BE07062-6299-4371-BD74-BA7F7840DBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=805",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54957",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-12/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504190/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35245",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022351",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1540",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5925",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/54957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504190/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1122",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka \"IIS 5.0 WebDAV Authentication Bypass Vulnerability,\" a different vulnerability than CVE-2009-1535."
      }, {
        "lang" : "es",
        "value" : "La extension WebDAV en Microsoft Internet Information Services (IIS) v5.0 on Windows 2000 SP4 no decodifica adecuadamente las URLs, lo que permite a atacantes remotos evitar la autenticación, y posiblemente leer o crear ficheros, a través de una petición HTTP manipulada, también conocido como \"Vulnerabilidad para evitar la autenticación de WebDAV en IIS v5.0\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "413C07EA-139F-4B7D-A58B-835BD2591FA0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.attrition.org/pipermail/vim/2009-June/002192.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35232",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022358",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1539",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-020",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5861",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-June/002192.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1123",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.327",
      "lastModified" : "2026-04-22T13:52:26.343",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application, aka \"Windows Kernel Desktop Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El kernel en Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 SP2 no valida adecuadamente los cambios en objetos del kernel no especificados, lo que permite a usuarios locales obtener privilegios a través de una aplicación manipulada, también conocida como \"Vulnerabilidad de  escritorio en el kernel de Windows\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-03",
      "cisaActionDue" : "2022-03-24",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Windows Improper Input Validation Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:-:*:*:*",
            "matchCriteriaId" : "A6FBF171-B6B6-4244-AE1A-8E09FE44161E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:*:*",
            "matchCriteriaId" : "68592FA5-6CD3-41A3-A4DA-C1C472297FF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54940",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35372",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022359",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1544",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6206",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/54940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-1123",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1124",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode pointers in unspecified error conditions, which allows local users to gain privileges via a crafted application, aka \"Windows Kernel Pointer Validation Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El Kernel en Microsoft Windows 2000 SP4, XP SP2 y XP SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 SP2 no validan de forma apropiada los punteros en modo usuario, bajo condiciones de error no especificadas, lo que permite a usuarios locales ganar privilegios a través de aplicaciones manipuladas, también conocido como (Vulnerabilidad de validación de punteros en el Kernel de Windows."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7C684420-1614-4DAE-9BD9-F1FE9102A50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:x32:*:*:*:*:*:*",
            "matchCriteriaId" : "9517571A-BC1A-4838-A094-30081A86D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:x64:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7CA7F0-9C4D-4172-91BD-90A8C86EE337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54941",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/35372",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35238",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022359",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1544",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6231",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1125",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate an argument to an unspecified system call, which allows local users to gain privileges via a crafted application, aka \"Windows Driver Class Registration Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "The kernel en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 SP2, no valida adecuadamente un argumento de una llamada de sistema inespecífica, lo que permite a usuarios locales ganar privilegios a través de una aplicación manipulada, también conocido como \"Vulnerabilidad de Registro de Clase de Driver de Windows\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7C684420-1614-4DAE-9BD9-F1FE9102A50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:x32:*:*:*:*:*:*",
            "matchCriteriaId" : "9517571A-BC1A-4838-A094-30081A86D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:x64:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7CA7F0-9C4D-4172-91BD-90A8C86EE337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54942",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/35372",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35240",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022359",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1544",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5912",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1126",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate the user-mode input associated with the editing of an unspecified desktop parameter, which allows local users to gain privileges via a crafted application, aka \"Windows Desktop Parameter Edit Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El kernel en Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP2, no valida adecuadamente la entrada \"user-mode\" asociada con la edición de un parámetro de escritorio no especificados lo que permite a usuarios locales obtener privilegios a través de una aplicación manipulada, también conocida como \"Vulnerabilidad de edición de parámetro en el escritorio de Windows\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7C684420-1614-4DAE-9BD9-F1FE9102A50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:x32:*:*:*:*:*:*",
            "matchCriteriaId" : "9517571A-BC1A-4838-A094-30081A86D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:x64:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7CA7F0-9C4D-4172-91BD-90A8C86EE337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54943",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/35372",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022359",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1544",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6016",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1134",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a BIFF file with a malformed Qsir (0x806) record object, aka \"Record Pointer Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Excel en 2007 Office System SP1 y SP2 de Microsoft; Office Excel Viewer de Microsoft; y Office Compatibility Pack para formatos de archivo de Word, Excel y PowerPoint 2007 SP1 y SP2 de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo BIFF con un objeto de registro Qsir (0x806) malformado, también se conoce como \"Record Pointer Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "5BA91840-371C-4282-9F7F-B393F785D260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3382DE96-A3CD-4094-9828-2955472BBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "806086B6-AB83-4008-A1A2-73BC35A95925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "AD22DBA8-40B0-4197-9D56-38D5D9E1ED89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "297A9F48-13DF-4042-AC21-B8B764B217BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F03E302A-83DE-46FF-9044-09230841BD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2613CE-C469-43AE-A590-87CE1FAADA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B18C291F-57C2-4328-8FCF-3C1A27B0D18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*",
            "matchCriteriaId" : "E013CE59-0ABF-4542-A9E9-D295AA0FC2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*",
            "matchCriteriaId" : "C0AEECDD-BBD0-4042-8A47-D66670A6DC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*",
            "matchCriteriaId" : "91A3E58F-E2FE-4346-9083-58C963171A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "6BE07062-6299-4371-BD74-BA7F7840DBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54958",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504213/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35246",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022351",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1540",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-040/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5922",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504213/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-040/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1140",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01 SP4; 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not prevent HTML rendering of cached content, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka \"Cross-Domain Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 5.01 SP4; 6 SP1; 6 y 7 en Windows XP SP2 y SP3; 6 y 7 en Server 2003 SP2; 7 en Vista Gold, SP1 y SP2; y 7 en Server 2008 SP2; no impide la renderización HTML de los contenidos cacheados, esto permite a atacantes remotos evitar la política de mismo origen -Same Origin Policy- mediante vectores no especificados. También se conoce como \"Vulnerabilidad de Revelación de Información en Dominios Cruzados\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "29EDE745-5A26-42BF-AFDE-7D985BB09D44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*",
            "matchCriteriaId" : "C4BFF042-5C0B-482A-915B-3B9A267D2D96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id?1022350",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1538",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6278",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1141",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via unspecified DHTML function calls related to a tr element and the \"insertion, deletion and attributes of a table cell,\" which trigger memory corruption when the window is destroyed, aka \"DHTML Object Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer versión 6 para Microsoft Windows versiones XP SP2 y SP3 y Server 2003 SP2, permite a los atacantes remotos ejecutar código arbitrario por medio de llamadas de función DHTML no especificadas relacionadas con un elemento tr y la \"insertion, deletion and attributes of a table cell\", que desencadenan corrupción de la memoria cuando el windows se destruye, también se conoce como \"DHTML Object Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "29EDE745-5A26-42BF-AFDE-7D985BB09D44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.fortiguardcenter.com/advisory/FGA-2009-22.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504207/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022350",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1538",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5554",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.fortiguardcenter.com/advisory/FGA-2009-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504207/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1528",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly synchronize AJAX requests, which allows allows remote attackers to execute arbitrary code via a large number of concurrent, asynchronous XMLHttpRequest calls, aka \"HTML Object Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer versiones 6 y 7 para Windows XP SP2 y SP3; 6 y 7 para el servidor 2003 SP2; 7 para Vista Gold, SP1 y SP2; y 7 para Server 2008 SP2, no sincroniza apropiadamente las peticiones AJAX, lo que permite a los atacantes remotos ejecutar código arbitrario mediante un gran número de llamadas simultáneas, asincrónicas XMLHttpRequest, también se conoce como \"HTML Object Memory Corruption Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "29EDE745-5A26-42BF-AFDE-7D985BB09D44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*",
            "matchCriteriaId" : "C4BFF042-5C0B-482A-915B-3B9A267D2D96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54947",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504206/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35222",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022350",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1538",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-037",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6260",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504206/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1529",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by calling the setCapture method on a collection of crafted objects, aka \"Uninitialized Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 7 para Windows XP SP2 y SP3; 7 para Server 2003 SP2; 7 para Vista Gold, SP1 y SP2; y 7 para Server 2008 SP2, no maneja apropiadamente los objetos en la memoria, lo que permite a los atacantes remotos ejecutar código arbitrario llamando al método setCapture en una colección de objetos creados, también se conoce como \"Uninitialized Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "29EDE745-5A26-42BF-AFDE-7D985BB09D44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*",
            "matchCriteriaId" : "C4BFF042-5C0B-482A-915B-3B9A267D2D96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52E757F-9B41-43B4-9D67-3FEDACA71283"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F99773-D1AF-4596-856A-CA164D4B68E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F916C0D-3B99-46F3-A7AE-BAF067361499"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47EBFCC-1828-45AB-BC6D-FB980929A81A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:sp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E69F8C21-5996-4083-A02A-F04AE948CEA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54948",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504205/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35223",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022350",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1538",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-036",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6295",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504205/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1530",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code by repeatedly adding HTML document nodes and calling event handlers, which triggers an access of an object that (1) was not properly initialized or (2) is deleted, aka \"HTML Objects Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Uso de la Memoria Previamente Liberada en Microsoft Internet Explorer 7 para Windows XP SP2 y SP3; 7 para Server 2003 SP2; 7 para Vista Gold, SP1 y SP2; y 7 para Server 2008 SP2 permite a los atacantes remotos ejecutar código arbitrario mediante la adición repetida de nodos de documentos HTML y el llamado a los Controladores de Eventos, lo que desencadena un acceso de un objeto que (1) no se inicializó apropiadamente o (2) se elimina, también se conoce como \"HTML Objects Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "29EDE745-5A26-42BF-AFDE-7D985BB09D44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*",
            "matchCriteriaId" : "C4BFF042-5C0B-482A-915B-3B9A267D2D96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52E757F-9B41-43B4-9D67-3FEDACA71283"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F99773-D1AF-4596-856A-CA164D4B68E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F916C0D-3B99-46F3-A7AE-BAF067361499"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47EBFCC-1828-45AB-BC6D-FB980929A81A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:sp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E69F8C21-5996-4083-A02A-F04AE948CEA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54949",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504209/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022350",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1538",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-038",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6294",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504209/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1531",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code via frequent calls to the getElementsByTagName function combined with the creation of an object during reordering of elements, followed by an onreadystatechange event, which triggers an access of an object that (1) was not properly initialized or (2) is deleted, aka \"HTML Object Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 7 para Windows XP SP2 y SP3; 7 para Server 2003 SP2; 7 para Vista Gold, SP1 y SP2; y 7 para Server 2008 SP2 permite a los atacantes remotos ejecutar código arbitrario por medio de llamadas frecuentes a la función getElementsByTagName combinada con la creación de un objeto durante el reordenamiento de elementos, seguida por un evento onReadyStateChange, que desencadena un acceso de un objeto que (1) no se inicializó apropiadamente o (2) se elimina, también se conoce como \"HTML Object Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA778424-6F70-4AB6-ADD5-5D4664DFE463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*",
            "matchCriteriaId" : "BCE2197B-7C58-4693-B9BB-0B31EABB6B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*",
            "matchCriteriaId" : "C4BFF042-5C0B-482A-915B-3B9A267D2D96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12423F-FCCD-4F4C-9037-7607C1F1F99E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54950",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504216/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35234",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022350",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1538",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-039",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6308",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/54950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504216/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1532",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-06-10T18:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 8 for Windows XP SP2 and SP3; 8 for Server 2003 SP2; 8 for Vista Gold, SP1, and SP2; and 8 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code via \"malformed row property references\" that trigger an access of an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka \"HTML Objects Memory Corruption Vulnerability\" or \"HTML Object Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 8 para Windows XP SP2 y SP3; 8 para Server 2003 SP2; 8 para Vista Gold, SP1 y SP2; y 8 para Server 2008 SP2 no maneja apropiadamente los objetos en la memoria, lo que permite a los atacantes remotos ejecutar código arbitrario por medio de \"malformed row property references\" que desencadenan un acceso de un objeto que (1) no se inicializó apropiadamente o (2) se elimina, lo que conlleva a corrupción de la memoria, también se conoce como \"HTML Objects Memory Corruption Vulnerability\" o \"HTML Object Memory Corruption Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52E757F-9B41-43B4-9D67-3FEDACA71283"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:x64:*",
            "matchCriteriaId" : "3A118DC8-CD3A-461F-867E-5174F24FBAE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:x86:*",
            "matchCriteriaId" : "1114016B-B51D-495D-96AC-A0E7992DA551"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD715BA-B0EB-4D42-BCB1-97B261459E52"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*",
            "matchCriteriaId" : "C6109348-BC79-4ED3-8D41-EA546A540C79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54951",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504208/100/0/threaded",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022350",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1538",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-041",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6244",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/54951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504208/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-160A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-10T19:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Installer in Apple Safari before 4.0 on Windows allows local users to gain privileges by checking a box that specifies an immediate launch of the application after installation, related to an unspecified compression method."
      }, {
        "lang" : "es",
        "value" : "El instalador en Apple Safari anterior a v4.0 en Windows permite a usuarios locales obtener privilegios marcando un cuadro (checkbox) que especifica que aplicación ejecutar después de la instalación, en relación con un método de compresión sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "F1F650EC-4778-4233-9CF5-2B809CE4C799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A588615E-EE35-4E19-8BDA-598ED9664686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E61C168-482B-412A-97E8-B1C651797EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D137F48A-E670-4BDB-B003-C6BB2A33F250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B256D38-257B-4C3D-9EA5-2255BF3A329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "77F31F4B-5305-4D75-9277-95EF99A969A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDE11F09-3D57-4CF0-8165-90FB234CC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "99118352-6845-4704-B4A3-F98E8C06E0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0198",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-06-11T15:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF file that contains JBIG2 text region segments with Huffman encoding."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en el filtro JBIG2 en adobe acrobat 7 reader 7  anterior a v7.1.3, Adobe Reader 8 y Acrobat 8 anterior a v8.1.6, y Adobe Reader 9 y Acrobat 9 anterior v9.1.2, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o posiblemente, la ejecución de código de su elección a través de un archivo PDF manipulado que contiene unos segmentos de una región de texto JBIG2 codificado en Huffman."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AC8F85CD-8371-4B36-8D6A-8B2CA580631B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "FE88C274-CC72-4341-9BF6-1924054A12FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "507C02CF-7E81-4131-99DE-63E4EEC45F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "47EBEF8E-3C53-41D5-B344-297ED7C432F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "DC0DF265-984D-462D-878E-612783BF0BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0335D33B-20D8-483F-AB5E-E2517F2F900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2341215F-97A7-40B6-B618-7FF022C7CFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D61F0564-59B9-4811-B7FD-BA044C6A94AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9C9A3E43-7334-44B0-BF01-04BB19B6FE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D3E43C1B-D76D-4486-AE7A-943D34D0A92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "F52F86E7-E845-48A5-9CC4-98E6DAA43C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*",
            "matchCriteriaId" : "60B53243-BF52-4028-8345-17636668A830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "CC9D669B-7E9D-4F39-894A-D9438000F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0D9CA54D-9D60-4064-B6AC-8CED8D064465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "55836D2A-487E-4B94-AC48-75A427D414F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E102FB9C-DE4B-481D-8F21-20143DDE3992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "023C5C61-6629-480E-93AD-5F2691E51AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "0E16B425-B123-4BA3-AC93-5F400ED8F6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C6F47894-50FB-4192-A3CC-D944124F08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "5D6C9969-DFEF-4059-BE92-28969930EACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "EA23452E-F5C7-4756-8245-1F398BA78E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "21113403-CA7D-4082-9516-C672C9A487C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "8F04372D-60A1-4407-8CF1-113262846783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
            "matchCriteriaId" : "C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "56691A9A-4C98-4D5F-9734-B225F534CC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "43F1C1B8-20B5-4534-A753-19EC415D0E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "74B6AF0A-DBEA-4EBD-A528-80AE31386375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF485FB-3317-4C89-B636-F22FF19B00BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5849F63A-4E06-411F-95F0-A40B88F0C609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CDBD40-C67F-4F59-88CF-5C0953056420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F234ECA6-375B-493B-A659-F013DAEE5B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-24/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504217/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35302",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51015",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504217/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T15:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to execute arbitrary code via a crafted file that triggers memory corruption."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en el filtro JBIG2 en Adobe Reader v7 y Acrobat v7 anteriores a v7.1.3, Adobe Reader 8 y Acrobat v8 anteriores a v8.1.6, y Adobe Reader v9 y Acrobat v9 anteriores a v9.1.2 podría permitir a atacantes remotos ejecutar código de su elección a través de fichero manipulado que provoque una corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AC8F85CD-8371-4B36-8D6A-8B2CA580631B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "FE88C274-CC72-4341-9BF6-1924054A12FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "507C02CF-7E81-4131-99DE-63E4EEC45F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "47EBEF8E-3C53-41D5-B344-297ED7C432F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "DC0DF265-984D-462D-878E-612783BF0BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0335D33B-20D8-483F-AB5E-E2517F2F900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2341215F-97A7-40B6-B618-7FF022C7CFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D61F0564-59B9-4811-B7FD-BA044C6A94AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9C9A3E43-7334-44B0-BF01-04BB19B6FE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D3E43C1B-D76D-4486-AE7A-943D34D0A92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "F52F86E7-E845-48A5-9CC4-98E6DAA43C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*",
            "matchCriteriaId" : "60B53243-BF52-4028-8345-17636668A830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "CC9D669B-7E9D-4F39-894A-D9438000F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0D9CA54D-9D60-4064-B6AC-8CED8D064465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "55836D2A-487E-4B94-AC48-75A427D414F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E102FB9C-DE4B-481D-8F21-20143DDE3992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "023C5C61-6629-480E-93AD-5F2691E51AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "0E16B425-B123-4BA3-AC93-5F400ED8F6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C6F47894-50FB-4192-A3CC-D944124F08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "5D6C9969-DFEF-4059-BE92-28969930EACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "EA23452E-F5C7-4756-8245-1F398BA78E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "21113403-CA7D-4082-9516-C672C9A487C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "8F04372D-60A1-4407-8CF1-113262846783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
            "matchCriteriaId" : "C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "56691A9A-4C98-4D5F-9734-B225F534CC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "43F1C1B8-20B5-4534-A753-19EC415D0E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "74B6AF0A-DBEA-4EBD-A528-80AE31386375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF485FB-3317-4C89-B636-F22FF19B00BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5849F63A-4E06-411F-95F0-A40B88F0C609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CDBD40-C67F-4F59-88CF-5C0953056420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F234ECA6-375B-493B-A659-F013DAEE5B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T15:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0511, CVE-2009-0512, CVE-2009-0888, and CVE-2009-0889."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en el filtro JBIG2 en Adobe Reader v7 y Acrobat v7 anteriores a v7.1.3, Adobe Reader 8 y Acrobat v8 anteriores a v8.1.6, y Adobe Reader v9 y Acrobat v9 anteriores a v9.1.2 podría permitir a atacantes remotos ejecutar código de su elección a través de vectores no especificados, es una vulnerabilidad dsitinta a CVE-2009-0511, CVE-2009-0512, CVE-2009-0888, and CVE-2009-0889."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AC8F85CD-8371-4B36-8D6A-8B2CA580631B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "FE88C274-CC72-4341-9BF6-1924054A12FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "507C02CF-7E81-4131-99DE-63E4EEC45F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "47EBEF8E-3C53-41D5-B344-297ED7C432F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "DC0DF265-984D-462D-878E-612783BF0BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0335D33B-20D8-483F-AB5E-E2517F2F900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2341215F-97A7-40B6-B618-7FF022C7CFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D61F0564-59B9-4811-B7FD-BA044C6A94AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9C9A3E43-7334-44B0-BF01-04BB19B6FE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D3E43C1B-D76D-4486-AE7A-943D34D0A92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "F52F86E7-E845-48A5-9CC4-98E6DAA43C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*",
            "matchCriteriaId" : "60B53243-BF52-4028-8345-17636668A830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "CC9D669B-7E9D-4F39-894A-D9438000F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0D9CA54D-9D60-4064-B6AC-8CED8D064465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "55836D2A-487E-4B94-AC48-75A427D414F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E102FB9C-DE4B-481D-8F21-20143DDE3992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "023C5C61-6629-480E-93AD-5F2691E51AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "0E16B425-B123-4BA3-AC93-5F400ED8F6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C6F47894-50FB-4192-A3CC-D944124F08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "5D6C9969-DFEF-4059-BE92-28969930EACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "EA23452E-F5C7-4756-8245-1F398BA78E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "21113403-CA7D-4082-9516-C672C9A487C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "8F04372D-60A1-4407-8CF1-113262846783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
            "matchCriteriaId" : "C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "56691A9A-4C98-4D5F-9734-B225F534CC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "43F1C1B8-20B5-4534-A753-19EC415D0E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "74B6AF0A-DBEA-4EBD-A528-80AE31386375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF485FB-3317-4C89-B636-F22FF19B00BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5849F63A-4E06-411F-95F0-A40B88F0C609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CDBD40-C67F-4F59-88CF-5C0953056420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F234ECA6-375B-493B-A659-F013DAEE5B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T15:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0512, CVE-2009-0888, and CVE-2009-0889."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en el filtro JBIG2 en adobe acrobat 7 reader 7  anterior a v7.1.3, Adobe Reader 8 y Acrobat 8 anterior a v8.1.6, y Adobe Reader 9 y Acrobat 9 anterior v9.1.2, permite a atacantes remotos ejecutar código de su elección a través de vectores no especificados. Vulnerabilidad distinta de  CVE-2009-0510, CVE-2009-0512, CVE-2009-0888, y CVE-2009-0889."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AC8F85CD-8371-4B36-8D6A-8B2CA580631B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "FE88C274-CC72-4341-9BF6-1924054A12FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "507C02CF-7E81-4131-99DE-63E4EEC45F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "47EBEF8E-3C53-41D5-B344-297ED7C432F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "DC0DF265-984D-462D-878E-612783BF0BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0335D33B-20D8-483F-AB5E-E2517F2F900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2341215F-97A7-40B6-B618-7FF022C7CFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D61F0564-59B9-4811-B7FD-BA044C6A94AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9C9A3E43-7334-44B0-BF01-04BB19B6FE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D3E43C1B-D76D-4486-AE7A-943D34D0A92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "F52F86E7-E845-48A5-9CC4-98E6DAA43C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*",
            "matchCriteriaId" : "60B53243-BF52-4028-8345-17636668A830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "CC9D669B-7E9D-4F39-894A-D9438000F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0D9CA54D-9D60-4064-B6AC-8CED8D064465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "55836D2A-487E-4B94-AC48-75A427D414F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E102FB9C-DE4B-481D-8F21-20143DDE3992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "023C5C61-6629-480E-93AD-5F2691E51AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "0E16B425-B123-4BA3-AC93-5F400ED8F6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C6F47894-50FB-4192-A3CC-D944124F08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "5D6C9969-DFEF-4059-BE92-28969930EACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "EA23452E-F5C7-4756-8245-1F398BA78E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "21113403-CA7D-4082-9516-C672C9A487C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "8F04372D-60A1-4407-8CF1-113262846783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
            "matchCriteriaId" : "C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "56691A9A-4C98-4D5F-9734-B225F534CC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "43F1C1B8-20B5-4534-A753-19EC415D0E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "74B6AF0A-DBEA-4EBD-A528-80AE31386375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF485FB-3317-4C89-B636-F22FF19B00BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5849F63A-4E06-411F-95F0-A40B88F0C609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CDBD40-C67F-4F59-88CF-5C0953056420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F234ECA6-375B-493B-A659-F013DAEE5B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T15:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0888, and CVE-2009-0889."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en el filtro JBIG2 en adobe acrobat 7 reader 7  anterior a v7.1.3, Adobe Reader 8 y Acrobat 8 anterior a v8.1.6, y Adobe Reader 9 y Acrobat 9 anterior v9.1.2, permite a atacantes remotos ejecutar código de su elección a través de vectores no especificados. Vulnerabilidad distinta de  CVE-2009-0510, CVE-2009-0511, CVE-2009-0888, and CVE-2009-0889."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AC8F85CD-8371-4B36-8D6A-8B2CA580631B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "FE88C274-CC72-4341-9BF6-1924054A12FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "507C02CF-7E81-4131-99DE-63E4EEC45F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "47EBEF8E-3C53-41D5-B344-297ED7C432F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "DC0DF265-984D-462D-878E-612783BF0BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0335D33B-20D8-483F-AB5E-E2517F2F900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2341215F-97A7-40B6-B618-7FF022C7CFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D61F0564-59B9-4811-B7FD-BA044C6A94AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9C9A3E43-7334-44B0-BF01-04BB19B6FE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D3E43C1B-D76D-4486-AE7A-943D34D0A92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "F52F86E7-E845-48A5-9CC4-98E6DAA43C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*",
            "matchCriteriaId" : "60B53243-BF52-4028-8345-17636668A830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "CC9D669B-7E9D-4F39-894A-D9438000F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0D9CA54D-9D60-4064-B6AC-8CED8D064465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "55836D2A-487E-4B94-AC48-75A427D414F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E102FB9C-DE4B-481D-8F21-20143DDE3992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "023C5C61-6629-480E-93AD-5F2691E51AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "0E16B425-B123-4BA3-AC93-5F400ED8F6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C6F47894-50FB-4192-A3CC-D944124F08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "5D6C9969-DFEF-4059-BE92-28969930EACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "EA23452E-F5C7-4756-8245-1F398BA78E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "21113403-CA7D-4082-9516-C672C9A487C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "8F04372D-60A1-4407-8CF1-113262846783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
            "matchCriteriaId" : "C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "56691A9A-4C98-4D5F-9734-B225F534CC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "43F1C1B8-20B5-4534-A753-19EC415D0E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "74B6AF0A-DBEA-4EBD-A528-80AE31386375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF485FB-3317-4C89-B636-F22FF19B00BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5849F63A-4E06-411F-95F0-A40B88F0C609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CDBD40-C67F-4F59-88CF-5C0953056420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F234ECA6-375B-493B-A659-F013DAEE5B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0888",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T15:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, and CVE-2009-0889."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en el filtro JBIG2 en Adobe Reader v7 y Acrobat v7 anteriores a v7.1.3, Adobe Reader 8 y Acrobat v8 anteriores a v8.1.6, y Adobe Reader v9 y Acrobat v9 anteriores a v9.1.2 podría permitir a atacantes remotos ejecutar código de su elección a través de vectores no especificados, es una vulnerabilidad dsitinta a CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, y CVE-2009-0889."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AC8F85CD-8371-4B36-8D6A-8B2CA580631B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "FE88C274-CC72-4341-9BF6-1924054A12FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "507C02CF-7E81-4131-99DE-63E4EEC45F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "47EBEF8E-3C53-41D5-B344-297ED7C432F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "DC0DF265-984D-462D-878E-612783BF0BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0335D33B-20D8-483F-AB5E-E2517F2F900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2341215F-97A7-40B6-B618-7FF022C7CFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D61F0564-59B9-4811-B7FD-BA044C6A94AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9C9A3E43-7334-44B0-BF01-04BB19B6FE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D3E43C1B-D76D-4486-AE7A-943D34D0A92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "F52F86E7-E845-48A5-9CC4-98E6DAA43C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*",
            "matchCriteriaId" : "60B53243-BF52-4028-8345-17636668A830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "CC9D669B-7E9D-4F39-894A-D9438000F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0D9CA54D-9D60-4064-B6AC-8CED8D064465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "55836D2A-487E-4B94-AC48-75A427D414F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E102FB9C-DE4B-481D-8F21-20143DDE3992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "023C5C61-6629-480E-93AD-5F2691E51AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "0E16B425-B123-4BA3-AC93-5F400ED8F6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C6F47894-50FB-4192-A3CC-D944124F08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "5D6C9969-DFEF-4059-BE92-28969930EACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "EA23452E-F5C7-4756-8245-1F398BA78E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "21113403-CA7D-4082-9516-C672C9A487C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "8F04372D-60A1-4407-8CF1-113262846783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
            "matchCriteriaId" : "C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "56691A9A-4C98-4D5F-9734-B225F534CC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "43F1C1B8-20B5-4534-A753-19EC415D0E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "74B6AF0A-DBEA-4EBD-A528-80AE31386375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF485FB-3317-4C89-B636-F22FF19B00BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5849F63A-4E06-411F-95F0-A40B88F0C609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CDBD40-C67F-4F59-88CF-5C0953056420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F234ECA6-375B-493B-A659-F013DAEE5B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T15:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, and CVE-2009-0888."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en el filtro JBIG2 en adobe acrobat 7 reader 7  anterior a v7.1.3, Adobe Reader 8 y Acrobat 8 anterior a v8.1.6, y Adobe Reader 9 y Acrobat 9 anterior v9.1.2, permite a atacantes remotos ejecutar código de su elección a través de vectores no especificados. Vulnerabilidad distinta de  CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, y CVE-2009-0888."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AC8F85CD-8371-4B36-8D6A-8B2CA580631B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "FE88C274-CC72-4341-9BF6-1924054A12FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "507C02CF-7E81-4131-99DE-63E4EEC45F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "47EBEF8E-3C53-41D5-B344-297ED7C432F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "DC0DF265-984D-462D-878E-612783BF0BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0335D33B-20D8-483F-AB5E-E2517F2F900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2341215F-97A7-40B6-B618-7FF022C7CFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D61F0564-59B9-4811-B7FD-BA044C6A94AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9C9A3E43-7334-44B0-BF01-04BB19B6FE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D3E43C1B-D76D-4486-AE7A-943D34D0A92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "F52F86E7-E845-48A5-9CC4-98E6DAA43C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*",
            "matchCriteriaId" : "60B53243-BF52-4028-8345-17636668A830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "CC9D669B-7E9D-4F39-894A-D9438000F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0D9CA54D-9D60-4064-B6AC-8CED8D064465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "55836D2A-487E-4B94-AC48-75A427D414F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E102FB9C-DE4B-481D-8F21-20143DDE3992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "023C5C61-6629-480E-93AD-5F2691E51AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "0E16B425-B123-4BA3-AC93-5F400ED8F6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C6F47894-50FB-4192-A3CC-D944124F08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "5D6C9969-DFEF-4059-BE92-28969930EACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "EA23452E-F5C7-4756-8245-1F398BA78E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "21113403-CA7D-4082-9516-C672C9A487C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "8F04372D-60A1-4407-8CF1-113262846783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
            "matchCriteriaId" : "C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "56691A9A-4C98-4D5F-9734-B225F534CC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "43F1C1B8-20B5-4534-A753-19EC415D0E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "74B6AF0A-DBEA-4EBD-A528-80AE31386375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF485FB-3317-4C89-B636-F22FF19B00BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5849F63A-4E06-411F-95F0-A40B88F0C609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CDBD40-C67F-4F59-88CF-5C0953056420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F234ECA6-375B-493B-A659-F013DAEE5B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T15:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when used with SNMP (aka HPOvNNM.HPOVSNMP) before 1.30.009 and MIB (aka HPOvNNM.HPOVMIB) before 1.30.009, allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en HP OpenView Network Node Manager (OV NNM) v7.51 y v7.53, cuando se utiliza como SNMP (también conocido como HPOvNNM.HPOVSNMP) anteriores a v1.30.009 y MIB (también conocido como HPOvNNM.HPOVMIB) anteriores a v1.30.009, permite a atacantes remotos ejecutar código arbitrario o producir una denegación de servicio a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "6692E05F-4864-449F-8A52-9001028D8C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*",
            "matchCriteriaId" : "FC1DA299-A180-4078-9172-67D116840D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FED610E9-7639-48FE-8B4F-B394A7EEC7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "C1935DA4-A1AF-4867-BCB1-F5BB75360702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "769ED1A5-C3C5-404E-8040-655D69C2AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*",
            "matchCriteriaId" : "186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D5CE1F56-FA80-416D-8F42-C1C291F0965C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:hp:hpovnnm.hpovmib:1.30.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D6A709-8FA3-4DAD-8CDE-5D09E7020B07"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:hp:hpovnnm.hpovsnmp:1.30.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3AD984B-D366-4F16-A1C4-0E8018460EE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124457320614552&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35408",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022360",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35267",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124457320614552&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T15:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via a PDF file containing a malformed U3D model file with a crafted extension block."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región stack de la memoria en Reader versión 7 y Acrobat versiones 7 anteriores a 7.1.3 de Adobe, Reader versión 8 y Acrobat versiones 8 anteriores a 8.1.6 y Reader versión 9 y Acrobat versiones 9 anteriores a 9.1.2 de Adobe, podría permitir a los atacantes ejecutar código arbitrario por medio de un archivo PDF que contiene un archivo de modelo U3D malformado con un bloque de extensión diseñado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AC8F85CD-8371-4B36-8D6A-8B2CA580631B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "FE88C274-CC72-4341-9BF6-1924054A12FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "507C02CF-7E81-4131-99DE-63E4EEC45F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "47EBEF8E-3C53-41D5-B344-297ED7C432F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "DC0DF265-984D-462D-878E-612783BF0BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0335D33B-20D8-483F-AB5E-E2517F2F900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2341215F-97A7-40B6-B618-7FF022C7CFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D61F0564-59B9-4811-B7FD-BA044C6A94AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9C9A3E43-7334-44B0-BF01-04BB19B6FE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D3E43C1B-D76D-4486-AE7A-943D34D0A92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "F52F86E7-E845-48A5-9CC4-98E6DAA43C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*",
            "matchCriteriaId" : "60B53243-BF52-4028-8345-17636668A830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "CC9D669B-7E9D-4F39-894A-D9438000F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0D9CA54D-9D60-4064-B6AC-8CED8D064465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "55836D2A-487E-4B94-AC48-75A427D414F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E102FB9C-DE4B-481D-8F21-20143DDE3992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "023C5C61-6629-480E-93AD-5F2691E51AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "0E16B425-B123-4BA3-AC93-5F400ED8F6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C6F47894-50FB-4192-A3CC-D944124F08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "5D6C9969-DFEF-4059-BE92-28969930EACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "EA23452E-F5C7-4756-8245-1F398BA78E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "21113403-CA7D-4082-9516-C672C9A487C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "8F04372D-60A1-4407-8CF1-113262846783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
            "matchCriteriaId" : "C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "56691A9A-4C98-4D5F-9734-B225F534CC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "43F1C1B8-20B5-4534-A753-19EC415D0E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "74B6AF0A-DBEA-4EBD-A528-80AE31386375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF485FB-3317-4C89-B636-F22FF19B00BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5849F63A-4E06-411F-95F0-A40B88F0C609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CDBD40-C67F-4F59-88CF-5C0953056420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F234ECA6-375B-493B-A659-F013DAEE5B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504229/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35282",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504229/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T15:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento entero en Reader versión 7 y Acrobat versiones 7 anteriores a 7.1.3 de Adobe, Reader versión 8 y Acrobat versiones 8 anteriores a 8.1.6 de Adobe, y Reader versión 9 y Acrobat versiones 9 anteriores a 9.1.2 de Adobe, permite a los atacantes causar una denegación de servicio o posiblemente ejecutar código arbitrario por medio de un archivo PDF que contiene parámetros en el filtro FlateDecode, lo que desencadena un desbordamiento de búfer en la región heap de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AC8F85CD-8371-4B36-8D6A-8B2CA580631B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "FE88C274-CC72-4341-9BF6-1924054A12FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "507C02CF-7E81-4131-99DE-63E4EEC45F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "47EBEF8E-3C53-41D5-B344-297ED7C432F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "DC0DF265-984D-462D-878E-612783BF0BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0335D33B-20D8-483F-AB5E-E2517F2F900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2341215F-97A7-40B6-B618-7FF022C7CFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D61F0564-59B9-4811-B7FD-BA044C6A94AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9C9A3E43-7334-44B0-BF01-04BB19B6FE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D3E43C1B-D76D-4486-AE7A-943D34D0A92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "F52F86E7-E845-48A5-9CC4-98E6DAA43C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*",
            "matchCriteriaId" : "60B53243-BF52-4028-8345-17636668A830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "CC9D669B-7E9D-4F39-894A-D9438000F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0D9CA54D-9D60-4064-B6AC-8CED8D064465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "55836D2A-487E-4B94-AC48-75A427D414F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E102FB9C-DE4B-481D-8F21-20143DDE3992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "023C5C61-6629-480E-93AD-5F2691E51AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "0E16B425-B123-4BA3-AC93-5F400ED8F6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C6F47894-50FB-4192-A3CC-D944124F08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "5D6C9969-DFEF-4059-BE92-28969930EACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "EA23452E-F5C7-4756-8245-1F398BA78E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "21113403-CA7D-4082-9516-C672C9A487C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "8F04372D-60A1-4407-8CF1-113262846783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
            "matchCriteriaId" : "C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "56691A9A-4C98-4D5F-9734-B225F534CC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "43F1C1B8-20B5-4534-A753-19EC415D0E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "74B6AF0A-DBEA-4EBD-A528-80AE31386375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF485FB-3317-4C89-B636-F22FF19B00BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5849F63A-4E06-411F-95F0-A40B88F0C609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CDBD40-C67F-4F59-88CF-5C0953056420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F234ECA6-375B-493B-A659-F013DAEE5B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T15:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a PDF document with a crafted TrueType font."
      }, {
        "lang" : "es",
        "value" : "Reader versión 7 y Acrobat versiones 7 anteriores a 7.1.3 de Adobe, Reader versión 8 y Acrobat versiones 8 anteriores a 8.1.6 y Reader versión 9 y Acrobat versiones 9 anteriores a 9.1.2 de Adobe, permite a los atacantes causar una denegación de servicio (corrupción de memoria) o posiblemente ejecutar código arbitrario por medio de un documento PDF con una fuente TrueType diseñada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AC8F85CD-8371-4B36-8D6A-8B2CA580631B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "FE88C274-CC72-4341-9BF6-1924054A12FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "507C02CF-7E81-4131-99DE-63E4EEC45F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "47EBEF8E-3C53-41D5-B344-297ED7C432F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "DC0DF265-984D-462D-878E-612783BF0BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0335D33B-20D8-483F-AB5E-E2517F2F900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2341215F-97A7-40B6-B618-7FF022C7CFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D61F0564-59B9-4811-B7FD-BA044C6A94AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9C9A3E43-7334-44B0-BF01-04BB19B6FE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D3E43C1B-D76D-4486-AE7A-943D34D0A92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "F52F86E7-E845-48A5-9CC4-98E6DAA43C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*",
            "matchCriteriaId" : "60B53243-BF52-4028-8345-17636668A830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "CC9D669B-7E9D-4F39-894A-D9438000F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0D9CA54D-9D60-4064-B6AC-8CED8D064465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "55836D2A-487E-4B94-AC48-75A427D414F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E102FB9C-DE4B-481D-8F21-20143DDE3992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "023C5C61-6629-480E-93AD-5F2691E51AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "0E16B425-B123-4BA3-AC93-5F400ED8F6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C6F47894-50FB-4192-A3CC-D944124F08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "5D6C9969-DFEF-4059-BE92-28969930EACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "EA23452E-F5C7-4756-8245-1F398BA78E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "21113403-CA7D-4082-9516-C672C9A487C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "8F04372D-60A1-4407-8CF1-113262846783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
            "matchCriteriaId" : "C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "56691A9A-4C98-4D5F-9734-B225F534CC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "43F1C1B8-20B5-4534-A753-19EC415D0E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "74B6AF0A-DBEA-4EBD-A528-80AE31386375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF485FB-3317-4C89-B636-F22FF19B00BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5849F63A-4E06-411F-95F0-A40B88F0C609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CDBD40-C67F-4F59-88CF-5C0953056420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F234ECA6-375B-493B-A659-F013DAEE5B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.fortiguardcenter.com/advisory/FGA-2009-25.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504239/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.fortiguardcenter.com/advisory/FGA-2009-25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504239/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T15:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors that trigger memory corruption."
      }, {
        "lang" : "es",
        "value" : "El filtro JBIG2 en Adobe Reader v7 y Acrobat v7 anterior a v7.1.3, Adobe Reader v8 y Acrobat 8 anterior a v8.1.6, y Adobe Reader v9 y Acrobat 9 anterior a v9.1.2, permitiría a atacantes remotos ejecutar código arbitrario a través de vectores inespecíficos que inician la corrupción de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AC8F85CD-8371-4B36-8D6A-8B2CA580631B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "FE88C274-CC72-4341-9BF6-1924054A12FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "507C02CF-7E81-4131-99DE-63E4EEC45F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "47EBEF8E-3C53-41D5-B344-297ED7C432F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "DC0DF265-984D-462D-878E-612783BF0BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0335D33B-20D8-483F-AB5E-E2517F2F900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2341215F-97A7-40B6-B618-7FF022C7CFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D61F0564-59B9-4811-B7FD-BA044C6A94AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9C9A3E43-7334-44B0-BF01-04BB19B6FE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D3E43C1B-D76D-4486-AE7A-943D34D0A92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "F52F86E7-E845-48A5-9CC4-98E6DAA43C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*",
            "matchCriteriaId" : "60B53243-BF52-4028-8345-17636668A830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "CC9D669B-7E9D-4F39-894A-D9438000F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0D9CA54D-9D60-4064-B6AC-8CED8D064465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "55836D2A-487E-4B94-AC48-75A427D414F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E102FB9C-DE4B-481D-8F21-20143DDE3992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "023C5C61-6629-480E-93AD-5F2691E51AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "0E16B425-B123-4BA3-AC93-5F400ED8F6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C6F47894-50FB-4192-A3CC-D944124F08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "5D6C9969-DFEF-4059-BE92-28969930EACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "EA23452E-F5C7-4756-8245-1F398BA78E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "21113403-CA7D-4082-9516-C672C9A487C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "8F04372D-60A1-4407-8CF1-113262846783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
            "matchCriteriaId" : "C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "56691A9A-4C98-4D5F-9734-B225F534CC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "43F1C1B8-20B5-4534-A753-19EC415D0E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "74B6AF0A-DBEA-4EBD-A528-80AE31386375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF485FB-3317-4C89-B636-F22FF19B00BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5849F63A-4E06-411F-95F0-A40B88F0C609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CDBD40-C67F-4F59-88CF-5C0953056420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F234ECA6-375B-493B-A659-F013DAEE5B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T15:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption."
      }, {
        "lang" : "es",
        "value" : "Adobe Reader v7 y Acrobat v7 anteriores a v7.1.3, Adobe Reader v8 y Acrobat v8 anteriores a v8.1.6, y Adobe Reader v9 y Acrobat v9 anteriores a v9.1.2 podría permitir a atacantes ejecutar código arbitrario a través de vectores inespecíficos que inician la corrupción de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AC8F85CD-8371-4B36-8D6A-8B2CA580631B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "FE88C274-CC72-4341-9BF6-1924054A12FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "507C02CF-7E81-4131-99DE-63E4EEC45F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "47EBEF8E-3C53-41D5-B344-297ED7C432F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "DC0DF265-984D-462D-878E-612783BF0BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0335D33B-20D8-483F-AB5E-E2517F2F900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2341215F-97A7-40B6-B618-7FF022C7CFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D61F0564-59B9-4811-B7FD-BA044C6A94AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9C9A3E43-7334-44B0-BF01-04BB19B6FE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D3E43C1B-D76D-4486-AE7A-943D34D0A92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "F52F86E7-E845-48A5-9CC4-98E6DAA43C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*",
            "matchCriteriaId" : "60B53243-BF52-4028-8345-17636668A830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "CC9D669B-7E9D-4F39-894A-D9438000F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0D9CA54D-9D60-4064-B6AC-8CED8D064465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "55836D2A-487E-4B94-AC48-75A427D414F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E102FB9C-DE4B-481D-8F21-20143DDE3992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "023C5C61-6629-480E-93AD-5F2691E51AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "0E16B425-B123-4BA3-AC93-5F400ED8F6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C6F47894-50FB-4192-A3CC-D944124F08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "5D6C9969-DFEF-4059-BE92-28969930EACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "EA23452E-F5C7-4756-8245-1F398BA78E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "21113403-CA7D-4082-9516-C672C9A487C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "8F04372D-60A1-4407-8CF1-113262846783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
            "matchCriteriaId" : "C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "56691A9A-4C98-4D5F-9734-B225F534CC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "43F1C1B8-20B5-4534-A753-19EC415D0E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "74B6AF0A-DBEA-4EBD-A528-80AE31386375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF485FB-3317-4C89-B636-F22FF19B00BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5849F63A-4E06-411F-95F0-A40B88F0C609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CDBD40-C67F-4F59-88CF-5C0953056420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F234ECA6-375B-493B-A659-F013DAEE5B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T15:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file with a JPX (aka JPEG2000) stream that triggers heap memory corruption."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en memoria dinámica en Adobe Reader v7 y Acrobat v7 anteriores a v7.1.3, Adobe Reader v8 y Acrobat v8 anteriores a v8.1.6, y Adobe Reader v9 y Acrobat v9 anteriores a v9.1.2, podría permitir a atacantes remotos ejecutar código arbitrario o producir una denegación de servicio (caída de aplicación) a través de un fichero PDF con un stream JPX (también conocido como JPEG2000) que inicia la corrupción de la memoria dinámica."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AC8F85CD-8371-4B36-8D6A-8B2CA580631B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "FE88C274-CC72-4341-9BF6-1924054A12FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "507C02CF-7E81-4131-99DE-63E4EEC45F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "47EBEF8E-3C53-41D5-B344-297ED7C432F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "DC0DF265-984D-462D-878E-612783BF0BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0335D33B-20D8-483F-AB5E-E2517F2F900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2341215F-97A7-40B6-B618-7FF022C7CFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D61F0564-59B9-4811-B7FD-BA044C6A94AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9C9A3E43-7334-44B0-BF01-04BB19B6FE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D3E43C1B-D76D-4486-AE7A-943D34D0A92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "F52F86E7-E845-48A5-9CC4-98E6DAA43C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*",
            "matchCriteriaId" : "60B53243-BF52-4028-8345-17636668A830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "CC9D669B-7E9D-4F39-894A-D9438000F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0D9CA54D-9D60-4064-B6AC-8CED8D064465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "55836D2A-487E-4B94-AC48-75A427D414F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E102FB9C-DE4B-481D-8F21-20143DDE3992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "023C5C61-6629-480E-93AD-5F2691E51AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "0E16B425-B123-4BA3-AC93-5F400ED8F6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C6F47894-50FB-4192-A3CC-D944124F08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "5D6C9969-DFEF-4059-BE92-28969930EACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "EA23452E-F5C7-4756-8245-1F398BA78E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "21113403-CA7D-4082-9516-C672C9A487C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "8F04372D-60A1-4407-8CF1-113262846783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
            "matchCriteriaId" : "C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "56691A9A-4C98-4D5F-9734-B225F534CC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "43F1C1B8-20B5-4534-A753-19EC415D0E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "74B6AF0A-DBEA-4EBD-A528-80AE31386375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF485FB-3317-4C89-B636-F22FF19B00BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5849F63A-4E06-411F-95F0-A40B88F0C609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CDBD40-C67F-4F59-88CF-5C0953056420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F234ECA6-375B-493B-A659-F013DAEE5B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/568153",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/568153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-161A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T15:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 have unknown impact and attack vectors, related to \"Adobe internally discovered issues.\""
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades sin especificar en cualwuier Adobe Reader 7 d Acrobat 7 anterior a v7.1.3, Ie 8 anterior a v8.1.6, y Adobe Reader 9 y Acrobat 9 anterior a v9.1.2 tiene vectores de ataque y un impacto desconocido relacional con \"cuestiones Adobe internally discovered\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AC8F85CD-8371-4B36-8D6A-8B2CA580631B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "FE88C274-CC72-4341-9BF6-1924054A12FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "507C02CF-7E81-4131-99DE-63E4EEC45F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "47EBEF8E-3C53-41D5-B344-297ED7C432F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "DC0DF265-984D-462D-878E-612783BF0BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0335D33B-20D8-483F-AB5E-E2517F2F900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2341215F-97A7-40B6-B618-7FF022C7CFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D61F0564-59B9-4811-B7FD-BA044C6A94AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9C9A3E43-7334-44B0-BF01-04BB19B6FE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D3E43C1B-D76D-4486-AE7A-943D34D0A92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "F52F86E7-E845-48A5-9CC4-98E6DAA43C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*",
            "matchCriteriaId" : "60B53243-BF52-4028-8345-17636668A830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "CC9D669B-7E9D-4F39-894A-D9438000F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0D9CA54D-9D60-4064-B6AC-8CED8D064465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "55836D2A-487E-4B94-AC48-75A427D414F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E102FB9C-DE4B-481D-8F21-20143DDE3992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "023C5C61-6629-480E-93AD-5F2691E51AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "0E16B425-B123-4BA3-AC93-5F400ED8F6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C6F47894-50FB-4192-A3CC-D944124F08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "5D6C9969-DFEF-4059-BE92-28969930EACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "EA23452E-F5C7-4756-8245-1F398BA78E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "21113403-CA7D-4082-9516-C672C9A487C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "8F04372D-60A1-4407-8CF1-113262846783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
            "matchCriteriaId" : "C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "56691A9A-4C98-4D5F-9734-B225F534CC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "43F1C1B8-20B5-4534-A753-19EC415D0E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "74B6AF0A-DBEA-4EBD-A528-80AE31386375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF485FB-3317-4C89-B636-F22FF19B00BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5849F63A-4E06-411F-95F0-A40B88F0C609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CDBD40-C67F-4F59-88CF-5C0953056420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F234ECA6-375B-493B-A659-F013DAEE5B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1109.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T15:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in rpc.nisd in Sun Solaris 8 through 10, and OpenSolaris before snv_104, allows remote authenticated users to cause a denial of service (NIS+ daemon hang) via unspecified vectors related to NIS+ callbacks."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en rpc.nisd en Sun Solaris v8 a la  v10, y  OpenSolaris anterior snv_104, permite a usuarios autenticados remotamente provocar una denegación e servicio( caída de demonio NIS+) a través de vectores no especificados relacionados con las llamadas de NIS+ ñ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_103",
            "matchCriteriaId" : "3ED96136-3180-4DA8-9203-BBECC1BD8B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DBDFD8C-371E-42D2-9635-D8CDD1775984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_103",
            "matchCriteriaId" : "932F40C2-8664-4FD8-A06A-7103EABCD4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-112960-67-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256748-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-112960-67-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256748-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0202",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-06-11T21:30:00.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Array index error in FL21WIN.DLL in the PowerPoint Freelance Windows 2.1 Translator in Microsoft PowerPoint 2000 and 2002 allows remote attackers to execute arbitrary code via a Freelance file with unspecified \"layout information\" that triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Error de índice de array en FL21WIN.DLL en el PowerPoint Freelance Windows v2.1 Translator en Microsoft PowerPoint 2000 y 2002, permite a los atacantes remotos ejecutar arbitrariamente código a través de un archivo Freelance con \"información de diseño\" que lanza un desbordamiento de búfer dinámico."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90939C1-ED11-4035-BD98-B1D9DCF50E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A610824-B284-421E-A908-F3826DA78F7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35184",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-29/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022369",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/54961",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504215/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35275",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51034",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/35184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-29/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/54961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504215/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T21:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in src/torrent_info.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) and partial relative pathname in a Multiple File Mode list element in a .torrent file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en src/torrent_info.cpp en Rasterbar libtorrent anteriores a v0.14.4, utilizado en firetorrent, qBittorrent, deluge Torrent, y otras aplicaciones, permite a los atacantes remotos crear o sobrescribir archivos arbitrarios a través de .. (punto punto) y ruta relativa parciales en una elemento lista Modo archivo múltiple en un archivo . torrent."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rasterbar_software:libtorrent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.14.3",
            "matchCriteriaId" : "1FEBE674-6758-43FB-9C81-A4BC9A8FCE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rasterbar_software:libtorrent:0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5FE670D-DFE0-4D28-9D21-4779470CF32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rasterbar_software:libtorrent:0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D3E0B5-C5FB-4C41-B5B6-B6DAC7153180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rasterbar_software:libtorrent:0.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD6C4EA-941D-4E69-8D3E-D44274524617"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://census-labs.com/news/2009/06/08/libtorrent-rasterbar/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35277",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-14.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=79942&release_id=686456",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504151/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35262",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1534",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://census-labs.com/news/2009/06/08/libtorrent-rasterbar/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=79942&release_id=686456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504151/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T21:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a denial of service (application crash) via a string argument that represents a large number, as demonstrated by an attempted conversion to the Float data type."
      }, {
        "lang" : "es",
        "value" : "La librería BigDecimal en Ruby v1.8.6 anteriores p369 y v1.8.7, anteriores a p173 permite a los atacantes dependientes del contexto causar una denegación de servicio (caída de la aplicación) a través de un argumento de cadena de caracteres que representa un número largo, como se demuestra por un intento de conversión al tipo de dato Float."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876B2575-4F81-4A70-9A88-9BEE44649626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D86FC99-3521-4E22-8FD3-65CEB05A6342"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=532689",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=273213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://github.com/NZKoz/bigdecimal-segfault-fix/tree/master",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://groups.google.com/group/rubyonrails-security/msg/fad60751e2b9b4f6?dmode=source",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mail-index.netbsd.org/pkgsrc-changes/2009/06/10/msg024708.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://redmine.ruby-lang.org/issues/show/794",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35399",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200906-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.430805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://weblog.rubyonrails.org/2009/6/10/dos-vulnerability-in-ruby/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1140.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ruby-forum.com/topic/189071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ruby-lang.org/en/news/2009/06/09/dos-vulnerability-in-bigdecimal/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-805-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.launchpad.net/bugs/385436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.launchpad.net/bugs/cve/2009-1904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00731.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=532689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=273213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://github.com/NZKoz/bigdecimal-segfault-fix/tree/master",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://groups.google.com/group/rubyonrails-security/msg/fad60751e2b9b4f6?dmode=source",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mail-index.netbsd.org/pkgsrc-changes/2009/06/10/msg024708.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://redmine.ruby-lang.org/issues/show/794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200906-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.430805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://weblog.rubyonrails.org/2009/6/10/dos-vulnerability-in-ruby/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1140.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ruby-forum.com/topic/189071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ruby-lang.org/en/news/2009/06/09/dos-vulnerability-in-bigdecimal/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-805-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/bugs/385436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/bugs/cve/2009-1904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00731.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T21:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the XML Digital Signature verification functionality in JVA-RUN in JDK 6.0 in IBM OS/400 i5/OS V5R4M0 and V6R1M0 has unknown impact and attack vectors related to \"XML SECURITY PATCH.\""
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad no especificada en la funcionalidad de comprobación de XML Digital Signature en JVA-RUN en JDK versión 6.0 en IBM OS/400 i5/OS versiones V5R4M0 y V6R1M0, presenta un impacto y vectores de ataque desconocidos relacionados con \"XML SECURITY PATCH\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1264A513-5AE3-4F0E-8387-1F75EBAEA241"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:os\\/400:v5r4m0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745A6192-A7F2-4C72-9885-3C89C3A0A07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:os\\/400:v6r1m0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F176C69-F5B0-4027-B1E7-B5634EA3E42E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35356",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=nas2741c96b7c573b81a862575cc003c726e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=nas2e858199605d67111862575cc003c7276",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-June/002190.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1536",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=nas2741c96b7c573b81a862575cc003c726e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=nas2e858199605d67111862575cc003c7276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-June/002190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-11T21:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "smbfs in Sun OpenSolaris snv_84 through snv_110, when default mount permissions are used, allows local users to read arbitrary files, and list arbitrary directories, on CIFS volumes."
      }, {
        "lang" : "es",
        "value" : "smbfs en Sun OpenSolaris snv_84 hasta snv_110, cuando permisos de montaje por defecto son utilizados, permite a los usuarios locales leer arbitrariamente archivo, y listar arbitrariamente directorios, en volúmenes CIFS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-257548-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-257548-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-12T18:00:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.asp in PDshopPro, when downloaded before 20070308, allows remote attackers to inject arbitrary web script or HTML via the search parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.asp en PDshopPro, cuando se descarga antes de 20070308 , permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarias a través del parámetro \"search\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pagedowntech:pdshoppro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2226CB68-401B-44D1-B9E5-7546427D33CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0906-exploits/pdshoppro-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34200",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0906-exploits/pdshoppro-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-12T18:00:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Yogurt 0.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Yogurt v0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"msg\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ricardo_alexandre_de_oliveira_staudt:yogurt:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FFAE406-18F9-4D30-8126-6493BA6FF353"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35324",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-12T18:00:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in writemessage.php in Yogurt 0.3, when register_globals is enabled, allows remote authenticated users to execute arbitrary SQL commands via the original parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en writemessage.php en Yogurt v0.3, cuando register_globals esta activado, lo que permite a usuarios remotos autenticados ejecutar comandos SQL de forma arbitraria a través del parámetro \"original\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ricardo_alexandre_de_oliveira_staudt:yogurt:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FFAE406-18F9-4D30-8126-6493BA6FF353"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35324",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-12T18:00:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Services 6.x before 6.x-0.14, a module for Drupal, when key-based access is enabled, allows remote attackers to read or add keys and access unauthorized services via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en el modulo de Drupal, Services v6.x anteriores a v6.x-0.14, cuando el acceso \"key-based\" esta activado, permitiría a atacantes remotos leer y añadir claves y acceso no autorizado a servicios a través de vectores inespecíficos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:services_module_for_drupal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.x-0.13",
            "matchCriteriaId" : "C7180372-7F26-4D32-A036-CD7D4255C494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:services_module_for_drupal:6.x-0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99E48DF-F2DE-482C-9BFB-08A3A19011AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/487784",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/488004",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54999",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/33371",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/487784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/488004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/33371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2036",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-12T18:00:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Open Biller v0.1 permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"username\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geekbill:open_biller:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2888E027-0C59-4AE4-A79E-677B0A1A7B97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504231/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504231/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-12T18:00:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) GLOBALS[SKIN] parameter to index.php and the (2) skin parameter to admin/admin.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilides de salto de directorio en Online Grades & Attendance v3.2.5 y anteriores, y posiblemente v3.2.6, cuando register_globals esta activado, permite a atacantes remotos incluir y ejecutar ficheros locales a través de ..(punto punto) en los parámetros (1)\"GLOBALS[SKIN]\" en index.php y (2) \"skin\"  en admin/admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlinegrades:online_grades:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.5",
            "matchCriteriaId" : "66A9518B-57E3-4223-BDE1-5A2E492A6BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlinegrades:online_grades:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.6",
            "matchCriteriaId" : "9F61C8A3-260A-4DB1-8807-F38FBE881B53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlinegrades:online_grades:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7852F48-E340-4582-A818-44179F683A65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-12T18:00:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Finnish Bank Payment module 2.2 for osCommerce has unknown impact and attack vectors related to bank charges."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en el modulo Finnish Bank Payment v2.2 para osCommerce tiene impacto y vectores de ataque desconocidos relacionados con los cargos del banco."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19A5485-0FFE-4284-9630-9F379C1223F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:finnish_bank_payment:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42BF0DB-FB42-4533-A899-3BF478AB9C50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://addons.oscommerce.com/info/5485",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35385",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cert.fi/haavoittuvuudet/2009/haavoittuvuus-2009-046.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://addons.oscommerce.com/info/5485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cert.fi/haavoittuvuudet/2009/haavoittuvuus-2009-046.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-12T18:00:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Luottokunta module before 1.3 for osCommerce has unknown impact and attack vectors related to orders."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en el modulo Luottokunta anteriores a v1.3 para osCommerce tiene un impacto y unos vectores de ataque relacionados con los pedidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19A5485-0FFE-4284-9630-9F379C1223F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:luottokunta:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AC701D-E8D5-4DC7-9ED0-2FAF53F3ABF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://addons.oscommerce.com/info/3698",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35291",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cert.fi/haavoittuvuudet/2009/haavoittuvuus-2009-046.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35191",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://addons.oscommerce.com/info/3698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cert.fi/haavoittuvuudet/2009/haavoittuvuus-2009-046.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-12T18:00:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/options.php in Grestul 1.2 does not properly restrict access, which allows remote attackers to bypass authentication and create administrative accounts via a manage_admin action in a direct request."
      }, {
        "lang" : "es",
        "value" : "admin/options.php en Grestul v1.2 no posee restricciones de acceso adecuadas, lo que permite a atacantes remotos evitar la autenticación y crear cuentas administrativas a través de la accion manage_admin en una petición directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grestul:grestul:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "505A1394-5135-475B-83D6-1DB31B654A0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35367",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-12T20:30:00.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in A51 D.O.O. activeCollab 0.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1772."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en A51 D.O.O. activeCollab v0.7.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores inespecíficos, una vulnerabilidad diferente de CVE-2009-1772."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activecollab:activecollab:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2949C4ED-9C1B-4E49-99D5-9B08053C9370"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN55752635/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN55752635/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-12T20:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via \"out-of-bounds pixels\" in the file."
      }, {
        "lang" : "es",
        "value" : "libpng anteriores a v1.2.37 no parsea adecuadamente 1-bit de imágenes entrelazadas con valores de ancho que no son divisibles por 8, lo que produce que libpng incluya bits sin inicializar en ciertas filas del fichero PNG lo que permitiría atacantes remotos leer trozos de memoria sensible a través de \"pixeles fuera de rango\" en el fichero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.35",
            "matchCriteriaId" : "AABEC89B-60F1-4ECB-AA31-FA1BC8C1A8FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:0.89c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9427E9C7-0B51-4066-9428-BE48D8BAD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE45B563-07B8-4F4E-80B4-C73216DF7295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D6B3DAF-DF99-48B2-8E7C-BE8E043D4C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29050958-EFD8-4A79-9022-EF72AAD4EDB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3CB33B1-71B2-4235-A2C1-FCAEA9844A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.7:beta17:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9ED9B2-D9D4-4200-B387-21A893453E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.7:beta18:*:*:*:*:*:*",
            "matchCriteriaId" : "3983C9FC-7546-41BE-8E22-B3471DF9F3AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BFAB3DFB-58B7-4713-B88B-26424D639B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2131F2BB-80E3-46A0-A0D8-4450C625A525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F2B503-1516-465D-A558-9932BDB3457D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.8:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "C686308E-1A71-40E5-BCDE-5144217D41A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.8:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F37F93-8BE1-4716-B35D-1CB2629867A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.8:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4127BB-2A91-4243-B3ED-10D945B6995A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.8:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "E09AAB1F-14FB-42E9-8983-30D2164EA0E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "50190A04-5CF2-400E-BAE4-9C7F177ECFE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA94EAAA-A4D2-4E36-BC69-BBE9644FE970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.9:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB264E6-1640-459C-8DD0-C9D72124F125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.9:beta10:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6E3454-14E2-43C8-8E71-1E800FCBE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.9:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "BA610E96-CE50-46B0-B695-F4A5FA77AB73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.9:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "30459EAB-E65B-4487-A90F-389477F0BA56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.9:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "E89FFA90-6AB5-4587-8F40-E7001E4DD470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.9:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "A2FDACC8-7BFD-477E-A79A-C933CB5C8EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.9:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "9139F742-A946-4D2F-9C14-95216C06ED4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.9:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBCDA70-BB1B-4408-A2F3-ADB7A7B77A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.9:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "AA4D368C-C167-4CF3-9013-FFC297D1D977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.9:beta9:*:*:*:*:*:*",
            "matchCriteriaId" : "D3571DD2-5200-48AE-83C9-B1DFF3A1FEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "782DFA55-BB92-41CD-A4DF-D986C387EB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2601CCF9-3A89-4EEF-9941-894AEAF89F23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A7C96C-8FBB-42B4-937E-3321C939CC87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE11FC5-8A49-434E-B828-AE7C011B03CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "265EC12C-6239-4367-9769-73AC999556F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94084356-D39B-41B2-AC24-0ADAD0BF5988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.11:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA772E3-B022-4F5E-8D43-C0BE64F187D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.11:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "C6589696-904B-4F7B-84F7-0E8D2F0ACFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.11:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "F5CF8EED-F09B-4AB8-A0F1-1F8DBB5385BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C3909436-175A-4DC7-956F-C0905DA579FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086C6335-7872-46A7-AEB1-9BE5AE5A788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.12:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0532A8-3F66-49D3-95BF-2E78DB6EC471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FED11C9F-4E2D-4364-AEEC-43E61531BA9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8233B1-04A0-4E25-97EE-CF466B48A12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA714E7E-05EF-4598-9324-887BC66C675E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CF3B73-D3B9-4D76-B411-C837BCE0806E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC7C52B-0D8D-4509-B9B5-B12E54EA3A76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0514ED-C8F8-4F15-A40F-04D643F3DB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77DCDC0-29DD-4BC8-BE30-3A348963F821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1752D91-3468-4E22-B60F-6789B3CBD7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F433AA7E-A780-4D45-AD1A-5A4CE1F3FCD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.17:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C4338C87-B3CB-4CA7-BFAA-ADA1D919F203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93E210A7-489B-4EA7-A840-599523157DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B37565FA-72F5-4063-8D7A-97BC269F020B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "434AED09-680D-43BC-B9CA-E78028035CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "009AF32A-19B9-4E56-B5D2-2D19082EF102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2643AA61-AB01-4252-8E50-81D5C74F8707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "02552E07-D9C8-4DF8-AD63-B3A7B5C2C2DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8FA821-818E-4BC7-834B-94EB5C042390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FBF3D3-95A6-4869-8A69-F0E5ECA40220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.21:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "425B207B-D11B-468B-A2C6-BDF276AE4264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.21:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B0055B-D0F1-4D8C-AE96-06315FFCC602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07785D0-E995-4208-AB8C-43B320D291F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A42AC8B9-BEB2-4495-8A42-2AEDB29A3DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152DDD6E-CF56-4E1C-BE4D-C7BC0FD9B08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.0.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "76C2D14E-FD1C-430A-AC08-D61F997D8BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C036011A-9AE1-423C-8B73-188B9BA20FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "F008946C-43E9-4ECD-AE9F-486A4686AE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "6A4D6BB0-8E1A-49A4-BBC9-CBFA252C92A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE1DB59-0A60-432B-9D88-906C4FE6D6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "C111BDD4-2A52-4FB7-8D21-6049A10BCDA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33807C-8E7B-4A04-BE92-59C1B845AD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B1614466-8EAC-4404-A674-EFFE0FFFBDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663C6EE5-5B5E-4C0F-9E7F-D0E1DA9AF9EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "FF2D5068-5BF3-425C-8B1A-E12E3D3CD8F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.1:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4F7833-4F88-4C54-AEC7-3C4FB797AE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.1:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A973ED-CA5B-4A18-ACAB-1542E3866896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.1:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "FA737702-6335-42F9-99B9-856D531B70F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EAD9719-2736-40AE-BBEB-8BA627E8DF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "62693E5F-2EF6-49B5-9946-42CE61F4ACFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8051459E-94D3-4D4A-9D40-CC9475DDB00C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.2:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "65ACA253-BDE7-4CAE-8F74-71EBA4728358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.2:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "9C776F58-A76E-4ED3-825B-52ADFB38D0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.2:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF62B46E-37C4-426A-8854-E961BEB543E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.2:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "C5EDDB54-70C6-41D0-AC5C-C10F8D107964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.2:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAEAB037-F146-444F-A867-D08BD48DA6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.2:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "4962A86F-C9F5-4F03-AFCD-D2E6FD08BD06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "47CF2A43-2D15-4D70-A424-C12053D1A6A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42056C63-69A7-43CF-828C-0C3E365702D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6577A0A-B689-424E-BAAE-BD5DF2615311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.3:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "511E1319-C882-4761-ACD5-84617B78578E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3E3BF3-4376-4692-A515-A7B6593F28F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E83B68F-B0E2-4C37-A711-1714652AB961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.10:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F17A4B7-99C2-407A-9536-4B54EDC02899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.10:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "F854F244-78C9-46C6-8862-1DA58912FCE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.10:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "9A4C883A-A2A3-4D5F-8114-CE9220FFF7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.10:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "3544F0FF-3EEE-4902-B412-EB57D6AE7A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.10:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "5F428FF4-21A8-4605-AFCD-E78F43E46AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.10:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "7132AA21-DC2F-4493-9BCC-27E3D8F075AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B65F8362-934F-452D-8E86-0DB2E3C7B43D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "934D0AB5-62FB-4EC1-971A-A1BA8EEAD008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "5891F237-D1DB-4CCE-8A8B-D10E7EDCB926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6AF9D5-CE60-4FC9-91AB-E243F0D429E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.11:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E114E18D-2882-4843-9356-279C69ABCBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.11:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "5E271694-B8C8-4BCF-8B4A-0425BA50EF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.11:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "E36CC085-34FF-4B84-8628-74BEEC686C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.11:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "06793BE6-3370-4FCB-A400-C6AF95D1E66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DE742D36-3A33-4316-8326-FA2F1B228E83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "25D0C5E1-4D8D-42EE-8C94-12D442181DCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "3326F984-8312-4E7F-A269-0A06FAC8BE25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "290CF6FC-3BD6-4974-9DEC-188B79DC816A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F848FA5-9682-454F-A9DE-671C4401F15F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.13:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "782ABB64-C2F2-4326-A69F-75E514055C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF9CEE2-8DB6-480F-970C-E19FEF31D0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "28C13A65-C0D6-4904-8C92-E5233D7E5CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B83678-98A1-440E-950C-4A27995C7294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.14:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "38993FC7-12DD-4D75-8EC6-719C0AD66191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.14:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAF82B9-020B-48FD-BE3D-70B8A7A8CDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C43481DF-59C5-4E9B-8CB9-49E4873B7263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9EEE31-479A-4370-BF00-C26C1AF502B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.15:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFC71CB-0B01-4A34-85B8-8A27C1E7D451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.15:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC53C1C7-ED9C-44C2-B446-0426E4C92D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.15:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "B996835E-97DB-47B1-80B9-BE757680CAFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.15:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7256E6-502A-47A5-A692-90162AA40AAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.15:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "53E7BDBC-5BF8-4BA3-959D-1D16ACD558D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.15:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "79B6B4A0-9B7E-4835-9F82-2B1D1AF955AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "27BBC74C-51A3-48BB-B867-3A5F58AD8B4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEDAB32-9D5C-4F12-B9E4-ABEA615DC11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DA5585-140C-4F27-8654-BCFCB12659B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "AA8F6085-9769-44DE-8E43-FAB7C7791A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4D700F-AA36-4A5B-8BD3-3BD9A452D743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95EABD7D-1F18-4FA5-BAA9-F8D69129E531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.16:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D6045135-54AF-4B83-9279-47BB1DB67172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.16:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB7D1F1-7959-4459-827C-90B193F58269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "62A6F2F0-E088-458F-813F-5B45EA01B77F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B836CA-3740-48B0-966B-21E65EF3D636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.17:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "96308F2E-E2DE-4C0F-B0A6-7FDFFF67A0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.17:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "7A21785C-989F-4E72-932B-E77892EF492A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.17:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0D832C4A-0793-4B64-944D-086CF614CAEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.17:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8E2232-7077-4CE4-9141-80F2F744F0B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.17:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "38CDA418-F580-4625-9D84-F01EA5D0FC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.17:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FB8DC5-ABD5-41BE-99EC-E610504D6F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3988FA1B-18D9-46AA-87BA-A6B01D4F4B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A46409-7AC6-45DB-B92D-29988C445BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "53B41406-956A-48C9-9CDA-D7257D19E6F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta10:*:*:*:*:*:*",
            "matchCriteriaId" : "B100CFD4-788C-44BF-A55D-225F72314A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta11:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6BFCBC-F3E9-4CDD-833F-01D51594B0F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta12:*:*:*:*:*:*",
            "matchCriteriaId" : "589DC20E-E642-4BC7-83CD-01323D7F6236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta13:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9B81C1-EAF8-44B6-A4FD-2568FFBB6FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta14:*:*:*:*:*:*",
            "matchCriteriaId" : "22EBF19B-7E53-4627-AE87-6B7C4ACD88F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta15:*:*:*:*:*:*",
            "matchCriteriaId" : "43744C82-D271-4BF3-9AD8-A48C1B5BA33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta16:*:*:*:*:*:*",
            "matchCriteriaId" : "FD68995C-816C-4E25-B8B3-0BC808490D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta17:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDC3AE7-569F-4016-B35E-E8B8B3456959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta18:*:*:*:*:*:*",
            "matchCriteriaId" : "17068432-BFE0-4BE1-A86B-7D6562D18103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta19:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F0F2AF-748A-411A-8B95-45A04800FF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "945C0B80-E562-4495-849E-23EE406D2EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta20:*:*:*:*:*:*",
            "matchCriteriaId" : "5E91B287-CDFC-4791-95D5-54AC847877D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta21:*:*:*:*:*:*",
            "matchCriteriaId" : "1F09C15E-E20C-473D-AF13-5509669DA8FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta22:*:*:*:*:*:*",
            "matchCriteriaId" : "36FD7096-C215-4CCA-B0BE-244E9708E947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta23:*:*:*:*:*:*",
            "matchCriteriaId" : "4AC8DAFE-64A5-47C6-BE99-093E744181B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta24:*:*:*:*:*:*",
            "matchCriteriaId" : "C075C36D-D191-4165-A2A8-A8BA6AD93862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta25:*:*:*:*:*:*",
            "matchCriteriaId" : "F7E9A4DE-C0B7-4951-97D2-26EFFE065A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta26:*:*:*:*:*:*",
            "matchCriteriaId" : "6B9FC583-AA79-4ED1-924B-DE58FBB88385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta27:*:*:*:*:*:*",
            "matchCriteriaId" : "727FA534-FB49-4784-A56E-D709071FFEE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta28:*:*:*:*:*:*",
            "matchCriteriaId" : "17628553-688B-4574-9B2A-035937225DD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta29:*:*:*:*:*:*",
            "matchCriteriaId" : "E96F2F5A-A881-4EDC-965F-43984EA06151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "26E9442B-FCA7-42A3-9E73-343D9FF11985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta30:*:*:*:*:*:*",
            "matchCriteriaId" : "1EB24053-49FC-488C-8DC4-12F5A485EC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta31:*:*:*:*:*:*",
            "matchCriteriaId" : "653700ED-B2E3-4DD1-99A1-ED0B4504E628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta32:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9B4D07-8B90-4932-8A37-D204995E85E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta33:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F43544-D08D-4733-AE0D-A6C5742275D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "101240B5-FAC7-4D47-9C4A-840D06E082EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "608088FF-8EED-4F05-96EA-0E23F669C078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "82401AB8-5432-4D75-ADC2-A310132EB9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "CECEDABC-F229-43F7-9795-9E87198424D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "712E5798-A0FC-44E7-972A-D2EF66F5C793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:beta9:*:*:*:*:*:*",
            "matchCriteriaId" : "82690AE3-BFFA-4616-AE30-35A6D21DFC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0082F7-DDD3-4266-B604-D1E2958ABAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "00A32AD4-38C7-41BE-8042-9BCED336AA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "BC96DBDE-15A7-4C63-8C71-AA5CD158E306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "834A6D33-2334-4361-92CE-8AECAF3614CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC3A80A-4C35-419F-B576-40A3FAD37723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FCC174-9216-433D-A5CB-A7C275DD9D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E2B608-6C70-446F-A3A7-369048D99855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.20:beta01:*:*:*:*:*:*",
            "matchCriteriaId" : "01EF52B3-BAD3-4E0C-B19C-3465A036B025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.20:beta02:*:*:*:*:*:*",
            "matchCriteriaId" : "1685F3BF-635D-43DD-855D-7666D807AE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.20:beta03:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA8FF97-98D2-425F-935C-36951DFEE029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.20:beta04:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEE9078-6B9F-4BA1-A6BE-25743B02FE25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A8933-9958-458B-A511-D018B7CA7D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "100BF4B6-2A63-416A-B19F-722A9B44F126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.20:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD8FB59-2260-4343-B4D6-279ED7D7D5E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.20:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDCE2DE-94B7-460D-8BBB-26ACA4847807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.20:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "A812C450-8E1F-4667-99EC-7237E1E319E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.20:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "AD94AB7F-B7CF-42B0-AB71-23F42F3F1067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA00AE0-F447-4361-AA37-0C98BDE491E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.21:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "28F79E9F-4AA1-451A-8819-CAF21DB2C990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.21:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1C14E8-5644-4B5F-8894-092187B1EE28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.21:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "77C9B755-140B-4DBF-8BF1-80431C0F9A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.21:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "599CE5F2-5D31-4A9D-86A0-9CFD3A34B193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.21:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "5460DA6B-6F81-4B8C-9D8F-DB946E3F33EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DACE94-FBDC-4A3D-8DD6-E62D18F5EE7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.22:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "45E92521-FE62-4940-B194-A8482538401B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.22:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF7D5B4-A8BD-4F3B-8DB3-D5AB94086A32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.22:beta2-1.2.21:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A244FC-545E-4041-B922-B1B640E7E371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.22:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8973E-8150-4834-8D9B-370F3664E894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.22:beta3-1.2.21:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C93F2F-533D-4563-95F2-E94A2CCE9C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.22:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "73045C50-73FE-4162-8E8B-7721131E4396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.22:beta4-1.2.21:*:*:*:*:*:*",
            "matchCriteriaId" : "C89DFAAD-279A-462D-BF72-D75CC24E72E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.22:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1879D7C8-ABF1-4ECE-BBC7-71978695D4C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.22:rc1-1.2.21:*:*:*:*:*:*",
            "matchCriteriaId" : "1B27B3A2-04E1-4261-AA70-30EE2AA934F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220A02AF-6ADA-4B75-BC81-40B2D847029A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.23:beta01:*:*:*:*:*:*",
            "matchCriteriaId" : "CA60D3F3-149B-4A76-9F35-4A0A127ADF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.23:beta01-1.2.22:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC54968-17ED-422E-9C78-65E4E167C76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.23:beta02:*:*:*:*:*:*",
            "matchCriteriaId" : "3D625A71-5F2D-446A-BD69-1470B4127DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.23:beta02-1.2.22:*:*:*:*:*:*",
            "matchCriteriaId" : "896E65A3-D814-4C58-8BD8-B10A2C812FC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.23:beta03:*:*:*:*:*:*",
            "matchCriteriaId" : "00C85EF8-8D8A-4ED8-B55B-2182421626CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.23:beta03-1.2.22:*:*:*:*:*:*",
            "matchCriteriaId" : "E07CE422-8047-4248-A36C-11E22A889D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.23:beta04:*:*:*:*:*:*",
            "matchCriteriaId" : "6D65DCF8-D9A6-4A9E-8171-C52E12EB1476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.23:beta04-1.2.22:*:*:*:*:*:*",
            "matchCriteriaId" : "65BEA559-944B-4E32-9F74-323CE7EA4FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.23:beta05:*:*:*:*:*:*",
            "matchCriteriaId" : "C5114A9B-263F-4BBF-9A6A-F6E0900CDD78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.23:beta05-1.2.22:*:*:*:*:*:*",
            "matchCriteriaId" : "61EEC899-A9DC-44E4-8984-88DCBF733B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.23:rc01:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD12B3A-27B6-4BD4-90B5-874B677689FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.23:rc01-1.2.22:*:*:*:*:*:*",
            "matchCriteriaId" : "F22010B9-E18B-45DB-9316-8F56A535D1BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEB8F61-195E-41DE-90CE-22854055E9D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.24:beta01:*:*:*:*:*:*",
            "matchCriteriaId" : "27988956-B3F4-428A-B369-C5E01A2F9102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.24:beta01-1.2.23:*:*:*:*:*:*",
            "matchCriteriaId" : "84979A32-27E2-4A77-8245-47C6E61CE439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.24:beta02:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D45B16-C278-4ABF-8B91-CFA0AB384290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.24:beta02-1.2.23:*:*:*:*:*:*",
            "matchCriteriaId" : "118582C6-A677-4FFB-9782-17BD35EE1973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.24:beta03:*:*:*:*:*:*",
            "matchCriteriaId" : "247153A0-CF83-4D6E-A657-5D8D217D8EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.24:beta03-1.2.23:*:*:*:*:*:*",
            "matchCriteriaId" : "6F43AC37-27DE-4A6D-A8FE-138B4DA8E4BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.24:rc01:*:*:*:*:*:*",
            "matchCriteriaId" : "53D03C1D-684A-4BA5-841B-C414AD244DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.24:rc01-1.2.23:*:*:*:*:*:*",
            "matchCriteriaId" : "D0DBDAB9-0F52-4A84-B262-F23E869D30CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F72B91-1F7F-41EB-ABC8-1B50AFEC70EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.25:beta01:*:*:*:*:*:*",
            "matchCriteriaId" : "9F89EDB5-A195-479B-BEFB-E0A186A4A9D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.25:beta02:*:*:*:*:*:*",
            "matchCriteriaId" : "02BAC6A6-FBE9-48CD-9B4E-FC570684922B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.25:beta03:*:*:*:*:*:*",
            "matchCriteriaId" : "E695F515-AE7E-48AB-999C-75B62BEA0BE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.25:beta04:*:*:*:*:*:*",
            "matchCriteriaId" : "D448D4A5-D827-4FF8-BAC1-E25FD8F01C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.25:beta05:*:*:*:*:*:*",
            "matchCriteriaId" : "935F2297-6CB4-4ABB-9F4D-F11708CDC069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.25:beta06:*:*:*:*:*:*",
            "matchCriteriaId" : "25ED23F7-DF30-46B2-99EF-3924E22C1870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.25:rc01:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB56358-46E4-4999-A311-5E1819A6D5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.25:rc02:*:*:*:*:*:*",
            "matchCriteriaId" : "F508CFA5-5602-445C-9E18-71B6A625F9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "111091B9-CBAE-4FC7-8B97-7D2345BFCB45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.26:beta01:*:*:*:*:*:*",
            "matchCriteriaId" : "897D42F6-202B-425A-BF0D-76D1A74D8E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.26:beta02:*:*:*:*:*:*",
            "matchCriteriaId" : "50300181-3691-4EA2-B779-1C9CF59E08FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.26:beta03:*:*:*:*:*:*",
            "matchCriteriaId" : "CABA31D9-9EC0-4447-9C5E-8BC5DF5F431D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.26:beta04:*:*:*:*:*:*",
            "matchCriteriaId" : "D4568552-91F6-4E05-ADA5-4127CBD4D3EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.26:beta05:*:*:*:*:*:*",
            "matchCriteriaId" : "D72D51C0-1044-4A74-823F-7123340FB9BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.26:rc01:*:*:*:*:*:*",
            "matchCriteriaId" : "947395DE-A911-47B3-983D-B5D23672068D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CAA1090-C1C7-43A2-BD44-065572D226B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD92305-91BF-4984-A029-8FA83CBF1A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31EE280F-D76D-478B-ADD6-D5F2C7574A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:1.2.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747314F7-A515-41FF-8095-62A9F05F0DEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000090.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35346",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/39206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/39215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/39251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200906-01.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.551809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ubuntu.com/usn/usn-913-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.libpng.org/pub/png/libpng.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35233",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2010-0007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1510",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00218.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00630.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000090.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200906-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.551809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://ubuntu.com/usn/usn-913-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.libpng.org/pub/png/libpng.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2010-0007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00218.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00630.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue has been addressed in Red Hat Enterprise Linux 3, 4, and 5 via https://rhn.redhat.com/errata/RHSA-2010-0534.html.",
        "lastModified" : "2010-07-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1392",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-12T21:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsEventStateManager::GetContentState and nsNativeTheme::CheckBooleanAttr; (2) UnhookTextRunFromFrames and ClearAllTextRunReferences; (3) nsTextFrame::ClearTextRun; (4) IsPercentageAware; (5) PL_DHashTableFinish; (6) nsListBoxBodyFrame::GetNextItemBox; (7) AtomTableClearEntry, related to the atom table, DOM mutation events, and Unicode surrogates; (8) nsHTMLEditor::HideResizers; and (9) nsWindow::SetCursor, related to changing the cursor; and other vectors."
      }, {
        "lang" : "es",
        "value" : "El motor del navegador en Mozilla Firefox v3 anteriores a v3.0.11, Thunderbird anteriores a 2.0.0.22, y SeaMonkey anteriores a 1.1.17 permite a atacantes remotos producir una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código arbitrario a través de vectores relacionados con (1) nsEventStateManager::GetContentState y nsNativeTheme::CheckBooleanAttr; (2) UnhookTextRunFromFrames y ClearAllTextRunReferences; (3) nsTextFrame::ClearTextRun; (4) IsPercentageAware; (5) PL_DHashTableFinish; (6) nsListBoxBodyFrame::GetNextItemBox; (7) AtomTableClearEntry, relacionado con la tabla atom, eventos de mutacion DOM, y subrrogados Unicode; (8) nsHTMLEditor::HideResizers; y (9) nsWindow::SetCursor, relacionado con el cambio de cursor; y otros vectores."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.16",
            "matchCriteriaId" : "DE872814-DA94-417A-99E4-0E01E4554E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*",
            "matchCriteriaId" : "30B95DB4-EC98-4046-A894-26CA0807456B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4A97B6E1-EABA-4977-A3FC-64DF0392AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D33486-4956-4E2C-BA16-FA269A9D02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E99882-786F-455F-BAC4-30716120964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A3468-C3BF-417B-85FB-18C28F0765B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EED5D2-EC40-4253-991B-0C746FBEF6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.19",
            "matchCriteriaId" : "850345D6-2085-4EC4-AE47-FC8E265C61D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0618BD26-0EF5-4774-9131-B5ABD4CD302A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D604DAE-DF63-413C-9F49-FFC8E84699F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE6185-09F4-48E3-9742-F9D8030B5774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E565E5-286D-4A68-B085-5659DFE59A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F0C73F-291F-4A92-87B8-2269B5C1516D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938B1260-74A7-4CFF-8086-415DCC284430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28672BA-E3C2-40C3-80E1-95B7CDD089E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9308147C-0A23-48BC-BFA9-A49B9D73014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD8DCC-DBB4-40EE-927C-7B0969700077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F9CE47-E3AA-49D7-AEC9-447951AC31E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581615BB-C781-42CA-836E-0E0EAB8C4504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257F43FA-D22C-4BF0-A02E-261A54142BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D291234-D64A-4E8A-A7CD-08BB980E1CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3C27EC-5794-49C1-96E0-997E700B13DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745C2CBA-4824-441B-A6BC-E80959C2E035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6A7D00-A203-4891-96CE-20C91FCBF048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8CB480-0595-4BC1-998E-3638E85DB367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBF526-7A28-436B-9B01-EADE913602B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A0BCE3-38E7-4318-9A7E-3D895171129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2303104C-4A91-4704-A9CB-8C83A859090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AF48A9-C161-4603-82F0-5D2DE1EBA498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821E46E8-B084-4762-86F0-002CA288B522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A084C258-7D78-4F6D-8E24-00BE9608EBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FEA455-E605-4CE3-A951-760D59091C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1758117-4865-42A4-8110-2250924E21FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81AF4BFB-EC89-454B-89DF-FC8F6102E28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8013986B-DCAF-44A1-BA63-5BBA6762720F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55144",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/55145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/55146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/55147",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1096.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35428",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35440",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1022376",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-24.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1125.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35370",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022397",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=380359",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=429969",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=431086",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=432068",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=451341",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=472776",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=486398",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=489041",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=490410",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=490425",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=490513",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503568",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9501",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/55144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1096.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1125.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=380359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=429969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=431086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=432068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=451341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=472776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=486398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=489041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=490410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=490425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=490513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1832",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-12T21:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors involving \"double frame construction.\""
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anteriores a v3.0.11, Thunderbird anteriores a v2.0.0.22, y SeaMonkey anteriores a v1.1.17 permite a atacantes remotos producir una denegacion de servicio (corrupcion de servicio y caida de aplicacion) o posiblemente ejecutar codigo arbitrario a traves de vectores que incluyen \"construccion de doble marco\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.10",
            "matchCriteriaId" : "E05337C3-04A1-4403-84BE-78FCDF83448D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CAA7D-398A-4B26-9754-FD188CE9729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.16",
            "matchCriteriaId" : "DE872814-DA94-417A-99E4-0E01E4554E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*",
            "matchCriteriaId" : "30B95DB4-EC98-4046-A894-26CA0807456B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4A97B6E1-EABA-4977-A3FC-64DF0392AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D33486-4956-4E2C-BA16-FA269A9D02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E99882-786F-455F-BAC4-30716120964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A3468-C3BF-417B-85FB-18C28F0765B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EED5D2-EC40-4253-991B-0C746FBEF6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.19",
            "matchCriteriaId" : "850345D6-2085-4EC4-AE47-FC8E265C61D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0618BD26-0EF5-4774-9131-B5ABD4CD302A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D604DAE-DF63-413C-9F49-FFC8E84699F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE6185-09F4-48E3-9742-F9D8030B5774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E565E5-286D-4A68-B085-5659DFE59A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F0C73F-291F-4A92-87B8-2269B5C1516D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938B1260-74A7-4CFF-8086-415DCC284430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28672BA-E3C2-40C3-80E1-95B7CDD089E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9308147C-0A23-48BC-BFA9-A49B9D73014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD8DCC-DBB4-40EE-927C-7B0969700077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F9CE47-E3AA-49D7-AEC9-447951AC31E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581615BB-C781-42CA-836E-0E0EAB8C4504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257F43FA-D22C-4BF0-A02E-261A54142BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D291234-D64A-4E8A-A7CD-08BB980E1CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3C27EC-5794-49C1-96E0-997E700B13DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745C2CBA-4824-441B-A6BC-E80959C2E035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6A7D00-A203-4891-96CE-20C91FCBF048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8CB480-0595-4BC1-998E-3638E85DB367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBF526-7A28-436B-9B01-EADE913602B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A0BCE3-38E7-4318-9A7E-3D895171129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2303104C-4A91-4704-A9CB-8C83A859090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AF48A9-C161-4603-82F0-5D2DE1EBA498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821E46E8-B084-4762-86F0-002CA288B522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A084C258-7D78-4F6D-8E24-00BE9608EBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FEA455-E605-4CE3-A951-760D59091C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1758117-4865-42A4-8110-2250924E21FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81AF4BFB-EC89-454B-89DF-FC8F6102E28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8013986B-DCAF-44A1-BA63-5BBA6762720F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55148",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35440",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35882",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1022376",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-24.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35371",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022397",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=484031",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503569",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10237",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/55148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=484031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1833",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-12T21:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) js_LeaveSharpObject, (2) ParseXMLSource, and (3) a certain assertion in jsinterp.c; and other vectors."
      }, {
        "lang" : "es",
        "value" : "El motor JavaScript en Mozilla Firefox anterior a v3.0.11, Thunderbird anterior a v2.0.0.22, y SeaMonkey anteriores a v1.1.17 permite a atacantes remotos producir una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar codigo arbitrario a traves de vectores relacionados con  (1) js_LeaveSharpObject, (2) ParseXMLSource, y (3) una cierta aserción en  jsinterp.c;  y otros vectores."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.10",
            "matchCriteriaId" : "E05337C3-04A1-4403-84BE-78FCDF83448D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CAA7D-398A-4B26-9754-FD188CE9729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.16",
            "matchCriteriaId" : "DE872814-DA94-417A-99E4-0E01E4554E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*",
            "matchCriteriaId" : "30B95DB4-EC98-4046-A894-26CA0807456B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4A97B6E1-EABA-4977-A3FC-64DF0392AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D33486-4956-4E2C-BA16-FA269A9D02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E99882-786F-455F-BAC4-30716120964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A3468-C3BF-417B-85FB-18C28F0765B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EED5D2-EC40-4253-991B-0C746FBEF6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.19",
            "matchCriteriaId" : "850345D6-2085-4EC4-AE47-FC8E265C61D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0618BD26-0EF5-4774-9131-B5ABD4CD302A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D604DAE-DF63-413C-9F49-FFC8E84699F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE6185-09F4-48E3-9742-F9D8030B5774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E565E5-286D-4A68-B085-5659DFE59A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F0C73F-291F-4A92-87B8-2269B5C1516D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938B1260-74A7-4CFF-8086-415DCC284430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28672BA-E3C2-40C3-80E1-95B7CDD089E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9308147C-0A23-48BC-BFA9-A49B9D73014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD8DCC-DBB4-40EE-927C-7B0969700077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F9CE47-E3AA-49D7-AEC9-447951AC31E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581615BB-C781-42CA-836E-0E0EAB8C4504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257F43FA-D22C-4BF0-A02E-261A54142BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D291234-D64A-4E8A-A7CD-08BB980E1CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3C27EC-5794-49C1-96E0-997E700B13DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745C2CBA-4824-441B-A6BC-E80959C2E035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6A7D00-A203-4891-96CE-20C91FCBF048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8CB480-0595-4BC1-998E-3638E85DB367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBF526-7A28-436B-9B01-EADE913602B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A0BCE3-38E7-4318-9A7E-3D895171129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2303104C-4A91-4704-A9CB-8C83A859090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AF48A9-C161-4603-82F0-5D2DE1EBA498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821E46E8-B084-4762-86F0-002CA288B522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A084C258-7D78-4F6D-8E24-00BE9608EBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FEA455-E605-4CE3-A951-760D59091C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1758117-4865-42A4-8110-2250924E21FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81AF4BFB-EC89-454B-89DF-FC8F6102E28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8013986B-DCAF-44A1-BA63-5BBA6762720F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/55153",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/55154",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1096.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35428",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35440",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1022376",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-24.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1125.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35372",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022397",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=369696",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=426520",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=427196",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=487204",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503570",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11487",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/55152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1096.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1125.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=369696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=426520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=427196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=487204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1834",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-12T21:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrated by the \\u115A through \\u115E characters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de truncado visual en netwerk/dns/src/nsIDNService.cpp en Mozilla Firefox anterior a v3.0.11 y SeaMonkey anterior a v1.1.17 permite a atacantes remotos sustituir la barra de direcciones a través de un IDN con caracteres Unicode inválidos que son mostrados como espacios en blanco, como se demostró en los caracteres desde \\u115A hasta \\u115E."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.10",
            "matchCriteriaId" : "E05337C3-04A1-4403-84BE-78FCDF83448D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.16",
            "matchCriteriaId" : "DE872814-DA94-417A-99E4-0E01E4554E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*",
            "matchCriteriaId" : "30B95DB4-EC98-4046-A894-26CA0807456B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4A97B6E1-EABA-4977-A3FC-64DF0392AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D33486-4956-4E2C-BA16-FA269A9D02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E99882-786F-455F-BAC4-30716120964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A3468-C3BF-417B-85FB-18C28F0765B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EED5D2-EC40-4253-991B-0C746FBEF6A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55162",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-25.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35388",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=479413",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503573",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10436",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/55162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=479413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1835",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-12T21:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, which allows user-assisted remote attackers to read arbitrary cookies via a crafted HTML document, as demonstrated by a URL with file://example.com/C:/ at the beginning."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anteriores a v3.0.11 y SeaMonkey anteriores a v1.1.17 asocian documentos locales con un dominio de nombres externo localizado después de la subcadena \"file://\" en una URL, lo que permite a atacantes remotos ayudados por el usuario leer cookies de forma arbitraria a través de un documento HTML manipulado, como se demostró mediante una URL con file://examplo.com/C:/ al principio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.10",
            "matchCriteriaId" : "E05337C3-04A1-4403-84BE-78FCDF83448D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.16",
            "matchCriteriaId" : "DE872814-DA94-417A-99E4-0E01E4554E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*",
            "matchCriteriaId" : "30B95DB4-EC98-4046-A894-26CA0807456B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4A97B6E1-EABA-4977-A3FC-64DF0392AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D33486-4956-4E2C-BA16-FA269A9D02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E99882-786F-455F-BAC4-30716120964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A3468-C3BF-417B-85FB-18C28F0765B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EED5D2-EC40-4253-991B-0C746FBEF6A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55161",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1096.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35428",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35882",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-26.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35391",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=491801",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503576",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9803",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/55161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1096.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=491801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1836",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-12T21:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an \"SSL tampering\" attack."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anteriores a v3.0.11, Thunderbird anteriores a v2.0.0.22, y SeaMonkey anteriores a v1.1.17 utilizan la cabecera HTTP del servidor para determinar el contexto de un documento facilitado mediante una respuesta CONNECT no 200 desde un servidor proxy, lo que permite a atacantes \"man-in-the-middle\" ejecutar secuencias de comandos web arbitrarios mediante la modificación de la respuesta CONNECT, también conocido como ataque \"forzado SSL\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.10",
            "matchCriteriaId" : "E05337C3-04A1-4403-84BE-78FCDF83448D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CAA7D-398A-4B26-9754-FD188CE9729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.16",
            "matchCriteriaId" : "DE872814-DA94-417A-99E4-0E01E4554E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*",
            "matchCriteriaId" : "30B95DB4-EC98-4046-A894-26CA0807456B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4A97B6E1-EABA-4977-A3FC-64DF0392AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D33486-4956-4E2C-BA16-FA269A9D02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E99882-786F-455F-BAC4-30716120964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A3468-C3BF-417B-85FB-18C28F0765B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EED5D2-EC40-4253-991B-0C746FBEF6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.19",
            "matchCriteriaId" : "850345D6-2085-4EC4-AE47-FC8E265C61D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0618BD26-0EF5-4774-9131-B5ABD4CD302A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D604DAE-DF63-413C-9F49-FFC8E84699F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE6185-09F4-48E3-9742-F9D8030B5774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E565E5-286D-4A68-B085-5659DFE59A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F0C73F-291F-4A92-87B8-2269B5C1516D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938B1260-74A7-4CFF-8086-415DCC284430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28672BA-E3C2-40C3-80E1-95B7CDD089E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9308147C-0A23-48BC-BFA9-A49B9D73014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD8DCC-DBB4-40EE-927C-7B0969700077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F9CE47-E3AA-49D7-AEC9-447951AC31E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581615BB-C781-42CA-836E-0E0EAB8C4504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257F43FA-D22C-4BF0-A02E-261A54142BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D291234-D64A-4E8A-A7CD-08BB980E1CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3C27EC-5794-49C1-96E0-997E700B13DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745C2CBA-4824-441B-A6BC-E80959C2E035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6A7D00-A203-4891-96CE-20C91FCBF048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8CB480-0595-4BC1-998E-3638E85DB367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBF526-7A28-436B-9B01-EADE913602B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A0BCE3-38E7-4318-9A7E-3D895171129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2303104C-4A91-4704-A9CB-8C83A859090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AF48A9-C161-4603-82F0-5D2DE1EBA498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821E46E8-B084-4762-86F0-002CA288B522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A084C258-7D78-4F6D-8E24-00BE9608EBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FEA455-E605-4CE3-A951-760D59091C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1758117-4865-42A4-8110-2250924E21FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81AF4BFB-EC89-454B-89DF-FC8F6102E28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8013986B-DCAF-44A1-BA63-5BBA6762720F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55160",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35440",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35882",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-27.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35380",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022396",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=479880",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503578",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11764",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/55160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=479880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1837",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-12T21:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to execute arbitrary code via a page transition during Java applet loading, related to a use-after-free vulnerability for memory associated with a destroyed Java object."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en la función NPObjWrapper_NewResolve en modules/plugin/base/src/nsJSNPRuntime.cpp en xul.dll en Mozilla Firefox v3 anteriores a v3.0.11 podría permitir a atacantes remotos ejecutar código arbitrario a través de una pagina de transición durante la carga de un applet de Java, relacionado con una vulnerabilidad uso-después-de-liberación para asociar memoria con un objeto Java destrozado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.0.11",
            "matchCriteriaId" : "AE40ED6D-6842-4235-B78C-0E2D221C8916"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "743CBBB1-C140-4FEF-B40E-FAE4511B1140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6172AF57-B26D-45F8-BE3A-F75ABDF28F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F2976D5-83A5-4A52-A1E6-D0E17F23FD62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "941713DB-B1DE-4953-9A9C-174EAFDCB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F87B994-28E4-4095-8770-6433DE9C93AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B5DCF29-6830-45FF-BC88-17E2249C653D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34241",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-19/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-28.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504260/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35360",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022386",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=486269",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503579",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10628",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/34241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-19/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504260/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=486269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1838",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-12T21:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted event handler, related to an incorrect context for this event handler."
      }, {
        "lang" : "es",
        "value" : "La implementación de la recolección de basura en Mozilla Firefox anteriores a v3.0.11, Thunderbird anteriores a v2.0.0.22, y SeaMonkey anteriores a v1.1.17 fija un elemento del documento del propietario a \"null\" en circunstancias sin especificar, lo que permite a atacantes remotos ejecutar JavaScript con privilegios chrome a traves de un manipulador de eventos manipulado, relacionado con un contexto incorrecto para este manipulador de eventos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.10",
            "matchCriteriaId" : "E05337C3-04A1-4403-84BE-78FCDF83448D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CAA7D-398A-4B26-9754-FD188CE9729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.16",
            "matchCriteriaId" : "DE872814-DA94-417A-99E4-0E01E4554E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*",
            "matchCriteriaId" : "30B95DB4-EC98-4046-A894-26CA0807456B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4A97B6E1-EABA-4977-A3FC-64DF0392AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D33486-4956-4E2C-BA16-FA269A9D02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E99882-786F-455F-BAC4-30716120964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A3468-C3BF-417B-85FB-18C28F0765B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EED5D2-EC40-4253-991B-0C746FBEF6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.19",
            "matchCriteriaId" : "850345D6-2085-4EC4-AE47-FC8E265C61D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0618BD26-0EF5-4774-9131-B5ABD4CD302A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D604DAE-DF63-413C-9F49-FFC8E84699F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE6185-09F4-48E3-9742-F9D8030B5774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E565E5-286D-4A68-B085-5659DFE59A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F0C73F-291F-4A92-87B8-2269B5C1516D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938B1260-74A7-4CFF-8086-415DCC284430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28672BA-E3C2-40C3-80E1-95B7CDD089E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9308147C-0A23-48BC-BFA9-A49B9D73014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD8DCC-DBB4-40EE-927C-7B0969700077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F9CE47-E3AA-49D7-AEC9-447951AC31E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581615BB-C781-42CA-836E-0E0EAB8C4504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257F43FA-D22C-4BF0-A02E-261A54142BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D291234-D64A-4E8A-A7CD-08BB980E1CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3C27EC-5794-49C1-96E0-997E700B13DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745C2CBA-4824-441B-A6BC-E80959C2E035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6A7D00-A203-4891-96CE-20C91FCBF048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8CB480-0595-4BC1-998E-3638E85DB367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBF526-7A28-436B-9B01-EADE913602B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A0BCE3-38E7-4318-9A7E-3D895171129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2303104C-4A91-4704-A9CB-8C83A859090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AF48A9-C161-4603-82F0-5D2DE1EBA498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821E46E8-B084-4762-86F0-002CA288B522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A084C258-7D78-4F6D-8E24-00BE9608EBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FEA455-E605-4CE3-A951-760D59091C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1758117-4865-42A4-8110-2250924E21FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81AF4BFB-EC89-454B-89DF-FC8F6102E28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8013986B-DCAF-44A1-BA63-5BBA6762720F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55157",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1096.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35428",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35440",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35882",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-29.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1125.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35383",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022397",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=489131",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503580",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11080",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/55157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1096.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-29.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1125.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=489131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1839",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-12T21:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document, aka a \"file-URL-to-file-URL scripting\" attack."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox v3 anteriores a v3.0.11 asocia incorrectamente un principal con un fichero: URL cargada a través de la barra de direcciones, lo que permite a atacantes remotos con la colaboración del usuario evitar la restricciones de acceso previstas y leer ficheros a través de un documento HTML manipulado, también conocido como ataque de \"secuencia de comandos fichero-URL-a-fichero-URL\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:N/A:N",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.10",
            "matchCriteriaId" : "E05337C3-04A1-4403-84BE-78FCDF83448D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CAA7D-398A-4B26-9754-FD188CE9729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F72BFD4-000D-4B07-8261-C9F6839AD150"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55163",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-30.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35386",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=479943",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503581",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9256",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/55163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=479943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1840",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-12T21:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote attackers to bypass intended access restrictions via a crafted HTML document, as demonstrated by a \"web bug\" in an e-mail message, or web script or an advertisement in a web page."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anterior a v3.0.11, Thunderbird, y SeaMonkey no comprueban la politica de contenidos antes de cargar un fichero de secuencia de comandos que este en un documento XUL, lo que permite a atacantes remotos evitar las restricciones de acceso previstas a través de un documento HTML manipulado, como se demostró mediante un \"web bug\" en un mensaje de correo electrónico, o secuencias de comandos web o un anuncio en una página."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.10",
            "matchCriteriaId" : "E05337C3-04A1-4403-84BE-78FCDF83448D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CAA7D-398A-4B26-9754-FD188CE9729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F72BFD4-000D-4B07-8261-C9F6839AD150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138701FB-929A-4683-B41F-CB014ACFE44A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5C8E657-3049-4462-98F6-296C60BC8C5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55158",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35440",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-31.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022379",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=477979",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503582",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51076",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9448",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/55158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=477979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1841",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-12T21:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the browser sidebar and the FeedWriter."
      }, {
        "lang" : "es",
        "value" : "js/src/xpconnect/src/xpcwrappedjsclass.cpp en Mozilla Firefox anterior a v3.0.11, Thunderbird anterior a v2.0.0.22, y SeaMonkey anterior a v1.1.17 permite a atacantes remotos ejecutar secuencias de comandos web de forma arbitraria con los privilegios de un objeto \"chrome\", como se ha demostrado en la barra lateral del navegador y el FeedWriter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.10",
            "matchCriteriaId" : "E05337C3-04A1-4403-84BE-78FCDF83448D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CAA7D-398A-4B26-9754-FD188CE9729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.16",
            "matchCriteriaId" : "DE872814-DA94-417A-99E4-0E01E4554E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*",
            "matchCriteriaId" : "30B95DB4-EC98-4046-A894-26CA0807456B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4A97B6E1-EABA-4977-A3FC-64DF0392AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D33486-4956-4E2C-BA16-FA269A9D02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E99882-786F-455F-BAC4-30716120964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A3468-C3BF-417B-85FB-18C28F0765B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EED5D2-EC40-4253-991B-0C746FBEF6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.19",
            "matchCriteriaId" : "850345D6-2085-4EC4-AE47-FC8E265C61D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0618BD26-0EF5-4774-9131-B5ABD4CD302A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D604DAE-DF63-413C-9F49-FFC8E84699F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE6185-09F4-48E3-9742-F9D8030B5774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E565E5-286D-4A68-B085-5659DFE59A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F0C73F-291F-4A92-87B8-2269B5C1516D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938B1260-74A7-4CFF-8086-415DCC284430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28672BA-E3C2-40C3-80E1-95B7CDD089E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9308147C-0A23-48BC-BFA9-A49B9D73014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD8DCC-DBB4-40EE-927C-7B0969700077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F9CE47-E3AA-49D7-AEC9-447951AC31E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581615BB-C781-42CA-836E-0E0EAB8C4504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257F43FA-D22C-4BF0-A02E-261A54142BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D291234-D64A-4E8A-A7CD-08BB980E1CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3C27EC-5794-49C1-96E0-997E700B13DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745C2CBA-4824-441B-A6BC-E80959C2E035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6A7D00-A203-4891-96CE-20C91FCBF048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8CB480-0595-4BC1-998E-3638E85DB367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBF526-7A28-436B-9B01-EADE913602B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A0BCE3-38E7-4318-9A7E-3D895171129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2303104C-4A91-4704-A9CB-8C83A859090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AF48A9-C161-4603-82F0-5D2DE1EBA498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821E46E8-B084-4762-86F0-002CA288B522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A084C258-7D78-4F6D-8E24-00BE9608EBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FEA455-E605-4CE3-A951-760D59091C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1758117-4865-42A4-8110-2250924E21FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81AF4BFB-EC89-454B-89DF-FC8F6102E28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8013986B-DCAF-44A1-BA63-5BBA6762720F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55159",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1096.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35428",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35440",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35882",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-32.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35373",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022397",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=479560",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503583",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9815",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/55159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1096.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-32.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-782-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=479560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=503583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-12T21:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nsViewManager.cpp in Mozilla Firefox 3.0.2 through 3.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to interaction with TinyMCE."
      }, {
        "lang" : "es",
        "value" : "nsViewManager.cpp en Mozilla Firefox desde v3.0.2 hasta v3.0.10 permite a atacantes remotos producir una denegación de servicio (desreferencia a un puntero NULL y caída de aplicación) a través de vectores relacionados con la interacción con TinyMCE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=490425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=488570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=490425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=488570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-12T21:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3.0.10 and earlier on Linux allows remote attackers to cause a denial of service (application crash) via a URI for a large GIF image in the BACKGROUND attribute of a BODY element."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox 3.0.10 y anteriores en Linux permite a atacantes remotos producir una denegación de servicio (caída de aplicación) a través de un URI para una imagen GIF en el atributo \"BACKGROUND\" de un elemento \"BODY\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.10",
            "matchCriteriaId" : "E05337C3-04A1-4403-84BE-78FCDF83448D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://e-rdc.org/v1/news.php?readmore=137",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504214",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35280",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=496265",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51037",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://e-rdc.org/v1/news.php?readmore=137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=496265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-15T19:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an \"SSL tampering\" attack."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer anteriores a v8 utiliza una cabecera HTTP Host para determinar el contexto de un documento proporcionado por una respuesta de CONEXIÓN (1) 4xx o (2) 5xx desde un servidor proxy, lo que permite a los atacantes \"hombre en el medio\" ejecutar arbitrariamente una secuencia de comandos web modificando la respuesta CONEXIÓN, también conocida como un ataque \"forzado SSL\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26125C2-2476-43E8-8878-8C1A5A8B244F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "FED6949F-54D0-4D36-B6A8-59EBFA2611E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226A1B77-A80E-4ADE-8318-749CD1AD7CD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF9241-A175-438C-A793-3D245BE2AE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F62AC866-A06F-47DB-AEDF-E345CE0B14A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "943D5C5C-FC49-4EDE-AE75-A79CFF42208E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59EB6841-0427-479B-8771-06DF62EE3C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8873A08F-D4C7-46FC-8FE5-972644F85ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B815D9-BC21-4A17-AF00-B8AD181027D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42502347-DD40-4F8C-9861-C0A88A3F8608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF9C64F-9A67-4BA9-A653-75507935E6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "C375A9AA-505B-444C-A45F-2BAAD0B2CD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D82B89-456D-41CB-A894-B6A22FB4415D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FF4E47-AD75-42C7-BB84-42BBA46A58B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.01:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E21CE6E-2B33-4225-B1DC-C19F1D578040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B26CE22-E730-4247-853E-5E640DB3ECB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.40.308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A652453-AB5F-405C-ABDE-CE1B54FEACED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.40.520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141080AB-48DE-4885-BAB6-6F0937ABD49B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB758D76-B7F6-4E87-B88D-620443655CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1158:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28655AC5-1512-4F45-9963-CA26F73981CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1215:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00F4F36-B88A-4FDB-BE52-83C6EF60BDB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC05584-F553-4D29-9C46-C9EE5F0CB166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.71.544:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108A86E-8387-446C-B823-BE6FCAE747A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3F79B8-512A-4B88-868C-7C4ADFD223C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "078C3A86-C9F8-4A19-9DDC-1065B54E640F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9030923C-356E-4FAB-8E64-03D462B4DB5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0FFABC-8BED-4838-85FE-406DC9CF9B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DB4A00-4F70-4189-81BD-9318C52DF2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4071D03-D955-4C1B-ACD8-A864F7D0FA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B8985B-B927-4928-B1DB-18E29F796992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04FEA6-37B0-44B0-844F-55652ABA1F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56FB8E-2553-47C1-82A2-9E59023780CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8541EEED-94F4-42F8-9719-57F3EC85D52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "40372520-08CF-4F64-A7AC-7E0AE0964138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFE8C8E-F46C-4179-AE83-CE4720C8E0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61125B09-23AA-4D5A-8332-6B5CCD80C7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AECF59F-B3C0-44CC-B77A-30E32B3E8BB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2314.1003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4690B85-86B9-448E-9249-B3885DEDC60E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F4C80-3B1B-45BD-966F-C9DBF98B875D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65E0DC1-40F6-4252-945A-A972343D1E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C07C1A9-1A94-4653-8C57-6FCFC25854E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC57519-AD96-4ECF-A5B2-4E45F7D55298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37DE3DE6-A355-41F2-BF5E-E7526449E753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB24B4F-44FF-4F0F-90FA-240A34B9599F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "919A6551-DB18-49BD-AB92-4C453B3B728F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C512DAB3-2720-42D2-B27E-28F30FE0FE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB90458F-1F2B-4F4C-88C6-4B670787D126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2EFDB4-97C2-4DDF-8A65-FCFB60FCB540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A99CDC7-9341-4DFB-BB18-FF06C05FF9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CFF390-FF33-45CA-BC96-C6766491C616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3BFFB565-F656-43E3-89E1-E412DC4C9D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F4336F0E-75FE-4592-9D98-4F689804956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA6E5E4B-9E95-4019-8622-6E707FEC2FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*",
            "matchCriteriaId" : "8E93C22E-812E-4CDA-9850-2386CE1E817A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA6BA38-8B3B-4B9A-95BF-BCD412DD83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BD2A05-3FCE-4C5D-8228-968630F27E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0EC334-AEAD-43CA-A609-C027060F4F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF320BE-F022-4E0E-9815-B8AEED87B384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75532B2D-6814-4D20-8AEB-E7DFD66B6423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83802E30-8E7D-4CAB-B8FC-10056CF833D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.2462.0000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314538E8-48EC-4869-9074-2A1F5B7CBB3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.2479.0006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F56B3A72-7C5E-4F0C-BBC7-AA13DDFBEE70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68656E52-AD8A-474E-9160-CD5F8857254B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F47C82-E767-47A8-88DE-417B004ED7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86E7189-CE21-4007-A3FA-39A6B51A5AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.2800.1106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE2555F-C4BE-482F-8DD9-976D2026058C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBF9B51-5AF4-4317-9768-21D866AC7990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.2900.2180:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F352FE-C22E-4B33-A46F-77A164B5DABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.3663.0000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ACD5A44-0926-4A1B-9900-1E7CC0A561C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.3790.0000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E16BEF4-71AA-4E23-B438-D25FFABDB646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.3790.1830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F32702E-F955-4DDB-B235-7C47E882453C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.3790.3959:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA2B4AD-C04D-4A6B-8570-5A2F5489F750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC71FD8-D385-4507-BD14-B75FDD4C79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "506711D9-6E57-4EED-8628-36C7F2324040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "ED471260-0272-431F-A91E-AC2883D92497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "86584E3F-3B0D-4018-A186-E59F3B01CA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0.5730.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6E1020-1017-4670-9316-27C79F1E2698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.00.5730.1100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F63AE1-8FC9-4C0F-8D19-F17DFA214E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16386:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B1186A-FA5B-4E49-8C2F-BCD2D45F22A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16441:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D75496-8594-44DB-B5C4-EA3CABD6551A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-15T19:30:05.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari before 3.2.2 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an \"SSL tampering\" attack."
      }, {
        "lang" : "es",
        "value" : "Apple Safari anteriores a v3.2.2 utiliza una cabecera HTTP Host para determinar el contexto de un documento proporcionado por una respuesta de CONEXIÓN (1) 4xx o (2) 5xx desde un servidor proxy, lo que permite a los atacantes \"hombre en el medio\" ejecutar arbitrariamente una secuencia de comandos web modificando la respuesta CONEXIÓN, también conocida como un ataque \"forzado SSL\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.2",
            "matchCriteriaId" : "B6E139B2-65BD-4416-9D99-48E132BEC3A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-15T19:30:05.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera, possibly before 9.25, uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an \"SSL tampering\" attack."
      }, {
        "lang" : "es",
        "value" : "Opera, posiblemente anteriores a v9.25, utiliza una cabecera HTTP Host para determinar el contexto de un documento propocionado por una respuesta de CONEXIÓN (1) 4xx o (2) 5xx desde un servidor proxy, lo que permite a los atacantes \"hombre en el medio\" ejecutar arbitrariamente una secuencia de comandos web modificando la respuesta CONEXIÓN, también conocida como un ataque \"forzado SSL\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.22",
            "matchCriteriaId" : "11F806C7-C64E-4EE7-96B1-E625CE121A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C35850-B79C-4EE4-A6F2-CC5D2304724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7965089-8592-47F2-958B-7DBE669BCAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1750B2D-7AC8-45CF-9879-1D0476EEE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE4473-88C0-4E28-A5B5-F7383B0E5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC41D6-73D4-44E9-87E4-E1E955B9580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5A5E5-3703-44AC-9963-A20A55002B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3E5BEF-3F29-4929-A37C-C49322B19047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0E7B5D-2568-4128-8F99-E74D24A7E991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A04906-7267-4A09-87BF-D639C7CF315B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E48C83-01AE-4A33-A004-14B99792674C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A2B78-70BD-439B-B1ED-A17FA5EF0990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623E4466-82CC-4BDD-BE25-3BB33B585547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECA190-D7D3-4248-A61E-0D87E67E3D31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-15T19:30:05.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "src/net/http/http_transaction_winhttp.cc in Google Chrome before 1.0.154.53 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an \"SSL tampering\" attack."
      }, {
        "lang" : "es",
        "value" : "src/net/http/http_transaction_winhttp.cc en Google Chrome anteriores a v1.0.154.53 utiliza una cabecera Host HTTP para determinar el contexto de un documento proporcionado en una respuesta de CONEXIÓN (1) 4xx o (2) 5xx desde un servidor proxy, lo que permite a los atacantes \"hombre en el medio\" ejecutar arbitrariamente una secuencia de comando web modificando esta respuesta de CONEXIÓN, también conocida como un ataque \"forzado SSL\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.154.52",
            "matchCriteriaId" : "A7105F0E-97F8-4C84-82FB-1DE9ABD07AA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8FF77A-7802-4963-B532-3F16C7BB012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73576CF-76EE-42A3-9955-D7991384B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=7338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=8473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes/releasenotes1015453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://src.chromium.org/viewvc/chrome/branches/release_154.next/src/net/http/http_transaction_winhttp.cc?r1=11621&r2=11669&pathrev=11669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://src.chromium.org/viewvc/chrome?view=rev&revision=11669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=479880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=7338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=8473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes/releasenotes1015453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://src.chromium.org/viewvc/chrome/branches/release_154.next/src/net/http/http_transaction_winhttp.cc?r1=11621&r2=11669&pathrev=11669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://src.chromium.org/viewvc/chrome?view=rev&revision=11669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=479880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-15T19:30:05.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.10 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anterior a v3.0.10 procesa una respuesta 3xx CONEXIÓN HTTP anteriores a una negociación SSL con éxito, lo que permite a los atacantes \"hombre en el medio\" ejecutar arbitrariamente una secuencia de comandos web, en un contexto de página https, modificando esta respuesta de CONEXIÓN a una redirección específica 302 a un página web https arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.9",
            "matchCriteriaId" : "E45109F0-313F-4112-A570-85D484ACB3F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-15T19:30:05.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari before 3.2.2 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site."
      }, {
        "lang" : "es",
        "value" : "Apple Safari anteriores a v3.2.2 procesa una respuesta de CONEXIÓN HTTP anterior a una negociación SSL con éxito, lo que permite a los atacantes \"hombre en el medio\" ejecutar arbitrariamente una secuencia de comandos web en un página con contexto https, modificando esta respuesta de CONEXIÓN a una redirección 302 específica a una página web https arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.1",
            "matchCriteriaId" : "7F6BD2EE-4CD1-4F19-9710-FEE247C69521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F4ADD0-449B-4DDD-9878-DE86CBD56756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A419AE8-F5A2-4E25-9004-AAAB325E201A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "64FE1AA1-32D1-4825-8B2B-E66093937D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E760CD65-A10E-44F1-B835-DA6B77057C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A09DA0-83E9-491D-A0A5-AF97B5463D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C7EF0-A56B-40E6-9CED-1228405D034E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6078B0-4756-4E04-BAC4-C4EC90548A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87EDB53-FB6E-4B10-B890-A7195D841C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:85.8:*:*:*:*:*:*",
            "matchCriteriaId" : "957FCFC4-565A-4F2F-8D3D-D0982E1723F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*",
            "matchCriteriaId" : "22A450DC-CDF5-4EA0-A703-AFB3DEFE1395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857C92E2-6870-409A-9457-75F8C5C7B959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD75A4F-F529-4F5E-957D-380215F7B21B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834EC299-2010-4306-8CEE-35D735583101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443FF271-A3AB-4659-80B2-89F771BF5371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D29B98E-2F62-4F6F-976D-FEC4EB07F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3112AFEB-7893-467C-8B45-A44D5697BB79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC83309-3A97-4619-B5C1-574610838BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891514D5-50C8-4EDC-81C5-24ABF8BCC022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25032A3A-9D05-4E69-9A22-C9B332976769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9315ADD-5B97-4639-9B59-806EFD7BC247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:312.5:*:*:*:*:*:*",
            "matchCriteriaId" : "21BAC0B8-063C-4772-8F1B-EB9A2F7A585C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:312.6:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAB4071-A883-4E04-BDDF-A121C4738E61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E44913D-BC8B-4AA1-84EB-EFEAC531B475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B74019F-C365-4E13-BBB4-D84AD9C1F87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*",
            "matchCriteriaId" : "018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*",
            "matchCriteriaId" : "1082B33F-33B5-453A-A5AA-10F65AB2E625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*",
            "matchCriteriaId" : "EC348464-F08D-4ABF-BB90-3FA93C786F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61652033-FD15-47D6-8B18-CF28E6CE346C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDCF83E-620C-40FA-9901-5D939E315143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D113B5-070D-4F91-AB5E-222D71C90EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E86DEDD-ABDC-46BD-BAD3-A409635F7801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BAE980-449F-4F8C-A5BC-6CB7226E971A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A33F900-D405-40A8-A0A5-3C80320FF6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4444A309-5A97-4E1C-B4EA-C4A070A98CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B29951B-9A98-45B7-8E4B-5515C048EC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED950D-38AB-4D66-B97A-FB982D86057F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FDEB4F-133A-43DF-A89B-53E249F1293D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E78F43-07BD-4D62-9512-DA738A92BC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE25E9E-826E-4782-AED8-AC6297B18D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3180366-2240-467E-8AB9-BEA0430948F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:522.15.5:*:*:*:*:*:*",
            "matchCriteriaId" : "63FEA310-C6F2-4F2A-ABA8-6468308E3569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E834B8-545E-4472-9D60-B4CF1340D62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB9CC52-E533-4306-9E92-73C84B264D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02C814DE-1884-4F3E-944D-068F7FD55B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A5CA99-8B1C-4C35-85E3-DB0495444A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "912A26D1-3264-464F-B101-1796B35437E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D8C2EF-D552-4279-A12E-70E292F39E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00082E3-EBF5-4C23-9F57-BF73E587FC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C453B588-15FD-4A9C-8BC1-6202A21DAE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD634B1-4986-4E80-8BDC-58941893F6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BB6761-3581-4AE6-85E0-1609D15D7618"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-15T19:30:05.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera, possibly before 9.25, processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site."
      }, {
        "lang" : "es",
        "value" : "Opera, posiblemente en versiones anteriores a v9.25, procesa una respuesta 3xx HTTP CONNECT antes de un proceso de handshake SSL exitoso, lo que permitiría a atacantes \"man-in-the-middle\" ejecutar secuencias de comandos web, en un contexto de un sitio https, mediante la modificación de la respuesta CONNECT hacia una redirección inespecífica a un sitio web https arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.24",
            "matchCriteriaId" : "E074E753-D7B5-49DB-8FE4-294F92047027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F892EEF-54EC-4EC0-84B3-BD5C216AED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089BEFE3-24B2-4C73-BA25-7C905ED68A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "76AECDD0-C14D-4A68-AF2E-1C41A51089EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D888C22C-41F9-427D-9249-F010891DA48E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FAD06C-830A-4CB6-B9AF-7E093B64B69B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5366D587-7E77-4288-AB31-48108D04E0B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFFC44-A329-4FA5-B57C-FA8892F8226B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9241CFD0-9E61-487F-B076-2D7B8ACEA381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB49750B-DAA1-4417-8384-1F4D47F2227D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1099D38B-82EC-43C9-9DF5-D5EDC19834DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D64030-1877-4F29-8340-93DB6E0F1F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "85184E8A-C42D-4CBD-ACB4-B58752C305D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DA682571-536B-4CD9-A820-47E897B01480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "298457B8-051B-46D0-81B4-C5B63B69EB98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D4BC07-C37E-4F99-8DEA-54A45250050A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECFBC71-7814-4A24-A918-C593673727B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "57824075-E3F7-4B23-B4D6-8417C3147085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "FE078F27-6FC1-466C-8331-A89F8B6FE0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "5839EB88-DF5E-4AB0-899B-DF9F72F5F442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1865A4-E038-4A1C-877D-5A3CFA9576BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "93966A66-4332-4E76-9B1A-2BBF10AF0ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA91E77-301C-48F6-9A57-D5FDCEF743BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49DDEF-681C-4A34-9FF8-17249C42842D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF365891-F3FA-4740-94B2-01F85254A2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42B4261-C511-4F3A-8596-6BD4E343DC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2F38FE-7E98-48B2-B0B2-35312368B21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "63687D75-860D-4A36-B6BB-45BD4268B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BD500741-CF39-4F0C-9F96-6CBDFF8973D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*",
            "matchCriteriaId" : "359941FD-A5CE-43C1-AA76-C1B79BCB08C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9AC78A-CA47-476D-935E-67932BAB98A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E9662C-441F-4AB2-AC4C-30F31C32949A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D681B3-73E6-4257-84B4-DE83F6D659B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E5F2A5-F50F-4085-AB7D-8C91121A429A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E90912E-0CF8-404B-9E86-461497C65A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E19DD71-9447-4946-931F-4866537C8BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54075890-6E0C-4AB7-8BD5-2023419CC251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABC3435-77CD-4591-8282-7ADA60225CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C35850-B79C-4EE4-A6F2-CC5D2304724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "50B797C8-3290-4278-9D4B-A15A14FB8D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEC078C-A8F4-471B-A367-59A86B78590D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E10F658D-D2E4-4789-8172-F8842C3EEA05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81687D99-7444-4205-A7BE-992CC758675F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75C4301-68E9-4A10-B9C5-711252BF629B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC690371-3326-421E-8BAC-14F48840671B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E20418A7-1FA7-45EF-99B5-12D283EA6CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE50982-8026-466C-9F51-867425C9986F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD889EC7-E5D2-4137-B85C-86D7DB5CED27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "97452A26-7231-43BE-B70E-B8D05365CAB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DBA733-467C-4505-8199-DD25A5FFBF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B332FF1C-731D-454C-AA9E-3534040F09E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7965089-8592-47F2-958B-7DBE669BCAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1750B2D-7AC8-45CF-9879-1D0476EEE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBAA39D-01A0-4B6B-926B-C36C238E5258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE4473-88C0-4E28-A5B5-F7383B0E5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9754B270-E01D-415E-9A91-09ECB9B82B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D4682E92-E5E7-4351-959E-25A79CA4271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC41D6-73D4-44E9-87E4-E1E955B9580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5A5E5-3703-44AC-9963-A20A55002B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3E5BEF-3F29-4929-A37C-C49322B19047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0E7B5D-2568-4128-8F99-E74D24A7E991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A04906-7267-4A09-87BF-D639C7CF315B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "76C58A91-23BA-4336-A81B-B7FDFAF6CA91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6E40C4-FA29-4D7A-9018-44154503A68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E48C83-01AE-4A33-A004-14B99792674C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A2B78-70BD-439B-B1ED-A17FA5EF0990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623E4466-82CC-4BDD-BE25-3BB33B585547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0002A4-8A90-471C-9813-F648D53E4F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECA190-D7D3-4248-A61E-0D87E67E3D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A15E0FA-5570-4C5F-B087-38591D9EBABA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-15T19:30:05.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 8, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 8, y posiblemente otras versiones, detecta contenido http en páginas web https solamente en marcos de alto nivel que usan https, lo que permite a los atacantes \"hombre en el medio\" ejecutar arbitrariamente una secuencia de comandos web, en un contexto de una página https, modificando una página http que incluya un iframe https que referencia a un archivo de secuencia de comandos en un sitio http, relativo a páginas \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL)\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:beta2:*:*:*:*:*:*",
            "versionEndIncluding" : "8",
            "matchCriteriaId" : "BFF1D247-1AF2-44C6-81D2-9C868A62BC00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4071D03-D955-4C1B-ACD8-A864F7D0FA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "59159262-BA89-46B9-B16F-0CC6A5502C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0.5730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B85C32-02F5-43F5-8BBB-5A240F99BAA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52E757F-9B41-43B4-9D67-3FEDACA71283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "06E95EE4-23D8-40F7-9DFF-6C835AB62AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21CCF994-2F4D-44FE-89F7-0F92734D5AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:pocket_ie:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AC33FCB-8A30-497E-8369-D6A0A30EEB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:pocket_ie:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F51C049-0E1B-42DE-898D-E18B350EE7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:pocket_ie:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5354582-A1D1-46CB-A05A-A086820C1013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:pocket_ie:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8075385C-29C6-4E2D-938A-CD1444892609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:pocket_ie:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3168D511-6FFD-40D0-B46B-352C6A1CF34C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:pocket_ie:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D57619-255D-46DD-9C32-E4B7F5F3689A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:pocket_ie:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6284FCA-2362-42A2-A9FE-E6E385191E4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-15T19:30:05.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\""
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox 3.0.10, y posiblemente otras versiones, detecta contenido http en páginas https únicamente cuando el marco (frame) de nivel superior usa https, lo que permite a atacantes \"hombre-en-medio\" (man-in-the-middle o MITM) ejecutar secuencias de comandos web de su elección, en un contexto de sitio https, modificando una página http para incluir un iframe https que referencia al archivo en un sitio http con la secuencia de comandos. Relacionado con \"Páginas HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.9",
            "matchCriteriaId" : "E45109F0-313F-4112-A570-85D484ACB3F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-15T19:30:05.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\""
      }, {
        "lang" : "es",
        "value" : "Apple Safari detecta contenido http en páginas https únicamente cuando el marco (frame) de nivel superior usa https, lo que permite a atacantes \"hombre-en-medio\" (man-in-the-middle o MITM) ejecutar secuencias de comandos web de su elección, en un contexto de sitio https, modificando una página http para incluir un iframe https que referencia al archivo en un sitio http con la secuencia de comandos. Relacionado con \"Páginas HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.1",
            "matchCriteriaId" : "7F6BD2EE-4CD1-4F19-9710-FEE247C69521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F4ADD0-449B-4DDD-9878-DE86CBD56756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A419AE8-F5A2-4E25-9004-AAAB325E201A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "64FE1AA1-32D1-4825-8B2B-E66093937D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E760CD65-A10E-44F1-B835-DA6B77057C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A09DA0-83E9-491D-A0A5-AF97B5463D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C7EF0-A56B-40E6-9CED-1228405D034E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6078B0-4756-4E04-BAC4-C4EC90548A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87EDB53-FB6E-4B10-B890-A7195D841C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:85.8:*:*:*:*:*:*",
            "matchCriteriaId" : "957FCFC4-565A-4F2F-8D3D-D0982E1723F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*",
            "matchCriteriaId" : "22A450DC-CDF5-4EA0-A703-AFB3DEFE1395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857C92E2-6870-409A-9457-75F8C5C7B959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD75A4F-F529-4F5E-957D-380215F7B21B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834EC299-2010-4306-8CEE-35D735583101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443FF271-A3AB-4659-80B2-89F771BF5371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D29B98E-2F62-4F6F-976D-FEC4EB07F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3112AFEB-7893-467C-8B45-A44D5697BB79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC83309-3A97-4619-B5C1-574610838BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891514D5-50C8-4EDC-81C5-24ABF8BCC022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25032A3A-9D05-4E69-9A22-C9B332976769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9315ADD-5B97-4639-9B59-806EFD7BC247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:312.5:*:*:*:*:*:*",
            "matchCriteriaId" : "21BAC0B8-063C-4772-8F1B-EB9A2F7A585C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:312.6:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAB4071-A883-4E04-BDDF-A121C4738E61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E44913D-BC8B-4AA1-84EB-EFEAC531B475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B74019F-C365-4E13-BBB4-D84AD9C1F87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*",
            "matchCriteriaId" : "018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*",
            "matchCriteriaId" : "1082B33F-33B5-453A-A5AA-10F65AB2E625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*",
            "matchCriteriaId" : "EC348464-F08D-4ABF-BB90-3FA93C786F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61652033-FD15-47D6-8B18-CF28E6CE346C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDCF83E-620C-40FA-9901-5D939E315143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D113B5-070D-4F91-AB5E-222D71C90EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E86DEDD-ABDC-46BD-BAD3-A409635F7801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BAE980-449F-4F8C-A5BC-6CB7226E971A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A33F900-D405-40A8-A0A5-3C80320FF6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4444A309-5A97-4E1C-B4EA-C4A070A98CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B29951B-9A98-45B7-8E4B-5515C048EC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED950D-38AB-4D66-B97A-FB982D86057F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FDEB4F-133A-43DF-A89B-53E249F1293D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E78F43-07BD-4D62-9512-DA738A92BC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE25E9E-826E-4782-AED8-AC6297B18D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3180366-2240-467E-8AB9-BEA0430948F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:522.15.5:*:*:*:*:*:*",
            "matchCriteriaId" : "63FEA310-C6F2-4F2A-ABA8-6468308E3569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E834B8-545E-4472-9D60-B4CF1340D62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB9CC52-E533-4306-9E92-73C84B264D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02C814DE-1884-4F3E-944D-068F7FD55B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A5CA99-8B1C-4C35-85E3-DB0495444A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "912A26D1-3264-464F-B101-1796B35437E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D8C2EF-D552-4279-A12E-70E292F39E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00082E3-EBF5-4C23-9F57-BF73E587FC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C453B588-15FD-4A9C-8BC1-6202A21DAE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD634B1-4986-4E80-8BDC-58941893F6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BB6761-3581-4AE6-85E0-1609D15D7618"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-15T19:30:05.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\""
      }, {
        "lang" : "es",
        "value" : "Opera detecta contenido http en una página https, sólo cuando el marco de alto nivel utiliza https, lo que permite a los atacantes \"hombre en el medio\" ejecutar arbitrariamente una secuencia de comandos web, en un contexto de página https, modificando una página http incluya un iframe https referenciando a un archivo de secuencia de comandos en una página http, en relación a páginas \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL)\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.22",
            "matchCriteriaId" : "11F806C7-C64E-4EE7-96B1-E625CE121A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C35850-B79C-4EE4-A6F2-CC5D2304724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7965089-8592-47F2-958B-7DBE669BCAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1750B2D-7AC8-45CF-9879-1D0476EEE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE4473-88C0-4E28-A5B5-F7383B0E5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC41D6-73D4-44E9-87E4-E1E955B9580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5A5E5-3703-44AC-9963-A20A55002B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3E5BEF-3F29-4929-A37C-C49322B19047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0E7B5D-2568-4128-8F99-E74D24A7E991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A04906-7267-4A09-87BF-D639C7CF315B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E48C83-01AE-4A33-A004-14B99792674C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A2B78-70BD-439B-B1ED-A17FA5EF0990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623E4466-82CC-4BDD-BE25-3BB33B585547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECA190-D7D3-4248-A61E-0D87E67E3D31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-15T19:30:05.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\""
      }, {
        "lang" : "es",
        "value" : "Google Chrome detecta contenido http en páginas https únicamente cuando el marco (frame) de nivel superior usa https, lo que permite a atacantes \"hombre-en-medio\" (man-in-the-middle o MITM) ejecutar secuencias de comandos web de su elección, en un contexto de sitio https, modificando una página http para incluir un iframe https que referencia al archivo en un sitio http con la secuencia de comandos. Relacionado con \"Páginas HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5..10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40073FD8-6E5A-4770-837A-CAF0C8FD2A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F071C3F7-A3C4-475D-8843-B52F2DB7C56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.0:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBC39B3-4106-4B28-8AFB-4F4B5B5119D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.0:beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "763CEF7F-AAB2-4C16-BDC2-E5F864111592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.0:beta_4:*:*:*:*:*:*",
            "matchCriteriaId" : "B66F0EC7-452C-4847-B028-5086FE657440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.0:beta_5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F966486-485B-4B0D-9BE1-F1D39CB08863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.0:beta_6:*:*:*:*:*:*",
            "matchCriteriaId" : "A32E4272-6CEF-4C1C-BDA2-96863E8301DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.0:beta_7:*:*:*:*:*:*",
            "matchCriteriaId" : "47B21D05-A906-44B5-AEDA-73D383B905E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.0:beta_8:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BA115B-C42E-4794-90BC-778B0C85CE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00ED2069-849A-4E62-88B3-323A8682F573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C0F2643-923D-4072-B5A4-6321066C3AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5830888-AE31-4C80-A923-EA83B4464859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D45E22AA-46A6-42F3-9E5B-95958163EF6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "655604B2-773D-4F94-951B-6E17E123EFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E856FB7-7315-4ABF-A835-0BEF9BA10DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CFC5-1607-4FF1-8681-24AE2C167C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF854C3-7C1A-4B0D-B27D-10B52B9C41E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C27A748-0792-499F-A3A1-3C9528A5AD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E606F772-09E2-40F1-84C1-1A5B2BBD2FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4500A623-BD2C-461A-B862-2C51BD25BE71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E77793-94BC-47D8-B2D1-D3B020DEF93C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0EC8D15-02D5-4988-85FD-50B1ABCC7B4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:6:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC32B83A-4E91-4D1D-8051-35F339E61A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF315DF-C0C9-468C-8C7E-C4547AF431FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:6.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "63114EE0-54F7-4418-9B9E-C37BB2869F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:6.0:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5C9CB9-6396-415D-AC64-312F47A76177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:6.0:beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F3056A-14B5-411F-8FE8-80AF5605001D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF6B223-8575-40C7-9EDA-BDDCF6ABDBAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5159296-AD9C-4199-B5DF-539EE61D45A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE952E7C-EBDC-4652-95C3-C308BBEF1FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE616514-882C-4ED2-BB0C-1248B8316ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00A6FD59-C258-4A49-81C9-F6E58FB30117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DADA8A93-4DF4-4C95-860E-65CA46B12DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EF0387-AEFC-40BC-A7C8-28F175844CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1B176A-1200-4E75-BFC0-AA5F87E2AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "911B0336-02CE-426C-ABFF-8CFD3BC146CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "26FC4ABB-EDA9-426D-ADC9-E7DABEB8A64E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5435A52-0F9D-41AC-9FF9-93A512D0103C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "790C5B0D-9A06-4C0C-BBBF-9B4C17857213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.0:beta_1v2:*:*:*:*:*:*",
            "matchCriteriaId" : "620666CE-AABB-4A36-9566-425F2C810F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "BD72F9AF-EFD5-408B-9FC3-6341F92B39B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2590789F-F333-4AD0-82B4-D6D9B9E0F5AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355242B3-33ED-4B65-8373-3CDC6C556B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685E97D-3B0F-4C69-8124-F3AB26905124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4FDEC39-7B53-4AD9-9EDF-D95860264345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE7F056E-BB13-4453-8065-C18E6171AC0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0221A7DE-9F8F-46A4-B609-1F10D2606370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "A3089B27-E279-46B8-91C3-2040DBEBC281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7433778F-DE4F-48A7-8AF7-8DBD17DC4C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02178B82-3805-4B7C-B341-4F4E280B4DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8888D-6CC5-4ED8-9907-0B9709F2980A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431AE65C-5A7A-48D3-8A73-EC20CC86CB5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A860F7C-F2FF-40A9-88DA-35766836A8F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "47871B2C-F6DA-4C92-BA15-90BA8FE3F979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E2EA7B-19D5-4A6A-88BE-BEEEAA792536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E50D780-F507-49BC-8C34-477C6A7C3741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA7025B-BBB5-43BC-AB6E-E41E56430AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E33873C-DFD6-4450-8A9A-31CF2437E5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:7.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC4A969-1099-4F99-AA39-0BDB7654044C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00336594-FE61-4815-B52F-90BE545E9428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "262ADE2E-4E91-4BA3-AAAD-A1B3A18EAAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "587EBDA2-C0F1-469B-A9A9-68634CF058A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CCE749D-8553-4365-A8C5-A6C9037FEAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F2F078-9620-4ED1-BA42-44C167DEF2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A006AB3D-3228-4980-A45C-F331E8236867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "625DF977-9C3A-4904-BF77-DE1CE7C9AA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5C0B1FD-140F-43BF-963F-55C6929DE68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "244D2B12-5C3A-4007-B93C-0194417C00A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C64664-5B10-48E4-A457-56DBC8EB30D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85AD3AC7-F403-4A80-B56B-D32DF61A708A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DADC950D-2542-43B3-BC71-FFE3AD76E29B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62EFDBC5-7ADB-4F66-8F0A-B234FC9C9B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57ECE1A-72DE-4E9C-B762-2935A964277F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C204EE-8435-4CCA-B08C-60E702441AF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B766176F-E80A-433A-AC30-1A1265FCDE53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-15T19:30:05.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer anterior a 8 muestra un certificado cacheado para una página de respuesta CONEXIÓN (1) 4xx o (2) 5xx por un servidor proxy, lo que permite a los atacantes \"hombre en el medio\" suplantar una página https permitiendo al navegador obtener un certificado válido desde esta página, durante una petición, y enviando al navegador una página de repuesta 502 manipulada sobre la subsiguiente petición."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26125C2-2476-43E8-8878-8C1A5A8B244F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "FED6949F-54D0-4D36-B6A8-59EBFA2611E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226A1B77-A80E-4ADE-8318-749CD1AD7CD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF9241-A175-438C-A793-3D245BE2AE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F62AC866-A06F-47DB-AEDF-E345CE0B14A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "943D5C5C-FC49-4EDE-AE75-A79CFF42208E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59EB6841-0427-479B-8771-06DF62EE3C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8873A08F-D4C7-46FC-8FE5-972644F85ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B815D9-BC21-4A17-AF00-B8AD181027D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42502347-DD40-4F8C-9861-C0A88A3F8608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF9C64F-9A67-4BA9-A653-75507935E6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "C375A9AA-505B-444C-A45F-2BAAD0B2CD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D82B89-456D-41CB-A894-B6A22FB4415D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FF4E47-AD75-42C7-BB84-42BBA46A58B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.01:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E21CE6E-2B33-4225-B1DC-C19F1D578040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B26CE22-E730-4247-853E-5E640DB3ECB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.40.308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A652453-AB5F-405C-ABDE-CE1B54FEACED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.40.520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141080AB-48DE-4885-BAB6-6F0937ABD49B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB758D76-B7F6-4E87-B88D-620443655CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1158:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28655AC5-1512-4F45-9963-CA26F73981CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1215:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00F4F36-B88A-4FDB-BE52-83C6EF60BDB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC05584-F553-4D29-9C46-C9EE5F0CB166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.71.544:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108A86E-8387-446C-B823-BE6FCAE747A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3F79B8-512A-4B88-868C-7C4ADFD223C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "078C3A86-C9F8-4A19-9DDC-1065B54E640F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9030923C-356E-4FAB-8E64-03D462B4DB5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0FFABC-8BED-4838-85FE-406DC9CF9B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DB4A00-4F70-4189-81BD-9318C52DF2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4071D03-D955-4C1B-ACD8-A864F7D0FA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B8985B-B927-4928-B1DB-18E29F796992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04FEA6-37B0-44B0-844F-55652ABA1F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56FB8E-2553-47C1-82A2-9E59023780CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8541EEED-94F4-42F8-9719-57F3EC85D52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "40372520-08CF-4F64-A7AC-7E0AE0964138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFE8C8E-F46C-4179-AE83-CE4720C8E0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61125B09-23AA-4D5A-8332-6B5CCD80C7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AECF59F-B3C0-44CC-B77A-30E32B3E8BB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2314.1003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4690B85-86B9-448E-9249-B3885DEDC60E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F4C80-3B1B-45BD-966F-C9DBF98B875D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65E0DC1-40F6-4252-945A-A972343D1E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C07C1A9-1A94-4653-8C57-6FCFC25854E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC57519-AD96-4ECF-A5B2-4E45F7D55298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37DE3DE6-A355-41F2-BF5E-E7526449E753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB24B4F-44FF-4F0F-90FA-240A34B9599F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "919A6551-DB18-49BD-AB92-4C453B3B728F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C512DAB3-2720-42D2-B27E-28F30FE0FE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB90458F-1F2B-4F4C-88C6-4B670787D126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2EFDB4-97C2-4DDF-8A65-FCFB60FCB540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A99CDC7-9341-4DFB-BB18-FF06C05FF9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CFF390-FF33-45CA-BC96-C6766491C616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3BFFB565-F656-43E3-89E1-E412DC4C9D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F4336F0E-75FE-4592-9D98-4F689804956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA6E5E4B-9E95-4019-8622-6E707FEC2FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*",
            "matchCriteriaId" : "8E93C22E-812E-4CDA-9850-2386CE1E817A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA6BA38-8B3B-4B9A-95BF-BCD412DD83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BD2A05-3FCE-4C5D-8228-968630F27E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0EC334-AEAD-43CA-A609-C027060F4F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF320BE-F022-4E0E-9815-B8AEED87B384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75532B2D-6814-4D20-8AEB-E7DFD66B6423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83802E30-8E7D-4CAB-B8FC-10056CF833D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.2462.0000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314538E8-48EC-4869-9074-2A1F5B7CBB3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.2479.0006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F56B3A72-7C5E-4F0C-BBC7-AA13DDFBEE70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68656E52-AD8A-474E-9160-CD5F8857254B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F47C82-E767-47A8-88DE-417B004ED7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86E7189-CE21-4007-A3FA-39A6B51A5AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.2800.1106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE2555F-C4BE-482F-8DD9-976D2026058C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBF9B51-5AF4-4317-9768-21D866AC7990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.2900.2180:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F352FE-C22E-4B33-A46F-77A164B5DABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.3663.0000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ACD5A44-0926-4A1B-9900-1E7CC0A561C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.3790.0000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E16BEF4-71AA-4E23-B438-D25FFABDB646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.3790.1830:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F32702E-F955-4DDB-B235-7C47E882453C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.3790.3959:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA2B4AD-C04D-4A6B-8570-5A2F5489F750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC71FD8-D385-4507-BD14-B75FDD4C79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "506711D9-6E57-4EED-8628-36C7F2324040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "ED471260-0272-431F-A91E-AC2883D92497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "86584E3F-3B0D-4018-A186-E59F3B01CA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0.5730.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6E1020-1017-4670-9316-27C79F1E2698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.00.5730.1100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F63AE1-8FC9-4C0F-8D19-F17DFA214E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16386:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B1186A-FA5B-4E49-8C2F-BCD2D45F22A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16441:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D75496-8594-44DB-B5C4-EA3CABD6551A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-15T19:30:05.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request."
      }, {
        "lang" : "es",
        "value" : "Opera muestra un certificado cacheado para una página de respuesta de CONEXIÓN (1) 4xx o (2) 5xx a través de un servidor proxy, lo que permite a los atacantes \"hombre en el medio\" suplantar una página https permitiendo a un navegador obtener un certificado válido de esta página, durante una petición, y enviado al navegador una página de respuesta 502 manipulada  sobre la subsiguiente petición."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4545786D-3129-4D92-B218-F4A92428ED48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-15T19:30:05.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request."
      }, {
        "lang" : "es",
        "value" : "Google Chrome anteriores a v1.0.154.53 muestra un certificado cacheado para una página de respuesta de CONEXIÓN (1) 4xx o (2) 5xx a través de un servidor proxy, lo que permite a un atacante \"hombre en el medio\" suplantar un sitio https permitiendo a un navegador obtener certificados válidos desde este sitio durante una petición, y enviando al navegador una página de respuesta 502 manipulada sobre una subsiguiente petición."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.154.52",
            "matchCriteriaId" : "A7105F0E-97F8-4C84-82FB-1DE9ABD07AA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8FF77A-7802-4963-B532-3F16C7BB012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73576CF-76EE-42A3-9955-D7991384B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=7338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=8473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes/releasenotes1015453",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://src.chromium.org/viewvc/chrome/branches/release_154.next/src/net/http/http_transaction_winhttp.cc?r1=11621&r2=11669&pathrev=11669",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://src.chromium.org/viewvc/chrome?view=rev&revision=11669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=479880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=7338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=8473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes/releasenotes1015453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://src.chromium.org/viewvc/chrome/branches/release_154.next/src/net/http/http_transaction_winhttp.cc?r1=11621&r2=11669&pathrev=11669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://src.chromium.org/viewvc/chrome?view=rev&revision=11669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=479880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-15T19:30:05.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari does not require a cached certificate before displaying a lock icon for an https web site, which allows man-in-the-middle attackers to spoof an arbitrary https site by sending the browser a crafted (1) 4xx or (2) 5xx CONNECT response page for an https request sent through a proxy server."
      }, {
        "lang" : "es",
        "value" : "Apple Safari no requiere un certificado cacheado antes de mostrar el icono del candado para una página https, lo que permite a los atacantes \"hombre en el medio\" suplantar una página web https enviando al navegador una página de respuesta de CONEXIÓN manipulada para una petición https enviada a través de un servidor proxy."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.1",
            "matchCriteriaId" : "7F6BD2EE-4CD1-4F19-9710-FEE247C69521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F4ADD0-449B-4DDD-9878-DE86CBD56756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A419AE8-F5A2-4E25-9004-AAAB325E201A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "64FE1AA1-32D1-4825-8B2B-E66093937D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E760CD65-A10E-44F1-B835-DA6B77057C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A09DA0-83E9-491D-A0A5-AF97B5463D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C7EF0-A56B-40E6-9CED-1228405D034E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6078B0-4756-4E04-BAC4-C4EC90548A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87EDB53-FB6E-4B10-B890-A7195D841C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:85.8:*:*:*:*:*:*",
            "matchCriteriaId" : "957FCFC4-565A-4F2F-8D3D-D0982E1723F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*",
            "matchCriteriaId" : "22A450DC-CDF5-4EA0-A703-AFB3DEFE1395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857C92E2-6870-409A-9457-75F8C5C7B959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD75A4F-F529-4F5E-957D-380215F7B21B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834EC299-2010-4306-8CEE-35D735583101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443FF271-A3AB-4659-80B2-89F771BF5371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D29B98E-2F62-4F6F-976D-FEC4EB07F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3112AFEB-7893-467C-8B45-A44D5697BB79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC83309-3A97-4619-B5C1-574610838BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891514D5-50C8-4EDC-81C5-24ABF8BCC022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25032A3A-9D05-4E69-9A22-C9B332976769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9315ADD-5B97-4639-9B59-806EFD7BC247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:312.5:*:*:*:*:*:*",
            "matchCriteriaId" : "21BAC0B8-063C-4772-8F1B-EB9A2F7A585C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:312.6:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAB4071-A883-4E04-BDDF-A121C4738E61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E44913D-BC8B-4AA1-84EB-EFEAC531B475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B74019F-C365-4E13-BBB4-D84AD9C1F87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*",
            "matchCriteriaId" : "018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*",
            "matchCriteriaId" : "1082B33F-33B5-453A-A5AA-10F65AB2E625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*",
            "matchCriteriaId" : "EC348464-F08D-4ABF-BB90-3FA93C786F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61652033-FD15-47D6-8B18-CF28E6CE346C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDCF83E-620C-40FA-9901-5D939E315143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D113B5-070D-4F91-AB5E-222D71C90EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E86DEDD-ABDC-46BD-BAD3-A409635F7801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BAE980-449F-4F8C-A5BC-6CB7226E971A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A33F900-D405-40A8-A0A5-3C80320FF6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4444A309-5A97-4E1C-B4EA-C4A070A98CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B29951B-9A98-45B7-8E4B-5515C048EC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED950D-38AB-4D66-B97A-FB982D86057F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FDEB4F-133A-43DF-A89B-53E249F1293D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E78F43-07BD-4D62-9512-DA738A92BC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE25E9E-826E-4782-AED8-AC6297B18D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3180366-2240-467E-8AB9-BEA0430948F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:522.15.5:*:*:*:*:*:*",
            "matchCriteriaId" : "63FEA310-C6F2-4F2A-ABA8-6468308E3569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E834B8-545E-4472-9D60-B4CF1340D62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB9CC52-E533-4306-9E92-73C84B264D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02C814DE-1884-4F3E-944D-068F7FD55B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A5CA99-8B1C-4C35-85E3-DB0495444A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "912A26D1-3264-464F-B101-1796B35437E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D8C2EF-D552-4279-A12E-70E292F39E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00082E3-EBF5-4C23-9F57-BF73E587FC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C453B588-15FD-4A9C-8BC1-6202A21DAE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD634B1-4986-4E80-8BDC-58941893F6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BB6761-3581-4AE6-85E0-1609D15D7618"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.microsoft.com/apps/pubs/default.aspx?id=79323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-15T19:30:05.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Linksys WRT160N wireless router hardware 1 and firmware 1.02.2 allows remote attackers to hijack the authentication of other users for unspecified requests via unknown vectors, as demonstrated using administrator privileges and actions."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el router inalámbrico Linksys WRT160N hardware 1 y firmware v1.02.2 permite a los atacantes remotos secuestrar la autenticación de otros usuarios por peticiones no especificadas a través de vectores desconocidos, como se demuestra usando privilegios y acciones de administrador."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wrt160n:1.02.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A907D6E1-8C43-45D5-9793-6A901EAD34D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://holisticinfosec.org/content/view/109/45/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34625",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/53414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0982",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://holisticinfosec.org/content/view/109/45/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/53414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-16T19:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via vocabulary names."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Nodequeue v5.x anteriores a v5.x-2.7 y v6.x anteriores a v6.x-2.2, un modulo para Drupal, permite a usuarios remotos autenticados con permisos administrativos taxonómicos inyectar secuencias de comandos web o HTML de forma arbitraria a través de nombres de vocabulario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodequeue:5.x-2.0-rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59A8003-108E-4CEE-8643-21A5CA506888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodequeue:5.x-2.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1356CA81-07AA-4B03-B700-0EAFE7090C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodequeue:5.x-2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1358F53-FA20-401C-9E77-E3D1332E63A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodequeue:5.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0DE709-A162-4F45-8B1B-D9F64187D2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodequeue:5.x-2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF0836BD-F39F-4D52-BC9C-87CAC0B611F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodequeue:5.x-2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0986D3-E9ED-4E2C-B333-333A74EAC8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodequeue:5.x-2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B42E88C-AB90-42B0-A204-8A669AA86658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodequeue:5.x-2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B378A03-D1FB-4686-AEF0-311DA2068463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodequeue:5.x-2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C86D228-A6B2-4100-887C-17A588B1A1A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodequeue:6.x-2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5074D9CA-A46C-450A-9DA3-72DC450BE104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodequeue:6.x-2.0-rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B93A8B0-4632-4076-93DC-EBA79896A68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodequeue:6.x-2.0-rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6609DD41-8A17-474A-9186-24A2944E636B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:nodequeue:6.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA3BFD6-5693-4121-BB71-44836D7579C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/488092",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/488102",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/488104",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lampsecurity.org/drupal-nodeque-xss-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/35424",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/488092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/488102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/488104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lampsecurity.org/drupal-nodeque-xss-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/35424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-16T19:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, does not properly restrict access when displaying node titles, which has unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Nodequeue v5.x anteriores a v5.x-2.7 y v6.x anteriores a v6.x-2.2, un modulo para Drupal, nos restringe adecuadamente cuando se visualizan los títulos de nodo, lo que tiene un impacto y vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:nodequeue:5.x-2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1A90DB-635D-4A05-ADD7-15E1C01A4EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:nodequeue:5.x-2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "DE77F629-B229-4AEE-A06F-F2885852EF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:nodequeue:5.x-2.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "9F76812A-92C6-4F4E-B2C2-E56A9F826711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:nodequeue:5.x-2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0154052F-5DE8-4ED0-8FB4-C829A86E794D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:nodequeue:5.x-2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E9FDCE77-A34B-4500-9128-41BDCE75DEF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:nodequeue:5.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B232515-E371-4796-BCAC-0EE0549C828C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:nodequeue:5.x-2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A43F993-DFA9-486C-8E9C-4EBC3F3E144E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:nodequeue:5.x-2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1441EF70-52F6-4240-9B1E-8DF173AE7210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:nodequeue:5.x-2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BB1395A-C7EA-42CA-960A-993A73563C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:nodequeue:5.x-2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073BEE1E-5E92-466F-BBC9-DBE1D0B8C268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:nodequeue:5.x-2.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3008BB-7DE4-455F-B68C-379709209AEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:nodequeue:6.x-2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466E3FAC-A4DE-470D-8EA7-AA1ABFE65785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:nodequeue:6.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ADC438A-6C22-4F46-8955-34B24449B44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:nodequeue:6.x-2.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A821D8D0-5E9A-4B44-898F-192134DE4CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:nodequeue:6.x-2.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "797476D5-AA18-43A8-827D-FB60993573F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:nodequeue:6.x-2.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB85B7E-EDA3-403C-A9C5-1C08F4C78571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:nodequeue:6.x-2.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB3B2F2-0B91-4063-AD80-8D4D88B94651"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/488092",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/488102",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/488104",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35424",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35305",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/488092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/488102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/488104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-16T19:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via (1) exposed filters in the Views UI administrative interface and in the (2) view name parameter in the define custom views feature.  NOTE: vector 2 is only exploitable by users with administer views permissions."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Views v6.x anteriores a v6.x-2.6, un modulo de Drupal, permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrariamente a través de (1) filtros que se muestran en la interfaz administrativa de usuario Views y el (2) parámetro \"view name\" en la característica de personalizar vistas. NOTA: vector 2 es únicamente explotable por usuarios con permisos administrativos de vistas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:views:6.x-2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB48B703-BFDC-4BC2-AADB-1D5877BD6F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:views:6.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4CAFA5-CB7B-475B-9278-2C5576934FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:views:6.x-2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "258F8CAF-E1A5-43D8-B515-4C5A5E541CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:views:6.x-2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67C9A56-E67D-4517-8956-4354D62A506B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:views:6.x-2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E28C97B-E461-4CC7-9751-EBF46B93F84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:views:6.x-2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA2AF1A-C62A-4AEB-8704-E9671C9285E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/488068",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/488082",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lampsecurity.org/drupal-views-xss-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/35425",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/488068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/488082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lampsecurity.org/drupal-views-xss-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/35425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-16T19:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Drupal 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to bypass access restrictions and (1) read unpublished content from anonymous users when a view is already configured to display the content, and (2) read private content in generated queries."
      }, {
        "lang" : "es",
        "value" : "Drupal v6.x anteriores a v6.x-2.6, un modulo de Drupal, permite a usuarios autenticados evitar las restricciones de acceso y (1) leer contenido sin publicar de usuarios anónimos cuando una vista esta configurada para mostrar contenido, y (2) leer contenido privado en peticiones generadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83414EC6-8EB7-4315-8CBD-4A636C2AA221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB72D39-36A0-45B3-B754-BE0586A70ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF66A326-E339-42D3-B930-5F1BBC12EA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "F2056B71-0789-4472-B777-E6D0D679ED73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.0:alpha4:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFE2EA1-46C4-43C2-8C0B-88D8F8459628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.0:alpha5:*:*:*:*:*:*",
            "matchCriteriaId" : "743C9847-4192-40CD-ADD2-261608E00BE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "3342C5AC-6693-461D-9170-080AFF29E05F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "28B8A701-0DC1-4159-8A5C-4B100D1366A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B69E676-A056-4A03-893C-82F9648C6AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "344B872A-6B72-45DA-A0D3-ED04EBF40AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B1D17D-B06B-4801-AEBA-98B782AE18E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D11D3B74-4D1D-46A1-8EF3-C9CEA3E47C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F567110E-A23C-42E8-9B76-1E872FCDC147"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "47415DF9-80EB-4ACE-87A2-9B1FA4D3E772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9F8DE5A9-38B3-4696-A141-D300FF68291B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48806155-F591-49A7-8258-31E8B7E917D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B376B96-3A17-446B-80AC-A6408120D950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B36D36B-9EA4-441C-813C-8D99405B5F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "457E23F8-7961-410D-8E8A-030116889002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F929B4-BBDA-4E83-98BF-A8F3650A7445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angrydonuts:views:6.x-2.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "9809F86C-3887-4922-9203-DB0CAAC03D03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/488068",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/488082",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35425",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35304",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/488068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/488082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-16T19:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Booktree 5.x before 5.x-7.3 and 6.x before 6.x-1.1, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (1) node title and (2) node body in a tree root page."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Booktree v5.x anteriores a v5.x-7.3 y v6.x anteriores a v6.x-1.1, un modulo de Drupal, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del (1)titulo del nodo y (2) cuerpo del nodo en una pagina árbol root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heine.familiedeelstra:booktree:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA9D8E8-E20C-4131-90CA-EC49A8FA2FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heine.familiedeelstra:booktree:5.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1482E7E5-2D58-4238-9686-26236C5FFA35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heine.familiedeelstra:booktree:5.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4FBF6D-56C5-4FD7-9FC6-E7120FB788CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heine.familiedeelstra:booktree:5.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D4AB34-F67D-46E7-B6DB-7CB03C413EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heine.familiedeelstra:booktree:5.x-1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B726C19F-9653-423A-A411-591AEDC3B440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heine.familiedeelstra:booktree:5.x-1.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0FEEB8-6DA5-47DC-AF67-D68B2B96A655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heine.familiedeelstra:booktree:5.x-7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09DDD2AD-F8C8-4534-B084-FB764C3C8E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heine.familiedeelstra:booktree:5.x-7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF6F4FC-5376-4849-9C59-23C5DCF8D9F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heine.familiedeelstra:booktree:5.x-7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34584E7-A0F8-4C52-B3F0-B87C27B2D516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heine.familiedeelstra:booktree:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7664EE52-AE96-44E1-89B2-9F54C9E4FA54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heine.familiedeelstra:booktree:6.x-1.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "11791885-AF1E-4D31-B300-B2653B51F7D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/487810",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/487812",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/487828",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35421",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35287",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/487810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/487812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/487828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-16T19:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the administrative page interface in Taxonomy manager 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users, with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms, to inject arbitrary web script or HTML via (1) vocabulary names, (2) synonyms, and (3) term names."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el interfaz de la pagina administrativa en el gestor Taxonomy v5.x anteriores a v5.x-1.2 y v6.x anteriores a v6.x-1.1, un modulo de Drupal, permite a usuarios autenticados, con privilegios de administrador en Taxonomy  o con la posibilidad de etiquetado libre para añadir términos taxonómicos, inyectar secuencias de comandos web o HTML a través de (1) nombres de vocabulario, (2) sinónimos y (3) nombres de temporada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:taxonomy_manager:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "393C3759-0FF6-4FCF-A6E6-881B3248E187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:taxonomy_manager:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A325723-8470-46D8-93FE-FF5545CBDF3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:taxonomy_manager:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9BEFC2-8CFA-4ACC-A48F-1505B188C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:taxonomy_manager:6.x-1.0-beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E8FFAE-3EAD-4319-A1C4-3946AC3551FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:taxonomy_manager:6.x-1.0-beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E7CA3C-FC06-4FF5-AD61-043B57320C77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/487602",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/487620",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/487818",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lampsecurity.org/drupal-6-taxonomy-manager-xss-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/35391",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/487602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/487620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/487818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lampsecurity.org/drupal-6-taxonomy-manager-xss-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/35391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-16T19:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obtain sensitive configuration information via the editconfig action or (2) change the administrator's password via the id parameter in an editop action."
      }, {
        "lang" : "es",
        "value" : "admin.php en MRCGIGUY The Ticket System v2.0, no restringe adecuadamente el acceso, lo que permite a atacantes remotos (1) obtener información sobre la configuración a través de una acción \"editconfig\" o (2) modificar la contraseña de administrador a través del parámetro \"id\" en una acción \"editop\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mrcgiguy:the_ticket_system:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF7C1FB-07D9-49C2-B6F3-0A606AE180BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35350",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-16T19:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en help.php en phpWebThings v1.5.2 y anteriores, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro \"module\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "7C13415B-8752-4CDE-B566-73F9F22BBC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F2E20D-4AA9-41CE-AF0A-28DCB65C947E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "566463D1-B366-408C-B27A-0450C6C3AE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1526ABB2-DBD2-4080-8944-61F9ABDA75D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20B1FA8A-8A72-4986-B6F0-F0AED7ACA7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26ACF325-11B6-49C3-B85F-33256E3FDDDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87432E8-E5ED-4746-BBC9-C519F364FBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF75D6A-33B7-4B74-8148-3F1AAA8E7DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604FE388-8339-4EB1-848E-B21F96FE691D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F2C338-BBF1-4FAD-8D1C-1B2D4D72644F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D45F83-BD58-4145-A89D-25B81D442DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D302871A-63CF-4B49-A180-CD44E941971C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E207E3F4-FC8F-4931-BF9C-40C2C516B500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D54FDD-2EC5-40C7-ACD7-B4D56B27F7D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1390",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-16T21:00:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when only one TLS certificate in the chain is accepted instead of verifying the entire chain, which allows remote attackers to spoof trusted servers via a man-in-the-middle attack."
      }, {
        "lang" : "es",
        "value" : "Mutt v1.5.º9, enlazado contra (1) OpenSSL (mutt_ssl.c) o (2) GnuTLS (mutt_ssl_gnutls.c), permite conexiones cuando se acepta un certificado TLS en la cadena en vez de verificar esta última, lo que permite a atacantes remotos suplantar servidores de confianda a través de un ataque hombre-en-medio(Man-in-the-middle)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89C33B31-B9BC-4E43-8221-219380B4B682"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDA1CA86-1405-4C25-9BC2-5A5E6A76B911"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2745A1E0-C586-4686-A5AC-C82ABE726D5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.mutt.org/hg/mutt/rev/64bf199c8d8a",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://dev.mutt.org/hg/mutt/rev/8f11dd00c770",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/10/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35288",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51068",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00715.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://dev.mutt.org/hg/mutt/rev/64bf199c8d8a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://dev.mutt.org/hg/mutt/rev/8f11dd00c770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/10/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00715.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of mutt as shipped with Red Hat Enterprise Linux 3, 4, or 5.  Only mutt version 1.5.19 was affected by this flaw.",
        "lastModified" : "2009-06-17T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-16T21:00:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a .dxstudio file that invokes this method."
      }, {
        "lang" : "es",
        "value" : "Worldweaver DX Studio Player v3.0.29.0, v3.0.22.0, v3.0.12.0, y probablemente otras versiones anteriores a la v3.0.29.1, cuando es utilizado como plug-in de Firefox, no restringe el acceso al metodo shell.execute JavaScript API, lo que permite a atacantes remotos ejecutar comandos arbitrarios a través de el fichero .dxstudio que invoca este método."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dxstudio:dx_studio_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.29.0",
            "matchCriteriaId" : "040E646F-230E-49F9-85F0-3349DC090ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dxstudio:dx_studio_player:3.0.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "247B99AB-854D-4405-A9A1-1AD427052761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dxstudio:dx_studio_player:3.0.22.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCDE21B-3AE2-4AC5-B414-FC7052D13611"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6A30E-7577-4569-9309-53A0AF7FE3AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35402",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/DXStudio-player-firefox-plugin",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.dxstudio.com/forumtopic.aspx?topicid=b4152459-fb5f-4933-b700-b3fbd54f6bfd",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504195/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35273",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1561",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/DXStudio-player-firefox-plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.dxstudio.com/forumtopic.aspx?topicid=b4152459-fb5f-4933-b700-b3fbd54f6bfd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504195/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-16T21:00:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in insidepage.php in Creative Web Solutions Multi-Level CMS 1.21 allows remote attackers to execute arbitrary SQL commands via the catid parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en insidepage.php en Creative Web Solutions Multi-Level CMS v1.21 permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"catid\". NOTA: algunos de estos detalles fueron obtenidos de terceras partes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:creative_web_solutions:multi-level_cms:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140F9961-AF76-4F2D-800A-A6ADA3E1C0C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0905-exploits/creativecms-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35154",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0905-exploits/creativecms-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-16T21:00:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the term data detail page in Taxonomy manager 5.x before 5.x-1.2, a module for Drupal, allows remote authenticated users, with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms, to inject arbitrary web script or HTML via \"Parent and related terms.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la pagina de detalle de datos de un periodo en el administrador Taxonomy v5.x anteriores a v5.x-1.2, un modulo de Drupal, permite a usuarios autenticados, con privilegios de administrador de taxonomías o la capacidad para utilizar los términos de \"etiquetado libre\" y \"añadir taxonomía\", inyectar secuencias de comandos web o HTML a través de \"términos padre y relacionados\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattias_hutterer:taxonomy_manager:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68E26226-B9E5-48F0-9A8E-E0C24E6F0906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattias_hutterer:taxonomy_manager:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD2BF2A-AC98-4F58-87D3-4F8CB7D8A7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattias_hutterer:taxonomy_manager:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9C94DBE-CF9C-4D97-9422-EE85A50A19B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/487620",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/487818",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lampsecurity.org/drupal-6-taxonomy-manager-xss-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/35391",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/487620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/487818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lampsecurity.org/drupal-6-taxonomy-manager-xss-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/35391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1389",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-16T23:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de memoria en el driver RTL8169 NIC (drivers/net/r8169.c) en el kernel de  Linux anteriores a v2.6.30 permite a atacantes remotos producir una denegación de servicio (consumo de memoria del kernel y caída) a través de un paquete largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux:kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760FDC9-BB79-4299-8A6D-482085EE5BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux:kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56EEB157-5037-4EAD-8625-35B91B167111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC8651-9291-4CAE-AA49-C1CA4C7AE450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:64-bit_x86:*:*:*:*:*",
            "matchCriteriaId" : "A12077FF-39D0-474A-AB6C-62926CC065B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:itanium_ia64_montecito:*:*:*:*:*",
            "matchCriteriaId" : "508BC14E-41D8-4847-AE0F-7830E2EE0522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241FF5F5-516B-4F77-ABAF-787DFEFEC1AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "79C73761-289A-4BEE-BC3F-A5EC4AC7B2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D7BBB5F-44F7-467F-B934-33ABF744A107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0478831E-87B2-441F-AEC2-403A35FED1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF02479-2124-4655-A38D-A4793D3B8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBB1A21-3826-4BC5-A243-AF8F8D1D4728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55F2549-F813-4BD6-8933-6788D898ECB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "980A6C7D-6175-4A44-8377-74AA7A9FD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C226902-04D9-4F32-866C-20225841ECF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "655DB612-AF49-4C17-AFB9-2E33EE8E0572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F65DF2-2794-47B7-9676-CCF150683CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:x86_32:*:*:*:*:*",
            "matchCriteriaId" : "A2B1B229-B325-4D8C-B326-1FF6D85891F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A252C50-D63A-4FC0-A51E-A63A939D6AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED4E9DD-DDAD-46A8-9AD2-9CAE406F7575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D97ED16-D6B7-4445-889C-4D6DE2EDC49A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C2D5D4-9A4B-4CDF-8D71-D22EB5E97D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFB2843-A867-48EC-97D7-B106C7BBAED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1E1A8B-6FA1-45AD-B034-EC34884527DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CBD2D9-3765-40B2-A056-D71BE750CC01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F4D967-ED04-42EA-8B3E-36301D39D651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git3:*:*:*:*:*:*",
            "matchCriteriaId" : "C498EE89-7F07-4B1E-90E6-5897E6B04670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git4:*:*:*:*:*:*",
            "matchCriteriaId" : "708656AF-92AE-4EAF-AF19-F457DB04ADB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git5:*:*:*:*:*:*",
            "matchCriteriaId" : "3B263AB8-74A4-4C73-915C-A02724C24B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git6:*:*:*:*:*:*",
            "matchCriteriaId" : "A96D739B-9E8B-4D2F-9DED-4C9B313473CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git7:*:*:*:*:*:*",
            "matchCriteriaId" : "4ACDEFEE-B946-4232-8BD5-A9F7AA84ED85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "247E13CB-9B11-4B64-80AD-C0F8482CCC0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "903FE5D3-A9FB-466D-833B-448233BB0803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "958EDC43-0848-4D93-9D07-6A085A5940B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "AD35F21D-0A28-4C14-BCF5-8EDA760701C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "3AAD8BE9-A05B-40E8-80DF-0B2878968BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "D123AAFE-3F17-45C4-9382-BA392FD022C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "1BACA0F0-B7B5-4C8B-8D9A-DAA803960AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D42BA44-C69B-4170-9867-CABF93CA9BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A12DE15-E192-4B90-ADB7-A886B3746DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6588E7-F4FA-40F5-8945-FC7B6094376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA311B8-D32E-4853-9B07-58EAF1019D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F0F679-43C8-426E-A97E-C3B207A3331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA40BC48-D6B5-4424-B306-F99E85EBBCB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2DF2BB-F94A-4692-AFDC-47C42F04081B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "BB286B42-E739-46CD-BC96-972CFFAECB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "7636014B-CC2A-43A3-9C9A-04B26AEB06D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ED7CE5-3388-4CB9-AF60-A2AF19611327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0138807-6313-4A3F-AB5A-4B7D4A9BE287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA2227-F259-499D-BF50-5074B1E7DD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A896D0-032C-4467-9D57-E47E8C612704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:git7:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEBA0F6-5453-4993-932B-BB8941DCC5CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3463B83B-E46F-456E-98BA-801C59AEB337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "05FD0767-03F3-416C-AB6D-6BC4A12220B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8452D554-8DEB-4265-839C-6B40CCFB56B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "94F445F9-57A5-4453-BB5D-290349C04A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "62C97D20-4152-47C4-B21B-8206CF49E20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27430190-EB83-43C5-9584-4F65CF65151A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386B13F-9D7C-45F8-B86A-886384144A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:git1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F95AB2-319C-4BDE-8D34-9FBE69A2FB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D48FD9D7-E775-4E26-AEBF-01A09C404D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "89EA3CF3-0AB7-4648-96BA-25E978D2C8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc2_git7:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4DB179-F78F-4D36-A47D-557FB1B945DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc8-kk:*:*:*:*:*:*",
            "matchCriteriaId" : "23859759-4748-4A03-9D78-083C77CFF4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A701E87D-B807-426E-9CD4-6721DBCABE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5FC0A9-A78A-4D09-BDCC-208AFC899824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBFC9DD-B7C2-4FB2-A8F6-29FF50EFAAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.rc2-git1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B3BFC1-4B0A-4D63-BFA2-CF6A51A8D2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E242D3DE-D1DC-406A-BCC3-C4380B7EC369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc4:x86_32:*:*:*:*:*",
            "matchCriteriaId" : "06EFB3F7-2EAE-4A56-A9A1-E8C734E6B91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=fdd7b4c3302c93f6833e338903ea77245eb510b4",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lkml.org/lkml/2009/6/8/194",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=linux-netdev&m=123462461713724&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35265",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35566",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35847",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36045",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36131",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37298",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/40645",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100067254",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.citrix.com/article/CTX123453",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0111",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1865",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:148",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/10/1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1157.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1193.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505254/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35281",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023507",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-807-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0219",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1857",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=504726",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10415",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8108",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01048.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01094.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01193.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=fdd7b4c3302c93f6833e338903ea77245eb510b4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lkml.org/lkml/2009/6/8/194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=linux-netdev&m=123462461713724&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/40645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100067254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.citrix.com/article/CTX123453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/10/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1157.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1193.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505254/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-807-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=504726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01048.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01094.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01193.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1391",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-16T23:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service (hang or crash) via a crafted zlib compressed stream that triggers a heap-based buffer overflow, as exploited in the wild by Trojan.Downloader-71014 in June 2009."
      }, {
        "lang" : "es",
        "value" : "Error de superación de límite (Off-by-one) en la función \"inflate\" en Zlib.xs en  el modulo de Perl Compress::Raw::Zlib anteriores a v2.017, cuando es utilizado en AMaVis, SpamAssassin, y posiblemente otros productos, permite a atacantes dependientes del contexto, producir una denegación de servicio (cuelgue o caída) a través de un stream comprimido zlib manipulado que inicia un desbordamiento de búfer basado en memoria libre, como se explot activamente por Trojan.Downloader-71014 en Junio de 2009."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.015",
            "matchCriteriaId" : "C3867092-1A54-4D15-84AD-FEF6F8D569FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF4AFD2-AD3B-45E0-97A4-F18050DFF747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C2CBC9-74C2-4A06-B233-AD32E66F3A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE72DF4-3BFE-46D5-8551-DE48D7AE83D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53485323-D0B0-416E-99AC-AFB79E3A59E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A1BA23-4E33-47A8-B4F5-FD788F9A489D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E7DEEA-B6EC-4876-BF54-59564B710C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35911484-ACDF-46F5-9E44-B16A8E25634A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47D33DF3-EEDA-4929-861C-B5F579D46CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5DDEB63-825A-4CD5-A068-56719B58F7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479CA05-1A67-49C9-AF46-1B259EF0AB10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610E93EB-E130-40D9-BD88-F6110EE8FC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02ABE61E-EDD1-4661-B0BC-E71ED14F3957"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://article.gmane.org/gmane.mail.virus.amavis.user/33635",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://article.gmane.org/gmane.mail.virus.amavis.user/33638",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/55041",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35422",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35689",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35876",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://thread.gmane.org/gmane.mail.virus.amavis.user/33635",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:157",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35307",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1571",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=273141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=504386",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51062",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/794-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00607.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://article.gmane.org/gmane.mail.virus.amavis.user/33635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://article.gmane.org/gmane.mail.virus.amavis.user/33638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://thread.gmane.org/gmane.mail.virus.amavis.user/33635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=273141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=504386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/794-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00607.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-16T23:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Aqua Look and Feel for Java implementation in Java 1.5 on Mac OS X 10.5 allows remote attackers to execute arbitrary code via a call to the undocumented apple.laf.CColourUIResource constructor with a crafted value in the first argument, which is dereferenced as a pointer."
      }, {
        "lang" : "es",
        "value" : "Aqua Look and Feel para la implementación de Java en Java v1.5 en Mac OS X 10.5 permite a atacantes remotos ejecutar código arbitrario a través de una llamada a los indocumentados.\r\nEl constructor apple.laf.CColourUIResource con un valor manipulado en el primer argumento, lo que permite desreferenciar como puntero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA315DB-10DF-4D18-A575-37A70F9AFD3F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2398ADC8-A106-462E-B9AE-F8AF800D0A3C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF94705-562C-4EC8-993E-1AD88F01549C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "9919D091-73D7-465A-80FF-F37D6CAF9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "02565D6F-4CB2-4671-A4EF-3169BCFA6154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "452A3E51-9EAC-451D-BA04-A1E7B7D917EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "55231B6B-9298-4363-9B5A-14C2DA7B1F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "E42CF0F7-418C-4BB6-9B73-FA3B9171D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "A5467E9D-07D8-4BEB-84D5-A3136C133519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "44051CFE-D15D-4416-A123-F3E49C67A9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "F296ACF3-1373-429D-B991-8B5BA704A7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B863420B-DE16-416A-9640-1A1340A9B855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "724C972F-74FE-4044-BBC4-7E0E61FC9002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE909DE-E55A-4BD3-A5BF-ADE407432193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAC04D2-68FD-4793-A8E7-4690A543D7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0_11-b03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FBB4CC-566A-450B-8A93-4755019F9EC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3632",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504364/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35381",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35401",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504364/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-16T23:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, or (2) a 0x3B message with invalid stub data that triggers an RPC marshalling error."
      }, {
        "lang" : "es",
        "value" : "El motor de mensajes en CA ARCserve Backup r12.0 y r12.0 SP1 para Windows permite a atacantes remotos producir una denegación de servicio (caída) a través de (1) un mensaje 0x13 invalido, el cual no es adecuadamente gestionado por el modulo ASCORE, o (2) un mensaje 0x3B con unos datos incompletos que inician un error RPC."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:arcserve_backup:r12.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "B250F711-FE9E-4DC8-876B-5632976F1189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:arcserve_backup:r12.0:sp1:windows:*:*:*:*:*",
            "matchCriteriaId" : "C3A626B1-BA2E-4942-BAE4-574F830B2321"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-01-ca-arcserve-backup-message-engine-denial-of-service-vulnerabilities.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35473",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209502",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ivizsecurity.com/security-advisory-iviz-sr-09003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ivizsecurity.com/security-advisory-iviz-sr-09004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504348/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504349/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-01-ca-arcserve-backup-message-engine-denial-of-service-vulnerabilities.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ivizsecurity.com/security-advisory-iviz-sr-09003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ivizsecurity.com/security-advisory-iviz-sr-09004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504348/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504349/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-16T23:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Linux Utility for Resource Management (SLURM) 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking (1) sbcast from the slurmd daemon or (2) strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain privileges."
      }, {
        "lang" : "es",
        "value" : "Simple Linux Utility for Resource Management (SLURM) v1.2 y v1.3 anteriores a v1.3.14 no fija adecuadamente los grupos suplementarios antes de invocar (1) sbcast del demonio slurmd o (2) strigger del demonio slurmctld, lo cual permitiría a usuarios locales de SLURM modificar ficheros y ganar privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:llnl:slurm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.13",
            "matchCriteriaId" : "C9AE0C29-C3BC-4DAF-9BF5-8368CD8A2DD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:llnl:slurm:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB012F15-7F26-4F7B-A3EF-E9095263FB34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:llnl:slurm:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1365FB71-BDEB-43C7-B24E-AB6BD34E8BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:llnl:slurm:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525C67BB-E419-4708-80A2-A836095ED14C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:llnl:slurm:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26CC8EA-E281-4574-BE67-59E2483ADDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:llnl:slurm:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9163DBD-297C-4AFC-A2F7-9E8C1DF4C5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:llnl:slurm:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5F515B-3D4B-4102-9DB0-91F32D762683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:llnl:slurm:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E40A66-BBED-43EE-A10E-5F760D8BF142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:llnl:slurm:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9244BB47-99C8-44F4-98EF-08AD919A2E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:llnl:slurm:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48096152-AB4E-407A-9BDE-946B7ACA90BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:llnl:slurm:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB5CC10-E295-4A65-8A58-A9509B72A6EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:llnl:slurm:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA619348-A9A8-4CCF-BA49-300691CFE6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:llnl:slurm:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5AE726-573F-42BF-A3B0-DDDC04983318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:llnl:slurm:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73158CC3-2D7D-45CA-9CF1-5681E2F2B3B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:llnl:slurm:1.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E2C20C-65D2-457F-B3C6-9BD3955B2491"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34831",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=676055&group_id=157944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1776",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34638",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1128",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=676055&group_id=157944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-17T17:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in template/simpledefault/admin/_masterlayout.php in Mundi Mail 0.8.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the top parameter.  NOTE: when allow_url_fopen is disabled, directory traversal attacks are possible to include and execute arbitrary local files."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de fichero en template/simpledefault/admin/_masterlayout.php en Mundi Mail v0.8.2, cuando \"register_globals\" está activado, permite a atacantes remotos la ejecución de código PHP de su elección a través de una URL en el parámetro \"top\". NOTA: cuando \"allow_url_fopen\" está desactivados, los ataques de salto de directorio son posibles para incluir y ejecutar de manera local cualquier archivo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mundi_king:mundi_mail:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A68F992-68D0-4092-A94F-2E18BD12F648"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-17T17:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in house/listing_view.php in phpCollegeExchange 0.1.5c allows remote attackers to execute arbitrary SQL commands via the itemnr parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en house/listing_view.php en phpCollegeExchange v0.1.5c, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"itemr\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_degner:phpcollegeexchange:0.1.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF73C771-F42D-4226-9FE2-2533CD969AB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35452",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-17T17:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in system/application/controllers/catalog.php in Zoki Soft Zoki Catalog (aka Smart Catalog) allows remote attackers to execute arbitrary SQL commands via the search_text parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en system/application/controllers/catalog.php en  Zoki Soft Zoki Catalog (también conocido como Smart Catalog), permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"search_text\". NOTA: algunos de estos detalles son obtenidos a partir de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zokisoft:zoki_catalog:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D3D59CF-C69D-49EB-8336-E9A9F64D7FDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35476",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.davidsopas.com/2009/06/15/zoki-catalog-sql-injection/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504311/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.davidsopas.com/2009/06/15/zoki-catalog-sql-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504311/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-17T17:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in topicler.php in phPortal 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en  topicler.php en phPortal v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:micheal_glazer:phportal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B8A931-BF54-4A38-A1CC-0FFF60A68D1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35387",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-17T17:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the iJoomla RSS Feeder (com_ijoomla_rss) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in an xml action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el  componente  iJoomla RSS Feeder (com_ijoomla_rss) para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat\" en una acción \"xml\"  al index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ijoomla:com_rssfeeder:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F393B87D-1A8D-40C2-9B77-1998BB36609A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35454",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35379",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-17T17:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the JoomlaPraise Projectfork (com_projectfork) component 2.0.10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el componente JoomlaPraise Projectfork (com_projectfork) v2.0.10 para Joomla!, permite a atacantes remotos leer archivos de su elección a través de secuencias de salto de directorio en el parámetro \"section\" al index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomlapraise:com_projectfork:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C9FD8-1CA2-4707-9265-B9599E7AD617"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35378",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-17T17:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when register_globals is enabled, allows remote attackers to delete arbitrary files via a .. (dot dot) in the deleteTorrent parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en archive.php en TorrentVolve v1.4, cuando \"registers_globals\" está activado, permite a atacantes remotos eliminar archivos de su elección a través de ..(punto punto) en el parámetro \"deleteTorrent\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:castro_xl:torrentvolve:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4860EE61-7ABA-412E-BAA6-9D86F07D9F9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-17T17:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Jumi (com_jumi) component 2.0.3 and possibly other versions for Joomla allows remote attackers to execute arbitrary SQL commands via the fileid parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente Jumi (com_jumi) v2.0.3 y posiblemente otras versiones, para Joomla, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"fileid\" al index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:com_jumi:com_jumi:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1739E1-7164-4D81-AA0C-ABBF96A6CECA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35465",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35384",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-17T17:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Frontend MP3 Player (fe_mp3player) 0.2.3 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la extensión Frontend MP3 Player (fe_mp3player) v0.2.3 y anteriores para TYPO3, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:steve_grundell:frontend_mp3_player:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70D73BB-7A7B-44C2-82F8-50D4C41443BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:steve_grundell:frontend_mp3_player:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAD0485-A833-4D18-929B-FF4C5B45C818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:steve_grundell:frontend_mp3_player:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF7258B-D6BD-4737-AD08-8E39CEF050D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C553D36B-B446-4D63-B37F-FA32D1E5A524"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EAE65C-1E17-48CD-B48C-E0BC09FB6596"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35484",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/extensions/repository/view/fe_mp3player/0.2.4/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-008/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/extensions/repository/view/fe_mp3player/0.2.4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-17T17:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Modern Guestbook / Commenting System (ve_guestbook) extension 2.7.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos cruzados(XSS) en la extensión Modern Guestbook / Comenting System (ve_guestbook) v2.7.1 y anteriores para TYPO3, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:udo_von_eynern:modern_guest_book_commenting_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "9910B221-2948-4FE7-A989-4599C281A0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:udo_von_eynern:modern_guest_book_commenting_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.2",
            "matchCriteriaId" : "C03D4FCF-04AA-4BD7-A830-BA697C513299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:udo_von_eynern:modern_guest_book_commenting_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.3",
            "matchCriteriaId" : "098141D5-BA03-471D-9FA7-BF96F6609288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:udo_von_eynern:modern_guest_book_commenting_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.0",
            "matchCriteriaId" : "3498A23E-E1CD-4ED9-8D78-A29DB70FB8A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:udo_von_eynern:modern_guest_book_commenting_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.1",
            "matchCriteriaId" : "F9767331-890F-449E-BF86-BE2D87BBE162"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35483",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/extensions/repository/view/ve_guestbook/2.7.2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-009/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/extensions/repository/view/ve_guestbook/2.7.2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-17T17:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the References database (t3references) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en la extensión de la base de datos Reference (t3references) versión 0.1.1 y anteriores para TYPO3 permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kasper_skrhj:references_database:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.1",
            "matchCriteriaId" : "0B1516D8-7B8E-4BEB-920D-20F72AD8BD33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35485",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/extensions/repository/view/t3references/0.1.2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-008/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35392",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/55120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/extensions/repository/view/t3references/0.1.2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-17T17:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Virtual Civil Services (civserv) extension 4.3.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la extensión Virtual Civil Services (civserv) v 4.3.2 y versiones previas para TYPO3, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projektseminar_proservice_wwu:virtual_civil_services:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2",
            "matchCriteriaId" : "4836293B-FBE4-40AB-A64B-81D60709E6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projektseminar_proservice_wwu:virtual_civil_services:4.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F40379A-95CD-4362-9766-C14670182AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projektseminar_proservice_wwu:virtual_civil_services:4.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B69B1CC-0E41-4733-A8CA-51E20562A463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projektseminar_proservice_wwu:virtual_civil_services:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55F3379-6C4B-4647-923A-ACD57EC05E35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35479",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/extensions/repository/view/civserv/4.3.3/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-007/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/extensions/repository/view/civserv/4.3.3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-17T17:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Webmedia Explorer (webmex) 5.09 and 5.10 allow remote attackers to inject arbitrary web script or HTML via event handlers such as onmouseover in the (1) search or (2) tag parameters; (3) arbitrary invalid parameter names that are not properly handled when triggered on a column; (4) bookmark parameter in an edit action; or (5) email parameter in a remember action."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en index.php en Webmedia Explorer (webmex) v5.09 y v5.10, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los manejadores de eventos como \"onmouseover\" en los parámetros  (1) \"search\" o (2) \"tag\"; (3) nombres de parámetros inválidos de su elección que no son manejados adecuadamente cuando se lanzan sobre una columna; (4) parámetro \"bookmark\" en una acción \"edit\" o (5) el parámetro \"email\" en una acción \"remember\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmediaexplorer:webmedia_explorer:5.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0459DB91-ABD6-4E92-AFEF-D39BDCA23E8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmediaexplorer:webmedia_explorer:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED2B3FE-0C12-42F9-B344-8C7C1E5A4DCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1123-intern0t-webmedia-explorer-cross-site-scripting-vulnerability.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35477",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504307/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35368",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1123-intern0t-webmedia-explorer-cross-site-scripting-vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504307/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1935",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2009-06-18T18:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the pipe_build_write_buffer function (sys/kern/sys_pipe.c) in the direct write optimization feature in the pipe implementation in FreeBSD 7.1 through 7.2 and 6.3 through 6.4 allows local users to bypass virtual-to-physical address lookups and read sensitive information in memory pages via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función pipe_build_write_buffer (sys/kern/sys_pipe.c) en la característica de escritura directa en la implementación del filtro en FreeBSD v7.1 hasta v7.2 y v6.3 hasta v6.4, permite a usuarios locales saltarse las búsquedas de direcciones virtual-to-physical, y leer información sensible en paginas de memoria a través de vectores no específicos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F702C46F-CA02-4FA2-B7D6-C61C2C095679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.3:release_p10:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1D9D46-75E4-4742-9CF3-2B063B6B7504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.3_releng:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C2BE9D-91E1-48E9-9326-39CF583A57E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F7F02A-C845-40BF-8490-510A070000F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:release_p4:*:*:*:*:*:*",
            "matchCriteriaId" : "8E08DCB9-9064-4DB7-B43A-7B415882EB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "06FB0EEA-254E-4A1F-99E7-058FCD518E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803EFA9F-B7CB-4511-B1C1-381170CA9A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "14D72C9B-EEB0-4605-BEA2-F77092129245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "52DBF406-9C77-4DDA-AB7D-40FAE40023D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:release-p1:*:*:*:*:*:*",
            "matchCriteriaId" : "20A31C9A-A928-4C9B-BB49-0E53227746DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:release-p2:*:*:*:*:*:*",
            "matchCriteriaId" : "99FB7443-F942-402A-9104-64677EAF014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:release-p5:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A31704-E99F-4DBE-ABA4-EC3E566DE6CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A75104-5A3E-485E-B4EC-0873C942731C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F948527C-A01E-4315-80B6-47FACE18A34F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.2:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "8B573401-DC6F-4AFE-92F5-D96F785D2107"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55044",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://secunia.com/advisories/35398",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-09:09.pipe.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.freebsd.org/patches/SA-09:09/pipe.patch",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35279",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022365",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51109",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://osvdb.org/55044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-09:09.pipe.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.freebsd.org/patches/SA-09:09/pipe.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-18T18:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request containing extra unrecognized arguments."
      }, {
        "lang" : "es",
        "value" : "git-daemon en git v1.4.4.5 hasta v1.6.3 permite a atacantes remotos provocar una denegación de servicio (bucle infinito y agotamiento de CPU) a través de una una petición que contenga argumentos no reconocidos extra."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8EC58A-89AD-4BA3-B057-3DA6B5E0FD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BC291EB-F083-4E66-B61B-50723E0E8A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0756E43B-F13B-4EB4-89B3-9A7A6CA6DDA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "23E68B79-8E0C-4001-AECD-ED0AF81825B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAC3AF5-D66D-4972-B2C7-9D1CD784884A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE75459-E53B-4E3A-B94A-3A7DA916A4AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A51E31C-06CD-463F-BF7D-F14979AB492B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D198227B-3B53-4C29-985E-2596C0909A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6347CFA-DC5A-4C0F-A516-02E6BBEDA3AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4474571-24EB-4D53-8A61-D77E560B0ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6544F7-D835-45C5-9645-AFEA9F264DE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E47006-A44B-4BE1-AD6B-CF869C79A2CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "569F2502-3023-44F6-8767-4DA465B3C754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CDF10E4-F882-4BD6-AA56-B56CEC28D1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909E71D3-A5E4-47AF-B9F4-2A05A4129EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FFB1CD-1C79-4DD8-BCAB-1FCA8D99C89B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4124F148-9281-4465-9E16-67DE47E1F00D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F07209-3FC5-4AA4-B9BF-18F32D7F402F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C43D08FF-7871-481D-A648-015F4DCF68E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03769CFD-3A5F-4C5E-B548-6B8F7EFFDE14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2433A7-3333-407D-8147-9AC736049590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585B9665-B422-418D-9AEC-65E65D24621B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA2677B-1237-4D22-A51E-3A67B6AA9F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6642BE-13B4-40F8-BFD4-AD1E55B1A3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.3:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCE67F-34AC-4635-A2DF-E0C304FAB8E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.3:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "197F9E88-DE20-44B5-B159-8E7BC3986E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C668BD7-C4E3-4A12-9987-E565250E2E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92A161E8-6CB8-40FF-9D90-00664185F69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B20EFCED-EC50-4A9B-970B-E29CDBDAABDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361F32F0-8009-40D2-BC14-74AE90CDB36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.4:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "67535E99-5DD8-4F90-9DB1-5415201E94E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3163CEC-C0D5-401E-93C3-6A5316630FC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.4:rc1.1136.g2794:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA19E8C-34DE-4721-88E2-B97774E855E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "BA11029F-E4F7-4D4A-817C-A7CC5AD4E872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.4:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "8A42B9B9-7B29-429D-9ABC-736CCC038813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63530521-E600-4326-B057-162E6635554B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0715BCFB-5EAA-4812-BB59-7210CB6670FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8CEFC6C-0066-4331-A7A8-02047A19206A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF45A2CE-0E19-477F-9393-B8AAD158D285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3095075A-5A99-4718-9E5E-56D442A14EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "49D8DA6B-C306-455E-BAF1-0C5C2E1F33B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6881163A-4097-4BAE-A84A-82D819BBF304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "BF31FA87-A8B8-46A1-8945-CB2613FE3B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E6B6B9-BD9A-4DF2-8DDC-B2A55431B3FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0605BA-481D-4E71-8D57-A99F8CDB7492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.5.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FF740C26-5EB6-4184-93C3-DAC38F01CE25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "668F528C-50BC-4944-9DC3-95D0413D2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3D715F7-34D2-4D1D-B49B-74AF4D7D7C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF925DE-031A-451F-83A6-1B355D364358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31BE5F63-902F-4326-B38B-96D692F86B7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AECFAEA8-3B87-4BFE-98A3-58F5129D9BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6228681-1150-4B80-AFB0-451BAEB393A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E807BBE3-A2EC-4EA2-8222-7A02D03848D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7122491-D55D-451B-A2BC-D87D283A504E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6C7B6C0-BE57-44E3-AFEE-C4EF2A721ABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05F3F78A-C8A5-4F5C-89FA-418A88A8DBAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.6.6:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "F6DA2D48-4F72-4811-870A-4E2B99B4361E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "278CD0BC-81AC-4EEE-8437-2981F94B40B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.5.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DAAE30-324D-4D36-AAA9-0DEA6F2A986E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8F4980-EC18-4DBA-8950-82F1B81FC008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "12C5DE96-2748-4A9F-A321-D6AD3091C3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E7D230-166E-434D-B425-01D6EC159A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "3BDC47F7-47D6-4780-B637-BF646D522ABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A600049E-2E7D-4A05-926B-C6A4F26496AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52406E96-C133-4EE9-BF80-D2327DFEFC10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08816A4-C2D8-40BE-BD46-D9A3A6BBED0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAEBEDEF-54BD-4974-AE96-ABCF85508379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11EE6977-784D-49C9-A1EF-740F5225CF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1237CF62-B0FC-463E-BD89-7CE4EA6BE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B271C19-57A4-4C55-93F6-D2E8DBB77227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3969527E-386C-4847-BE40-9248334F0CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "270B17C7-68D3-4EBE-B7FA-228EBF68AAA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A1220F4F-68A2-45DC-A713-5E5623F09BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.1:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "DFECB8C5-534D-4795-A6E0-6918CFAC8F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2A1CA7-7E39-4B44-9BE7-7CA2189FDE78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CAC62E-587A-420E-BA87-1DD7521DE041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9EF84C-AFDD-47F7-A4CF-9248F576AE13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C103628E-6386-4FD1-9C9F-006C2A66D8C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E9E5D3-7409-47E3-8D80-6EEA07E75307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8438B6E4-82D7-4802-967A-0B57A0FB3C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA315FC-51F6-4F3B-B5BE-65EC19C04C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE4C1753-6B09-48DB-86EF-FED3227775E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7B30E6-0CCC-4CD1-942C-E5D41F457A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2077E2D4-C924-4B9F-81C3-3415DC3A64B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6F118777-F3D1-4F3B-8708-E9A1DA26B09F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "875D5BB6-4AEB-47C7-9E82-532BB917ADFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "1194FF74-89D6-4D5A-A5A9-E13127978FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B2004A-F5EB-4510-A60A-AD1C407CCB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD783B5-72E2-4FE3-B5A3-0325E60BE2B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://article.gmane.org/gmane.comp.version-control.git/120733",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/55034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35437",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-05.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://thread.gmane.org/gmane.comp.version-control.git/120724",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/12/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1579",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01045.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01056.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01126.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-security-list/2009-June/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://article.gmane.org/gmane.comp.version-control.git/120733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/55034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://thread.gmane.org/gmane.comp.version-control.git/120724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/12/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01045.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01056.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-security-list/2009-June/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-18T21:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in FretsWeb 1.2 allow remote attackers to read arbitrary files via directory traversal sequences in the (1) language parameter to charts.php and the (2) fretsweb_language cookie parameter to unspecified vectors, possibly related to admin/common.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en FretsWeb v1.2, permite a atacantes remotos leer ficheros de su elección a través de varias secuencias de salto de directorio en (1) parámetro languaje sobre chart.php y (2) parámetro de la cookie fretsweb_languaje sobre vectores no especificados, posiblemente relacionados con admin/common.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fretsweb_project:fretsweb:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5BDF39-E38E-4A3E-A96A-E052DD67E8C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55166",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/55196",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35492",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8979",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://osvdb.org/55166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/55196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-18T21:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the u parameter to (1) full.php, (2) index.php, and (3) contact.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en DB Top Sites v1.0, cuando está desactivada la opción magic_quotes_gpc, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un valor .. (punto punto) en el parámetro u sobre (1)full.php, (2)index.php y (3) contact.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jnmsolutions:db_top_sites:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B55958-480D-4898-A617-7282A06F9D1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35419",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-18T21:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Static code injection vulnerability in add_reg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP code via a crafted (1) url and (2) location parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático en add_reg.php en DB Top Sites v1.0 permite  a atacantes remotos inyectar código PHP de su elección mediante los parámetros (1) url y (2) location."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jnmsolutions:db_top_sites:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B55958-480D-4898-A617-7282A06F9D1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35419",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-18T21:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in include/page_bottom.php in phpFK 7.03 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the _FORUM[settings_design_style] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en include/page_bottom.php en phpFK v7.03, c permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de secuencias de salto de directorio en el parámetro _FORUM[settings_design_style]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frank-karau:phpfk:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CF21E8A-ACCB-4347-B43C-077A43EDDE6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-18T21:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in FretsWeb 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to player.php and the (2) hash parameter to song.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en FretsWeb v1.2, permite a atacantes remotos  ejecutar comandos SQL de su elección a través de los parámetros (1) name sobre player.php y (2) y hash sobre song.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fretsweb_project:fretsweb:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5BDF39-E38E-4A3E-A96A-E052DD67E8C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55167",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/55168",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35492",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=966939",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8980",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://osvdb.org/55167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/55168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=966939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-18T21:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in admin.php in SkyBlueCanvas 1.1 r237 allow remote attackers to inject arbitrary web script or HTML via the (1) mgroup, (2) mgr, (3) objtype, (4) id, and (5) dir parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en admin.php en SkyBlueCanvas v1.1 r237, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) mgroup, (2) mgr, (3) objtype, (4) id, y (5) dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skybluecanvas:skybluecanvas:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3911B26-8926-4D53-ABFE-6BC2054C26C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1120-intern0t-skybluecanvas-1-1-r237-multiple-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/55115",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35478",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504302/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1120-intern0t-skybluecanvas-1-1-r237-multiple-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/55115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504302/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-18T21:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to obtain sensitive information via an invalid id parameter, which reveals the installation path in an error message."
      }, {
        "lang" : "es",
        "value" : "admin.php en SkyBlueCanvas v1.1 r237 permite a administradores remotos autenticados conseguir información sensible a través de un parámetro id no válido, lo que revela el path de instalación en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skybluecanvas:skybluecanvas:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3911B26-8926-4D53-ABFE-6BC2054C26C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35478",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504302/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504302/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-18T21:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to list directory contents via a .. (dot dot) in the dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en archive.php en admin.php en SkyBlueCanvas v1.1 r237, permite a administradores remotos autenticados listar el contenido del directorio mediante un .. (punto punto) en el parámetro dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skybluecanvas:skybluecanvas:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3911B26-8926-4D53-ABFE-6BC2054C26C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1120-intern0t-skybluecanvas-1-1-r237-multiple-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35478",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504302/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1120-intern0t-skybluecanvas-1-1-r237-multiple-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504302/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2117",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-18T21:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "uye_paneli.php in phPortal 1.0 allows remote attackers to bypass authentication and obtain administrative access by setting the kulladi cookie to a valid username."
      }, {
        "lang" : "es",
        "value" : "uye_paneli.php en phPortal 1.0 permite a atacantes remotos saltar la autenticación y conseguir acceso administrativo, fijando la cookie kulladi a un nombre de usuario válido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phportal:phportal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE4552C-EC2A-40B7-811C-FD7ECD2E8392"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2118",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-18T21:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in IrfanView 4.23, when the resampling or screen fitting option is enabled, allows remote attackers to execute arbitrary code via a crafted TIFF 1 BPP image, which triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en IrfanView v4.23, cuando las opciones de resampleo o de ajustar a pantalla permite a atacantes remotos ejecutar código de su elección a través de una imagen TIFF 1 BPP manipulada, lo que provoca un desbordamiento de búfer basado en memoria dinámica (heap)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC85E443-08AE-4222-9807-9C2514713C54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35359",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/main_history.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35423",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/55150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.irfanview.com/main_history.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-18T21:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the login interface (my.logon.php3) in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos cruzados(XSS) en el interface de autenticación de F5 FirePass SSL VPN v5.5 hasta v5.5.2 y 6.0 hasta v6.0.3 , permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de  un campo password manipulado. NOTA: algunos de estos detalles se han obtenido de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:f5:firepass_ssl_vpn:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2AE5BB-5D4B-4CA3-BB28-2BE9A4974CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:f5:firepass_ssl_vpn:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7ABAF45-EB5E-44C9-AF4D-EDF741BABCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:f5:firepass_ssl_vpn:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4976941E-BDAA-4AD2-AB70-7B4A2E134246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:f5:firepass_ssl_vpn:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01AFA837-B856-482A-8192-5E92FD40EA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:f5:firepass_ssl_vpn:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7AA0609-9A3B-4C83-8DE6-2589152F8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:f5:firepass_ssl_vpn:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7093053B-97DB-4B45-9E36-5A52A28CDCE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:f5:firepass_ssl_vpn:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA897F6-03C3-4182-B288-6F9C1337C10E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35418",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35426",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504232/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022387",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1570",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.fox-it.com/nl/nieuws-en-events/nieuws/laatste-nieuws/nieuwsartikel/f5-firepass-cross-site-scripting-vulnerability/106",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.fox-it.com/uploads/pdf/advisory_xss_f5_firepass.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504232/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.fox-it.com/nl/nieuws-en-events/nieuws/laatste-nieuws/nieuwsartikel/f5-firepass-cross-site-scripting-vulnerability/106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.fox-it.com/uploads/pdf/advisory_xss_f5_firepass.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-18T21:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) ids parameter to admin.php, the (2) y parameter to members.php, and other unspecified vectors.  NOTE: vector 1 requires administrative access."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en TekBase All-in-One v3.1, permite a usuarios remotos autenticados ejecutar comandos SQL de su elección a través de los parámetros (1) ids sobre admin.php, (2) y sobre members.php, y otros vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tekbase:tekbase_all-in-one:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7FF4BD3-4A8B-4027-83DD-8C27F786B8AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T16:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 stores an exception for a hostname when the user accepts an untrusted Exchange server certificate, which causes it to be accepted without prompting in future usage and allows remote Exchange servers to obtain sensitive information such as credentials."
      }, {
        "lang" : "es",
        "value" : "Apple iPhone OS v1.0 hasta v2.2.1 e iPhone OS para iPod touch v1.1 hasta v2.2.1 guarda una excepción para un nombre de servidor (hostname) cuando el usuario acepta un certificado de servidor Exchange no confiable, provocando que sea aceptado en usos futuros sin consultar al usuario y permitiendo que servidores Exchange remotos obtengan información sensible como las credenciales de acceso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340C4071-1447-477F-942A-8E09EA29F917"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FA2602-DDAB-4E23-A3D2-FB712970AAD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T16:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service (device reset) via a crafted MPEG-4 video file that triggers an \"input validation issue.\""
      }, {
        "lang" : "es",
        "value" : "El codificador de vídeo MPEG-4 en Apple iPhone OS v1.0 hasta v2.2.1 e iPhone OS para iPod touch v1.1 hasta v2.2.1 permite a atacantes remotos provocar una denegación de servicio (reinicialización de dispositivo) mediante un fichero de vídeo MPEG-4 manipulado que dispara un \"evento de validación de entrada\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340C4071-1447-477F-942A-8E09EA29F917"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FA2602-DDAB-4E23-A3D2-FB712970AAD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T16:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not provide an option to disable remote image loading in HTML email, which allows remote attackers to determine the device address and when an e-mail is read via an HTML email containing an image URL."
      }, {
        "lang" : "es",
        "value" : "El componente Mail en iPhone OS versiones 1.0 hasta 2.2.1 y iPhone OS para iPod touch versiones 1.1 hasta 2.2.1, de Apple, no proporciona una opción para deshabilitar la carga remota de imágenes en el correo electrónico HTML, lo que permite a los atacantes remotos determinar la dirección del dispositivo y cuando se lee un correo electrónico por medio de un correo electrónico HTML que contiene una URL de imagen."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340C4071-1447-477F-942A-8E09EA29F917"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FA2602-DDAB-4E23-A3D2-FB712970AAD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T16:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the call approval dialog when another alert appears, which might allow remote attackers to force the iPhone to place a call without user approval by causing an application to trigger an alert."
      }, {
        "lang" : "es",
        "value" : "El componente Mail en Apple iPhone OS v1.0 hasta v2.2.1 e iPhone OS para iPod touch v1.1 hasta v2.2.1 descarta el dialogo de aprobación de llamada cuando aparece otra alerta, pudiendo permitir a atacantes remotos forzar al iPhone hacer una llamada sin la aprobación del usuario al causar que una aplicación dispare una alerta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340C4071-1447-477F-942A-8E09EA29F917"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FA2602-DDAB-4E23-A3D2-FB712970AAD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T16:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Profiles component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1, when installing a configuration profile, can replace the password policy from Exchange ActiveSync with a weaker password policy, which allows physically proximate attackers to bypass the intended policy."
      }, {
        "lang" : "es",
        "value" : "El componente Profiles en Apple iPhone OS v1.0 hasta v2.2.1 e iPhone OS para iPod touch v1.1 hasta v2.2.1, cuando instalan un perfil de configuración, puede reemplazar la política de contraseña desde Exchange ActiveSync por una política de contraseña débil, permitiendo a atacantes próximos físicamente eludir la política prevista."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340C4071-1447-477F-942A-8E09EA29F917"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FA2602-DDAB-4E23-A3D2-FB712970AAD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T16:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Safari in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly clear the search history when it is cleared from the Settings application, which allows physically proximate attackers to obtain the search history."
      }, {
        "lang" : "es",
        "value" : "Safari en n Apple iPhone OS v1.0 hasta v2.2.1 e iPhone OS para iPod touch v1.1 hasta v2.2.1 no borra correctamente el historial de búsqueda cuando es borrada desde la configuración de la aplicación, permitiendo que atacantes próximos físicamente obtengan el historial de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340C4071-1447-477F-942A-8E09EA29F917"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FA2602-DDAB-4E23-A3D2-FB712970AAD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T16:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Telephony component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service (device reset) via a crafted ICMP echo request, which triggers an assertion error related to a \"logic issue.\""
      }, {
        "lang" : "es",
        "value" : "El componente Telephony en Apple iPhone OS v1.0 hasta v2.2.1 e iPhone OS para iPod touch v1.1 hasta v2.2.1 permite a atacantes remotos provocar una denegación de servicio (reinicializar el dispositivo) mediante una petición de eco ICMP manipulada, disparando un error de aserción relacionado con un \"elemento lógico\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340C4071-1447-477F-942A-8E09EA29F917"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FA2602-DDAB-4E23-A3D2-FB712970AAD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN87239696/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000040.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN87239696/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T16:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software, allows remote attackers to cause a denial of service (memory consumption or device reset) via a web page containing an HTMLSelectElement object with a large length attribute, related to the length property of a Select object."
      }, {
        "lang" : "es",
        "value" : "WebKit en Apple iPhone OS v1.0 hasta v2.2.1 e iPhone OS para iPod touch v1.1 hasta v2.2.1 permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) mediante una página web conteniendo un objeto HTMLSelectElement con un atributo \"length\" grande."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340C4071-1447-477F-942A-8E09EA29F917"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FA2602-DDAB-4E23-A3D2-FB712970AAD1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE370CAA-04B3-434E-BD5B-1D87DE596C10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.webkit.org/show_bug.cgi?id=23319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.webkit.org/show_bug.cgi?id=23319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T18:00:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en viewimg.php en la extensión (plugin) Paolo Palmonari Photoracer v1.0 para WordPress permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847DA578-4655-477E-8A6F-99FBE738E4F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paolo_palmonari:photoracer_plugin_for_wordpress:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496FD23B-F489-47DE-8607-464C1B4A64A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35450",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35382",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T18:00:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) inUser (aka Username) and (2) inPass (aka Password) parameters to (a) inc/login.ei, reachable through login.php; and the (3) id parameter to (b) show_bug.php and (c) show_activity.php.  NOTE: it was later reported that vector 3c also affects 1.2.2."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Elvin versión 1.2.0, permiten a los atacantes remotos ejecutar comandos SQL arbitrarios por medio de los parámetros (1) inUser (también se conoce como nombre de usuario) y (2) inPass (también se conoce como contraseña) en (a) archivo inc/login.ei, accesible por medio del archivo login.php; y el parámetro (3) id en los archivos (b) show_bug.php y (c) show_activity.php. NOTA: más tarde se informó que el vector 3c también afecta a la versión 1.2.2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elvinbts:elvinbts:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84469C04-A695-4041-8D07-C0B429B4C8CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T18:00:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en page.php en Elvin v1.2.0 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) en el parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elvinbts:elvinbts:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84469C04-A695-4041-8D07-C0B429B4C8CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T18:00:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "delete_bug.php in Elvin before 1.2.1 does not require administrative privileges, which allows remote authenticated users to bypass intended access restrictions and delete arbitrary bugs."
      }, {
        "lang" : "es",
        "value" : "delete_bug.php en Elvin versión anterior a v1.2.1 no requiere permisos administrativos, permitiendo que usuarios autenticados remotamente saltar las restricciones de acceso previstas y borrar fallos de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elvinbts:elvinbts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "1D6C3C9B-611F-4322-84EF-95B5411944F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elvinbts:elvinbts:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C7E357-B728-452A-BACC-8102B81500E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.elvinbts.org/show_bug.php?id=50",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35430",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.elvinbts.org/show_bug.php?id=50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T18:00:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the title (aka subject) field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en close_bug.php en Elvin versiones anteriores a v1.2.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el campo \"title\" (también conocido como \"subject\")."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elvinbts:elvinbts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "1D6C3C9B-611F-4322-84EF-95B5411944F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elvinbts:elvinbts:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C7E357-B728-452A-BACC-8102B81500E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.elvinbts.org/show_bug.php?id=49",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35430",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.elvinbts.org/show_bug.php?id=49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T18:00:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in show_activity.php in Elvin 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en show_activity.php en Elvin 1.2.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elvinbts:elvinbts:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84469C04-A695-4041-8D07-C0B429B4C8CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T18:00:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the title (aka subject) field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en close_bug.php en Elvin versiones anteriores a v1.2.1 permite a atacantes remotos ejecutar comandos SQL de su elección utilizando el campo \"title\" (también conocido como \"subject\")."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elvinbts:elvinbts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "1D6C3C9B-611F-4322-84EF-95B5411944F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elvinbts:elvinbts:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C7E357-B728-452A-BACC-8102B81500E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.elvinbts.org/show_bug.php?id=49",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35430",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.elvinbts.org/show_bug.php?id=49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T18:00:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authentication of arbitrary users via a logout action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en login.php en Elvin v1.2.0 permite a atacantes remotos secuestrar la autenticación de usuarios de su elección mediante una acción \"logout\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elvinbts:elvinbts:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84469C04-A695-4041-8D07-C0B429B4C8CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T18:00:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Elvin 1.2.0 allows remote attackers to read the PHP source code of (1) login.ei, (2) jump_bug.ei, or (3) create_account.ei in inc/ via a direct request."
      }, {
        "lang" : "es",
        "value" : "Elvin v1.2.0 permite a atacantes remotos leer el código fuente PHP de (1) login.ei, (2) jump_bug.ei, o (3) create_account.ei en inc/ mediante una petición directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elvinbts:elvinbts:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84469C04-A695-4041-8D07-C0B429B4C8CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T18:00:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in 4images 1.7.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML by providing a crafted user_homepage parameter to member.php, and then posting a comment associated with a picture."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en images v1.7.7 y anteriores permite a usuarios autenticados remotamente inyectar secuencias de comandos web o HTML de su elección al utilizar un parámetro \"user-homepage\" manipulado en \"member.php\", y posteriormente hacer comentarios asociados con una imagen."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7",
            "matchCriteriaId" : "2784E829-29B6-49D4-981B-58D5E050023D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.0:rc-1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1EA256-97EB-4FCF-A31E-DCC1C49AA801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.0:rc-2:*:*:*:*:*:*",
            "matchCriteriaId" : "1D979480-B42C-4213-B36E-D99DA55EE6E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1726F108-46EA-4CCF-A635-85F681E14471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDDCA47-89BD-4262-9567-731F9875D2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EDBC8A3-6C85-4915-B658-F7129CF82BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB41A1A3-69D5-4175-BF6C-285C0C9990E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9029C35C-D961-419A-A79F-9EFACAD2560A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD8FBCEC-1F99-4DF1-A9E5-CFE353D2D359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729F3EA5-9289-435E-92BD-1C12E839988A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B51C8F-0710-4C7A-A08B-FE940CFF12D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E5D3F1-18E8-4E5C-BBCD-55AC38A06028"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC0556E8-324C-4B4C-9B4C-75EDAA1F3EB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55092",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35427",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.4homepages.de/forum/index.php?topic=15186.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1582",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.4homepages.de/forum/index.php?topic=15186.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T18:00:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in global.php in 4images before 1.7.7, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en global.php en 4images versión anterior a v1.7.7, cuando está inhabilitado magic_quotes_gpc, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante secuencias de salto de directorio en el parámetro \"l\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.6",
            "matchCriteriaId" : "CF94F6C2-538E-4F28-86EA-2B9239854C32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.0:rc-1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1EA256-97EB-4FCF-A31E-DCC1C49AA801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.0:rc-2:*:*:*:*:*:*",
            "matchCriteriaId" : "1D979480-B42C-4213-B36E-D99DA55EE6E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1726F108-46EA-4CCF-A635-85F681E14471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDDCA47-89BD-4262-9567-731F9875D2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EDBC8A3-6C85-4915-B658-F7129CF82BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB41A1A3-69D5-4175-BF6C-285C0C9990E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9029C35C-D961-419A-A79F-9EFACAD2560A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD8FBCEC-1F99-4DF1-A9E5-CFE353D2D359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729F3EA5-9289-435E-92BD-1C12E839988A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B51C8F-0710-4C7A-A08B-FE940CFF12D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E5D3F1-18E8-4E5C-BBCD-55AC38A06028"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bbs.wolvez.org/topic/56/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35427",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.4homepages.de/forum/index.php?topic=15186.0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bbs.wolvez.org/topic/56/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.4homepages.de/forum/index.php?topic=15186.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T18:00:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote attackers to inject arbitrary web script or HTML via the (1) menu or (2) sort parameter to pivot/index.php, (3) the value of a check array parameter in a delete action to pivot/index.php, (4) the element name in a check array parameter in a delete action to pivot/index.php, (5) the edituser parameter in an edituser action to pivot/index.php, (6) the edit parameter in a templates action to pivot/index.php, (7) the blog parameter in a blog_edit1 action to pivot/index.php, (8) the cat parameter in a cat_edit action to pivot/index.php, (9) a certain form field in a doaction=1 request to pivot/index.php, (10) the url field in a my_weblog edit_prefs action to pivot/user.php, or (11) the username (aka name) field in a my_weblog reg_user action to pivot/user.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Pivot v1.40.4 y v1.40.7 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) \"menu\" o (2) \"sort\" en pivot/index.php, (4) el elemento \"name\" en el parámetro \"check array\" en una acción \"delete\" de pivot/index.php, (5) el parámetro \"edituser\" en la acción \"edituser\" en pivot/index.php, (6) el parámetro \"edit\" en una acción \"templates\" en pivot/index.php, (7) el parámetro \"blog\" en una acción \"blog_edit1\" en pivot/index.php, (8) el parámetro \"cat\" parameter en una acción \"cat_edit\" en pivot/index.php, (9) cierto campo de fromulario en una petición \"doaction=1\" en pivot/index.php, (10) el campo \"url\" en una acción \"my_weblog edit_prefs\" de pivot/user.php, o (11) el campo \"username\" (también conocido como name) en una acción \"my_weblog reg_user\" en pivot/user.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivot:pivot:1.40.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E253FAF-6007-4054-B5C9-2027AF79CC44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivot:pivot:1.40.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD12249-43AF-4456-A6CF-040AC68272B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1119-intern0t-pivot-1-40-4-7-multiple-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/55085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35363",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504300/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35363",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1119-intern0t-pivot-1-40-4-7-multiple-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/55085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504300/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T19:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pivot/tb.php in Pivot 1.40.4 and 1.40.7 allows remote attackers to obtain sensitive information via an invalid url parameter, which reveals the installation path in an error message."
      }, {
        "lang" : "es",
        "value" : "pivot/tb.php en Pivot v1.40.4 y v1.40.7 permite a atacantes remotos obtener información sensible mediante un parámetro \"url\" inválido, revelando la ruta de instalación en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivot:pivot:1.40.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E253FAF-6007-4054-B5C9-2027AF79CC44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivot:pivot:1.40.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD12249-43AF-4456-A6CF-040AC68272B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1119-intern0t-pivot-1-40-4-7-multiple-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504300/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1119-intern0t-pivot-1-40-4-7-multiple-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504300/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T19:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple race conditions in the Solaris Event Port API in Sun Solaris 10 and OpenSolaris before snv_107 allow local users to cause a denial of service (panic) via unspecified vectors related to a race between the port_dissociate and close functions."
      }, {
        "lang" : "es",
        "value" : "Múltiples condiciones de carrera en el Solaris Event Port API en Sun Solaris v10 y OpenSolaris versiones anteriores a snv_107 permite a usuarios locales provocar una denegación de servicio (panic) mediante vectore no especificados relacionados con una carrera entre las funciones \"port_dissociate\" y \"close\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_106",
            "matchCriteriaId" : "83CC1166-056F-444B-B497-DC8BA37B7768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_106",
            "matchCriteriaId" : "F318C593-6E6C-4014-855D-13D6E5C2496F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-260449-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-246.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-260449-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-246.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T19:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris snv_01 through snv_82 and snv_111 through snv_117, when a Cassini GigaSwift Ethernet Adapter (aka CE) interface is used, allows remote attackers to cause a denial of service (panic) via vectors involving jumbo frames."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la pila de red TCP/IP en Sun Solaris v10, y en OpenSolaris snv_01 hasta snv_82 y snv_111 hasta snv_117, cuando se utiliza un interfaz Cassini GigaSwift Ethernet Adapter (también conocido como CE), permite a atacantes remotos provocar una denegación de servicio (panic) mediante vectores relacionados con tramas grandes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "78B80C92-7EB5-4343-B830-32E8C011E572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "46E4ED9C-F013-48D2-8642-E5BA7599A512"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B3BBCE23-9F15-45CD-859F-77ED540B51F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "053A0DA6-483C-49BB-BC7A-E624DB2C269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "447212A4-FACD-475E-A62B-60FE6504F63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB694DC0-407A-4555-8B72-DAF3C169DCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "535FF689-13A2-40C6-8706-7782038FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "843246D3-C2DA-454D-916A-AC8905E5134E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35507",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-257008-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-257008-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Per http://sunsolve.sun.com/search/document.do?assetkey=1-66-257008-1\r\n\r\n\"Note 2: A system is only vulnerable to this issue if it is using a GigaSwift Ethernet Adapter (CE) interface (ce(7D)) which has been configured to accept jumbo frames, and hardware checksumming is enabled.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T19:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the Ultra-SPARC T2 crypto provider device driver (aka n2cp) in Sun Solaris 10, and OpenSolaris snv_54 through snv_112, allows context-dependent attackers to cause a denial of service (memory consumption) via unspecified vectors related to a large keylen value."
      }, {
        "lang" : "es",
        "value" : "Fuga de memoria en el controlador del dispositivo proveedor criptográfico Ultra-SPARC T2 (también conocido como n2cp) en Sun Solaris v10, y OpenSolaris snv_54 hasta snv_112, permite a los atacantes dependientes del contexto provocar una denegación de servicio (consumo de memoria) mediante vectores no especificados relacionados con un valor grande en \"keylen\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140386-03-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-258828-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140386-03-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-258828-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-19T19:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple open redirect vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the returnto parameter to login.php or (2) the returnto parameter in a delete action to news.php.  NOTE: this can be leveraged for cross-site scripting (XSS) by redirecting to a data: URI."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de redirección abierta en TBDev.NET v01-01-08 permite a atacantes remotos redirigir a los usuarios a sitios web de su elección y dirigir ataques de phishing mediante (1) el parámetro \"returnto\" de loging.php o (2) el parámetro \"returnto\" en la acción de borrar de news.php. NOTA: esto puede ser aprovechado por secuencias de comandos en sitios cruzados (XSS) redirigiendo a una data:URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tbdev:tbdev.net:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B9DD35-9B9F-4197-A29C-A4F203303F7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1121-intern0t-tbdev-01-01-2008-multiple-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1121-intern0t-tbdev-01-01-2008-multiple-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T14:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to inject arbitrary web script or HTML via (1) the returnto parameter to makepoll.php, (2) the returnto parameter in a delete action to polls.php, or the (3) Info or (4) Avatar field to my.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en TBDev.NET 01-01-08 permiten a usuarios remotos inyectar codigo web script o código HTML de su elección a través de (1) el parámetro returnto de makepoll.php, (2) el parámetro returnto de una acción de borrado de polls.php y (3) el campo Info o (4) Avatar de my.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tbdev:tbdev.net:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B9DD35-9B9F-4197-A29C-A4F203303F7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1121-intern0t-tbdev-01-01-2008-multiple-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35378",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1121-intern0t-tbdev-01-01-2008-multiple-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T14:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) login and (2) senha parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidad de inyección SQL en admin/index.asp en Zip Store Chat v4.0 y v5.0 permiten a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) \"login\" y (2) \"senha\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zipstore:zip_store_chat:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09B639DB-731C-4FE8-A967-4691C76FBD70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zipstore:zip_store_chat:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F8B418B-26CF-4D65-A61B-3065B79C8E65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35417",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1581",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T14:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in firestats-wordpress.php in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the fs_javascript parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de fichero remoto PHP en firestats-wordpress.ph del plugin FireStats de WordPress en sus versiones anteriores a 1.6.2-stable. Permite a usuarios remotos ejecutar código PHP de su elección a través de una URL en el parámetro fs_javscript."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847DA578-4655-477E-8A6F-99FBE738E4F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:*:stable:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "3864C442-3C86-4849-B578-82BF3B0EAF25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:0.9.0-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE6D957-B6BC-48BB-8271-A8BE8CE7A16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:0.9.1-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11F9730D-2D80-4980-BCDA-7D9C8A60C4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:0.9.2-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B30AC1-BED9-4AF2-8577-EE0ACCF6A381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:0.9.3-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC277E53-0EA6-4724-B37B-8CD5AA906198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:0.9.4-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E2D9C9-7BFB-45F0-8392-32610DB22EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:0.9.5-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7666EAE-155A-46CA-B680-C11A625CA554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:0.9.6-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE46205-1069-4EE2-9403-4051692C7EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:0.9.7-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59D6986-EF12-4D72-A4FF-12E56EE4D178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:0.9.8-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1228D9C7-2113-46B0-A552-DF5C19B2E92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CA097B0-1C72-405F-8A0B-741410AE2ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563247B6-73E5-4244-8241-3F23C796A85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F008C5BC-640F-4DB6-B348-453D9AE169C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.0.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB57CB7-DD1C-4602-AF04-4B33A026EE1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.0.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "73F97B76-4A8D-46AA-9C8C-8F66209A8ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.0.2:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "31604ECC-AAB0-4703-859E-2C751EAFBD6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E00CBE-AF27-4AA1-85D8-1B43175A8E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.1.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6928328B-B3D2-49CA-B316-9F4C8244E92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.1.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AC31A7A-F7B6-42BE-92EB-BC80C6E6BBDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.1.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED5467-41E3-47C3-861E-C3A4EAB68724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.1.4:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "63B2FD18-E414-4C73-8FD4-530CBA220750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.1.5:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "8291513A-E222-4C6D-AA9D-C0FE81A1DBE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.1.6:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7CD8AA-DE2D-4738-8F46-A860319AB99C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.1.7:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F809B6-D0D6-468D-9F5E-B70CA40D25DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.1.8:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "A28BBF25-6063-4D97-8108-6EC7099C33ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.2.0-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F20A5587-4C56-4F8F-A7D5-850F1CE893BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.2.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D64BC51F-DE97-4712-B80B-97D72B73BF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.2.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C3DEF83-6DAA-4E84-9022-B52A9CD84352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.2.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "32C2D594-ADE2-494B-B60F-13BF1139E59B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.2.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "76BC2452-4C98-4EA0-BE3C-2146C1BBA368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.3.0-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0ED678-74B6-4FCA-A841-96408EEA9005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.3.1-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54302F44-00C0-4A28-A350-1F8FB05D9699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.3.2-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BAE293-DA65-45DC-81E5-7C7D44480517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.3.3-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93BABAE-B7A7-4B7F-8F3F-24AF206D26F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.3.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "67AF857D-A116-4C05-99DA-350C017EB665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.3.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFF47A8-6F99-4F2C-AFC4-5ACF69C451DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.3.6:stabe:*:*:*:*:*:*",
            "matchCriteriaId" : "869E6E88-E159-446D-BEB3-585A88674B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A40ED88-02AF-45F0-BB42-826789A16C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.4.0-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8E571E-16BA-476D-92B7-42FEC94CE925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.4.1-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9739F0-6748-4A86-9A71-94262F205BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.4.2-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97A6524-F671-47C1-A96A-5123158EE356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.4.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "76DF36C4-5A50-4B85-BFA4-C1571036BD19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.4.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "BF98BC94-B207-41E9-9BA2-F2F73C8A4008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A96892-379C-4583-B0F4-5457E82D9D75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.5.0-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7F94179-58C7-462E-882D-B94435CD907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.5.1-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB9F970-7307-4539-A1A0-2DD14D333A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.5.2-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8CA6FF0-CD5B-435C-ADD3-4C28293DE70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.5.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E66F67-951D-4104-AC1D-E6106C4197F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.5.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7B14DE75-DCBF-4D29-AC8C-64B005A0BCF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.5.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A881746E-715B-4186-9D25-33F8E25B8344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.5.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B8F8A5D-A836-40B3-9069-7CB249C797BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.5.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B364FC45-77AC-4C0B-AA37-A97610F05FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.5.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D43B703A-73B9-40D0-93AA-22C1E04C8098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.5.10:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFDDA5E1-AE01-4A24-A8EA-1EC7EAA71C4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.5.11:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "1269D6F0-7782-4B70-8A72-AC864A629257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.5.12:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "B18F9AD0-6FD6-45B7-A686-C777F6EF46EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE568395-643C-4261-BCC2-CDDFCF44039E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F99809A-95DF-4066-9589-83885CBF4661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0648CC68-2E6C-4BF9-A30B-9B5BEF72D705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE87737-44E2-4477-95E6-2199CCFC06DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.6.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0B9641-0674-4E23-8436-30C6B7C4241B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.6.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "56A858FF-4F5D-409C-8DC8-65B1680AF220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.6.0:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "09AD7D16-6A82-4AAE-B8F9-D74FACF5CF6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.6.0-beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34B435D3-AFAB-4A33-B9EC-9C647A615712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.6.0-beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D85F8E8A-F19C-48FC-BFD3-B8DE60B2D1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECD5EA0-58F8-4A8C-8C55-C8504AFB1F45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://firestats.cc/wiki/ChangeLog#a1.6.2-stable13062009",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35400",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://firestats.cc/wiki/ChangeLog#a1.6.2-stable13062009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T14:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el plugin FireStats en sus versiones anteriores a 1.6.2-stable de WordPress permite a usuarios remotos ejecutar comandos SQL de su elección a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:*:stable:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "E834AA0F-78A7-4C21-AF11-DA09482B4614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:0.9.0-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED13B729-A9FF-4045-ACD2-4B2F254173AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:0.9.1-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEA2DDD-745A-4559-AB55-237604BC862D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:0.9.2-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2B1DE5-0AC5-43A2-AAB8-FFFA0235E983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:0.9.3-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85000821-FFEB-4172-BD92-F6C3A9F7E7DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:0.9.4-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58531C75-B209-4456-B61E-C212879F6DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:0.9.5-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC78A4E-CDE7-465B-AB24-3A4F1D47CE22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:0.9.6-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0942444-A2A6-45EE-93D2-E1A36CBA5FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:0.9.7-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9668A006-8EAC-480A-AEA1-9DB5EB3BDD59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:0.9.8-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D1C55D-77F1-428B-900E-FC9A707B8A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCD33F6-492C-4A63-A67F-E775564EEA72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78180E71-45AE-4DCC-BBEC-A102E392BB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "42F502F3-12EC-4CD3-ADEA-B77E7275944E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.0.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA33956-2F76-49ED-82A4-C5B50538C5CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.0.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE1CB60-B9D0-4EDE-BEF2-FCF3015047ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.0.2:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "43CBFABF-1751-44DA-814B-E9979C85FE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "54B0F88F-2108-4A66-B95D-E633BC4495F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.1.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D2AC337-B91E-4F76-9C26-4113651E6C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.1.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "12E0E879-2551-4EB8-9CB5-5DC679E58095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.1.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "2932101C-AD8A-45DC-9834-22132B0E9E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.1.4:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2D01A0-1A37-462C-AA10-31E0AC3D09E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.1.5:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "CD952288-BA3B-43C7-9D0F-0A1C188334F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.1.6:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CF38E1-CDB6-4A82-AC14-4FCAD9C978BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.1.7:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "C27D5D73-5703-4DD2-BA3F-801A05E31F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.1.8:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "566A5E2D-FF35-4354-A054-9D0028B75BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.2.0-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FAEAFE0-4768-404D-ACFF-344C40777503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.2.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D163C9BE-33A0-48CE-AB37-D64454F1AFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.2.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3448D772-6C68-4D0D-AED4-888D99B231DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.2.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "36613FE7-A554-4056-B714-471013A35C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.2.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE9ED08-9006-4961-971B-06C3CEA49458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.3.0-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3AB32B-A9DD-463C-98FA-AA017E43C0CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.3.1-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87180A73-A925-4D90-896A-B25176C37B96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.3.2-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8795EAF1-18C1-482B-8656-180162DAD828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.3.3-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C84E75B-40D3-4A69-8E20-ADE1DDEAE66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.3.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "26BA547B-145F-4CEA-909D-23A850D0FA7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.3.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BABAF387-0758-4F21-BD63-F2AA5A66069A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.3.6:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "932A8BE4-1911-4E10-8E13-DF19C70E388C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40F57A1-B0DB-4E91-8A8C-AE7BF6FBA9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.4.0-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B339B69-E720-408A-9581-29A89914E1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.4.1-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B450CC8-96D1-42A4-970F-522180063491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.4.2-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8DE124-1344-497C-A88C-6BF3F3511B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.4.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FB55923-22D5-42AA-A1A8-A355E4D74557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.4.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "D8020B0B-4630-4AC4-A550-32C3DEBFDE03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4BC758-5BA9-4EA4-AD2B-36BB980458A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.5.0-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F44EA1CF-2326-4EBF-8D6C-6FD8E6A5D93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.5.1-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDFD7E8E-10AE-4C55-8AF6-058A5DC89D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.5.2-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E247C0B-030B-4EDB-A0E8-1E21D1379CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.5.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A8AD03D-B664-4B9F-8F55-BD55B8CFEB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.5.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0B6D5C49-0F49-4987-82AB-0234C08D421F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.5.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B485D62A-91F9-4B60-B43F-625C23F28809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.5.6-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0B95AE-1A78-49BF-B0F7-AC2083CE6C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.5.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D39C430-25BF-498B-85C2-54028D591B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.5.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "22CA6661-3DD2-4474-9B83-7F04E4A379D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.5.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB32DF8-ED42-40EE-AF6F-37B264CB1440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.5.10:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "10D7FF58-8139-4E3E-B59D-0F2909B5FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.5.12:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "7D31D76B-5505-4421-B7F4-854523326507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E108764-791B-4ADD-9F57-46BA575C70F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.6.0:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "8C65DADE-051C-4B67-8CC1-B1836553329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.6.0-beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7781843F-C9AF-4925-8456-36A9FA0AF675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:1.6.0-beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD9BC1A-82FE-43A5-AC60-48DD0617DACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall:firestats:11.5.11:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "4C365F10-CD01-4D70-9655-756FFEBBDD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0648CC68-2E6C-4BF9-A30B-9B5BEF72D705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE87737-44E2-4477-95E6-2199CCFC06DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.6.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0B9641-0674-4E23-8436-30C6B7C4241B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firestats:firestats:1.6.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "56A858FF-4F5D-409C-8DC8-65B1680AF220"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847DA578-4655-477E-8A6F-99FBE738E4F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://firestats.cc/wiki/ChangeLog#a1.6.2-stable13062009",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35400",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://firestats.cc/wiki/ChangeLog#a1.6.2-stable13062009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T14:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web script or HTML via the (a) NodeID and (b) action parameters to the default URI, and the (c) NodeID parameter to the default URI for the admin section; and allow remote authenticated users to inject arbitrary web script or HTML via the (d) Title (aka page name) and (e) Url fields in a (1) new or (2) modified page."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en transLucid v1.75 permiten a atacantes remotos inyectar HTML o scripts web arbitrarios a través de los parámetros (a) nodeid y (b) action a la URI por defecto, y el parámetro (c) nodeid a la URI por defecto de la sección de administración, y permiten a los usuarios remotos autenticados inyectar HTML o Scripts Web arbitrarios a través de los campos (d) Title (alias nombre de página) y (e) Url en una página (1) nueva o (2) modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pantha:translucid:1.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D32551E-C76C-4844-B2A9-E367198E5877"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1122-intern0t-translucid-1-75-multiple-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35389",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1122-intern0t-translucid-1-75-multiple-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T14:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition (aka SugarCRM) before 5.2f allows remote authenticated users to execute arbitrary code by uploading a file with only an extension in its name, then accessing the file via a direct request to a modified filename under cache/modules/Emails/, as demonstrated using .php as the entire original name."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de subida de fichero sin restricción en la caracteristica Compose Email del módulo Emails in Sugar Community Edition (también conocido como SugarCRM) versión anterior a 5.2f permite a atacantes remotos ejecutar código de su elección subiendo un fichero con una extensión ejecutable, posteriormente accediendo al fichero mediante una petición directa a un fichero modificado del directorio cache/modules/Emails/, como se ha demostrado al usar .php como el nombre completo original"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:*:*:sugar_community_edition:*:*:*:*:*",
            "versionEndIncluding" : "5.2e",
            "matchCriteriaId" : "C30BBF2D-8BF5-4DF5-8A8A-8F066DE61FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:5.0.0:*:sugar_community_edition:*:*:*:*:*",
            "matchCriteriaId" : "6FEB4B61-0F95-45CA-AB7A-BA07FF2FCA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:5.0.0h:*:sugar_community_edition:*:*:*:*:*",
            "matchCriteriaId" : "B23F68DA-DFB0-42E1-959A-F7A68AA83BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:5.0.0k:*:sugar_community_edition:*:*:*:*:*",
            "matchCriteriaId" : "0C7E5228-8F94-42EA-B0E0-A52E0F05A933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:5.1.0:*:sugar_community_edition:*:*:*:*:*",
            "matchCriteriaId" : "6E29C3D7-E58A-4F9D-9C2D-9215EBF9F3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:5.1.0-beta:*:sugar_community_edition:*:*:*:*:*",
            "matchCriteriaId" : "FF69D1EA-2B23-4A9A-A535-A4C59C7DBBD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:5.1c:*:sugar_community_edition:*:*:*:*:*",
            "matchCriteriaId" : "DC04A89E-5379-41B3-BF84-87A2AEB62ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:5.2c:*:sugar_community_edition:*:*:*:*:*",
            "matchCriteriaId" : "F0114CAC-A8F4-489C-818E-DB4E068DAB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:5.2d:*:sugar_community_edition:*:*:*:*:*",
            "matchCriteriaId" : "25E6CA5B-18F8-4C81-A436-6A7FA0E8B45D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35445",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35361",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.sugarforge.org/frs/download.php/5598/Sugar_CommunityEdition_ReleaseNotes_5.2f.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ush.it/team/ush/hack-sugarcrm_520e/adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.sugarforge.org/frs/download.php/5598/Sugar_CommunityEdition_ReleaseNotes_5.2f.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ush.it/team/ush/hack-sugarcrm_520e/adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T14:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en fdown.php en phpWebThings v1.5.2 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "7C13415B-8752-4CDE-B566-73F9F22BBC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F2E20D-4AA9-41CE-AF0A-28DCB65C947E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "566463D1-B366-408C-B27A-0450C6C3AE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1526ABB2-DBD2-4080-8944-61F9ABDA75D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20B1FA8A-8A72-4986-B6F0-F0AED7ACA7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26ACF325-11B6-49C3-B85F-33256E3FDDDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87432E8-E5ED-4746-BBC9-C519F364FBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF75D6A-33B7-4B74-8148-3F1AAA8E7DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604FE388-8339-4EB1-848E-B21F96FE691D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F2C338-BBF1-4FAD-8D1C-1B2D4D72644F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D45F83-BD58-4145-A89D-25B81D442DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D302871A-63CF-4B49-A180-CD44E941971C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921E79A6-ABC9-4804-B016-7049F13C905C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E207E3F4-FC8F-4931-BF9C-40C2C516B500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebthings:phpwebthings:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D54FDD-2EC5-40C7-ACD7-B4D56B27F7D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35336",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T14:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en news/index.php en Campus Virtual-LMS permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campusvirtualcomputrade:campus_virtual-lms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DED872-4A0E-4C43-9EEE-5ECA33220B6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2009/1583",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T14:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary web script or HTML via the (1) courseid parameter to enrolments/step1.php, or the (2) search or (3) siteid parameter to files/shared_list.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en Campus-Virtual-LMS permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de los parámetro (1) courseid en enrolments/step1.php, o  los parámetros (2) 'search' o (3) 'siteID' a files/shared_list.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campusvirtualcomputrade:campus_virtual-lms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DED872-4A0E-4C43-9EEE-5ECA33220B6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2009/1583",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T14:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in Campus Virtual-LMS allow (1) remote attackers to hijack the authentication of arbitrary users for requests that terminate a session via login/logout.php, and might allow remote attackers to hijack the authentication of certain users via a (2) ADD or (3) DELETE action to enrolments/step2.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de falsificación de petición en sitios cruzados(CSRF) en Campus Virtual-LMS. Permiten a usuarios remotos (1) secuestrar la autenticación de usuarios aleatorios para peticiones que finalizan una sesión a través de login/logout.php, y secuestrar la sesión de ciertos usuarios a través de las acciones (2) ADD o (3) DELETE de enrolments/step2.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campusvirtualcomputrade:campus_virtual-lms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DED872-4A0E-4C43-9EEE-5ECA33220B6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T14:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in AdaptWeb 0.9.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the newlang parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php en AdaptWeb v0.9.2 permite a atacantes remotos leer ficheros arbitrarios a través de un .. (punto punto) en el parámetro 'newlang'."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptweb:adaptweb:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF503BF-330F-4ED8-9BDE-8AE33527AE47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T14:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in a_index.php in AdaptWeb 0.9.2 allows remote attackers to execute arbitrary SQL commands via the CodigoDisciplina parameter in a TopicosCadastro1 action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en a_index.php en AdaptWeb v0.9.2 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"CodigoDisciplina\" en una acción TopicosCadastro1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isabela_gasparini:adaptweb:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5836AD93-D590-47FA-9969-9CA56F209D25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T14:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Impleo Music Collection 2.0 allows remote attackers to inject arbitrary web script or HTML via the sort parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en index.php en Impleo Music Collection v2.0 permite a atacantes remotos inyectar HTML o scripts web arbitrarios mediante el parámetro 'sort'."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sappy.dk:impleo_music_collection:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCE29E2-D9DA-4E26-B571-20FF1BF965D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T14:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/login.php en Impleo Music Collection v2.0,cuando está inhabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"username\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sappy.dk:impleo_music_collection:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCE29E2-D9DA-4E26-B571-20FF1BF965D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T19:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in report/ReportViewAction.do in WebNMS Free Edition 5 allows remote attackers to inject arbitrary web script or HTML via the type parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en report/ReportViewAction.do en WebNMS Free Edition v5 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro \"type\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:webnms:5:-:free:*:*:*:*:*",
            "matchCriteriaId" : "BB855BB7-FD81-40C9-95B9-48C4114D12BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35495",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T19:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Title field to requests.php, related to viewrequests.php; and (2) the Torrent Name field to torrents-upload.php, related to the logging of torrent uploads; and allow remote attackers to inject arbitrary web script or HTML via (3) the ttversion parameter to themes/default/footer.php, the (4) SITENAME and (5) CURUSER[username] parameters to themes/default/header.php, (6) the todayactive parameter to visitorstoday.php, (7) the activepeople parameter to visitorsnow.php, (8) the faq_categ[999][title] parameter to faq.php, and (9) the keepget parameter to torrents-details.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en TorrentTrader Classic v1.09 permiten a usuarios remotos inyectar codigo web script o código HTML a través de (1) el campo Title de requests.php (relacionado con viewrequests.php), (2) el campo \"Torrent Name\" (nombre del torrent) de torrents-upload.php (relacionado con el registro de las subidas de torrents), (3) el parámetro ttversion de themes/default/footer.php, (4) los parámetros SITENAME y (5) CURUSER[username] de themes/default/header.php, (6) el parámetro todayactive de visitorstoday.php, (7) el parámetro activepeople de visitorsnow.php, (8) el parámetro faq_categ[999][title] de faq.php, y el parámetro (9) keepget de torrents-details.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torrenttrader:torrenttrader_classic:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B591D51-69F4-4A00-85DD-CF5DCD197DCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35456",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504294/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35369",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-74.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504294/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-74.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T19:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitrary SQL commands via (1) the origmsg parameter to account-inbox.php; the categ parameter to (2) delreq.php and (3) admin-delreq.php; (4) the choice parameter to index.php; (5) the id parameter to modrules.php in an edited (aka edit) action; the (6) user, (7) torrent, (8) forumid, and (9) forumpost parameters to report.php; (10) the delmp parameter to take-deletepm.php; (11) the delreport parameter to takedelreport.php; (12) the delreq parameter to takedelreq.php; (13) the clases parameter to takestaffmess.php; and (14) the warndisable parameter to takewarndisable.php; and allow remote attackers to execute arbitrary SQL commands via (15) the wherecatin parameter to browse.php, (16) the limit parameter to today.php, and (17) the where parameter to torrents-details.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en TorrentTrader Classic v1.09 permiten a los usuarios remotos autenticados ejecutar comandos SQL a través de los parámetros (1) origmsg en account-inbox.php; el parámetro Categ en (2) delreq.php y (3) admin-delreq.php , (4) el parámetro choice en  index.php; (5), el parámetro id en modrules.php en una accion de edicción (es decir, al hacer un edit), los parámetros (6) user (7), torrent, (8) forumid, y (9) forumpost para report.php; (10), el parámetro delpm en take-deletepm.php; (11) el parámetro delreport en takedelreport.php; (12) el parámetro delreq a takedelreq.php; (13), el parámetro clases en takestaffmess.php, y (14) el parámetro warndisable a takewarndisable.php. Mientras que otras permiten a atacantes remotos ejecutar comandos SQL a través del parámetro (15) wherecatin en browse.php, (16) el parámetro limit en today.php, y (17) el parámetro where en torrent-details.php"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torrenttrader:torrenttrader_classic:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B591D51-69F4-4A00-85DD-CF5DCD197DCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35456",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504294/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35369",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-74.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504294/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-74.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T19:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack."
      }, {
        "lang" : "es",
        "value" : "account-recover.php de TorrentTrader Classic v1.09 selecciona contraseñas aleatorias de un conjunto insuficientemente grande, lo que facilita a usuarios remotos el obtener una contraseña a través de un ataque de fuerza bruta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torrenttrader_project:torrenttrader:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610D011C-0FA6-458D-B67D-BE76C6B83BA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/504294/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35369",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-74.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51150",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8958",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504294/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-74.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T19:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote attackers to create and download a backup database by making a direct request and then retrieving a .gz file from backups/."
      }, {
        "lang" : "es",
        "value" : "backup-database.php en TorrentTrader Classic v1.09 no requiere autenticación administrativa, permitiendo que atacantes remotos creen y descarguen una base de datos de respaldo mediante una petición directa y posteriormente recuperando un fichero .gz del directorio backups/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torrenttrader:torrenttrader_classic:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B591D51-69F4-4A00-85DD-CF5DCD197DCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35456",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504294/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35369",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-74.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504294/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-74.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T19:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TorrentTrader Classic 1.09 allows remote attackers to (1) obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function; and allows remote attackers to (2) obtain other potentially sensitive information via a direct request to check.php."
      }, {
        "lang" : "es",
        "value" : "TorrentTrader Classic v1.09 permite a atacantes remotos (1) obtener información de la configuración mediante una petición directa a phpinfo.php, que llama a la función phpinfo; y permite a atacantes remotos (2) obtener otra información potencialmente sensible mediante un una petición directa a check.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torrenttrader:torrenttrader_classic:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B591D51-69F4-4A00-85DD-CF5DCD197DCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35456",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504294/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35369",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-74.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504294/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-74.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T19:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ss_uri parameter, in conjunction with a modified component name."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en backend/admin-functions.php de TorrentTrader Classic v1.09. Cuando se usa en un sitio web que no distingue mayúsculas y minúsculas, permite a usuarios remotos incluir y ejecutar archivos locales a través de los caracteres .. (punto punto) en el parámetro ss.uri junto con un nombre de componente modificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torrenttrader:torrenttrader_classic:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B591D51-69F4-4A00-85DD-CF5DCD197DCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35456",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504294/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35369",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-74.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504294/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-74.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T19:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the XOOPS MANIAC PukiWikiMod module 1.6.6.2 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en el módulo PukiWikiMod MANIAC 1.6.6.2 y anteriores para XOOPS permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ishii:pukiwikimod:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.6.2",
            "matchCriteriaId" : "7B5043DC-1598-474D-857A-A555F2FD1314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ishii:pukiwikimod:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97824B66-C39D-475D-A429-62BC7635CC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ishii:pukiwikimod:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA2C9B8-6E67-4CA3-92D3-F7822E9E2347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ishii:pukiwikimod:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F33879-778C-4005-AFCD-E30227389D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ishii:pukiwikimod:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC947603-0A55-4FDA-A8C5-22B67531800A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ishii:pukiwikimod:1.5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D68E1C9-C9EB-41F9-A889-AC01D2B2A1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ishii:pukiwikimod:1.5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1937262-41C4-4C7F-9BDB-B8028736450E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ishii:pukiwikimod:1.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0FE1DF-6FB2-49BA-A0BD-B22D91CCB939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ishii:pukiwikimod:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D47500-E9C6-48A8-9EFC-47C3809748F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ishii:pukiwikimod:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E8153D-DEF7-4DC8-B19B-9F6D3DEEEB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ishii:pukiwikimod:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AF50CC-8D82-44F9-8607-80C4C4652CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ishii:pukiwikimod:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50CB588C-30AA-4E24-8DCA-5006C5C4FAA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ishii:pukiwikimod:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28566651-CBF5-4CEF-A3CF-FD83B5EB8A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ishii:pukiwikimod:1.6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26C76E9-E130-4EA7-B6DF-B408BC15839F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ishii:pukiwikimod:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7BEEB3E-F7F6-466A-9622-A8D648CBA832"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB325E21-BD1E-4C12-B3B1-7210AFFD1235"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN12244807/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000041.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35504",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://xoops.hypweb.net/wiki/6005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN12244807/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000041.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://xoops.hypweb.net/wiki/6005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T20:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in login/default.aspx in Sitecore CMS before 6.0.2 Update-1 090507 allows remote attackers to inject arbitrary web script or HTML via the sc_error parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Sitecore CMS versiones anteriores a v6.0.2 Update-1 090507 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"sc_error\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitecore:cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.2",
            "matchCriteriaId" : "40923C49-775A-49A3-BDC4-264838748CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitecore:cms:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20271A9D-C591-4206-AF17-9170BA32C70E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitecore:cms:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADD8B45-3408-454B-BB24-C9E51CDC05D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitecore:cms:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "926DE827-2E52-40F5-927B-0B18CF57FE76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1082-intern0t-sitecore-net-6-0-0-cross-site-scripting-vulnerability.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35353",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504093/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504132/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.intern0t.net/intern0t-advisories/1082-intern0t-sitecore-net-6-0-0-cross-site-scripting-vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504093/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504132/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T20:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the code parameter to activate.php or (2) the dest parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Kjtechforce mailman beta1, cuando está inhabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL de su elección mediante (1) el parámetro \"code\" en activate.php o (2) el parámetro \"dest\" en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kjtechforce:mailman:beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05ACE637-3A64-461F-8D7C-C1E3F7B18EE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/504136/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504136/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T20:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SerendipityNZ (aka SimpleBoxes) Serene Bach 2.20R and earlier, and 3.00 beta023 and earlier 3.x versions, uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id."
      }, {
        "lang" : "es",
        "value" : "Serena Bach de SerendipityNZ (SimpleBoxes) v2.20R y anteriores, 3.00 beta023 y versiones anteriores  a la v3.x usa un identificador de sesión predecible, lo que facilita a atacantes remotos secuestrar la sesión a través de un id modificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serendipitynz:serene_bach:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20r",
            "matchCriteriaId" : "75F8771D-4334-4333-8160-5355B067EFCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serendipitynz:serene_bach:1.18r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7962E28-D16E-488F-AA38-A3D0193D0493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serendipitynz:serene_bach:1.19r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A489E8CC-5B8B-49E7-AAC0-DDFA202BCE8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serendipitynz:serene_bach:2.05r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A67B19-F6CB-4451-A1E2-D8E95E752181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serendipitynz:serene_bach:2.08d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B136BFFA-B2A6-4658-8778-AA74686BF652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serendipitynz:serene_bach:2.09r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D4AE0BC-73FD-4EF6-9963-1D7AFCFEAE7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serendipitynz:serene_bach:3.00:beta023:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C94ECC-875D-41DF-876E-D67A0DA6CC25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN20689557/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000035.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35335",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://serenebach.net/log/sb221R.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN20689557/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://serenebach.net/log/sb221R.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T20:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio absoluto en cvs.php en OCS Inventory NG versiones anteriores a v1.02.1 para Unix permite a atacantes remotos leer ficheros de su elección indicando la ruta de directorio completa en el parámetro \"log\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02",
            "matchCriteriaId" : "8C51BBFA-8405-4499-A743-8458318281F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C9D8DD-6505-4903-9181-26223DA65DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CCBDA19C-8B65-4D0D-80B6-3C1E76C5BE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3E915093-BDDA-4A75-A0D0-819246D94249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDE845A-A67A-4DCC-BC61-FC64C6943C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B363C2E6-FAB1-4CED-9C0D-3797AEC814E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc3-1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B28BF3-C16C-458A-BC9B-23631D2B7623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9ACDD1-0586-47F1-9421-F4D176BF438E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "73D26134-3129-432B-AA9E-5062E2792F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A113F25A-CC82-428A-AA56-16BBA3D3C736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C0FCAE6C-0F9F-4B8A-97B4-2EF4ED76C5FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:unix:unix:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A7C398-5356-45D6-AA5C-53E63BC88DCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.leidecker.info/advisories/2009-05-30-ocs_inventory_ng_directory_traversal.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504047/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.leidecker.info/advisories/2009-05-30-ocs_inventory_ng_directory_traversal.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504047/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T20:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en cpanel/login.php en EgyPlus 7ammel (también conocido como 7ml) v1.0.1 y anteriores, cuando está inhabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro (1) \"username\" y (2) \"password\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egyplus:7ammel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "DCB957D6-BD45-4B52-9C26-534624E6CE67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2009/1491",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2168",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T20:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier sends a redirect to the web browser but does not exit when the supplied credentials are incorrect, which allows remote attackers to bypass authentication by providing arbitrary username and password parameters."
      }, {
        "lang" : "es",
        "value" : "cpanel/login.php en EgyPlus 7ammel (también conocico como 7ml) v1.0.1 y anteriores envía una redirección al navegador web pero no sale cuando las credenciales proporcionadas son incorrectas, permitiendo a atacantes remotos saltar la autenticación al proporcionar parámetros \"username\" y \"password\" aleatorios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egyplus:7ammel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "DCB957D6-BD45-4B52-9C26-534624E6CE67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8865",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2169",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-22T22:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure method vulnerability in the PDFVIEWER.PDFViewerCtrl.1 ActiveX control (pdfviewer.ocx) in Edraw PDF Viewer Component before 3.2.0.126 allows remote attackers to create and overwrite arbitrary files via a URL argument to the FtpConnect argument and a target filename argument to the FtpDownloadFile method.  NOTE: this can be leveraged for code execution by writing to a Startup folder."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de método inseguro en el control ActiveX PDFVIEWER.PDFViewerCtrl.1 (pdfviewer.ocx) en Edraw PDF Viewer Component versiones anteriores a v3.2.0.126 permite a atacantes remotos crear y sobrescribir ficheros de su elección mediante un argumento de URL en el argumento FtpConnect y un argumento de fichero objetivo en el método FtpDownloadFile. NOTA: esto puede ser aprovechado para ejecutar código al escribir el fichero en una carpeta de inicio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edraw:pdf_viewer_component:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.0",
            "matchCriteriaId" : "836CE22D-C8EE-4B48-99EA-9EE126E16092"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-06/0198.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35509",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-06/0198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2170",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-23T16:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0 before 1.0.12 and 1.1 before 1.1.5 allow remote attackers to inject arbitrary web script or HTML via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en Mahara v1.0 antes de v1.0.12 y v1.1 antes de v1.1.5 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B49D797-AF1B-4F7E-A71D-AABD0F802912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18048333-3E64-4AB4-9F20-2B1B8E7AB9FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68167317-977B-48EE-9320-2A4539A93B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB25DF09-D88F-4633-9956-D64E3497153F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32430EE-5F2B-4936-A297-2DF55CC22937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC0259C-E628-4BBA-9D97-41A130B1E741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "974F2D63-488C-41D7-A627-BF9B085A8D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26420D4-20D8-4D6D-88B5-C74F39B88720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321475F4-1548-4FD1-BED9-12D944388FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F37005DE-BB31-4738-AC49-C3C2022AE8F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA6F03B-F449-424E-A856-5BE5FB98814F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFDC009-9CEB-450C-8704-CA73B147F220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199ABBC1-BBAC-41BA-B70F-7B95C99D9B0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831676A2-1A33-4605-A5F4-97FAC8A1BB18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "84652E40-1C88-438D-BCA1-4FF4C069F9AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "08F53776-5F58-4C20-8FE7-9DF06F1704A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D55D2C-E6E5-44A4-831A-3EAE5C1568CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "79228F92-00A8-4B74-A914-11BDF9641F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "9EEB3BF7-C4D3-4BB8-893F-B0FE252F0405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE91ED4-EA2A-4402-813C-1A2E5B10EA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "F7FB1F02-A03F-45E5-8D26-C007C10EE97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A09C63AC-15A8-4722-B18E-98A86EC8A856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "62452677-EE4C-4E5E-9DD2-D11C4211DA54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDC6F32-24C0-4B5E-8338-FF85B0BBF801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92848F08-EBFC-4579-A088-EC15D0B3EE48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97D8A87-390E-45AC-B1B0-CFD63C7F07E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894C07CE-BDF4-4652-9591-6DB6877582F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mahara.org/interaction/forum/topic.php?id=752",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://mahara.org/interaction/forum/topic.php?id=752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2171",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-23T16:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact."
      }, {
        "lang" : "es",
        "value" : "Mahara v1.1 antes de v1.1.5 no realiza comprobaciones de permisos al guardar una vista que contiene objetos, lo que permite a los usuarios remotos autenticados leer el objeto de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199ABBC1-BBAC-41BA-B70F-7B95C99D9B0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDC6F32-24C0-4B5E-8338-FF85B0BBF801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92848F08-EBFC-4579-A088-EC15D0B3EE48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97D8A87-390E-45AC-B1B0-CFD63C7F07E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894C07CE-BDF4-4652-9591-6DB6877582F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mahara.org/interaction/forum/topic.php?id=753",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://mahara.org/interaction/forum/topic.php?id=753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0690",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-06-23T21:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 (aka JPX) stream, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an out-of-bounds read."
      }, {
        "lang" : "es",
        "value" : "El complemento Foxit JPEG2000/JBIG2 Decoder antes de v2.0.2009.616 para Foxit Reader 3.0 antes de Build1817 no gestiona correctamente un valor negativo para la posición del octeto del stream en un flujo JPEG2000 (alias JPX), lo que permite a atacantes remotos provocar una denegación de servicio (mediante corrupción memoria y bloqueo de la aplicación) o posiblemente ejecutar código arbitrario a través de un archivo PDF modificado que provoca una lectura fuera de límite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30CB7169-357B-42FB-B680-044883A8D9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:3.0.2009.1301:*:*:*:*:*:*:*",
            "matchCriteriaId" : "913B8A86-09E0-4213-9111-6645064879C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:jpeg2000\\/jbig2_decoder_add-on:2.0.2009.303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91BF8C8A-A14F-4566-A0AE-C8D5C8B8D892"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35512",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022425",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.foxitsoftware.com/pdf/reader/security.htm#0602",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/251793",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35442",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1640",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.foxitsoftware.com/pdf/reader/security.htm#0602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/251793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0691",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-06-23T21:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) header, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an invalid memory access."
      }, {
        "lang" : "es",
        "value" : "El complemento Foxit JPEG2000/JBIG2 Decoder antes de v2.0.2009.616 para Foxit Reader 3.0 antes de Build1817 no gestiona correctamente un error fatal durante la decodificación de una cabecera JPEG2000 (alias JPX), lo que permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y bloqueo de la aplicación) o posiblemente ejecutar código arbitrario a través de un archivo PDF modificado que provoca un acceso a memoria no válida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:jpeg2000_jbig2_decoder_add-on:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.2009.303",
            "matchCriteriaId" : "E502CF3B-1F4E-46A7-902F-8039BB8B590F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30CB7169-357B-42FB-B680-044883A8D9D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35512",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022425",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.foxitsoftware.com/pdf/reader/security.htm#0602",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/251793",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35443",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1640",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.foxitsoftware.com/pdf/reader/security.htm#0602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/251793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2121",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-23T21:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the browser kernel in Google Chrome before 2.0.172.33 allows remote HTTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted response."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el núcleo del navegador en Google Chrome en versiones anteriores a la v2.0.172.33 permite a los servidores HTTP remotos causar una denegación de servicio (mediante caida de la aplicación) o posiblemente ejecutar código arbitrario a través de una respuesta HTTP modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.172",
            "matchCriteriaId" : "CB4CEFCB-98C7-4061-8199-C72EA4120614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8FF77A-7802-4963-B532-3F16C7BB012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73576CF-76EE-42A3-9955-D7991384B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4C0D93-0308-48D4-A953-9398B88E2868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5094C4-1338-4189-B5FD-C9AFFF091D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F95770-F36F-43C0-986F-5C819648271E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCE1FD3-8D27-4304-97F9-6F9689F2498D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6CA696-49AA-4445-B978-96C1D8CE58DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CFA3BF-6C07-448B-8C83-AD4C524A6577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8497F93-D88A-4FFA-B988-7210608530A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=14508",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/06/stable-beta-update-security-fix.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35548",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=14508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/06/stable-beta-update-security-fix.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2172",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-23T21:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in forum/radioandtv.php in the Radio and TV Player addon for vBulletin allows remote registered users to inject arbitrary web script or HTML via the station parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en forum/radioandtv.php en el complemento reproductor de radio y televisión para vBulletin permite inyectar HTML o scripts Web arbitrarios a los usuarios registrados remotos a través del parámetro 'station'."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dream:radio_and_tv_player_addon_for_vbulletin:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8992264D-B8D3-4BB0-994F-59B5F5274A6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4628EC50-A591-4A9B-8E62-70D8A0865CCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-23T21:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LAN game feature in Carom3D 5.06 allows remote authenticated users to cause a denial of service (application hang) via a crafted HTTP request to TCP port 28012."
      }, {
        "lang" : "es",
        "value" : "La característica de juego en red en Carom3D v5.06 permite a usuarios remotos autenticados causar una denegación de servicio (mediante bloqueo de la aplicación) a través de una petición HTTP modificada al puerto TCP 28012."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gameis:carom3d:5.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA00A010-1E6A-47E8-A84B-B1FD9CBB8737"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-23T21:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GUPnP 0.12.7 allows remote attackers to cause a denial of service (crash) via an empty (1) subscription or (2) control message."
      }, {
        "lang" : "es",
        "value" : "GUPnP v0.12.7 permite a atacantes remotos provocar una denegación de servicio (con caída de la aplicación) a través de un mensaje vacío (1) de suscripción (2) o de control."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gupnp:gupnp:0.12.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9E729A-3113-4D05-9F5A-5F45D0A3E779"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.openedhand.com/show_bug.cgi?id=1604",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://git.gupnp.org/cgit.cgi?url=gupnp/tree/NEWS&id=ce714a6700ce03953a2886a66ec57db59205f4e6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35472",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35482",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55128",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35390",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1597",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00494.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00607.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugzilla.openedhand.com/show_bug.cgi?id=1604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://git.gupnp.org/cgit.cgi?url=gupnp/tree/NEWS&id=ce714a6700ce03953a2886a66ec57db59205f4e6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00494.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00607.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-23T21:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the flattenIncrementally function in flatten.c in xcftools 1.0.4, as reachable from the (1) xcf2pnm and (2) xcf2png utilities, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted image that causes a conversion to a location \"above or to the left of the canvas.\" NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región stack de la memoria en la función flattenIncrementally en el archivo flatten.c en xcftools versión 1.0.4, al ser accesible desde (1) xcf2pnm y (2) xcf2png, permite a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de una imagen creada que genera una conversión a una ubicación \"above or to the left of the canvas.\" NOTA: algunos de estos detalles se obtienen a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:henning_makholm:xcftools:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22ACF73C-8990-4AAC-A613-4419EAA3D08E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=533361",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050526.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050542.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050562.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35397",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/43883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1638",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=533361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050542.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050562.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/43883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-23T21:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) list parameter to code/confirm.php and the (2) template parameter to code/display.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en fuzzylime (cms) v3.03a y anteriores, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos incluir y ejecutar archivos locales a través de secuencias de salto de directorio en (1) la lista de parámetros de code/confirm.php y (2) el parámetro de template de code/display.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzylime:fuzzylime_cms:3.03a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFDACDE-0390-42CE-B363-E38D99EB687B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35489",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35418",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-23T21:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "code/display.php in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to conduct directory traversal attacks and overwrite arbitrary files via a \"....//\" (dot dot) in the s parameter, which is collapsed into a \"../\" value."
      }, {
        "lang" : "es",
        "value" : "El archivo code/display.php en fuzzylime (cms) versiones 3.03a y anteriores, cuando magic_quotes_gpc está desactivado, permite a los atacantes remotos conducir ataques de salto de directorio y sobrescribir archivos arbitrarios por medio de un \"....//\" (punto punto) en el parámetro s, que se contrae en un valor \"../\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzylime:fuzzylime_cms:3.03a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFDACDE-0390-42CE-B363-E38D99EB687B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35489",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35418",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-23T21:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in website.php in phpDatingClub 3.7 allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en website.php en phpDatingClub v3.7 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro 'page'."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w2b:phpdatingclub:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB52A6F3-E7B8-4094-B4BA-B94367FA2B2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-23T21:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in phpDatingClub 3.7 allows remote attackers to execute arbitrary SQL commands via the sform[day] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en search.php en phpDatingClub v3.7 permite a atacantes remotos ejecutar comandos SQL a través del parámetro sform[day] ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w2b:phpdatingclub:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB52A6F3-E7B8-4094-B4BA-B94367FA2B2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-23T21:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) absolute path in the file parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en upfiles/index.php en PC4 Uploader v10.0 y anteriores permite a atacantes remotos leer ficheros arbitrarios a través de (1) un .. (punto punto) o (2) una ruta absoluta en el parámetro 'file'."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pc4arb:pc4_uploader:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51235AF-1AB0-4482-9B27-7FA7200C6613"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-23T21:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the listbasedir parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en admin-files/templates/list_dir.php en Campsite v3.3.0 RC1 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro listbasedir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campware.org:campsite:3.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1531D980-977D-4077-9D37-0F7ACBD19CD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-23T21:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) ad_popup.php, (2) camp_html.php, (3) init_content.php, (4) logout.php, (5) menu.php, and (6) set-author.php in admin-files/; (7) conf/liveuser_configuration.php; (8) include/phorum_load.php; (9) CommandProcessor.php and (10) index.php in admin-files/article_import; and (11) add.php, (12) add_move.php, (13) autopublish.php, and (14) autopublish_del.php in admin-files/articles/."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de inclusión remota de fichero PHP en Campsite v3.3.0 RC1 permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro GLOBALS [g_campsiteDir] en (1) ad_popup.php, (2) camp_html.php, (3) init_content.php, (4) logout.php, (5) menu.php, y (6), set-author.php en admin-files/; (7) conf/liveuser_configuration.php; (8) include/phorum_load.php; ( 9) CommandProcessor.php; (10) index.php en admin-files/article_import;  (11) add.php, (12) add_move.php, (13) autopublish.php, y (14) autopublish_del.php en admin-files/articles/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campware.org:campsite:3.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1531D980-977D-4077-9D37-0F7ACBD19CD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/8995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-23T21:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the GLOBALS[g_campsiteDir] parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en admin-files/ad.php en Campsite v3.3.0 RC1 permite a atacantes remotos leer y posiblemente ejecutar archivos locales a través de un .. (punto punto) en el parámetro GLOBALS [g_campsiteDir]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campware.org:campsite:3.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1531D980-977D-4077-9D37-0F7ACBD19CD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-23T21:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to read arbitrary files via an encoded \"/\" (slash) in the file parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de ruta (path) absoluta en el archivo forcedownload.php en Media Photo Host de Gravy versión 1.0.8, permite a los atacantes remotos leer archivos arbitrarios por medio de una \"/\" (barra diagonal) codificada en el parámetro file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gravy-media:media_photo_host:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199F8355-A209-4F49-95BA-72405207A0B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T01:30:01.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3, and the Feature Pack for Web Services for WAS 6.1 before 6.1.0.25, when a WS-Security policy is established at the operation level, does not properly handle inbound requests that lack a SOAPAction or WS-Addressing Action, which allows remote attackers to bypass intended access restrictions via a crafted request to a JAX-WS application."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server (WAS) v7.0 anterior a v7.0.0.3, y el Pack de características para Web Services para WAS v6.1 anterior a v6.1.0.25, cuando una política WS-Security está establecida en el nivel de operación, no maneja adecuadamente peticiones de entrada que carecen de una acción SOAPAction o WS-Addressing, lo que permite a atacantes remotos saltar las restricciones de acceso previstas a través de una petición manipulada para una aplicación JAX-WS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95255265-6D69-46D3-9FFA-8EDB1734375C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4191D3-64AB-482C-9DEF-DD04C4C942CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD75308-7F21-4DDF-AD66-C155CF4B721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C250D-8279-4071-871C-1C7C4DE09B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC300B03-7A8F-4E96-B55D-18CC258BBFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C8054A-8581-4936-AF94-291AE56EB4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026EBFCD-0BC1-404B-BC14-292F35BE667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D74F8-4321-48B3-A33E-FCCFA93013CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2043B836-3950-46A1-89E4-08985DEA0D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B009FD6-9352-4329-B67A-8155FB379889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108457A-50DC-4432-9E30-98ADBEBF2389"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK72138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK81944",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK87767",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK72138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK81944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK87767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1163",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-06-25T01:30:01.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak on the Cisco Physical Access Gateway with software before 1.1 allows remote attackers to cause a denial of service (memory consumption) via unspecified TCP packets."
      }, {
        "lang" : "es",
        "value" : "Fuga de memoria en Cisco Physical Access Gateway con software anterior a v1.1 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de paquetes TCP sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:physical_access_gateway:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "3C46DA7F-B8BC-4552-9CE0-8BA640713378"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad0fb2.html",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8b.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35477",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022444",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad0fb2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8b.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T01:30:01.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Adobe Shockwave Player before 11.5.0.600 allows remote attackers to execute arbitrary code via crafted Shockwave Player 10 content."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Adobe Shockwave Player anterior a v11.5.0.600 permite a atacantes remotos ejecutar código de su elección a través de contenido Shockwave Player 10 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.5.0.596",
            "matchCriteriaId" : "2ACBD5E4-ED8C-4CCB-B71F-96F1B3B8CF20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA5643BC-12F8-4F05-A363-9FC97EF1DD0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085FA7DD-8048-4768-816C-82828022FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0DC258D-1C2B-4A7F-AD80-6C88A7A78A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966A8542-E5E1-468F-989E-47F71123A426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC1BCC0-B24B-4CFC-B3B9-FA3B0D968CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFDAAB3-CC22-4604-80B3-4A54CCEFD29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77F1733-6755-44E7-8ECC-CFB397FC79A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC55CB2C-4DBC-4D16-96A7-FB3316A21D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F5982F-35BD-49A0-9DBE-774816136D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18289BB-6568-4671-BC70-C8744DD2E0C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61B9485-2A42-4C95-9A10-3F1102E4EBBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35544",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-08.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1886",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-25T01:30:01.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers to execute arbitrary code via format string specifiers in a filename."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de formato de cadena en client/client.c en smbclient en Samba v3.2.0 hasta v3.2.12 podría permitir dependiendo del contexto a atacantes ejecutar código de su elección a través del formato de cadena especificado en un nombre de fichero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44746973-3CFD-4808-9545-755E296EFF6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E4627C-5D19-4599-B304-D0E4D4193170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE162A7-969D-44D5-B9ED-764F20F19C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DF45AE-DF03-4321-A019-D3BBC16433B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D87AD2-89F2-455F-916E-D404E6BD02C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6218AB51-DE71-40F3-8CBC-AF33586D36EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02F8427-0DCC-48A9-A04F-939571D511E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AEDE0A-B15C-4B0B-AFE9-4F96E5F71429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8A9943-6949-4B0A-9864-8B4696704098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1D6FEB-A3C8-41D1-B222-3AD11DB9C4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4970BB40-085C-4069-B6F1-7E3726F1CFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1E6CDA-36BF-4374-BBDF-B6DD52598AA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA43C063-EBE1-4C61-9C9E-C84C3A594A52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35539",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35573",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35606",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36918",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:196",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1886.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.samba.org/samba/security/CVE-2009-1886.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35472",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022441",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-839-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1664",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.samba.org/show_bug.cgi?id=6478",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51328",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1886.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.samba.org/samba/security/CVE-2009-1886.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-839-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.samba.org/show_bug.cgi?id=6478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of samba as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
        "lastModified" : "2009-06-29T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1888",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-25T01:30:01.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory."
      }, {
        "lang" : "es",
        "value" : "La función acl_group_override en smbd/posix_acls.c en smbd en Samba v3.0.x anterior a v3.0.35, v3.1.x y v3.2.x anterior a v3.2.13, y v3.3.x anterior 3.3.6, cuando el modo de fichero dos está habilitado, permite a atacantes remotos modificar la lista de control de acceso para ficheros a través de vectores relacionados con acceso de lectura a memoria sin inicializar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.31",
            "versionEndIncluding" : "3.0.35",
            "matchCriteriaId" : "EC3937D6-7AD9-4319-92E9-C6A01927A167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.13",
            "matchCriteriaId" : "0D1C58C8-7E57-4C73-9C6D-5A8512A31276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndExcluding" : "3.3.6",
            "matchCriteriaId" : "2425AB5F-EB80-45AF-88CA-4A1A29824BF4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35539",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35573",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35606",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36918",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0145",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1823",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:196",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.samba.org/samba/ftp/patches/security/samba-3.0.34-CVE-2009-1888.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1888.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.samba.org/samba/ftp/patches/security/samba-3.3.5-CVE-2009-1888.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.samba.org/samba/security/CVE-2009-1888.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507856/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35472",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022442",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-839-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1664",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51327",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10790",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7292",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.samba.org/samba/ftp/patches/security/samba-3.0.34-CVE-2009-1888.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1888.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.samba.org/samba/ftp/patches/security/samba-3.3.5-CVE-2009-1888.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.samba.org/samba/security/CVE-2009-1888.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507856/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-839-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect Red Hat Enterprise Linux 3.\n\nIt was addressed in Red Hat Enterprise Linux 4 and 5 via RHSA-2009:1529:\nhttps://rhn.redhat.com/errata/RHSA-2009-1529.html\n",
        "lastModified" : "2009-10-27T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2045",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-06-25T01:30:01.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cisco Video Surveillance Stream Manager firmware before 5.3, as used on Cisco Video Surveillance Services Platforms and Video Surveillance Integrated Services Platforms, allows remote attackers to cause a denial of service (reboot) via a malformed payload in a UDP packet to port 37000, related to the xvcrman process, aka Bug ID CSCsj47924."
      }, {
        "lang" : "es",
        "value" : "El firmware de Cisco Video Surveillance Stream Manager anterior a v5.3, utilizado en Cisco Video Surveillance Services Platforms y Video Surveillance Integrated Services Platforms, permite a atacantes remotos provocar una denegación de servicio (reinicio) a través de una carga útil mal formada en un paquete UDP al puerto 37000, relacionada con el proceso xvcrman, también conocido como Bug ID CSCsj47924."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:video_surveillance_stream_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "CFAE3825-B3DD-42C9-83A5-B26194C9A3AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:video_surveillance_stream_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D063112-AD7E-44C9-BF8E-2DD6DCD3DF50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:video_surveillance_stream_manager:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52D0F1B-08C7-40D3-A94E-2DDB5FFB86EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_integrated_services_platform:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6A05B20-2E02-497F-9599-2D96549B0236"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad1002.html",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8f.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022446",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad1002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8f.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2046",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-06-25T01:30:01.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The embedded web server on the Cisco Video Surveillance 2500 Series IP Camera with firmware before 2.1 allows remote attackers to read arbitrary files via a (1) http or (2) https request, related to the (a) SD Camera Web Server and the (b) Wireless Camera HTTP Server, aka Bug IDs CSCsu05515 and CSCsr96497."
      }, {
        "lang" : "es",
        "value" : "El servidor Web embebido en la cámara IP de Cisco Video Surveillance 2500 Series con firmware anterior a v2.1 permite a atacantes remotos leer ficheros de su elección a través una petición (1) http o (2) https, relacionada con el (a) Servidor Web de cámara SD (b) Servidor HTTP de cámara inalámbrica, también conocido como Bug IDs CSCsu05515 y CSCsr96497."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_2500_series_ip_camera:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "83469337-0A72-443E-84E9-F58F1741B7CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad1002.html",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8f.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35478",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022445",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad1002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8f.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T01:30:01.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Adobe Shockwave Player before 11.0.0.465 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2009-1860, related to an older issue that \"was previously resolved in Shockwave Player 11.0.0.465.\""
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad no especificada en Adobe Shockwave Player anterior a la versión 11.0.0.465 permite que los atacantes remotos ejecuten código arbitrario por medio de vectores desconocidos, una vulnerabilidad diferente de CVE-2009-1860, relacionada con un problema anterior que \"was previously resolved in Shockwave Player 11.0.0.465.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.0.456",
            "matchCriteriaId" : "849BA45D-66E6-495A-B81C-22B49B59212C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA5643BC-12F8-4F05-A363-9FC97EF1DD0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085FA7DD-8048-4768-816C-82828022FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0DC258D-1C2B-4A7F-AD80-6C88A7A78A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966A8542-E5E1-468F-989E-47F71123A426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC1BCC0-B24B-4CFC-B3B9-FA3B0D968CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFDAAB3-CC22-4604-80B3-4A54CCEFD29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77F1733-6755-44E7-8ECC-CFB397FC79A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC55CB2C-4DBC-4D16-96A7-FB3316A21D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F5982F-35BD-49A0-9DBE-774816136D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18289BB-6568-4671-BC70-C8744DD2E0C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-08.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T01:30:01.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple memory leaks in the (1) IP and (2) IPv6 multicast implementation in the kernel in Sun Solaris 10, and OpenSolaris snv_67 through snv_93, allow local users to cause a denial of service (memory consumption) via vectors related to the association of (a) DL_ENABMULTI_REQ and (b) DL_DISABMULTI_REQ messages with ARP messages."
      }, {
        "lang" : "es",
        "value" : "Múltiples fugas de memoria en el (1) IP e (2) implementación de multidifución IPv6 en el Kernel en Sun Solaris v10, y OpenSolaris snv_67 hasta snv_93, permite a usuarios locales provocar una denegación de servicio (consumo de memoria) a través de vectores relacionados con la asociación de mensajes ARP con mensajes (a) DL_ENABMULTI_REQ  y (b) DL_DISABMULTI_REQ"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.opensolaris.org/view_bug.do?bug_id=6709252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.opensolaris.org/view_bug.do?bug_id=6731600",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35552",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-262408-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35474",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.opensolaris.org/view_bug.do?bug_id=6709252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.opensolaris.org/view_bug.do?bug_id=6731600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-262408-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T02:00:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before 4.2.16, and 4.3 before 4.3.2; and (b) openSwan 2.6 before 2.6.22 and 2.4 before 2.4.15 allows remote attackers to cause a denial of service (pluto IKE daemon crash) via an X.509 certificate with (1) crafted Relative Distinguished Names (RDNs), (2) a crafted UTCTIME string, or (3) a crafted GENERALIZEDTIME string."
      }, {
        "lang" : "es",
        "value" : "El analizador ASN.1 pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) en (a) strongSwan v2.8 anterior a v2.8.10, v4.2 anterior a v4.2.16, y v4.3 anterior a v4.3.2; y  (b) openSwan v2.6 anterior a v2.6.22 y v2.4 anterior a v2.4.15 permite a atacantes remotos provocar una denegación de servicio (caída del demonio IKE pluto) a través de un certificado X.509 con (1) Nombres Caracterizados Relativos (RDNs) (2) una cadena UTCTIME manipulada, o (3) una cadena GENERALIZEDTIME manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5518A917-D5D1-4985-BF71-B1A34BD3D5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778D7442-F54A-47DF-B87B-3CFA3CF08799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4B1F28-B3B8-4E31-8E4E-25F5A29F3AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16984E6E-7CA8-4DC3-B800-FFE007617FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C85F0BE-7E89-4B79-A036-9238785BE705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFF4780-2F92-4DF3-878A-C7E2BD57E39C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C794994-9367-4BBB-8940-BBB44B7C1C5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082272D3-0FE4-4959-978A-FFF795B52CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFEF9B3-C7F7-4588-A174-FAFD39C04116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A38BCE-66F9-49F9-8C48-DB3DA9E7054D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E18EB62-1042-4F26-9EC3-B7EEA2182716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89C6007-3A8D-427D-8BE3-047DD52DE196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97027262-849C-4DE9-90C9-0D9FBBC9F96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8658539D-27D8-47EE-9468-A6B625E6D45F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89ACA351-D10F-4D1A-95B0-4B2E329F1E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4D6E89-5313-4016-8A7E-036579330DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A8E226-FCEC-4545-A628-24F5A8103BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B944D80-A8B9-4034-A95B-BA92ADC8D4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5267BCC-A51C-4F3B-840C-49EF9C2A15F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CDCDB4B-2DF5-4394-B33A-08A4B6604D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66206A52-373C-4DBB-A3D7-2A7569C0181E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F654D3C4-D3A3-41E1-A0D8-3A384319AE08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F9E10-000D-4F3B-BEA6-DEE87405B89B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F37DFE8-2996-4904-B733-7BAECA95CB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38209DC9-3BE6-49EF-8BA1-6E2BC5D24FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155EB8F5-7C3C-4293-91EE-62DA561DA54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42B67A3-8650-426F-A8E8-DCA4180D787A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21CDA326-C5E4-4BAF-9DC6-4E5A57304C1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C0CAE-8AC3-47AA-9F1C-9DE6779CA583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00BC4DA6-BFD1-43CF-B8B8-DACBF09E4721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7841F42-1226-43C4-A007-88847925D872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77930F86-13FF-4787-A39F-2D00110AFBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B1ADD64-2503-4EED-9F6F-E425A3406123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3067BE9-4314-42BD-8131-89C4899F7D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00CA6E5-1F63-4D59-BA72-0F8697671718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35A2049-8502-41F2-894E-E39AEBEB6816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD82E956-8C8E-4B38-9E82-4AA9AEFE6891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0F0EA4-A0DF-48CC-9B42-465A36945503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78325087-599F-448B-8C47-570914FF6C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059CFA5C-B262-47AF-94A6-8E74AFB19204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12F25627-235B-4312-80A4-4E36DE0E72A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E70B88-6348-42BB-AE96-46BDB1F3C6FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A9DF25-48E8-4D52-A267-1BE0437E9000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C986533F-E320-46FA-A9F7-DAFDB1A0628A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C77DED4-2696-4172-92B7-43034E61F845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EDCCFDA-99A8-4590-99F1-95F3A5AD70B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1BA7D-B603-49D4-9080-4A9FEC056A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8EB86B-2DD9-4C4B-9C9A-E88B2C458C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207B98DB-5962-4F62-AF5B-D48EF0C0E2A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB65639-AE3A-4984-93F9-2A8100DCEE6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8921D08-FBA3-4C0A-8944-362909C5EB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FBD5312-E44F-4996-AA29-AFED53A90E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B24C96-47DF-4FA2-8DF4-8241F4964F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5067B83-AB9E-4819-B5A2-B14A96EB54C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773B9BB2-0F65-4604-AF2C-8AC396DDC094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xelerance:openswan:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA892169-0079-48D9-AEF5-641748CE1BF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.strongswan.org/CHANGES2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://download.strongswan.org/CHANGES4.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://download.strongswan.org/CHANGES42.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35522",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://up2date.astaro.com/2009/07/up2date_7404_released.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ingate.com/Relnote.php?ver=481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1138.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35452",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1639",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00264.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00337.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://download.strongswan.org/CHANGES2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://download.strongswan.org/CHANGES4.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://download.strongswan.org/CHANGES42.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://up2date.astaro.com/2009/07/up2date_7404_released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ingate.com/Relnote.php?ver=481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1138.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00264.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00337.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T02:00:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by modifying the MTU."
      }, {
        "lang" : "es",
        "value" : "FreeBSD v6.3, v6.4, v7.1, y v7.2 no respeta los permisos sobre SIOCSIFINFO_IN6 IOCTL, lo que permite a usuarios locales modificar o deshabilitar interfaces de red IPv6, como se ha desmostrado modificando el MTU."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F702C46F-CA02-4FA2-B7D6-C61C2C095679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.3:release_p10:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1D9D46-75E4-4742-9CF3-2B063B6B7504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.3:release_p11:*:*:*:*:*:*",
            "matchCriteriaId" : "14C10691-0BAB-45EF-9050-BED05B70660F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.3:release_p6:*:*:*:*:*:*",
            "matchCriteriaId" : "311F47DD-E224-4E10-A767-79B2B4B33023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.3:release_p8:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D1E2AB-5AA2-403F-B547-44747B50C970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.3:release_p9:*:*:*:*:*:*",
            "matchCriteriaId" : "E9738883-5FB9-4261-9388-D01660ED64DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.3_releng:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C2BE9D-91E1-48E9-9326-39CF583A57E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F7F02A-C845-40BF-8490-510A070000F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:release:*:*:*:*:*:*",
            "matchCriteriaId" : "53D1AD5E-4007-4AFA-A18B-69D1AC055C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:release_p2:*:*:*:*:*:*",
            "matchCriteriaId" : "06BFEE54-DBF3-4546-AE57-2C25FC9F0F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:release_p3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1FC1A8-E499-45A0-B89A-5BFA24727DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:release_p4:*:*:*:*:*:*",
            "matchCriteriaId" : "8E08DCB9-9064-4DB7-B43A-7B415882EB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:release_p5:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A5E6FF-617E-4173-A948-F3728454A012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "06FB0EEA-254E-4A1F-99E7-058FCD518E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803EFA9F-B7CB-4511-B1C1-381170CA9A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "14D72C9B-EEB0-4605-BEA2-F77092129245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "52DBF406-9C77-4DDA-AB7D-40FAE40023D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:release-p1:*:*:*:*:*:*",
            "matchCriteriaId" : "20A31C9A-A928-4C9B-BB49-0E53227746DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:release-p2:*:*:*:*:*:*",
            "matchCriteriaId" : "99FB7443-F942-402A-9104-64677EAF014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:release-p4:*:*:*:*:*:*",
            "matchCriteriaId" : "305A4C3D-C63D-4D1F-80FF-549182A0D9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:release-p5:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A31704-E99F-4DBE-ABA4-EC3E566DE6CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:release-p6:*:*:*:*:*:*",
            "matchCriteriaId" : "E634CDF4-F77B-4917-A452-907A771B5B0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.1:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A75104-5A3E-485E-B4EC-0873C942731C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F948527C-A01E-4315-80B6-47FACE18A34F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.2:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "8B573401-DC6F-4AFE-92F5-D96F785D2107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.2:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "60D40129-108B-421B-9990-6C6F381C96AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35410",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.FreeBSD.org/advisories/FreeBSD-SA-09:10.ipv6.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35285",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.FreeBSD.org/advisories/FreeBSD-SA-09:10.ipv6.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T02:00:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in rscms_mod_newsview.php in RS-CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the key parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en rscms_mod_newsview.php en RS-CMS v2.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro Key."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rs-cms:rs-cms:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B966F2A9-74A3-4239-A9F0-16C1288268F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1658",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T17:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass a DOM wrapper and conduct cross-site scripting (XSS) attacks by setting CSCO_WebVPN['process'] to the name of a crafted function, aka Bug ID CSCsy80694."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección \"Eval\" en la función csco_wrap_js en /+CSCOL+/cte.js en WebVPN en los dispositivos Cisco Adaptive Security Appliances (ASA) con software 8.0(4), 8.1.2, y 8.2.1, permite a atacantes remotos eludir un envoltorio (wrapper) DOM y realizar  ataques de secuencias de comandos en sitios cruzados (XSS) configurando el valor CSCO_WebVPN['process'] con el nombre de la función modificada, alias Bug ID CSCsy80694."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:adaptive_security_appliance:8.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "98CBFBF5-966C-48E8-BAFB-DED4E58098F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:adaptive_security_appliance:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BC5744-8EB0-4BE3-A743-E95BCD6E2CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:adaptive_security_appliance:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7853F676-A9A4-4980-B698-19C60F4DD71F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D80DB80-F243-469B-993F-E368B092B3C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504516/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35476",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.trustwave.com/spiderlabs/advisories/TWSL2009-002.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504516/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.trustwave.com/spiderlabs/advisories/TWSL2009-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T17:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting, and conduct cross-site scripting (XSS) attacks, by modifying the first hex-encoded character in a /+CSCO+ URI, aka Bug ID CSCsy80705."
      }, {
        "lang" : "es",
        "value" : "WebVPN en los dispositivos Cisco Adaptive Security Appliances (ASA) con software 8.0(4), 8.1.2, y 8.2.1 permite a atacantes remotos eludir ciertos mecanismos de protección que impliquen la reescritura de URL y HTML y realizar ataques de secuencias de comandos en sitios cruzados (XSS) modificando el primer carácter codificado hexadecimal en una URI /+CSCO+, alias Bug ID CSCsy80705."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:adaptive_security_appliance:8.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "98CBFBF5-966C-48E8-BAFB-DED4E58098F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:adaptive_security_appliance:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BC5744-8EB0-4BE3-A743-E95BCD6E2CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:adaptive_security_appliance:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7853F676-A9A4-4980-B698-19C60F4DD71F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D80DB80-F243-469B-993F-E368B092B3C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504516/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504516/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T17:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party (1) FTP and (2) CIFS servers, which makes it easier for remote attackers to trick a user into sending WebVPN credentials to an arbitrary server via a URL associated with that server, aka Bug ID CSCsy80709."
      }, {
        "lang" : "es",
        "value" : "WebVPN en los dispositivos Cisco Adaptive Security Appliances (ASA) con software 8.0(4), 8.1.2, y 8.2.1 no distingue de manera apropiada su propia pantalla de login de las pantallas de login que produce para servidores (1) FTP and (2) CIFS de terceros, lo que facilita a atacantes remotos engañar a un usuario enviándole credenciales WebVPN para un servidor de su elección mediante una URL asociada con este servidor, alias Bug ID CSCsy80709."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:adaptive_security_appliance:8.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "98CBFBF5-966C-48E8-BAFB-DED4E58098F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:adaptive_security_appliance:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BC5744-8EB0-4BE3-A743-E95BCD6E2CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:adaptive_security_appliance:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7853F676-A9A4-4980-B698-19C60F4DD71F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D80DB80-F243-469B-993F-E368B092B3C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504516/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35475",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504516/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T17:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type."
      }, {
        "lang" : "es",
        "value" : "Mozilla Thunderbird en versiones anteriores a la 2.0.0.22 y SeaMonkey en versiones anteriores a la 1.1.17 permiten a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o posiblemente ejecutar código de su elección mediante mensaje de correo eléctronico multipart/alternative que contenga una parte text/enhanced que dispara el acceso a un tipo de objeto incorrecto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.16",
            "matchCriteriaId" : "DE872814-DA94-417A-99E4-0E01E4554E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4A97B6E1-EABA-4977-A3FC-64DF0392AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D33486-4956-4E2C-BA16-FA269A9D02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E99882-786F-455F-BAC4-30716120964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A3468-C3BF-417B-85FB-18C28F0765B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFFBC58-ACD2-449D-B010-5026D6022F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EED5D2-EC40-4253-991B-0C746FBEF6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DD17EC-99EB-46C1-98E9-16A2EDB8E224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF89719E-C415-45A3-A1CC-FAFDFCAE3055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.21",
            "matchCriteriaId" : "E03AD36E-7C5B-4A60-AE19-29F3AF780333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0618BD26-0EF5-4774-9131-B5ABD4CD302A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D604DAE-DF63-413C-9F49-FFC8E84699F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE6185-09F4-48E3-9742-F9D8030B5774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E565E5-286D-4A68-B085-5659DFE59A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F0C73F-291F-4A92-87B8-2269B5C1516D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938B1260-74A7-4CFF-8086-415DCC284430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28672BA-E3C2-40C3-80E1-95B7CDD089E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9308147C-0A23-48BC-BFA9-A49B9D73014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD8DCC-DBB4-40EE-927C-7B0969700077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F9CE47-E3AA-49D7-AEC9-447951AC31E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581615BB-C781-42CA-836E-0E0EAB8C4504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257F43FA-D22C-4BF0-A02E-261A54142BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D291234-D64A-4E8A-A7CD-08BB980E1CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3C27EC-5794-49C1-96E0-997E700B13DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745C2CBA-4824-441B-A6BC-E80959C2E035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6A7D00-A203-4891-96CE-20C91FCBF048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8CB480-0595-4BC1-998E-3638E85DB367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBF526-7A28-436B-9B01-EADE913602B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A0BCE3-38E7-4318-9A7E-3D895171129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2303104C-4A91-4704-A9CB-8C83A859090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF479C3-95A0-414F-B47B-C94BE95713D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48702EEB-C272-46ED-9C61-6F44D6964DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AF48A9-C161-4603-82F0-5D2DE1EBA498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821E46E8-B084-4762-86F0-002CA288B522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A084C258-7D78-4F6D-8E24-00BE9608EBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FEA455-E605-4CE3-A951-760D59091C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1758117-4865-42A4-8110-2250924E21FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81AF4BFB-EC89-454B-89DF-FC8F6102E28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8013986B-DCAF-44A1-BA63-5BBA6762720F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-33.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1134.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35461",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=495057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-33.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1134.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=495057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T17:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el servidor CQWeb en IBM Rational ClearQuest 7.0.0 en versiones anteriores a la 7.0.0.6 y 7.0.1 en versiones anteriores a la 7.0.1.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B059D3-5A21-48FA-8D9D-F0DEB8CBB909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60F687F-99A1-43C2-90F8-6F56265A2E63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "266BE1E1-AD1C-49DD-81C6-4840EE36CDCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "676DB969-3FF3-4EFA-8B50-9753BAC80EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8CE6CA8-1504-46FA-8A36-FFDBD1BBE5B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677DFFEC-D128-4F26-994E-02BBDC2CFA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE76312-2E8E-4559-ACBB-9089B64C6E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBBBF4D-97FD-4DBC-B296-4235BAD38F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "741C008D-917B-44BB-AB20-6A662668B526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E3D80A-849E-4739-8905-373AE0C0189D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4525242E-6B9A-4F6F-B506-93C92958CA41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B52763-5940-4249-BEB4-C14C008DA48E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E2844B-40BA-48F1-8E2E-C0534078D186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB65A10-EE74-43DF-8D05-B39551F57D2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35564",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK77030",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK77030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T17:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows attackers to discover a (1) username or (2) password via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El servidor CQWeb en IBM Rational ClearQuest 7.0.0 en versiones anteriores a la 7.0.0.6 y 7.0.1 en versiones anteriores a la 7.0.1.5 permite a atacantes descubrir el (1) nombre de usuario o (2) la contraseña mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60F687F-99A1-43C2-90F8-6F56265A2E63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "266BE1E1-AD1C-49DD-81C6-4840EE36CDCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "676DB969-3FF3-4EFA-8B50-9753BAC80EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8CE6CA8-1504-46FA-8A36-FFDBD1BBE5B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677DFFEC-D128-4F26-994E-02BBDC2CFA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE76312-2E8E-4559-ACBB-9089B64C6E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBBBF4D-97FD-4DBC-B296-4235BAD38F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E3D80A-849E-4739-8905-373AE0C0189D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4525242E-6B9A-4F6F-B506-93C92958CA41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B52763-5940-4249-BEB4-C14C008DA48E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_clearquest:7.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E2844B-40BA-48F1-8E2E-C0534078D186"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35564",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK77030",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK77030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T23:14:15.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access restrictions."
      }, {
        "lang" : "es",
        "value" : "La configuración por defecto en las características de seguridad globales en el appliance Citrix NetScaler Access Gateway con el firmware Enterprise Edition 9.0, 8.1 y versiones anteriores especifica la opción \"Allow for the Default Authorization Action\" lo que puede permitir a usuarios remotos autenticados evitar las restricciones de acceso previstas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_access_gateway_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.1",
            "matchCriteriaId" : "FD2AF148-E1B5-427B-97E2-AEEC59D72162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_access_gateway_firmware:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA4BFC4-A82E-4820-AB97-2EF9D9EA9276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_access_gateway_firmware:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80F696E-74A8-432C-BA31-6CE158B4DB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD93B7C-E6C1-42F0-8963-C33EF0F6B88D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:citrix:netscaler_access_gateway:-:-:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "4D5D5DFC-F456-4085-BE20-13BD38301B04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.citrix.com/article/CTX118770",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35422",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1641",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51274",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.citrix.com/article/CTX118770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T23:14:15.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Secure Gateway service in Citrix Secure Gateway 3.1 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an unspecified request."
      }, {
        "lang" : "es",
        "value" : "El servicio Secure Gateway en Citrix Secure Gateway v3.1 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (agotamiento de CPU) mediante una petición no especificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:secure_gateway:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "77F094EC-671D-46E0-97BF-D330FF58A3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:secure_gateway:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F461C114-699E-4037-8B9A-B3D8581C5FE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35503",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.citrix.com/article/CTX121172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35421",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022420",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1633",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.citrix.com/article/CTX121172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T23:14:15.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in URD before 0.6.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to the fatal_error page and unspecified other components."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en URD en versiones anteriores a la 0.6.2 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores relacionados con la página fatal_error y otros componentes no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urdland:urd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.1",
            "matchCriteriaId" : "113AA5D5-8DF1-4880-A18C-BE7EA83DF532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urdland:urd:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6C1F38-72E3-4051-936A-EECA2AC2363A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urdland:urd:0.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE325A66-3991-4A29-885D-590CCD969FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urdland:urd:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "657BAA82-CEB4-48A9-9A24-A3BEE90D918E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35540",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=692011",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=692011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T23:14:15.767",
      "lastModified" : "2025-12-16T21:08:04.200",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the URI in a view=advanced request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en CMD_REDIRECT en DirectAdmin v1.33.6 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante la URI en una petición view=advanced."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:directadmin:directadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.33.6",
            "matchCriteriaId" : "3DB74C8D-084E-40AD-8EEA-CA98DBFFF771"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels-team.blogspot.com/2009/06/directadmin-v1336-xss-vuln.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35525",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35450",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1663",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51292",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://pridels-team.blogspot.com/2009/06/directadmin-v1336-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T23:14:15.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in NBBC before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via an invalid URL in a BBCode img tag."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en NBBC en versiones anteriores a la v1.4.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante una URL inválida en una etiqueta img BBCode."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phantom-inker:nbbc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.1",
            "matchCriteriaId" : "1255B632-08A0-442A-8BBC-620BCC22A124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phantom-inker:nbbc:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A379F4E-7FE9-413D-BE4D-737ADC34EBB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phantom-inker:nbbc:1.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "9773626C-373C-421E-A7DC-C830DC70E28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phantom-inker:nbbc:1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F53BA0-50B6-4919-ACCB-5F267D84717E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phantom-inker:nbbc:1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF65D79B-34AA-4E52-B7D3-4E4320D78C2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phantom-inker:nbbc:1.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "B8763967-049B-444D-8E21-F0EE53E9CCC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phantom-inker:nbbc:1.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F7FA9B8D-40B4-4D72-AB5E-E5B492C3F967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phantom-inker:nbbc:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B9A5E01-DB94-40EB-8ED0-92556C92BF6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phantom-inker:nbbc:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "833464F5-DE0D-4449-8BEA-10B20180B9C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phantom-inker:nbbc:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8C0DE3-16AE-400C-BE8C-712051605CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phantom-inker:nbbc:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C12B1AE-8224-46C0-97A6-FA4B4720D471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phantom-inker:nbbc:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C33EB404-D435-4B55-8D09-1F73837E1B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phantom-inker:nbbc:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BC4740-229B-4C02-AED4-06081F091160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phantom-inker:nbbc:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94ACF855-6AA6-4088-BF28-E935EE8B2BAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phantom-inker:nbbc:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923E353-25B8-4DDF-8D25-221A6C0CB155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phantom-inker:nbbc:alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18188783-3F67-4DDB-8136-C5B9F03B1053"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35520",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/message.php?msg_id=7455625",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/forum/message.php?msg_id=7456208",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/?func=detail&aid=2809888&group_id=235382&atid=1096820",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/message.php?msg_id=7455625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/forum/message.php?msg_id=7456208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/?func=detail&aid=2809888&group_id=235382&atid=1096820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T23:14:15.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the home parameter to (1) i_head.php, (2) i_nav.php, (3) user_new_2.php, or (4) house/myrents.php; or (5) allbooks.php, (6) home.php, or (7) mybooks.php in books/.  NOTE: house/myrents.php was also separately reported as a local file inclusion issue."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en phpCollegeExchange 0.1.5c, cuando está habilitado register_globals, permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro home para (1) i_head.php, (2) i_nav.php, (3) user_new_2.php, (4) house/myrents.php, (5) allbooks.php, (6) home.php, o (7) mybooks.php in books/. NOTA: house/myrents.php fue además reportado de manera separada como un problema de inclusión de fichero local."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_degner:phpcollegeexchange:0.1.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF73C771-F42D-4226-9FE2-2533CD969AB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35452",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-25T23:14:15.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HTML via the (1) _SESSION[handle] parameter to (a) home.php, (b) books/allbooks.php, or (c) books/home.php; or the (2) home parameter to (d) i_head.php or (e) i_nav.php, or (f) allbooks.php, (g) home.php, or (h) i_nav.php in books/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en phpCollegeExchange 0.1.5c permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro (1) _SESSION[handle] para (a) home.php, (b) books/allbooks.php, o (c) books/home.php; o el parámetro (2) home para (d) i_head.php (e) i_nav.php, (f) allbooks.php, (g) home.php, o (h) i_nav.php in books/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_degner:phpcollegeexchange:0.1.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF73C771-F42D-4226-9FE2-2533CD969AB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35452",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-26T15:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include and possibly execute arbitrary files via directory traversal sequences in the template_path parameter to (1) masthead.inc.php, (2) toppanel.inc.php, and (3) contact.inc.php in templates/mytribiqsite/tribiq-CL-9000/includes; and the use_template_family parameter to (4) templates/mytribiqsite/tribiq-CL-9000/includes/nlarlist_content.inc.php. NOTE: the tribal-GPL-1066/includes/header.inc.php vector is already covered by CVE-2008-4894."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en Tribiq CMS 5.0.12c, cuando register_globals está activado y magic_quotes_gpc está deshabilitado, permiten a atacantes remotos incluir y posiblemente ejecutar ficheros de su elección mediante secuencias de salto de directorio en el parámetro template_path a (1) masthead.inc.php, (2) toppanel.inc.php y (3) contact.inc.php en templates/mytribiqsite/tribiq-CL-9000/includes; y el parámetro use_template_family a (4) templates/mytribiqsite/tribiq-CL-9000/includes/nlarlist_content.inc.php. NOTA: el vector tribal-GPL-1066/includes/header.inc.php ya ha sido tratado en CVE-2008-4894."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribiq:tribiq_cms:5.0.12c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A3C527-A995-4D59-A24E-ABA925AE0D1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35535",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35484",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-26T15:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en PHP-I-BOARD 1.2 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.s3:php-i-board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "6BA98EB6-4EAF-440E-B295-E1FA8842B07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.s3:php-i-board:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C050F3A-5157-4261-B369-1EE00589ACB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.s3:php-i-board:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA5B33F-CC62-4E84-BAE7-FD4A51B52418"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN20219071/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000045.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://php.s3.to/bbs/bbs8.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35532",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN20219071/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000045.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://php.s3.to/bbs/bbs8.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-26T15:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors, probably related to mail."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en PHP-I-BOARD 1.2 y versiones anteriores permite a atacantes remotos leer ficheros de su elección mediante secuencias de salto de directorio en vectores no especificados, probablemente en relación con el correo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.s3:php-i-board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "6BA98EB6-4EAF-440E-B295-E1FA8842B07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.s3:php-i-board:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C050F3A-5157-4261-B369-1EE00589ACB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.s3:php-i-board:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA5B33F-CC62-4E84-BAE7-FD4A51B52418"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN32788272/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000046.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://php.s3.to/bbs/bbs8.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35532",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN32788272/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000046.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://php.s3.to/bbs/bbs8.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-26T15:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cwd parameter.  NOTE: remote file inclusion attacks may be possible."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en locms/smarty.php en LightOpenCMS 0.1 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro cwd. NOTA: puede ser posible realizar también ataques de inclusión remota de fichero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teozkr:lightopencms:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695282F0-6020-422F-91A0-5CBF944E56BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-26T15:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in ang/shared/flags.php in AN Guestbook 0.7.8, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the g_lang parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en ang/shared/flags.php en AN Guestbook 0.7.8, ,cuando register_globals está activado, permite a atacantes remotos leer ficheros de su elección mediante un .. (punto punto) en el parámetro g_lang."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an_guestbook:an_guestbook:0.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8687976D-A3AB-4487-863A-A7BB51533295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.attrition.org/pipermail/vim/2009-June/002196.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-June/002196.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-26T15:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 trial version allows user-assisted remote attackers to execute arbitrary code via a crafted (1) m3u or (2) pls playlist file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en SureThing CD/DVD Labeler 5.1.616 trial version permite a atacantes remotos con la ayuda del usuario ejecutar código de su elección mediante un fichero de playlist manipulado (1) m3u o (2) pls. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:surething:surething_cd\\/dvd_labeler:5.1.616:-:trial:*:*:*:*:*",
            "matchCriteriaId" : "5DA9D8AB-4EC7-4751-B7F0-F5F6CA007F21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35361",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/43852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/43852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-26T15:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Let's PHP! Tree BBS 2004/11/23 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Let's PHP! Tree BBS 2004/11/23 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php.s3:tree_bbs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2004\\/11\\/23",
            "matchCriteriaId" : "FB68A617-EB08-4D2E-B9CA-370EC34F553B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN93827000/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000044.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://php.s3.to/bbs/bbs6.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35466",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN93827000/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000044.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://php.s3.to/bbs/bbs6.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-26T18:30:00.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending a long malformed string over the PlughNTCommand named pipe."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Motorola Timbuktu Pro 8.6.5 en Windows permite a atacantes remotos ejecutar código de su elección enviando un cadena malformada de gran tamaño sobre la tubería (pipe) PlughNTCommand."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:motorola:timbuktu_pro:8.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06815CAC-C8E2-41C7-9D5E-BB6572D77F7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.netopia.com/software/products/tb2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504554/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.netopia.com/software/products/tb2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504554/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1628",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-26T18:30:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in mnet.exe in Unisys Business Information Server (BIS) 10 and 10.1 on Windows allows remote attackers to execute arbitrary code via a crafted TCP packet."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en mnet.exe en Unisys Business Information Server (BIS) 10 y 10.1 en Windows permite a atacantes remotos ejecutar código de su elección mediante un paquete TCP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unisys:business_information_server:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69152BF1-AFEF-49C1-93F1-0AF8EC37E1F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unisys:business_information_server:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E6686D0-67AE-46BE-85E8-3F6C48FAC8A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.support.unisys.com/pub/mapper/NT/BIS10.1/Readme.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.support.unisys.com/pub/mapper/NT/BIS10.1/Readme.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1887",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-06-26T18:30:00.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP GETBULK request that triggers a divide-by-zero error.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309."
      }, {
        "lang" : "es",
        "value" : "agent/snmp_agent.c en snmpd en net-snmp 5.0.9 en Red Hat Enterprise Linux (RHEL) 3 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) mediante una petición SNMP GETBULK manipulada que dispara un error de división por 0. NOTA: esta vulnerabilidad existe debido a una corrección incorrecta para CVE-2008-4309."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net-snmp:net-snmp:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C872A9B0-0B3C-47B2-82F5-344BEBA221CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D8DAE0-8E75-435C-9BD6-FAEED2ACB47C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:156",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1124.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=506903",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8426",
        "source" : "secalert@redhat.com",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9716",
        "source" : "secalert@redhat.com",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1124.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=506903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-26T18:30:00.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrary code via a crafted request to TCP port 19810."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región stack de la memoria en Bopup Communication Server de B Labs versión 3.2.26.5460, permite a los atacantes remotos ejecutar código arbitrario por medio de una petición diseñada al puerto TCP 19810."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blabsoft:bopup_communication_server:3.2.26.5460:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE34A8-9E4F-4EEF-B201-0032CE4CD815"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35516",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1645",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-26T18:30:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in engine.php in Kasseler CMS allows remote attackers to inject arbitrary web script or HTML via the url parameter in a redirect action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en engine.php in Kasseler CMS permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro url en una acción redirect."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kasseler-cms:kasseler_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A532D8D2-AD71-488B-844D-80499C875D14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35457",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1652",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-26T18:30:00.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter during a download action, a different vector than CVE-2008-3087.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en engine.php en Kasseler CMS 1.3.5 lite permite a atacantes remotos leer ficheros de su elección mediante un .. (punto punto) en el parámetro file durante una acción de descarga, un vector diferente que CVE-2008-3087. NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kasseler-cms:kasseler_cms:1.3.5:*:lite:*:*:*:*:*",
            "matchCriteriaId" : "01A6535A-E9B5-4965-AA2C-E24AD8617AF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35523",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kasseler-cms.net/engine.php?do=attach&file=uploads/forum/17555/1.3.5_to_1.3.6.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kasseler-cms.net/forum/showtopic/1929/2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35457",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1652",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kasseler-cms.net/engine.php?do=attach&file=uploads/forum/17555/1.3.5_to_1.3.6.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kasseler-cms.net/forum/showtopic/1929/2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-26T18:30:00.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authenticated users to execute arbitrary SQL commands via the birthdayprivacy parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en inc/datahandlers/user.php en MyBB (alias MyBulletinBoard) antes de v1.4.7 permite a atacantes remotos autenticados ejecutar comandos SQL de su elección a través del parámetro birthdayprivacy ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.6",
            "matchCriteriaId" : "8605C19E-93AA-4344-9F02-18D6042D3310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858E3AD8-8A7C-4B33-A2AA-3C543D46E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3B187F-D0C5-4001-B877-3B0122784BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98789943-2C7D-404E-B61E-04C436C1681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678B50B3-D151-40ED-8CAA-C12FC5BA4520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E11CB6-E5E5-42CF-A2A4-B1DD3ABADBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C3A929-B608-42FC-BB31-7599146E8CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4409B6-9F4D-4136-BA74-43736215A122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70B64CF-6EF1-487A-9617-68F904ACE727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EC0E67-111A-4989-A311-6B051D37CEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F962969-76AF-4CB2-BD20-A02D703B01C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6942A9C-55E6-4A87-903F-3C8314EA4EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC39A88-9F34-4119-8404-8495735290DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A15A18B-E4DB-4622-977B-3AA495E2F39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4494C452-BB14-4180-A26E-572752FA6111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6FD3E97-2E37-4FE3-83A7-13E489BDFF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C6BC25-C1BB-4640-9CC5-F10C0C119C63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04247BE7-8EF5-4A9C-AD27-F29611FA4A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9593588E-1FCC-42E0-9E8D-0A96386C3126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A6AF1A-7099-4987-AB45-DA363F29327C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F3FD0D-25AB-4D1B-871C-2545FD13EA76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.mybboard.net/2009/06/15/mybb-147-released-security-update/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://mybboard.net/download/104",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35517",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35458",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1653",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://blog.mybboard.net/2009/06/15/mybb-147-released-security-update/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://mybboard.net/download/104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-26T18:30:00.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MIDAS 1.43 allows remote attackers to bypass authentication and obtain administrative access via an admin account record in a MIDAS cookie."
      }, {
        "lang" : "es",
        "value" : "MIDAS 1.43 permite a atacantes remotos eludir la autenticación y obtener acceso de administración mediante un registro de cuenta de administración en una cookie MIDAS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mid.as:midas:1.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69403DDB-69F1-4606-A4BF-145E0ED5624B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1646",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-26T18:30:01.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in image.php in Softbiz Banner Ad Management Script allows remote attackers to execute arbitrary SQL commands via the size_id parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en image.php en Softbiz Banner Ad Management Script permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"size_id\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softbizscripts:banner_ad_management_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE58DFBC-AA94-40A0-AAB2-B4860A2ECE89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35549",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35453",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-26T18:30:01.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the awse_logged cookie to 1."
      }, {
        "lang" : "es",
        "value" : "La interfaz de administración en AWScripts.com Gallery Search Engine 1.5 permite a atacantes remotos eludir la autenticación y obtener acceso de administración mediante la configuración de la cookie awse_logged a 1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awscripts:gallery_search_engine:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194C45BE-17CE-4DA5-804C-99ACF4311112"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35513",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1649",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-27T18:47:55.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to execute arbitrary SQL commands via the (1) Username parameter ($PHP_AUTH_USER) and (2) Password parameter ($PHP_AUTH_PW)."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en admin.php en VICIDIAL Call Center Suite v2.0.5-173 permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) Username ($PHP_AUTH_USER) y (2) Password ($PHP_AUTH_PW)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vicidial:call_center_suite:2.0.5-173:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13284FDE-955F-48EE-93DE-AA3288D53B3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.eflo.net/vicidial/security_fix_admin_20090522.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35056",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eflo.net/vicidial/security_fix_admin_20090522.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-27T18:47:55.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in page.php in Your Articles Directory allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en page.php en Your Articles Directory permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yourarticlesdirectory:your_articles_directory:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "272BD15B-48D4-4E33-B1FF-09A32B285071"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35192",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35062",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-27T18:47:55.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in yad-admin/login.php in Your Article Directory allows remote attackers to execute arbitrary SQL commands via the txtAdminEmail parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en yad-admin/login.php en Your Article Directory permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"txtAdminEmail\". NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yourarticlesdirectory:your_articles_directory:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "272BD15B-48D4-4E33-B1FF-09A32B285071"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35192",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35059",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-27T18:47:59.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify \"nodes or classes of nodes\" via unknown vectors, probably related to registered procedures (aka actions)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Views Bulk Operations 5.x-1.x antes de 5.x-1.4 y 6.x-1.x ante de 6.x-1.7, un modulo para Drupal, permite a atacantes remotos evitar las restricciones de acceso previstas y modificar \"nodos o clases de nodos\" mediante vectores desconocidos, probablemente relacionado con procedimientos registrados (alias acciones)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karim_ratib:views_bulk_operations:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2449F487-D201-4013-B0D4-3D83265E7F56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karim_ratib:views_bulk_operations:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539260B1-1779-4020-9034-BF8E01D87652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karim_ratib:views_bulk_operations:5.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B77FCD-74E2-48E6-BEDD-702E7CAAF2FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karim_ratib:views_bulk_operations:5.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "973F9818-ADD0-41C2-9F41-14346F3E5286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B337BA-2904-4D32-BB31-4395FDE73E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F4D6AED-090F-4883-8140-1EF244757D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B467064-1F6E-4571-92A6-6AAA599382DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE0970F-3691-4344-ADEB-75F02B694522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54E93443-9E9C-44D3-9B3F-70CAA28A9E23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/468450",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35117",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35051",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/468450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-27T18:47:59.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp in DMXReady Registration Manager 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in assets/webblogmanager."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de subida de fichero sin restricción en includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp en DMXReady Registration Manager 1.1 permite a atacantes remotos ejecutar código de su elección subiendo un fichero con extensión ejecutable y luego, accediendo a él mediante una petición directa al fichero en assets/webblogmanager."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmxready:registration_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "885A9272-DCCB-44B8-95A8-263B7CB90FD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503648/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503648/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-27T18:48:02.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the (1) casinobase (com_casinobase), (2) casino_blackjack (com_casino_blackjack), and (3) casino_videopoker (com_casino_videopoker) components 0.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en los componentes (1) casinobase (com_casinobase), (2) casino_blackjack (com_casino_blackjack)y (3) casino_videopoker (com_casino_videopoker) v0.3.1 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"Itemid\" para index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_casiino_blackjack:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2FF1ABE-88DE-42BF-BAA7-3CB226042B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_casino_videopoker:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEB4BA8-A15A-4698-9B82-27EFC7F62A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_casinobase:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F537A077-E2E4-470F-B44B-8D936A36C551"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35041",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-27T18:48:02.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in AD2000 free-sw leger (aka Web Conference Room Free) 1.6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en AD2000 free-sw leger (alias Web Conference Room Free) v1.6.4 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ad2000:free-sw_leger:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.4",
            "matchCriteriaId" : "B7A5B39B-CE14-4F24-B3B7-E0DA25960A6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN57036470/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000031.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35148",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ad2000.co.jp/service/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN57036470/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ad2000.co.jp/service/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-27T18:48:06.110",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to inject arbitrary web script or HTML via the keyword parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.asp en ASP Inline Corporate Calendar inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"keyword\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aaronoutpost:asp_inline_corporate_calendar:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03ED8AAE-FEB4-4FCE-9D54-AAC246DDB55A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35187",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35054",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-27T18:48:06.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the order parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en active_appointments.asp in ASP Inline Corporate Calendar permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"order\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aaronoutpost:asp_inline_corporate_calendar:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03ED8AAE-FEB4-4FCE-9D54-AAC246DDB55A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35187",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35054",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-27T18:48:06.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the sortby parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en active_appointments.asp en ASP Inline Corporate Calendar permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"sortby\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aaronoutpost:asp_inline_corporate_calendar:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03ED8AAE-FEB4-4FCE-9D54-AAC246DDB55A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35187",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-30T10:30:11.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows remote attackers to execute arbitrary SQL commands via the query_string parameter in an execute action, in conjunction with a PATH_INFO of password_forgotten.php, related to a \"SQL Execution\" issue."
      }, {
        "lang" : "es",
        "value" : "Zen Cart v1.3.8a, v1.3.8 y anteriores no solicita una autenticación administrativa para admin/sqlpatch.php, lo que permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro \"query_string\" en una ejecución, en conjunción con un PATH_INFO de password_forgotten.php, relacionado con el caso \"ejecución SQL\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.8a",
            "matchCriteriaId" : "37FB73EA-495B-4C6C-99D2-E10F26AB7A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C929C74-3510-4A89-96CF-2109271008E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D1E7B9-BE05-4F16-8A3C-F0E8B23FF585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.2.0d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27DEB51-7745-4B5A-9E23-5491526E857E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.2.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96BA0248-CF20-4DF4-AF6B-4E9CACE8109B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.2.4d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82CED1DF-15F5-47A2-9C70-F276B466167E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB743EA-A17B-406C-81CE-64A52FBB5966"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE00024-0295-43BE-8123-56526197B58E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE050A6F-DF2A-47E8-8188-59BC00C11E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35550",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35468",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.zen-cart.com/forum/attachment.php?attachmentid=5965",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zen-cart.com/forum/showthread.php?t=130161",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.zen-cart.com/forum/attachment.php?attachmentid=5965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zen-cart.com/forum/showthread.php?t=130161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-30T10:30:19.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/record_company.php, which allows remote attackers to execute arbitrary code by uploading a .php file via the record_company_image parameter in conjunction with a PATH_INFO of password_forgotten.php, then accessing this file via a direct request to the file in images/."
      }, {
        "lang" : "es",
        "value" : "Zen Cart v1.3.8a, v1.3.8 y anteriores no requiere autenticación como administrador para el acceso a admin/record_company.php, lo que permite a atacantes remotos ejecutar código de su elección subiendo un archivo php a través del parámetro \"record_company_image\" junto con \"PATH_INFO\" de  password_forgotten.php, y después accediendo a este archivo a través de una petición directa al fichero en images/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.8a",
            "matchCriteriaId" : "37FB73EA-495B-4C6C-99D2-E10F26AB7A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C929C74-3510-4A89-96CF-2109271008E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D1E7B9-BE05-4F16-8A3C-F0E8B23FF585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.2.0d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27DEB51-7745-4B5A-9E23-5491526E857E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.2.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96BA0248-CF20-4DF4-AF6B-4E9CACE8109B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.2.4d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82CED1DF-15F5-47A2-9C70-F276B466167E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB743EA-A17B-406C-81CE-64A52FBB5966"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE00024-0295-43BE-8123-56526197B58E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE050A6F-DF2A-47E8-8188-59BC00C11E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35550",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35467",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.zen-cart.com/forum/attachment.php?attachmentid=5965",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.zen-cart.com/forum/showthread.php?t=130161",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.zen-cart.com/forum/attachment.php?attachmentid=5965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.zen-cart.com/forum/showthread.php?t=130161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-30T10:30:21.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to cause a denial of service (web outage) via an HTTP POST request to cgi-bin/firmwarecfg."
      }, {
        "lang" : "es",
        "value" : "La interfaz web administrativa en Netgear DG632 con el firmware 3.4.0_ap permite a atacantes remotos producir una denegación de servicio (caída web) a través de una petición HTTP POST a cgi-bin/firmwarecfg."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netgear:dg632:3.4.0_ap:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8578D2D2-207E-484E-9D9B-DF16C6AFB4DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1022403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504341/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504345/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tomneaves.co.uk/Netgear_DG632_Remote_DoS.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504341/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504345/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tomneaves.co.uk/Netgear_DG632_Remote_DoS.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-30T10:30:21.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to bypass authentication via a direct request to (1) gateway/commands/saveconfig.html, and (2) stattbl.htm, (3) modemmenu.htm, (4) onload.htm, (5) form.css, (6) utility.js, and possibly (7) indextop.htm in html/."
      }, {
        "lang" : "es",
        "value" : "El interfaz web administrativo en Netgear DG632 con firmware v3.4.0_ap, permite a atacantes remotos evitar la autenticación a través de una petición directa a (1) gateway/commands/saveconfig.html, (2) stattbl.htm, (3) modemmenu.htm, (4) onload.htm, (5) form.css, (6) utility.js, y posiblemente (7) indextop.htm en html/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netgear:dg632:3.4.0_ap:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8578D2D2-207E-484E-9D9B-DF16C6AFB4DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1022404",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504312/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tomneaves.co.uk/Netgear_DG632_Authentication_Bypass.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1022404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504312/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tomneaves.co.uk/Netgear_DG632_Authentication_Bypass.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-30T10:30:21.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to list arbitrary directories via a .. (dot dot) in the nextpage parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en cgi-bin/webcm en el interfaz web administrativo en Netgear DG632 con el  firmware v3.4.0_ap permite a atacantes remotos mostrar directorios arbitrarios a través de ..(punto punto) en el parámetro \"nextpage\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netgear:dg632_firmware:3.4.0_ap:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E623FB-2533-420C-9BD2-B7951417B962"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netgear:dg632:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788C83C-2F5D-4F96-9799-B355DE07B184"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1022404",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504312/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tomneaves.co.uk/Netgear_DG632_Authentication_Bypass.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1022404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504312/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tomneaves.co.uk/Netgear_DG632_Authentication_Bypass.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-30T10:30:21.890",
      "lastModified" : "2023-11-07T02:04:05.853",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-2608.  Reason: This candidate is a duplicate of CVE-2009-2608.  Notes: All CVE users should reference CVE-2009-2608 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-30T10:30:21.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network."
      }, {
        "lang" : "es",
        "value" : "stardict v3.0.1, cuando Enable Net Dict es configurado, envía el contenido del portapapeles a servidor del diccionario, lo que permite a atacantes remotos obtener información sensible esnifando la red."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stardict:stardict:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94554E16-F0A1-4244-BFBC-E5508A0FBCDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00121.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2025/08/04/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00121.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of stardict as shipped with Red Hat Enterprise Linux 5.",
        "lastModified" : "2009-07-01T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-30T10:30:21.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | (pipe) characters and a command."
      }, {
        "lang" : "es",
        "value" : "PeaZIP v2.6.1, v2.5.1 y anteriores en Windows permite a atacantes remotos ayudados por un usuario ejecutar comandos de forma arbitraria a través de un archivo .zip con un fichero .txt que contenga el carácter | (pipe)  y un comando."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "5BAE717F-F1E3-4ED7-ABF4-0278FC38EB89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9C97585D-254F-4424-B191-4F883B30C14F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "82C44B04-593E-4CF0-AD42-BB334E176DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C79B5F2E-D0F5-4577-8E21-3418255C501C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:1.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "36EC5D88-5737-42CF-8AB2-4078308F6708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:1.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "78AC93CC-DCA4-45BC-9E38-DD806A41EA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:1.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "1B4C50DF-A187-42BF-8F7F-2A4C69B86B4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:1.6:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C8412BD8-82A6-4377-8544-A9273C36FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:1.7:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D19E5CFB-33DB-4C7B-BAFB-9E1F9CDEB1F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:1.8:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DB6E2722-06D2-4A60-A221-65CE5AE856EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:1.8.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "87C4FA36-D1BA-4FF1-98AE-092506C40567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:1.8.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "851D02FB-A9C2-440B-88EA-AB70B5B1BF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:1.9:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D7FE0505-9806-4E66-A352-3283070AFE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:1.9.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F52F4946-4CEC-4EB4-B0F4-B0A12BE4667D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:1.9.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "05AEFE1A-936E-4BE6-AEBE-2AC1BFAD4EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:1.9.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "361139AF-BC1D-4EE6-9878-EEEDB3DACDEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:1.10:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D3DE44AF-831C-4D53-8DA0-161024DD326A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:1.11:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CBFB9E61-2A80-4751-B9DA-22DC5E3DD458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7695DB23-94EF-430B-8E8C-1D928C86E34F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C464C2C6-4408-40E4-AB5D-D3A1DD78EEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:2.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "229CC0A8-3CA9-4537-B0FC-299A8ACF0D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:2.3a:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0C5EA38A-9EF7-44CC-8F33-E74098728227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:2.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7032AB0A-10D4-4627-A374-69AD38EDA4E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:2.4.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "B74D1D52-D8C4-41DF-B8E1-A761DCC87C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:giorgio_tani:peazip:2.6.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9F78BDEE-0EB3-45CE-BFE8-E1896C378468"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-30T10:30:21.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in install/di.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtoserverdata parameter.  NOTE: the installation instructions specify deleting the install/ folder."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de fichero PHP en install/di.php en AjaxPortal v3.0 permite a atacantes remotos ejecutar código PHP arbitrario a traves de una URL en el parámetro \"pathtoserverdata\". NOTA: Las instrucciones de instalación especifican el borrado de la carpeta install/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myiosoft:ajaxportal:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65D28AB1-A48F-480C-8590-048197F0D6B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/504618/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504618/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-06-30T10:30:22.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Awesome PHP Mega File Manager 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.  NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php en Awesome PHP Mega File Manager v1.0 permite a atacantes remotos incluir y ejecutar ficheros locales de forma arbitraria a través de ..(punto punto) en el parámetro \"page\". NOTA: en algunas situaciones, esto puede ser ayudado mediante la inclusión remota de fichero mediante el uso de una ruta de fichero compartido UNC o un ftp, ftps o una URL ssh2.sftp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awesomephp:mega_file_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C8CA5D-6C4B-4194-A315-D282CE9EF190"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35545",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0689",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-07-01T13:00:01.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number."
      }, {
        "lang" : "es",
        "value" : "Error de índice de matriz en la (1) implementación dtoa en archivo dtoa.c (también se conoce como pdtoa.c) y (2) la implementación gdtoa (también se conoce como dtoa new dtoa) en archivo gdtoa/misc.c en libc, tal y como es usado en múltiples sistemas operativos y productos, incluidos FreeBSD versiones 6.4 y 7.2, Net versión 5.0, OpenBSD versión 4.5, Mozilla Firefox versión 3.0.x y anteriores a las versión 3.0.15 y 3.5.x anterior a versión 3.5.4, K-Meleon versión 1.5.3, SeaMonkey versión 1.1.8 y otros productos, permite a los atacantes dependiendo del contexto causar una denegación de servicio (bloqueo de aplicación) y posiblemente ejecutar código arbitrario por medio de un valor de precisión largo en el argumento de formato para una función printf, que desencadena una asignación de memoria inapropiada y un desbordamiento de búfer en la región heap de la memoria durante la conversión a un número de punto flotante."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k-meleon_project:k-meleon:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34C36C0A-5A73-4E19-A798-7337AF0F353E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D595F649-ECBE-45E0-8AAD-BCBC65A654B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE6E920-9A4C-431B-89EA-683A22F15ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F7F02A-C845-40BF-8490-510A070000F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:release:*:*:*:*:*:*",
            "matchCriteriaId" : "53D1AD5E-4007-4AFA-A18B-69D1AC055C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:release_p2:*:*:*:*:*:*",
            "matchCriteriaId" : "06BFEE54-DBF3-4546-AE57-2C25FC9F0F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:release_p3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1FC1A8-E499-45A0-B89A-5BFA24727DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:release_p4:*:*:*:*:*:*",
            "matchCriteriaId" : "8E08DCB9-9064-4DB7-B43A-7B415882EB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:release_p5:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A5E6FF-617E-4173-A948-F3728454A012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "06FB0EEA-254E-4A1F-99E7-058FCD518E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F948527C-A01E-4315-80B6-47FACE18A34F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.2:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "8B573401-DC6F-4AFE-92F5-D96F785D2107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:7.2:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "60D40129-108B-421B-9990-6C6F381C96AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00564BAA-066A-4627-B6A8-78724E55D363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B32BB973-60E5-402B-83FE-547786BC7A57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gdtoa/gdtoaimp.h",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2014-0311.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2014-0312.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/37431",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37682",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37683",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38066",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38977",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39001",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-35/",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/63",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/69",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/71",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/72",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/73",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/75",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/76",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/77",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/78",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/81",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securitytracker.com/id?1022478",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://support.apple.com/kb/HT4225",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-59.html",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gdtoa/misc.c",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/support/kb/view/942/",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1601.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507977/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507979/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/508417/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/508423/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35510",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-915-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3297",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3299",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0094",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0648",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=516396",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=516862",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00001.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6528",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9541",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gdtoa/gdtoaimp.h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2014-0311.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2014-0312.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-35/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/72",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/73",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/77",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/78",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-59.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gdtoa/misc.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/support/kb/view/942/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1601.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507977/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507979/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/508417/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/508423/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-915-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=516396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=516862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2018/11/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1889",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-01T13:00:01.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service (application crash) via a crafted ICQ web message that triggers allocation of a large amount of memory."
      }, {
        "lang" : "es",
        "value" : "La implementación del protocolo OSCAR  en Pidgin anterior a v2.5.8 no interpreta el tipo de mensaje ICQWebMessage como tipo ICQSMS, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un mensaje web ICQ manipulado que lanza una asignación de una gran cantidad de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.7",
            "matchCriteriaId" : "3B3467B6-656E-4749-B70B-820049084F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC2EBF3-73A7-4542-8E9C-47A4241A224C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF62072D-4956-4FE6-931E-E6EE9C49F3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6499D8D5-0801-498C-BD4D-508506918CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "5C5B2A50-6734-4B64-AFD0-DB34C3BDA86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CC76CD-FF35-4B3A-9F1E-4E5A65963057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E216BC-29E4-4C31-9CF0-DE22C2E84968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD203F7-B983-4FDD-9837-D68D4F388A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8E3CBA-2B33-49EF-9105-8DDBB938F519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AA3282-CA7D-438C-A07C-A63392333630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEEFF420-2868-422B-BD22-9A5749C2398F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B139D83D-7D18-42C7-988C-2070B66CB943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047D9636-BCCE-4956-B5A3-D276F1C2EF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8A794E-E1CB-4F0F-9739-D625E94EA566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64EEEA0-89CE-46BD-B387-A96521E76A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E96AA3-B567-4E97-979A-D97A4F786D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C407C0-99A2-477B-87CF-6BE9F7B367E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.3:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "777EF35C-195A-4784-986D-3811CF1DCF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBEF0457-39D8-465B-86A7-8DFA44A1F820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.4:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD21F1-7A08-4F2D-B8EA-C02771E960FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E593BFF0-650E-4EDB-BF65-C509C8A807C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.5:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "01256F83-6E67-409A-B99A-6E27E83DA05F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39468D5-1378-4441-B927-5C34C85B18AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.pidgin.im/ticket/9483",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://pidgin.im/pipermail/devel/2009-May/008227.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35693",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35697",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35706",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37071",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1139.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35530",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-796-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=508738",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51448",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10004",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00162.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00176.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00228.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://developer.pidgin.im/ticket/9483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://pidgin.im/pipermail/devel/2009-May/008227.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1139.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-796-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=508738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00162.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00176.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00228.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2268",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Cross-Domain Controller (CDC) servlet in Sun Java System Access Manager 6 2005Q1, 7 2005Q4, and 7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el Cross-Domain Controller (CDC) servlet en Sun Java System Access Manager v6 2005Q1, v7 2005Q4, y v7.1, permite a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EDB8CC-FD50-468F-BF06-91F415E1532D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.0_2005q1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6FAE06D6-34FF-45CA-9CD9-841817E787FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.0_2005q1:*:solaris_10_sparc:*:*:*:*:*",
            "matchCriteriaId" : "C45AE084-74CB-47C7-8103-EBDEE2C3A2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.0_2005q1:*:solaris_10_x86:*:*:*:*:*",
            "matchCriteriaId" : "97A8B7AC-8343-4CDB-8757-12648D0C5B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.0_2005q1:*:solaris_8_sparc:*:*:*:*:*",
            "matchCriteriaId" : "84B5BE3F-27E7-4B3B-BD7B-A614DA625A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.0_2005q1:*:solaris_8_x86:*:*:*:*:*",
            "matchCriteriaId" : "3BE405DA-2ACF-4935-99D9-2E8940FBA279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.0_2005q1:*:solaris_9_sparc:*:*:*:*:*",
            "matchCriteriaId" : "3566E0BB-A6B9-49A0-9B6C-918A1F11CE6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.0_2005q1:*:solaris_9_x86:*:*:*:*:*",
            "matchCriteriaId" : "0A666DA6-E83C-4B37-913E-3FAD7B9EE4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88350FE-285D-4144-B7DC-5E1F8579CC56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "2807FF5E-F638-4F08-B34C-4532C1BC9908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "34B7F28D-CBA5-44F7-AE6E-5EEB0EAF63B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:solaris10_x86:*:*:*:*:*",
            "matchCriteriaId" : "7A0F58C0-642D-4FC2-94B6-35D3CA936DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:solaris9_x86:*:*:*:*:*",
            "matchCriteriaId" : "85E0C292-E453-4F14-915A-41AB7FBF21F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "B7821A43-2549-4B75-A201-95A3AC58E8BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5B089E-62AC-44E5-9462-DC439C7AA8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "4CCDA95C-0EFF-4CF4-8CC6-EF110F0DAE76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F24915-078C-4E4B-B173-671F0ABF9656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_x86:*:*:*:*:*",
            "matchCriteriaId" : "AD06B92E-C23C-4648-A585-14FC54538FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_sparc:*:*:*:*:*",
            "matchCriteriaId" : "CAABA44E-5FD1-4B71-A4DE-9DC671DD8223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_x86:*:*:*:*:*",
            "matchCriteriaId" : "4930E838-993A-4DA1-B504-4675EE20CF69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_sparc:*:*:*:*:*",
            "matchCriteriaId" : "2A857F82-4146-48E9-8568-19393AC3856B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_x86:*:*:*:*:*",
            "matchCriteriaId" : "2D28C8EF-7525-48A0-A13A-EA95479A3B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "36C5F1CB-FEDE-4C19-B056-C846C86FDE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_sparc:*:*:*:*:*",
            "matchCriteriaId" : "B56B9BD3-2708-46C3-850D-865599F88BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_sparc:*:*:*:*:*",
            "matchCriteriaId" : "B6391170-5831-4303-85E5-A51BB431E788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_sparc:*:*:*:*:*",
            "matchCriteriaId" : "745D8651-B97C-48A9-AE4F-603A34516919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35651",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256568-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020343.1-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256568-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020343.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Per: http://secunia.com/advisories/35651\r\n\r\n\"NOTE: This only affects Sun Java System Access Manager if Cross-Domain Single Sign-On (CDSSO) functionality is enabled.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Empire CMS v5.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"bid\" a la URI por defecto bajo e/tool/gbook/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phome_empire:phome_empire_cms:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C65FD0F-73B6-4FB0-9BCD-AB9F451ACFEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/504652/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504652/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2270",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in member/uploads_edit.php in dedecms 5.3 allows remote attackers to execute arbitrary code by uploading a file with a double extension in the filename, then accessing this file via unspecified vectors, as demonstrated by a .jpg.php filename."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de subida de archivos sin restricción en member/uploads_edit.php en dedecms v5.3, permite a atacantes remotos ejecutar código de su elección subiendo un archivo con una doble extensión en su nombre, después accediendo al mismo a través de vectores no especificados, como se ha demostrado con el nombre de archivo .jpg.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dedecms:dedecms:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5ABE83-353D-4675-B62D-E3EA95BD458D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/504653/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504653/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Huawei D100 has (1) a certain default administrator password for the web interface, and does not force a password change; and has (2) a default password of admin for the admin account in the telnet interface; which makes it easier for remote attackers to obtain access."
      }, {
        "lang" : "es",
        "value" : "El Huawei D100 tiene (1) una contraseña de administrador por defecto para acceder al interfaz web sin forzar el cambio de esta contraseña; y (2) tiene una contraseña por defecto de administrador para el interfaz telnet; lo que facilita el acceso a los atacantes remotos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:huawei:d100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A83378E-CAC4-4D97-A765-6DA634B1194A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504645/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504645/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by (1) reading a cookie file, by (2) sniffing the network for HTTP headers, and possibly by using unspecified other vectors."
      }, {
        "lang" : "es",
        "value" : "El Huawei D100 almacena las credenciales de la cuenta de administrador en texto plano en una cookie, lo que permite a atacantes dependientes del contexto obtener información sensible (1) leyendo la cookie, (2) rastreando la red en busca de cabeceras HTTP y posiblemente mediante el uso de otros vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:d100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3888666F-8B81-4535-A654-A9F5A5C3C5CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:d100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A83378E-CAC4-4D97-A765-6DA634B1194A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/504645/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504645/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default configuration of the Wi-Fi component on the Huawei D100 does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network."
      }, {
        "lang" : "es",
        "value" : "La  configuración  por defecto del componente Wi-Fi del Huawei D100 no emplea cifrado, lo que facilita a atacantes remotos el conseguir información sensible espiando la red."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:d100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3888666F-8B81-4535-A654-A9F5A5C3C5CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:d100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A83378E-CAC4-4D97-A765-6DA634B1194A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/504645/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504645/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Huawei D100 allows remote attackers to obtain sensitive information via a direct request to (1) lan_status_adv.asp, (2) wlan_basic_cfg.asp, or (3) lancfg.asp in en/, related to use of JavaScript to protect against reading file contents."
      }, {
        "lang" : "es",
        "value" : "El Huawei D100 permite a atacantes remotos obtener información sensible a través de una petición directa a  (1) lan_status_adv.asp, (2) wlan_basic_cfg.asp, o (3) lancfg.asp en en/. Relacionado con el uso de JavaScript para proteger los contenidos contra la lectura de ficheros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:huawei:d100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A83378E-CAC4-4D97-A765-6DA634B1194A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504645/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504645/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote attackers to read arbitrary files via a .. (dot dot) in the domain parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en frontend/x3/stats/lastvisit.html en cPanel, permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro \"domain\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA10E29-1DDD-44D8-A7D9-74BE0315CE4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the out parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en voteforus.php en la extensión Vote For Us v1.0.1 y anteriores para  PunBB, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"out\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B94FB2-2C83-42D6-BECC-D39E97594CA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:biglle:vote_for_us_extension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "7EB70F3A-EC40-4978-ADDB-D10968B6D8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:biglle:vote_for_us_extension:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E71A83-39E3-4BED-9600-D14C87FD4013"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Virtual Network Terminal Server daemon (vntsd) for Logical Domains (aka LDoms) in Sun Solaris 10, and OpenSolaris snv_41 through snv_108, on SPARC platforms does not check authorization for guest console access, which allows local control-domain users to gain guest-domain privileges via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "El demonio Virtual Network Terminal Server (vntsd) para Logical Domains (también conocido como LDoms) en Sun  Solaris 10, OpenSolaris snv_41 a la snv_108, sobre plataformas SPARC no validan la autorización para el acceso como invitado a la consola, lo que permite a los controladores de dominio locales obtener privilegios como invitado del dominio a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:opensolaris:*:*:*:*:*:*:sparc:*",
            "versionStartIncluding" : "snv_41",
            "versionEndIncluding" : "snv_108",
            "matchCriteriaId" : "B66593B0-4817-459F-A941-A513EA31CF2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:sparc:*",
            "matchCriteriaId" : "2B10E22E-B81A-4CB0-98E3-EFEC090E9592"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35547",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141778-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-262708-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55329",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35502",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/35547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141778-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-262708-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the help jsp scripts in Sun Java Web Console 3.0.2 through 3.0.5, and Sun Java Web Console in Solaris 10, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruxados (XSS) en help jsp scripts en Sun Java Web Console v3.0.2 a la v3.0.5, y Sun Java Web Console en Solaris 10, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D3747-9ACD-40F4-9433-823489249416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "1533E3FF-D600-42D5-9E85-B1059871D14A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.2:*:solaris8_sparc:*:*:*:*:*",
            "matchCriteriaId" : "514EAF6E-AA16-4488-9681-5BE4CDB093A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.2:*:solaris8_x86:*:*:*:*:*",
            "matchCriteriaId" : "B75F441A-A601-4498-A1AC-8C229CC20151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.2:*:solaris9_sparc:*:*:*:*:*",
            "matchCriteriaId" : "58FB5260-0C6E-458E-96B3-821E87A5461E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1E394A83-4A9B-4C5F-8BB1-F02A11DDE0CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7786C0-4367-4224-BDA9-C5A0F466A6EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.3:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "97486A99-BAED-4037-A3F2-6D612441F851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.3:*:solaris9_sparc:*:*:*:*:*",
            "matchCriteriaId" : "684C5517-C9DE-46D8-B2B1-10B41241C525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.3:*:solaris9_x86:*:*:*:*:*",
            "matchCriteriaId" : "ED02804C-9C67-4327-9CC0-E04D64586AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "F0CA6D39-929A-47B8-8E7C-F9FA3EB39E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C77A7094-D272-4A30-B79A-FE9D0301FA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.4:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "1DE7D4BA-AB64-4940-AA58-6A987F2B0231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.4:*:solaris9_sparc:*:*:*:*:*",
            "matchCriteriaId" : "41F49B2D-DE7D-4D19-A89B-5B3F90929321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.4:*:solaris9_x86:*:*:*:*:*",
            "matchCriteriaId" : "24C0BC37-E25E-4CA5-9BA1-D3F05ED62A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "82432AD2-0E2D-41ED-B79D-C36704D531D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "642641D5-A711-42AC-BA14-2EA789844EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.5:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "136D5CB1-9F76-4D9E-A867-699D64EEA352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.5:*:solaris9_sparc:*:*:*:*:*",
            "matchCriteriaId" : "D8A27771-0D5A-4A4E-8CC1-8D69001BD346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.5:*:solaris9_x86:*:*:*:*:*",
            "matchCriteriaId" : "9A1775BB-BBD0-4513-A4FF-A3EAFE060592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_console:3.0.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "358DF675-DF21-44DA-9715-07E2D954DE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-136987-03-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-262428-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020659.1-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-136987-03-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-262428-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020659.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en phpMyAdmin anterior a v3.2.0.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de un favorito con una sentencia SQL manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.0",
            "matchCriteriaId" : "CBEB6E81-2E97-45FF-9764-C50820F33B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A423F0-91C8-48C9-A6B1-46DBB1A31DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784EF815-B20A-4D26-8FCA-04BCBAD65BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59384A5A-F530-4417-8AFB-005EE4A54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CFC048-C7C5-47E6-A7E9-E1ED99142493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120A58AE-69B7-426D-947D-9C0D9D9CE1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1CEFBE-9194-4350-9F81-2EA6EDF52AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "980AC0DB-2759-49D3-8347-C119AFFF8DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CABC8407-173D-466B-B366-5F7F5D9F2F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91ABFE90-9D9D-40FD-A2ED-A7021DFCC301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D2743D-5B67-4D6A-9A03-FCF9EA4534A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C2535BF-A7BE-40DD-9582-0DE66B8FDC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B0D6C2-AF9E-4395-861D-64502D82589A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3663CE-AF25-4A0A-811E-DE58B7E5D934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F14B08F-6583-4686-B534-616D42B7D90B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CD5425-79A4-4506-8BDA-299449EB51DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F754BBA9-765F-4BDE-9AF3-3DA4300B17C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A136E97-05EA-4ADF-82F5-E2D0C7737D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53AE58C1-CB8C-415F-BF58-BD356D3AC000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F666B78D-5DC9-4256-8A23-A4021AE7044A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096B01B4-3CD4-4CB4-8528-D1DB0D0BFB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "229DE8B7-489B-4848-B1BE-2339CB771573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BC58E6-CA26-4760-A6A4-D65184A50539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE7C97E-60C6-417F-86F7-963ADE52A895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.7_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADDE752A-19A1-4910-9C56-0FDFFA367E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF189AE-9485-4F8C-AAAE-25088DF6F964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643C7F9B-B8C5-4C76-B706-F8CB5A800936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560BC57D-BDCE-4479-9847-6DB53A89FFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4859644F-E5FF-4AE4-B16D-CC2243964D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD44FE0C-C9A5-4B2E-AE71-CFDE406DCA6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DE653E-E7FF-4DE0-A7C8-CC86C95550F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48888218-B238-4F0D-A4C2-E9877D3F3A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A393256A-A5BE-4467-8058-E9CA5D626D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9C4839-2356-4630-BDB3-4A0171F3A785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22C55462-6370-45B3-8F00-50F4502981F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BBE005-1FEC-4178-A6A0-CAAB148948F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701F99C8-D803-4D28-AFDA-B3DB5EBD5EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47F3385-8681-4A7D-BF64-8F6EA7FBDFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2E7577-5F89-4B2C-9C28-A5268B539968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929F5CD6-51F3-42CF-8BA8-579120DD835D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F86B56F-510F-4C6F-A259-6200DC2B05ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B58A87-7A30-494D-9A9A-AF9FE6E59600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F56E2F91-DC93-4FF0-AFF2-DBB5E13B467D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C2D276-CFA3-40CB-AEAF-C641BAD4EB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6E3468-78AF-471C-A09E-1ACCC6867256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF345665-3C1D-4F44-B648-B695D88267BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FD7D45-135D-4AE7-83E0-FDFE436DFE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C3F2E1-FEFC-4C04-B337-7AC3E38AE430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C525B9-636F-49B9-B528-50AEB0E98F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB3EBBF-E696-48D1-B3BA-B3C88C050F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74632C65-6711-4425-A43F-CCF1664C8542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD740315-190A-43B7-8399-9B72FA592AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794AE77E-843C-4CB4-9462-E4FE8C4C2896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E291BCAA-E2B5-4127-92DA-0BD48EACB6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B51601C-EDDC-41B7-82E9-EA4E7745F935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704C4359-A80E-456F-AA69-D188E4DFDBA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE1E983-6EA4-4E0F-B7F8-B0070F8A3752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BD9F5E-B01D-4F1E-8BC2-F140ACF1472F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAB33AF-D8A9-444F-AC69-FACCFA0EEB6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1600D28-5583-4FA2-835F-BCE10813DB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAEA71B2-99EE-4975-A46B-A38112CD4F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80AAD482-064D-4CFB-A1AE-49095036485A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33423F75-0F5A-49F6-BF70-66DC2CE39E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6758F7AC-0FCF-4F6C-8F40-DDF1BA998AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3C5C9D-A802-40F3-B3CE-593CFED745CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8FE9713-54BE-4A70-82F8-03B8E1915E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0611660F-F060-453C-8BE2-1599FE3FF9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2887738D-57A8-4E43-8498-5C8D0FAAA030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "892F5D72-1814-48A5-8CCA-A74EE9D633CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25A359B-8FFD-4941-9419-4E99373D9588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F79633E-19C0-4448-92F1-7C291C9CCD6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBD9FD0D-2786-43BB-938B-A45D9B60E08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3CE1C3-59FF-457F-8579-996CA60CF6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F2B3C2-0EDB-48D3-92BC-B1CA0E41F230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9852676-A91F-4FD6-A734-BF7E048411FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC64B22B-E415-4510-A0DF-CE4763A423D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12375469-DD81-42BE-8BC0-FCAB0D2D6253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEF6246-C393-41BE-BABC-840585795D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1_dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E384B8D4-C72C-4D3D-A25F-26FB5F1D4B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ACC829-CF64-4F20-8827-AA95002A6F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D4C98E-D127-40EB-BE71-A6BB91D4392C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C26B2DE-669F-4F79-99AE-3210662AAB85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B64201-5B5B-4D22-B341-C601DC54BFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DA3E88-1572-484D-A4DB-A99EF7D73129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E65F392-A841-461A-921C-91F40330F3F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7F2F4E-7DCC-43F8-BB69-BE553C2F8F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CDE3326-8B3F-4C3A-BA40-6F91CDFAFA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36C4A673-5ACD-4D1A-A780-5CD279230051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0534C39C-A421-4C97-8A96-A74ABFA78B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD0DFB0-92F1-4914-A637-A2EBCE0A9BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6354257-6B1A-4729-9EE2-19D3CD2AD62B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4686B445-3843-4173-8565-16BF364EF911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1519A451-0EC8-4718-991D-948572C08410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ACAA116-2853-456B-BC9C-B036A0F99FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8AF5A1A-328E-43A1-8C41-0DAB1F337FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3130CFD-FF94-48D2-BF9A-D7FDD3CD6A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA8D87A-D161-4CC4-8E71-FD2407EA247E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6C869A-0307-40D9-85D6-05453B6BEA35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CABB8831-0951-4E3B-B983-FC390A622FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEE37166-AC6C-473A-8266-38417C6F2167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC01AB6-A640-45FF-8971-593A49AD3694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65D9D3A9-CC69-40B7-9FBF-9A18A4342FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C15B2C-D4A9-4946-8EB9-B6C131D6E8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "439ED5A5-7720-4FB4-AFE9-D6F2625D98D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795B4F23-BA5E-466B-9FC3-C7A00A110774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F57B4C9F-FF70-44D4-9577-FE6C4BC69828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC1F099-04AC-4210-8477-07B21E087162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86CCE3D-61C1-4A9D-8A54-3D14B9C5BCBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98FF47C-8BA8-40E1-98F5-743CAD5DC52A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "346DF9C7-40BE-44FD-BB5A-23F60616E97F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B00F4D78-34C3-4934-8AFA-B7283388B246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962B49A9-380D-4B19-929B-50793EF621C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC66C23-0133-4A39-B8C0-BCFF6F1E4D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3A44D6-F174-428E-8456-5B7B093D7A64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B9F52BC-AC6A-41BB-8276-6176FA068929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA3305E-CBC2-4469-923F-29EDA0402CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC82C85-C9CF-424D-A07A-E841F7AC1904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0549FC5-B8E8-455D-867B-BAF321DE7004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DA6D40-2D3A-4490-B4E6-1367C585ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF6D9CF4-C9D6-4CDE-86F4-BA46913CE8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E351CA2-71DB-4025-8477-24DFE5349195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34AB221E-3DFA-43E4-9DBA-5565F81C0120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB774D1-8B5D-4118-8A5B-D7D14D7DE162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C10F7C9-FAAA-4D05-8CB2-F5CB397F8410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54669C6E-C13B-4602-9CC1-53B24CB897FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "40CE5E7C-A965-492F-AE85-535C3E5F1B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8AAB78-8460-43BB-9326-0395F7496EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5CB748-A953-4CAD-B8F9-21F43D2992E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2909BBB8-AB67-45DC-BAF0-015CBF97AFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "52F3DA64-2099-4A4F-9F38-F28255F47BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3329598B-BEA5-4119-A558-DAA432239A84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4843917-B7B1-4871-AE2B-2219C6EB85F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E1F897-861F-4E10-8E05-3C0DD60C7979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8CC1C1E-2B8C-4E59-B5ED-ED2957B46743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA5BCF7D-43FC-459C-8564-F0DCDC301FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA6A75C9-C695-45DF-9526-8DEA506FB21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03246EF4-F805-4C1C-9E6C-D85AFBD2D168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A217F2AE-185D-4385-8804-475DB12CFA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE432385-9FC2-4EB3-9770-4CA9A2979019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFCA67E-49E1-41FF-8B40-0209FF7893FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF4BA83-50C0-4D90-9755-CC99A0FF987E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC99B93D-2171-40DE-90B3-61D6DB9F6D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE588389-7B4F-4949-BB7A-233C6BE31859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E709A6B-B580-414B-8CEE-8FF99F8409C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9AA2E6-CF57-40A1-9A9C-B704D8B009F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE75CBB-4EC2-4B97-9E86-28BB05DEA30C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A26E7D37-FA99-42EA-8E19-ED2343E8E70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A982E152-5A20-4A3A-9A98-6CF9EEF9141A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA11353-1DD1-4593-84E8-1D3CBB2C2166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0C19FB-60DF-440F-9A32-B9C62EBA9836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9716FC40-F759-4D24-9604-7A2DB32A8F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED38B88-A4D2-40B4-A5A8-A9FD1BCAAF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5899F407-1D31-452A-954C-966895ED7D48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFDEFBE-E512-4B0C-BBEC-8FCA29228DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6583C3A-EB4E-4F8C-ADFD-1B19E879414C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56908EFC-CCA8-4B22-8F8F-FB23C934D6E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1-rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DFB2783-EB5A-42AD-97FC-1BB226527BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21917E9-A820-4A5F-B38B-E3E0F79A380C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400E2D41-CB1F-4E5C-B08D-35294F8D1402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0-beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFAD5F7D-AA93-46B7-996B-B0761143B334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBEBBAAF-BAA7-40E9-A0FF-F8618A3ED2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4AFEEBA-01BA-46D6-86A3-B1B5A8F1B5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F72014B-B168-4FFA-ADDC-86CE84D19681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFFE8553-D8FF-4BA3-9325-A3C366FDFBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "72CD1784-3F48-49B5-A154-61C1F7EC3F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAAA1171-F570-4E4D-B667-2D4C8F8ECDD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:1:*:*:*:*:*:*",
            "matchCriteriaId" : "F0BD3CDF-31C5-4B8A-8314-A5F0F9D28AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "278B4EF3-4331-4334-AB55-EC05C069F48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3-rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78CCE83F-6B8F-4ADA-8E11-8C93BB10C66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4943CF80-91E5-42CD-BD51-6CAFC83EA5A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0284F72-2126-4BE8-90CA-82D2E4B3E96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24AEFB1-7070-4F9B-BCDA-60F33C17D536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4-rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "310C264A-5657-450F-979E-6EE2B83B5900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E60F6F-C855-45BF-8840-398FA62626EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5-rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0ABF8B6-91C3-466E-B974-E1D7400E1ABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0-beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD4EF8B-EA44-46F2-9C28-1D9D1D8BA2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0-rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665E32EA-D728-43E4-B646-DAE408A1ECF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35649",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35715",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security/PMASA-2009-5.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00150.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00152.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00256.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security/PMASA-2009-5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00150.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00152.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00256.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer inferior en la función LZWDecodeCompat en libtiff v3.8.2, permite a atacantes dependientes de contexto provocar una denegación de servicio (caída) a través de una imagen TIFF. Vulnerabilidad distinta de CVE-2008-2327."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A24DC5-2DF5-4CA2-A0CD-BE0650CA6F5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2065",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/38241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/39135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-03.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-267808-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT4004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT4013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT4070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT4105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.lan.st/showthread.php?t=1856&page=3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/22/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/23/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/29/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1159.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/tiff/+bug/380149",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/797-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00142.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00161.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00230.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00655.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00714.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-267808-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.lan.st/showthread.php?t=1856&page=3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/22/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/23/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/29/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1159.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/tiff/+bug/380149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/797-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00142.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00161.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00230.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00655.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00714.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service (crash) via a long declaration in a .xbm file.  NOTE: this issue only affects compface on distributions that used a certain patch."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en compface v1.2 y anteriores, permite a atacantes asistidos por el usuario provocar una denegación de servicio (caída) a través de una declaración larga en un archivo .xbm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:james_ashton:compface:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "2270E50C-E7A0-4883-9D93-5CD911B2F603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:james_ashton:compface:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB40AF41-63CA-4810-A997-995C3B44F10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:james_ashton:compface:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54DFA3B2-8285-471C-9A8D-EFE461E5F547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:james_ashton:compface:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3DBC63-3F05-4373-B1F5-F85FDEB61408"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/29/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/29/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/03/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/29/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/29/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/03/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kvm_arch_vcpu_ioctl_set_sregs function in the KVM in Linux kernel 2.6 before 2.6.30, when running on x86 systems, does not validate the page table root in a KVM_SET_SREGS call, which allows local users to cause a denial of service (crash or hang) via a crafted cr3 value, which triggers a NULL pointer dereference in the gfn_to_rmap function."
      }, {
        "lang" : "es",
        "value" : "La funciónkvm_arch_vcpu_ioctl_set_sregs en el KVM en el Kernel Linux v2.6 anterior a v2.6.30, ejecutado sobre plataformas x86, no valida la \"page table root\" (raíz de tabla de páginas)  en una llamada  KVM_SET_SREGS, lo que permite a usuarios locales provocar una denegación de servicio (cuelgue o caída) a través de un valor cr3 manipulado, lo que lanza un deferencia a puntero NULL en la función gfn_to_rmap."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.0",
            "versionEndExcluding" : "2.6.30",
            "matchCriteriaId" : "2968B5F6-9BCE-4A5C-B640-94A483AC1F82"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0507E91-567A-41D6-A7E5-5088A39F75FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/stable-queue.git%3Ba=blob%3Bf=queue-2.6.30/kvm-x86-check-for-cr3-validity-in-ioctl_set_sregs.patch%3Bh=b48a47dad2cf76358b327368f80c0805e6370c68%3Bhb=e7c45b24f298b5d9efd7d401150f64a1b51aaac4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=59839dfff5eabca01cc4e20b45797a60a80af8cb",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35675",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36045",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36054",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sourceforge.net/tracker/?func=detail&atid=893831&aid=2687641&group_id=180599",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1845",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:198",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/30/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-807-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/stable-queue.git%3Ba=blob%3Bf=queue-2.6.30/kvm-x86-check-for-cr3-validity-in-ioctl_set_sregs.patch%3Bh=b48a47dad2cf76358b327368f80c0805e6370c68%3Bhb=e7c45b24f298b5d9efd7d401150f64a1b51aaac4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=59839dfff5eabca01cc4e20b45797a60a80af8cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sourceforge.net/tracker/?func=detail&atid=893831&aid=2687641&group_id=180599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/06/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-807-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and 5, and Red Hat Enterprise MRG.",
        "lastModified" : "2009-07-01T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters."
      }, {
        "lang" : "es",
        "value" : "statuswml.cgi en Nagios v3.1.1, permite a atacantes remotos ejecutar comandos de su elección a través de metacaracteres de consola en los parámetros (1) ping o (2) Traceroute."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.0",
            "matchCriteriaId" : "19A78517-7672-4267-924E-1C18F41B10C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA91B05-9578-46D8-A21C-4E3C4AB4936A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:1.0b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52432776-C9C6-4CA7-B3D9-87513CBA5716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:1.0b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "601958D5-B393-4EFA-9A6F-A5A04A95F4BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:1.0b4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCEFBFC-38BD-4F78-B068-1A90C6199CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A847327-D74E-460C-9F6F-E04C9B77E0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0879A39F-7C92-4FD3-9FEF-2E7C4F2C0444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A91E463-D239-4853-8A63-E01EE7DB319F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:2.0b4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0073F69B-C5FA-470A-BA95-9C4E8033F5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1121E86B-13EB-4DE3-816A-002C6DC15A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A5D5AC-9E4C-4F3B-A16A-C6DD18DD8D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDCA77EF-1020-4068-9CDC-5CF3B0CD66A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "751C46D5-877F-454B-8488-BBCA10CA4930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "F4754494-17BE-496E-A7B8-453B3028CC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD15E8FA-04D3-4625-BEA5-9F5CC0337699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0:alpha4:*:*:*:*:*:*",
            "matchCriteriaId" : "713C5F3E-AA57-4F52-AC0A-9B1F25C25580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFABA9F-4A45-4150-AED1-897267076A32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "830BB564-82FD-4519-A8EA-DCDF74F2BC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "9A975310-9591-4EBF-B987-CA43433B4C54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "8653D6A2-4B5B-4F1D-A898-8F81F29C6FC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "D18649FF-8838-432E-93B8-3F8B82B0DEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "9375EA90-0763-4817-8C7D-2D7E116E043F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "C02C2F95-2AC2-4E0C-B5D0-785CDF1EDB85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "12E7BC34-65F0-4DD6-8809-F05320955479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "390CFA92-68AE-4DE9-A199-1B7290A82168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1E56F249-3E6A-4764-8CAE-D3E5B6A86AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "953745B7-1381-47F5-8012-E699EFA065CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A8A3DA-61AF-4369-ACB0-7D54EEB1DAA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B7525F-EEE1-4537-BCE6-15DF3E348FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B831C72-C932-4B8C-8B16-C3BC2672AF98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5BB3C9-BBC6-43D8-830A-38020F50B148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9E1C24-9907-44F4-9166-5C679F05DF12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=126996888626964&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35543",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/39227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tracker.nagios.org/view.php?id=15",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nagios.org/development/history/core-3x/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-795-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126996888626964&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tracker.nagios.org/view.php?id=15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nagios.org/development/history/core-3x/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-795-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Arcade Trade Script 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the q parameter in a gamelist action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en Arcade Trade Script v1.0 beta, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"q\" en una acción \"gamelist\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcadetradescript:arcade_trade_script:1.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C858EBA-41EF-4211-9A0D-05D2FEF8A63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35197",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.davidsopas.com/2009/05/25/arcade-trade-script-xss",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503801/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.davidsopas.com/2009/05/25/arcade-trade-script-xss",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503801/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Boy Scout Advancement (com_bsadv) component 0.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a (1) account or (2) event task to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente Boy Scout Advancement (com_bsadv) v0.3 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en (1) \"account\" o (2) \"event task\" al index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kim_eckert:com_bsadv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3",
            "matchCriteriaId" : "D58FD58E-C8D6-4B86-BABF-C2CE19269BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kim_eckert:com_bsadv:0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1723059B-4727-4CF3-803F-D467ADDF7BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kim_eckert:com_bsadv:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A06E8E4-7EB4-4433-92F3-30169E5EB320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kim_eckert:com_bsadv:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F11D78-6657-4D27-A192-6CA30EC0CE6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/503794/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35087",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503794/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in LoginToboggan 6.x-1.x before 6.x-1.5, a module for Drupal, when \"Allow users to login using their e-mail address\" is enabled, allows remote blocked users to bypass intended access restrictions via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el módulo para Drupal LoginToboggan v6.x-1.x anterior a v6.x-1.5, cuando \"Se permite el login de usuarios usando la dirección de correo electrónico\", permite a usuarios remotos bloqueados evitar las restricciones de acceso a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chad_phillips:logintoboggan:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA1B3B3-F3E0-4201-853D-2CF762A843B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chad_phillips:logintoboggan:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1275432-7063-4AC4-88AD-39C4E803997C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chad_phillips:logintoboggan:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DECE092-9862-4EF2-9343-9AE75492C5C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chad_phillips:logintoboggan:6.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA09DE25-32A1-4F73-88C1-6A3C2FD71AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chad_phillips:logintoboggan:6.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75263666-2F4E-4291-ACED-EF2A30337E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chad_phillips:logintoboggan:6.x-1.x:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "C8E2341C-890D-47BD-97CE-85A0D397415D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chad_phillips:logintoboggan:6.x-2.x:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "921A742C-7A0F-4BC7-9909-D0312EE90318"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/461662",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/461682",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35081",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34945",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1312",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/461662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/461682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Appleple a-News 2.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Appleple a-News v2.32, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:appleple:a-news:2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4437BD9-DB4E-4976-93E5-F8C8AC20D342"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN42927215/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000030.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35171",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.appleple.com/news/index.php?ID=170",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN42927215/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.appleple.com/news/index.php?ID=170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-01T13:00:01.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Optimum Web Design Tutorial Share 3.5.0 and earlier allows remote attackers to bypass authentication and obtain administrative access by setting the usernamed cookie parameter."
      }, {
        "lang" : "es",
        "value" : "Optimum Web Design Tutorial Share v3.5.0 y anteriores, permite a atacantes remoto evitar la autenticación y obtener acceso como administradores modificando el parámetro \"usernamed\" en una cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tutorial-share:tutorial_share:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.0",
            "matchCriteriaId" : "D6F1B7E8-9047-4A86-8324-BDECAB89D8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tutorial-share:tutorial_share:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A234D92-68AC-4803-B09E-7549E01D03E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tutorial-share:tutorial_share:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14935102-5E68-4D05-A0FB-DD881AF80F54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54704",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35207",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35075",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in NFS / ONCplus B.11.31_06 and B.11.31_07 on HP HP-UX B.11.31 allows local users to cause a denial of service via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad no especificada en NFS/ONCplus versiones B.11.31_06 y B.11.31_07 sobre HP HP-UX versión B.11.31 permite a los usuarios locales provocar una denegación de servicio por medio de ataques de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64BBA96-FB3C-46AC-9A29-50EE02714FE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oncplus:b.11.31_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25790FF6-9936-419A-AEDA-47CD24696E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oncplus:b.11.31_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB4DF09-21C4-49D2-80CC-A80A97A77C20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=124654506100944&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35644",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1755",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124654506100944&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "evaluatorImpact" : "Per: http://www.vupen.com/english/advisories/2009/1755\r\n\r\n\"Affected Products\r\n\r\nHP-UX B.11.31 running NFS / ONCplus version B.11.31_07 and B.11.31_06 \""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El módulo NFSv4 server kernel en Sun Solaris 10, y OpenSolaris anteriores a snv_119, no implemente apropiadamente nfs_portmon, lo que permite a los atacantes remotos acceso a archivos compartidos, leído, creados y modificados arbitrariamente, a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_95",
            "matchCriteriaId" : "A674E851-57CE-4712-854E-C3DA87D61D7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_95",
            "matchCriteriaId" : "2DF29037-97A8-4C4C-8602-44922802CB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_118",
            "matchCriteriaId" : "22BE2D7A-8B1C-47C9-A979-D14E034022DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_118",
            "matchCriteriaId" : "68420843-8254-4CDC-BF84-BCCEBA174512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B3BBCE23-9F15-45CD-859F-77ED540B51F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "053A0DA6-483C-49BB-BC7A-E624DB2C269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "447212A4-FACD-475E-A62B-60FE6504F63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB694DC0-407A-4555-8B72-DAF3C169DCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "78B80C92-7EB5-4343-B830-32E8C011E572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "535FF689-13A2-40C6-8706-7782038FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "46E4ED9C-F013-48D2-8642-E5BA7599A512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "843246D3-C2DA-454D-916A-AC8905E5134E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A1E8108D-3CE7-4041-9027-1CA7473389EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "244B7FE4-C485-4993-9810-3433C83A120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/42550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139991-03-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-262668-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.avaya.com/css/P8/documents/100058487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/42550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139991-03-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-262668-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.avaya.com/css/P8/documents/100058487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv_90 through snv_108, when Solaris Trusted Extensions is enabled, allows remote attackers to cause a denial of service (panic) via unspecified vectors involving the crgetlabel function, related to a \"TX panic.\" NOTE: this issue exists because of a regression in earlier kernel patches."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el subsistema udp en el kernel en Sun Solaris 10, y OpenSolaris snv_90 hasta snv_108, cuando Solaris Trusted Extensions es habilitado, lo que permite a los atacantes remotos causar una denegación de servicio (panic) a través de vectores no especificado relacionados con la función crgetlabel, relativo a \"TX panic.\" NOTA: este asunto existe por una regresión en parches de kernel anteriores."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35579",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-02-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-262048-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-02-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-262048-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.53 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a CGI request to webappmon.exe.  NOTE: this may overlap CVE-2009-1420."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en rping en HP OpenView Network Node Manager (OV NNM) v7.53 en Linux permite a los atacantes remotos ejecutar arbitrariamente código a través de vectores no especificados, posiblemente relativos a peticiones CGI para webappmon.exe. NOTA: esto puede substituir a CVE-2009-1420."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "769ED1A5-C3C5-404E-8040-655D69C2AA88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2299",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a module for the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via an HTTP request with a large Content-Length value but no POST data."
      }, {
        "lang" : "es",
        "value" : "Artofdefence Hyperguard Web Application Firewall (WAF) módulo anterior a v2.5.5-11635, v3.0 anterior a v3.0.3-11636, y v3.1 anteriores a v3.1.1-11637, un módulo para el Apache HTTP Server, permite a loa atacantes remotos causar una denegación de servicio (consumo de memoria) a través de una petición HTTP con un valor largo Content-Length pero no datos POST."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyperguard_web_application_firewall_project:hyperguard_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.5-11635",
            "matchCriteriaId" : "1807EA11-DBA6-4364-899B-F62D6DE88057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyperguard_web_application_firewall_project:hyperguard_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.0.3-11636",
            "matchCriteriaId" : "7AD94D69-DD65-4C4B-A0D9-BAE8B4461869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyperguard_web_application_firewall_project:hyperguard_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndExcluding" : "3.1.1-11637",
            "matchCriteriaId" : "78A4B7DB-F76E-422F-B6FD-23560E828BAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6CD1F4-4C0E-4989-A2B3-DC086E8E80A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35645",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.h4ck1nb3rg.at/wafs/advisory_artofdefence_hyperguard_200907.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504680/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/35645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.h4ck1nb3rg.at/wafs/advisory_artofdefence_hyperguard_200907.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504680/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The management interface in the phion airlock Web Application Firewall (WAF) 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service (resource consumption) via a crafted request."
      }, {
        "lang" : "es",
        "value" : "El interfaz de administración en phion airlock Web Application Firewall (WAF) v4.1-10.41 no trata adecuadamente peticiones CGI, específicamente con parámetros de ancho y alto grande para una imagen, lo que permite a los atacantes remotos ejecutar arbitrariamente comandos o causar una denegación de servicios (consumo de recursos) a través de una petición manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phion:airlock_web_application_firewall:4.1-10.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213294C0-AC95-4C92-842D-0A6DF0BCCF27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504681/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://techzone.phion.com/hotfix_HF4112",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504681/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://techzone.phion.com/hotfix_HF4112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2301",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The radware AppWall Web Application Firewall (WAF) 1.0.2.6, with Gateway 4.6.0.2, allows remote attackers to read source code via a direct request to (1) funcs.inc, (2) defines.inc, or (3) msg.inc in Management/."
      }, {
        "lang" : "es",
        "value" : "El radware AppWall Web Application Firewall (WAF) v1.0.2.6, con Gateway v4.6.0.2, permite a los atacantes remotos leer código fuente a través de una petición directa a (1) funcs.inc, (2) defines.inc, o (3) msg.inc en Management/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:radware:appwall:1.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B68C7849-B142-42C4-8C07-0581BA46FDFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radware:gateway:4.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "733EBD27-1EFB-4346-A956-91287D048BAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/504682/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504682/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action. NOTE: it was later reported that 5.2.1 is also affected."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en el archivo index.php en Topsites PHP de Aardvark versiones 5.2.0 y anteriores, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro q en una acción search. NOTA: más tarde se informó que la versión 5.2.1 también está afectada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.0",
            "matchCriteriaId" : "AB296624-CB68-4E12-8560-59C56542A422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02BB4B5A-0D58-4696-AF23-8B8A5295FAF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CA47010-FD73-4897-A580-4AAE589FE904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD9D097-C3E0-4CB3-A802-15D1F807B0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F8A0E7-7087-46AF-B2EB-29CDA8FD0CE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969B3A92-77E2-4CD5-AA50-604CF12DB668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C282DA40-217E-4FA1-825E-6EE380F20940"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/41985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websec.id3as.com/aardvark-topsites-php-521-security-vulnerabilities-disclosure/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504574/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/514423/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35506",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/41985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://websec.id3as.com/aardvark-topsites-php-521-security-vulnerabilities-disclosure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504574/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/514423/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Aardvark Topsites PHP 5.2.1 and earlier allows remote attackers to obtain sensitive information via a negative integer value for the start parameter in a search action, which reveals the installation path in an error message."
      }, {
        "lang" : "es",
        "value" : "index.php en Aardvark Topsites PHP v5.2.1 y anteriores que permiten a los atacantes remotos obtener información sensible a través de un valor entero negativo para el parámetro start en una acción search, lo que revela la ruta de instalación en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.1",
            "matchCriteriaId" : "CC6EBC91-6369-460F-84B2-26E9255F9D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02BB4B5A-0D58-4696-AF23-8B8A5295FAF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CA47010-FD73-4897-A580-4AAE589FE904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD9D097-C3E0-4CB3-A802-15D1F807B0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F8A0E7-7087-46AF-B2EB-29CDA8FD0CE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969B3A92-77E2-4CD5-AA50-604CF12DB668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C282DA40-217E-4FA1-825E-6EE380F20940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151788A4-3F7E-42E7-B15E-EB7FB19D3AC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websec.id3as.com/aardvark-topsites-php-521-security-vulnerabilities-disclosure/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504574/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websec.id3as.com/aardvark-topsites-php-521-security-vulnerabilities-disclosure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504574/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to obtain sensitive information via a nonexistent account name in the u parameter in a rate action, which reveals the installation path in an error message."
      }, {
        "lang" : "es",
        "value" : "index.php en Aardvark Topsites PHP v5.2.0 y anteriores que permite a los atacantes remotos obtener información sensible a través del nombre de una cuenta no existente en el parámetro u en una acción rate, lo que revela la ruta de instalación en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.0",
            "matchCriteriaId" : "AB296624-CB68-4E12-8560-59C56542A422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02BB4B5A-0D58-4696-AF23-8B8A5295FAF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CA47010-FD73-4897-A580-4AAE589FE904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD9D097-C3E0-4CB3-A802-15D1F807B0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F8A0E7-7087-46AF-B2EB-29CDA8FD0CE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969B3A92-77E2-4CD5-AA50-604CF12DB668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C282DA40-217E-4FA1-825E-6EE380F20940"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websec.id3as.com/aardvark-topsites-php-521-security-vulnerabilities-disclosure/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504574/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websec.id3as.com/aardvark-topsites-php-521-security-vulnerabilities-disclosure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504574/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of //.\\ (slash slash dot backslash) sequences."
      }, {
        "lang" : "es",
        "value" : "La tarjeta de la cámara de seguridad ARD-9808 DVR permite a los atacantes remotos, causar una denegación de servicio a través de la composición de una URI larga de composición //.\\ (barra barra punto contrabarra)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armassa:ard-9808_software:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09C31E9-0E6D-42B9-8C1C-CED88A764D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:armassa:ard-9808:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "707CA487-97E8-44A9-AAE3-A91456D67BEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing usernames and passwords via a direct request for dvr.ini."
      }, {
        "lang" : "es",
        "value" : "La tarjeta de la cámara de seguridad ARD-9808 DVR guarda información sensible bajo la cuenta de administrador web con control de acceso insuficiente, lo que permite a los atacantes remotos descargar un archivo que contenga nombres de usuarios y contraseñas a través de una petición directa para dvr.ini."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armassa:ard-9808_software:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09C31E9-0E6D-42B9-8C1C-CED88A764D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:armassa:ard-9808:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "707CA487-97E8-44A9-AAE3-A91456D67BEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro (aka MD-Pro) allows remote attackers to execute arbitrary SQL commands via the rid parameter in a viewrecords action to modules.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el módulo CWGuestBook v2.1 y anteriores para MAXdev MDPro (también conocido como MD-Pro), permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro rid en una acción viewrecords para modules.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:cwguestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "69CCF6FD-5900-4425-A44A-6EFB9F3D7A5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B05377-4F3B-46F2-80AA-1175A344F6BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation (aka Affiliates) module 1.1.0 and earlier for PunBB allow remote attackers to execute arbitrary SQL commands via the (1) in or (2) out parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en affiliates.php del módulo Affiliation (también conocido como Affiliates) v1.1.0 y anteriores para PunBB, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"in\" o (2) \"out\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B94FB2-2C83-42D6-BECC-D39E97594CA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punres:affiliates_mod:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.0",
            "matchCriteriaId" : "4359BE72-D905-4D00-B08A-6BD27CE07FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punres:affiliates_mod:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54BF6E51-01A6-417D-8F6D-86523D6E87A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0906-exploits/punbbaffiliations-blindsql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0906-exploits/punbbaffiliationsin-blindsql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35654",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0906-exploits/punbbaffiliations-blindsql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0906-exploits/punbbaffiliationsin-blindsql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Codice CMS 2 allows remote attackers to execute arbitrary SQL commands via the tag parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en ndex.php en Codice CMS 2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"tag\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codice-cms:codice_cms:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23599D37-8028-4AF0-A1DE-884BE99D0F1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34208",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in include/get_read.php in Extensible-BioLawCom CMS (X-BLC) 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the section parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en include/get_read.php en Extensible-BioLawCom CMS (X-BLC) v0.2.0 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"section\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bow_der_kleine:x-blc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.0",
            "matchCriteriaId" : "8E3A816F-AA8E-4C34-BFF4-F53723876F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bow_der_kleine:x-blc:0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BBBA43D-F686-40B5-99FA-3C588EBC1146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34197",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2311",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote attackers to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el el complemento rGallery v1.2.3  para WoltLab Burning Board (WBB3), permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"userID\" el página RGalleryUserGallery al  index.php. Vector distinto del CVE-2008-4627."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:selbstzweck:rgallery_plugin:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9BEB1C5-5C45-49CA-B20E-C8B128CAB458"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC273A0A-B0E7-4C9D-9AE5-85542E9A205B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34194",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges."
      }, {
        "lang" : "es",
        "value" : "SmartFilter Web Gateway Security v4.2.1.00 almacena las credenciales de usuario en texto plano y no tiene los permisos de seguridad adecuados para el archivo config.txt, lo que permite a usuarios locales elevar sus privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:smartfilter:4.2.1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3DF88C-BB46-4F93-8B58-09DE930C1D97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34390",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-02T10:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the name parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php en Jinzora Media Jukebox v2.8 y anteriores, permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de ..(punto punto) en el parámetro \"name\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8",
            "matchCriteriaId" : "26A8F87F-5371-412F-898F-96D52EB24E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB97F8D7-E5BB-4CD4-BDDF-E37ED37A9CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64BE0B56-24C9-4175-89CC-F1CB05857794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D1988A-AFF1-4FCC-9EAC-C6E3A5C92AA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.3:pre:*:*:*:*:*:*",
            "matchCriteriaId" : "E909F9F2-9942-404B-84B1-58BF249784C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.3:pre_2:*:*:*:*:*:*",
            "matchCriteriaId" : "797A0784-0532-4D3D-97B3-2E98E9D8777C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B30BB38-B039-4947-8B4D-AFD4A83E5F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E700B87E-4F56-485A-A603-7C2E8F80CAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4168161-5C1B-41B4-88B5-2BD1B295A176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47926B39-0E2A-4A6D-82D9-1C98FFA30540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFB0E0C-1BDA-4A36-8828-4E8D65C66B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA08A88-D353-47B0-ACA2-7B8DC8487208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AEEC92-721E-48A3-BEE9-38DC00EBA2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CCAACC-6256-4541-8D6F-524776433DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F8886A-CAE7-41CA-B2BD-BA72838E10CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81B4FB9D-FBB0-4CD0-ACE5-B846563D5F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4392BCA1-7992-44E6-9371-71C0A2682C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D73683-A58F-4014-8814-95A1B043C94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55B2254-768A-40C3-B69C-EE3095F937FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C840D223-52D3-4886-8EF0-49A29FF24489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41C86E24-7E72-4D3A-BD4D-5A31F72D138C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057F9E08-4626-40F5-883D-6663E80E502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F685683F-C5D6-41D1-97C3-6793DD0F26BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.0:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7F4D6D4F-AA64-43DA-8BFE-25BA521AE988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFD31704-6221-4EA1-93C9-37136173EB40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D96D8A-86AF-4EC9-9D78-E0BA5C7B146A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68602878-B464-408A-98AE-DC41FBE5A758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FF6B75-791E-414A-BF82-A434523107D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADF0129-A1AA-4D93-8D41-4FD3826B46D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FFB3E2-F20A-4562-A177-08A0BD0D9563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FED132-0372-4BBD-90AF-64A3A10D8654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501C1F8E-4559-451E-8BC8-9273194FE061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "224EBEB4-409F-429A-BFF8-A2D88794A158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "940C145E-3D17-4237-99DB-CFA478503FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728B4AC0-6F82-4C28-9527-F35451C03EF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0D61DB-8EEE-4931-8568-758147286763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE62D449-0ECD-4B66-9A50-EE0ADB849E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEE34F97-DFED-4291-BB64-470B797F7308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6504D56C-C3EE-46BB-9C70-4F54C8758FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A14BFE0-038A-4C00-AF80-30CDAA27CC30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08F2736-751E-463D-9CC5-AEAD46EE62B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3150552A-634A-4CF8-AFE4-DBE2BA6003D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jinzora:jinzora:2.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B8ECF5-B1F1-44AA-B01B-58A84F2E58FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IBM Stax XMLStreamWriter in the Web Services component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 does not properly process XML encoding, which allows remote attackers to bypass intended access restrictions and possibly modify data via \"XML fuzzing attacks\" sent through SOAP requests."
      }, {
        "lang" : "es",
        "value" : "IBM Stax XMLStreamWriter en el componente Web Services de IBM WebSphere Application Server (WAS) v6.1 anterior a v6.1.0.25 , no procesa adecuadamente codificación XML, esto permite a atacantes remotos evitar las restricciones de acceso pretendidas y puede que modificar datos a través de \"ataques difusos XML\" enviados a través de solicitudes SOAP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95255265-6D69-46D3-9FFA-8EDB1734375C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD75308-7F21-4DDF-AD66-C155CF4B721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C250D-8279-4071-871C-1C7C4DE09B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC300B03-7A8F-4E96-B55D-18CC258BBFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C8054A-8581-4936-AF94-291AE56EB4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026EBFCD-0BC1-404B-BC14-292F35BE667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D74F8-4321-48B3-A33E-FCCFA93013CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2043B836-3950-46A1-89E4-08985DEA0D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFCD0A1-64B4-4AE7-8161-D8A71F9D6904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200B6A88-EFBD-4935-9596-D8EF3BC24D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20131F92-09B2-41D8-B5D9-38EFE6883EC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK84015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK84015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1388",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-05T16:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution of the do_coredump function, which allows local users to cause a denial of service (deadlock) via vectors involving the ptrace system call and a coredumping thread."
      }, {
        "lang" : "es",
        "value" : "La función ptrace_start de kernel/ptrace.c en el kernel de Linux v2.6.18, no maneja adecuadamente la ejecución simultánea de la función do_coredump, esto permite a usuarios locales provocar una denegación de servicio -bloqueo mutuo (deadlock)- a través de vectores que incluyen la llamada al sistema ptrace y un hilo coredumping."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=oss-security&m=124654277229434&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://osvdb.org/55679",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36131",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1193.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35559",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/attachment.cgi?id=346615",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/attachment.cgi?id=346742",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=504263",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8625",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8680",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=124654277229434&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://osvdb.org/55679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1193.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/attachment.cgi?id=346615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/attachment.cgi?id=346742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=504263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise 5 via: https://rhn.redhat.com/errata/RHSA-2009-1193.html",
        "lastModified" : "2009-08-05T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 (aka SLE11) does not enable the firewall in certain circumstances involving reboots during online updates, which makes it easier for remote attackers to access network services."
      }, {
        "lang" : "es",
        "value" : "El módulo YaST2 LDAP de yast2-ldap-server de SUSE Linux Enterprise Server v11 -también conocido como SLE11-, no activa el cortafuegos en determinadas circunstancias que incluyen reinicios durante las actualizaciones en línea, esto facilita a los atacantes remotos acceder a los servicios en red."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:11:*:enterprise_desktop:*:*:*:*:*",
            "matchCriteriaId" : "A21C44DE-B976-437F-99F0-C4BB018C3121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:11:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "B34E5287-ED2F-4BE2-8166-52B0108DCEC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1890",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-05T16:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests."
      }, {
        "lang" : "es",
        "value" : "La función stream_reqbody_cl de mod_proxy_http.c en el módulo mod_proxy del Servidor HTTP de Apache anterior a v2.3.3, cuando está configurado un proxy inverso, no maneja adecuadamente un flujo de datos que exceda el valor de Content-Length (Longitud del Contenido), esto permite a atacantes remotos provocar una denegación de servicio (consumo de la CPU) a través de una solicitud manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.12",
            "matchCriteriaId" : "8BBBCFC4-2CFE-42A2-BE6F-2710EB3921A9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB5EDB-520B-4DEF-B06E-65CA13152824"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E8A89-7A16-411F-9D31-676313BB7244"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "941713DB-B1DE-4953-9A9C-174EAFDCB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F87B994-28E4-4095-8770-6433DE9C93AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129190899612998&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/55553",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35691",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35721",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/35793",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/35865",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/37152",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37221",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-04.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=790587&r2=790586&pathrev=790587",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?revision=790587",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=790587&r2=790586&pathrev=790587",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=790587",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0142",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK91259",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK99480",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:149",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1156.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507852/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507857/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35565",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022509",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-802-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb33be0aa9bd8cac9536293e3821dcd4cf8180ad95a8036eedd46365e%40%3Cusers.mina.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12330",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8616",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9403",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1148.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129190899612998&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/55553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/35793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/35865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/37152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=790587&r2=790586&pathrev=790587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?revision=790587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=790587&r2=790586&pathrev=790587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=790587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK91259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK99480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507852/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507857/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-802-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb33be0aa9bd8cac9536293e3821dcd4cf8180ad95a8036eedd46365e%40%3Cusers.mina.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1148.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the input to unspecified connector modules, as exploited in the wild for remote code execution in July 2009, related to the file browser and the editor/filemanager/connectors/ directory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en FCKeditor anterior a v2.6.4.1, permiten a atacantes remotos crear ficheros ejecutables en directorios de su elección a través de secuencias de salto de directorio en la entrada de módulos conectores no especificados, tal como se ha explotado en Julio 2009. Está relacionado con el fichero de navegación y el directorio editor/filemanager/connectors/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.4",
            "matchCriteriaId" : "5A935AD9-DB0B-47A9-8F5E-9FF2A3310865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A396BB3-7329-4522-8C5F-99CCA41C9DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.0_fc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97BEB138-2E35-4770-BA2B-D78FFC6E6CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD08F2AA-D782-419D-945C-D241EB18CBB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.0rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F9F4D2-0A3E-49D6-9A58-D9BCDF492E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.0rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF47BD2F-7AC9-490E-9289-9C259FE4F231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490C6198-FDA6-45BF-B12F-6F9A52B6F1C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83806F80-BA69-4098-A4F6-1F9577871EBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2823302-CCF1-438B-B962-6EE49D371A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FBB64C-5D5D-43D0-A4B9-B08F0012B9D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "28B4FB08-9605-4D05-98B6-844F701BFA35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95BF5CD1-7D68-4FBE-8116-23B4D1415B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE69FFCF-D442-492F-A5F6-56A02E4E9299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A4C3CC-27E5-4962-85B2-404EAF434B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665C47D7-40EC-4F52-8EA0-0886EE8A9345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2271D898-7973-412C-8EA2-EBFD22ABF25E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6834FFFF-F463-4F01-BB13-46705B9933A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68C583B7-5A09-4849-A1E1-600C87854A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45886E0-9D00-42B4-AF12-87EFED09765C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "72159C7B-3F8E-440F-8248-3A5A991957B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "631C1D5A-191E-40D7-A6E4-25C184314527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D47CE1F-04A6-4961-B0B3-5A3EC403EE14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2C7527-3513-4B72-8C8D-295A3A8BAD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E18F60E3-3723-40F3-A632-C3B8B6157682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99B8429-1EBC-483D-87B6-281E2C49E35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.6.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "05B5740F-05C0-4155-BC11-50DE6F8285DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.6.4:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D86941-B839-43CC-A97E-CA52339A9871"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isc.sans.org/diary.html?storyid=6724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mail.zope.org/pipermail/zope-dev/2009-July/037195.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/163271/Adobe-ColdFusion-8-Remote-Command-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=695430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504721/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00710.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00750.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=6724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mail.zope.org/pipermail/zope-dev/2009-July/037195.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.com/files/163271/Adobe-ColdFusion-8-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=695430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504721/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00710.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00750.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the Png_datainfo_callback function in Dillo 2.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG image with crafted (1) width or (2) height values."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función Png_datainfo_callback de Dillo v2.1 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) y puede que ejecutar código de su elección a través de una imagen PNG con el valor modificado (1) ancho o (2) alto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "ED82B0BA-5C9C-4D63-8418-3B45DC8504FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8FFAC5E-77BD-4BF3-8906-FDF240C8E5C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DCC27FB-CEA9-4AA5-9A2C-4A4BD7D3B1A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B31B232-9C62-4FCF-99B8-7C154AF82349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E3A452-0124-4C50-8BBC-64C34C743EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C50FE697-0933-40E3-95BF-C07157E46112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F81343-8538-402B-A5B6-CED15AA2FCCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8859A15-05AB-4883-BA0E-DD96DB2EBE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B3C6AF7-C4C1-4BD7-A1F2-8CAD91E28F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE17AFD-F40D-43DB-B45B-222C9262BEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED11811-287D-4860-9FDC-2DA5E79514E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D555945-9CD8-4C64-88C9-7165B2F9F6A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "735EAB61-5A0B-4FA6-9336-D9DD279996D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086FA8E2-AB31-4A16-A817-6DDE3D6CF1BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E7DB3E1-3697-4000-B10A-BD9699406CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE29B322-482D-4F67-88AB-A71FC1343876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109B06EE-5761-47F7-924D-FCBA32E8D76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F44478CC-17C3-4F1B-AA62-D38148429C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36E45EF-2659-40BA-B4B8-8BE85BE0A302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0EFCAE-417F-4BA2-B47D-C3798658C857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DF2E87-8CB6-41EE-AE17-93CA27A8B5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26B89365-6959-4647-A589-994E0060FFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033E89CE-2EE6-41C0-9146-0F1B56C798B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0F574E-EB2B-4014-A17F-15C7A31947F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE4AB244-DBC9-4CC4-A6F4-A387E516CA1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DE54F9-49D5-4994-B666-047F4A0BA243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598E7C2A-2BF1-4CD6-A3E6-9547F17E04FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBEA2E6-481F-44FA-8D40-1DBC452A5DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7933C08-CB36-41A3-94FA-6F594771D8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE50669F-DA11-4F51-BD86-0EDC451045AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75B1797D-CD5F-4875-8FBF-31488BD40282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A4A558A-B9DF-44E8-81C9-6925AD22B173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "436855BE-C8EA-46A0-8B8C-3F0F437285E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "874E4818-DA1A-4D8E-9E32-45011FF4856E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29B4FC0-C665-4AD7-AB97-E4A743230F78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1ACF40C-4A44-451C-934E-1EC11AF6C5EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7293FB7-4E6F-4ADA-B4A1-2C21BDC0EECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5BB7C24-A110-4204-AF2E-EDEBF58BE252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F8EDA4-EFDA-47F1-928A-22442DA2355E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.8.5:pre-dw-design1:*:*:*:*:*:*",
            "matchCriteriaId" : "062D40F5-C0E6-44B2-B573-CB846FE72819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.8.5:pre-dw-design2:*:*:*:*:*:*",
            "matchCriteriaId" : "179E7B4D-6818-4722-9113-2EC3453A5F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.8.5:pre-dw-design3:*:*:*:*:*:*",
            "matchCriteriaId" : "82E27AD6-F43B-4000-A251-770C5FFCC91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dillo:dillo:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65DE3B84-383A-4952-ABA1-02099E9693F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-008.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504727/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504727/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in CamlImages 2.2 and earlier might allow context-dependent attackers to execute arbitrary code via a crafted PNG image with large width and height values that trigger a heap-based buffer overflow in the (1) read_png_file or (2) read_png_file_as_rgb24 function."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en CamlImages  v2.2 y anteriores, podría permitir a atacantes dependientes del contexto ejecutar código de su elección a través de una imagen PNG manipulada con unos valores de ancho y largo elevados, lo que provoca un desbordamiento de búfer basado en memoria dinámica (heap) en las funciones (1) read_png_file o (2) read_png_file_as_rgb24."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jun_furuse:camlimages:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "DF09EF32-C7EB-44CA-A8DE-F5E661D23AC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504696/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504696/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the Sun Lightweight Availability Collection Tool 3.0 on Solaris 7 through 10 allows local users to overwrite arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en la Sun Lightweight Availability Collection Tool v3.0 de Solaris 7 hasta 10 , permite a usuarios locales sobrescribir ficheros de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:lightweight_availability_collection_tool:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A19444C-672B-4338-A0A3-A3606DC49807"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:7.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F830AE29-6AC0-4C78-A637-E69BA63FAF9A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "32CF7469-6D2F-4E34-8013-7F0D3433D0B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-261408-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020599.1-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-261408-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020599.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.467",
      "lastModified" : "2023-11-07T02:04:06.350",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-2204.  Reason: This candidate is a duplicate of CVE-2009-2204.  Notes: All CVE users should reference CVE-2009-2204 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2316",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0 allow remote attackers to inject arbitrary web script or HTML by entering an unspecified URL in (1) the self-service UI interface or (2) the console interface. NOTE: it was later reported that 4.6.0 is also affected by the first vector."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en IBM Tivoli Identity Manager (ITIM) v5.0, permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección al introducir una URL no especificada en (1) la interfaz del propio servicio UI o (2) la interfaz de la consola."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_identity_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D36671F-4B3C-4E23-B1EC-7CF4AA17C08A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35696",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54310",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24023640",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24023929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24023640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24023929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Axesstel MV 410R has a certain default administrator password, and does not force a password change, which makes it easier for remote attackers to obtain access."
      }, {
        "lang" : "es",
        "value" : "El  Axesstel MV 410R tiene una contraseña de administrador por defecto, y no se obliga al cambio de contraseña, lo que facilita el acceso a atacantes remotos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:axesstel:mv_410r:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19511BCC-9DAD-4342-99B5-163DABC3A432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Axesstel MV 410R allows remote attackers to cause a denial of service via a flood of SYN packets, a related issue to CVE-1999-0116."
      }, {
        "lang" : "es",
        "value" : "El Axesstel MV 410R, permite a atacantes remotos provocar una denegación de servicio mediante una avalancha de paquetes SYN. Vulnerabilidad relacionada con CVE-1999-0116."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:axesstel:mv_410r:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19511BCC-9DAD-4342-99B5-163DABC3A432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/504716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default configuration of the Wi-Fi component on the Axesstel MV 410R does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network."
      }, {
        "lang" : "es",
        "value" : "La configuración por defecto del componente Wi-Fi de Axesstel MV 410R no emplea cifrado, esto facilita a los atacantes remotos obtener información sensible espiando la red."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:axesstel:mv_410r:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19511BCC-9DAD-4342-99B5-163DABC3A432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/504716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface on the Axesstel MV 410R relies on client-side JavaScript code to validate input, which allows remote attackers to send crafted data, and possibly have unspecified other impact, via a client that does not process JavaScript."
      }, {
        "lang" : "es",
        "value" : "La interfaz web de Axesstel MV 410R permite del lado del cliente la ejecución de código JavaScript para la validación de entrada, lo que permite a atacantes remotos el envío de datos manipulados, y posiblemente tenga otro impacto desconocido, a través de un cliente que no procesa JAvaScript."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:axesstel:mv_410r:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19511BCC-9DAD-4342-99B5-163DABC3A432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/504716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to cause a denial of service (configuration reset) via a RESTORE=RESTORE query string."
      }, {
        "lang" : "es",
        "value" : "cgi-bin/sysconf.cgi del Axesstel MV 410R, permite a atacantes remotos provocar una denegación de servicio (reinicio de la configuración) a través de una cadena de consulta RESTORE=RESTORE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:axesstel:mv_410r:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19511BCC-9DAD-4342-99B5-163DABC3A432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en cgi-bin/sysconf.cgi del Axesstel MV 410R, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:axesstel:mv_410r:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19511BCC-9DAD-4342-99B5-163DABC3A432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/504716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35563",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface on the Axesstel MV 410R redirects users back to the referring page after execution of some CGI scripts, which makes it easier for remote attackers to avoid detection of cross-site request forgery (CSRF) attacks, as demonstrated by a redirect from the cgi-bin/wireless.cgi script."
      }, {
        "lang" : "es",
        "value" : "El interfaz web del Axesstel MV 410R, redrecciona a los usuarios a la página visitada previamente tras la ejecución de algunas secuencias de comandos CGI, lo que facilita a atacantes remotos evitar la detección de ataques de falsificación de petición en sitios cruzados (CSFR), como se ha demostrado mediante una redirección en la secuencia de comandos cgi-bin/wireless.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:axesstel:mv_410r:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19511BCC-9DAD-4342-99B5-163DABC3A432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/504716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitrary web script or HTML via components in the samples (aka _samples) directory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en FCKeditor anterior a v2.6.4.1, permite a atacantes remotos inyectar secuencias de comandos Web o HTML utilizando componentes en el directorio samples (también conocido como _samples)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.4",
            "matchCriteriaId" : "5A935AD9-DB0B-47A9-8F5E-9FF2A3310865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A396BB3-7329-4522-8C5F-99CCA41C9DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.0_fc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97BEB138-2E35-4770-BA2B-D78FFC6E6CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD08F2AA-D782-419D-945C-D241EB18CBB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.0rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F9F4D2-0A3E-49D6-9A58-D9BCDF492E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.0rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF47BD2F-7AC9-490E-9289-9C259FE4F231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490C6198-FDA6-45BF-B12F-6F9A52B6F1C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83806F80-BA69-4098-A4F6-1F9577871EBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2823302-CCF1-438B-B962-6EE49D371A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FBB64C-5D5D-43D0-A4B9-B08F0012B9D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "28B4FB08-9605-4D05-98B6-844F701BFA35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95BF5CD1-7D68-4FBE-8116-23B4D1415B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE69FFCF-D442-492F-A5F6-56A02E4E9299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A4C3CC-27E5-4962-85B2-404EAF434B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665C47D7-40EC-4F52-8EA0-0886EE8A9345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2271D898-7973-412C-8EA2-EBFD22ABF25E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6834FFFF-F463-4F01-BB13-46705B9933A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68C583B7-5A09-4849-A1E1-600C87854A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45886E0-9D00-42B4-AF12-87EFED09765C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "72159C7B-3F8E-440F-8248-3A5A991957B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "631C1D5A-191E-40D7-A6E4-25C184314527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D47CE1F-04A6-4961-B0B3-5A3EC403EE14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2C7527-3513-4B72-8C8D-295A3A8BAD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E18F60E3-3723-40F3-A632-C3B8B6157682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99B8429-1EBC-483D-87B6-281E2C49E35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.6.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "05B5740F-05C0-4155-BC11-50DE6F8285DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.6.4:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D86941-B839-43CC-A97E-CA52339A9871"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ocert.org/advisories/ocert-2009-007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504721/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504721/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Clicknet CMS 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the side parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php de Clicknet CMS v2.1, permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro side."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clicknet:clicknet_cms:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4532AA-6A12-4A6E-8C6C-18B4CD1BF767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35607",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1736",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) an enter_parol cookie to index.php in an auto action or (2) the topic parameter to message.php.  NOTE: vector 2 can be leveraged for a cross-site scripting (XSS) attack."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en KerviNet Forum v1.1 y anteriores, permie a atacantes remotos ejecutar comandos SQL de su elección a través de  (1) la cookie enter_parol cookie a index.php en una acción auto o (2) el parámetro \"topic\"  a message.php.  NOTA: el vector 2 puede ser aprovechado para una ataque de ejecución de secuencias de comandos en sitios cruzados (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:max_kervin:kervinet_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "E247F110-1648-462A-AF0E-2BA9BE46888F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the v_variant1 parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en add_voting.php de KerviNet Forum v1.1 y anteriores, permite a usuarios autenticados en remoto inyectar secuencias de comandos Web o HTML a través del parámetro v_variant1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:max_kervin:kervinet_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "E247F110-1648-462A-AF0E-2BA9BE46888F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remote attackers to delete arbitrary accounts and conduct SQL injection attacks via the del_user_id parameter."
      }, {
        "lang" : "es",
        "value" : "admin/edit_user.php en KerviNet Forum v1.1 y anteriores, no requiere autenticación como administrador, lo que permite a atacantes remotos eliminar cuentas de su elección y llevar a cabo ataques SQL a través del parámetro \"del_user_id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:max_kervin:kervinet_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "E247F110-1648-462A-AF0E-2BA9BE46888F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KerviNet Forum 1.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) admin/head.php, or (2) voting_diagram.php, (3) voting.php, (4) topics_search.php, (5) topics_list.php, (6) top_part.php, (7) quick_search.php, (8) quick_reply.php, (9) moder_menu.php, (10) messages_list.php, (11) menu.php, (12) head.php, (13) forums_list.php, (14) forum_statistics.php, (15) forum_info.php, or (16) birthday.php in include_files/, which reveals the installation path in an error message."
      }, {
        "lang" : "es",
        "value" : "KerviNet Forum v1.1 y anteriores, permite a atacantes remotos obtener información sensible a través de una solicitud directa a (1) admin/head.php o (2) voting_diagram.php, (3) voting.php, (4) topics_search.php, (5) topics_list.php, (6) top_part.php, (7) quick_search.php, (8) quick_reply.php, (9) moder_menu.php, (10) messages_list.php, (11) menu.php, (12) head.php, (13) forums_list.php, (14) forum_statistics.php, (15) forum_info.php o (16) birthday.php de include_files/; lo cual revela la ruta de instalación en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:max_kervin:kervinet_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "E247F110-1648-462A-AF0E-2BA9BE46888F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin/admin_menu.php in CMS Chainuk 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the menu parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin/admin_menu.php de CMS Chainuk v1.2 y anteriores, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro menu."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cms.tut.su:cms_chainuk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "A3888C3E-9A85-4787-A623-5B4343E9AC4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple static code injection vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to inject arbitrary PHP code (1) into settings.php via the menu parameter to admin_settings.php or (2) into a content/=NUMBER.php file via the title parameter to admin_new.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de código estático en CMS Chainuk v1.2 y anteriores, permite a atacantes remotos inyectar código PHP de su elección (1) dentro de settings.php a través del parámetro \"menu\" a admin_settings.php o (2) dentro de un archivo  content/=NUMBER.php a través del parámetro \"title\" a admin_new.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cms.tut.su:cms_chainuk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "A3888C3E-9A85-4787-A623-5B4343E9AC4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via (1) a crafted id parameter to index.php or (2) a nonexistent folder name in the id parameter to admin/admin_delete.php, which reveals the installation path in an error message."
      }, {
        "lang" : "es",
        "value" : "CMS Chainuk v1.2 y anteriores, permite a atacantes remotos obtener información sensible a través de (1) un parámetro id de index.php modificado o (2) un nombre de carpeta que no exista en el parámetro id de admin/admin_delete.php; esto revela la ruta de instalación en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cms.tut.su:cms_chainuk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "A3888C3E-9A85-4787-A623-5B4343E9AC4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55670",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/55671",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/55671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-05T16:30:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the menu parameter to admin/admin_menu.php, and the id parameter to (2) index.php and (3) admin/admin_edit.php; and (4) delete arbitrary local files via a .. (dot dot) in the id parameter to admin/admin_delete.php.  NOTE: vector 2 can be leveraged for static code injection by sending a crafted menu parameter to admin/admin_menu.php, and then sending an id=../menu.csv request to index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en CMS Chainuk v1.2 y anteriores, permite a atacantes remotos añadir y ejecutar archivos de su elección a través de ..(punto punto) en los parámetros (1) \"menu\" a admin/admin_menu.php, el  \"id\" a (2) index.php and (3) admin/admin_edit.php; eliminar archivos de su elección a través  de ..(punto punto) en el parámetro \"id\" a admin/admin_delete.php.  NOTA: el vector 2 puede ser aprovechado para la inyección de código estático enviando  el parámetro \"menu\" manipulado a admin/admin_menu.php, y a continuación, enviando una petición  id=../menu.csv request al  index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cms.tut.su:cms_chainuk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "A3888C3E-9A85-4787-A623-5B4343E9AC4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T19:00:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in includes/module/book/index.inc.php in w3b|cms Gaestebuch Guestbook Module 3.0.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the spam_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en includes/module/book/index.inc.php de w3b|cms Gaestebuch Guestbook Module v3.0.0, cuando magic_quotes_gpc es desactivado, permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro spam_id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:w3bcms:w3bcms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FDEE753-87E8-42E7-9F7D-60C2AF1A7529"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3bcms:gaestebuch_guestbook_module:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60FC2603-ECD2-4564-BFBE-D522F153FE60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53614",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34650",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.w3bcms.de/2.news/54.kommentare/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/53614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.w3bcms.de/2.news/54.kommentare/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T19:00:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in includes/startmodules.inc.php in FreeWebshop.org 2.2.9 R2, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang_file parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en includes/startmodules.inc.php de FreeWebshop.org v2.2.9 R2, permite a atacantes remotos incluir y ejecutar archivos locales a su elección a través de .. (punto punto) en el parámetro lang_file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freewebshop:freewebshop:2.2.9:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7FAC18FB-545A-432A-B1C0-8B7ED62E9822"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34707",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T19:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Rentventory allows remote attackers to execute arbitrary SQL commands via the product parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php de Rentventory permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro product."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rentventory:rentventory:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D3B580-AF25-45B6-993D-CA9DC3AC1AF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55555",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35676",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T19:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtUserName (aka User Name) parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/index.php  de Opial v1.0 permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro txtUserName. NOTA: algunos de estos detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opial:opial:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17DD783-6541-487C-A2D7-5A3AC3142023"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55560",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35560",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/55560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T19:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the albumid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en albumdetail.php de Opial v1.0 permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro albumid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shalwan:opial:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E0DCAF-FC37-4489-AA56-B1D7162F489C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55561",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35562",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/55561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T19:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin.php (aka the login page) in Content Management Made Easy (CMME) before 1.22 allows remote attackers to inject arbitrary web script or HTML via the username field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin.php (también conocido como página de login)de Content Management Made Easy (CMME) v1.22  y anteriores, permite a atacantes remotos inyectar código web o HTML a su elección a través del campo nombre de usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hans_oesterholt:cmme:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.21",
            "matchCriteriaId" : "F6F5F426-B5D9-4852-9A99-7A1CC97EF07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hans_oesterholt:cmme:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC22F7C-B77B-4E7D-B7A5-C23DF080CF4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hans_oesterholt:cmme:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69496B41-06D4-4520-9B96-CA52340BCAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hans_oesterholt:cmme:1.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FF586F-9FCE-44FD-86B4-BBD5D8960082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hans_oesterholt:cmme:1.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA93DF4-E422-45C6-947D-72C39527503A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hans_oesterholt:cmme:1.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E78D4A3-1065-4209-ABA7-E37DC506738B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hans_oesterholt:cmme:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C291A60C-22B5-4BC2-9FD5-8C45EAFD7CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hans_oesterholt:cmme:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B5A1DE-2725-4CE8-B72B-94B40B2D292C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hans_oesterholt:cmme:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A585CC6-497B-4570-8CE9-78D3A25E2A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hans_oesterholt:cmme:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63FA730E-6D1F-4F8B-A4CA-FF5A0B4CAC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hans_oesterholt:cmme:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA0E7F0-E4E4-4E49-90A2-A8899545D46C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hans_oesterholt:cmme:1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F67A768C-F508-4DFA-8F19-DD81F45A6CAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35610",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=694724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/tracker/?func=detail&aid=2500186&group_id=215535&atid=1034058",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=694724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/tracker/?func=detail&aid=2500186&group_id=215535&atid=1034058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T19:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in people.php in Zoph before 0.7.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en people.php de Zoph v0.7.0.6 y anteriores, permite a atacantes remotos inyectar código web o HTML a su elección a través de vectores no especificados. NOTA: algunos de estos detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoph:zoph:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.0.5",
            "matchCriteriaId" : "1E5A6F89-921F-4505-ACC9-888A14F2AE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoph:zoph:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C51D78-6B7B-4726-BBC5-1597BEBAEC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoph:zoph:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C4F1CF-B2BB-48B2-83F4-0520E5C9ACD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoph:zoph:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856E1497-3819-440B-8062-57FCCFD0E666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoph:zoph:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF492E31-36B8-4F14-AF80-43484C26C96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoph:zoph:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81989ECB-5AD1-42BB-A54D-06F1D1F6BF46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoph:zoph:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB3829B-49A8-4B73-88E3-B37D0C396FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoph:zoph:0.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13ABB946-E3B3-4CA7-8A0A-ACAC4C030785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoph:zoph:0.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4590D940-90BA-4726-A800-93A96D2FD26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoph:zoph:0.7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06FA133-F834-4155-9837-848DAC44C777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoph:zoph:0.7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934D81AD-8143-4B0F-928F-1DA47754924B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35700",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=694128",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zoph.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=694128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zoph.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T19:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote authenticated users to gain privileges via a $admin value for the admin parameter in an edit action to admin/user/user.cgi and unspecified other components."
      }, {
        "lang" : "es",
        "value" : "La interfaz de administración web en Sourcefire Defense Center (DC) y 3D Sensor anteriores a v4.8.2 permiten a usuarios autentificarse para obtener privilegios a través de un valor $admin para los parametros de administración en una acción de edición de admin/user/user.cgi y otros componentes no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sourcefire:3d_sensor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "7F78FF4A-7E52-48AC-BA6C-134A2CF16E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sourcefire:3d_sensor:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C912A2-516B-4812-9202-015A181D2768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sourcefire:3d_sensor:4.8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8573E9A-5F6A-4A31-AC29-47A5021AECF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sourcefire:3d_sensor:4.8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "997B953B-7DCC-4707-8BEE-95218461864D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sourcefire:defense_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1",
            "matchCriteriaId" : "D2902AF6-3F68-4FC7-8012-64BD406367FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sourcefire:defense_center:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "981AB37C-4308-4339-A024-583CB09D9703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sourcefire:defense_center:4.8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC3E2566-A460-4D7E-9991-B026B407F600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sourcefire:defense_center:4.8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64DBAB25-4691-4225-9AA4-66E93F31A93B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35658",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504694/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35553",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1785",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504694/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T19:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ClanSphere before 2009.0.1 allow remote attackers to execute arbitrary SQL commands via unknown parameters to the gbook module and unspecified other components."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades tipo inyección SQL en versiones de ClanSphere anteriores a v.2009.0.1 permiten a atacantes remotos ejecutar comandos SQL a su elección a través de parámetros no especificados al módulo gbook y otros componentes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansphere:clansphere:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2009.0",
            "matchCriteriaId" : "9D37828F-460B-45A0-A9BB-2ED8ACF78A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansphere:clansphere:2007.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B498CF2-0ED8-497E-9375-5C7E31941095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansphere:clansphere:2007.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91ED323B-9626-46F5-AFA9-98C3705A502F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansphere:clansphere:2007.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5036F226-B242-485D-95F9-3A4218AC4C02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansphere:clansphere:2007.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E2F6F-2A34-4335-93FA-5EB054BFEAB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansphere:clansphere:2007.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C73C22-D21C-4BAF-B945-C83F08D56AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansphere:clansphere:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC5B7AF-964C-412B-8CE2-17B03AC34026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansphere:clansphere:2008.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22458DE4-F715-4ECE-9FF1-08F0AC430C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansphere:clansphere:2008.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5A55ADA-F556-4C25-8415-208E9E68ACCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansphere:clansphere:2008.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B73D07-06C5-4466-8157-82DE5304E7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansphere:clansphere:2009.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "96F6E5E6-C61A-411C-B179-E301DF4AB7F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansphere:clansphere:2009.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E469F4-FC52-4151-AB6F-F41B3E0BA72E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansphere:clansphere:2009.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D85C9E29-3771-4BEF-BDBD-09933D7F8087"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35694",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.clansphere.net/index/news/view/id/405/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35576",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1794",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.clansphere.net/index/news/view/id/405/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T23:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6.0.2900.2180 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer v6.0.2900.2180 y anteriores no bloquean el código \"javascript\": URIs en cabeceras \"Refresh\" en respuestas HTTP, permitiendo a atacantes remotos llevar a cabo ataques de secuencias de comandos en sitios cruzados (XSS) utilizando vectores relacionados con (1) inyectar una cabecera \"Refresh\" o (2) especificar el contenido de una cabecera \"Refresh\". Vulnerabilidad relacionado con CVE-2009-1312."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3275/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504718/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504723/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35570",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3275/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504718/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504723/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T23:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera 9.52 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312. NOTE: it was later reported that 10.00 Beta 3 Build 1699 is also affected."
      }, {
        "lang" : "es",
        "value" : "El navegador Opera versión 9.52 y versiones anteriores no bloquean javascript: URI en los encabezados de actualización en las respuestas HTTP, lo que permite a los atacantes remotos conducir ataques de tipo Cross-Site Scripting (XSS) mediante vectores relacionados con (1) inyectar un encabezado Refresh o (2) especificar el contenido de un encabezado Refresh, un problema relacionado con CVE-2009-1312. NOTA: luego se informó que 10.00 Beta 3 Build 1699 también se ve afectado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.52",
            "matchCriteriaId" : "BC7CF5F1-7CB8-4E77-8462-CE1BF0591D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C35850-B79C-4EE4-A6F2-CC5D2304724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7965089-8592-47F2-958B-7DBE669BCAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1750B2D-7AC8-45CF-9879-1D0476EEE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE4473-88C0-4E28-A5B5-F7383B0E5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC41D6-73D4-44E9-87E4-E1E955B9580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5A5E5-3703-44AC-9963-A20A55002B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3E5BEF-3F29-4929-A37C-C49322B19047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0E7B5D-2568-4128-8F99-E74D24A7E991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A04906-7267-4A09-87BF-D639C7CF315B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E48C83-01AE-4A33-A004-14B99792674C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A2B78-70BD-439B-B1ED-A17FA5EF0990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623E4466-82CC-4BDD-BE25-3BB33B585547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECA190-D7D3-4248-A61E-0D87E67E3D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC4250E-E638-4015-B5EF-7B5405F7FBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.00:beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB6D630-28EC-4506-AD0D-8C9A5E7D45CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3275/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504718/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504723/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35571",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3275/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504718/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504723/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T23:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome 1.0.154.48 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312. NOTE: it was later reported that 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta are also affected."
      }, {
        "lang" : "es",
        "value" : "Chrome de Google versiones 1.0.154.48 y anteriores, no bloquea los URI javascript: en encabezados Refresh en respuestas HTTP, que permite a los atacantes remotos conducir ataques de tipo cross-site scripting (XSS) por medio de vectores relacionados con (1) inyectar un encabezado Refresh o ( 2) especificar el contenido de un encabezado Refresh, este es un problema relacionado con el CVE-2009-1312. NOTA: más tarde se reportó que las versiones 2.0.172.28, 2.0.172.37 y 3.0.193.2 Beta también están afectadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.154.48",
            "matchCriteriaId" : "4E9FA397-22DD-448C-8CC5-93549EAD7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8FF77A-7802-4963-B532-3F16C7BB012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73576CF-76EE-42A3-9955-D7991384B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3275/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504718/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504723/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35572",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3275/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504718/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504723/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2353",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T23:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "encoder.php in eAccelerator allows remote attackers to execute arbitrary code by copying a local executable file to a location under the web root via the -o option, and then making a direct request to this file, related to upload of image files."
      }, {
        "lang" : "es",
        "value" : "Encoder.php en eAccelerator permite a atacantes remotos ejecutar código a su elección copiando archivos ejecutables locales bajo la cuenta de administrador web a través de la opción -o y luego realizar una solicitud de dicho archivo, relacionado con la subida de ficheros de tipo imágen."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaccelerator:eaccelerator:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCFAAEC-5080-4725-92FA-B52D995EEA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaccelerator:eaccelerator:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D324A10D-C39E-4B15-9934-36DDB1A264C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaccelerator:eaccelerator:0.9.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7309B6-80BF-4BFF-9362-D8F425D338FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaccelerator:eaccelerator:0.9.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "EABE705C-14E3-4638-990F-E45AB15F99E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaccelerator:eaccelerator:0.9.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5291F26A-0875-4A36-ABA3-1B6BBF196711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaccelerator:eaccelerator:0.9.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93F82A7-A2E5-456A-B1B3-D1D97A330EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaccelerator:eaccelerator:0.9.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7837E3C-E0F5-4518-B98C-5EBE8F4E48FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaccelerator:eaccelerator:0.9.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B435D1-315B-4C39-BDC0-40E930A750D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504695/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504695/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2354",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T23:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the auth_checkpass function in the login page in NullLogic Groupware 1.2.7 allows remote attackers to execute arbitrary SQL commands via the username parameter."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de inyección SQL en la función auth_checkpass de la página de ingreso en NullLogic Groupware v1.2.7 permite a atacantes remotos ejecutar comandos SQL a su elección a través de los parámetros de usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nulllogic:groupware:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D0B6C8-315F-4A04-A133-9450AAA1ACCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nth-dimension.org.uk/utils/get.php?downloadsid=55",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504737/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nth-dimension.org.uk/utils/get.php?downloadsid=55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504737/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T23:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The forum module in NullLogic Groupware 1.2.7 allows remote authenticated users to cause a denial of service (application crash) by specifying (1) an empty string or (2) a non-numeric string when selecting a forum, related to the fmessagelist function."
      }, {
        "lang" : "es",
        "value" : "El módulo forum en NullLogic Groupware v.1.2.7 permite la autentificación de usuarios remotos causando una denegación de servicio (caida de la aplicación), especificando (1) una cadena vacia o (2)una cadena no numérica cuando, relativa a la función fmessagelist."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dan_cahill:nulllogic_groupware:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7AD5C6-C4CF-4F21-9ED1-CFAF8859C384"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nth-dimension.org.uk/utils/get.php?downloadsid=55",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504737/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nth-dimension.org.uk/utils/get.php?downloadsid=55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504737/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T23:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in the pgsqlQuery function in NullLogic Groupware 1.2.7, when PostgreSQL is used, might allow remote attackers to execute arbitrary code via input to the (1) POP3, (2) SMTP, or (3) web component that triggers a long SQL query."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento múltiple basado en pila de la función pgsqlQuery en NullLogic Groupware v1.2.7, cuando PostgreSQL es usado, quizás permita a los atacantes remotos ejecutar código a su elección a través (1) POP3, (2) SMTP, o (3) componente web que provoca una petición larga SQL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dan_cahill:nulllogic_groupware:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7AD5C6-C4CF-4F21-9ED1-CFAF8859C384"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nth-dimension.org.uk/utils/get.php?downloadsid=55",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504737/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nth-dimension.org.uk/utils/get.php?downloadsid=55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504737/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T23:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default configuration of TekRADIUS 3.0 uses the sa account to communicate with Microsoft SQL Server, which makes it easier for remote attackers to obtain privileged access to the database and the underlying Windows operating system."
      }, {
        "lang" : "es",
        "value" : "La configuración por defecto de TekRADIUS v3.0 usa la cuenta \"sa\" para comunicarse con Microsoft SQL Server, lo que facilita a atacantes remotos obtener acceso privilegiado a la base de datos y al sistema operativo Windows subyacente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yasinkaplan:tekradius:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8072089D-81C9-41A9-AEB3-DEC23DF2A9B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nth-dimension.org.uk/utils/get.php?downloadsid=56",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504740/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nth-dimension.org.uk/utils/get.php?downloadsid=56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504740/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T23:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TekRADIUS 3.0 uses BUILTIN\\Users:R permissions for the TekRADIUS.ini file, which allows local users to obtain obfuscated database credentials by reading this file."
      }, {
        "lang" : "es",
        "value" : "TekRADIUS v3.0 emplea permisos BUILTIN\\Users:R para el archivo TekRADIUS.ini, lo que permite a usuarios locales obtener credenciales para la base de datos ofuscada leyendo este archivo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yasinkaplan:tekradius:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8072089D-81C9-41A9-AEB3-DEC23DF2A9B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nth-dimension.org.uk/utils/get.php?downloadsid=56",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504740/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nth-dimension.org.uk/utils/get.php?downloadsid=56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504740/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-07T23:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in TekRADIUS 3.0 allow context-dependent attackers to execute arbitrary SQL commands via (1) the GUI client, as demonstrated by input to the Browse Users text box in the Users tab; or (2) the command-line client, as demonstrated by a certain trcli -r command."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en TekRADIUSv3.0, permite a atacantes dependientes del contexto ejecutar comandos SQL de su elección a través de(1) el cliente GUI, como se demostró introduciendo en el cuadro de texto \"Browse Users\" en la pestaña \"Users\" o (2) a través del cliente de línea de comandos, como se demostró con el comando \"trcli -r\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yasinkaplan:tekradius:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8072089D-81C9-41A9-AEB3-DEC23DF2A9B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nth-dimension.org.uk/utils/get.php?downloadsid=56",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504740/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nth-dimension.org.uk/utils/get.php?downloadsid=56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504740/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in passwd/main.php in the Passwd module before 3.1.1 for Horde allows remote attackers to inject arbitrary web script or HTML via the backend parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Passwd anteriores a v3.1.1 de Horde, permite a los atacantes remotos inyectar código web o HTML a través del parametro backend"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:passwd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "3B86E9FA-743D-48F0-86DA-52518D082EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:passwd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21CBEB3-49DA-4DF7-93B2-5C15427AB735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:passwd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EB6F7B-EA67-4935-88FB-F15D585F6F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:passwd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5856C7BD-1C10-4527-8C6A-0A75EC1B751E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:passwd:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A42BBE35-8FE6-46E0-9A43-09EA7830BC32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:passwd:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5EE8AA-591E-457D-8885-20CB9448FA66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.horde.org/ticket/8398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000507.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35720",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35573",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1784",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.horde.org/ticket/8398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2009/000507.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in include/class.staff.php in osTicket before 1.6 RC5 allows remote attackers to execute arbitrary SQL commands via the staff username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en include/class.staff.php en osTicket before v1.6 RC5 permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro staff username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket:*:rc4:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "B8BAC86E-391D-4571-99E4-54D8D2DA8C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket:1.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "61AEBDDE-5649-404E-8846-308F25503BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket:1.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B55B2C-EFBB-4C9E-995A-79B9FB0250ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket:1.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "BF72CFE6-ADA8-410F-AEFF-368A7445B8FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osticket.com/forums/project.php?issueid=118",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35629",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ngenuity.org/wordpress/2009/06/26/osticket-admin-login-blind-sql-injection/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/55472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504615/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1726",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osticket.com/forums/project.php?issueid=118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ngenuity.org/wordpress/2009/06/26/osticket-admin-login-blind-sql-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/55472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504615/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long string in a (1) .lst or (2) .m3u playlist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en KUDRSOFT AudioPLUS v2.00.215 permite a los atacantes remotos ejecutar código a su elección a través de una cadena larga en (1) .lst o (2) lista .m3u"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukudr:audioplus:2.0.0.215:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52626FDE-E598-4FE6-8B92-301285F4B266"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/audioplus-overflow.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35673",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1764",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/audioplus-overflow.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.00.215 allows remote attackers to execute arbitrary code via a .pls playlist file with a playlist entry containing a long File1 argument."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en KUDRSOFT AudioPLUS v2.00.215 permite a los atacantes remotos ejecutar código a su elección a través archivos de listas .pls que ejecutan una lista cuya entrada contiene un argumento largo File1.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukudr:audioplus:2.00.215:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C90F5B-2795-4146-8D17-4E12045E8198"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/audiopluspls-overflow.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/audiopluspls-overflow.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in a .plf file and (2) a long string in the listdata.dat file, possibly related to a track entry."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Mp3-Nator v2.0 permite a los atacantes remotos ejecutar código a su elección a través de cadenas largas en archivos .plf, probablemente relacionados con una entrada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp3-nator:mp3-nator:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C9C6BD-F436-40B5-8D2F-BA1F9DC78DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1765",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.asp in DataCheck Solutions GalleryPal FE 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en login.asp en DataCheck Solutions GalleryPal FE v1.5 permite a atacantes remotos ejecutar comandos SQL a su elección a través de vectores no especificados. NOTA: algunos de estos detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datachecknh:gallerypal_fe:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0631B2-D087-4AA4-A034-0D922C921E6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35626",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.asp in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5 allows remote attackers to execute arbitrary SQL commands via the (1) password parameter in 1.1 and (2) p_password parameter in 1.5.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en login.asp en DataCheck Solutions ForumPal FE v1.1 y ForumPal v.1.5 permite a atacantes remotos ejecutar comandos SQL a su elección a través de (1) parámetro password en v1.1 y (2) parámetro p_password en v.1.5. NOTA: algunos de estos detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datachecknh:forumpal:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902F1AA0-8056-4A42-8730-A7C1B0076698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datachecknh:forumpal_fe:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2170FD4B-44CB-4EB3-A610-F37B2A98CDFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35589",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35603",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55496",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/55497",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/55497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows remote attackers to hijack active sessions and gain privileges via brute force guessing attacks on the session_id parameter."
      }, {
        "lang" : "es",
        "value" : "cgi-bin/makecgi-pro en Iomega StorCenter Pro genera sesiones IDs previsibles, que permiten a atacantes remotos secuestrar sesiones activas y obtener privilegios a través de ataques de fuerza bruta al parámetro session_id. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iomega:storcenter_pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A101BCBF-C92E-497F-8CEC-DA004D346FFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iomega:storcenter_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12049A9-6111-408D-84AD-432A1E8DD352"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55586",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35666",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://trac.metasploit.com/browser/framework3/trunk/modules/auxiliary/admin/http/iomega_storcenterpro_sessionid.rb?rev=6733",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51539",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://osvdb.org/55586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://trac.metasploit.com/browser/framework3/trunk/modules/auxiliary/admin/http/iomega_storcenterpro_sessionid.rb?rev=6733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Socks Server 5 before 3.7.8-8 has unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Socks Server v.5 anteriores a v.3.7.8-8 tiene un impacto desconocido y ataque por vector."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.8-7",
            "matchCriteriaId" : "4A407E76-26F1-4E28-B3D7-9361B976D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.3.2-mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77B49125-ABD7-4C21-AD5F-B4B8E1A72E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.3.2-mr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8219A7-F748-4F0C-8605-6F660FC1B2CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.3.2-mr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01F200F-31E9-4B2F-BC31-35FE14D0F97C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.3.3-mr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EB276C-D042-4E78-BAA0-3BAE5B93E51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.3.4-mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2296E234-A027-4EF8-A90E-1E92DED581D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.4.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D19996B1-F3BC-4570-B6A0-80CF789EB6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.4.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318FE10E-B8EA-407D-916C-8976516FEA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.4.3-mr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A2A4FA-29E8-477B-B3F3-690305769FD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.4.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89830417-2A3F-40C0-A7E1-364F0ACC2D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.5.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C9303F-FF88-4873-84E2-DBC78B1D6D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.5.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA64B77-53EB-4A16-B60C-58A33437F392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.5.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9591F79B-FC46-477F-9DCA-96D3DF761E86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.5.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B62C0C1-3FE6-478F-8F88-A52CD039C407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.5.8-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE4649B6-7BB1-4571-BA57-344865FFD03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.5.8-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFC5F86-8009-401D-B18C-B752912FBD0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.5.9-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D358A053-BEE9-40B9-85A7-860C6CFDACD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.6.1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1E1B86-9C53-4CE2-83AD-9D5DC86BCB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.6.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF5FA37-A36D-4D8D-83FB-50002B983FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.6.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11104627-BF81-4F67-8A1D-1944BF5E422D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.6.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D705281E-7D71-4D18-AACE-9BC39DC7C3CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.6.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF55AC-A92D-4E00-A1CE-9399FE046680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.6.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF3DD816-08CB-43C9-900E-832C6E170BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.6.4-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F1394A-F65E-47B7-94C4-2FB6F86A067C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.6.5-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D962513-39A9-42D6-A815-A1B1EFF73438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.6.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D57B904B-3203-44B3-AD03-F80E2B02E82A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.6.7-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C2BAAC9-3197-4262-9B06-BFE00B637BCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.7.1-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1F83C1-66FD-4F54-839B-E83BECF1C088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.7.2-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25B6F395-429B-4B7B-BA0A-EF51774AAAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.7.3-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2FA1F0-AE51-4CEC-B7DC-CC28EC4473AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.7.4-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B5585D-C22E-49BE-86F1-4E1A6F3A2CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.7.4-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92EC616B-01C5-42D1-82CF-BB52A5D0DBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.7.5-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "726E7D16-A9E5-455D-A3A1-FC23339BCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.7.6-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F359009-2F13-4121-86F2-3BFF66163FA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.7.7-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B210FCC7-BC14-4ED2-AE61-51AB14A29EC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.7.8-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4C442A-4C18-4805-8ACC-BC1641345464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.7.8-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E8CA20-0270-43F1-A1C8-F6E0FDF076E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.7.8-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7658B074-9863-40F4-8466-670159A715C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.7.8-5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "631DC825-BA71-4696-91A6-0F243B365046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matteo_ricchetti:ss5:3.7.8-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5015442-7108-4444-A925-A545B968CD80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35718",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=695068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1806",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=695068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JPEG file, which triggers a heap-based buffer overflow.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en WxImage: Crea un función en src/common/image.cpp en wxWidgets v2.8.10 permitiendo a atacantes cuasar una denegación de servicio (caida) y una posible ejecución de código a su elección a través de un archivo JPEG manipulado, que provoca un desbordamiento de pila. NOTA: algunos de estos detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wxwidgets:wxwidgets:2.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C864D1-B6B1-4146-BF19-9FE26C08CEFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35351",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1770",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00693.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00712.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00693.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00712.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Advanced Forum 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Advanced Forum v5.x anteriores a v5.x-1.1 y v6.x anteriores a v6.x-1.1, un modulo de Drupal  permite a los atacantes remotos inyectar código web o HTM a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michelle_cox:advanced_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.x-1.0",
            "matchCriteriaId" : "566A37FE-0BCE-4869-AA58-DCDB115AADDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michelle_cox:advanced_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.x-1.0",
            "matchCriteriaId" : "4950854D-2EAE-48CA-987C-CFF2732E8409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michelle_cox:advanced_forum:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DADE796E-A135-4CAD-ACBD-81B248881846"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michelle_cox:advanced_forum:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D991E241-8E29-4AFD-A9D8-3D52EB871B27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/507526",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/507550",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/507580",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55521",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35678",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35682",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1769",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/507526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/507550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/507580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Advanced Forum 6.x before 6.x-1.1, a module for Drupal, does not prevent users from modifying user signatures after the associated comment format has been changed to an administrator-controlled input format, which allows remote authenticated users to inject arbitrary web script, HTML, and possibly PHP code via a crafted user signature."
      }, {
        "lang" : "es",
        "value" : "Advanced Forum v6.x anteriores a v6.x-1.1, un módulo de Drupal, no impide a los usuarios modificar sus firmas después de que el formato comentado asociado ha sido cambiado a un formato de entrada controlado por administrador, que permite a usuarios autentificados remotamente inyectar codigo web, HTML y posiblemente código PHP, a su elección, a través de la firma Crafted user."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michelle_cox:advanced_forum:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F213117-90F5-4224-9F9D-AF645442DF61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michelle_cox:advanced_forum:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D991E241-8E29-4AFD-A9D8-3D52EB871B27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/507526",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/507580",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35678",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1769",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/507526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/507580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Drupal 6.x before 6.13 does not prevent users from modifying user signatures after the associated comment format has been changed to an administrator-controlled input format, which allows remote authenticated users to inject arbitrary web script, HTML, and possibly PHP code via a crafted user signature."
      }, {
        "lang" : "es",
        "value" : "Drupal v.6x anteriores a v.6.13 no impide a los usuarios modificar sus firmas después de que el formato comentado asociado ha sido cambiado a un formato de entrada controlado por administrador, que permite a usuarios autentificados remotamente inyectar codigo web, HTML y posiblemente código PHP, a su elección, a través de la firma Crafted user."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.13",
            "matchCriteriaId" : "78907707-0DC4-4F74-9311-D81BDE598413"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/507572",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55525",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35681",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022497",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://drupal.org/node/507572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Forum module in Drupal 6.x before 6.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Forum en Drupal v.6.x anteriores a v.6.13 permite a los atacantes remotos inyectar código web o HTM a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "45BE66AB-3491-42CB-8594-AB041D15EA23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "F6334858-DF62-467A-9126-6F0AD32D325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A677D3A4-F15C-4287-94B3-4CAADA4679D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "24DAB8DE-2459-484C-88B5-9812CFBDC60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.1_rev1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BF63E1-FB1A-4D76-BF0D-F07267127504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF34F79B-6B1B-45CA-82BA-24D4254B26DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4C5857-3690-4D74-B135-B6AB7E766FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC12E03-C4B0-4B2F-B70B-0EB19C450AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.5.:*:*:*:*:*:*:*",
            "matchCriteriaId" : "698B4A81-4A20-4BD8-B0E5-3335B7DC190C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD50E551-7609-45EF-B2C6-3873D9CF8DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327712EE-8E9B-4A62-94A8-504C9CD2DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4FC56B-0289-411C-88BF-144D7338D456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3ECEA7-E6D3-43E8-A281-56C7F95A0B7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE4DF7-6884-49BA-99D0-FCAE6DB75242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7287CD-A5FB-4428-8656-F466A8E47463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2860C3D-CB93-4355-882E-BF8B7A23CB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD400243-3FFE-457C-A977-6688D9181FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2686FD-9643-4B8A-A8BF-C67120E44A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F851EC4-6148-4C13-890F-8260D4DF5A1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30282489-9168-4F7E-8465-1FE6521056B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE07AAD-9207-4C5F-A108-7F7753E4F48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D4149703-F7BB-4513-9379-992C089532D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "FCBC7BB8-2B50-476D-BD96-C968F105CE10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "550778E2-BEE5-403D-8744-0B18C5D3AFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "31B9F954-3A10-4378-A842-4061E97056DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:rc-1:*:*:*:*:*:*",
            "matchCriteriaId" : "7954FAA5-0455-407F-B16F-CB1FD24F9FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:rc-2:*:*:*:*:*:*",
            "matchCriteriaId" : "B254CD4E-51A2-4E8D-9B59-FA5610F76683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:rc-3:*:*:*:*:*:*",
            "matchCriteriaId" : "A4DF0926-E487-4F3B-B85B-2690127FE1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.0:rc-4:*:*:*:*:*:*",
            "matchCriteriaId" : "D05C77D9-E816-41A6-80DB-F4815980A83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D8F291-CBEB-4EAA-9388-F63066A2DFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D76BC5-0409-4D78-8064-A78B923E9167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB73B2E1-2554-4CA2-9C82-B694509CE43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7827ED-D8AF-42B3-B514-39A04EB0879A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F491DE31-8DBB-4F4E-8798-F82DC855D08F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADEA9E5-10EB-4AB4-BD90-1F64A15708AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D0A167-BE47-4E4E-8467-0AD2F38A3431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7CBB558-D5A3-4D68-9C62-D1D521BCFEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D25FA1-2F31-40DB-AD54-DB233E060B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F91E944-26C4-4886-B9B9-F32BD15569BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DF00E9-3952-4D1C-8ED5-3270BD9697F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/507572",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://osvdb.org/55524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/507572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://osvdb.org/55524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Drupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for pages that contain a sortable table, which includes the username and password in links that can be read from (1) the HTTP referer header of external web sites that are visited from those links or (2) when page caching is enabled, the Drupal page cache."
      }, {
        "lang" : "es",
        "value" : "Drupal v.5.x anteriores a v.5.19 y 6.x anteriores a v.6.13 no limpian adecuadamente el intento de acceso fallido a páginas que contienen tablas ordenadas,que incluyen el nombre de usuario y contraseña que puede ser leidas desde (1) la cabecera referida a HTTP de sitios web externos que son visitados desde estos enlaces o (2) cuando la página es activado, la pagina cache Drupal. \r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndExcluding" : "5.19",
            "matchCriteriaId" : "929256E4-3986-47C4-8C06-47517DF8A66C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.13",
            "matchCriteriaId" : "78907707-0DC4-4F74-9311-D81BDE598413"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/507572",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55524",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35657",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35681",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://drupal.org/node/507572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Photo DVD Maker 8.02, and possibly earlier versions, allows remote attackers to execute arbitrary code via a long File_Name parameter in a .pdm file.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Photo DVD Maker v.8.02, y posiblemente versiones anteriores, permite a los atacantes remotos ejecutar a su elección código a través del parámetro File_Name de un archivo .pdm. NOTE: some of these details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.2",
            "matchCriteriaId" : "82F446D4-54E6-4817-8CCA-C5AA56B8BEEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5E065A4-F86B-43FD-855F-F5FFA8DDA9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:5.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A18FED6-AA4C-4881-9652-02153FAFB9F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:5.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863BDDC0-560B-4436-959D-935E975AC60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B42951A-56EE-435B-A0A9-A0FA5559DFFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697F53E1-86B6-4527-B120-E47598876C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA3BA81-FF0C-4DC7-840A-2A6137FFC0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CA8993-FB6E-4AC1-95C1-5E90947D18AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A84A298-BB77-421F-AC1F-D415F394FFDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21D353CD-3FA5-474B-A3A3-8933066F1FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BD0DF4-C243-49E3-ADC4-85F7F7BA11F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "163F7B3A-C2F7-48E7-A6FB-BA3D719B550F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13DCBA0-9E15-4399-8176-4A6C3CE01807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AAA3D9F-8E48-4DB1-A08B-A32856D0C8BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B319AB1-2A41-41FB-B288-292904979F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31AFBB53-FC6C-477C-8BBA-49AD39083ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA777219-6685-4E34-99A3-1F00CF31B345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469ED982-D5E8-4295-90F4-40E4DB4F57ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB02EA1E-C67B-4EC9-BBBB-85D0E149FF90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7908C21-41C7-4988-B65B-20A4481FA386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBDB3833-BD47-47FC-9992-65A78A686974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA08E730-D717-41ED-BF24-4B1CF2AA734F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD29D41-CC8E-427B-8F16-5373D0699252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB04C64-7233-4034-AB1F-57C07F506176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B63449-D670-4977-82E4-356C57D4AF3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E57ED15-00C6-4E02-8D82-50EAB66F06E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F7EA13C-E60E-430C-94F3-A9835B12703D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8451D723-CFB5-4CDF-ABAC-ABC02BB5F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A364D75A-3E6D-4624-AA67-AC9714903897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309B36BB-E47C-48EE-A4DD-74821CC5F6E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1839A67B-65CE-464A-A4E1-BCD997EBFA54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C5D56D-27E9-485A-A7D9-4070037A9159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA51476-46C8-46BA-92D7-EDC9169EA23F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED30CF8-11C3-4764-9FCE-BED458272FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7664C3C7-DC93-4070-A8EE-C0A93A79787D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1756CD-1073-4C67-A6E0-D003BD197CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBEC3BEC-7748-4F49-8A90-1F6A9C1BAD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20A5288-CC86-47B2-87A2-7D9E75B5F33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFB34337-F162-44C1-98E8-929C80B4542C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EBF2FF-1FE7-4637-9417-82D16C4E3BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197438B1-6504-4B9A-9D9E-B206063866F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5C2E63A-DD22-4237-8EA9-E48F52F7799E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65CD3BF-631D-450D-BB96-F00AAA2C688F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CEB996D-5B4B-485F-994C-415C75D5D5DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DF298B-8D64-4070-9A10-093C4AF944EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "664E2F5C-C3E1-44FB-8CD4-86787A66DCCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EA1489-AE4C-43A2-A9F1-DABB4E11BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317C5754-68DD-476D-B3A6-26AA0A89DA0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.bkis.com/?p=713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35709",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504738/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1793",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blog.bkis.com/?p=713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504738/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Html::textarea function in application/libraries/Html.php in TangoCMS 2.x before 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the value parameter, related to the Contact module."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Html::función textarea en application/libraries/Html.php en TangoCMS v2.x y anteriores a v.2.3.0 permite a atacantes remotos inyectar código web o HTML a su elección a través del valor del parámetro, en el módulo Contact"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A0FF1D-220C-4346-8DD6-A32A4EA00F54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A5005C-03A3-42E9-A00C-6A0620832C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6B95017-5076-419F-ABB4-33387034F6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3B5DB5-65F2-46A3-B5CD-087FB214539C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E1AECF-7617-412E-A4C2-DFEBB444F0E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C0A809-5394-44C4-B58F-61E591A8C542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C815DF4-341A-426E-A0B4-AC83DC7B446B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C92559DE-504C-43CD-AC15-E7D94DB553B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15FA7FEA-2B72-403B-A7AD-3C741318F5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB76995-46E6-4584-8EAB-93432284AABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E5015A-260B-49B6-84CA-E7BE3AFFA7C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9149CAE5-B948-4B6C-B5A3-19BB28FDE512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBE12B8-C83A-44A6-A732-93C549DB6BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tangocms:tangocms:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC056D18-2FC4-4A5D-B1FF-40A4F723B2F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.tangocms.org/issues/show/140",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev.tangocms.org/repositories/diff/tangocms?rev=2372",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35642",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tangocms.org/changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.tangocms.org/issues/show/140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev.tangocms.org/repositories/diff/tangocms?rev=2372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tangocms.org/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Avax Vector ActiveX control in avPreview.ocx in AVAX-software Avax Vector ActiveX 1.3 allows remote attackers to cause a denial of service (application crash) via a long PrinterName property."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el control Avax Vector ActiveX en AVAX-software Avax Vector ActiveX v1.3 permite a atacantes causar una denegación de servicios (caida de aplicación) a través de la propiedad larga PrinterName."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avax-software:avax_vector_activex:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18EDF50A-768E-4951-94C7-683F78C23EC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/504729/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35583",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504729/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the BASE_DIR[jax_formmailer] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de archivo PHP remoto en formmailer.admin.inc.php en Jax FormMailer v3.0.0 permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro BASE_DIR [jax_formmailer]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtr:jax_formmailer:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE8FBC7-22B3-43B0-8740-A21E193797FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cmd parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en public/index.php en BIGACE Web CMS v2.6, permite a atacantes remotos añadir y ejecutar archivos locales de su elección a través de un ..(punto punto) en el parámetro \"cmd\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigace:bigace_cms:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE33EE5-155B-4669-B0CD-78B8F5AA2AF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.bigace.de/announcements/security-patch-for-bigace-2-6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/55510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35643",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022489",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.bigace.de/Security-patch-for-BIGACE-2.6-released.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35537",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.bigace.de/announcements/security-patch-for-bigace-2-6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/55510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.bigace.de/Security-patch-for-BIGACE-2.6-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in includes/functions.php in 4images 1.7 through 1.7.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the url variable."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en includes/functions.php en 4images v1.7 hasta v.1.7.7, permite a atacantes remotos inyectar código web o HTML a su elección a través de vectores referidos a la variable URL"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB41A1A3-69D5-4175-BF6C-285C0C9990E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9029C35C-D961-419A-A79F-9EFACAD2560A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD8FBCEC-1F99-4DF1-A9E5-CFE353D2D359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729F3EA5-9289-435E-92BD-1C12E839988A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B51C8F-0710-4C7A-A08B-FE940CFF12D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E5D3F1-18E8-4E5C-BBCD-55AC38A06028"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC0556E8-324C-4B4C-9B4C-75EDAA1F3EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "452F8D87-1F53-41F0-9D75-9DC05F4033D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35639",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.4homepages.de/forum/index.php?topic=25057.0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.4homepages.de/forum/index.php?topic=25057.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gizmo 3.1.0.79 on Linux does not verify a server's SSL certificate, which allows remote servers to obtain the credentials of arbitrary users via a spoofed certificate."
      }, {
        "lang" : "es",
        "value" : "Gizmo v3.1.0.79 sobre Linux no verifica el certificado SSL del servidor, lo que permite a servidores remotos obtener las credenciales de cualquier usuario a través de un una suplantación de certificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gizmo5:gizmo:3.1.0.79:-:linux:*:*:*:*:*",
            "matchCriteriaId" : "5892B44C-3BC3-4DA3-A640-9ED6E32418F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35628",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504572/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504572/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin.php in phpMyBlockchecker 1.0.0055 allows remote attackers to bypass authentication and gain administrative access by setting the PHPMYBCAdmin cookie to LOGGEDIN."
      }, {
        "lang" : "es",
        "value" : "admin.php en phpMyBlockchecker v1.0.0055, permite a atacantes remotos evitar la autenticación y obtener acceso como administrador estableciendo la cookie PHPMYBCAdmin a LOGGEDIN."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jay-jayx0r:phpmyblockchecker:1.0.0055:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E943F3B-00C7-4A58-A79E-03B30336DA26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55505",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35660",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9053",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51445",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://osvdb.org/55505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in BTE_RW_webajax.php in the Related Sites plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the guid parameter."
      }, {
        "lang" : "es",
        "value" : "vulnerabilidad en BTE_RW_webajax.php en el complemento Related Sites v.2.1 de WordPress permite a atacantes remotos ejecutar comandos SQL a través del parámetro guid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blogtrafficexchange:related-sites:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "103F9677-E7BE-49F4-982E-93CEB078836A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847DA578-4655-477E-8A6F-99FBE738E4F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35538",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in amp.exe in Brothersoft PEamp 1.02b allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3u playlist file.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en amp.exe en Brothersoft PEamp v1.02b, permite a atacantes asistidos por el usuario provocar ejecutar código a su elección a través de una cadena en un fichero lista .m3u. NOTA: algunos de estos detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mathi:peamp:1.02b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA02B963-91C1-4CA9-B374-0CAAB9203663"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35663",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2385",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-08T15:30:01.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the awardsMembers function in Sources/Profile.php in the Member Awards component 1.0.2 for Simple Machines Forum (SMF) allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action to index.php.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la función awardsMembers en Sources/Profile.php en el componente Member Awards para Simple Machines Forum /SMF), permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"profile\" al index.php. NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:simple_machines:smf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2715F6-8FDB-4C79-95E4-B7CCDFABD5E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fustrate:member_awards:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CFA1DC-E722-4CF8-A7ED-1BB7D5617702"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35661",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35536",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the proc filesystem in Sun OpenSolaris snv_49 through snv_109 allows local users to cause a denial of service (deadlock and panic) via unknown vectors, related to the ldt_rewrite_syscall function."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el sistema de archivos proc en Sun OpenSolaris snv_49 hasta snv_109 permite a usuarios locales causar una denegación de servicio (bloqueo mutuo y panic) a través de vectores desconocidos relacionados con la función ldt_rewrite_syscall."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-258888-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-258888-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2388",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtPassword parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/index.php en Opial v1.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro txtPassword. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shalwan:opial:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E0DCAF-FC37-4489-AA56-B1D7162F489C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55560",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2389",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in newsscript.php in USOLVED NEWSolved 1.1.6, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) jahr or (2) idneu parameter in an archive action, or (3) the newsid parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en newsscript.php en USOLVED NEWSolved v1.1.6, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) jahr o (2) idneu en una acción de archivo, o (3) el parámetro newsid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usolved:newsolved:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1D4484-9A05-4A2D-93ED-9B4572B31A4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35611",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the BookFlip (com_bookflip) component 2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the book_id parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente BookFlip (com_bookflip) v2.1 para Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro book_id a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-cimag-in:com_bookflip:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F7CCD8-7BF6-4CF8-9A55-0BCFC8CC0525"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35519",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to inject arbitrary web script or HTML via the tid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS)en text.php en Virtuenetz Virtue Online Test Generator permite a atacantes remotos inyectar secuencias de comandos web arbitrario o HTML a través del parámetro tid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtuenetz:virtue_online_test_generator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D7DD4D-EF38-4DE4-A66A-6795AF5E097B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute arbitrary SQL commands via the tid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en text.php en Virtuenetz Virtud Test Online Generador permite a atacantes remotos ejecutar comandos SQL a través del parámetro tid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtuenetz:virtue_online_test_generator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D7DD4D-EF38-4DE4-A66A-6795AF5E097B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2393",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/index.php in Virtuenetz Virtue Online Test Generator does not require administrative privileges, which allows remote authenticated users to have an unknown impact via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "admin/index.php en Virtuenetz Virtue Online Test Generator no requiere privilegios administrativos, lo cual permite a los usuarios remotos autenticados tener un impacto desconocido a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtuenetz:virtue_online_test_generator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D7DD4D-EF38-4DE4-A66A-6795AF5E097B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in cat.php in SMSPages 1.0 in Mr.Saphp Arabic Script Mobile (aka Messages Library) 2.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en cat.php en SMSPages v1.0 en Mr.Saphp Arabic Script Mobile (alias Messages Library) v2.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro CatID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smspages:smspages:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB30285-CE0C-41CE-A4FC-FCD8250D065B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mr_saphp_arabic_mobile:messages_library:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE44B2A-461E-4F6B-9052-DDC50730079E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in an itemlist action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en el componente K2 (com_k2) v1.0.1 beta y anteriores para Joomla! permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro categoría (category)en una acción itemlist a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomlaworks:com_k2:*:beta:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "0B3F3867-1CB0-4931-98B7-479DACFCFDE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35517",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1733",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used standalone or as a WordPress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITY_FILE parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de archivo remoto PHP en template/album.php en DM Albums v1.9.2, utilizado independiente o como un plugin de WordPress, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro SECURITY_FILE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847DA578-4655-477E-8A6F-99FBE738E4F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dutchmonkey:dm_album:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06656261-4E27-4FF4-A04A-AA49008946BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dutchmonkey:dm_album:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06656261-4E27-4FF4-A04A-AA49008946BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35619",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35521",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in download.php in Audio Article Directory allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en download.php en Audio Article Directory permite a atacantes remotos leer ficheros arbitrarios a través de secuencias de salto de directorio en el parámetro file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audioarticledirectory:audio_article_directory:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857C30D8-70D5-4671-8ED7-F132F35CC6CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35609",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1738",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2398",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in test/index.php in PHP-Sugar 0.80 allows remote attackers to read arbitrary files via a ..// (dot dot slash slash) in the t parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio transversal en test/index.php en PHP-Sugar  v0.80 permite a atacantes remotos leer ficheros arbitrarios a través de uno ..// (punto punto barra barra) en el parámetro t."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-sugar:php-sugar:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8098F4DB-1C48-4454-BC28-79C523ADFF45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1735",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in dm-albums/template/album.php in DM FileManager 3.9.4, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITY_FILE parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de archivo remoto en dm-albums/template/album.php en DM FileManager v3.9.4, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro SECURITY_FILE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dutchmonkey:dm_filemanager:3.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B0A8F1A-9DE3-4A3C-B4A4-4FB9A66312C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35622",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the PHP (com_php) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en el componente PHP (com_php) para Joomla! permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro id en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fijiwebdesign:com_php:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3431C966-7747-4D17-BADF-B36F8E5367BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1732",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PHPEcho CMS 2.0-rc3 allows remote attackers to inject arbitrary web script or HTML via a forum post."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en PHPEcho CMS v2.0-rc3 permite a atacantes remotos inyectar secuencias de comandos (script) web a su elección o HTML a través de un mensaje en el foro."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpecho_cms:phpecho_cms:2.0-rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE38DB7-6F88-42C7-B6F5-717A9DF4A847"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35488",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in the forum module in PHPEcho CMS 2.0-rc3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a thread action, a different vector than CVE-2008-0355."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en el módulo foro en PHPEcho CMS v2.0-rc3 permite a atacantes remotos ejecutar comandos SQL a su elección a través de el parámetro id en un acción de hilo, un vector diferente que CVE-2008-0355."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpecho_cms:phpecho_cms:2.0-rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE38DB7-6F88-42C7-B6F5-717A9DF4A847"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35488",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in SCMPX 1.5.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long string in a .m3u playlist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en SCMPX 1.5.1 permite a atacantes remotos provocar una denegación de servicio (cuelgue de aplicación) o ejecutar código arbitrario a través de una cadena larga en un archivo de lista de reproducción de archivos .m3u"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shinjichiba:scmpx:1.5.1:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "2A278B47-0C76-499A-BA99-6374253B534D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35596",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9033",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1729",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in the servePendingRequests function in WebCore in WebKit in Apple Safari 4.0 and 4.0.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted HTML document that references a zero-length .js file and the JavaScript reload function.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso-después-de-liberación en la función servePendingRequests en WebCore en WebKit en Apple Safari v4.0 y v4.0.1 permite a atacantes remotos provocar una denegación de servicio (cuelgue de aplicación) o posiblemente ejecutar código arbitrario a través de un documento HTML elaborado que hace referencia a un fichero .js de longitud cero y la función JavaScript recarga (reload). NOTA: algunos de estos detalles se obtienen a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FD40E4-D4C9-492E-8432-ABC9BD2C7E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marcell-dietl.de/index/adv_safari_4_x_js_reload_dos.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33495",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trac.webkit.org/changeset/44519",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35555",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marcell-dietl.de/index/adv_safari_4_x_js_reload_dos.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trac.webkit.org/changeset/44519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari 3.2.3 does not properly implement the file: protocol handler, which allows remote attackers to read arbitrary files or cause a denial of service (launch of multiple Windows Explorer instances) via vectors involving an unspecified HTML tag, possibly a related issue to CVE-2009-1703."
      }, {
        "lang" : "es",
        "value" : "Apple Safari v3.2.3 no implementa correctamente el manejador de protocolo file: , lo cual permite a atacantes remotos leer ficheros arbitrarios o provocar una denegación de servicio (lanzar múltiples instancias del Explorador de Windows) a través de vectores reaccionados con una etiqueta HTML no especificada, posiblemente una incidencia relacionada con CVE-2009-1703."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D8CFE8E7-B970-4B86-99E9-AC3F8626737C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DBFFA64F-F45E-4306-9B47-959DDA1780CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/504480/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504480/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T16:30:00.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CFCharacterSetInitInlineBuffer method in CoreFoundation.dll in Apple Safari 3.2.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a \"high-bit character\" in a URL fragment for an unspecified protocol."
      }, {
        "lang" : "es",
        "value" : "El método CFCharacterSetInitInlineBuffer en CoreFoundation.dll en Apple Safari v3.2.3 permite a atacantes remotos causar una denegación de servicio (desreferencia a puntero nulo y cuelgue de la aplicación) o posiblemente ejecutar código a su elección a través de un \"caracter bit-alto\" en un fragmento de una URL para un protocolo sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D8CFE8E7-B970-4B86-99E9-AC3F8626737C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DBFFA64F-F45E-4306-9B47-959DDA1780CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/504479/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504479/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T17:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1.0.1, in OCS Inventory allows local users to gain privileges via a Trojan horse Perl module in an arbitrary directory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en Agent/Backend.pm en Ocsinventory-Agent anterior a  v0.0.9.3, y v1.x anterior a v1.0.1, en OCS Inventory, permite a usuarios locales obtener privilegios a través de un módulo de pearl que es un troyano en cualquier directorio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C9D8DD-6505-4903-9181-26223DA65DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CCBDA19C-8B65-4D0D-80B6-3C1E76C5BE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3E915093-BDDA-4A75-A0D0-819246D94249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDE845A-A67A-4DCC-BC61-FC64C6943C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B363C2E6-FAB1-4CED-9C0D-3797AEC814E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc3-1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B28BF3-C16C-458A-BC9B-23631D2B7623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocsinventory-agent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.9.2",
            "matchCriteriaId" : "EE80E70E-7BF9-4F74-8B28-130F3B4F2CFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocsinventory-agent:0.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EAE7F8C-F2D3-4FE7-8331-C73CD0A65954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocsinventory-agent:0.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50959273-4987-402E-B2D6-77D6FD017E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocsinventory-agent:0.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41F504A6-777B-41D0-99C0-FAD3EDD18DAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506416",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://nana.rulezlan.org/~goneri/ocsinventory-agent/Ocsinventory-Agent-0.0.9.3.tar.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/55718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/o/ocsinventory-agent/ocsinventory-agent_0.0.9.2repack1-4lenny1.diff.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1828",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35593",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1809",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://nana.rulezlan.org/~goneri/ocsinventory-agent/Ocsinventory-Agent-0.0.9.3.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/55718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/o/ocsinventory-agent/ocsinventory-agent_0.0.9.2repack1-4lenny1.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T17:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en WebKit en Safari de Apple anterior a versión 4.0.2, tal y como es usado en iPhone OS anterior a versión 3.1, iPhone OS anterior a versión 3.1.1 para iPod touch, y otras plataformas, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de vectores relacionados con los objetos primarios y superiores."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.1",
            "matchCriteriaId" : "5C38B814-0E98-4BC7-9981-56F9EC1BFB74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B74019F-C365-4E13-BBB4-D84AD9C1F87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*",
            "matchCriteriaId" : "018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*",
            "matchCriteriaId" : "1082B33F-33B5-453A-A5AA-10F65AB2E625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*",
            "matchCriteriaId" : "EC348464-F08D-4ABF-BB90-3FA93C786F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDCF83E-620C-40FA-9901-5D939E315143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A33F900-D405-40A8-A0A5-3C80320FF6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4444A309-5A97-4E1C-B4EA-C4A070A98CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B29951B-9A98-45B7-8E4B-5515C048EC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED950D-38AB-4D66-B97A-FB982D86057F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FDEB4F-133A-43DF-A89B-53E249F1293D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E78F43-07BD-4D62-9512-DA738A92BC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE25E9E-826E-4782-AED8-AC6297B18D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3180366-2240-467E-8AB9-BEA0430948F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E834B8-545E-4472-9D60-B4CF1340D62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB9CC52-E533-4306-9E92-73C84B264D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A5CA99-8B1C-4C35-85E3-DB0495444A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D8C2EF-D552-4279-A12E-70E292F39E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00082E3-EBF5-4C23-9F57-BF73E587FC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C453B588-15FD-4A9C-8BC1-6202A21DAE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BB6761-3581-4AE6-85E0-1609D15D7618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA1A4C8-9F87-449F-A11F-52E5D52247E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8498D2-DECC-4B88-BC1B-F8E2D076EE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EAC196-AE43-4787-9AF9-E79E2E1BBA46"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "BE457690-CB2B-42BD-B97C-E723AFD02FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863383DA-0BC6-4A96-835A-A96128EC0202"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340C4071-1447-477F-942A-8E09EA29F917"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "2B1A9F14-4F3A-4B85-9050-84B51D59C9A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863383DA-0BC6-4A96-835A-A96128EC0202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FA2602-DDAB-4E23-A3D2-FB712970AAD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jul/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3666",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35441",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jul/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of the kdelibs packages, as shipped with Red Hat Enterprise Linux 3, 4, or 5.\n",
        "lastModified" : "2009-08-07T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-09T17:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in kdelibs in KDE; QtWebKit (aka Qt toolkit); and possibly other products do not properly handle numeric character references, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document."
      }, {
        "lang" : "es",
        "value" : "WebKit en Apple Safari anterior a v4.0.2, no maneja adecuadamente las referencias de caracteres numéricos, lo que permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un documento HTML manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.1",
            "matchCriteriaId" : "5C38B814-0E98-4BC7-9981-56F9EC1BFB74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B74019F-C365-4E13-BBB4-D84AD9C1F87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*",
            "matchCriteriaId" : "018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*",
            "matchCriteriaId" : "1082B33F-33B5-453A-A5AA-10F65AB2E625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*",
            "matchCriteriaId" : "EC348464-F08D-4ABF-BB90-3FA93C786F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDCF83E-620C-40FA-9901-5D939E315143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A33F900-D405-40A8-A0A5-3C80320FF6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4444A309-5A97-4E1C-B4EA-C4A070A98CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B29951B-9A98-45B7-8E4B-5515C048EC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED950D-38AB-4D66-B97A-FB982D86057F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FDEB4F-133A-43DF-A89B-53E249F1293D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E78F43-07BD-4D62-9512-DA738A92BC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE25E9E-826E-4782-AED8-AC6297B18D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3180366-2240-467E-8AB9-BEA0430948F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E834B8-545E-4472-9D60-B4CF1340D62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB9CC52-E533-4306-9E92-73C84B264D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A5CA99-8B1C-4C35-85E3-DB0495444A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D8C2EF-D552-4279-A12E-70E292F39E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00082E3-EBF5-4C23-9F57-BF73E587FC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C453B588-15FD-4A9C-8BC1-6202A21DAE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BB6761-3581-4AE6-85E0-1609D15D7618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA1A4C8-9F87-449F-A11F-52E5D52247E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8498D2-DECC-4B88-BC1B-F8E2D076EE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EAC196-AE43-4787-9AF9-E79E2E1BBA46"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "BE457690-CB2B-42BD-B97C-E723AFD02FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863383DA-0BC6-4A96-835A-A96128EC0202"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340C4071-1447-477F-942A-8E09EA29F917"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "2B1A9F14-4F3A-4B85-9050-84B51D59C9A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863383DA-0BC6-4A96-835A-A96128EC0202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FA2602-DDAB-4E23-A3D2-FB712970AAD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jul/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3666",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=1002162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=1002163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=1002164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35607",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-836-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=513813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00931.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00933.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jul/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=1002162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=1002163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://websvn.kde.org/?view=rev&revision=1002164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-836-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-857-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=513813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00931.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00933.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of the kdelibs packages, as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
        "lastModified" : "2009-08-07T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1891",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-10T15:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption)."
      }, {
        "lang" : "es",
        "value" : "El módulo mod_deflate en Apache httpd v2.2.11 y anteriores comprime archivos de gran tamaño  hasta finalizar incluso después de que la conexión de red asociada está cerrada, lo cual permite a atacantes remotos provocar una denegación de servicio (consumo de CPU)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.35",
            "versionEndExcluding" : "2.0.64",
            "matchCriteriaId" : "838655CB-43E7-4BDA-A80C-2314C9870717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.12",
            "matchCriteriaId" : "8BBBCFC4-2CFE-42A2-BE6F-2710EB3921A9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E8A89-7A16-411F-9D31-676313BB7244"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB5EDB-520B-4DEF-B06E-65CA13152824"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "941713DB-B1DE-4953-9A9C-174EAFDCB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F87B994-28E4-4095-8770-6433DE9C93AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534712",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=apache-httpd-dev&m=124621326524824&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=apache-httpd-dev&m=124661528519546&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129190899612998&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/55782",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35721",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35781",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35793",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35865",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37152",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37221",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-04.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0142",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0142",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK91361",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK99480",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:149",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1156.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507857/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022529",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-802-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1841",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=509125",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12361",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8632",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9248",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1148.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=apache-httpd-dev&m=124621326524824&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=apache-httpd-dev&m=124661528519546&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129190899612998&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/55782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK91361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK99480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507857/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-802-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=509125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1148.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2386",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-10T15:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files via the GetURL method."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de método inseguro en el complemento Awingsoft Awakening Winds3D Viewer v3.5.0.0, v3.0.0.5 y posiblemente otras versiones permite a atacantes remotos forzar la descarga y ejecución de archivos arbitrarios a través del método GetURL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awingsoft:awakening_winds3d_viewer_plugin:3.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E9ADF12-4B92-44B6-BD4A-F7766257549E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awingsoft:awakening_winds3d_viewer_plugin:3.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6825AF8E-3F4E-4724-8B7D-E7FBCF72B53E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35764",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/winds3d-viewer-advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35595",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1834",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/winds3d-viewer-advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-10T15:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that returns nil instead of false when the user does not exist, which allows context-dependent attackers to bypass authentication for applications that are derived from this example by sending an invalid username without a password."
      }, {
        "lang" : "es",
        "value" : "El código de ejemplo para la funcionalidad de autenticación digest (http_authentication.rb) en Ruby on Rails anterior a v2.3.3 define un bloque authenticate_or_request_with_http_digest que devolverá nulo en lugar de falso cuando el usuario no existe, lo cual permite a atacantes dependiendo del contexto eludir la autenticación para aplicaciones que se derivan de este ejemplo mediante el envío de un nombre de usuario no válido sin una contraseña."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.3",
            "matchCriteriaId" : "7E594206-CF9B-4C01-947C-79EF74B57416"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.6.0",
            "versionEndExcluding" : "10.6.3",
            "matchCriteriaId" : "F110744D-9928-4DC1-873E-26B3E1D7CD62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1335E35A-D381-4056-9E78-37BC6DF8AD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.6.0",
            "versionEndExcluding" : "10.6.3",
            "matchCriteriaId" : "F3611024-49F5-414A-B536-9FA6519856B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B4CD59-9F37-4EF0-BA43-427CFD6E1329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://n8.tumblr.com/post/117477059/security-hole-found-in-rails-2-3s",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35702",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://weblog.rubyonrails.org/2009/6/3/security-problem-with-authenticate_with_http_digest",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35579",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1802",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51528",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://n8.tumblr.com/post/117477059/security-hole-found-in-rails-2-3s",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://weblog.rubyonrails.org/2009/6/3/security-problem-with-authenticate_with_http_digest",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-10T17:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in category.php in Ebay Clone 2009 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter in a list action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en category.php en Ebay Clone 2009 permite a atacantes remotos ejecutar comandos SQL a través del parámetro cate_id en una acción lista (list)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ebayclonescript:ebay_clone:2009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB71071D-3A42-4054-BD4F-F45527927962"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstorm.linuxsecurity.com/0907-exploits/ebayclone2009-sqlxss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35713",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0907-exploits/ebayclone2009-sqlxss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-10T17:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in Ebay Clone 2009 allows remote attackers to inject arbitrary web script or HTML via the mode parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php en Ebay Clone 2009 permite a atacantes remotos inyectar HTML o secuencias de comandos web arbitrarios a través del parámetro modo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clone2009:ebay_clone:2009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "252C575B-353B-45C9-A870-EBAA0E8A3AE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstorm.linuxsecurity.com/0907-exploits/ebayclone2009-sqlxss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35713",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0907-exploits/ebayclone2009-sqlxss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-10T17:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor before 0.2.0.35 allows remote attackers to cause a denial of service (application crash) via a malformed router descriptor."
      }, {
        "lang" : "es",
        "value" : "Tor anterior a v0.2.0.35 permite a atacantes remotos provocar una denegación de servicio (cuelgue de aplicación) a través de un descriptor de enrutador (router) malformado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB79C700-2513-4EEB-835B-454F8728DCA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.seul.org/or/announce/Jun-2009/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35546",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55340",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35505",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1716",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.seul.org/or/announce/Jun-2009/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-10T17:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "La función connection_edge_process_relay_cell_not_open  en src/or/relay.c en Tor v0.2.x anterior a v0.2.0.35 y v0.1.x anterior a v0.1.2.8-beta\r\npermite a los retransmisores (relays) de salida tener un impacto no especificado al provocar que los controladores acepten respuestas DNS que redirigen a direcciones IP internas a traves de vectores desconocidos. NOTA: algunos de estos detalles se obtienen a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B978E3E-69D7-46BD-BD88-1409A546FF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FED829-128A-4F87-9838-AD0C9C11E458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A39B543-5978-46FC-AF85-D635D87E3B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803498D9-C750-4D16-8ADF-2F98E71888A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7D396C-36CA-4579-BCA0-672440CB5CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE716BE-10CE-49EB-9CC4-068584CD3357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5662F3D8-754D-43E3-8EE0-3DF4B0180E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811CE708-CEE6-4B0F-98E5-E138C06EA382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F0F837E-12E5-4332-9823-8B1F764042E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6860F802-FEC2-449A-A5FC-AFACCA8633CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF80379-BD68-4E3B-A7CC-57B51619A0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57DAA48C-4B3B-4665-87AB-38ACFD6C757C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9E677-01D2-4800-82AA-F5585475D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CF2822-88B6-41F2-B10A-A8B09B27245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C589D4F-60B3-450B-860A-9975BB47BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B300C56E-7DF5-4B24-84D1-A4732515325E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA331167-6A2F-402F-A28F-9EE7B6F20207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13846571-C84A-43D6-9970-444E6B4DB0C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35EB5E0E-EAF1-41C1-808D-BD1ABDE8110D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4740B10-EFB8-4F79-88C1-9B6F5897A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D881C4-0302-44E9-A3C5-A23EFD681B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7556-D132-4E81-8E13-C7E025AF20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8219F1A-D6F5-4D6E-B10D-4C455073520C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D224FA8D-4C5A-48BE-92F2-1EC57782046D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB37BCB-63F0-4CC7-B98D-7048D3E18BEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB701014-7980-4BBE-8BD9-3FD2A0AF6941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D68C31D4-9478-4EB6-B160-E9970ADA785D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "872F7B10-30EA-4945-99BC-9EC1C09D6D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBC3EFD-7F03-4DC1-988C-22007216F9F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7898C5-9450-41FD-B45D-7504D97B4CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A247E8-F22B-4639-96D2-9BC01C904D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1233504-041A-454E-9F2E-6E2A4207879D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC39C113-6A7B-4152-8EBA-87A2B64D0F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "342D2B8A-A832-4CAB-9389-93764B0DE241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D44F099-7BC3-45C4-9DB3-03A7E40BC548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A79A0CD-7B81-417E-8DE3-0D61006003FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0A70AA-931A-4906-B4AD-D56E90683716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD4450F-6E15-40CD-94CA-63F70A3EC354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB51EE46-D720-4C1F-8992-67F4422E43CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197BFA5D-8C65-4F59-B4A0-B6AB7B11EC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74A3860-1FE5-4A03-9C99-2646F1AF84A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4340AB16-25B5-4371-B490-6F2563268358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA145B1E-674C-4C79-93C0-BC24EC5F8CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD8B5C4-C680-4DE2-9245-0A8F380C15E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "9B671031-08A4-4B9D-B3DA-7D074D8BFAC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2098AF-763E-4F62-BBD9-A4C9AC411C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.2.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3C6BA8-9ED9-42F8-9054-F94840E653E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5CEE9D-FE82-4E87-AEA0-9A2D8186E522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3729DD-BFCC-4293-9DE7-B02588753F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5D08533D-A187-4C0E-AD4C-41061FB42413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7EADACB1-31D9-4297-A1C3-7F281A0AF154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "D560434E-2636-4C7B-AC6B-A5952123B8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3334C5-92F3-403D-9116-4559D18F677F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7B173DF1-D506-47F4-8F13-18026BF7A974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.8:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4462DB3B-BF33-4BFA-A9C9-CF674A18D24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.9:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "5E666EDB-F72C-4B14-8FF4-95B082BB38EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.10:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "96BCAA3F-EF7F-457B-8468-A736527A4F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.11:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4D706AEC-0814-4706-BA4C-6FED01AA4D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.12:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "53FCE242-9B64-4D71-BBB3-8085F7FBA8F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.13:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FD6A26-7219-4958-B959-C6365193F839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.14:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "F6307EF6-1449-43B2-A3B8-DF0EA3A6985F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.15:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78C0FF05-0E18-4C48-BE3E-FBC881F468D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.16:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C32845-BAB4-422A-B1BA-568793B4E935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.17:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "0159DCD6-3C52-4B4C-82EC-4E699366E917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.18:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "9E245295-3EF6-4E6D-8D44-D45B8A198E61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.19:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "38DA0AF4-C053-4EEC-AA37-5089C9E6C778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.20:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8EE453-2FAC-4927-AC89-C92B2A947E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.21:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE434E6-63E1-44B0-AA79-BBDABC040234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.22:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC742E5-CA75-43E4-BCD5-54B712CF205E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.23:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "DADA7B77-7DBE-4A62-BE4A-83975D4D7311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.24:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "30D57B03-30FE-48E8-B6BA-77538F067D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.25:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E6BD04-775B-4EDE-BF3E-2896BB59F895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.26:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7900A51A-4E1E-412C-945E-DAB21078BD4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.27:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2B68CEAF-2287-4C1B-A147-DD718E7C6418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.28:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3CE396-518B-465F-AB91-6572601F0C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.29:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B70887CA-5A54-410D-B9B4-84EE31899FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.31:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC42FE4-48BE-4EF2-900F-401CF34F113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B11AC29-B21C-424F-8EFF-56C40F38CB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.2.0.34:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "87591A51-BD84-459F-8BEB-6D32B392CF9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.seul.org/or/announce/Jun-2009/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35546",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55341",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35505",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1716",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.seul.org/or/announce/Jun-2009/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-10T17:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in co-profile.php in Jobbr 2.2.7 allows remote attackers to execute arbitrary SQL commands via the emp_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en co-profile.php en Jobbr v2.2.7 permite a atacantes remotos ejecutar comandos SQL a través de el parámetro emp_id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jobbr:jobbr:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC54D80-B31F-44DE-939C-67A5C0ECC8E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstorm.linuxsecurity.com/0907-exploits/jobbr-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35722",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0907-exploits/jobbr-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-10T17:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL commands via the (1) userid parameter to suchauftraege_user.php and the (2) descr parameter to vote.php; and other unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en Script v3 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de (1)el parámetro userid para suchauftraege_user.php y (2)el parámetro descr para vote.php y otros vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tauschregal.de:tausch_ticket_script:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24ED3F16-FBE5-4896-8CBF-5CA3F4E9A7C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstorm.linuxsecurity.com/0907-exploits/tausch-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35725",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0907-exploits/tausch-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-10T17:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in admin_backup.xml files and uses insecure permissions for these files, which allows local users to gain privileges.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "SmartFilter Web Gateway Security versión 4.2.1.00, almacena las credenciales de usuario en texto sin cifrar en archivo admin_backup.xml y utiliza permisos no confiables para estos archivos, lo que permite a los usuarios locales alcanzar privilegios. NOTA: se desconoce la procedencia de esta información; los datos fueron obtenidos únicamente de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:smartfilter:4.2.1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3DF88C-BB46-4F93-8B58-09DE930C1D97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34390",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-10T17:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in auditconfig in Sun Solaris 8, 9, 10, and OpenSolaris snv_01 through snv_58, when Solaris Auditing is enabled, allows local users with an RBAC execution profile for auditconfig to gain privileges via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificadar en auditconfig en Sun Solaris v8, v9, v10 y OpenSolaris snv_01 hasta snv_58, cuando auditoría de Solaris está activada, permite a los usuarios locales con un perfil de ejecución RBAC para auditconfig obtener privilegios a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DBDFD8C-371E-42D2-9635-D8CDD1775984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35580",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-262088-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-262088-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-10T21:00:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a configuration file in the page parameter to obtain sensitive information or modify this file, as demonstrated by the (1) collapsing-archives/options.txt, (2) akismet/readme.txt, (3) related-ways-to-take-action/options.php, (4) wp-security-scan/securityscan.php, and (5) wp-ids/ids-admin.php files. NOTE: this can be leveraged for cross-site scripting (XSS) and denial of service."
      }, {
        "lang" : "es",
        "value" : "wp-admin/admin.php en WordPress y WordPress MU antes de v2.8.1 no requiere autenticación administrativa para acceder a la configuración de un plugin, lo cual permite a atacantes remotos especificar un archivo de configuración en la página de parámetros para obtener información sensible o modificar este archivo, como se demostró por los ficheros (1) collapsing-archives/options.txt, (2) akismet/readme.txt, (3) related-ways-to-take-action/options.php, (4) wp-security-scan/securityscan.php, y (5) wp-ids/ids-admin.php. NOTA: esto puede ser aprovechados para vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) y denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.1",
            "matchCriteriaId" : "68895399-32D7-43DE-945B-B9BD29DA5B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEB898B-BF80-44C1-A847-AC0062458B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.6.2:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C33D37-2FFF-4DE5-B260-E090F4E6377B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70EF48-AD6C-4119-B7C4-67E889A2BB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.6.2.1:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4139FE-7C43-44AC-856F-226E1194D936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0395AD1D-3470-49EE-9F2A-349EF8782B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8B90E9-5DF5-45F5-9810-2973FDAA16A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.71-gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC499ABC-D1A6-4A9B-A06B-12C8275462DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F33ACD9-B4B6-4B5E-9CD5-26AA5997119C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.72:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "056E641C-9322-4BEE-97B4-FE16DE8D7336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.72:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB42CEF-E12D-4DB0-8536-FD393D3697A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AF89F9-AE67-49B5-ACF0-3A645C454E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0174AF4F-9759-4762-ACF4-688E232AF1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "90C9AFEE-BCD7-4B4D-8F22-98747524F17D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "175B2515-E212-4347-8C04-13E110D70C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "BD571A4D-1D9C-4925-AE99-9128421213F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B553469-0D8B-48AD-8EFF-3DC469262977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0-platinum:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE015E8-FDE1-47FA-B3E5-0DC2C0A5107D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7BEFBD-4326-44A5-A160-9406D94AB307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.1-miles:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C516C041-B945-4992-8104-E20B3B6CECDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85A88D7-07A1-4A8C-88B5-057AD9C675E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.2-blakey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBD4E49-EA17-4FFD-AF9C-950E542555A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "0666BEBE-BE45-41D3-8C53-E4C9E6853C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2-delta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2F19C7-DD9A-4851-8788-E3E4E8CE8E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2-mingus:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4229BC-1646-4202-92B8-FC718D557518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64D4777-2ED6-4A47-A8F3-38A3A8EB1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614956CB-0582-4EAD-86F4-5AB0BB781CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4FEB48-771B-4331-B42B-764F12A94B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "947635DB-A86E-45F0-B946-559202C49503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E4894-3F39-471F-9A56-052718813BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5-strayhorn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86BC4AC-62D0-47AA-8E81-50ED0B3CB88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38085E5A-7B41-4E43-8A22-5FD44970F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF628FB8-1AC4-4F15-9967-E60785A32D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0BF1F6-A54A-48E8-A872-015FE10E5D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0B6EAC-E43D-4D1B-856F-7C23250A2355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51FAD0FC-CE84-4332-B061-75C0C8A0B6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEABEFD-E248-42B7-B99E-FFDEE27F7064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF4671A-8449-438E-922B-94E5542137BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F05A1F-2227-4166-807B-1BDE2EA8F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73E23-7CD0-429C-986B-5F721F1696BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECE66B3-3696-4E98-AF63-DF2FB256A6FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75BB382-6B47-4C6A-BF94-80443BEB1A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA75368-506F-4772-B0F2-8AAECDF288F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDD9E5C-766F-4945-B87D-781E780AB03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48C0BB5-2D87-49ED-A8EB-843E5F0EAE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6AAA17D-FBB8-4F54-82E2-870D6FA5C299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A0CAEE-5C14-44C6-85FB-6AFDAAA1C3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.10_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D85664-E355-4A68-89EB-D5C9D0E6B916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.10_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91243043-F4A6-40EF-97FC-989ED366394C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE667A-A937-4C38-B4D5-29B33F23F7B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A3624D4-E666-4A1B-B465-714ACBA0034C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1:alpha_3:*:*:*:*:*:*",
            "matchCriteriaId" : "46B86AD1-967D-4C8E-BD31-C2A2197B1E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7CBC45-320E-48CF-9A63-07DDE2FB61BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "266E32CD-66FB-4E19-8091-EC748B177D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DD9120-2224-4612-A6EE-539F47BD50E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A9E4-9D09-4127-AF8B-4DA6D488E67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1.3_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C667FD-BA00-43B3-8313-5A24A2DFF55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9FBA02-8A6A-471F-92CD-D8E77B5061C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D97C81-A053-4D73-BEA7-CBCB5FC0CC83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5BC7E8-4C8A-4183-AB8C-1DAE12935387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F9137B-D13F-488B-8196-85E06FAB682E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82F257F4-CB62-4C6F-8866-AA253EC8C0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2_revision5002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC4F089-A606-4880-8C5D-24520B55CD14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2_revision5003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F6724F-AC94-4D6B-BEB7-EF4683FD1A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AB6F6F-2FE3-4FC3-9009-D40EA852711F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "94ADC624-E43E-4F1D-8525-F6903943C932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "06A25444-2680-4379-B2CA-9858B6AF71CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82F4D88-779D-4D5D-96CD-2B31B61BA29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4801D56C-5ED6-4648-A0C9-EB4D06786A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0DABD9-DE15-4619-8668-0277A67F5205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A80D1CBE-DA6D-4939-A4A4-8F237C97F76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BEC573-A346-4F07-8053-A5F6E92A343C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A777651-D2B2-47E0-A13C-BD667635F3E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B017F95A-90F8-4DE4-B74F-ABB712F32987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1503C4CB-5D58-4523-860C-4B637AD91CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1253161D-F1C8-46D6-B970-20335071500E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE401B3-6291-4EA8-8800-0350BAC0B22E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7",
            "matchCriteriaId" : "79F41AFB-596E-4FFA-AC46-E563122A9D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2912D04D-A004-4842-8EF0-B51DAAA5FD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77286DE-D583-4359-8962-439583BE9BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ED66D3-5D12-42CE-8B98-6A2984DAC7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB3E9E3-1341-4F34-B6D1-5DF9F3B1D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0EA81B6-0254-404D-8A2B-80C027383FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738C3727-FCA0-4C7B-B6D6-2FC14987706A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8149192C-167C-4459-8C20-355DE0FF2921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC1B2B1-C8EE-47A4-BE44-CAC1A6CD432E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E6D03D-0547-4CAB-A1CF-AEAC82634437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5136FA-5060-4448-9874-3DF375467ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FB8E4A4-818E-4FDF-8C83-7C8FB5C83909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F534621-ED5F-46D0-A893-D0C6DAACB0C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1930525-806B-49B1-A18E-189D41E5885C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "330826FD-833C-4BB4-8293-2812956496B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555E7E8A-3632-416B-889E-68E98AABE8CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75674DE5-229D-4359-B29C-E18BBC76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAE70A19-919A-4478-B97B-EEF9FA29BECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70524981-C0ED-4915-B0F3-A9F5D4865A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9450D1-B817-4A38-A46F-05FCB6692A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA78384-3133-442A-B135-192440FB1745"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1022528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wordpress.org/development/2009/07/wordpress-2-8-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55712",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/55715",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504795/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35584",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1833",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1022528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wordpress.org/development/2009/07/wordpress-2-8-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/55715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-10T21:00:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.  NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for \"user convenience.\""
      }, {
        "lang" : "es",
        "value" : "WordPress y WordPress MU anterior a v2.8.1 expone un comportamiento diferente para un intento fallido de acceso en función de si existe la cuenta de usuario, lo cual permite a atacantes remotos enumerar nombres de usuario válidos. NOTA: el proveedor informa de que cuestiona la importancia de esta incidencia, indicando que el comportamiento existe para conveniencia del usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.1",
            "matchCriteriaId" : "513237CD-92E3-46CD-8221-88F36B243101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.1",
            "matchCriteriaId" : "1327C621-452A-4BA4-B2E7-28AE4533DCC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022528",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9110",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/55713",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504795/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35581",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1833",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/55713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2336",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-10T21:00:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.  NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for \"user convenience.\""
      }, {
        "lang" : "es",
        "value" : "El interfaz de correo olvidado en WordPress y WordPress MU anterior a v2.8.1 muestra diferentes comportamientos para una petición de contraseña dependiendo de si existe la cuenta de usuario, lo cual permite a atacantes remotos enumerar los nombres de usuario válidos. NOTA: el fabricante informa cuestionando la importancia de esta incidencia,indicando que este comportamiendo se da por conveniencia para el usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.1",
            "matchCriteriaId" : "513237CD-92E3-46CD-8221-88F36B243101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.1",
            "matchCriteriaId" : "1327C621-452A-4BA4-B2E7-28AE4533DCC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9110",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/55714",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504795/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35581",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1833",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/55714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-10T21:00:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote attackers to obtain sensitive information by reading the HTML source."
      }, {
        "lang" : "es",
        "value" : "WordPress v2.7.1 coloca el nombre de usuario  del autor de un post en un comentario HTML, lo cual permite a atacantes remotos obtener información sensible mediante la lectura del código fuente HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5663CAA-0859-447E-8489-02CE4315DF91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55716",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504795/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1833",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-10T21:00:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message."
      }, {
        "lang" : "es",
        "value" : "WordPress y WordPress MU antes de v2.8.1 permite a atacantes remotos obtener información sensible a través de una solicitud directa a wp-settings.php, el cual revela la ruta de instalación en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.1",
            "matchCriteriaId" : "68895399-32D7-43DE-945B-B9BD29DA5B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEB898B-BF80-44C1-A847-AC0062458B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.6.2:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C33D37-2FFF-4DE5-B260-E090F4E6377B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70EF48-AD6C-4119-B7C4-67E889A2BB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.6.2.1:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4139FE-7C43-44AC-856F-226E1194D936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0395AD1D-3470-49EE-9F2A-349EF8782B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8B90E9-5DF5-45F5-9810-2973FDAA16A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.71-gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC499ABC-D1A6-4A9B-A06B-12C8275462DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F33ACD9-B4B6-4B5E-9CD5-26AA5997119C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.72:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "056E641C-9322-4BEE-97B4-FE16DE8D7336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.72:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB42CEF-E12D-4DB0-8536-FD393D3697A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AF89F9-AE67-49B5-ACF0-3A645C454E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0174AF4F-9759-4762-ACF4-688E232AF1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "90C9AFEE-BCD7-4B4D-8F22-98747524F17D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "175B2515-E212-4347-8C04-13E110D70C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "BD571A4D-1D9C-4925-AE99-9128421213F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B553469-0D8B-48AD-8EFF-3DC469262977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0-platinum:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE015E8-FDE1-47FA-B3E5-0DC2C0A5107D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7BEFBD-4326-44A5-A160-9406D94AB307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.1-miles:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C516C041-B945-4992-8104-E20B3B6CECDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85A88D7-07A1-4A8C-88B5-057AD9C675E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.2-blakey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBD4E49-EA17-4FFD-AF9C-950E542555A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "0666BEBE-BE45-41D3-8C53-E4C9E6853C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2-delta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2F19C7-DD9A-4851-8788-E3E4E8CE8E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2-mingus:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4229BC-1646-4202-92B8-FC718D557518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64D4777-2ED6-4A47-A8F3-38A3A8EB1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614956CB-0582-4EAD-86F4-5AB0BB781CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4FEB48-771B-4331-B42B-764F12A94B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "947635DB-A86E-45F0-B946-559202C49503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E4894-3F39-471F-9A56-052718813BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5-strayhorn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86BC4AC-62D0-47AA-8E81-50ED0B3CB88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38085E5A-7B41-4E43-8A22-5FD44970F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF628FB8-1AC4-4F15-9967-E60785A32D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0BF1F6-A54A-48E8-A872-015FE10E5D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0B6EAC-E43D-4D1B-856F-7C23250A2355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51FAD0FC-CE84-4332-B061-75C0C8A0B6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEABEFD-E248-42B7-B99E-FFDEE27F7064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF4671A-8449-438E-922B-94E5542137BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F05A1F-2227-4166-807B-1BDE2EA8F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73E23-7CD0-429C-986B-5F721F1696BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECE66B3-3696-4E98-AF63-DF2FB256A6FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75BB382-6B47-4C6A-BF94-80443BEB1A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA75368-506F-4772-B0F2-8AAECDF288F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDD9E5C-766F-4945-B87D-781E780AB03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48C0BB5-2D87-49ED-A8EB-843E5F0EAE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6AAA17D-FBB8-4F54-82E2-870D6FA5C299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A0CAEE-5C14-44C6-85FB-6AFDAAA1C3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.10_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D85664-E355-4A68-89EB-D5C9D0E6B916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.10_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91243043-F4A6-40EF-97FC-989ED366394C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE667A-A937-4C38-B4D5-29B33F23F7B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A3624D4-E666-4A1B-B465-714ACBA0034C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1:alpha_3:*:*:*:*:*:*",
            "matchCriteriaId" : "46B86AD1-967D-4C8E-BD31-C2A2197B1E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7CBC45-320E-48CF-9A63-07DDE2FB61BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "266E32CD-66FB-4E19-8091-EC748B177D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DD9120-2224-4612-A6EE-539F47BD50E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A9E4-9D09-4127-AF8B-4DA6D488E67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1.3_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C667FD-BA00-43B3-8313-5A24A2DFF55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9FBA02-8A6A-471F-92CD-D8E77B5061C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D97C81-A053-4D73-BEA7-CBCB5FC0CC83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5BC7E8-4C8A-4183-AB8C-1DAE12935387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F9137B-D13F-488B-8196-85E06FAB682E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82F257F4-CB62-4C6F-8866-AA253EC8C0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2_revision5002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC4F089-A606-4880-8C5D-24520B55CD14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2_revision5003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F6724F-AC94-4D6B-BEB7-EF4683FD1A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AB6F6F-2FE3-4FC3-9009-D40EA852711F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "94ADC624-E43E-4F1D-8525-F6903943C932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "06A25444-2680-4379-B2CA-9858B6AF71CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82F4D88-779D-4D5D-96CD-2B31B61BA29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4801D56C-5ED6-4648-A0C9-EB4D06786A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0DABD9-DE15-4619-8668-0277A67F5205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A80D1CBE-DA6D-4939-A4A4-8F237C97F76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BEC573-A346-4F07-8053-A5F6E92A343C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A777651-D2B2-47E0-A13C-BD667635F3E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B017F95A-90F8-4DE4-B74F-ABB712F32987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1503C4CB-5D58-4523-860C-4B637AD91CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1253161D-F1C8-46D6-B970-20335071500E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE401B3-6291-4EA8-8800-0350BAC0B22E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7",
            "matchCriteriaId" : "79F41AFB-596E-4FFA-AC46-E563122A9D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2912D04D-A004-4842-8EF0-B51DAAA5FD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77286DE-D583-4359-8962-439583BE9BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ED66D3-5D12-42CE-8B98-6A2984DAC7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB3E9E3-1341-4F34-B6D1-5DF9F3B1D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0EA81B6-0254-404D-8A2B-80C027383FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738C3727-FCA0-4C7B-B6D6-2FC14987706A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8149192C-167C-4459-8C20-355DE0FF2921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC1B2B1-C8EE-47A4-BE44-CAC1A6CD432E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.2.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E6D03D-0547-4CAB-A1CF-AEAC82634437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5136FA-5060-4448-9874-3DF375467ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FB8E4A4-818E-4FDF-8C83-7C8FB5C83909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F534621-ED5F-46D0-A893-D0C6DAACB0C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1930525-806B-49B1-A18E-189D41E5885C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "330826FD-833C-4BB4-8293-2812956496B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555E7E8A-3632-416B-889E-68E98AABE8CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75674DE5-229D-4359-B29C-E18BBC76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAE70A19-919A-4478-B97B-EEF9FA29BECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70524981-C0ED-4915-B0F3-A9F5D4865A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9450D1-B817-4A38-A46F-05FCB6692A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress_mu:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA78384-3133-442A-B135-192440FB1745"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1022528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55717",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504795/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1833",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1022528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-10T21:00:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the AddFavorite method in Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a long URL in the first argument."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el método AddFavorite en Microsoft Internet Explorer permite a atacantes remotos provocar una denegación de servicio (cuelgue de aplicación) y posiblemente tiene otro impacto no especificado a través de una URL larga en el primer argumento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:8.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587DAAD1-F33D-41EB-B752-36B9D87FC19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC71FD8-D385-4507-BD14-B75FDD4C79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "506711D9-6E57-4EED-8628-36C7F2324040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "ED471260-0272-431F-A91E-AC2883D92497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "63D18070-EC48-4904-9AE0-558F7F3B869D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "86584E3F-3B0D-4018-A186-E59F3B01CA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0.5730:unknown:gold:*:*:*:*:*",
            "matchCriteriaId" : "817636ED-5E42-460E-89F1-24D5C64AB8BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0.5730.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6E1020-1017-4670-9316-27C79F1E2698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.00.5730.1100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F63AE1-8FC9-4C0F-8D19-F17DFA214E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16386:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B1186A-FA5B-4E49-8C2F-BCD2D45F22A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16441:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D75496-8594-44DB-B5C4-EA3CABD6551A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8.0.6001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F709B61-F64B-4E8F-80BB-4944485B6125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8.0.6001:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "612B8367-DAEF-4EE3-BC57-16A5CF4D3030"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-13T14:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the syscall implementation in IBM AIX 5.3 allows local users to gain privileges via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la aplicación syscall en IBM AIX 5.3 permite a usuarios locales obtener privilegios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35754",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ54713",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ54714",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55727",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35615",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ54713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ54714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-13T14:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Sametime server in IBM Lotus Instant Messaging and Web Conferencing 6.5.1 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to enumerate valid usernames."
      }, {
        "lang" : "es",
        "value" : "El servidor Sametime de IBM Lotus Instant Messaging and Web Conferencing v6.5.1 genera mensajes de error para los intentos fallidos de inicio de sesión con diferentes retardos de tiempo en función de si existe la cuenta de usuario o no, lo que permite a atacantes remotos discernir los nombres de usuario válidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_instant_messaging_and_web_conferencing:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AB1206-BD93-41A1-962D-291668678DF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.senseofsecurity.com.au/advisories/SOS-09-004.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.senseofsecurity.com.au/advisories/SOS-09-004.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-13T14:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in page.php in Online Dating Software MyPHPDating 1.0 allows remote attackers to execute arbitrary SQL commands via the page_id parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de SQL en page.php en Online Dating Software MyPHPDating v1.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro page_id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phponlinedatingsoftware:myphpdating:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D07BAFC-5977-4C3E-84A9-E890F8A0AAC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/myphpdating10-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/32268",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1819",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/myphpdating10-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/32268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-13T14:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) username (aka Login) and (2) password parameters in a login action."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en Rentventory 1.0.1 permiten a atacantes remotos inyectar HTML o scripts web arbitrarios a través de los parámetros (1) username (nombre de usuario), también conocido como Login y (2) password (contraseña) en una acción login."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rentventory:rentventory:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA13D06A-E2DA-4FE2-B713-393AE3E83F0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/rentventory-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35749",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1835",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/rentventory-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-13T14:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to inject arbitrary web script or HTML via the text parameter in a list action.  NOTE: this might overlap CVE-2008-1399."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en index.php en el módulo de búsqueda de ClanSphere v2009.0 y v2009.0.2 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro text en una acción listar. NOTA: ésta vulnerabilidad podrían coincidir con CVE-2008-1399."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansphere:clansphere:2009.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7697CBA-DF20-48BC-83D3-5008E902134B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansphere:clansphere:2009.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF233D9-FFDF-447B-AF85-E64838A7802C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/clansphere-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35744",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35605",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1836",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/clansphere-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-13T14:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitrary SQL commands via the (1) IndustryID parameter to category.php and the (2) SellerID parameter to supplier/view_contact_details.php.  NOTE: this is a product that was developed by a third party; it is not associated with alibaba.com or the Alibaba Group."
      }, {
        "lang" : "es",
        "value" : "Varias vulnerabilidades de inyección SQL en Web Development House Alibaba Clone, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del (1) parámetro IndustryID en category.php y el (2) parámetro SellerID en supplier/view_contact_details.php. NOTA: este es un producto que fue desarrollado por un tercero; no está asociado con alibaba.com o el Grupo Alibaba."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_development_house:alibaba_clone:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C8CCA5-B271-43B5-AA90-CD5D59DB527C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/alibabaclone-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35741",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1838",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/alibabaclone-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-13T14:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in JNM Guestbook 3.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en index.php en JNM Guestbook 3.0 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jnmsolutions:guestbook:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCCBF4C-C85E-4F7D-8D09-C8BD642B49A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/jnm-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35760",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1831",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/jnm-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-13T14:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en ogp_show.php en Online Guestbook Pro 5.1 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro entry."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esoftpro:online_guestbook_pro:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47429F3-3D23-4060-AE02-0B02C6606D93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35762",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.com/0907-exploits/ogp51-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1830",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.com/0907-exploits/ogp51-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-13T14:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a resultats-recherche action."
      }, {
        "lang" : "es",
        "value" : "vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en public/index.php en Linea21 v1.2.1 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro búsqueda en una acción resultats-recherche."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linea21:linea21:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24249362-9B4E-4796-8D9F-DC2E20754F98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35745",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.com/0907-exploits/linea-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1837",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.com/0907-exploits/linea-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-13T14:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Siteframe 3.2.3, and other 3.2.x versions, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function."
      }, {
        "lang" : "es",
        "value" : "Siteframe v3.2.3, y otras versiones 3.2.x, permite a atacantes remotos obtener información de configuración a través de una solicitud directa a phpinfo.php, la cual llama a la función phpinfo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siteframe:siteframe_cms:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEF259E-A238-446E-9599-13734392FE18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siteframe:siteframe_cms:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B3DF25-9625-4FBB-A524-938CC9F1CAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siteframe:siteframe_cms:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3960AA31-927A-4275-B4B2-D6B4004E1678"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55683",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35761",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0907-exploits/siteframe-sqlphpinfo.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35598",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1822",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51579",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0907-exploits/siteframe-sqlphpinfo.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-13T14:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in maillinglist/setup/step1.php.inc in ADbNewsSender before 1.5.6, and 2.0 before RC2, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the path_to_lang parameter to setup/index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio  en maillinglist/setup/step1.php.inc en ADbNewsSender antes de la versión v1.5.6, y en la v2.0 antes de RC2, permite a atacantes remotos incluir y ejecutar archivos locales a través de un .. (punto punto) en el parámetro path_to_lang para setup/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.5",
            "matchCriteriaId" : "5B412BB4-3E28-4678-9C3F-D2CB22D5E038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F792DDE-D025-4F5B-AB1A-620A59900857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A53D1A3-6A37-417B-8CF4-F5897635E774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815153B5-F97A-4C56-8C20-4F6E7C0D638A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F051AB9-C299-4E9B-B4C2-EF77A0AE18E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C15AFACD-D8AD-415E-B050-7DAFC99506F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEF5136-210C-446B-9E32-6299B10CB69B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D524626-B977-4356-A93F-88B435CFCA90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328B133E-7482-4946-BAB1-5D89C60041B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A71223-CD88-446F-AF93-0626B39BE3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80953021-E692-449B-A961-A369E8BB4A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "683CA1FD-A4E4-41E4-97A1-01A77B520991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1831F536-F07D-49E8-A863-FDAD8E383104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD13616B-33A3-4E43-BB91-19E192FA67F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A250D35-B8DF-4999-997C-EC69AD725E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A87D52-68B5-488E-BA5E-FDF61C798195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DDB844-AC56-443A-9099-DA0D54F070E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E8417-9BFE-4CB2-A218-458CD718F41B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01092A5C-0F07-488B-9F02-ACCA96618BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF12021-D316-4A18-B3E1-ED6AB9736EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758BFA0-47BA-49DB-8477-2996D6D03A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0EEF2A-61CC-472C-BE91-7199318DA51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CAD3C9-3D51-4DAA-930E-B9ECCDBAB6C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04F1B990-05DE-43FD-8923-CD2E675DE9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECEF6BB-AF11-4427-B740-DC66AEA94DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3BA36-997A-4CAF-9103-966881BDFC87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E6AD1EB-77AD-4F2F-A604-C290274C9AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E5BC91-05F3-4E97-B47B-C0D4E620F22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AC95ACF-C82C-445F-AFB5-BE778EC3C3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:2.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "244798D3-8486-43F7-9F90-CAB406564AF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:2.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "95A2C245-99A0-4DF2-B725-EB9F0E528E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:2.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "228BE08C-4B63-4DE2-AFD3-C0B251F9C463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:2.0:alpha4:*:*:*:*:*:*",
            "matchCriteriaId" : "C4997E07-2357-4AD5-9CB6-E98D5D690A2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0C0685-2380-441D-B1DB-0432B6E2ABE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1FC7EA-E883-426F-AE5E-288BBFBEAEE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3341B4AC-0A61-4437-8E8D-8D908C1CAE7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://r00tsecurity.org/forums/index.php?showtopic=9460",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/apps/mantisbt/adbnewssender/view.php?id=22",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=694644",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35596",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1808",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://r00tsecurity.org/forums/index.php?showtopic=9460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/apps/mantisbt/adbnewssender/view.php?id=22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=694644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-13T17:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers to read arbitrary JSP files via an alternate data stream syntax, as demonstrated by a .jsp::$DATA URI."
      }, {
        "lang" : "es",
        "value" : "iPlanet Web Server de Oracle (anteriormente Sun Java System Web Server o Sun ONE Web Server) versión 6.1 anterior a SP12, y versión 7.0 hasta Update 6, cuando se ejecutan en Windows, permite a los atacantes remotos leer archivos JSP arbitrarios por medio de una sintaxis de flujo de datos alternativa, como es demostrado por un URI .jsp::$DATA."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "DCFD3C8D-6E79-4DA6-A600-D952C8E5A151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp10:windows:*:*:*:*:*",
            "matchCriteriaId" : "A7BDC9E6-87C4-4AE1-AEAD-518CCFF853E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp11:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC9F5EA1-0CE5-417E-AE65-F4C47376DEEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp4:windows:*:*:*:*:*",
            "matchCriteriaId" : "A018481B-EB48-4C4E-A1E4-324DCC437441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp5:windows:*:*:*:*:*",
            "matchCriteriaId" : "B0FEC983-91A6-4708-8308-B77B0FD2D9DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp6:windows:*:*:*:*:*",
            "matchCriteriaId" : "431D609A-AA61-4C7C-8F4A-8B01DB2E32E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp7:windows:*:*:*:*:*",
            "matchCriteriaId" : "37CBE122-47ED-4659-B15A-55FAF15BA63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp8:windows:*:*:*:*:*",
            "matchCriteriaId" : "E3866A08-0CFA-473D-BBE5-4736282A6446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp9:windows:*:*:*:*:*",
            "matchCriteriaId" : "4541C58C-45F1-4F17-82B9-E33BE693D8DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:7.0:update_5:windows:*:*:*:*:*",
            "matchCriteriaId" : "5DE90647-CF0D-4920-9F7A-B13572D7D71A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:7.0:update_6:windows:*:*:*:*:*",
            "matchCriteriaId" : "C705F770-5086-4926-A110-A32D4170B8A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isowarez.de/SunOne_Webserver.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN47124169/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2009-002069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35701",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022511",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-266429-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1786",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://isowarez.de/SunOne_Webserver.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN47124169/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2009-002069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-266429-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-13T17:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de formato de cadena en la función dispatch_command en libmysqld/sql_parse.cc en mysqld de MySQL v4.0.0 hasta v5.0.83 permiten a usuarios remotos autenticados causar una denegación de servicio (mediante caída del demonio) y, posiblemente otros efectos no especificados, a través de especificadores de formato de cadena en el nombre de base de datos en una petición (1) COM_CREATE_DB o (2) COM_DROP_DB. NOTA: Algunos de estos detalles se obtienen a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFEDB808-A8D8-403E-9103-AB486C793EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6AAD13-3CA1-4543-834B-39FB53D4462D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1CEA0B-1234-4166-BD32-CCBB4016A9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBEDF5A-5205-4012-B9B8-0FA304E7119A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF35900-4051-4E07-9BFA-347BEAB8AB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC969A5-52CC-44F2-A929-DE559A5D7624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4D224C-8ABF-41A0-A7BE-C10C2387DE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD36E9E-89A0-42C2-AC50-7A5BC53B3D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CE88F-2941-4A08-9472-359CF214F81C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC1D0C0F-08EF-4AFA-BBEA-CCDF04F90E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC198CDB-CAC0-41DD-9FCD-42536E7FE11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77A2761-2B44-4061-9C29-A54F90A1AD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754B78F2-A03C-40BE-812B-F5E57B93D20B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575039BD-A8B6-4459-B5F0-F220A94650EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.5.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA03768-74D2-4C5D-ABCF-8A91F9E6C273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542B23CB-7535-4EF7-B926-466A5161A0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E686C3-4100-465C-9F45-068580B496E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB618DB2-6B00-4E99-8232-937D2C51986B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665E063D-355D-4A5A-A05F-36BF582DE36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.22.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214E3CF9-6362-4F5A-91B7-5E69564F7144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C6CD84-EA5D-451F-AFC3-5F7094F0017D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF9271A-A816-44F6-A811-ECC1FB0993C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F482D3D3-205C-495E-AF3A-E9C3018111F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53853D65-F2C6-410F-9CF8-DED19B66BD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D927706B-565F-4152-8F86-AC85F1AA469F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0291F7-27D9-4634-9DD3-21827C1CC5ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D54A38-E7A0-4B89-BBA5-D98D4D7FF3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7AFEB8-711B-4DED-A24E-38012F415FC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9369CF20-D05C-41A2-8F9E-DE259FCF9E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BEAD26-ADDC-4FC6-A493-584315183936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153E8DFB-4197-4117-87C6-C0FBE3C05600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765BF98E-7AB1-45EA-9935-2C311E621211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22408224-0634-4CC6-888F-892E9D932CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2646B4-593E-4AC9-8292-1AD805632DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30EC061-A04C-4402-91A0-B7E8DA9DBA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5E12B3-F6CA-48CE-96C9-9B63EDB91C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "4D57E557-7F6D-4618-86AC-B10C08341900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECE1A40-0603-421E-BCCF-111EC3C2BCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "B657610A-8EDB-407B-A81F-C3CDF2EF6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC10CD2-B9A3-46DD-839E-C7FB6647155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D5D4B9-B831-4DDD-8FDD-3D14F167822A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC21395-4C78-4343-9452-578B24C2656D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BC82AF-5E80-4AE4-A765-9D3725D9E5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF2E25B-8689-4396-9C2B-99EEF4AB02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5032D74E-CC8D-4217-AEF0-98DCD1820AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46FEF7C-18DD-4C64-AFA3-0626A8CE2B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3340604-0D38-4494-847B-E9E8B0026A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC117BF1-3127-477A-9500-C9A32596ED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC54D7B3-DC9B-43AC-BE10-565BDF292A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7AC36-4E5D-483B-939E-257FDEDE48EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED5BA55-FF4F-4F89-89B1-554624DDA1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2CEF98-8561-42D2-BCE5-3AAE4DC81ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00312DA-AB34-4E5B-AB7C-71AA3AD0AC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0C43BB-81C6-496F-AC7B-61382DE76B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9FF055-99BC-4E15-80C8-80FEF3CBA990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6ED2E0A-37C6-4BD2-87B0-FD3E6D0C2108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6132F5E-ADE6-44C2-85BD-17408594789F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6779AC-EF41-46B5-8B26-07FA2537E5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F038AF5-C96C-43EE-9D46-1DD8CAF567EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3D4850-19F0-4FAF-B0DE-09ECBE6DCF92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24BD3CF-0047-47F8-8B13-E2A6348E3924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7196E5-8483-4872-A78A-8BE7EC551CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "14DDA057-D211-42BD-B8AF-F250F1C5B88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CA2F70-77E4-4280-B845-4CE5774162C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA788329-9A66-49EA-B7E4-E465C0E7E320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C06765-D153-4D4D-B8CD-DB2E386E082B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4297E6B7-6C5A-4D52-A66B-F9D1AE17E988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141D83A9-89C2-456F-B70D-F274EBE3EAC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0670E6AA-28B1-4B0C-84F9-F3F9F3E6ABDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6769975-47A4-4D0A-9181-F59776D13D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E942FA-A458-4607-B48D-FCA112AFF1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E241159-FAA4-4DCF-AB68-BE36DF95D59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6995B6-B594-454B-BD26-EACFB8241DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC14E107-7C11-4D5B-994B-CCACFD62097E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8105AE3-7FF6-43C5-9B47-29ACD4DD7C3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BA51FF-B163-4522-8D78-AF9C05D50511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "19001041-22C4-4D2C-A918-378DACBB1DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "6F610D56-6BB6-48FB-B43A-670CE9168500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1668BB5B-E7FB-4430-B8D5-89E308F5DD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F44DA1-1509-4AC7-AB6B-2B2A834A16AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2D6DF6-FE5D-428F-BCEB-E7832C2B4FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777E919-FD4B-452B-88D7-165410C703F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56ACB60-EC2C-45AF-B923-B3A90A2F7AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C52D66-3BCA-4854-BF09-CB6DF1AC0E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF54CC8D-B736-461D-B693-686E862EF969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5EADE4-9E1B-4A1C-B3B5-ACF1287A19E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053ACE9B-A146-42C0-ADB2-47F6119965D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B4F891-2A03-45A8-A49C-7F8B8F7D8407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E62AC4-954E-476C-98BE-C138E328AE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B88385C-F5FB-401F-80D5-5BF11CE3C19D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA586E2B-A349-47C8-A17C-DA9016C6C3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30CA14C-AE28-4D9A-B53D-B7C28D3BA56B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811780EA-8805-41A6-A920-A201CCC80790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11873AEA-5D6C-4AC0-915A-8A2869B2EFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.30:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7753CE5-61C4-4FBC-BB60-F7D4493E76E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EDC2EB4-2C8D-4EF7-83A6-CBE6FF759DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5965032E-5BC0-4E69-B097-F9EE2B24C861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F21A5A-F9C0-4860-80AD-1D3937483F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B54F660F-AE43-4F3B-8935-5712CAE860A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4413BB52-6FBD-4C12-8864-ADDC65E45B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B49F9BA-560B-40AE-9457-436830CDD371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53A8437-C61A-4203-B341-B5596569E50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1435669-9BDA-40D4-BB30-C8AE1C3E7649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8EBAE3C-F24D-4935-96BF-9541EC03B8F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.51a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD39950F-FBBF-4505-8FB5-EEF2886095F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA95EE27-389A-4068-AAC1-AD64DD6BB006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA3E354-4366-46B5-ACD2-E72D0C8320A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C002047-0FB1-4DC6-9108-B4B5AAFAC16A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584C0690-2826-4389-95AD-42048AEE1916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB85180-0F28-4281-BB59-E3F29BE25C9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0058.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35767",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/38517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ubuntu.com/usn/usn-897-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55734",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1289.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0110.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504799/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35609",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-1397-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0058.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://ubuntu.com/usn/usn-897-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1289.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0110.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504799/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-1397-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2446\n\nThis issue was addressed for Red hat Enterprise Linux 5 by https://rhn.redhat.com/errata/RHSA-2009-1289.html and Red Hat Enterprise Linux 4 by https://rhn.redhat.com/errata/RHSA-2010-0110.html .\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, future MySQL package updates may address this flaw for Red Hat Enterprise Linux 3 and Red Hat Application Stack 2.",
        "lastModified" : "2010-02-17T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-13T17:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ogp_show.php in Online Guestbook Pro 5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) search or (2) display parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en ogp_show.php en Online Guestbook Pro v5.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"search\" o (2) \"display\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esoftpro:online_guestbook_pro:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47429F3-3D23-4060-AE02-0B02C6606D93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35762",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.com/0907-exploits/ogp51-morexss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.com/0907-exploits/ogp51-morexss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-13T17:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via the search_choice parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en ogp_show.phpein Online Guestbook Pro v5.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"search_choice\". NOTA: el origen de esta información es desconocido; algunos detalles han sido obtenidos a partir de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esoftpro:online_guestbook_pro:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47429F3-3D23-4060-AE02-0B02C6606D93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35762",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-13T17:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in maillinglist/admin/change_config.php in ADbNewsSender before 1.5.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the path_to_lang parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en maillinglist/admin/change_config.php en ADbNewsSender anterior a v1.5.6, permite a atacantes remotos añadir y ejecutar archivos locales de su elección a través de ..(punto punto) en el parámetro \"path_to_lang\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.5",
            "matchCriteriaId" : "5B412BB4-3E28-4678-9C3F-D2CB22D5E038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F792DDE-D025-4F5B-AB1A-620A59900857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A53D1A3-6A37-417B-8CF4-F5897635E774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815153B5-F97A-4C56-8C20-4F6E7C0D638A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F051AB9-C299-4E9B-B4C2-EF77A0AE18E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C15AFACD-D8AD-415E-B050-7DAFC99506F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEF5136-210C-446B-9E32-6299B10CB69B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D524626-B977-4356-A93F-88B435CFCA90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328B133E-7482-4946-BAB1-5D89C60041B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A71223-CD88-446F-AF93-0626B39BE3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80953021-E692-449B-A961-A369E8BB4A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "683CA1FD-A4E4-41E4-97A1-01A77B520991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1831F536-F07D-49E8-A863-FDAD8E383104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD13616B-33A3-4E43-BB91-19E192FA67F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A250D35-B8DF-4999-997C-EC69AD725E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A87D52-68B5-488E-BA5E-FDF61C798195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DDB844-AC56-443A-9099-DA0D54F070E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E8417-9BFE-4CB2-A218-458CD718F41B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01092A5C-0F07-488B-9F02-ACCA96618BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF12021-D316-4A18-B3E1-ED6AB9736EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758BFA0-47BA-49DB-8477-2996D6D03A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0EEF2A-61CC-472C-BE91-7199318DA51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CAD3C9-3D51-4DAA-930E-B9ECCDBAB6C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04F1B990-05DE-43FD-8923-CD2E675DE9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECEF6BB-AF11-4427-B740-DC66AEA94DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B3BA36-997A-4CAF-9103-966881BDFC87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E6AD1EB-77AD-4F2F-A604-C290274C9AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E5BC91-05F3-4E97-B47B-C0D4E620F22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adbnewssender:adbnewssender:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AC95ACF-C82C-445F-AFB5-BE778EC3C3BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/apps/mantisbt/adbnewssender/view.php?id=22",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=694644",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35596",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/apps/mantisbt/adbnewssender/view.php?id=22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=694644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-13T17:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 before 3.5.0.14, allows local users to gain privileges via crafted METHOD_NEITHER IOCTL requests to \\Device\\OAmon containing arbitrary kernel addresses, as demonstrated using the 0x830020C3 IOCTL."
      }, {
        "lang" : "es",
        "value" : "El controlador del kernel OAmon.sys v 3.1.0.0 y anteriores en Tall Emu Online Armor Personal Firewall AV+ anterior a v3.5.0.12, y Personal Firewall 3.5 anterior a v3.5.0.14, permite a usuarios locales obtener privilegios a través de peticiones METHOD_NEITHER IOCTL modificadas a  \\Device\\OAmon que contienen direcciones del kernel de su elección como se ha demostrado empleadon el IOCTL 0x830020C3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tallemu:online_armor_personal_firewall_av\\+:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.0.11",
            "matchCriteriaId" : "3AD4AE7A-E4CB-42C1-A11A-FC6D508F147A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tallemu:online_armor_personal_firewall_av\\+:3.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E8DADE9-DBA9-44C9-8DC1-940804060CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tallemu:online_armor_personal_firewall_av\\+:3.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C63A08-EDE7-4CC6-A23D-07CEB0805CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tallemu:personal_firewall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.0.13",
            "matchCriteriaId" : "D305E959-469D-42E0-83C1-AD73A94C647F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tallemu:personal_firewall:3.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A31AE5-6BDD-444C-A10C-E84F32EFE4E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tallemu:personal_firewall:3.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A9DD13-00EE-4DCA-819A-EE4BC4E0F306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tallemu:personal_firewall:3.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4BD2C55-AEA8-4700-89F5-2A9BEA2DA37F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tallemu:personal_firewall:3.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A514514E-F2BA-4B23-820C-7AA6B284042B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tallemu:personal_firewall:3.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A19ED6-9DF9-49B6-88E2-B2BE30FBDF17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tallemu:personal_firewall:3.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3658D72E-413B-489E-9D4C-262B15160D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tallemu:personal_firewall:3.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDC5F53-D51F-4801-87BE-EE253DB80D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tallemu:personal_firewall:3.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2123F5D-A418-4657-816D-D97BF6A1ADDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tallemu:personal_firewall:3.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3665144-A936-4EFA-BB97-E3436B5BFD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tallemu:personal_firewall:3.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA3E5BB-5BBE-4565-9417-34B3BDA08349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tallemu:personal_firewall:3.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882FC0D5-B40E-4F5C-8999-03C10E8624B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tallemu:personal_firewall:3.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "862734C7-284F-43F3-9658-F6604FAD5746"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://milw0rm.com/sploits/2009-OAmon_Exp.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ntinternals.org/ntiadv0806/ntiadv0806.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35227",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://milw0rm.com/sploits/2009-OAmon_Exp.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ntinternals.org/ntiadv0806/ntiadv0806.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-14T14:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters in a calendar action, or (3) a search term in the search form."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en index.php en MIM:InfiniX v1.2.003 y posiblemente versiones anteriores permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de los parámetros (1) month y (2) year en una acción de calendario o (3)un termino de búsqueda en el formulario de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mim.infinix:infinix:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.003",
            "matchCriteriaId" : "FC19D284-C788-443B-A3A0-FD18802789D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503046/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503480",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34750",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503046/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-14T14:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Citrix Licensing 11.5 have unknown impact and attack vectors, related to \"underlying components of the License Management Console.\""
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Citrix Licensing v11.5 con impacto y vectores de ataque desconocidos, en relación con \"los componentes subyacentes de License Management Console\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:licensing:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65CE218-9CD2-4F0C-BBC8-0ED6E633641F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34937",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.citrix.com/article/CTX120742",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.citrix.com/article/CTX120742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-14T14:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Citrix XenApp (anteriormente Presentation Server) v4.5 Hotfix Rollup Pack 3 no aplica adecuadamente la política de accesos cuando es definida con los filtros Access Gateway Advanced Edition, lo cual permite a atacantes remotos evitar las restricciones previstas a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:presentation_server:4.5:-:se:*:*:*:*:*",
            "matchCriteriaId" : "9A5474BB-764E-4F80-BD5C-9B48AAA9FBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:presentation_server:4.5:-:windows_server_2003:*:*:*:*:*",
            "matchCriteriaId" : "EA42A3AA-CCF9-4F28-AE9B-0E7B104BD3F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:presentation_server:4.5:-:windows_server_2003_x64:*:*:*:*:*",
            "matchCriteriaId" : "CA9F8CAD-D918-49B7-A3AF-13624164DF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:presentation_server:4.5:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1BC10D-DCDF-4360-9224-740DDB5C7726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xenapp:4.5:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB59B90-3BB9-479C-B998-E2BBA6D1BFDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/53900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34865",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.citrix.com/article/CTX118792",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34691",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022114",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1154",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/53900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.citrix.com/article/CTX118792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-14T14:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Citrix Web Interface 4.6, 5.0, and 5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Citrix Web Interface v4.6, v5.0, y v5.0.1  permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:web_interface:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14B7380-9771-45C6-9599-F50B34ED0787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:web_interface:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12DA2302-9E38-4475-96A9-8ED247D1BA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:web_interface:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAEB970F-C655-4B8F-B31B-6CCC70253427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34868",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.citrix.com/article/CTX120697",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.citrix.com/article/CTX120697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-14T14:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in webadmin/admin.php in @mail 5.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) type and (2) func parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en webadmin/admin.php en @mail v5.6.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de los parámetros (1) type and (2) func. NOTA: La procedencia de la información es desconocida; los detalles fueron obtenidos únicamente a través de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atmail:\\@tmail:5.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F50F7C-FBDF-4E90-A9B8-689C902ECD30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34403",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/34403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0192",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-07-14T20:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers to execute arbitrary code via an HTTP request with a crafted Accept-Language header, which triggers a stack-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Error de superación de límite en el componente iMonitor en Novell eDirectory v8.8 SP3, v8.8 SP3 FTF3, y posiblemente otras versiones permite a atacantes remotos ejecutar código de su elección a través de una petición HTTP con una cabecera Accept-Language manipulada, que provoca un desbordamiento de búfer basado en la pila."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC9CE828-3461-4A32-8DD6-ED8BDA0298FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:sp3:ftf3:*:*:*:*:*",
            "matchCriteriaId" : "E263D9A0-CAC3-4009-9F5B-8EA7365B28AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55847",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/34160",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-13/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=3426981",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504924/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35666",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1883",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51703",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://osvdb.org/55847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-13/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=3426981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504924/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0692",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-07-14T20:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el método script_write_params en client/dhclient.c en ISC DHCP dhclient v4.1 anteriores a  v4.1.0p1, v4.0 anteriores a  v4.0.1p1, v3.1 anteriores a v3.1.2p1, v3.0, y v2.0 permite a servidores DHCP remotos ejecutar código arbitrario a través de una opción manipulada subnet-mask."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3F60D5-1AC2-4FBD-9CA5-775F082D339D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648BBC1F-1792-443F-B625-67A05004EB7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9B9007-1F13-4991-B44C-47D8EB56FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685EB87F-756C-4DBA-A347-171470EA0B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B46352-9D4D-4C74-876F-3685016025CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-010.txt.asc",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00003.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35785",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35829",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35830",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35831",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35832",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35841",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35849",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35850",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35851",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35880",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/36457",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/37342",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/40551",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-12.xml",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561471",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1833",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/410676",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:151",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.osvdb.org/55819",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1136.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1154.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35668",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022548",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-803-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1891",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1796",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=507717",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10758",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5941",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.isc.org/downloadables/12",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.isc.org/node/468",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01177.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00340.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-010.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/40551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/410676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1136.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-803-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=507717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.isc.org/downloadables/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.isc.org/node/468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00340.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue affected the dhcp packages as shipped with Red Hat Enterprise Linux 3 and 4. Updated packages to correct this issue are available via Red Hat Network:\n\nhttps://rhn.redhat.com/errata/CVE-2009-0692.html\n\nThis issue did not affect the dhcp packages as shipped with Red Hat Enterprise Linux 5 due to the use of FORTIFY_SOURCE protection mechanism that changes the exploitability of the issue into a controlled application termination.",
        "lastModified" : "2009-07-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1382",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-14T20:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long (1) picture, (2) circle, or (3) input tags."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento múltiple basado en pila en mimetex.cgi en mimeTeX, cuando se descargaron antes de 20090713, permiten a atacantes remotos ejecutar código arbitrario a través de un archivo TeX con una gran (1) foto, (2) círculo, o (3) etiquetas de entrada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forkosh:mimetex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.71",
            "matchCriteriaId" : "0205895B-D777-43B6-B4B4-E57B333CAC40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-009.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35752",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35816",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-010.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504919/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1875",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0877",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504919/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1383",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-14T20:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows remote attackers to execute arbitrary commands via shell metacharacters in the dpi tag."
      }, {
        "lang" : "es",
        "value" : "La función getdirective en mathex.cgi en mathTeX, cuando se ha descargado antes de 20090713, permite a atacantes remotos ejecutar comandos arbitrarios a través de metacaracteres shell en la tag \"dpi\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forkosh:mathtex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5784FD6A-EED6-4A19-8FDC-3F8C60EF93DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35816",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-010.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504919/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1875",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51795",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504919/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-14T20:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to gain privileges via unknown vectors, aka PR_41209."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 y anteriores permite a atacantes remotos obtener privilegios a través de vectores desconocidos, alias PR_41209."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:procurve_threat_management_services_zl_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "st.1.0.090213",
            "matchCriteriaId" : "AC839900-5C97-49F4-8298-961B3C785A62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:procurve_switch_5400zl:k.13.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D644E410-B6D3-4E92-BC12-81DD5AEC5E65"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:procurve_switch_8200zl:k.13.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768D4D20-84E1-4BC0-9CF9-5769F1978022"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=124751363528317&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124751363528317&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-14T20:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service via unknown vectors, aka PR_39898, a different vulnerability than CVE-2009-1424 and CVE-2009-1425."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en HP ProCurve Threat Management Services zl Modulo (J9155A) ST.1.0.090213 y anteriores permite a atacantes remotos provocar una denegación de servicio a través de vectores desconocidos, tambien conocido como PR_39898,una vulnerabilidad diferente que CVE-2009-1424 y CVE-2009-1425."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:procurve_threat_management_services_zl_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "st.1.0.090213",
            "matchCriteriaId" : "AC839900-5C97-49F4-8298-961B3C785A62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:procurve_switch_5400zl:k.13.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D644E410-B6D3-4E92-BC12-81DD5AEC5E65"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:procurve_switch_8200zl:k.13.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768D4D20-84E1-4BC0-9CF9-5769F1978022"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=124751363528317&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124751363528317&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-14T20:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service via unknown vectors, aka PR_39412, a different vulnerability than CVE-2009-1423 and CVE-2009-1425."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 y anteriores permite a atacantes remotos producir una denegación de servicio a través de vectores desconocidos, también conocido como PR_39412, una vulnerabilidad diferente de CVE-2009-1423 y CVE-2009-1425."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:procurve_threat_management_services_zl_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "st.1.0.090213",
            "matchCriteriaId" : "AC839900-5C97-49F4-8298-961B3C785A62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:procurve_switch_5400zl:k.13.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D644E410-B6D3-4E92-BC12-81DD5AEC5E65"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:procurve_switch_8200zl:k.13.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768D4D20-84E1-4BC0-9CF9-5769F1978022"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=124751363528317&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124751363528317&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-14T20:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service by triggering a stop or crash in httpd, aka PR_18770, a different vulnerability than CVE-2009-1423 and CVE-2009-1424."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad no especificada en ProCurve Threat Management Services zl Module de HP (J9155A) versiones ST.1.0.090213 y anteriores, permite a los atacantes remotos causar una denegación de servicio mediante la activación de una parada o bloqueo en httpd, también se conoce como PR_ 18770, esta es una vulnerabilidad diferente de los CVE-2009-1423 y CVE-2009-1424."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:procurve_threat_management_services_zl_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "st.1.0.090213",
            "matchCriteriaId" : "AC839900-5C97-49F4-8298-961B3C785A62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:procurve_switch_5400zl:k.13.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D644E410-B6D3-4E92-BC12-81DD5AEC5E65"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:procurve_switch_8200zl:k.13.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768D4D20-84E1-4BC0-9CF9-5769F1978022"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cdn.procurve.com/training/Manuals/TMSzlModule-RelNotes-90603-59900224.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124751363528317&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35653",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1869",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cdn.procurve.com/training/Manuals/TMSzlModule-RelNotes-90603-59900224.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124751363528317&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-14T20:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvt_whole_image function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de enteros en las herramientas de conversión de inter-color spaces de libtiff v3.8 hasta v3.8.2 y v4.0, permiten a atacantes dependientes del contexto ejecutar código de su elección a través de una imagen TIFF con valores grandes para el (1) ancho y (2) alto. Esto provoca un desbordamiento de búfer basado en memoria dinámica -heap- en (a) la función  cvt_whole_image de tiff2rgba y (b) la función tiffcvt de rgb2ycbcr."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44BC5E2C-B6A6-4999-A1EA-B91DA5C350C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2850FD9-8BE8-410E-8A24-28549DAACEB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A24DC5-2DF5-4CA2-A0CD-BE0650CA6F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A01676-7D0B-4F92-A874-28ACDB728A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771AFF6D-7E21-4773-9B5B-FBDAAF7E0E57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://article.gmane.org/gmane.linux.debian.devel.changes.unstable/178563/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2079",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/55821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35817",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/50726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-03.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201209-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:150",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1159.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504892/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35652",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-801-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1870",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2347",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00663.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00724.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://article.gmane.org/gmane.linux.debian.devel.changes.unstable/178563/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/55821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/50726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201209-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1159.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504892/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-801-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00724.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-14T20:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DS\\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service (ndsd core dump) via an LDAP request containing multiple . (dot) wildcard characters in the Relative Distinguished Name (RDN)."
      }, {
        "lang" : "es",
        "value" : "El componente DS\\NDSD en Novell eDirectory v8.8 anterior a SP5 permite a atacantes remotos provocar una denegación de servicio (volcado de nucleo ndsd) a través de una petición LDAP que contenga múltiples caracteres . (punto) en el nombre completo relativo (RDN)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7548D05-AD2B-46C3-9036-366585FFCB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "03D34570-657E-48D5-B778-9510C3D0FF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EA7ED79-2E4E-4BE0-B167-31BB6311A506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC9CE828-3461-4A32-8DD6-ED8BDA0298FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "A78EBF3A-4073-41D2-BD52-E598318D4996"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34160",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=3426981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1883",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=3426981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-14T20:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DS\\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service (crash) via a malformed bind LDAP packet."
      }, {
        "lang" : "es",
        "value" : "El componente DS/NDSD en Novell eDirectory v8.8 anterior a SP5 permite a atacantes remotos producir una denegación de servicio (caída) a través de un paquete LDAP malformado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7548D05-AD2B-46C3-9036-366585FFCB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "03D34570-657E-48D5-B778-9510C3D0FF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EA7ED79-2E4E-4BE0-B167-31BB6311A506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC9CE828-3461-4A32-8DD6-ED8BDA0298FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:sp3:ftf3:*:*:*:*:*",
            "matchCriteriaId" : "E263D9A0-CAC3-4009-9F5B-8EA7365B28AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "A78EBF3A-4073-41D2-BD52-E598318D4996"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34160",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=3426981",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1883",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=3426981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-14T20:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Fire V215 Server, when using XVR-100 graphic cards on system boards with part number 375-3463 and a hardware dash level -04 or later, allows remote attackers to cause a denial of service (panic) via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Sun Fire V215 Server, cuando se utilizan tarjetas gráficas XVR-100 en placas base con parte del número 375-3463 y un nivel de hardware de -04 o superior, permite a atacantes remotos provocar una denegación de servicio (pánico) a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sun:sun_fire_server:v215:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B59FE4-2175-4FC6-90E2-1E286F04BF98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-257329-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-257329-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Per http://sunsolve.sun.com/search/document.do?assetkey=1-26-257329-1\r\n\r\n\"This issue only affects Sun Fire V215 servers which are equipped with system boards 375-3463 dash level -04 or later AND XVR-100 graphic cards. Sun Fire V215 system boards 375-3463 with dash level -03 or lower, and all 375-3464-xx boards, are not affected by this issue.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-14T20:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in mimeTeX, when downloaded before 20090713, have unknown impact and attack vectors related to the (1) \\environ, (2) \\input, and (3) \\counter TeX directives."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades inespecíficas en mimeTeX, cuando se ha descargado antes de 20090713, tiene un impacto desconocido y vectores de ataque relacionados con las directivas TeX (1) \\environ, (2) \\input, and (3) \\counter ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forkosh:mimetex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.71",
            "matchCriteriaId" : "0205895B-D777-43B6-B4B4-E57B333CAC40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35752",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1875",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2009-009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2460",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-14T20:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in mathtex.cgi in mathTeX, when downloaded before 20090713, have unspecified impact and remote attack vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en pila en mathtex.cgi en mathTeX, descargado antes de 13/07/2009, tiene un impacto y vectores de ataque remotos sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forkosh:mathtex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5784FD6A-EED6-4A19-8FDC-3F8C60EF93DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35816",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504919/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1875",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504919/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-14T20:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors."
      }, {
        "lang" : "es",
        "value" : "mathtex.cgi de mathTeX, descargado antes del 13/07/2009, no crea ficheros temporales de forma segura, esto tiene un impacto no especificado y vectores de ataque locales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forkosh:mathtex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02",
            "matchCriteriaId" : "C5D49AE5-71EF-40BD-829B-B74818DA6828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forkosh:mathtex:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3873F37-5C93-45DA-89BF-65405F403F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forkosh:mathtex:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12146D18-3A2C-4930-9AA5-4071ABDF0020"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35816",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504919/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1875",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504919/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0217",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-07-14T23:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits."
      }, {
        "lang" : "es",
        "value" : "El diseño de la recomendación de W3C XML Signature Syntax and Processing (XMLDsig), tal y como es implementado en productos que incluyen (1) el componente Oracle Security Developer Tools de Application Server de Oracle en versiones 10.1.2.3, 10.1.3.4 y 10.1.4.3IM; (2) el componente WebLogic Server de Product Suite de BEA en las versiones 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0 y 8.1 SP6; (3) Mono anterior a versión 2.4.2.2; (4) XML Security Library anterior a versión 1.2.12; (5) WebSphere Application Server de IBM versiones 6.0 hasta 6.0.2.33, versiones 6.1 hasta 6.1.0.23 y versiones 7.0 hasta 7.0.0.1; (6) JDK y JRE de Sun Update 14 y versiones anteriores; (7) .NET Framework de Microsoft versiones 3.0 hasta 3.0 SP2, versiones 3.5 y 4.0; y otros productos utilizan un parámetro que define una longitud de truncamiento HMAC (HMACOutputLength) pero no requiere un mínimo para esta longitud, lo que permite a los atacantes suplantar firmas basadas en HMAC y omitir la autenticación mediante la especificación de una longitud de truncamiento con un pequeño número de bits."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F45BA3-6504-47AF-B757-7B6D3526FBF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E6D6AF-0D69-4605-B871-6DAE01CF08EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5EE7744-4584-4AE4-9F27-11EFAA002E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE0C501-4062-49D0-8983-5E92765C7181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE27E903-6D65-4D29-9583-43FB4CB473B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A754DD5-585B-4E89-9C01-2B47D2F5F6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D40DEF90-CE7F-46BB-A6FF-50C1797866B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5AAA544-D3F8-4AE2-BB2D-A64CB86EC988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7D4ECD-8787-4F9B-B81C-C0DFD8DD20EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C43D3515-D9F5-4DC8-A030-9F97593495F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1968803-FF03-477C-81FE-87528FC6DF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C1CA3B-E575-4531-A336-8BFC9F5DEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C130982-8C6E-413E-8296-C9C277FCBE6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E1790E4-073A-4666-80CB-4D967928A0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6239EEAE-5852-4DF7-8627-87139BBB03B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:fp17:*:*:*:*:*",
            "matchCriteriaId" : "D592217D-3489-40AE-8338-BF5AA5BBA251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2604E01-E43E-4882-8896-5E646E850286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98E5593-1534-48E2-8CD5-B2D1CACDDAB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4AB6BD-4439-4100-A3CE-4600AED10B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD71D5EA-9AF5-422C-810A-D136A5F132F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9D6BDA-39E1-4D15-9D86-E212809998FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2A78FE-8FA6-4532-9E9E-CF6F860EFAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BEDD70-B6DB-448F-A998-3E8774B0DB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63099EF9-0512-44CD-946A-9B25144E50D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9132BB1-5E2E-4CA6-9B63-027CF2A7229D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D839EDB9-A44F-4F7F-94EF-1A77371D705C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4421929D-C4B9-43C5-BE61-E68484D3B198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB622117-C91F-47D2-9832-B7DB340796E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D87691D-0719-4447-B258-5FA2BD10F11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5594891-E790-44E7-BC9E-0A413B385E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C286007A-361F-47BB-A099-E041D5CF6E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD464F13-942D-40EC-8144-6D23A0AEAA81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BC8C52-DA95-4BF2-AD47-9922741CAAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95255265-6D69-46D3-9FFA-8EDB1734375C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4191D3-64AB-482C-9DEF-DD04C4C942CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD75308-7F21-4DDF-AD66-C155CF4B721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C250D-8279-4071-871C-1C7C4DE09B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC300B03-7A8F-4E96-B55D-18CC258BBFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C8054A-8581-4936-AF94-291AE56EB4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026EBFCD-0BC1-404B-BC14-292F35BE667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D74F8-4321-48B3-A33E-FCCFA93013CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2043B836-3950-46A1-89E4-08985DEA0D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108457A-50DC-4432-9E30-98ADBEBF2389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mono_project:mono:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403E554C-FD1B-42CE-82C2-43CC191905DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mono_project:mono:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78278FE6-26EA-4E89-9423-EABA6C4D8877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mono_project:mono:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E1695E-FD6E-4602-9BD9-9CFFF20574CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mono_project:mono:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691B3AF1-7F3F-4A7D-9F16-FE6044E33482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mono_project:mono:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2DE3739-A2ED-47D7-9AE9-442A95ACFC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mono_project:mono:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDAB5331-AD2E-483C-93C3-8095BBBA0572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mono_project:mono:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CC03DC-14A6-4C45-9511-7CE8E7F727BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mono_project:mono:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C71A1398-8AA5-4AB3-89C8-E2E2B36FA5AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C617ED-3D8C-4B64-A56A-30BDE6E9B8D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D41A0A9E-6B5B-4FA9-996B-E589B96C24D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.4.3im:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25672ED0-9830-48B3-899A-405B97E2229A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "0B8AB045-051A-477E-B2F7-4057826C43F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09215858-8A4F-4595-98DD-39027EC6CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A7390B6A-7944-4509-B499-5B51DB9BF42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*",
            "matchCriteriaId" : "193516AD-8096-4A6E-9C4B-4B9717DD7021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server_component:8.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B986B9-A82B-4087-808E-854EC443AC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server_component:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AF95249-8970-406B-B874-4B9925471C27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server_component:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD536DD6-AF76-4075-8B28-322FB65793AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server_component:9.2:mp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDA1940-A3F4-4CEC-BDD0-B098B2E27CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server_component:10.0:mp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB8A45D-95E5-4F14-A51A-29B5A6E45F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server_component:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3D253B-73D7-4916-B5E4-9D553741E98C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.sun.com/security/entry/cert_vulnerability_note_vu_466161",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://git.gnome.org/cgit/xmlsec/commit/?id=34b349675af9f72eb822837a8772cc1ead7115c7",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://git.gnome.org/cgit/xmlsec/patch/?id=34b349675af9f72eb822837a8772cc1ead7115c7",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://osvdb.org/55895",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://osvdb.org/55907",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35852",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35853",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35854",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35855",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35858",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36494",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/37671",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/38567",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/38568",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/38695",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/38921",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/41818",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/60799",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263429-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-269208-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020710.1-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://svn.apache.org/viewvc?revision=794013&view=revision",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&dc=D400&uid=swg24023545&loc=en_US&cs=UTF-8&lang=en&rss=ct180websphere",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&dc=D400&uid=swg24023723&loc=en_US&cs=UTF-8&lang=en&rss=ct180websphere",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg21384925",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.aleksey.com/xmlsec/",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-1995",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/466161",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MAPG-7TSKXQ",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-7TY529",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.mono-project.com/Vulnerabilities",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openoffice.org/security/cves/CVE-2009-0217.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35671",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022561",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022567",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022661",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-903-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA10-159B.html",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1908",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1909",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1911",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3122",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0366",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0635",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.w3.org/2008/06/xmldsigcore-errata.html#e03",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.w3.org/QA/2009/07/hmac_truncation_in_xml_signatu.html",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=511915",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-041",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://issues.apache.org/bugzilla/show_bug.cgi?id=47526",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://issues.apache.org/bugzilla/show_bug.cgi?id=47527",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10186",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7158",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8717",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1428.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1636.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1637.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1649.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1650.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://usn.ubuntu.com/826-1/",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00494.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00505.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://blogs.sun.com/security/entry/cert_vulnerability_note_vu_466161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.gnome.org/cgit/xmlsec/commit/?id=34b349675af9f72eb822837a8772cc1ead7115c7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.gnome.org/cgit/xmlsec/patch/?id=34b349675af9f72eb822837a8772cc1ead7115c7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/41818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/60799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263429-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-269208-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020710.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.apache.org/viewvc?revision=794013&view=revision",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&dc=D400&uid=swg24023545&loc=en_US&cs=UTF-8&lang=en&rss=ct180websphere",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&dc=D400&uid=swg24023723&loc=en_US&cs=UTF-8&lang=en&rss=ct180websphere",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg21384925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.aleksey.com/xmlsec/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-1995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/466161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MAPG-7TSKXQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-7TY529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mono-project.com/Vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openoffice.org/security/cves/CVE-2009-0217.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-903-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA10-159B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.w3.org/2008/06/xmldsigcore-errata.html#e03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.w3.org/QA/2009/07/hmac_truncation_in_xml_signatu.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=511915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.apache.org/bugzilla/show_bug.cgi?id=47526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.apache.org/bugzilla/show_bug.cgi?id=47527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1428.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1636.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1637.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1649.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1650.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/826-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00494.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00505.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0987",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Upgrade component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en el componente Upgrade en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5, y v10.2.0.3 permite a usuarios remotos autenticados afectar a la confidencialidad y la integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432A3020-9977-4A10-9CDA-3A71E83F63F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C10722-4CC7-4C06-8DBC-4D96307DB41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED41086B-840A-4B39-B249-461A4B00B57B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55889",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35679",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51746",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1015",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.05, and 10.2.04 allows remote authenticated users to affect integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en el componente Core RDBMS en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.05, y v10.2.04 permite a usuarios remotos autenticados afectar a la integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432A3020-9977-4A10-9CDA-3A71E83F63F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C10722-4CC7-4C06-8DBC-4D96307DB41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC251D-9313-4A54-9623-51DC0AEC46FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55893",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35682",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51747",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1019",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en el componente Network Authentication en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5, v10.2.0.4, y v11.1.0.7 permite a atacantes remotos afectar a al confidencialidad, integridad y la disponibilidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432A3020-9977-4A10-9CDA-3A71E83F63F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C10722-4CC7-4C06-8DBC-4D96307DB41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEDE937-C3D7-421C-9F70-F546AB823E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55884",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35680",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51748",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1020",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Network Foundation component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Network Foundation en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5, v10.2.0.4 permite a los usuario remotos autenticados afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432A3020-9977-4A10-9CDA-3A71E83F63F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C10722-4CC7-4C06-8DBC-4D96307DB41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC251D-9313-4A54-9623-51DC0AEC46FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEDE937-C3D7-421C-9F70-F546AB823E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55897",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35684",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51749",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1021",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en el componente Advanced Replication en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5, y v10.2.0.3 permite a usuarios remotos autenticados afectar a la confidencialidad y la integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432A3020-9977-4A10-9CDA-3A71E83F63F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C10722-4CC7-4C06-8DBC-4D96307DB41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED41086B-840A-4B39-B249-461A4B00B57B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55886",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35685",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51750",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1963",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Network Foundation component in Oracle Database 11.1.0.6 allows remote authenticated users to affect integrity and availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en el componente Foundation en Oracle Database v11.1.0.6 permite a usuarios remotos autenticados afectar a la integridad y la disponibilidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:C",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55885",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35677",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51751",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1966",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1967."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Config Management en (1) Oracle Database 11.1.0.7 y (2) Oracle Enterprise Manager 10.2.0.4 permite a usuarios remotos autenticado afectar la confidencialidad y la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-1967."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEDE937-C3D7-421C-9F70-F546AB823E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "449A3C99-2798-4EF3-883B-5A0146E6E2E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55887",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35676",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51752",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1967",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1966."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Config Management en (1) Oracle Database 11.1.0.7 y (2) Oracle Enterprise Manager 10.2.0.4 permite a usuarios remotos autenticado afectar la confidencialidad y la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-1966."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEDE937-C3D7-421C-9F70-F546AB823E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "449A3C99-2798-4EF3-883B-5A0146E6E2E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55888",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35692",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51753",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1968",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers to affect integrity via unknown vectors.  NOTE: the previous information was obtained from the July 2009 CPU.  Oracle has not commented on claims from an established researcher that this is cross-site scripting (XSS) via the search_p_groups parameter in search/query/search."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad no especificada en el componente Secure Enterprise Search en Database de Oracle versión 10.1.8.3, permite a los atacantes remotos afectar a la integridad por medio de vectores desconocidos. NOTA: la información anterior fue obtenida de la CPU de julio de 2009. Oracle no ha comentado sobre las afirmaciones de un investigador establecido de que se trata de cross-site scripting (XSS) por medio del parámetro search_p_groups en el archivo search/query/search."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA21D58-967C-4011-AE13-CEE6E91DB721"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-07/0110.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=125",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55892",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35681",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51754",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-07/0110.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1969",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Auditing en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5, v10.2.0.4, y v11.1.0.7 que permite a los usuarios remotos autenticados afectar la confidencialidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432A3020-9977-4A10-9CDA-3A71E83F63F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C10722-4CC7-4C06-8DBC-4D96307DB41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC251D-9313-4A54-9623-51DC0AEC46FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEDE937-C3D7-421C-9F70-F546AB823E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55894",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35689",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51755",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1970",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-0991."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Listener en Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4 y 11.1.0.7 permite a atacantes remotos afectar la disponibilidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-0991."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432A3020-9977-4A10-9CDA-3A71E83F63F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C10722-4CC7-4C06-8DBC-4D96307DB41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC251D-9313-4A54-9623-51DC0AEC46FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEDE937-C3D7-421C-9F70-F546AB823E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55891",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35683",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51756",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1973",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Virtual Private Database component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to VPD policies."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Virtual Private Database en Oracle Database v10.1.0.5, v10.2.0.4, y v11.1.0.7 permite a los usuario remotos autenticados afectar la confidencialidad y integridad en relación a las políticas VPD."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC251D-9313-4A54-9623-51DC0AEC46FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEDE937-C3D7-421C-9F70-F546AB823E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55890",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35687",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51757",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1974",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Servlet Container Package."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en WebLogic Server component en BEA Product Suite v10.3, v10.0 MP1, v9.2 MP3, v9.1, v9.0, v8.1 SP6, y v7.0 SP7 permite a atacantes remotos afectar a la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos relacionados con Servlet Container Package."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "6859E096-4FA7-4797-B2D6-C5CE15D2078C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "0B8AB045-051A-477E-B2F7-4057826C43F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09215858-8A4F-4595-98DD-39027EC6CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A7390B6A-7944-4509-B499-5B51DB9BF42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*",
            "matchCriteriaId" : "193516AD-8096-4A6E-9C4B-4B9717DD7021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55906",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35674",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022561",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51758",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1975",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality, integrity, and availability, related to the WLS Console Package."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en el componente WebLogic Server component en BEA Product Suite v10.3 permite a atacantes remotos afectar a la confidencialidad, la integridad y la disponibilidad, relacionada con WLS Console Package."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35673",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022561",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51759",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1976",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the HTTP Server component in Oracle Application Server 10.1.2.3 allows remote attackers to affect integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en el componente servidor HTTP en Oracle Application Server v10.1.2.3 permite a atacantes remotos afectar ala integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C617ED-3D8C-4B64-A56A-30BDE6E9B8D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55896",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35688",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022567",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51760",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1977",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle has not commented on claims from an independent researcher that this vulnerability allows attackers to bypass authentication via unknown vectors involving the username parameter and login.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Secure Backup en Oracle Secure Backup v10.2.0.3 permite a los atacantes remotos afectar a la confidencialidad, integridad y disponibilidad a través e vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:secure_backup:10.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42091C54-567D-4626-98EA-41B568965B23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55903",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35672",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022565",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-058/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51761",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-058/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1978",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle has not commented on claims from an independent researcher that this vulnerability allows remote authenticated users to execute arbitrary code with SYSTEM privileges via vectors involving property_box.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Secure Backup en Oracle Secure Backup 10.2.0.3 permite a atacantes remotos afectar la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos. NOTA: la información anterior se obtuvo de la CPU de Oracle de Julio de 2009. Oracle no ha comentado sobre las alegaciones de un investigador independiente que esta vulnerabilidad permite a usuarios remotos autenticados ejecutar código arbitrario con privilegios de SYSTEM a través de vectores que implican a property_box.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:secure_backup:10.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42091C54-567D-4626-98EA-41B568965B23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55904",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35678",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022565",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-059/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51762",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-059/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1980",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Application Object Library en Oracle E-Business Suite v11.5.10.2, v12.0.6, y v12.1 permite a lo usuario remotos autenticados afectar a la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6678372-9E85-49A8-BAEC-8B9E82DA4D1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55898",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35686",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022562",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51763",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1981",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Highly Interactive Client component in Siebel Product Suite 7.5.3, 7.7.2, 7.8.2, 8.0.0.5, and 8.1.0 allows local users to affect confidentiality and integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en el componente Highly Interactive Client en Siebel Product Suite v7.5.3, v7.7.2, v7.8.2, v8.0.0.5, y v8.1.0 permite a usuarios locales afectar a la confidencialidad y la integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 3.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 2.7,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_enterprise_suite:7.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73DB85A-44E3-4C2D-8159-B452DAAB3833"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_enterprise_suite:7.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AEE5A7E-4FA2-411A-B2BE-43FEDA96E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_enterprise_suite:7.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB2043C-79B2-42EA-8664-757BCC637DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_enterprise_suite:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54ED5AFA-964A-4E56-B778-56B1372C1647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_enterprise_suite:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE84459-D89A-4963-AAB0-61E91AD1681B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55908",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35698",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022564",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51764",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1982",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2 and 12.0.6 allows remote attackers to affect integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en el componente Oracle Applications Framework en Oracle E-Business Suite v11.5.10.2 y v12.0.6 permite a atacantes remotos afectar a la integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35693",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022562",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51765",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1983",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote attackers to affect integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en el componente Oracle iStore component en Oracle E-Business Suite v11.5.10.2, v12.0.6, y v12.1 permite a atacantes remotos afectar a la integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6678372-9E85-49A8-BAEC-8B9E82DA4D1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55901",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35697",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022562",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51766",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1984",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Application Install component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Patch Administrator."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en el componente Application Install component en Oracle E-Business Suite v11.5.10.2, v12.0.6, y v12.1 permite a usuarios locales afectar a la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos relacionados con el administrador de parches."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6678372-9E85-49A8-BAEC-8B9E82DA4D1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55899",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35690",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022562",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51767",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1986",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecifica en Oracle Applications Manager component en Oracle E-Business Suite v11.5.10.2 permite a atacantes remotos afectar a la confidencialidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55902",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35695",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022562",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51768",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1987",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools - Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.21 allows remote attackers to affect integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en PeopleSoft Enterprise PeopleTools - Enterprise Portal component en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne v8.49.21 permite a atacantes remotos afectar a la integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC7947C-BEFF-4E99-9986-963459D5B7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD19EEC-1187-4765-AAC7-EE083E2A277E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55909",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35691",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022566",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51769",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1988",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 19, and 9.0 Bundle 9 allows remote authenticated users to affect confidentiality via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente PeopleSoft Enterprise HRMS eProfile Manager en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 19 y 9.0 Bundle 9 permite a usuarios autenticados remotos afectar a la confidencialidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.8:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B431E05A-B8C1-40C6-96D7-62E540FA4776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.9:bundle19:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C73ED2-4404-459D-A731-3D36F2999371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:9.0:bundle9:*:*:*:*:*:*",
            "matchCriteriaId" : "D4658ADF-EA83-41F0-99C0-08EAE3E64702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.8:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB1FADD-188C-498F-B789-39EAE57DB92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.9:bundle19:*:*:*:*:*:*",
            "matchCriteriaId" : "4FC707DE-D053-48B0-A8BA-01651384F2B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:9.0:bundle9:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B21990-7957-4582-A91A-73AF9856B829"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55910",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35696",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022566",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51770",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1989",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-07-14T23:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente PeopleSoft Enterprise FMS en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33 y 9.0 Bundle 24 permite a usuarios autenticados remotos afectar a la confidencialidad e integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.8:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B431E05A-B8C1-40C6-96D7-62E540FA4776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.9:bundle14:*:*:*:*:*:*",
            "matchCriteriaId" : "42F9F31D-3074-4418-9566-5DB6C4367EF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7FAE18-AEFE-4BD6-ABAC-03EF9C61CCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.8:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB1FADD-188C-498F-B789-39EAE57DB92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.9:bundle14:*:*:*:*:*:*",
            "matchCriteriaId" : "04347985-3F19-4D42-9390-06DE1B3E6992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0B4851-1897-414C-B7D2-4C158D648629"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55911",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35694",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022566",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51771",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/55911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0231",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-07-15T15:30:01.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers an integer truncation and a heap-based buffer overflow, aka \"Embedded OpenType Font Heap Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El Motor de Fuente de Embedded OpenType (EOT) (T2EMBED. DLL) en Microsoft Windows versiones 2000 SP4, XP SP2 y SP3, Server 2003 SP2, vista Gold, SP1 y SP2, y Server 2008 Gold y SP2, permiten a los atacantes remotos ejecutar código arbitrario por medio de una tabla de nombres creada en un registro de datos que desencadena un truncamiento de enteros y un desbordamiento del búfer en la región heap de la memoria, también se conoce como \"Embedded OpenType Font Heap Overflow Vulnerability\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-681"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32623D48-7000-4C7D-823F-7D2A9841D88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAEEA81-5037-4B68-98D9-83AAEBC98E20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:professional:*:x64:*",
            "matchCriteriaId" : "C9FE4961-58EE-4DB2-B712-790CC2FA7996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=811",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/55842",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022543",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1887",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-029",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5457",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/55842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0232",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-07-15T15:30:01.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table, aka \"Embedded OpenType Font Integer Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Embedded OpenType (EOT) Font Engine en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 Gold y SP2, permite a atacantes remotos ejecutar código de su elección a través de un nombre de tabla manipulado, también conocido como \"Vulnerabilidad Embedded OpenType Font Integer Overflow\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*",
            "matchCriteriaId" : "B8A32637-65EC-42C4-A892-0E599562527C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id?1022543",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1887",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-029",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5678",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0566",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-07-15T15:30:01.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to execute arbitrary code via a crafted file in a legacy format that triggers memory corruption, aka \"Pointer Dereference Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Office Publisher 2007 SP1 no calcula adecuadamente los datos de manejo del objeto (object handler data) para los archivos de Publisher, lo que permite a atacantes remotos ejecutar código de su elección a través de un archivo manipulado en un formato heredado que provoca una corrupción de memoria. También concido como \"Vulnerabilidad de Deferencia de Puntero\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_publisher:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0A55D8BE-20CA-4FA2-8F66-574029E3E004"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55838",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35599",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022546",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1888",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-030",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6285",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/55838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1135",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-07-15T15:30:01.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the ISA Server, aka \"Radius OTP Bypass Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Security y Acceleration (ISA) Server 2006 Gold y SP1, cuando Radius OTP está activado, usa el método de autenticación HTTP-Basic, lo que permite a atacantes remotos obtener privilegios de una cuenta de su elección y acceso a la publicación de páginas, a través de vectores que involucran intentos de acceso sobre un recurso de red tras un servidor ISA. También conocido como \"Vulnerabilidad Radius OTP Bypass\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9552EF3-4A85-4F2A-927B-B485BBDB5BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2006:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B6CDFF-1DA8-43A1-8363-77F4365852D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2006:supportability:*:*:*:*:*:*",
            "matchCriteriaId" : "82E6155D-37B4-477D-980E-E1ECEC2E6CAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35784",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022547",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1889",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-031",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5649",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/35784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1136",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-07-15T15:30:01.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 Gold and SP1, and Office Small Business Accounting 2006, when used in Internet Explorer, allows remote attackers to execute arbitrary code via a crafted call to the msDataSourceObject method, as exploited in the wild in July and August 2009, aka \"Office Web Components HTML Script Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El control ActiveX de Microsoft Office Web Components Spreadsheet (también se conoce como OWC10 u OWC11), distribuido en Office XP SP3 y Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 para 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 y 2006 versión Gold y SP1, y Office Small Business Accounting 2006, de Microsoft, cuando se utiliza en Internet Explorer, permite a los atacantes remotos ejecutar código arbitrario por medio de una llamada diseñada al método msDataSourceObject, tal y como se explotó “in the wild” en julio y agosto de 2009, también se conoce como \"Office Web Components HTML Script Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2004:sp3:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "12FAB1BC-F8FB-4A14-8E38-703CF8E67B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2004:sp3:standard:*:*:*:*:*",
            "matchCriteriaId" : "BB4F1038-F652-4A76-874F-3FFAAF30AB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9552EF3-4A85-4F2A-927B-B485BBDB5BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2006:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B6CDFF-1DA8-43A1-8363-77F4365852D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2006:supportability:*:*:*:*:*:*",
            "matchCriteriaId" : "82E6155D-37B4-477D-980E-E1ECEC2E6CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:*:small_business_accounting_2006:*:*:*:*:*",
            "matchCriteriaId" : "421365B8-2B52-42FC-B6DC-F577FAFADA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_components:2003:sp1:2007_microsoft_office:*:*:*:*:*",
            "matchCriteriaId" : "7B654504-9098-4F7F-8CE7-696CF15BCA38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_components:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9C5BA7-0ECB-4101-9DAD-ECAA42C9E0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_components:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B07BEA1E-F032-4E63-8548-C98DD6E05AAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_xp:sp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8158B4-CF89-4545-9EBF-6AB868D63648"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/msrc/archive/2009/07/13/microsoft-security-advisory-973472-released.aspx",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/07/13/more-information-about-the-office-web-components-activex-vulnerability.aspx",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=6778",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://trac.metasploit.com/browser/framework3/trunk/modules/exploits/windows/browser/owc_spreadsheet_msdso.rb",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/973472.mspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://xeye.us/blog/2009/07/one-0day/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5809",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2009/07/13/microsoft-security-advisory-973472-released.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/07/13/more-information-about-the-office-web-components-activex-vulnerability.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=6778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trac.metasploit.com/browser/framework3/trunk/modules/exploits/windows/browser/owc_spreadsheet_msdso.rb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/973472.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://xeye.us/blog/2009/07/one-0day/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1538",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-07-15T15:30:01.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointers without properly validating unspecified data values, which allows remote attackers to execute arbitrary code via a crafted QuickTime media file, aka \"DirectX Pointer Validation Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "EL QuickTime Movie Parser Filter en quartz.dll en DirectShow en Microsoft DirectX v7.0 a la v9.0c sobre Windows 2000 SP4, Windows XP SP2 y SP3, y Windows Server 2003 SP2, realiza actualizaciones a punteros sin validar adecuadamente los valores de datos no especificados, lo que permite a atacantes remotos ejecutar código de su elección a través de un archivo \"Quicktime media\" manipulado, también conocido como \"Vulnerabilidad de validación de Puntero en DirectX\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BFE77B9-6C2A-45D3-A4B5-2679CC4B0DA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF0278F-AFA7-48BA-8762-5569EC174AEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2936E9C2-65E6-4D26-A277-FF2AE13A3FEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55844",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35600",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1886",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5963",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/55844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1539",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-07-15T15:30:01.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate unspecified size fields in QuickTime media files, which allows remote attackers to execute arbitrary code via a crafted file, aka \"DirectX Size Validation Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "EL QuickTime Movie Parser Filter en quartz.dll en DirectShow en Microsoft DirectX v7.0 a la v9.0c sobre Windows 2000 SP4, Windows XP SP2 y SP3, y Windows Server 2003 SP2, no valida adecuadamente el tamaño sin especificar de los campos en los archivos \"Quicktime media\", lo que permite a atacantes remotos ejecutar código de su elección a través de un archivo manipulado, también conocido como \"Vulnerabilidad de validación de tamaño en DirectX\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BFE77B9-6C2A-45D3-A4B5-2679CC4B0DA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF0278F-AFA7-48BA-8762-5569EC174AEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2936E9C2-65E6-4D26-A277-FF2AE13A3FEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55845",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1886",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6341",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/55845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1542",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-07-15T15:30:01.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges within the guest OS via a crafted application, aka \"Virtual PC and Virtual Server Privileged Instruction Decoding Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El Virtual Machine Monitor (VMM)  en Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, no impone los requisitos de la CPU (privilege-level) para todas las instrucciones de la maquina, lo que permite a usuarios del sistema invitado (guest) ejecutar código de su elección en modo kernel (kernel -mode) y obtener privilegios dentro del sistema invitado a través de aplicaciones manipuladas. También conocido como \"Vulnerabilidad de decodificación de instrucciones privilegiadas en Virtual PC y Virtual Server\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:virtual_pc:2004:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B85AEB7-0AB3-4AFA-B589-74DF583225C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:virtual_pc:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E550D9F-C197-4EA1-A018-73C0E8B03E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:virtual_pc:2007:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "F61DD9A1-A925-4FA3-BD6A-708F039F7F9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:virtual_pc:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "98616FA1-76B2-40C1-806E-71A4D76CB5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:virtual_server:2005:r2_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5705C94-8B44-48D7-873B-1909FE2D020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:virtual_server:2005:r2_sp1:x64:*:*:*:*:*",
            "matchCriteriaId" : "35C436EF-6A98-47F7-BA5E-2E4B8497045F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35808",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022544",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1890",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-033",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6166",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/35808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-15T15:30:01.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a document containing P and FONT elements."
      }, {
        "lang" : "es",
        "value" : "El archivo js/src/jstracer.cpp en el compilador JavaScript Just-in-Time (JIT) (también se conoce como TraceMonkey) en Firefox de Mozilla versiones 3.5 anteriores a 3.5.1, permite a los atacantes remotos ejecutar código arbitrario por medio de cierto uso de la función escape que desencadena el acceso a ubicaciones de memoria no inicializadas, como es demostrado originalmente por un documento que contiene elementos P y FONT."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.mozilla.com/security/2009/07/14/critical-javascript-vulnerability-in-firefox-35/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=6796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35798",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://voices.washingtonpost.com/securityfix/2009/07/stopgap_fix_for_critical_firef.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.h-online.com/security/First-Zero-Day-Exploit-for-Firefox-3-5--/news/113761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/443060",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-41.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35660",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1868",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=503286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/40936/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.mozilla.com/security/2009/07/14/critical-javascript-vulnerability-in-firefox-35/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=6796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://voices.washingtonpost.com/securityfix/2009/07/stopgap_fix_for_critical_firef.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.h-online.com/security/First-Zero-Day-Exploit-for-Firefox-3-5--/news/113761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/443060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-41.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=503286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/40936/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1895",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-16T15:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to (1) conduct NULL pointer dereference attacks, (2) bypass the mmap_min_addr protection mechanism, or (3) defeat address space layout randomization (ASLR)."
      }, {
        "lang" : "es",
        "value" : "El subsistema de personalidad en el Linux kernel anterior a v2.6.31-rc3 tiene establecido que PER_CLEAR_ON_SETID no borre las banderas ADDR_COMPAT_LAYOUT y MMAP_PAGE_ZERO cuando ejecuta un programa setuid o setgid, lo que facilita a usuarios locales aprovechar los detalles del uso actual de memoria para (1) llevar a cabo ataques de deferencia a punteros NULOS, (2) evitar el mecanismo de protección mmap_min_addr o (3) rechazar  aleatoriamente el espacio en la capa  de direcciones (ASLR)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.31",
            "matchCriteriaId" : "EA80C8C8-30E5-4DC6-B3CC-2BA506FBEC8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4049867A-E3B2-4DC1-8966-0477E6A5D582"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.cr0.org/2009/06/bypassing-linux-null-pointer.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f9fabcb58a6d26d6efde842d1703ac7cfa9427b6",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://patchwork.kernel.org/patch/32598/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35801",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36045",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36054",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36116",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36131",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36759",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0111",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1845",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55807",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1193.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1438.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505254/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/512019/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35647",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-807-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1866",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/bugs/cve/2009-1895",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11768",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7826",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9453",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1550.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00166.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00223.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blog.cr0.org/2009/06/bypassing-linux-null-pointer.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f9fabcb58a6d26d6efde842d1703ac7cfa9427b6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://patchwork.kernel.org/patch/32598/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1193.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1438.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505254/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/512019/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-807-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/bugs/cve/2009-1895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1550.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00166.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00223.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2047",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-07-16T15:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to read, modify, or delete arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el interfaz de administración en Cisco Customer Response Solutions (CRS) anteriores a v7.0(1) SR2 en el servidor Cisco Unified Contact Center Express (también conocido como CCX) permite a los usuarios remotos autenticados leer, modificar y borrar ficheros arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:crs:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6F8BA2-EA5E-4E90-8390-2D29E8FAB4AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:crs:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E010B8C0-06BF-42C9-8AE6-8A0A6696EC9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:crs:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98203DF7-2B21-4D7F-B32C-E9E6C24E1A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:crs:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "629B1A0E-A13F-4209-B070-960392893299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:crs:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E6B9D0-5F88-4F48-A313-D478FB9919FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:crs:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F979F18-29A6-433C-91A4-0042EC275CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:crs:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6008EC-FB15-43B3-8B09-3BFB28536EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:customer_response_applications:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DC9FD7-0716-456C-895F-74BC7866C520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ip_qm:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC0CC96-C3DD-4564-8323-3EAB9ACBFF45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD62E8B9-9715-4217-864F-C54F1DEE835F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:4.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F36940-BF16-4C7C-A24C-D923AF333709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:4.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BE86CE-EF95-4841-B145-DFA4D0E0EF4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:4.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "369C0FF7-BC46-400E-AC61-F97BAFDE14FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:4.0\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6883E046-DA9D-4402-A22B-31140D6C8054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:4.0\\(5a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3C91A3-E343-4FAC-85D7-649C7ECE6E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:4.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E21F75-530E-4399-B8EC-1E933711D6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:4.5\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6273D50B-8D2B-4F5A-B4F3-2CC86F5B730F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:5.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F5DF8-E9A7-4812-8677-BDCE4679ED9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:6.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAF3470-5AF5-4B26-AA92-A92E908A52E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:7.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8CDC6A2-319F-4C83-8042-BEF6C9FD1C2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_contact_center_express:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA09955E-62F4-4098-8FFF-C61D33EB8AB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_contact_center_express:5.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA8057F-7E31-4F9D-992E-621DCD7C4089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_contact_center_express:6.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1568EE5B-716D-439B-9017-8498C9353B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_contact_center_express:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCFA9981-ED56-4D5B-AF82-1BCC551FE02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71082BE9-AF48-460A-9127-4D5D6DBA02F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDFDB400-1557-4A6D-A40F-00271A666A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E744A286-EA75-4E20-8503-12217FE0F03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B5083B-0782-4668-B88A-A6DB65A4AFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3782F66-76E2-4912-AA16-CB552A8C4ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A26B5F10-147A-4C32-BE98-F24407E4973F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E4FAEE-BE07-45D8-A7F4-92668CA9BF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CA4024-4F80-466A-9383-9A68E2FAC995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:7.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C79246-3D29-4A8E-94DD-8771964B7E4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55936",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/35861",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080ae04b2.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35706",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022569",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1913",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51731",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/55936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080ae04b2.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2048",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-07-16T15:30:00.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en el interfaz de administración en Cisco Customer Response Solutions (CRS) anteriores a v7.0(1) SR2 en el servidor Cisco Unified Contact Center Express (también conocido como CCX) permite a los usuarios remotos autenticado inyectar arbitrariamente una secuencia de comandos web o HTML en la base de datos CCX a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:crs:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6F8BA2-EA5E-4E90-8390-2D29E8FAB4AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:crs:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E010B8C0-06BF-42C9-8AE6-8A0A6696EC9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:crs:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98203DF7-2B21-4D7F-B32C-E9E6C24E1A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:crs:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "629B1A0E-A13F-4209-B070-960392893299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:crs:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E6B9D0-5F88-4F48-A313-D478FB9919FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:crs:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F979F18-29A6-433C-91A4-0042EC275CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:crs:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6008EC-FB15-43B3-8B09-3BFB28536EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:customer_response_applications:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DC9FD7-0716-456C-895F-74BC7866C520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ip_qm:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC0CC96-C3DD-4564-8323-3EAB9ACBFF45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD62E8B9-9715-4217-864F-C54F1DEE835F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:4.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F36940-BF16-4C7C-A24C-D923AF333709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:4.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BE86CE-EF95-4841-B145-DFA4D0E0EF4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:4.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "369C0FF7-BC46-400E-AC61-F97BAFDE14FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:4.0\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6883E046-DA9D-4402-A22B-31140D6C8054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:4.0\\(5a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3C91A3-E343-4FAC-85D7-649C7ECE6E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:4.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E21F75-530E-4399-B8EC-1E933711D6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:4.5\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6273D50B-8D2B-4F5A-B4F3-2CC86F5B730F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:5.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F5DF8-E9A7-4812-8677-BDCE4679ED9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:6.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAF3470-5AF5-4B26-AA92-A92E908A52E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ccx:7.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8CDC6A2-319F-4C83-8042-BEF6C9FD1C2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_contact_center_express:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA09955E-62F4-4098-8FFF-C61D33EB8AB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_contact_center_express:5.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA8057F-7E31-4F9D-992E-621DCD7C4089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_contact_center_express:6.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1568EE5B-716D-439B-9017-8498C9353B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_contact_center_express:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCFA9981-ED56-4D5B-AF82-1BCC551FE02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71082BE9-AF48-460A-9127-4D5D6DBA02F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDFDB400-1557-4A6D-A40F-00271A666A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E744A286-EA75-4E20-8503-12217FE0F03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B5083B-0782-4668-B88A-A6DB65A4AFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3782F66-76E2-4912-AA16-CB552A8C4ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A26B5F10-147A-4C32-BE98-F24407E4973F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E4FAEE-BE07-45D8-A7F4-92668CA9BF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CA4024-4F80-466A-9383-9A68E2FAC995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_ip_ivr:7.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C79246-3D29-4A8E-94DD-8771964B7E4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55937",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/35861",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080ae04b2.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35705",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022569",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1913",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51730",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/55937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080ae04b2.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-16T15:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors, related to a \"flash bug.\""
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox v3.5 permite a los atacantes remotos causar una denegación de servicio (puntero NULO desreferenciado y caída de la aplicación) a través de vectores no especificado, en relación a un \"flash bug.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=502648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=503286",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=502648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=503286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-16T15:30:00.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service (uncaught exception and application crash) via a long Unicode string argument to the write method. NOTE: this was originally reported as a stack-based buffer overflow. NOTE: on Linux and Mac OS X, a crash resulting from this long string reportedly occurs in an operating-system library, not in Firefox."
      }, {
        "lang" : "es",
        "value" : "Firefox de Mozilla versiones 3.0.x, 3.5 y 3.5.1 en Windows, permite a los atacantes remotos causar una denegación de servicio (excepción no detectada y bloqueo de aplicación) por medio de un argumento de cadena Unicode largo en el método write. NOTA: esto se reportó originalmente como un desbordamiento de búfer en la región stack de la memoria. NOTA: en Linux y Mac OS X, un bloqueo resultante de esta cadena larga se produce en una biblioteca de sistema operativo, no en Firefox."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D595F649-ECBE-45E0-8AAD-BCBC65A654B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE6E920-9A4C-431B-89EA-683A22F15ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B6CC9F-6295-4598-B28B-0CA19D1D9F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F0434D-C84F-49FD-9F44-66D3ACD7B601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AAB416-E865-4EEE-8FCB-A91253BEB52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.mozilla.com/security/2009/07/19/milw0rm-9158-stack-overflow-crash-not-exploitable-cve-2009-2479/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3338/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505092/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35707",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=504342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=504343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.mozilla.com/security/2009/07/19/milw0rm-9158-stack-overflow-crash-not-exploitable-cve-2009-2479/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://websecurity.com.ua/3338/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505092/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=504342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=504343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Reference links provided indicate Denial of Service impact only."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-16T16:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type 4.24, and 4.25 when global templates are not initialized, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en mt-wizard.cgi en Six Apart Movable Type v4.24, y v4.25, cuando plantillas globales no son inicializadas, permite atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movabletype:six_apart_movable_type:4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71C9A135-97D9-4296-8BAC-D390BA570B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movabletype:six_apart_movable_type:4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDAEDD9-D4E6-414E-B975-44DE6E54FAF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN97248625/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35534",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.movabletype.org/documentation/appendices/release-notes/426.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1668",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN97248625/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.movabletype.org/documentation/appendices/release-notes/426.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-16T16:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El archivo mt-wizard.cgi en Movable Type de Six Apart  anterior a versión 4.261, cuando las plantillas globales no se inicializan, permite a los atacantes remotos omitir las restricciones de acceso y (1) enviar correo electrónico a direcciones arbitrarias o (2) obtener información confidencial por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:1.54:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "56106A34-006E-4B73-B6C6-3F36E9C2A355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1731B0E-71C0-4650-BFBF-1FB3865EAE76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:2.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C057E938-243B-4BEE-BF38-F3334A2B9275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE37614D-A959-4B4A-BF2E-9F3C1072BA20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1542C3-E6CD-4CF6-9F1D-E8E58F2A11E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F63E3A-019C-431C-A155-1CD6E42FA485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13132B94-C271-46F7-9450-FBA1FCBB914E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B584BED2-F630-4A5B-8FE9-29BBE9517214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.36:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "14FCDA0F-2562-4B58-BF3A-F908AFABC557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C55BC3C3-83AB-452C-AC2D-A53B3E0C3473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:4.20:*:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "C4EFB50C-CC9C-46EC-92C3-A581684354E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:4.20:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "E7FEAC67-FA0C-49AE-9AEB-B1E68FB54C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:4.20:*:open_source:*:*:*:*:*",
            "matchCriteriaId" : "321A94B3-CDAC-4793-9660-CDCDC614EBAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDDB2948-C902-43FC-9D2E-7EA3775F5A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.26",
            "matchCriteriaId" : "230918F1-5CCE-4A03-ABFD-5EF0BC59DF32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:1.00:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "B1A33E50-6BFD-418F-9F3E-B42C013AA0F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:1.1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "DC0F1B54-554E-45C7-8943-A73086C88385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:1.2:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "A56CDA00-DC8E-4042-A882-FB6D7D2F43B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:1.3:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "1C8F4F3A-9942-4263-BC42-CDCDACDFF2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:1.4:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "38626110-81A0-4C99-AB8F-D77FDF662887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:1.5:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "5212ADBE-9F50-4EAB-AC28-91314AA24595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:1.31:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "3542C36E-E457-46DD-A5F7-BD22E16F1C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.0d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461319CC-BCDC-4E24-B384-1EEC8B7C4596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967DAF27-D561-4FDB-A65C-788551871E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.01d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD460D1D-5971-491E-863A-D230A0B28ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC178AF-FAF7-49E2-8AE7-1858BD67F44B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CEA1C54-4636-44B1-B620-85F0D870797E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1819A7A1-366A-4168-AE0E-4CE1FF0D3E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F743E8-72E9-4AEB-B137-A61EB67B8FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE92182C-5BBE-4FCD-959B-E95630D16E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E9BE91-D42E-4523-A48E-E7B4FBE7A924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C5935CA-FDE2-4300-8091-DBD0DC4D2081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF080128-CC7C-4F71-9268-B7691D54F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4783C1BD-B2BA-4D86-A61D-3EB2396DE1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50782308-93FA-4F8F-93FB-4A4E55D95360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5C968A9-F07A-4C99-B4A5-434E96DDB928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9CD9174-EE47-40B8-8F49-81EAD89267D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.0:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "B4FEB07E-4D70-4A24-822E-E4689CB8C9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.0:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "59457028-2EA4-472F-A76F-EF867F48937F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.01:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "ABE24C88-6062-4A36-9852-D9EC818EEA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.1:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "11C793FA-AE7C-430F-B537-19B788D9BC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.1:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "F80A607A-66A8-4995-A396-5487B8E3029C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.01:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "C3C21088-A9A5-4CE2-B4D7-8BC48DB84540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.01:b:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "C1DCAD70-9FFF-4950-875D-586937E93473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.01:b:pro:*:*:*:*:*",
            "matchCriteriaId" : "395B9CE4-EA3A-42A1-AD37-6487911E10D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56195FCE-D933-40C6-A6A3-6AC8CFECA5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.2:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "448081A9-A8C9-4FEC-879B-7FA11997B4D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.2:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "E7538776-B7B2-4912-BFE3-E7A1033F41E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.12:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "F33F4F69-D670-4698-84C6-EDD9D78F2D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.12:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "1E481C6C-F6EF-4E7D-8DAF-F68407DE6501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD39A71-0B61-4319-BEE1-12CAD4B095A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.21:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "23B5D056-BC56-4851-8E76-7E22C911EEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.21:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "CA9BC769-BE45-42EC-8E35-02E6B216D6E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B49D8B0-39C9-480B-9471-1846CE5A2142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.23:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "9A1B400B-FEC9-416B-89F2-C96B1BE11BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.23:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "1458F0E9-6AF1-44C6-B0EC-7BCF314B0038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A200E33-641A-41B3-8EB3-E7380B686C8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN08369659/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000043.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35534",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35471",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1668",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN08369659/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-16T16:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group."
      }, {
        "lang" : "es",
        "value" : "El módulo pam_unix en OpenPAM en NetBSD v4.0 anteriores a v4.0.2 y v5.0 anteriores a v5.0.1 permite a los usuarios locales cambiar la contraseña de administrador actual si ya se conoce, aún cuando no están en el grupo \"wheel \"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9875E709-11BA-4B8F-A2FC-26844DD4D563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:4.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB9E9F8-7C6B-4BC7-A593-A11B9D6F0B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F4B6E29-B74F-45FF-AEB1-A118753F8E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49AF042F-5047-4FA2-B20C-65B2C6EBEA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE00F7F-0A3A-4ECA-9FB6-1DE37C2ED5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00564BAA-066A-4627-B6A8-78724E55D363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "38C0F962-B1C5-4F4B-A7C2-AB8C3EDC996D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-004.txt.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35553",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-004.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-16T16:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libprop/prop_object.c in proplib in NetBSD 4.0 and 4.0.1 allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via a malformed externalized plist (XML form) containing an undefined element."
      }, {
        "lang" : "es",
        "value" : "libprop/prop_object.c en proplib en NetBSD v4.0 y v4.0.1 permite a los usuarios locales causar una denegación de servicio (puntero NULO desreferenciado y pánico del kernel) a través de un plist externalizada malformada (formulario XML) conteniendo un elemento no definido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9875E709-11BA-4B8F-A2FC-26844DD4D563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49AF042F-5047-4FA2-B20C-65B2C6EBEA5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-003.txt.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35556",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-003.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-16T16:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long smb URI in a playlist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función Win32AddConnection en modules/access/smb.c en VideoLAN VLC media player v0.9.9, cuando se ejecuta en Microsoft Windows, permite a los atacantes remotos causar una denegación de servicio (caída de la aplicación) y posiblemente ejecutar código arbitrario a través de una smb URI larga en un archivo de lista de reproducción."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videolan:vlc_media_player:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CD809FD-E893-4921-83CE-D34008670F8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=e60a9038b13b5eb805a76755efc5c6d5e080180f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35558",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35500",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1714",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=e60a9038b13b5eb805a76755efc5c6d5e080180f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-16T16:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a .ht3 file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en HT-MP3Player v1.0 permite a los atacantes remotos ejecutar arbitrariamente código a través de una cadena larga de caracteres en un archivo .ht3 ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tingan:ht-mp3player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E620DB6-E3C5-4B4B-9C91-B04EA60986CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-16T16:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the SCTP implementation in Sun Solaris 10, and OpenSolaris before snv_120, allows remote attackers to cause a denial of service (panic) via unspecified packets."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la implementación SCTP en Sun Solaris 10, y OpenSolaris anteriores a snv_120, permite a los atacantes remotos causar una denegación de servicio (pánico) a través de paquetes no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B3BBCE23-9F15-45CD-859F-77ED540B51F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "053A0DA6-483C-49BB-BC7A-E624DB2C269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "447212A4-FACD-475E-A62B-60FE6504F63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB694DC0-407A-4555-8B72-DAF3C169DCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "535FF689-13A2-40C6-8706-7782038FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "843246D3-C2DA-454D-916A-AC8905E5134E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "244B7FE4-C485-4993-9810-3433C83A120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BE586AB9-9D46-4BC2-8092-51482F297410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "78B80C92-7EB5-4343-B830-32E8C011E572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "46E4ED9C-F013-48D2-8642-E5BA7599A512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A1E8108D-3CE7-4041-9027-1CA7473389EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E8585133-1F25-494A-8859-87B1D93305A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253608-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253608-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-16T16:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in the frpr_icmp function in the ipfilter (aka IP Filter) subsystem in Sun Solaris 10, and OpenSolaris snv_45 through snv_110, allows remote attackers to cause a denial of service (panic) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso después de la liberación en la función frpr_icmp en ipfilter (también conocido como IP Filter) subsistema en Sun Solaris 10, y OpenSolaris snv_45 hasta snv_110, permite a los atacantes remotos causar una denegación de servicio (pánico) a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141020-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-260951-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141020-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-260951-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-16T16:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv_102 through snv_119, allows local users to cause a denial of service (client panic) via vectors involving \"file operations.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el módulo NFSv4 en el kernel en Sun Solaris 10, y OpenSolaris snv_102 hasta snv_119, permite a los usuarios locales causar una denegación de servicio (pánico de cliente) a través de vectores \"archivo de operaciones.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B3BBCE23-9F15-45CD-859F-77ED540B51F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "053A0DA6-483C-49BB-BC7A-E624DB2C269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "447212A4-FACD-475E-A62B-60FE6504F63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB694DC0-407A-4555-8B72-DAF3C169DCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "78B80C92-7EB5-4343-B830-32E8C011E572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "535FF689-13A2-40C6-8706-7782038FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "46E4ED9C-F013-48D2-8642-E5BA7599A512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "843246D3-C2DA-454D-916A-AC8905E5134E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A1E8108D-3CE7-4041-9027-1CA7473389EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "244B7FE4-C485-4993-9810-3433C83A120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BE586AB9-9D46-4BC2-8092-51482F297410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E8585133-1F25-494A-8859-87B1D93305A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141733-03-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-262788-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141733-03-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-262788-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-16T16:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the utdmsession program in Sun Ray Server Software (SRSS) 4.0 allows local users to access the sessions of arbitrary users via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el programa utdmsession en Sun Ray Server Software (SRSS) v4.0, permite a usuarios locales acceder a las sesiones de usuarios de su elección a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:ray_server_software:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D694C584-5A13-4064-B1AA-4C3C02F372FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:ray_server_software:4.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "2621BD59-0ED4-402E-98EB-0F643078F4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:ray_server_software:4.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CAE615D0-41D5-46DD-86D4-B226068C58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:ray_server_software:4.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B17D330-9E56-478F-A2C2-D4524B04CC5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-06-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-252226-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-06-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-252226-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-16T16:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to cause a denial of service (audio outage) or possibly gain privileges via unknown vectors related to \"resource leaks.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el demonio utaudiod en Sun Ray Server Software (SRSS) v4.0, cuando Solaris Trusted Extensions está activado, permite a usuarios locales provocar una denegación de servicio (parada de audio) o posiblemente, elevar sus privilegios a través de vectores desconocidos relacionados con \"fugas de recursos\" (resources leaks)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:ray_server_software:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D694C584-5A13-4064-B1AA-4C3C02F372FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:ray_server_software:4.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CAE615D0-41D5-46DD-86D4-B226068C58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:ray_server_software:4.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B17D330-9E56-478F-A2C2-D4524B04CC5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-06-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253889-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-06-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253889-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-16T16:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the sessions of arbitrary users via unknown vectors related to \"resource leaks.\""
      }, {
        "lang" : "es",
        "value" : "El  demonio utaudiod en Sun Ray Server Software (SRSS) v4.0, cuando Solaris Trusted Extensions está activado, permite a usuarios locales acceder a sesiones de usuarios de su elección a través de vectores desconocidos relacionados con \"fugas de recursos\" (resources leaks)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:ray_server_software:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D694C584-5A13-4064-B1AA-4C3C02F372FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:ray_server_software:4.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CAE615D0-41D5-46DD-86D4-B226068C58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:ray_server_software:4.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B17D330-9E56-478F-A2C2-D4524B04CC5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-06-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253889-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-06-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-253889-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1892",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-17T16:30:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dhcpd in ISC DHCP 3.0.4 and 3.1.1, when the dhcp-client-identifier and hardware ethernet configuration settings are both used, allows remote attackers to cause a denial of service (daemon crash) via unspecified requests."
      }, {
        "lang" : "es",
        "value" : "dhcpd en ISC DHCP v3.0.4 y v3.1.1, cuando se utilizan de forma simultánea el identificador de cliente dhcp y la configuración de hardware ethernet, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de una petición no especificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1269D9FF-C497-4FA5-90DA-302A9FC1EB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.0.4_b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34BCCA79-76A8-494A-94CA-BB8FA11891DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.0.4_b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5442D329-81D5-4891-A063-FC6A07D7E1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.0.4_b3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F64C1F-92E7-4190-9472-046F34C28539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D732C6-F89B-4FCA-A949-3F67B4E7A7F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35830",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35851",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36457",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37342",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1833",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:154",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35669",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51717",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01177.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00340.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00340.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  Red Hat Enterprise Linux 3, 4, and 5 provide earlier versions of ISC DHCP which are not vulnerable to this issue.",
        "lastModified" : "2009-07-20T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1893",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-17T16:30:00.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The configtest function in the Red Hat dhcpd init script for DHCP 3.0.1 in Red Hat Enterprise Linux (RHEL) 3 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file, related to the \"dhcpd -t\" command."
      }, {
        "lang" : "es",
        "value" : "La función configtest en la secuencia de comandos de inicio del DHCPD en Red Hat para DHCP 3.0.1 en Red Hat Enterprise Linux (RHEL) 3 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico sobre un fichero temporal no especificado, relativo al comando \"dhcpd -t\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D8DAE0-8E75-435C-9BD6-FAEED2ACB47C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:as:*:*:*:*:*",
            "matchCriteriaId" : "327FEE54-79EC-4B5E-B838-F3C61FCDF48E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:es:*:*:*:*:*",
            "matchCriteriaId" : "056C1C15-D110-4309-A9A6-41BD753FE4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:ws:*:*:*:*:*",
            "matchCriteriaId" : "08392974-5AC1-4B12-893F-3F733EF05F80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.0.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1E94449B-6FB0-4E4D-9D92-144A1C474761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.0.1:rc10:*:*:*:*:*:*",
            "matchCriteriaId" : "6824B249-D222-4F29-8C29-E92071F12621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.0.1:rc11:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7A3F32-C297-4331-9B8D-1CF8F3D32315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.0.1:rc12:*:*:*:*:*:*",
            "matchCriteriaId" : "B4959ABA-9F2E-4003-9566-DBE3177AE233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.0.1:rc13:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE2A3CA-EFB6-4547-BED8-CAC39156F10B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.0.1:rc14:*:*:*:*:*:*",
            "matchCriteriaId" : "5DE205EE-F708-4E4A-A861-EBF6D3C062F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.0.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8EBBF0-A61B-4FF0-B055-9BA2A21617A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.0.1:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "B3141202-993D-4E80-9EAD-ACA6C1343D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.0.1:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0768D1-37D3-4C17-A3A9-94EA237392AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.0.1:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F167B922-DD9E-4DD1-BB8F-B232711BACCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.0.1:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "4E23602E-FFA1-49E2-BF4C-BC5D074517B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcp:3.0.1:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA200FE-D261-4532-AC63-1208611AFE46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35831",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022554",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1154.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35670",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=510024",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51718",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11597",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6440",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=510024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1894",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-17T16:30:00.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting LD_BIND_NOW to 1, and then calling execv on the target of the /proc/self/exe symlink."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en PulseAudio v0.9.9, v0.9.10, y v0.9.14 permite a usuarios locales conseguir privilegios a través de vectores que implican la creación de \"hard links\", relativo a fijar la configuración de LD_BIND_NOW a 1, y entonces, llamar a execv con el objetivo /proc/self/exe symlink."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulseaudio:pulseaudio:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3F828E-51A2-4B02-8E74-449AAF5D1534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulseaudio:pulseaudio:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C7A5FDE-F1D3-4872-8FEA-422187E170F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pulseaudio:pulseaudio:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD34EC3-9E40-411C-9BF7-279B93EAE73D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.cr0.org/2009/07/old-school-local-root-vulnerability-in.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35868",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35886",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35896",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-13.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://taviso.decsystem.org/research.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.akitasecurity.nl/advisory.php?id=AK20090602",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1838",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:171",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505052/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35721",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-804-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://admin.fedoraproject.org/updates/pulseaudio-0.9.10-1.el5.2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=510071",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51804",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://blog.cr0.org/2009/07/old-school-local-root-vulnerability-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200907-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://taviso.decsystem.org/research.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.akitasecurity.nl/advisory.php?id=AK20090602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505052/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-804-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://admin.fedoraproject.org/updates/pulseaudio-0.9.10-1.el5.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=510071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-17T16:30:00.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Android 1.5 CRBxx allows local users to bypass the (1) Manifest.permission.CAMERA (aka android.permission.CAMERA) and (2) Manifest.permission.AUDIO_RECORD (aka android.permission.RECORD_AUDIO) configuration settings by installing and executing an application that does not make a permission request before using the camera or microphone."
      }, {
        "lang" : "es",
        "value" : "Android v1.5 CRBxx permite a a usuarios locales saltarse los valores de la configuración de (1) Manifest.permission.CAMERA (también conocido como android.permission.CAMERA) y (2) Manifest.permission.AUDIO_RECORD (tambien conocido como android.permission.RECORD_AUDIO) instalando y ejecutando una aplicación que no hace una petición de permiso para usar la cámara o el micrófono."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C354829-6BEB-4C67-972A-60367073753C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=4d8adefd35efdea849611b8b02d61f9517e47760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=7b7225c8fdbead25235c74811b30ff4ee690dc58",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://android.git.kernel.org/?p=platform/packages/apps/Camera.git%3Ba=commit%3Bh=e655d54160e5a56d4909f2459eeae9012e9f187f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/16/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505012/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=4d8adefd35efdea849611b8b02d61f9517e47760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=7b7225c8fdbead25235c74811b30ff4ee690dc58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://android.git.kernel.org/?p=platform/packages/apps/Camera.git%3Ba=commit%3Bh=e655d54160e5a56d4909f2459eeae9012e9f187f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/16/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505012/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-17T16:30:00.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en mt-wizard.cgi en Six Apart Movable Type anteriores a v4.261, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no específicos, es una vulnerabilidad distinta a CVE-2009-2480.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.25",
            "matchCriteriaId" : "0641196B-87D2-40D3-B826-C04549BB6B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:1.54:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "56106A34-006E-4B73-B6C6-3F36E9C2A355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1731B0E-71C0-4650-BFBF-1FB3865EAE76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:2.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C057E938-243B-4BEE-BF38-F3334A2B9275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE37614D-A959-4B4A-BF2E-9F3C1072BA20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1542C3-E6CD-4CF6-9F1D-E8E58F2A11E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F63E3A-019C-431C-A155-1CD6E42FA485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13132B94-C271-46F7-9450-FBA1FCBB914E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B584BED2-F630-4A5B-8FE9-29BBE9517214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.36:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "14FCDA0F-2562-4B58-BF3A-F908AFABC557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62FC8B9-3B6A-46C6-94CD-E35941BB64C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:4:*:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "414CB64F-4460-4819-A1B9-673550080C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:4:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "1841D3B7-8F8A-4FE2-B9C2-47FCFF5984AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:4:*:open_source:*:*:*:*:*",
            "matchCriteriaId" : "73406BA8-4FE0-44D0-90EF-0084881D706D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C55BC3C3-83AB-452C-AC2D-A53B3E0C3473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:4.20:*:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "C4EFB50C-CC9C-46EC-92C3-A581684354E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:4.20:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "E7FEAC67-FA0C-49AE-9AEB-B1E68FB54C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:4.20:*:open_source:*:*:*:*:*",
            "matchCriteriaId" : "321A94B3-CDAC-4793-9660-CDCDC614EBAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart_ltd:movable_type:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F52B477-8052-432E-A382-2181BF337321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart_ltd:movable_type:3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C580448-40D1-4C92-9301-861E4346DB65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:1.00:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "B1A33E50-6BFD-418F-9F3E-B42C013AA0F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:1.1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "DC0F1B54-554E-45C7-8943-A73086C88385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:1.2:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "A56CDA00-DC8E-4042-A882-FB6D7D2F43B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:1.3:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "1C8F4F3A-9942-4263-BC42-CDCDACDFF2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:1.4:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "38626110-81A0-4C99-AB8F-D77FDF662887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:1.5:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "5212ADBE-9F50-4EAB-AC28-91314AA24595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:1.31:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "3542C36E-E457-46DD-A5F7-BD22E16F1C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.0d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461319CC-BCDC-4E24-B384-1EEC8B7C4596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967DAF27-D561-4FDB-A65C-788551871E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.01d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD460D1D-5971-491E-863A-D230A0B28ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC178AF-FAF7-49E2-8AE7-1858BD67F44B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CEA1C54-4636-44B1-B620-85F0D870797E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1819A7A1-366A-4168-AE0E-4CE1FF0D3E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F743E8-72E9-4AEB-B137-A61EB67B8FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE92182C-5BBE-4FCD-959B-E95630D16E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E9BE91-D42E-4523-A48E-E7B4FBE7A924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C5935CA-FDE2-4300-8091-DBD0DC4D2081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF080128-CC7C-4F71-9268-B7691D54F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4783C1BD-B2BA-4D86-A61D-3EB2396DE1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50782308-93FA-4F8F-93FB-4A4E55D95360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5C968A9-F07A-4C99-B4A5-434E96DDB928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:3.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9CD9174-EE47-40B8-8F49-81EAD89267D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.0:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "B4FEB07E-4D70-4A24-822E-E4689CB8C9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.0:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "59457028-2EA4-472F-A76F-EF867F48937F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.01:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "ABE24C88-6062-4A36-9852-D9EC818EEA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.1:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "11C793FA-AE7C-430F-B537-19B788D9BC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.1:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "F80A607A-66A8-4995-A396-5487B8E3029C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.01:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "C3C21088-A9A5-4CE2-B4D7-8BC48DB84540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.01:b:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "C1DCAD70-9FFF-4950-875D-586937E93473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.01:b:pro:*:*:*:*:*",
            "matchCriteriaId" : "395B9CE4-EA3A-42A1-AD37-6487911E10D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56195FCE-D933-40C6-A6A3-6AC8CFECA5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.2:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "448081A9-A8C9-4FEC-879B-7FA11997B4D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.2:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "E7538776-B7B2-4912-BFE3-E7A1033F41E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.12:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "F33F4F69-D670-4698-84C6-EDD9D78F2D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.12:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "1E481C6C-F6EF-4E7D-8DAF-F68407DE6501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD39A71-0B61-4319-BEE1-12CAD4B095A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.21:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "23B5D056-BC56-4851-8E76-7E22C911EEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.21:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "CA9BC769-BE45-42EC-8E35-02E6B216D6E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.23:-:community_solution:*:*:*:*:*",
            "matchCriteriaId" : "9A1B400B-FEC9-416B-89F2-C96B1BE11BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixapart:movable_type:4.23:-:pro:*:*:*:*:*",
            "matchCriteriaId" : "1458F0E9-6AF1-44C6-B0EC-7BCF314B0038"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN86472161/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000042.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35534",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1668",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN86472161/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000042.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1897",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-20T17:30:54.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tun_chr_poll function in drivers/net/tun.c in the tun subsystem in the Linux kernel 2.6.30 and 2.6.30.1, when the -fno-delete-null-pointer-checks gcc option is omitted, allows local users to gain privileges via vectors involving a NULL pointer dereference and an mmap of /dev/net/tun, a different vulnerability than CVE-2009-1894."
      }, {
        "lang" : "es",
        "value" : "La función tun_chr_poll en drivers/net/tun.c en el subsistema tun del kernel de Linux v2.6.30 y v2.6.30.1, cuando se omite la opción -fno-delete-null-pointer-checks en gcc, permite a atacantes locales obtener privilegios a través de vectores que implican desreferenciacion de punteros NULL y un nmap de /dev/net/tun, es una vulnerabilidad diferente a CVE-2009-1894."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E55450-F6D9-483C-9CC8-E651E5A12AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "45273823-29EA-44DE-8444-3933402C5793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "88F60E74-09DB-4D4A-B922-4A46EED0EC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E242D3DE-D1DC-406A-BCC3-C4380B7EC369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc4:x86_32:*:*:*:*:*",
            "matchCriteriaId" : "06EFB3F7-2EAE-4A56-A9A1-E8C734E6B91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8598D6E5-0C5C-4A31-841A-C12801DB7D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "59800B0A-477B-42F8-A58A-5144F455AE01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc7-git6:*:*:*:*:*:*",
            "matchCriteriaId" : "F166BF6B-BFB0-4206-BD59-179701572F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0241.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0246.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://article.gmane.org/gmane.linux.network/124939",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3c8a9c63d5fd738c261bd0ceece04d9c8357ca13",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://grsecurity.net/~spender/cheddar_bay.tgz",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=6820",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/7/6/19",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35839",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/17/1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1925",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=512284",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51803",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/en/blog/security-flaws-caused-compiler-optimizations",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0241.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0246.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://article.gmane.org/gmane.linux.network/124939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3c8a9c63d5fd738c261bd0ceece04d9c8357ca13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://grsecurity.net/~spender/cheddar_bay.tgz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=6820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/7/6/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/17/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=512284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/en/blog/security-flaws-caused-compiler-optimizations",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-1897\n\nThe flaw only affects the Red Hat Enterprise Linux 5.4 beta kernel, which includes a backport of the upstream bug fix introducing this flaw (git commit 33dccbb0). This issue did not affect the final released Red Hat Enterprise Linux 5.4 kernel.  It is also possible to mitigate this flaw by ensuring that the permissions for /dev/net/tun is restricted to root only.\n\nThis issue does not affect any other released kernel in any Red Hat product.",
        "lastModified" : "2009-09-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T17:30:54.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rmserver in RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allows remote attackers to cause a denial of service (daemon exit) via multiple RTSP SET_PARAMETER requests with empty DataConvertBuffer headers."
      }, {
        "lang" : "es",
        "value" : "rmserver en RealNetworks Helix Server y Helix Mobile Server anteriores a v13.0.0 permite a atacantes remotos provocar una denegación de servicio (finaliza el demonio) mediante una petición RTSP SET_PARAMETER múltiple con las cabeceras \"DataConvertBuffer\" vacías."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.1",
            "matchCriteriaId" : "78A24161-758C-4F18-B3D7-9D7E652612EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_server:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0890EDD4-63FF-43EC-9EC4-852B34E00F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_server_mobile:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.0",
            "matchCriteriaId" : "564CD3CE-1094-4F7E-8598-1B4B35AF0AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_server_mobile:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F01F2C-036C-4B6E-B66D-F0870801D397"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.real.com/docs/security/SecurityUpdate071409HS.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/content/real-helix-dna",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505083/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.real.com/docs/security/SecurityUpdate071409HS.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/content/real-helix-dna",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505083/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T17:30:57.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allow remote attackers to cause a denial of service (daemon crash) via an RTSP SETUP request that (1) specifies the / URI or (2) lacks a / character in the URI."
      }, {
        "lang" : "es",
        "value" : "RealNetworks Helix Server y Helix Mobile Server anterior a v13.0.0 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) mediante una petición RTSP SETUP (1) especificando la URI / o (2) no poniendo los caracteres / en la URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.1",
            "matchCriteriaId" : "78A24161-758C-4F18-B3D7-9D7E652612EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_server:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30A2490-21FC-4C0D-80A3-B89E6F58E93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_server:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0890EDD4-63FF-43EC-9EC4-852B34E00F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_server_mobile:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0.0",
            "matchCriteriaId" : "564CD3CE-1094-4F7E-8598-1B4B35AF0AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_server_mobile:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F01F2C-036C-4B6E-B66D-F0870801D397"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.real.com/docs/security/SecurityUpdate071409HS.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/content/real-helix-dna",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505083/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.real.com/docs/security/SecurityUpdate071409HS.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/content/real-helix-dna",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505083/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T18:30:01.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird allow remote attackers to cause a denial of service (memory consumption and application crash) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anteriores a v2.0.0.19 y v3.x anteriores a v3.0.5, SeaMonkey y Thunderbird permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y colgado de la aplicación) mediante un valor entero grande en la propiedad \"length\" de un objeto \"Select\", siendo un asunto relacionado con CVE-2009-1692."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.18",
            "matchCriteriaId" : "FCE69A26-4F19-4D04-B125-86C49AA80E2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*",
            "matchCriteriaId" : "30B95DB4-EC98-4046-A894-26CA0807456B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4A97B6E1-EABA-4977-A3FC-64DF0392AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D33486-4956-4E2C-BA16-FA269A9D02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E99882-786F-455F-BAC4-30716120964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A3468-C3BF-417B-85FB-18C28F0765B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFFBC58-ACD2-449D-B010-5026D6022F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EED5D2-EC40-4253-991B-0C746FBEF6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F73092C-1458-4278-A30D-C0F89B1F82F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DD17EC-99EB-46C1-98E9-16A2EDB8E224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF89719E-C415-45A3-A1CC-FAFDFCAE3055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.18",
            "matchCriteriaId" : "350EE2EE-75EC-40A5-9159-282089D98383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0618BD26-0EF5-4774-9131-B5ABD4CD302A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D604DAE-DF63-413C-9F49-FFC8E84699F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE6185-09F4-48E3-9742-F9D8030B5774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E565E5-286D-4A68-B085-5659DFE59A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F0C73F-291F-4A92-87B8-2269B5C1516D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938B1260-74A7-4CFF-8086-415DCC284430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28672BA-E3C2-40C3-80E1-95B7CDD089E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9308147C-0A23-48BC-BFA9-A49B9D73014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAD8DCC-DBB4-40EE-927C-7B0969700077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F9CE47-E3AA-49D7-AEC9-447951AC31E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581615BB-C781-42CA-836E-0E0EAB8C4504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257F43FA-D22C-4BF0-A02E-261A54142BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D291234-D64A-4E8A-A7CD-08BB980E1CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3C27EC-5794-49C1-96E0-997E700B13DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745C2CBA-4824-441B-A6BC-E80959C2E035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6A7D00-A203-4891-96CE-20C91FCBF048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8CB480-0595-4BC1-998E-3638E85DB367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBF526-7A28-436B-9B01-EADE913602B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A0BCE3-38E7-4318-9A7E-3D895171129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2303104C-4A91-4704-A9CB-8C83A859090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF479C3-95A0-414F-B47B-C94BE95713D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AF48A9-C161-4603-82F0-5D2DE1EBA498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821E46E8-B084-4762-86F0-002CA288B522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A084C258-7D78-4F6D-8E24-00BE9608EBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FEA455-E605-4CE3-A951-760D59091C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1758117-4865-42A4-8110-2250924E21FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81AF4BFB-EC89-454B-89DF-FC8F6102E28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8013986B-DCAF-44A1-BA63-5BBA6762720F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=460713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=460713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T18:30:01.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5 through 8 allows remote attackers to cause a denial of service (memory consumption and application crash) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer v5 hasta v8 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y colgado de la aplicación) mediante un valor entero grande en la propiedad \"length\" de un objeto \"Select\", siendo un asunto relacionado con CVE-2009-1692."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8",
            "matchCriteriaId" : "CB024757-60F3-44F9-BCFF-04B2F109D7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4071D03-D955-4C1B-ACD8-A864F7D0FA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T18:30:01.157",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KDE Konqueror allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."
      }, {
        "lang" : "es",
        "value" : "KDE Konqueror permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de de un valor entero largo en la propiedad lenght en un objeto Select, relativo a CVE-2009-1692.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A65B798-C4F1-44BF-8B64-FDB7F234580B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat does not consider a user-assisted crash of a client application such as Konqueror to be a security issue.",
        "lastModified" : "2009-08-07T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T18:30:01.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Nokia N95 running Symbian OS 9.2, N82, and N810 Internet Tablet allow remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."
      }, {
        "lang" : "es",
        "value" : "Nokia N95 ejecutando Symbian OS 9.2, N82, y N810 Internet Tablet permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) mediante un valor entero grande en la propiedad \"length\" de un objeto \"Select\", siendo un asunto relacionado con CVE-2009-1692."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nokia:n95:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49212645-371B-4B59-9456-12226083E83F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nokia:symbian:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A190FB03-6B59-4DDF-AE67-9596628472DD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nokia:n82:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B1F8A1-7B7E-406D-B943-B51D2B922DF1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nokia:n810_internet_tablet:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099F5AC1-A406-45E9-9C87-6CE16E067985"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T18:30:01.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Aigo P8860 allows remote attackers to cause a denial of service (memory consumption and browser hang) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."
      }, {
        "lang" : "es",
        "value" : "Aigo P8860 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y colgado del navegador) mediante un valor entero grande en la propiedad \"length\" de un objeto \"Select\", siendo un asunto relacionado con CVE-2009-1692."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:aigo:aigo_md_p8860:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8F9027-BDE3-44BA-A94F-69D888A4D4A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T18:30:01.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera, possibly 9.64 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."
      }, {
        "lang" : "es",
        "value" : "Opera, posiblemente v9.64 y anteriores, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de un valor entero largo en la propiedad length de un objeto Select, está relacionada con CVE-2009-1692.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.64",
            "matchCriteriaId" : "25CB886F-4E01-4E01-ACF7-7CB90FA2A6D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9160",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52874",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5957",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T18:30:01.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web browser on the Sony PLAYSTATION 3 (PS3) allows remote attackers to cause a denial of service (memory consumption and console hang) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."
      }, {
        "lang" : "es",
        "value" : "El navegador web en Sony PLAYSTATION 3 (PS3) permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y colgado de la consola) mediante un valor entero grande en la propiedad \"length\" de un objeto \"Select\", siendo un asunto relacionado con CVE-2009-1692."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:playstation_3:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3895A-8BCE-4265-9FB7-5FD077B983B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T18:30:01.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netscape 6 and 8 allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."
      }, {
        "lang" : "es",
        "value" : "Netscape v6 y v8 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) mediante un valor entero grande en la propiedad \"length\" de un objeto \"Select\", siendo un asunto relacionado con CVE-2009-1692."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netscape:navigator:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55DBDE7-91BA-43CD-9E1F-52737CA93EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netscape:navigator:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220BE0F1-EFFC-4BE0-8B5D-42FB6865EE33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.g-sec.lu/one-bug-to-rule-them-all.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504969/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504989/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T18:30:01.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allow remote attackers to bypass detection of malware via a modified (1) ZIP or (2) CAB archive, a related issue to CVE-2009-1240."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el motor de IBM Proventia v4.9.0.0.44 20081231, como el usuado por IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), y posiblemente otros productos, permite a atacantes remotos evitar la detección de código malicioso mediante un fichero (1) ZIP o (2) CAB modificado, siendo un asunto relacionado con CVE-2009-1240."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:proventia_desktop_endpoint_security:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77F1551-5C37-4D5B-AC86-C2965083B93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:proventia_network_mail_security_system:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C520BF35-8406-44E3-8FC6-D8BD7242D13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:proventia_network_mail_security_system_vitual_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C506960-F0F2-4724-96B5-75D3DD6FF54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:proventia_network_multi-function_security:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E520803B-AC1A-40CA-8AE9-E41A8B9D6492"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504987/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504992/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504995/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504987/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504992/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504995/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T18:30:01.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live (MPL) allows remote authenticated users to list arbitrary directories and read arbitrary files via a .. (dot dot) in a pathname."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el componente Marcelo Costa FileServer v1.0 para Microsoft Windows Live Messenger and Messenger Plus! Live (MPL) permite a usuarios autenticados remotamente listar directorios de su elección y leer ficheros de su elección al utilizar .. (punto punto) en la ruta del fichero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:messenger_plus\\!_live:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C91606-7E28-42FE-8358-1B8FEB5D5594"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:windows_live_messenger:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D7041E-41A7-4A1E-A1E8-E1FC2AB551CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marcelo_costa:fileserver:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B371DF69-CD07-450C-A837-BA2D3A7CE1F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T20:00:06.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Advanced Electron Forum (AEF) 1.x, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the filename in an uploaded attachment. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Advanced Electron Forum (AEF) v1.x, cuando está deshabilitado \"magic_quotes_gpc\", permite a atacantes remotos ejecutar comandos SQL de su elección mediante el fichero subido como adjunto. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anelectron:advanced_electron_forum:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68188511-BA5A-454A-8959-A754AA7147BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anelectron:advanced_electron_forum:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39DBB3C6-A59B-46E8-AE2E-B4F90B4327E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anelectron:advanced_electron_forum:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B729A246-6642-44BD-8842-B676E6F9D0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anelectron:advanced_electron_forum:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938E89B8-C921-44B5-B97F-D756CC5607C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anelectron:advanced_electron_forum:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D35C1FAF-9F98-42A0-B457-E5949AEA8864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anelectron:advanced_electron_forum:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A193235-7F51-4528-9289-6B9FE44A8CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anelectron:advanced_electron_forum:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1869DC-9C81-4AD8-94AA-CD0EA8B0C8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anelectron:advanced_electron_forum:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED51633-E055-4D31-9197-1FF44FBB88B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35646",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T20:00:11.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Advanced Electron Forum (AEF) 1.x allows remote attackers to determine the existence of arbitrary files via the avatargalfile parameter when changing an avatar, which leaks the existence of the file in an error message.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en Advanced Electron Forum (AEF) v1.x permite a atacantes remotos determinar la existencia de ficheros de su elección mediante el parámetro \"avatargalfile\" al cambiar un avatar, revelando la existencia del fichero en un mensaje de error. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anelectron:advanced_electron_forum:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68188511-BA5A-454A-8959-A754AA7147BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anelectron:advanced_electron_forum:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39DBB3C6-A59B-46E8-AE2E-B4F90B4327E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anelectron:advanced_electron_forum:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B729A246-6642-44BD-8842-B676E6F9D0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anelectron:advanced_electron_forum:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938E89B8-C921-44B5-B97F-D756CC5607C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anelectron:advanced_electron_forum:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D35C1FAF-9F98-42A0-B457-E5949AEA8864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anelectron:advanced_electron_forum:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A193235-7F51-4528-9289-6B9FE44A8CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anelectron:advanced_electron_forum:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1869DC-9C81-4AD8-94AA-CD0EA8B0C8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anelectron:advanced_electron_forum:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED51633-E055-4D31-9197-1FF44FBB88B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35646",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T20:00:11.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer underflow in Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service (crash) via a VoIP over Network (VON) packet to port 2305 with a negative packet_size value, which triggers a buffer over-read."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento inferior de entero en Armed Assault (también conocido como ArmA) v1.14 y anteriores, y v1.16 beta, y Armed Assault II v1.02 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída) mediante un paquete de VoIP sobre red (VON) dirigido al puerto 2305 con valor \"packet_size\" negativo, provocando un desbordamiento de lectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bistudio:arma:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.16_beta",
            "matchCriteriaId" : "2BBC0E6F-B56B-4BE1-BCC3-61BE2391FBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bistudio:arma:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3941008-81E2-45FA-8588-8D88CD295CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bistudio:arma_2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02",
            "matchCriteriaId" : "AD0DDA32-B5C8-4F9F-AE22-CFF500670D84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/armadioz-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35900",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1951",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/armadioz-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T20:00:13.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the (1) nickname and (2) datafile fields in a join request, which is not properly handled when logging an error message."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cadena de formato en Armed Assault (también conocido como ArmA) v1.14 y anteriores, y v1.16 beta, y Armed Assault II v1.02 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída) y probablemente ejecutar código de su elección mediante especificaciones de cadenas de formato en los campos (1) \"nickname\" y (2) \"datafile\" en una petición de conexión, no manejando correctamente el registro del mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bistudio:arma:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.16_beta",
            "matchCriteriaId" : "2BBC0E6F-B56B-4BE1-BCC3-61BE2391FBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bistudio:arma:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3941008-81E2-45FA-8588-8D88CD295CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bistudio:arma_2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02",
            "matchCriteriaId" : "AD0DDA32-B5C8-4F9F-AE22-CFF500670D84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/armazzofs-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1951",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://aluigi.altervista.org/adv/armazzofs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T20:00:13.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service via a join packet with a final field whose value is (1) 0, which triggers a server crash related to memory allocation, or (2) 1, which triggers CPU/memory consumption and a NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "Armed Assault (también conocido como ArmA) v1.14 y anteriores, y v1.16 beta, y Armed Assault II v1.02 y anteriores permite a atacantes remotos provocar una denegación de servicio mediante un paquete de conexión con un campo final cuyo valor sea (1) 0, provocando una caída del servidor relacionada con la asignación de memoria, o (2) 1, provocando un consumo de CPU/memoria y una referencia a puntero NULL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bistudio:arma:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.16_beta",
            "matchCriteriaId" : "2BBC0E6F-B56B-4BE1-BCC3-61BE2391FBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bistudio:arma:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3941008-81E2-45FA-8588-8D88CD295CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bistudio:arma_2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02",
            "matchCriteriaId" : "AD0DDA32-B5C8-4F9F-AE22-CFF500670D84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/armazzo-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1951",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://aluigi.altervista.org/adv/armazzo-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T20:00:13.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Hamster Audio Player 0.3a allows remote attackers to execute arbitrary code via a long string in a (1) .m3u or (2) .hpl playlist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Hamster Audio Player v0.3a permite a atacantes remotos ejecutar código de su elección mediante una cadena de caracteres larga en un fichero de lista de reproducción con extensión (1) .m3u o (2) .hpl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ondanera:hamster_audio_player:0.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19409CD3-646B-4585-874F-B2020DB7FF72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55871",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35825",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9157",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9172",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51732",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://osvdb.org/55871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T20:00:13.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject arbitrary web script or HTML via the id parameter in a detail action to (1) main.php and possibly (2) demo_page.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en ScriptsEz Easy Image Downloader, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del parámetro \"id\" en una acción \"detail\" a (1) main.php y posiblemente (2) demo_page.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptsez:easy_image_downloader:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79A30DA-1F67-49F4-82C5-606853200D66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55862",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/eid-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35838",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35701",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/eid-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T20:00:13.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in comments.php in Super Simple Blog Script 2.5.4 allow remote attackers to overwrite, include, and execute arbitrary local files via the entry parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en comments.php en Super Simple Blog Script v2.5.4, permite a atacantes remotos sobrescribir, añadir y ejecutar archivos locales de su elección a través del parámetro \"entry\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supersimple:super_simple_blog_script:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1758070-784C-4B41-931E-B72CDB14B2F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35859",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T20:00:14.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the entry parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en comments.php en Super Simple Blog Script v2.5.4, cuando magic_quotes_gpc están deshabilitadas, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"entry\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supersimple:super_simple_blog_script:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1758070-784C-4B41-931E-B72CDB14B2F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35859",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-20T20:00:14.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the search method in jobline.class.php in Jobline (com_jobline) 1.1.2.2, 1.3.1, and possibly earlier versions, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the search parameter in a results action to index.php, which invokes the search method from the searchJobPostings function in jobline.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el método de búsqueda en  jobline.class.php en el componente Jobline (com_jobline) v1.1.2.2, v1.3.1, y posiblemente versiones previas, para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro de búsqueda en una acción \"results\" al index.php, que invoca al método de búsqueda desde la función searchJobPostings en jobline.php"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olle_johansson:jobline:1.1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3892F7F-53FB-4E54-845F-3E9857FD614A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olle_johansson:jobline:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC19FA0B-9899-40B4-92B7-A2763E132ED2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35877",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35728",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-21T16:30:00.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in src/jsregexp.cc in Google V8 before 1.1.10.14, as used in Google Chrome before 2.0.172.37, allows remote attackers to execute arbitrary code in the Chrome sandbox via a crafted JavaScript regular expression."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en src/jsregexp.cc en Google V8 anterior a v1.1.10.14, como el utilizado en Google Chrome anterior a v2.0.172.37, permite a atacantes remotos ejecutar código de su elección en el Chrome sandbox a través de una expresión regular JavaScript manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:v8:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "75FB9ABA-F9DB-4F52-A62E-7400F97537A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.172.33",
            "matchCriteriaId" : "23BD1820-86D9-4ED4-A502-7F6FE82B80E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8FF77A-7802-4963-B532-3F16C7BB012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73576CF-76EE-42A3-9955-D7991384B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6659833E-E309-4797-84D4-A782237714A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4C0D93-0308-48D4-A953-9398B88E2868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5094C4-1338-4189-B5FD-C9AFFF091D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F95770-F36F-43C0-986F-5C819648271E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCE1FD3-8D27-4304-97F9-6F9689F2498D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6CA696-49AA-4445-B978-96C1D8CE58DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CFA3BF-6C07-448B-8C83-AD4C524A6577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8497F93-D88A-4FFA-B988-7210608530A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CDF938-2998-403F-B343-29B620E05D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F5223F1-85CD-4DF9-9665-BDF7B554A784"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=14719",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://codereview.chromium.org/141042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://codereview.chromium.org/141042/diff/6/1004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/07/stable-beta-update-bug-fixes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35844",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1924",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=14719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://codereview.chromium.org/141042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://codereview.chromium.org/141042/diff/6/1004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/07/stable-beta-update-bug-fixes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-21T16:30:00.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome before 2.0.172.37 allows attackers to leverage renderer access to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger excessive memory allocation."
      }, {
        "lang" : "es",
        "value" : "Google Chrome anterior a v2.0.172.37, permite a atacantes remotos el aprovechar el acceso \"renderer\" para provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código de su elección a través de vectores no especificados que provocan una excesiva reserva de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.172.33",
            "matchCriteriaId" : "23BD1820-86D9-4ED4-A502-7F6FE82B80E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8FF77A-7802-4963-B532-3F16C7BB012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73576CF-76EE-42A3-9955-D7991384B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6659833E-E309-4797-84D4-A782237714A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4C0D93-0308-48D4-A953-9398B88E2868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5094C4-1338-4189-B5FD-C9AFFF091D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F95770-F36F-43C0-986F-5C819648271E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCE1FD3-8D27-4304-97F9-6F9689F2498D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6CA696-49AA-4445-B978-96C1D8CE58DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CFA3BF-6C07-448B-8C83-AD4C524A6577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8497F93-D88A-4FFA-B988-7210608530A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CDF938-2998-403F-B343-29B620E05D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F5223F1-85CD-4DF9-9665-BDF7B554A784"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://googlechromereleases.blogspot.com/2009/07/stable-beta-update-bug-fixes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35844",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1924",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/07/stable-beta-update-bug-fixes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-21T17:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the fichier parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en system/download.php en Admin News Tools v2.5, permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro \"fichier\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adminnewstools:admin_news_tools:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504BEF86-453F-4739-A45A-2A54956CF965"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35842",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504949/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504949/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-21T17:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request."
      }, {
        "lang" : "es",
        "value" : "system/message.php en Admin News Tools v2.5, no restringe adecuadamente el acceso , lo que permite a atacantes remotos publicar mensajes nuevos a través de una petición directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adminnewstools:admin_news_tools:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504BEF86-453F-4739-A45A-2A54956CF965"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35842",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-21T17:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the IPMI dissector in Wireshark 1.2.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an array index error.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de bufer en IPMI dissector en Wireshark 1.2.0 permite a atacantes remotos causar una denegación de servicio (caída) a tra´ves de vectores no especificados referidos a un error de una cadena indexada. NOTA: Algunos de estos detalles se obtienen a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35884",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1970",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-04.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
        "lastModified" : "2009-08-12T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-21T17:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace and is processed by the (1) Bluetooth L2CAP, (2) RADIUS, or (3) MIOP dissector. NOTE: it was later reported that the RADIUS issue also affects 0.10.13 through 1.0.9."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Wireshark versión 1.2.0, permiten a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) por medio de un archivo que registra un seguimiento de paquetes malformados y es procesado por el (1) Bluetooth L2CAP, (2) RADIUS o (3) disector de MIOP. NOTA: fue señalado más adelante que el problema de RADIUS también afecta a versiones 0.10.13 hasta 1.0.9."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978C483C-A6F7-456F-9488-833D520D4A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB94CE6-03D3-43C3-B765-AC36961CD83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FADA30-FD98-42F3-80F1-E8794C77AC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3F8A55-10DE-4197-9F9D-5F6570A94860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F1728E-ED97-4203-90D1-9E81E96BD7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5629542-FD8E-4C7B-B396-BC76FB462083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC077D96-1BBB-4F69-8C3A-F36CE3F3C668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35884",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37175",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37409",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37477",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/22/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35748",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1970",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3061",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.0.10.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-04.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-08.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/22/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.0.10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2010-0360.html\n\nVectors (1) Bluetooth L2CAP and (3) MIOP did not affect the versions of the Wireshark package, as shipped with Red Hat Enterprise Linux 3, 4, or 5.\n",
        "lastModified" : "2010-04-20T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-21T17:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the sFlow dissector in Wireshark 1.2.0 allows remote attackers to cause a denial of service (CPU and memory consumption) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el analizador sFlow en Wireshark v1.2.0 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y CPU) mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35884",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35748",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1970",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-04.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
        "lastModified" : "2009-08-12T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-21T17:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the AFS dissector in Wireshark 0.9.2 through 1.2.0 allows remote attackers to cause a denial of service (crash) via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el analizador AFS en Wireshark v0.9.2 a v1.2.0 permite a atacantes remotos provocar una denegación de servicio (caída) mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD509BD0-3E90-47E5-97DA-F8814002EDF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8E63FC-A3AA-455E-8AA7-E3577468F022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DFC6BB8-5A74-4F6A-AFC8-959623D4236F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B432986-F5AE-4506-B584-3B4E943A9C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60178790-62CC-41A9-8B5A-78CF49069E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41535173-00D3-4E52-9441-D7ED44BE9B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3017F8E8-F28D-46E0-A256-0121BAD588A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D8CE9A-4CE0-4DA8-9EBA-3B7CEBCDFEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E7F73-0E2A-442C-9B76-679A2AD03052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF374E8-36A3-43AA-B86C-092F5B244841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C422E5-3252-48C2-B4FF-E32AA5463D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C43A78-E578-4B1C-8E33-24529E973E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1074B30-F2E6-47CD-8491-29163811E07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB52B779-7A2D-43E0-9F12-C65053002EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A85B028-7384-403A-817C-B5001F02A8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801B1795-3DC4-4BE3-A693-37B6BD116B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17808311-AC2A-428A-BB8B-B08549C5DAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978C483C-A6F7-456F-9488-833D520D4A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB94CE6-03D3-43C3-B765-AC36961CD83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FADA30-FD98-42F3-80F1-E8794C77AC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3F8A55-10DE-4197-9F9D-5F6570A94860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F1728E-ED97-4203-90D1-9E81E96BD7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5629542-FD8E-4C7B-B396-BC76FB462083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35884",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/17/15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/18/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35748",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1970",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-04.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-05.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/17/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/18/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2010-0360.html",
        "lastModified" : "2010-04-20T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-21T17:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Infiniband dissector in Wireshark 1.0.6 through 1.2.0, when running on unspecified platforms, allows remote attackers to cause a denial of service (crash) via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el analizador Infiniband en Wireshark v1.0.6 a v1.2.0, cuando es ejecutado en plataformas no especificadas, permite a atacantes remotos provocar una denegación de servicio (caída) mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3F8A55-10DE-4197-9F9D-5F6570A94860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F1728E-ED97-4203-90D1-9E81E96BD7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5629542-FD8E-4C7B-B396-BC76FB462083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35884",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/17/15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/18/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1970",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-04.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-05.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/17/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/18/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2010-0360.html",
        "lastModified" : "2010-04-20T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-21T17:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NOS Microsystems getPlus Download Manager, as used in Adobe Reader 1.6.2.36 and possibly other versions, Corel getPlus Download Manager before 1.5.0.48, and possibly other products, installs NOS\\bin\\getPlus_HelperSvc.exe with insecure permissions (Everyone:Full Control), which allows local users to gain SYSTEM privileges by replacing getPlus_HelperSvc.exe with a Trojan horse program, as demonstrated by use of getPlus Download Manager within Adobe Reader. NOTE: within Adobe Reader, the scope of this issue is limited because the program is deleted and the associated service is not automatically launched after a successful installation and reboot."
      }, {
        "lang" : "es",
        "value" : "GetPlus Download Manager de NOS Microsystems, tal y como es usado en Reader de Adobe versión 1.6.2.36 y posiblemente otras versiones, Corel getPlus Download Manager anterior a versión 1.5.0.48, y posiblemente otros productos, instala el archivo NOS\\bin\\getPlus_HelperSvc.exe con permisos no confiables (Everyone:Full Control), que permite a los usuarios locales alcanzar privilegios SYSTEM mediante el reemplazo de getPlus_HelperSvc.exe por un programa de tipo caballo de troya, como es demostrado por el uso de getPlus Download Manager en Reader de Adobe. NOTA: en Reader de Adobe, el alcance de este problema es limitado debido a que el programa se elimina y el servicio asociado no se inicia automáticamente después de una instalación y reinicio con éxito."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nos_microsystems:getplus_download_manager:1.6.2.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F54F763-82AF-4F53-B557-EBD6E1D19280"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:corel:getplus_download_manager:1.5.0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E0514D-B66A-405C-AA6D-610644FC9B11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.adobe.com/psirt/2009/07/local_privilege_escalation_in.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/9sg_adobe_local.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35930",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36331",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505095/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35740",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1969",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.adobe.com/psirt/2009/07/local_privilege_escalation_in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://retrogod.altervista.org/9sg_adobe_local.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505095/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-21T22:30:00.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Perl CGI's By Mrs. Shiromuku shiromuku(fs6)DIARY 2.40 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Perl CGI's By Mrs. Shiromuku shiromuku(fs6)DIARY 2.40 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:t-okada:shiromuku\\(fs6\\)diary:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C93CE9-EFEC-4860-BDC0-1D70EE1F5273"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN31110006/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000048.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35806",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.t-okada.com/cgi-bin/s_news/s_news.cgi?action=show_detail&txtnumber=log&mynum=345",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN31110006/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000048.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.t-okada.com/cgi-bin/s_news/s_news.cgi?action=show_detail&txtnumber=log&mynum=345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-21T22:30:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en TFM MMPlayer 2.0 y posiblemente 2.0.0.30, permite a atacantes remotos ejecutar código de su elección mediante una cadena larga en un fichero de lista de reproducción (.m3u)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tfm:mmplayer:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC45284-301F-4C37-96B2-CB6A9064F8E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35605",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-22T17:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 5.6.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de SQL en Almond Classifieds (com_aclassf) v5.6.2 de Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro id en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:almondsoft:almond_classifieds:5.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1612D7-5C64-4F17-BB81-739D3FA962B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34843",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-22T17:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Sorinara Streaming Audio Player (SAP) 0.9 allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en Sorinara Streaming Audio Player (SAP) v0.9, permite a atacantes remotos ejecutar código de su elección a través de una cadena larga en un fichero de lista de reproducción(.m3u)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sorinara:streaming_audio_player:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FCE893-D63E-45D4-BDAA-28B1E3AA1D75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34842",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-22T17:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Verlihub Control Panel (VHCP) 1.7e allow remote attackers to inject arbitrary web script or HTML via (1) the nick parameter in a login action to index.php or (2) the URI in a news request to index.html."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS)en Verlihub control Panel (VHCP) v1.7e permite a atacantes remotos inyectar código web y HTML a su elección a través de (1) el parámetro nombre en la acción de ingreso de index.php or (2) la URI en peticiones de noticias de index.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:verlihub-project:verlihub_control_panel:1.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2374800-ADA3-4A44-B3F0-001C13BBD025"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstorm.linuxsecurity.com/0905-exploits/verlihub-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34941",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34856",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1264",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0905-exploits/verlihub-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/34941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-22T17:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control in WinFax\\DCCFAXVW.DLL in Symantec WinFax Pro 10.03 allows remote attackers to execute arbitrary code via a long argument to the AppendFax method."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Symantec.FaxViewerControl.1 ActiveX control en WinFax\\DCCFAXVW.DLL en Symantec WinFax Pro v10.03, permite a atacantes remotos ejecutar código de su elección mediante una argumento largo en el método AppendFax."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:winfax_pro:10.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ED37CE-3895-4B61-B2AD-FE0662C668EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/9sg_symantec_win_fuck_pro.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34925",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503074/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503086/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503163/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34766",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022147",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1221",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://retrogod.altervista.org/9sg_symantec_win_fuck_pro.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503074/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503086/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503163/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-22T17:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers to inject arbitrary web script or HTML via (1) the URI, (2) the q parameter, (3) the nick parameter, or (4) the nick parameter in a bantest action."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en VerliAdmin v0.3.7 y v0.3.8 permite a atacantes remotos inyectar código web o HTML a su elección a través de (1) la URI, (2) el parámetro q, (3) el parámetro nombre, o (4) el parámetro nombre en un acción \"bantest\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:verliadmin:verliadmin:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98F7430-A7EF-4532-872B-0ABD7908F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:verliadmin:verliadmin:0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2156AE9E-F770-4BBC-88E7-41710DD689B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0905-exploits/verliadmin-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34845",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1265",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0905-exploits/verliadmin-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-22T17:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in the Fivestar module 5.x-1.x before 5.x-1.14 and 6.x-1.x before 6.x-1.14, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users for requests that cast votes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en módulo Fivestar v5.x-1.x anteriores v5.x-1.14 y v6.x-1.x anteriores v6.x-1.14, un módulo de Drupal, permite a atacantes remotos secuestrar la autenticación de usuarios de su elección para peticiones de votación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B52E33DA-82E3-493A-A892-873D713A8AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BEE50BE-08CF-4B94-A8A1-853517234536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "464002BD-E9F1-48BF-BCEB-9D10BB16FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.11:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "72A814FC-8C1E-4CCC-AC45-71F0D7F162ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.11:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "45CFE657-DBF6-43F5-9BDE-E073852F2BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.11:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "B92C61C0-BEA2-4945-AF25-0AF1F12D6067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.11:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "C113D74B-C0E2-4463-8A60-EA31043F1489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A1B620-18FC-4808-B275-2E48104656E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB27868A-1FC0-4E5B-9124-893D339292B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lullabot:fivestar_module_for_drupal:6.x-1.11:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCBC049-37DF-42BF-8788-CFC08AED07C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lullabot:fivestar_module_for_drupal:6.x-1.11:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "758367A3-CDAE-47FB-926E-E3C1422184D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lullabot:fivestar_module_for_drupal:6.x-1.11:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "A804D3B5-73CA-4617-9981-332FB4DB942D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lullabot:fivestar_module_for_drupal:6.x-1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF8342D-D586-4E82-8C55-E226321F6040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lullabot:fivestar_module_for_drupal:6.x-1.12:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B856CB8-40EF-4A4D-AA30-3A3996C1E273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lullabot:fivestar_module_for_drupal:6.x-1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C3B585-0AC1-4777-843F-DF208BDB5084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/449026",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/449028",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/449042",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34956",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1215",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/449026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/449028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/449042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/54154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-22T17:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MiniTwitter 0.2 beta, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via the (1) user parameter to (a) index.php and (b) rss.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en MiniTwitter v0.2 beta, cuando magic_quotes_gpc es desactivado, permite a usuarios autenticados remotamente ejecutar código SQL a su elección a través de (1) parámetros de usuario a(a) index.php y (b)rss.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bioscripts:minitwitter:0.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D3E973-132B-4CA8-BD45-5101729AA12B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503155/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34795",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503155/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-22T17:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via an opt action."
      }, {
        "lang" : "es",
        "value" : "index.php en MiniTwitter v0.2 beta permite a usuarios autentificarse remotamente para modificar determinadas opciones de cuentas arbitrarias a través de una acción opt."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bioscripts:minitwitter:0.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D3E973-132B-4CA8-BD45-5101729AA12B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503157/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34795",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503157/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2462",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-22T18:30:00.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a SetMayHaveFrame assertion and nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) the child list and initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, and (10) nsContentUtils::ComparePosition."
      }, {
        "lang" : "es",
        "value" : "El motor de búsqueda en Mozilla Firefox anteriores v3.0.12 y Thunderbird permite a atacantes remotos causar una denegación de servicio (consumo de memoria y caída de aplicación) o posiblemente ejecutar código a su elección a través de vectores relacionados con (1) el frame chain y synchronous events, (2) una insercción SetMayHaveFrame y nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) la lista hijo e initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, y (10) nsContentUtils::ComparePosition."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.11",
            "matchCriteriaId" : "CFF3C1ED-A009-4168-B928-F186006139BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745C2CBA-4824-441B-A6BC-E80959C2E035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6A7D00-A203-4891-96CE-20C91FCBF048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8CB480-0595-4BC1-998E-3638E85DB367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBF526-7A28-436B-9B01-EADE913602B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A0BCE3-38E7-4318-9A7E-3D895171129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2303104C-4A91-4704-A9CB-8C83A859090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF479C3-95A0-414F-B47B-C94BE95713D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48702EEB-C272-46ED-9C61-6F44D6964DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC650D89-CEEC-4A90-B3B9-5F0ADCEFCBB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1163.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35943",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35947",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=413085",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=442227",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=445177",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=461861",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=463350",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=466763",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=468211",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=472668",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=472950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=491134",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10906",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1163.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=413085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=442227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=445177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=461861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=463350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=466763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=468211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=472668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=472950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=491134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2463",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-22T18:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en una función base64 decoding en Mozilla Firefox anteriores a v.3.0.12 y Thunderbird permite a atacantes remotos causar una denegación de servicio (consumo de memoria y caída de aplicación) o posiblemente ejecutar código a su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.11",
            "matchCriteriaId" : "CFF3C1ED-A009-4168-B928-F186006139BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745C2CBA-4824-441B-A6BC-E80959C2E035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6A7D00-A203-4891-96CE-20C91FCBF048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8CB480-0595-4BC1-998E-3638E85DB367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBF526-7A28-436B-9B01-EADE913602B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A0BCE3-38E7-4318-9A7E-3D895171129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2303104C-4A91-4704-A9CB-8C83A859090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF479C3-95A0-414F-B47B-C94BE95713D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48702EEB-C272-46ED-9C61-6F44D6964DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC650D89-CEEC-4A90-B3B9-5F0ADCEFCBB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1163.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35943",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35947",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/38977",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39001",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-915-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0648",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=492779",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10369",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1163.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-915-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=492779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2464",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-22T18:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to loading multiple RDF files in a XUL tree element."
      }, {
        "lang" : "es",
        "value" : "El nsXULTemplateQueryProcessorRDF::CheckIsSeparator function en Mozilla Firefox anteriores a v3.0.12, SeaMonkey v2.0a1pre, y Thunderbird permite a atacantes remotos causar una denegación de servicio (consumo de memoria y caída de aplicación) o posiblemente ejecutar código a su elección a través de vectores relacionados con la carga de archivos múltiples RDF en un árbol XUL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.11",
            "matchCriteriaId" : "CFF3C1ED-A009-4168-B928-F186006139BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:2.0a1pre:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D090A28-8D89-49F1-B020-3915D150FD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745C2CBA-4824-441B-A6BC-E80959C2E035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6A7D00-A203-4891-96CE-20C91FCBF048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8CB480-0595-4BC1-998E-3638E85DB367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBF526-7A28-436B-9B01-EADE913602B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A0BCE3-38E7-4318-9A7E-3D895171129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2303104C-4A91-4704-A9CB-8C83A859090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF479C3-95A0-414F-B47B-C94BE95713D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48702EEB-C272-46ED-9C61-6F44D6964DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC650D89-CEEC-4A90-B3B9-5F0ADCEFCBB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35943",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=441785",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9594",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=441785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2465",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-22T18:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via vectors involving double frame construction, related to (1) nsHTMLContentSink.cpp, (2) nsXMLContentSink.cpp, and (3) nsPresShell.cpp, and the nsSubDocumentFrame::Reflow function."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anteriores v3.0.12 y Thunderbird permite a atacantes remotos causar una denegación de servicio (consumo de memoria y caída de aplicación) o ejecutar arbitrariamente código a través de vectores relacionados con la construcción de marcos dobles, relativos a (1) nsHTMLContentSink.cpp, (2) nsXMLContentSink.cpp, y(3) nsPresShell.cpp, y el nsSubDocumentFrame::Reflow function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.11",
            "matchCriteriaId" : "CFF3C1ED-A009-4168-B928-F186006139BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC60781-766B-4B9C-B68D-45D51C5E5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745C2CBA-4824-441B-A6BC-E80959C2E035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6A7D00-A203-4891-96CE-20C91FCBF048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8CB480-0595-4BC1-998E-3638E85DB367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9218A9-DA27-436A-AC93-F465FC14ECF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66503D7-72CB-42A5-8C85-D9579EF2C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBBF526-7A28-436B-9B01-EADE913602B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B373B409-0939-4707-99F1-95B121BFF7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A0BCE3-38E7-4318-9A7E-3D895171129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80CA1DE-B920-4E28-BEFC-574148D19A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2303104C-4A91-4704-A9CB-8C83A859090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54ACD07-FAB7-4513-A707-18FAF7D565C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260CE1F-501D-44FF-A3FA-2137CA01733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D3DD1B-64DF-46C8-80A3-99D2E34B665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF479C3-95A0-414F-B47B-C94BE95713D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48702EEB-C272-46ED-9C61-6F44D6964DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC650D89-CEEC-4A90-B3B9-5F0ADCEFCBB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35943",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=482578",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=489050",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10402",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=482578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=489050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2466",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-22T18:30:00.297",
      "lastModified" : "2025-06-25T16:56:21.430",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, and (3) MirrorWrappedNativeParent and js_LockGCThingRT."
      }, {
        "lang" : "es",
        "value" : "JavaScript engine en Mozilla Firefox anteriores v3.0.12 y Thunderbird permite a atacantes remotos causar una denegación de servicio (consumo de memoria y caída de aplicación) o posiblemente ejecutar código a su elección a través de vectores relacionados a (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, y(3) MirrorWrappedNativeParent and js_LockGCThingRT."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.12",
            "matchCriteriaId" : "9C5F57C5-621B-44C2-93E1-244C813A3E62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.11",
            "matchCriteriaId" : "9567AD15-F32C-48CA-9345-FD5D1EC9FC3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1163.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35943",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35947",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=454704",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=465980",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=493281",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=494445",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9820",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1163.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=454704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=465980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=493281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=494445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2467",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-22T18:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.12 and 3.5 before 3.5.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a Flash object, a slow script dialog, and the unloading of the Flash plugin, which triggers attempted use of a deleted object."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox before v3.0.12 y v3.5 anterior a v3.5.1, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente la ejecución de código de su elección a través de vectores que involucran un objeto Flash, un dialogo de ejecución de comandos muy lento y la descarga de un complemento Flash, lo que provoca el uso de un objeto eliminado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.11",
            "matchCriteriaId" : "CFF3C1ED-A009-4168-B928-F186006139BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880CAA7D-398A-4B26-9754-FD188CE9729D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-35.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=493601",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10473",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-35.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=493601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2468",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-22T18:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Apple CoreGraphics, as used in Safari before 4.0.3, Mozilla Firefox before 3.0.12, and Mac OS X 10.4.11 and 10.5.8, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long text run that triggers a heap-based buffer overflow during font glyph rendering, a related issue to CVE-2009-1194."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en Apple CoreGraphics en Apple Mac OS X, usado en Mozilla Firefox anteriores a v3.0.12, permite a atacantes remotos causar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código a su elección a través de un texto largo que desencadena en un desbordamiento de búfer basado en memoria dinámica durante el renderizado de la fuente glyph, siendo un asunto relacionado con CVE-2009-1194."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.11",
            "matchCriteriaId" : "CFF3C1ED-A009-4168-B928-F186006139BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT3733",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-36.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022717",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=480134",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=480134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2469",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-22T18:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an __defineSetter__ function, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted document, related to a certain pointer misinterpretation."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anterior a la v3.0.12 no maneja adecuadamente un elemento SVG que posee una propiedad con una función \"watch\" y una función \"__defineSetter__\", lo que permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente, la ejecución de código de su elección a través de un documento manipulado. Relacionado con la mal interpretación de ciertos punteros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6A30E-7577-4569-9309-53A0AF7FE3AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.11",
            "matchCriteriaId" : "CFF3C1ED-A009-4168-B928-F186006139BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-37.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=488995",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10030",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-37.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=488995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2471",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-22T18:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted call, related to XPCNativeWrapper."
      }, {
        "lang" : "es",
        "value" : "La  función setTimeout en Mozilla Firefox anterior a 3.0.12 no conserva adecuadamente la encapsulación del objeto, lo que permite a atacantes remotos ejecutar código JavaScript de su elección con privilegios chrome a través de una llamada manipulada. Relacionado con XPCNativeWrapper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.11",
            "matchCriteriaId" : "CFF3C1ED-A009-4168-B928-F186006139BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-39.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=460882",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10572",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-39.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=460882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2472",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-22T18:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted document, related to a \"cross origin wrapper bypass.\""
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anteriores a v3.0.12 no usa siempre XPCCrossOriginWrapper cuando es requerido durante la construcción del objeto, lo que permite a atacantes remotos eludir la \"Same Origin Policy\" y realizar ataques de secuencias de comandos en sitios cruzados (XSS) mediante un documento manipulado, relacionado con una \"cross origin wrapper bypass.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.12",
            "matchCriteriaId" : "9C5F57C5-621B-44C2-93E1-244C813A3E62"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E135846-8959-4D7E-A8E6-07F0EC15F010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_debuginfo:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C76D0C17-2AFF-4209-BBCD-36166DF7F974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "513797E6-FCE6-4E84-9B66-202541F9601E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6C1408-671A-4436-A825-12170CFB5C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F13F07CC-739B-465C-9184-0E9D708BD4C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-40.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=479288",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=481434",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=497102",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9497",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1162.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-40.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=479288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=481434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=497102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-22T18:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Research In Motion (RIM) BlackBerry 8800 allows remote attackers to cause a denial of service (memory consumption and browser crash) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."
      }, {
        "lang" : "es",
        "value" : "Research In Motion (RIM) BlackBerry v8800 permite a atacantes remotos causar una denegación de servicio (consumo de memoria y caída del buscador) a través un valor entero grande en la propiedad \"length\" de un objeto \"Select\", siendo un asunto relacionado con CVE-2009-1692."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:rim:blackberry_8800:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33AAAF6B-B7AB-4BBB-B23C-95F54555706C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2009-July/069772.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2009-July/069772.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-22T18:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479.  NOTE: it was later reported that 7.0.6000.16473 and earlier are also affected."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer v6.0.2900.2180 y anteriores permite a atacantes remotos causar una denegación de servicio (consumo de memoria y CPU) a través de un argumento de cadena de caracteres Unicode larga para el método de escritura, siendo un asunto relacionado con CVE-2009-2479."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:*:*:mac\\+os:*:*:*:*:*",
            "matchCriteriaId" : "0707D29A-7F34-49F5-B301-66E6AB0910BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:*:*:mobile:*:*:*:*:*",
            "matchCriteriaId" : "5307C089-099E-4E5B-B19E-2880C9FAA4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:2.0:*:mac\\+os:*:*:*:*:*",
            "matchCriteriaId" : "88771C30-6BF2-4D37-8EFA-0EECF55EC080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:2.0_beta:*:mac\\+os:*:*:*:*:*",
            "matchCriteriaId" : "DF0BFC00-6549-431F-BE37-E4509A13162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:3.0:*:mac\\+os:*:*:*:*:*",
            "matchCriteriaId" : "D94D0C3A-FAE3-4EE3-9B58-D2ADB98661F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:3.0:*:mac_os:*:*:*:*:*",
            "matchCriteriaId" : "2277E59E-D981-4D9D-8FC0-F124FB8B9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:3.0.1:*:windows_95:*:*:*:*:*",
            "matchCriteriaId" : "731F2F05-A1BB-4BE8-B761-EE04ED6ABBE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:3.01:*:mac\\+os:*:*:*:*:*",
            "matchCriteriaId" : "0FAE41C7-AACF-40F0-A818-AD77F5FC2E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:3.1:*:mac_os:*:*:*:*:*",
            "matchCriteriaId" : "C6CB69E1-189F-425C-9023-DE2741669507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:4.0:*:mac\\+os:*:*:*:*:*",
            "matchCriteriaId" : "ACAAD50F-B9F0-4CD8-B681-A8F889E95946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:4.0:*:mac_os:*:*:*:*:*",
            "matchCriteriaId" : "B1C0170E-9574-4C90-94F3-F2C2851E2917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:4.0:*:windows_98:*:*:*:*:*",
            "matchCriteriaId" : "D0BDA2A8-EBB9-47AB-9DA0-5C24527F7210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:4.0:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "077B638C-F14D-4048-86C8-B62517C5182F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:4.0:a:*:*:*:*:*:*",
            "matchCriteriaId" : "EB817B2B-6F65-4989-9177-153518F32894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:4.0.1:*:mac_os:*:*:*:*:*",
            "matchCriteriaId" : "D4A15873-B3D2-4017-99CF-E3625FD227F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:4.0.1:*:windows_95:*:*:*:*:*",
            "matchCriteriaId" : "5680FE7F-95EE-46B2-B930-4A3DC27FD1A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:4.0.1:*:windows_98:*:*:*:*:*",
            "matchCriteriaId" : "ACC3A8B3-4E8C-46BD-965C-4EF655B9018D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:4.0.1:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "F7739338-DAE1-403F-B22C-2CFAC884E09A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:4.0a:*:mac\\+os:*:*:*:*:*",
            "matchCriteriaId" : "D33EA2D3-B139-42E3-A0EE-F5CEE1A5CDE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:4.1:*:windows_95:*:*:*:*:*",
            "matchCriteriaId" : "D45C47A8-8B5F-4A49-8B36-FCBA09029375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:4.1:*:windows_98:*:*:*:*:*",
            "matchCriteriaId" : "0CFF1B46-BEDD-4D96-90EA-EE4376AFCAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:4.1:*:windows_nt_4.0:*:*:*:*:*",
            "matchCriteriaId" : "84730D4D-7887-4A64-8C76-F50C85309FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:4.5:*:mac_os:*:*:*:*:*",
            "matchCriteriaId" : "822AC264-EF4E-4CEC-A210-74166883A8B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:4.5:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "55EAB232-C39A-4737-85F3-3D727C727F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:4.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45091F51-BA28-4FEB-9F84-58AC2E1DB48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5:*:windows_nt_4.0:*:*:*:*:*",
            "matchCriteriaId" : "7AAA310C-7DED-40B3-B5EF-80C7407BB01A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0:*:mac\\+os:*:*:*:*:*",
            "matchCriteriaId" : "77C7AB44-B436-48D7-B9CE-ED4B40FE8E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0:*:macos:*:*:*:*:*",
            "matchCriteriaId" : "D3F350E9-3677-43B3-984F-DA39397D6885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0:*:mobile:*:*:*:*:*",
            "matchCriteriaId" : "A71EC272-AA18-4D4D-B8E5-B9FC6D8E7DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D2CFDA81-A703-4330-88B0-F3F18B3BB7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0:*:windows_95:*:*:*:*:*",
            "matchCriteriaId" : "0CE25503-0EDA-4AFA-A4B8-36396BB4A4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0:*:windows_98:*:*:*:*:*",
            "matchCriteriaId" : "376DA3A6-FAB8-4B18-B9D9-C176675C7671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0:*:windows_nt_4.0:*:*:*:*:*",
            "matchCriteriaId" : "9CD5EAB0-B400-41C6-B96E-B7594DB0226F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26125C2-2476-43E8-8878-8C1A5A8B244F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "FED6949F-54D0-4D36-B6A8-59EBFA2611E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0.1:*:windows_2000:*:*:*:*:*",
            "matchCriteriaId" : "9F9AE3DB-EB7C-4B17-AF7A-CD8FC3C77070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0.1:*:windows_95:*:*:*:*:*",
            "matchCriteriaId" : "151FE30E-9320-495C-84AD-60893FAED223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0.1:*:windows_98:*:*:*:*:*",
            "matchCriteriaId" : "5805FB74-2AD6-4919-BAAE-D995CA2650A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0.1:*:windows_nt_4.0:*:*:*:*:*",
            "matchCriteriaId" : "0D328337-A2FE-4E2E-8A8D-C170DC0A88E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0_ta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A086C4BD-F015-45F9-AF24-763F0FDF4268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.1:*:mac\\+os:*:*:*:*:*",
            "matchCriteriaId" : "7CCA85F0-B084-4788-81FD-7E22B6905468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.1:*:mac_os:*:*:*:*:*",
            "matchCriteriaId" : "4CF91C2F-EE6D-4C9E-8F39-1F632399EC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.01:*:windows_server_2003:*:*:*:*:*",
            "matchCriteriaId" : "C81BBD0A-0A4D-4238-9526-3738DAE69E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.1.1:*:mac\\+os:*:*:*:*:*",
            "matchCriteriaId" : "1B4B8AA3-5DA4-4E90-8939-1E1B834BD321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.1.7:*:mac\\+os:*:*:*:*:*",
            "matchCriteriaId" : "B1096B7C-07C8-4EA0-BD2F-11844D424EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.2:*:mac\\+os:*:*:*:*:*",
            "matchCriteriaId" : "E078D001-060D-46A6-B339-4C6D56E7E675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.2.3:*:mac\\+os:*:*:*:*:*",
            "matchCriteriaId" : "BBEC9FD1-62D9-4F2C-928B-B1292FD784A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.2.3:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "EB51F2D6-3CCA-4695-8A92-39999749B3DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226A1B77-A80E-4ADE-8318-749CD1AD7CD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0DCFCBD-8EDF-47B5-823F-5E05CD22AF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:*:microsoft_windows_server_2003_sp1:*:*:*:*:*",
            "matchCriteriaId" : "12D23F59-5C49-4DE0-85E8-15287140660D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:*:windows_2000:*:*:*:*:*",
            "matchCriteriaId" : "CD115D64-87D8-4868-B247-16B83591B7FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:*:windows_server_2003:*:*:*:*:*",
            "matchCriteriaId" : "11A09F26-5FE3-4879-9FCB-769F8FB3D067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:*:windows_xp_professional_64bit:*:*:*:*:*",
            "matchCriteriaId" : "8EF317BB-E63A-4A60-A2E1-6797A402D88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_2000:*:*:*:*:*",
            "matchCriteriaId" : "0FBE3FC4-569D-4855-A8C2-AA5B19347C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_98:*:*:*:*:*",
            "matchCriteriaId" : "B1D7486F-1B6C-4705-B73C-F763F36F5150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_98_se:*:*:*:*:*",
            "matchCriteriaId" : "6DBFDCF4-ACC7-4196-BA4D-2A35FAA5E1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_millennium:*:*:*:*:*",
            "matchCriteriaId" : "5E49636B-A425-4595-9663-A22A9F7C7D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_xpsp1:*:*:*:*:*",
            "matchCriteriaId" : "FCFF1342-8AD8-4003-81AA-09DB4A12EEBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.2900.2180",
            "matchCriteriaId" : "DD2BF527-F6EB-4E46-9B33-B97795CCF74E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF9241-A175-438C-A793-3D245BE2AE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F62AC866-A06F-47DB-AEDF-E345CE0B14A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "943D5C5C-FC49-4EDE-AE75-A79CFF42208E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59EB6841-0427-479B-8771-06DF62EE3C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8873A08F-D4C7-46FC-8FE5-972644F85ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B815D9-BC21-4A17-AF00-B8AD181027D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42502347-DD40-4F8C-9861-C0A88A3F8608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF9C64F-9A67-4BA9-A653-75507935E6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "C375A9AA-505B-444C-A45F-2BAAD0B2CD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D82B89-456D-41CB-A894-B6A22FB4415D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FF4E47-AD75-42C7-BB84-42BBA46A58B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.01:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E21CE6E-2B33-4225-B1DC-C19F1D578040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B26CE22-E730-4247-853E-5E640DB3ECB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.40.308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A652453-AB5F-405C-ABDE-CE1B54FEACED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.40.520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141080AB-48DE-4885-BAB6-6F0937ABD49B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB758D76-B7F6-4E87-B88D-620443655CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1158:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28655AC5-1512-4F45-9963-CA26F73981CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1215:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00F4F36-B88A-4FDB-BE52-83C6EF60BDB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC05584-F553-4D29-9C46-C9EE5F0CB166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3F79B8-512A-4B88-868C-7C4ADFD223C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "078C3A86-C9F8-4A19-9DDC-1065B54E640F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9030923C-356E-4FAB-8E64-03D462B4DB5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0FFABC-8BED-4838-85FE-406DC9CF9B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DB4A00-4F70-4189-81BD-9318C52DF2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4071D03-D955-4C1B-ACD8-A864F7D0FA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B8985B-B927-4928-B1DB-18E29F796992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04FEA6-37B0-44B0-844F-55652ABA1F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56FB8E-2553-47C1-82A2-9E59023780CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8541EEED-94F4-42F8-9719-57F3EC85D52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFE8C8E-F46C-4179-AE83-CE4720C8E0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61125B09-23AA-4D5A-8332-6B5CCD80C7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AECF59F-B3C0-44CC-B77A-30E32B3E8BB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2516.1900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E215C82-E4AD-4B87-92D8-DD4D486EB6EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F4C80-3B1B-45BD-966F-C9DBF98B875D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65E0DC1-40F6-4252-945A-A972343D1E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC57519-AD96-4ECF-A5B2-4E45F7D55298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37DE3DE6-A355-41F2-BF5E-E7526449E753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB24B4F-44FF-4F0F-90FA-240A34B9599F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "919A6551-DB18-49BD-AB92-4C453B3B728F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C512DAB3-2720-42D2-B27E-28F30FE0FE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB90458F-1F2B-4F4C-88C6-4B670787D126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2EFDB4-97C2-4DDF-8A65-FCFB60FCB540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A99CDC7-9341-4DFB-BB18-FF06C05FF9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CFF390-FF33-45CA-BC96-C6766491C616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3BFFB565-F656-43E3-89E1-E412DC4C9D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F4336F0E-75FE-4592-9D98-4F689804956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA6E5E4B-9E95-4019-8622-6E707FEC2FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*",
            "matchCriteriaId" : "8E93C22E-812E-4CDA-9850-2386CE1E817A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA6BA38-8B3B-4B9A-95BF-BCD412DD83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BD2A05-3FCE-4C5D-8228-968630F27E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4430779C-C678-4950-AE9E-82CDFC1A08D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0EC334-AEAD-43CA-A609-C027060F4F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF320BE-F022-4E0E-9815-B8AEED87B384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75532B2D-6814-4D20-8AEB-E7DFD66B6423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83802E30-8E7D-4CAB-B8FC-10056CF833D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68656E52-AD8A-474E-9160-CD5F8857254B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F47C82-E767-47A8-88DE-417B004ED7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86E7189-CE21-4007-A3FA-39A6B51A5AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-07/0192.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3338/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505092/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505120/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505122/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-07/0192.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://websecurity.com.ua/3338/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505092/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505120/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505122/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-22T18:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera 9.52 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption, and application hang) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479."
      }, {
        "lang" : "es",
        "value" : "Opera v9.52 y anteriores permite a atacantes remotos causar una denegación de servicio (consumo de memoria y CPU, y colgado de aplicación) a través de un argumento de cadena de caracteres Unicode para el método de escritura, siendo un asunto relacionado con CVE-2009-2577."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.52",
            "matchCriteriaId" : "BC7CF5F1-7CB8-4E77-8462-CE1BF0591D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C35850-B79C-4EE4-A6F2-CC5D2304724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7965089-8592-47F2-958B-7DBE669BCAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1750B2D-7AC8-45CF-9879-1D0476EEE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE4473-88C0-4E28-A5B5-F7383B0E5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC41D6-73D4-44E9-87E4-E1E955B9580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5A5E5-3703-44AC-9963-A20A55002B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3E5BEF-3F29-4929-A37C-C49322B19047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0E7B5D-2568-4128-8F99-E74D24A7E991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A04906-7267-4A09-87BF-D639C7CF315B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E48C83-01AE-4A33-A004-14B99792674C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A2B78-70BD-439B-B1ED-A17FA5EF0990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623E4466-82CC-4BDD-BE25-3BB33B585547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECA190-D7D3-4248-A61E-0D87E67E3D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC4250E-E638-4015-B5EF-7B5405F7FBFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3338/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505092/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3338/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505092/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-22T18:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service (application crash) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479."
      }, {
        "lang" : "es",
        "value" : "Google Chrome v2.x a 2.0.172 permite a atacantes remotos causar una denegación de servicios (caída de aplicación)a través de un argumento de cadena de caracteres Unicode larga para el método de escritura, siendo un asunto relacionado con CVE-2009-2479."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F95770-F36F-43C0-986F-5C819648271E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCE1FD3-8D27-4304-97F9-6F9689F2498D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6CA696-49AA-4445-B978-96C1D8CE58DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CFA3BF-6C07-448B-8C83-AD4C524A6577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8497F93-D88A-4FFA-B988-7210608530A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CDF938-2998-403F-B343-29B620E05D44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3338/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505092/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3338/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505092/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-23T19:30:01.093",
      "lastModified" : "2023-11-07T02:04:10.407",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-1862.  Reason: This candidate is a duplicate of CVE-2009-1862.  Notes: All CVE users should reference CVE-2009-1862 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ],
      "evaluatorImpact" : "Per http://www.kb.cert.org/vuls/id/259425\r\n\r\n\"Adobe Flash is a widely deployed multimedia platform typically used to provide content in web sites. Adobe Flash Player, Reader, Acrobat, and other Adobe products include Flash support.\r\n\r\nAdobe Flash Player contains a code execution vulnerability. An attacker may be able to trigger this vulnerability by convincing a user to open a specially crafted Flash (SWF) file. The SWF file could be hosted or embedded in a web page or contained in a Portable Document Format (PDF) file. If an attacker can take control of a website or web server, trusted sites may exploit this vulnerability.\r\n\r\nThis vulnerability affects Adobe Flash versions 9.0.159.0 and 10.0.22.87 and earlier 9.x and 10.x versions. Adobe Reader 9, Acrobat 9, and other Adobe products (including Photoshop CS3, PhotoShop Lightroom, Freehand MX, Fireworks) provide Flash support independent of Flash Player. As of 2009-07-22, Adobe Reader 9.1.2 includes Flash 9.0.155.0, which is likely vulnerable to issues addressed by Flash 9.0.159.0 \""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-23T19:30:01.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in modifier.php in EditeurScripts EsNews 1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS)en EditeurScripts EsNews v1.2 permite a atacantes remotos inyectar código web o HTML a su elección a través del parámetro msg."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:editeurscripts:esnews:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E2E7D1-3574-40E4-A85F-23E11DEBF3A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstorm.linuxsecurity.com/0903-exploits/editeurscripts-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0903-exploits/editeurscripts-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-23T20:30:00.233",
      "lastModified" : "2026-04-22T14:13:33.500",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Adobe Reader , Acrobat de la v9.x a la v9.1.2 y Adobe Flash Player v9.x a la v9.0.159.0 y v10.x a la v10.0.22.87, permite a atacantes remotos ejecutar código de su elección a través de (1)una aplicación flash manipulada en un archivo .pdf o (2) un archivo .swf. Relacionado con el authplay.dll, como se ha explotado públicamente en julio del 2009."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-06-08",
      "cisaActionDue" : "2022-06-22",
      "cisaRequiredAction" : "For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.",
      "cisaVulnerabilityName" : "Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndIncluding" : "9.1.2",
            "matchCriteriaId" : "B9BDD6C1-0E21-40D1-9C94-C8D79F6AA217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndIncluding" : "9.1.2",
            "matchCriteriaId" : "D3D940BB-0388-471A-9691-CABE00466068"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndIncluding" : "9.0.159.0",
            "matchCriteriaId" : "452F2EAC-9EFB-4899-8F2F-A1EE2B796BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndIncluding" : "10.0.22.87",
            "matchCriteriaId" : "5113E8EC-D47F-4BAE-855E-915FA8870AE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.adobe.com/psirt/2009/07/potential_adobe_reader_and_fla.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.adobe.com/jira/browse/FP-1265",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=6847",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://news.cnet.com/8301-27080_3-10293389-245.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/advisories/apsa09-03.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/259425",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35759",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-072209-2512-99",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.symantec.com/connect/blogs/next-generation-flash-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://blogs.adobe.com/psirt/2009/07/potential_adobe_reader_and_fla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.adobe.com/jira/browse/FP-1265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=6847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://news.cnet.com/8301-27080_3-10293389-245.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/advisories/apsa09-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/259425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-072209-2512-99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.symantec.com/connect/blogs/next-generation-flash-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-1862",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ],
      "evaluatorImpact" : "Per: http://www.kb.cert.org/vuls/id/259425\r\n\r\n\"Adobe Flash is a widely deployed multimedia platform typically used to provide content in web sites. Adobe Flash Player, Reader, Acrobat, and other Adobe products include Flash support.\r\n\r\nAdobe Flash Player contains a code execution vulnerability. An attacker may be able to trigger this vulnerability by convincing a user to open a specially crafted Flash (SWF) file. The SWF file could be hosted or embedded in a web page or contained in a Portable Document Format (PDF) file. If an attacker can take control of a website or web server, trusted sites may exploit this vulnerability.\r\n\r\nThis vulnerability affects Adobe Flash versions 9.0.159.0 and 10.0.22.87 and earlier 9.x and 10.x versions. Adobe Reader 9, Acrobat 9, and other Adobe products (including Photoshop CS3, PhotoShop Lightroom, Freehand MX, Fireworks) provide Flash support independent of Flash Player. As of 2009-07-22, Adobe Reader 9.1.2 includes Flash 9.0.155.0, which is likely vulnerable to issues addressed by Flash 9.0.159.0\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-23T20:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager) before 2.2.4.8 allows remote web servers to execute arbitrary code via a malformed HTTP response during a Redswoosh download, a different vulnerability than CVE-2007-1891 and CVE-2007-1892."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en manager.exe en Akamai Download Manager(también conocido como DLM or dlmanager) anterior a v2.2.4.8, permite  a servidores web remotos ejecutar código de su elección mediante una respuesta HTTP mal formada durante la descarga de un \"Redswoosh\". Vulnerabilidad distinta de CVE-2007-1891 y CVE-2007-1892."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akamai_technologies:download_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.4.3",
            "matchCriteriaId" : "409FC315-CB14-4513-BC7A-7AC4E1366CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akamai_technologies:download_manager:2.0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54E2F00F-72B4-430C-B13F-8248C049C582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akamai_technologies:download_manager:2.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CEC0560-A48B-4904-9A0F-D43098C62A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akamai_technologies:download_manager:2.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F32F96A-0597-4114-A444-1308A9D916E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akamai_technologies:download_manager:2.2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945F5C3E-83A6-46E3-B8F5-CF2C4F3A9427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akamai_technologies:download_manager:2.2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12AF7DEE-67C5-45F8-8F74-8B4B2D1199FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0351.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=813",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35951",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.akamai.com/html/support/security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505187/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35778",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1985",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0351.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.akamai.com/html/support/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505187/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-23T20:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the (1) console and (2) self service interfaces."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de fijación de sesión en IBM Tivoli Identity Manager (ITIM) v5.0.0.6 permite a atacantes remotos secuestrar sesiones web mediante vectores no definidos relacionados con (1)la consola y (2) la interfaz de servicio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_identity_manager:5.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95053FE3-56DD-44A8-A2F7-CEC2CFF9D927"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35931",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55659",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24023826",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35779",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1990",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24023826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-23T20:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the options_write function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux kernel 2.6.30.2 and earlier on ia64 and x86 platforms might allow local users to overwrite arbitrary memory locations and gain privileges via a crafted count argument, which triggers a stack-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Error de superación de límite (Off-by-one) en la función drivers/misc/sgi-gru/gruprocfs.c en el controlador SGI GRU en el kernel de Linux v2.6.30.2 y anteriores en plataformas ia64 y x86 pueden permitir a usuarios locales escribir posiciones de memoria a su elección y obtener privilegios a través de argumentos de cuenta manipulados, provocando un desbordamiento de búfer basado en pila.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.30.2",
            "matchCriteriaId" : "92943208-3701-4CF7-B9D6-6F4CA8BC9624"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://grsecurity.net/~spender/exploit_demo.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/7/20/348",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/7/20/362",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35753",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://xorl.wordpress.com/2009/07/21/linux-kernel-sgi-gru-driver-off-by-one-overwrite/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51887",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://grsecurity.net/~spender/exploit_demo.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/7/20/348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/7/20/362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://xorl.wordpress.com/2009/07/21/linux-kernel-sgi-gru-driver-off-by-one-overwrite/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG.",
        "lastModified" : "2009-07-27T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2585",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-24T16:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Mlffat 2.2 allows remote attackers to execute arbitrary SQL commands via a member cookie in an account editprofile action, a different vector than CVE-2009-1731."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en index.php en Mlffat v2.2 permite a atacantes remotos ejecutar comandos SQL a través de la cookie member en la acción de la cuenta editprofile, un vector diferente que CVE-2009-1731."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlffat:mlffat:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8A6229-83D6-477D-8AE6-D7AFAC82AD97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35728",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-24T16:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in articles.php in EDGEPHP EZArticles allows remote attackers to inject arbitrary web script or HTML via the title parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en articles.php en EDGEPHP EZArticles permite a atacantes remotos inyectar código web o HTML a su elección a través del parámetro title."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgephp:ezarticles:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A03BA55-4DB5-492B-998B-4BDDF0E253C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56002",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/ezarticles-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35924",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/ezarticles-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-24T16:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in DragDropCart allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to assets/js/ddcart.php, the (2) prefix parameter to includes/ajax/getstate.php, the search parameter to (3) index.php and (4) search.php, the (5) redirect parameter to login.php, and the (6) product parameter to productdetail.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS)en DragDropCart permite a atacantes remotos inyectar código web y HTML a su elección a través del parámetro sid de includes/ajax/getstate.php, el parámetro search en(3) index.php y(4) search.php, el parámetro (5) redirect en login.php, y el(6) parámetro product en productdetail.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dragdropcart:dragdropcart:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D087A94D-8F57-44C7-9ADA-DAB8ABC4CAB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/dragdopcart-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35925",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/56066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/56067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/56069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/56070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/56071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/dragdopcart-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/56066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/56067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/56069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/56070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/56071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-24T16:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) feedback.php, (2) index.php, and (3) lostpassword.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS)en Hotscripts Type PHP Clone Script permite a atacantes remotos inyectar código web y HTML a su elección a través del parámetro msg de (1) feedback.php, (2) index.php, y (3) lostpassword.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resalecode:hotscripts_type_php_clone_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD945D4-937E-4BB1-BA33-03D8ACE70F86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/hotscriptsclone-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35892",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1979",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/hotscriptsclone-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-24T16:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Hutscripts PHP Website Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) feedback.php, (2) index.php, and (3) lostpassword.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS)en Hutscripts PHP Website Script permite a atacantes remotos inyectar código web y HTML a su elección a través del parámetro msg de (1) feedback.php, (2) index.php, y(3) lostpassword.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resalecode:hutscripts_php_website_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBEE65-51DF-48DB-B891-05F10C88449A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/hutscript-sqlxss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35893",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1978",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/hutscript-sqlxss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-24T16:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in showcategory.php in Hutscripts PHP Website Script allows remote attackers to execute arbitrary SQL commands via the cid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en showcategory.php en Hutscripts PHP Website Script permite a atacantes remotos ejecutar comandos SQL a través del parámetro cid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resalecode:hutscripts_php_website_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBEE65-51DF-48DB-B891-05F10C88449A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/hutscript-sqlxss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35893",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1978",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/hutscript-sqlxss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-24T16:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the MyAnnonces module for E-Xoopport 3.1 allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewannonces action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en el módulo MyAnnonces de E-Xoopport v3.1 permite a atacantes remotos ejecutar comandos SQL a través del parámetro lid en la acción viowannonces de index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:myannonces:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFB5009-A9E3-47EF-8E97-9C7FC6B85DFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:e-xoopport:e-xoopport:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA4DA8F-7AEB-4F60-8250-3B1B434382A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35744",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-24T16:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in guestbook.php in PHPJunkYard GBook 1.6 allows remote attackers to execute arbitrary SQL commands via the mes_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en guestbook.php en PHPJunkYard GBook v1.6 permite a atacantes remotos ejecutar comandos SQL a través del parámetro mes_idnen."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpjunkyard:gbook:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D09636-9061-41D8-9300-2C424FE3D94A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-24T16:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in censura.php in Censura 1.16.04 allows remote attackers to execute arbitrary SQL commands via the itemid parameter in a details action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en censura.php en Censura v1.16.04 permite a atacantes remotos ejecutar comandos SQL a través del parámetro itemid en la acción details."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:censura:censura:1.16.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348144D9-560A-44C9-8EBB-6171408E714D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35787",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35637",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-24T16:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in censura.php in Censura 1.16.04 allows remote attackers to inject arbitrary web script or HTML via the itemid parameter in a details action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en censura.php en Censura v1.16.04  permite a atacantes remotos inyectar código web o HTML a su elección a través del parámetro itemd en la acción details."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:censura:censura:1.16.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348144D9-560A-44C9-8EBB-6171408E714D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35787",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35637",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-24T16:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in productSearch.html in Censura 2.0.4 and 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a ProductSearch action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en productSearch.html en Censura v2.0.4 y v2.1.0  permite a atacantes remotos inyectar código web o HTML a su elección a través del parámetro q en la acción ProductSearch."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:censura:censura:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D69A20-D34C-4621-87F1-71FF8506BD49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:censura:censura:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64093539-34C8-4B92-8967-EC7D115996BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35795",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.censura.info/forums/project.php?issueid=151",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.censura.info/forums/showthread.php?t=969",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.censura.info/forums/project.php?issueid=151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.censura.info/forums/showthread.php?t=969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T14:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to fad_aupath structure members."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el subsistema Solaris Auditing en Sun Solaris v9 y v10 y OpenSolaris anteriores a snv_121, cuando los atributos extendidos de ficheros son utilizados, permite a usuarios locales producir una denegación de servicio (panic) a través de vectores relacionados con los miembros estructurales fad_autpath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_120",
            "matchCriteriaId" : "5595B6BF-AB51-4BCB-A2D7-0E77DEAE22BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B3BBCE23-9F15-45CD-859F-77ED540B51F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "053A0DA6-483C-49BB-BC7A-E624DB2C269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "447212A4-FACD-475E-A62B-60FE6504F63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB694DC0-407A-4555-8B72-DAF3C169DCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "535FF689-13A2-40C6-8706-7782038FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "843246D3-C2DA-454D-916A-AC8905E5134E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "244B7FE4-C485-4993-9810-3433C83A120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BE586AB9-9D46-4BC2-8092-51482F297410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_120",
            "matchCriteriaId" : "C6D14446-9EFC-4C91-A313-5FB28E52A50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "78B80C92-7EB5-4343-B830-32E8C011E572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "46E4ED9C-F013-48D2-8642-E5BA7599A512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A1E8108D-3CE7-4041-9027-1CA7473389EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E8585133-1F25-494A-8859-87B1D93305A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35980",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-39-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264428-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35787",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-39-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264428-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T14:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Sun Java System (SJS) Access Manager Policy Agent module 2.2 for SJS Web Proxy Server 4.0 allows remote attackers to cause a denial of service (daemon crash) via a GET request."
      }, {
        "lang" : "es",
        "value" : "El modulo Sun Java System (SJS) Access Manager Policy Agent v2.2 para el servidor proxy web SJS v4.0 permite a atacantes remotos producir una denegación de servicio (caída de demonio) a través de una petición GET."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager_policy_agent:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56354C0A-A653-4458-8C9F-F3B8ACA40D85"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sun:java_system_web_proxy_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8D89B7-2C74-4CDC-8708-D9FACC4DE7C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35979",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141248-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-258508-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141248-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-258508-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T14:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to execute arbitrary SQL commands via the key parameter in a resetpass action to index.php and (2) remote authenticated users to execute arbitrary SQL commands via the ADD parameter in a mailto action to parents/parents.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Online Grades & Attendance v3.2.6 y anteriores permite (1) a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro \"key\" en una acción \"resetpass\" en index.php y (2) usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través del parámetro ADD en una acción \"mailto\" a parents/parents.php"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlinegrades:online_grades:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B542E8BE-F97B-456C-8332-F9F5D23B97ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35304",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503943/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503943/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T14:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in RadCLASSIFIEDS Gold 2.0 allows remote attackers to execute arbitrary SQL commands via the seller parameter in a search action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en RadCLASSIFIEDS Gold v2.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"seller\" en una búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radscripts:radclassifieds:2.0:*:gold:*:*:*:*:*",
            "matchCriteriaId" : "38FBC44E-0BCC-45E6-9052-03886F818EBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35287",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T14:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the topic parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en view.php en Webboard v2.90 beta y anteriores permite a atacantes remotos leer ficheros de forma arbitraria a través de .. (punto punto) en el parámetro \"topic\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akiva:webboard:*:beta:*:*:*:*:*:*",
            "versionEndIncluding" : "2.90",
            "matchCriteriaId" : "8319D338-3589-4D11-BBDD-47EFB107F967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T14:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Joomlaequipment (aka JUser or com_juser) component 2.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a show_profile action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente Joomlaequipment (conocido también como JUser o com_juser) v2.0.4 para Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"id\" en una acción en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomlaequipment:juser:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FB5369-4373-4303-8D8F-36A241970D21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T14:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "R2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for admin.mdb."
      }, {
        "lang" : "es",
        "value" : "R2 Newsletter Lite, Pro, y Stats almacena información sensible bajo la raíz de la web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar el fichero de la base de datos a a traves de una petición directa a admin.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:r2newsletter:r2_newsletter_lite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83ED9EE8-E511-4841-AD6E-AE03FEF54573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:r2newsletter:r2_newsletter_pro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79D4B472-56AA-4C7D-BE03-710219DB4728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:r2newsletter:r2_newsletter_stats:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9553DD-AA1F-453B-A256-6D933C65C918"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35312",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T14:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat and (2) tid parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en index.php en Escon SupportPortal Pro v3.0 permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través de los parámetros (1) \"cat\" y (2) \"tid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-supportportal:escon_supportportal_pro:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585B90E6-CFFF-4976-ABCA-D8DD520CD51C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35300",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T14:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) userid (aka username) and (2) PassWord parameters to admin.asp."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en adminlogin.asp en Zen Help Desk v2.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) \"userid\" (también conocido como username) y (2) \"PassWord\" en admin.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zenhelpdesk:zen_help_desk:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07744209-6D2D-49EB-9BD6-B260405912DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T14:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in adminquery.php in Traidnt Up 2.0 allow remote attackers to execute arbitrary SQL commands via (1) trupuser and (2) truppassword cookies to uploadcp/index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en adminquery.php en Traidnt Up v2.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante las cookies (1) trupuser y (2) truppassword de uploadcp/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:traidnt:traidnt_up:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064F5211-3877-4FF7-96F7-F62AB91EC79B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35273",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/54809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T14:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for NFL.mdb."
      }, {
        "lang" : "es",
        "value" : "ASP Football Pool v2.3 almacena información sensible en el directorio web raíz con medidas de control de acceso insuficientes, permitiendo a atacantes remotos descargar el fichero de base de datos mediante una petición directa de NFL.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brainjar:asp_football_pool:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EDCB59-DF2D-4384-8D1E-DE1A73C188AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35317",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T18:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the com_pinboard component for Joomla! allows remote attackers to execute arbitrary SQL commands via the task parameter in a showpic action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente com_pinboard para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"task\" en una acción \"showpic\" de index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pinme:com_pinboard:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B12C09A-A25B-408A-B81E-98C7BBE2C780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35493",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T18:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to delete.php or (2) alphabet parameter to index.php.  NOTE: the edit.php and view.php vectors are already covered by CVE-2008-2565."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en PHP Address Book versiones 4.0.x, permiten a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del (1) parámetro id en el archivo delete.php o (2) parámetro alphabet en el archivo index.php. NOTA: los vectores edit.php y view.php ya están cubiertos por el CVE-2008-2565."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chatelao:php_address_book:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB55AC9-5FE9-4D82-96F6-55BA869DED41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chatelao:php_address_book:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42B80912-2590-41E4-9F02-94F830E5829C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35590",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504595/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35511",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504595/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T18:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the amoCourse (com_amocourse) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente amoCourse (com_amocourse) para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"catid\" en una acción \"category\" en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amotools:com_amocourse:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0F86D5-C5AF-4F58-AB29-F9738C2318F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35489",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T18:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Links Related module in the Links Package 5.x before 5.x-1.13 and 6.x before 6.x-1.2, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via the title field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Links Related en Links Package v5.x anteriores a v5.x-1.13 y v6.x anteioriores a v6.x-1.2, un módulo para Drupal, permite a usuarios autenticados remotamente inyectar secuencias de comandos web o HTML de su elección mediante el campo \"title\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:5.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF42B60-FF0D-4824-B621-455517E290E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:5.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA4491B-CCBB-4594-931E-CDDC18CB6BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:5.x-1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9156C955-E204-4B54-A7FE-A2CEB7E8363C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:5.x-1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BDD602-5B8D-43DA-9EA0-019A8477C016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:5.x-1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB8F37E-E322-40C7-A572-05D05AD30DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:5.x-1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0619C2-2C1E-4D4C-AF2B-93F38A469D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:5.x-1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C2CE34-B934-4F7D-ADA8-B662E607B1F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:5.x-1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B99C9DE3-C795-43E8-9D07-14687E6024DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:5.x-1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D6A00F-BC7F-43BD-8981-D8DE31FF4EE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:5.x-1.12-beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2D180A-55CB-4A80-B088-978FB1A71287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA07466-9279-4E4D-A9FE-3AB7BAFB4F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC93781-BDEA-4C09-AC8A-4324C14BE654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94F3C18-6126-4771-8541-9D1FC9DE2151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD38EFCD-1AED-4228-9F1D-104BEB35D51C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E37AA3-E7DE-4D45-A0DD-05A241F28A64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8881A192-E440-4985-86EF-BAF1CA1600EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4713EAE-1D3A-490C-BCD3-2509D1327801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39DB6A54-7A7C-4EEF-B5EE-FEE792631C52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024529DC-176A-4983-AD5E-37C0C84F89C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0B0B2D-AB37-42BC-AE76-4A292656772A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "011E93C3-F51A-4F77-9936-2213290E8A6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600A4B66-6A42-4403-A46E-379A251F848F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A349B2-AB84-442D-993B-F54A1F0D07A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E027A703-3F4A-454A-AE14-B800079255D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBB8DB1-554F-4984-AF00-04AD5003C545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_courtney:links_package:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D08C36D-76DF-4BAA-BEB7-B969E6F2EF1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/501356",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/501360",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/502112",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35557",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/501356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/501360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/502112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/55326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T18:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in infusions/last_seen_users_panel/last_seen_users_panel.php in MyFusion (aka MyF) 6 Beta, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the settings[locale] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en infusions/last_seen_users_panel/last_seen_users_panel.php en MyFusion (también conocido como MyF) v6 Beta, cuando está habilitado register_globals, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) en el parámetro \"settings[locale]\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gander:myfusion:6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "55FEB0B5-5137-4173-8B64-A8265CD2F0DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T18:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.aspx in ProSMDR allows remote attackers to execute arbitrary SQL commands via the txtUser parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en login.aspx en ProSMDR permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"txtUser\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prosmdr:prosmdr:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68ECF81-8485-474C-B392-DADBF6B5DF7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35614",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T18:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions LinkPal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) z_loginfailed.asp, (2) z_admin_login.asp, (3) z_forgot.asp, and possibly unspecified other components.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en DataCheck Solutions LinkPal v1.x permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"page\" de (1) z_loginfailed.asp, (2) z_admin_login.asp, (3) z_forgot.asp, y posiblemente otros componentes no especificados. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datachecknh:linkpal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0C1AF4-AA82-4E34-8721-015E4FEBE668"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35598",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T18:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions LinkPal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en z_admin_login.asp en DataCheck Solutions LinkPal v1.x permite a atacantes remotos ejecutar comandos SQL de su elección mediante vectores no especificados. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datachecknh:linkpal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0C1AF4-AA82-4E34-8721-015E4FEBE668"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35598",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T18:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) z_admin_login.asp, (2) z_forgot.asp, and possibly unspecified other components.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en DataCheck Solutions SitePal v1.x permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"page\" de (1) \"z_admin_login.asp\", (2) \"z_forgot.asp\", y posiblemente otros componentes no especificados. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datachecknh:sitepal:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED2D8E75-2BC8-4336-9B2C-A639C0497227"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35625",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T18:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en z_admin_login.asp en DataCheck Solutions SitePal v1.x  permite a atacantes remotos ejecutar comandos SQL de su elección mediante vectores no especificados. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datachecknh:sitepal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A11D9AD-3D55-4C16-B5F8-597E9F0A6DF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35625",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T18:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code via a long pathname in the source attribute of an item element in a .smpl playlist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en medialib.dll en BaoFeng Storm v 3.9.62, permite a atacantes remotos la ejecución de código de su elección a través de un nombre de ruta largo en el atributo \"source\" de un elemento \"item\" en un archivo de lista de reproducción .smpl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baofeng:storm:3.9.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AAFC8B7-8A7B-4A60-93F6-CDA6413F1991"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=124624413120440&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=124627617220913&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35592",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35512",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=124624413120440&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=124627617220913&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T18:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Surveys (aka NS-Polls) module in MDPro (MD-Pro) 1.083.x allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el módulo  Surveys (también conocido como NS-Polls) en MDPro (MD-Pro) v1.083.x, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"pollID\" en una acción \"results\" a modules.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:mdpro:1.083:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE6A970-9E23-430D-88C2-1B3B3B520646"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35495",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-27T18:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.asp in DataCheck Solutions V-SpacePal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en login.asp en DataCheck Solutions V-SpacePal, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datachecknh:v-spacepal:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "872D11ED-D2D8-4BAE-8740-AA487A7896BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35612",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2621",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-07-28T17:30:01.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce \"buffer limits and related bound checks,\" which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc."
      }, {
        "lang" : "es",
        "value" : "Squid desde v3.0 hasta v3.0.STABLE16 desde v3.1 hasta v3.1.0.11 no cumple adecuadamente con \"los limites de búfer y comprobaciones vinculadas,\" lo que permite a atacantes remotos producir una denegación de servicio a través de (1) una petición incompleta o (2) una petición con un tamaño largo de cabecera, relacionado con (a) HttpMsg.cc y (b) client_side.cc."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:pre1:*:*:*:*:*",
            "matchCriteriaId" : "CF9C0078-D06B-4174-AF2C-599638E5B29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:pre2:*:*:*:*:*",
            "matchCriteriaId" : "F1DD47BA-EA59-4DCC-BFF3-2DF0BC332CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:pre3:*:*:*:*:*",
            "matchCriteriaId" : "2BC1746D-BE02-4D04-B31D-95589EBD4C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:pre4:*:*:*:*:*",
            "matchCriteriaId" : "62C35710-215C-4B80-9304-665451F3C0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:pre5:*:*:*:*:*",
            "matchCriteriaId" : "76A7416C-64B2-4F52-93FD-9C504B7D4F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:pre6:*:*:*:*:*",
            "matchCriteriaId" : "17D51261-2071-4E8F-AD75-2ECCBE7F7C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:pre7:*:*:*:*:*",
            "matchCriteriaId" : "ACD9E084-007E-4C6A-8D30-2DC9B355D7B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable1:*:*:*:*:*",
            "matchCriteriaId" : "95912E0D-FACF-459B-94FB-334FDBCC292B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable10:*:*:*:*:*",
            "matchCriteriaId" : "2C455506-7FBF-4F0E-92E7-F074B74C10D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable11:*:*:*:*:*",
            "matchCriteriaId" : "67288E3E-88BF-44CE-84EF-1BF98E8C38CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable12:*:*:*:*:*",
            "matchCriteriaId" : "B428BDA9-8C83-4DE3-9391-17AFD5D750BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable13:*:*:*:*:*",
            "matchCriteriaId" : "DC57EAB8-BFEF-4FE2-8ADB-D196EAE3E51D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable14:*:*:*:*:*",
            "matchCriteriaId" : "935F2BDE-7F76-4E13-8318-37CE97B7948F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable15:*:*:*:*:*",
            "matchCriteriaId" : "354599A2-5FCF-4F5A-85AE-00505D32B9BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable2:*:*:*:*:*",
            "matchCriteriaId" : "1F1BC7B9-9CD1-42E9-84BB-BEE3668BAAA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable3:*:*:*:*:*",
            "matchCriteriaId" : "88E3716B-863A-40D4-A7D9-F2A288B87394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable4:*:*:*:*:*",
            "matchCriteriaId" : "02FB3C5B-95F1-4839-8F68-649AFA2FEB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable5:*:*:*:*:*",
            "matchCriteriaId" : "631CBA69-B2A1-4522-A330-6A87CCBC682C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable6:*:*:*:*:*",
            "matchCriteriaId" : "0FE7885D-D1EB-4543-B342-80BC645EE8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable7:*:*:*:*:*",
            "matchCriteriaId" : "B7C4AE0E-9608-4D24-8EA3-0F33A5D95A5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable8:*:*:*:*:*",
            "matchCriteriaId" : "628344A8-42AE-4AD7-89A2-66711490AB30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable9:*:*:*:*:*",
            "matchCriteriaId" : "3260A290-9F63-4E5C-BEF2-015E9491AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:rc1:stable11:*:*:*:*:*",
            "matchCriteriaId" : "4F830353-C4E4-4DAF-B7ED-1B0BAE9F3253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "131C4C00-3811-42BF-A84A-EB2E5DA156B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A8586AD-E820-4BAE-AAF9-AC7EF2316C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802E3D2B-90B7-4725-854F-4174116BC314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7501697A-BCFD-4DC3-8D87-CC9A186D9589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6C4455-85F4-462D-9FF6-F830ED7D398E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B600BF4C-8169-4086-BFE6-F066BE5F5406"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36007",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:161",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:178",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35812",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022607",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.squid-cache.org/Advisories/SQUID-2009_2.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v3/3.1/changesets/b9654.patch",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2013",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/36007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Advisories/SQUID-2009_2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v3/3.1/changesets/b9654.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of squid as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
        "lastModified" : "2009-08-06T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2622",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-07-28T17:30:01.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) \"missing or mismatched protocol identifier,\" (2) missing or negative status value,\" (3) \"missing version,\" or (4) \"missing or invalid status number,\" related to (a) HttpMsg.cc and (b) HttpReply.cc."
      }, {
        "lang" : "es",
        "value" : "Squid desde v3.0 hasta v3.0.STABLE16 y desde v3.1 hasta v3.1.0.11 permite a atacantes remotos producir una denegación de servicio a través de peticiones mal formadas que incluyen (1) \"identificador de protocolo perdido o mal utilizado,\" (2) \"valor de estatus perdido o negativo,\" (3) \"versión perdida,\" o (4) \"número de estatus perdido o inválido\", relacionado con HttpMsg.cc y (b) HttpReply.cc."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:pre1:*:*:*:*:*",
            "matchCriteriaId" : "CF9C0078-D06B-4174-AF2C-599638E5B29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:pre2:*:*:*:*:*",
            "matchCriteriaId" : "F1DD47BA-EA59-4DCC-BFF3-2DF0BC332CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:pre3:*:*:*:*:*",
            "matchCriteriaId" : "2BC1746D-BE02-4D04-B31D-95589EBD4C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:pre4:*:*:*:*:*",
            "matchCriteriaId" : "62C35710-215C-4B80-9304-665451F3C0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:pre5:*:*:*:*:*",
            "matchCriteriaId" : "76A7416C-64B2-4F52-93FD-9C504B7D4F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:pre6:*:*:*:*:*",
            "matchCriteriaId" : "17D51261-2071-4E8F-AD75-2ECCBE7F7C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:pre7:*:*:*:*:*",
            "matchCriteriaId" : "ACD9E084-007E-4C6A-8D30-2DC9B355D7B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable1:*:*:*:*:*",
            "matchCriteriaId" : "95912E0D-FACF-459B-94FB-334FDBCC292B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable10:*:*:*:*:*",
            "matchCriteriaId" : "2C455506-7FBF-4F0E-92E7-F074B74C10D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable11:*:*:*:*:*",
            "matchCriteriaId" : "67288E3E-88BF-44CE-84EF-1BF98E8C38CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable12:*:*:*:*:*",
            "matchCriteriaId" : "B428BDA9-8C83-4DE3-9391-17AFD5D750BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable13:*:*:*:*:*",
            "matchCriteriaId" : "DC57EAB8-BFEF-4FE2-8ADB-D196EAE3E51D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable14:*:*:*:*:*",
            "matchCriteriaId" : "935F2BDE-7F76-4E13-8318-37CE97B7948F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable15:*:*:*:*:*",
            "matchCriteriaId" : "354599A2-5FCF-4F5A-85AE-00505D32B9BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable2:*:*:*:*:*",
            "matchCriteriaId" : "1F1BC7B9-9CD1-42E9-84BB-BEE3668BAAA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable3:*:*:*:*:*",
            "matchCriteriaId" : "88E3716B-863A-40D4-A7D9-F2A288B87394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable4:*:*:*:*:*",
            "matchCriteriaId" : "02FB3C5B-95F1-4839-8F68-649AFA2FEB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable5:*:*:*:*:*",
            "matchCriteriaId" : "631CBA69-B2A1-4522-A330-6A87CCBC682C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable6:*:*:*:*:*",
            "matchCriteriaId" : "0FE7885D-D1EB-4543-B342-80BC645EE8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable7:*:*:*:*:*",
            "matchCriteriaId" : "B7C4AE0E-9608-4D24-8EA3-0F33A5D95A5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable8:*:*:*:*:*",
            "matchCriteriaId" : "628344A8-42AE-4AD7-89A2-66711490AB30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:*:stable9:*:*:*:*:*",
            "matchCriteriaId" : "3260A290-9F63-4E5C-BEF2-015E9491AD18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:rc1:stable11:*:*:*:*:*",
            "matchCriteriaId" : "4F830353-C4E4-4DAF-B7ED-1B0BAE9F3253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "131C4C00-3811-42BF-A84A-EB2E5DA156B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A8586AD-E820-4BAE-AAF9-AC7EF2316C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802E3D2B-90B7-4725-854F-4174116BC314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7501697A-BCFD-4DC3-8D87-CC9A186D9589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6C4455-85F4-462D-9FF6-F830ED7D398E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:3.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B600BF4C-8169-4086-BFE6-F066BE5F5406"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36007",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:161",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:178",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35812",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022607",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.squid-cache.org/Advisories/SQUID-2009_2.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v3/3.1/changesets/b9661.patch",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2013",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/36007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/Advisories/SQUID-2009_2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/v3/3.1/changesets/b9661.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of squid as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
        "lastModified" : "2009-08-06T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2633",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-28T19:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in toolbar_ext.php in the VehicleManager (com_vehiclemanager) component 1.0 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de fichero PHP  toolbar_ext.php en el componente VehicleManager(com_vehiclemanager)v1.0 para Joomla! permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro \"mosConfig_absolute_path\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ordasoft:com_vehiclemanager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8638AE-BCE4-4FD3-8E2A-FDD503581E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-28T19:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in toolbar_ext.php in the MediaLibrary (com_media_library) component 1.5.3 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de fichero PHP en toolbar_ext.php en el MediaLibrary (com_media_library) v1.5.3 Basic para Joomla! permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parametro \"mosConfig_absolute_path\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ordasoft:com_medialibrary:1.5.3:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "C87D5782-B05F-41EF-AA08-7CCC175EB774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-28T19:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in toolbar_ext.php in the RealEstateManager (com_realestatemanager) component 1.0 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de fichero PHP en toolbar_ext.php en el componente RealEstateManager (com_realestatemanager) v1.0 Basic para Joomla! permite a atacantes remotos ejecutar código PHP de forma arbitraria a través de una URL en el parámetro \"mosConfig_absolute_path\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ordasoft:com_realestatemanager:1.0:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "22EF066F-60EE-4DBF-AD3F-5D2D066BE6E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-28T19:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Integration page in the WebMail component in Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0 allows remote attackers to inject arbitrary web script or HTML via an e-mail message."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la página Integration en el componente WebMail en Kerio MailServer v6.6.0, v6.6.1, v6.6.2, y v6.7.0  permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de un mensaje de correo electrónico."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD16F9A-6CC4-4FB2-9441-768312DEBB87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64099B8F-F609-49D8-932E-8F4040AFFC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FECD4F-3494-4EB7-A3AF-828E3D6DD5E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A59B047-22D1-4271-AA18-160536A1235F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/54928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35392",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kerio.com/support/security-advisories#0906",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35264",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022348",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/54928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kerio.com/support/security-advisories#0906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-28T19:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in toolbar_ext.php in the BookLibrary (com_booklibrary) component 1.5.2.4 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de fichero PHP en el componente BookLibrary (com_booklibrary) v1.5.2.4 Basic para Joomla!  permitiría a atacantes remotos ejecutar código PHP a través de una URL en el parámetro \"mosConfig_absolute_path\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ordasoft:com_booklibrary:1.5.2.4:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "7678DD10-45AA-4586-92D7-B9212C71D84E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-28T19:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the AkoBook (com_akobook) component 2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a reply action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente AkoBook (com_akobook) v2.3 para Joomla! permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"gbid\" en una acción de respuesta a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:konze:com_akobook:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE095089-A791-4BC8-A222-810444EEA581"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35268",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-28T19:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin.php in MRCGIGUY The Ticket System 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewticket action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin.php en MRCGIGUY The Ticket System v2.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"viewticket\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mrcgiguy:the_ticket_system:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF7C1FB-07D9-49C2-B6F3-0A606AE180BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-28T19:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in cgi/admin.cgi in Interlogy Profile Manager Basic allow remote attackers to execute arbitrary SQL commands via a pmadm cookie in (1) an edittemp action or (2) a users action."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en cgi/admin.cgi en Interlogy Profile Manager Basic, permite a atacantes remotos ejecutar comandos SQL de su elección a través de la cookie \"pmadm\" en una acción (1) edittemp o (2)users."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interlogy:profile_manager:-:-:basic:*:*:*:*:*",
            "matchCriteriaId" : "E070BA95-3EBE-44C3-B194-7B01CEF03BE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/files/110437/Interlogy-Profile-Manager-Basic-Insecure-Cookie-Handling.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1529",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/73691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/files/110437/Interlogy-Profile-Manager-Basic-Insecure-Cookie-Handling.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/73691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-28T19:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in app_and_readme/navigator/index.php in School Data Navigator allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.  NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en app_and_readme/navigator/index.php en School Data Navigator, permite  a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro \"page\". NOTA: esto también puede ser aprovechado para añadir y ejecutar archivos locales de su elección a través de secuencias ..(punto punto)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rich_white:school_data_nav:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0383094-A4FA-4082-93FD-8CB1ADE4570A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-28T19:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer value, as demonstrated by a value of 13."
      }, {
        "lang" : "es",
        "value" : "index.php en Desi Short URL Script v1.0, permite a atacantes remotos evitar la autenticación estableciendo la cookie \"logged\" a 1 y la cookie \"uid\" a un valor enter0, como se ha demostrado usando el valor 13."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:desiscripts:desi_short_url_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA0D1CF-65E7-4980-B375-FA95E06C5DD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/8925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/8925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-28T19:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 5.0 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246 and CVE-2009-0219."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades sin especificar en el componente PDF distiller en el Attachment Service en Research In Motion (RIM) BlackBerry Enterprise Server (BES) v4.1.3 a la v5.0  y BlackBerry Professional Software v4.1.4, permite a atacantes remotos asistidos por el usuario provocar una denegación de servicio (corrupción de memoria) o posiblemente la ejecución de código de su elección a través de un adjunto con un archivo .pdf. Vulnerabilidad distinta de CVE-2008-3246 y CVE-2009-0219."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BD344A-EE9C-4ECB-8CB1-35146FD6F056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1694E42-9AA5-4503-9714-CBDE388481A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F378AF-E25B-4D60-AF7E-9E6FB228BF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265D8F90-96C3-4627-ABA5-994C25F70A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:mr4:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A7A6BD-C0D7-40E0-BE1A-EC4396853296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277BF68B-8280-4B2B-9A67-F13341253D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_professional_software:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8534B50D-D051-4B26-957E-1A3E26E1E767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35254",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/btsc/KB18327",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1429",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/btsc/KB18327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/54767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0696",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-07-29T17:30:00.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message."
      }, {
        "lang" : "es",
        "value" : "La función  dns_db_findrdataset en db.c en \"named\" en ISC BIND v9.4 anterior a v9.4.3-P3, v9.5 anterior a v9.5.1-P3, y v9.6 anterior a v9.6.1-P1, cuando está configurado como un servidor maestro, permite a atacantes remotos provocar una denegación de servicio (fallo de aserción y salida de demonio) a través de cualquier registro en la sección prerequerida de un mensaje de actualización dinámico manipulado, tal como se ha explotado en julio de 2009."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8B18D7-4D15-46A7-8013-E6267127A427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D7C7524-6943-4D94-8835-0221F0F0CD63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B45FE3-307E-4599-B2CF-5203FA606469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:a2:*:*:*:*:*:*",
            "matchCriteriaId" : "F12E3841-1CF0-4969-A286-50769BAE31EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:a3:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B11586-1274-422D-873A-25DF193FB0C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:a4:*:*:*:*:*:*",
            "matchCriteriaId" : "87D61CDA-BB78-4957-A502-6D77B567B3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:a5:*:*:*:*:*:*",
            "matchCriteriaId" : "5A31533C-BD6E-4EB4-8047-3257BF51F592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:a6:*:*:*:*:*:*",
            "matchCriteriaId" : "D8537C88-4F73-43DD-9BDC-AF470882EED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D7D1A96-0A8E-4E3A-9442-701E3D1A1F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "93C23313-817F-4AB5-9058-31B0C7F954A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "FA9F93EC-1AA2-43A6-9869-8974C819370A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "726720E2-4B59-4665-A72E-E2E996957EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8F0AA9D0-9657-4E18-BF8B-45284C2D40A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "32E4FEA8-A654-4E9F-8948-5878E7C427C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916D4013-27A5-4688-A985-A9B77F90AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8583B8D-54A4-4064-810B-34F4F5A33A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "932E3F02-DD98-43FC-8077-50506E512989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "63C2A2FD-7AE7-462A-99B2-809BE1F35C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A12DF-E94B-426E-8751-96FC56105D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.3:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "7717B1A2-CAF5-49F3-AC73-273074BBEE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.3:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "F037EE61-50D6-4C1E-B24B-25A6D212E7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.3:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "5140F118-BC25-43CB-B19C-0885A44D6646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.4.3:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "82B9397F-463E-4F73-86F6-4EF3368E14BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A944178-032B-4637-842D-BC6B227043A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CEF8AD-9EE7-4ADA-888E-883751962529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5.0:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "76B4ED8A-9182-4403-8F66-3EB360E73477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5.0:a2:*:*:*:*:*:*",
            "matchCriteriaId" : "84046EF9-AF5F-43FA-8E2C-11C7A01D17F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5.0:a3:*:*:*:*:*:*",
            "matchCriteriaId" : "7545BB70-5C74-47A7-BB07-765BC8C2A5A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5.0:a4:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6BFDBD-DE4D-407F-86A4-FA78F99AA531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5.0:a5:*:*:*:*:*:*",
            "matchCriteriaId" : "4337C3FF-C15B-4EFD-AA13-F9CA0542C2FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5.0:a6:*:*:*:*:*:*",
            "matchCriteriaId" : "AB6534DE-1ACB-4BCE-87A4-901F02F6CDCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5.0:a7:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5F1A64-2428-4F85-8B93-3E324E983D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5D6222-3C1D-42FA-8882-1EE28B94D900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "08899782-3182-46EB-947D-3BA9C371ACA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "575443B1-1638-497E-BCCF-E725B386ED88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "30616740-FC69-4B92-B997-B7AF7643656D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E306D3A-11AE-4F35-971E-B47D47628052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5.0:p2_w1:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF37B1D-04AD-4E37-A238-34BE7C5311E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.5.0:p2_w2:*:*:*:*:*:*",
            "matchCriteriaId" : "6AAEE115-8EA0-4E2B-9960-647967B39606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:*:*:*:esv:*:*:*",
            "matchCriteriaId" : "6C8BE53C-2A4A-4959-AA97-5ABC04CC0E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:r1:*:*:esv:*:*:*",
            "matchCriteriaId" : "2677A691-12FF-40D9-90FD-772CE3C5A9B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:r2:*:*:esv:*:*:*",
            "matchCriteriaId" : "D8A7089F-C797-4024-AFC1-E0E6458DE848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:r3:*:*:esv:*:*:*",
            "matchCriteriaId" : "7DD82385-C550-4B18-98EA-D98E3091BB45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:r4:*:*:esv:*:*:*",
            "matchCriteriaId" : "3A33A726-ED5B-45EB-8474-9298AE99DA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:r4_p1:*:*:esv:*:*:*",
            "matchCriteriaId" : "F87EAE50-93EC-4297-8E05-0E904CC24272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:r5:*:*:esv:*:*:*",
            "matchCriteriaId" : "0D2999C4-F1DC-4DD7-9302-C148EB3E9732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:r5_b1:*:*:esv:*:*:*",
            "matchCriteriaId" : "275EA814-22C2-4B38-B26A-ACD393414DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:r5_p1:*:*:esv:*:*:*",
            "matchCriteriaId" : "3E41290E-0F4A-4113-BBE1-BC33EBDB7141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:r6:*:*:esv:*:*:*",
            "matchCriteriaId" : "EB714DDF-DA52-4E7C-B40F-DE2A85901998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:r6_b1:*:*:esv:*:*:*",
            "matchCriteriaId" : "21AE1593-38AC-4345-BD69-6589627A10FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:r6_rc1:*:*:esv:*:*:*",
            "matchCriteriaId" : "9BC239C2-22E1-4E12-888C-C002C2CD1B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:r6_rc2:*:*:esv:*:*:*",
            "matchCriteriaId" : "7C21A765-6EB9-4213-BD35-FBD0E5C6A63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:r7:*:*:esv:*:*:*",
            "matchCriteriaId" : "9CEDA8E0-A429-4099-96B2-F63EAA9B33FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:r7_p1:*:*:esv:*:*:*",
            "matchCriteriaId" : "4FEFE357-E5A6-4B22-8A30-25C9100BBCFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:r7_p2:*:*:esv:*:*:*",
            "matchCriteriaId" : "F846EB9A-DE66-44F9-AEB8-A297D18CFF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:r9:*:*:esv:*:*:*",
            "matchCriteriaId" : "777724C0-3259-4D40-82F6-4588CA79A819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6:r9_p1:*:*:esv:*:*:*",
            "matchCriteriaId" : "F0CB9332-22B3-48AC-919A-A4E5F43D9B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42F7AF7-D37C-4213-B2BC-D2B9FE725BDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6.0:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "A964450E-7DA8-478B-923E-E8CD1BA0F09C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "32FAE1EF-3BF0-4B12-8F08-AA061A6D63FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABB3FC8-0A0D-4881-9137-5F6A8CCB9345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C02A3BC0-78A4-4F4D-AA5B-3C05122137EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "178C7D9F-8699-42A3-8729-0BC6323EBDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BEF53C6-E555-49D4-B4B2-63BA71CC77E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.6.1:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4565A6-122B-406C-A7BE-A029F92799B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-013.txt.asc",
        "source" : "cret@cert.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/bind_advisory.asc",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538975",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/36035",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/36038",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/36050",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/36053",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/36056",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/36063",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/36086",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/36098",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/36192",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/39334",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-264828-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020788.1-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://up2date.astaro.com/2009/08/up2date_7505_released.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0113",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/725188",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.openbsd.org/errata44.html#014_bind",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505403/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022613",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561499",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-808-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2036",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2088",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2171",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2247",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10414",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12245",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7806",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.isc.org/node/474",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01265.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-013.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/bind_advisory.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-264828-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020788.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://up2date.astaro.com/2009/08/up2date_7505_released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/725188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.openbsd.org/errata44.html#014_bind",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505403/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-808-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.isc.org/node/474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01265.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-29T17:30:00.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not prevent VariantClear calls on an uninitialized VARIANT, which allows remote attackers to execute arbitrary code via a malformed stream to an ATL (1) component or (2) control, related to ATL headers and error handling, aka \"ATL Uninitialized Object Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "La Active Template Library  (ATL) en Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 y 2008 Gold, y Visual C++ 2005 SP1 y 2008 Gold y SP1, no previene las llamadas VariantClear sobre una VARIAN sin inicializar, lo que permite a atacantes remotos ejecutar código de su elección a través de un (1) componente o (2) control ATL. Relacionado con las cabeceras ATL y manejo de errores. También conocida como \"Vulnerabilidad de objeto ATL sin inicializar\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_c\\+\\+:2005:sp1_redistribution_pkg:*:*:*:*:*:*",
            "matchCriteriaId" : "FA86F8B2-0211-4FF6-BE07-2E2EC06DFC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_c\\+\\+:2008:redistribution_pkg:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA98FBB-255F-4AC9-B035-54C60EEE022B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_c\\+\\+:2008:sp1_redistribution_pkg:*:*:*:*:*:*",
            "matchCriteriaId" : "B20EDFCC-8C10-4EBF-BCC6-1A17362E6676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2005:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9271AF1C-9B1C-4ADB-9F54-E63EBA2910F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2005:sp1:64_bit_hosted_visual_c\\+\\+_tools:*:*:*:*:*",
            "matchCriteriaId" : "9E35016A-D55F-4607-8716-77AACB7B166C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "85959AEB-2FE5-4A25-B298-F8223CE260D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126592505426855&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/advisories/apsa09-04.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-11.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35832",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126592505426855&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/advisories/apsa09-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Please refer to this link http://www.microsoft.com/technet/security/Bulletin/MS09-035.mspx for mitigating factors and additional information."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1164",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-07-29T17:30:01.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.2 before 4.2.205.0 and 5.x before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a malformed response to a (1) HTTP or (2) HTTPS authentication request, aka Bug ID CSCsx03715."
      }, {
        "lang" : "es",
        "value" : "La interfaz web de administración en la plataforma Cisco  Wireless LAN Controller  (WLC) v4.x anterior a v4.2.205.0, v5.1 anterior a v5.1.163.0, y v5.0 y v5.2 anterior a v5.2.178.0, usado en  Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, y 4400 Series Wireless Services Modules (WiSM), WLC Modules para Integrated Services Routers, y Catalyst 3750G Integrated Wireless LAN Controllers, permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) a través de una respuesta mal formada a peticiones de autenticación (1) HTTP o (2) HTTPS. También conocida como Bug ID CSCsx03715."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750g:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EAB8765-659C-4A1D-ACA8-3323FA64CCEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C57E75DB-03F4-4A38-92BA-FAC3F49FB6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7754EC-1BA6-4BB3-A339-8977EF747FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F458BB81-18CB-45C9-80D6-099E38ECB81F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9294DEC-0242-4B50-B93F-F46E4B14106A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE4ECC2-918B-4059-80F3-DA4E1FEB7D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CAF4094-65DD-4A0C-A404-818742666A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB0F0B7-22BB-43F7-ADF7-E72709196E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39552A59-00AE-47C9-8FDA-EB95F0914CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6451FA3E-5C1C-4FF4-B139-B06B3333086A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2847FEF3-65B8-4922-BDD8-AF6F8E8A34DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D553C27-CC79-434F-95CB-CEB54E23E33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB94E899-46D8-401D-8712-03F461A705EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D56C504-10BE-431A-B22C-309A9EE7CD0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B03F83-6996-4BDF-A599-21FAA713987E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F985DA-38C5-49DC-922A-9A52DCE89F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212A3CD0-892B-4762-B88C-3080B854F69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B37CAD2-B07F-47B8-92C5-9668878266A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C517DD-ED02-4F31-86E9-93AEBC16E7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "954B0579-2F6E-43BA-9032-B230EF9F13FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ECD9FB2-203F-4395-9399-8FE52ED9C059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88DFEA1-E796-4F78-B58A-3D5AA7CCFE6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48FEAF2-C03D-49DB-A962-582A20E1AB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22E3EF41-DD13-4A62-91D1-D5AFAC9ACDE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6D5623-6DE5-4C48-A0BA-509365EE2E6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2021",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1165",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-07-29T17:30:01.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0, 5.1 before 5.1.163.0, and 5.0 and 5.2 before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (memory consumption and device reload) via SSH management connections, aka Bug ID CSCsw40789."
      }, {
        "lang" : "es",
        "value" : "Fuga de moria la plataforma Cisco  Wireless LAN Controller  (WLC) v4.x anterior a v4.2.205.0, v5.1 anterior a v5.1.163.0, y v5.0 y v5.2 anterior a v5.2.178.0, usado en  Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, y 4400 Series Wireless Services Modules (WiSM), WLC Modules para Integrated Services Routers, y Catalyst 3750G Integrated Wireless LAN Controllers, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y reinicio de dispositivo) a través de conexiones de administración SSH. También conocida como Bug ID CSCsw40789."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750g:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EAB8765-659C-4A1D-ACA8-3323FA64CCEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75D0787-769B-4686-8DBE-92D2DA52AAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:4.1m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32C15F81-46E3-440F-A36F-DD5904F745F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C57E75DB-03F4-4A38-92BA-FAC3F49FB6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7754EC-1BA6-4BB3-A339-8977EF747FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F458BB81-18CB-45C9-80D6-099E38ECB81F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9294DEC-0242-4B50-B93F-F46E4B14106A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F1A494-06A0-46F9-8443-886EE590628F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:4.1m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C200E78-FF91-4C3A-920C-BD9EECC4BD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE4ECC2-918B-4059-80F3-DA4E1FEB7D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CAF4094-65DD-4A0C-A404-818742666A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB0F0B7-22BB-43F7-ADF7-E72709196E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39552A59-00AE-47C9-8FDA-EB95F0914CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "404ACEE8-F223-4324-B68F-03A88661E2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:4.1m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7412AF-4521-4E06-84C1-719591288EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6451FA3E-5C1C-4FF4-B139-B06B3333086A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2847FEF3-65B8-4922-BDD8-AF6F8E8A34DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D553C27-CC79-434F-95CB-CEB54E23E33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB94E899-46D8-401D-8712-03F461A705EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "534311A6-20CE-4DD7-833F-8874BBF34205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:4.1m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6692EA-EB32-4089-863E-1B107D50CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D56C504-10BE-431A-B22C-309A9EE7CD0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B03F83-6996-4BDF-A599-21FAA713987E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F985DA-38C5-49DC-922A-9A52DCE89F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212A3CD0-892B-4762-B88C-3080B854F69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B9A187-7240-443F-9B66-AE9AA1E6AEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:4.1m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513EFDE4-C892-4DE3-AB1A-0C8E4F71DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B37CAD2-B07F-47B8-92C5-9668878266A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C517DD-ED02-4F31-86E9-93AEBC16E7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "954B0579-2F6E-43BA-9032-B230EF9F13FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ECD9FB2-203F-4395-9399-8FE52ED9C059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24DE9F5-C14C-4BA2-AEE4-B1E3D7D4F908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:4.1m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5200DC76-AB38-4A75-BD2E-2D9048A66D07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88DFEA1-E796-4F78-B58A-3D5AA7CCFE6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48FEAF2-C03D-49DB-A962-582A20E1AB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22E3EF41-DD13-4A62-91D1-D5AFAC9ACDE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6D5623-6DE5-4C48-A0BA-509365EE2E6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35817",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022605",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2021",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1166",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-07-29T17:30:01.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy27708."
      }, {
        "lang" : "es",
        "value" : "El interfaz web sobre la plataforma Cisco  Wireless LAN Controller  (WLC) v4.x anterior a v4.2.205.0 y v5.x anterior a v5.2.191.0, usado en  Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, y 4400 Series Wireless Services Modules (WiSM), WLC Modules para Integrated Services Routers, y Catalyst 3750G Integrated Wireless LAN Controllers, permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) a través de peticiones (1) HTTP o (2) HTTPS manipuladas, también conocido como Bug ID CSCsy27708."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst:3750g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C163D6D0-3806-43B5-8D09-D61E2AED61DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022605",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2021",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1167",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-07-29T17:30:01.110",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to modify the configuration via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy44672."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en la plataforma Cisco Wireless LAN Controller (WLC) v4.x anterior a v4.2.205.0 y v5.x anterior a v5.2.191.0, usado en  Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, y 4400 Series Wireless Services Modules (WiSM), WLC Modules para Integrated Services Routers, y Catalyst 3750G Integrated Wireless LAN Controllers, permite a atacantes remotos modificar a configuración a través de peticiones (1) HTTP o (2) HTTPS, también conocido como Bug ID CSCsy44672."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3750g:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EAB8765-659C-4A1D-ACA8-3323FA64CCEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75D0787-769B-4686-8DBE-92D2DA52AAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:4.1m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32C15F81-46E3-440F-A36F-DD5904F745F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C57E75DB-03F4-4A38-92BA-FAC3F49FB6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7754EC-1BA6-4BB3-A339-8977EF747FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F458BB81-18CB-45C9-80D6-099E38ECB81F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9294DEC-0242-4B50-B93F-F46E4B14106A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F1A494-06A0-46F9-8443-886EE590628F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:4.1m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C200E78-FF91-4C3A-920C-BD9EECC4BD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE4ECC2-918B-4059-80F3-DA4E1FEB7D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CAF4094-65DD-4A0C-A404-818742666A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB0F0B7-22BB-43F7-ADF7-E72709196E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39552A59-00AE-47C9-8FDA-EB95F0914CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "404ACEE8-F223-4324-B68F-03A88661E2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:4.1m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7412AF-4521-4E06-84C1-719591288EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6451FA3E-5C1C-4FF4-B139-B06B3333086A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2847FEF3-65B8-4922-BDD8-AF6F8E8A34DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D553C27-CC79-434F-95CB-CEB54E23E33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB94E899-46D8-401D-8712-03F461A705EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "534311A6-20CE-4DD7-833F-8874BBF34205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:4.1m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6692EA-EB32-4089-863E-1B107D50CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D56C504-10BE-431A-B22C-309A9EE7CD0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B03F83-6996-4BDF-A599-21FAA713987E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F985DA-38C5-49DC-922A-9A52DCE89F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212A3CD0-892B-4762-B88C-3080B854F69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B9A187-7240-443F-9B66-AE9AA1E6AEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:4.1m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513EFDE4-C892-4DE3-AB1A-0C8E4F71DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B37CAD2-B07F-47B8-92C5-9668878266A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C517DD-ED02-4F31-86E9-93AEBC16E7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "954B0579-2F6E-43BA-9032-B230EF9F13FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ECD9FB2-203F-4395-9399-8FE52ED9C059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24DE9F5-C14C-4BA2-AEE4-B1E3D7D4F908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:4.1m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5200DC76-AB38-4A75-BD2E-2D9048A66D07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88DFEA1-E796-4F78-B58A-3D5AA7CCFE6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48FEAF2-C03D-49DB-A962-582A20E1AB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22E3EF41-DD13-4A62-91D1-D5AFAC9ACDE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6D5623-6DE5-4C48-A0BA-509365EE2E6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022606",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2021",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-29T17:30:01.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability on HP ProLiant DL and ML 100 Series G5, G5p, and G6 servers with ProLiant Onboard Administrator Powered by LO100i (formerly Lights Out 100) 3.07 and earlier allows remote attackers to cause a denial of service via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en los servidores HP ProLiant DL y ML 100 Series G5, G5p, y G6 con ProLiant Onboard Administrator Powered by LO100i (anteriormente Lights Out 100) v3.07 y anteriores, permite a atacantes remotos provocar una dengación de servicio a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:proliant_onboard_administrator:3.07:*:powered_by_lo100i:*:*:*:*:*",
            "matchCriteriaId" : "EB9DCB4B-9F27-4CF7-93DC-B8BA90FFAC15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:proliant_dl120:-:g5:*:*:*:*:*:*",
            "matchCriteriaId" : "BE68D2A4-985B-4675-BEEC-F3FB0C76BD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:proliant_dl160:-:g5:*:*:*:*:*:*",
            "matchCriteriaId" : "D29094A9-B14A-475C-A0E9-DA92414AE4AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:proliant_dl160:-:g5p:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58087-C9AB-4E1A-A0F7-ADD2BBBB6716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:proliant_dl160:-:g6:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC09958-856F-4750-A94F-E387B1DA4FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:proliant_dl165:-:g6:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAC03FE-EEF4-43FE-9791-B9FE6FDFE870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:proliant_dl180:-:g5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BD7B7F-1C8D-41E2-9F63-654050A595D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:proliant_dl180:-:g6:*:*:*:*:*:*",
            "matchCriteriaId" : "D02277DA-1B2F-4ED5-BD04-642B5020FABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:proliant_dl185:-:g5:*:*:*:*:*:*",
            "matchCriteriaId" : "359D0748-F951-4AD5-88D7-609B7C028275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:proliant_ml110:-:g5:*:*:*:*:*:*",
            "matchCriteriaId" : "8A453C79-1AEB-48B9-8097-B5FC10E443F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:proliant_ml115:-:g5:*:*:*:*:*:*",
            "matchCriteriaId" : "A493D9B8-EAC2-4C31-BE90-E10087044F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:proliant_ml150:-:g5:*:*:*:*:*:*",
            "matchCriteriaId" : "5B44642B-B3F1-42BE-996B-1149D93DBAC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=124881779623139&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124881779623139&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/35990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1917",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-07-29T17:30:01.157",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle attempts to access deleted objects in memory, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka \"Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer v6 SP1; Internet Explorer 6 para Windows XP SP2 y SP3 y Server 2003 SP2; e Internet Explorer 7 y 8 for Windows XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 Gold y SP2, no maneja adecuadamente los intentos de acceso a objetos eliminados de la memoria, lo que permite a atacantes remotos la ejecución de código de su elección a través de un documento HTML manipulado que provoca una corrupción de memoria. También conocida como \"Vulnerabilidad de corrupción de Memoria en objetos HTML\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A74985B6-BCA5-49E3-878B-77D7FA43070C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52E757F-9B41-43B4-9D67-3FEDACA71283"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7C684420-1614-4DAE-9BD9-F1FE9102A50F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=953693",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35831",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022611",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2033",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-034",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6072",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=953693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1918",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-07-29T17:30:01.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle table operations, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption by adding malformed elements to an empty DIV element, related to the getElementsByTagName method, aka \"HTML Objects Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer v5.01 SP4 y v6 SP1; Internet Explorer 6 para Windows XP SP2 y SP3 y Server 2003 SP2; e Internet Explorer 7 y 8 for Windows XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 Gold y SP2, no maneja adecuadamente las operaciones  con tablas, lo que permite a atacantes remotos la ejecución de código de su elección a través de un documento HTML manipulado que provoca una corrupción de memoria. También conocida como \"Vulnerabilidad de corrupción de Memoria en objetos HTML\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A74985B6-BCA5-49E3-878B-77D7FA43070C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52E757F-9B41-43B4-9D67-3FEDACA71283"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7C684420-1614-4DAE-9BD9-F1FE9102A50F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=953693",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505523/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35826",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022611",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2033",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-047",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-034",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5524",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=953693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505523/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1919",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-07-29T17:30:01.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle attempts to access deleted objects in memory, which allows remote attackers to execute arbitrary code via an HTML document containing embedded style sheets that modify unspecified rule properties that cause the behavior element to be \"improperly processed,\" aka \"Uninitialized Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer v5.01 SP4 y v6 SP1; Internet Explorer 6 para Windows XP SP2 y SP3 y Server 2003 SP2; e Internet Explorer 7 y 8 for Windows XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 Gold y SP2, no maneja adecuadamente los intentos para acceder a objetos eliminados en memoria, lo que permite a atacantes remotos la ejecución de código de su elección a través de un documento HTML manipulado que provoca una corrupción de memoria. También conocida como \"Vulnerabilidad de corrupción de Memoria No Inicializada\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A74985B6-BCA5-49E3-878B-77D7FA43070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52E757F-9B41-43B4-9D67-3FEDACA71283"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7C684420-1614-4DAE-9BD9-F1FE9102A50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/505524/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022611",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2033",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-048",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-034",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5660",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505524/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2493",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-07-29T17:30:01.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not properly restrict use of OleLoadFromStream in instantiating objects from data streams, which allows remote attackers to execute arbitrary code via a crafted HTML document with an ATL (1) component or (2) control, related to ATL headers and bypassing security policies, aka \"ATL COM Initialization Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "La Active Template Library (ATL) en Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 y 2008 Gold y SP1, y Visual C++ 2005 SP1 y 2008 Gold y SP1 no restringe adecuadamente el uso de OleLoadFromStream en la instanciación de objetos desde el flujo de datos, lo que permite a atacantes remotos  ejecutar código de su elección a través de un documento HTML manipulado con un (1)control o (2) componente, relacionado con las cabeceras ATL y el evitar las políticas de seguridad. También conocida como \"Vulnerabilidad de Inicialización ATL COM\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_c\\+\\+:2005:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "882CDAE9-EC03-48E6-814C-50236B8F0B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_c\\+\\+:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27438900-81A7-41CD-AA17-1DA9F35C98D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_c\\+\\+:2008:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E0021F-ABB9-4FB4-BC1C-5098F2E66371"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2978BF86-5A1A-438E-B81F-F360D0E30C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C28897B-044A-447B-AD76-6397F8190177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32623D48-7000-4C7D-823F-7D2A9841D88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAEEA81-5037-4B68-98D9-83AAEBC98E20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AD97AF-1F2A-483D-86F2-764ECEC31BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2005:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9271AF1C-9B1C-4ADB-9F54-E63EBA2910F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126592505426855&w=2",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35967",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/36187",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/36746",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/38568",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/41818",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264648-1",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020775.1-1",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.adobe.com/support/security/advisories/apsa09-04.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-11.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openoffice.org/security/cves/CVE-2009-2493.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-342A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2034",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2232",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0366",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-055",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6245",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6304",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6421",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6473",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6621",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6716",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126592505426855&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/41818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264648-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020775.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.adobe.com/support/security/advisories/apsa09-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openoffice.org/security/cves/CVE-2009-2493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-342A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2495",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-07-29T17:30:01.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka \"ATL Null String Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "La Active Template Library (ATL) en Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 y 2008 Gold y SP1, y Visual C++ 2005 SP1 y 2008 Gold y SP1 no cumple adecuadamente con la terminación de cadena, lo que permite a atacantes remotos obtener información sensible a través de un documentos HTML manipulado con un (1) control o (2) componente ATL que provoca un desbordamiento de lectura de búfer. Relacionado con la reserva de cabeceras y búfers ATL. También conocida como \"Vulnerabilidad de cadena nula ATL\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_c\\+\\+:2005:sp1_redistribution_pkg:*:*:*:*:*:*",
            "matchCriteriaId" : "FA86F8B2-0211-4FF6-BE07-2E2EC06DFC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_c\\+\\+:2008:redistribution_pkg:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA98FBB-255F-4AC9-B035-54C60EEE022B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_c\\+\\+:2008:sp1_redistribution_pkg:*:*:*:*:*:*",
            "matchCriteriaId" : "B20EDFCC-8C10-4EBF-BCC6-1A17362E6676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2005:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9271AF1C-9B1C-4ADB-9F54-E63EBA2910F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2005:sp1:64_bit_hosted_visual_c\\+\\+_tools:*:*:*:*:*",
            "matchCriteriaId" : "9E35016A-D55F-4607-8716-77AACB7B166C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "85959AEB-2FE5-4A25-B298-F8223CE260D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=126592505426855&w=2",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/35967",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/36746",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2034",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6305",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6478",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7573",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126592505426855&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-195A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-29T17:30:01.280",
      "lastModified" : "2025-10-10T10:26:26.423",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1 before 2.1.3, and 2.5 before 2.5 Beta 2 allows remote attackers to cause a denial of service (daemon crash) via a malformed op_connect_request message that triggers an infinite loop or NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "src/remote/server.cpp en fbserver.exe en Firebird SQL v1.5 anterior a v1.5.6, v2.0 anterior a v2.0.6, v2.1 anterior a v2.1.3, y v2.5 anterior a v2.5 Beta 2, permite a atacantes remotos provocar una denegación de servicio (caída de demonio) a través de un mensaje op_connect_request mal formado que provoca un bucle infinito o una deferencia a puntero NULL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firebirdsql:firebird:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5",
            "versionEndExcluding" : "1.5.6",
            "matchCriteriaId" : "ED5BF0C6-148D-4142-9479-52831305FF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firebirdsql:firebird:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.0.6",
            "matchCriteriaId" : "361ADF74-C457-4BCC-BD99-D730CB32D4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firebirdsql:firebird:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1",
            "versionEndExcluding" : "2.1.3",
            "matchCriteriaId" : "746090F5-012B-4587-BDD2-C300E6C8817E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firebirdsql:firebird:2.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "62D0C042-3838-40CB-A43F-769EC419252B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firebirdsql:firebird:2.5.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "355DC46D-D76E-4924-9FF1-B1B69B9BA51C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firebirdsql:firebird:2.5.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "F069ED28-40B3-4B94-B89F-7E18AF0056C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://tracker.firebirdsql.org/browse/CORE-2563",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/firebird-sql-dos",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9295",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35842",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=514463",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01341.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01370.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://tracker.firebirdsql.org/browse/CORE-2563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/firebird-sql-dos",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=514463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01341.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01370.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-29T17:30:01.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to \"pathnames for invalid fds.\""
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en el subsistema Solaris Auditing en Solaris 9 y 10 y OpenSolaris anterior a snv_121, cuando se usan los atributos de archivo extendidos, permite a usuarios locales provocar una denegación de servicio(panic) a través de vectores relacionados a \"nombres de ruta para fds no válidos\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8A5A38-4864-4AD0-A8BA-A472AE4D7557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "184AB738-8A6A-4619-A630-890925530818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89BE592-11FD-46ED-B7F4-1930AAA5CCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45820A6-277B-492C-9E05-210B16E6BD5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E40865-9B44-4CB4-B2F0-13A8CA0AD38C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19094B1E-8496-4997-9AB1-A7F267DB1396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "899768FF-7BBD-4128-8AC4-EB62686618CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0812CF1-08B3-4047-8B87-3B2D99D53AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C7D0C8-898F-49DD-AB80-BF1EE3A7D1A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20E2BEC-AFB9-4527-B18A-BB6FE087DE8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2483121B-6DAF-4367-8608-9E4BE25C263F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9228C3DC-CF09-45D9-8D60-7861D29AB298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E622C2-5727-40F0-AE5D-4F21F8DA20B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D802C1F5-2ACC-46E1-B350-378CEEBDA2DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B6C721-3CED-46C3-9874-A6E985081C4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2065BBE3-F0F9-4F7B-8828-0AD0491B67B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB17597F-DF89-431A-B7FB-C33E689A6901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47D688FA-7F88-4645-B3E5-830EF4C4FDAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD6B880-B683-449E-9EA5-6FB1483EE309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1D04C99-E0FD-4BB4-B651-9A9250633BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC27EEDE-AE2F-427A-A035-AF790A65AAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD65532A-C083-462B-9FED-64051535E53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E71C245C-2E0A-423C-A0CE-AC15FDDE784F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94B1C8EB-E9EB-4465-9BF9-545D1EF0C536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2288FB2-5F26-41FB-A08D-90B168AD0F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49AA677A-750B-4D05-869A-51981B2E2EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F2BE5D-3D07-440F-8006-B74A8B718DB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894B4387-22CF-4DFA-ABDC-A89598D9DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB6A3F2-7152-4FEE-A3DC-D9926A3F8388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4314A1C4-8644-4096-9559-9CF4D5EAC39C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D6B309-746D-4306-8AD7-0D0968B02AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB16CDAF-3C3B-4451-9458-D0E16271F37F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B7225D-DC75-4E06-BE15-079556708B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C2F6FC-F5D8-48DC-9CC9-5F82FD46603D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA5BFD2E-9D6F-4D5E-B86A-C25E142B5668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F597A149-9187-48B1-AC77-357C87FEEF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFAAC94D-6CEA-4B80-A9E8-959D8EB99E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD73A336-77A2-4FB8-8A2E-EE2692886378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1109018C-B0A9-4752-8BB3-C94EC9B28F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1235FD40-1FB9-4FD5-898B-CD6A3BA855F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4C7956-A065-4114-8642-C8C9C1246957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CC57C8-DE9B-405E-83D2-FC63A4350772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2D3327-7239-4D4D-BF5F-A4B46900A331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3D289A4-3043-4D14-8C64-EEE0D529B58F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D3DD72-E560-449F-ABC9-D4DF91DD4F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A50E9F3A-3B5B-4069-AF5F-E524C1253E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6558890D-704E-4C29-8AC5-E4B07034B713"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D4659A1-0FA9-4D08-9CBD-59C4F7A8004B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "216204D9-D216-442C-A6BE-C3D86E0A70A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DC9FB09-0F12-458A-9B99-414FAA9E2A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22E3FD68-C5F1-48F2-94C8-694395893A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27E32B20-3C72-4A0C-9971-8BB719851C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91ED6A1F-54EB-4A2E-A157-ADFE6681521A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1834E45-86DA-47ED-8D00-001714D66B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06E3C22-3FE5-4995-BE51-BEFB567536E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B313A3DA-24DF-414F-BEEC-D5AF2B7ED31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45015A0D-3CC7-47D2-8F56-9945315D68CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10277E95-F2E4-4398-9DC7-9B854EE8D25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86AC01EC-1EC1-428F-B7A4-3D5582AD2C52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "953C1410-DB77-4250-B1DF-364FCAFDA2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FD5C5C6-0047-4261-AC29-A3BDF5287C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F428B518-6D1A-4F1A-A62C-44CC8CFDF3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A0F545-87B5-4733-8222-A99D2C968C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9206F3B-8360-42D4-A567-EE2C57F3C2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D255FFED-0229-4336-AED4-B7D6E5746F54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7721527-B8D5-4346-B4DC-08D09AAC9E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAEA2E4D-49CB-4696-B878-882468340DAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D86A5C5-5584-428A-88B1-CD3EE634FF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86330112-84C7-457C-A7B3-619AC189D593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3B0C6E-23A5-4226-BB22-7A8470DC3724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB311723-F2F3-4C85-831C-E3E2CC19703C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "416918A4-F37E-445E-B58F-7D4B1B90D0CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B10A4DE-2FAD-4ACA-8253-4370A274181D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DABACD4-EDD5-4BAA-AB12-3AC1A840E7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CF9CE4-3FF6-427D-87B7-61581FBCAFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F614E40-6C58-48E2-803D-AEDB03C70810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB8A628-4BA9-41EF-B336-D5DB21896494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5197527-068E-4D9B-BDDC-453553649440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2163BC71-6BA6-4E5F-A193-9DB1E533E06B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F58CF3B-3216-456C-B15A-B84A547A7A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549CB843-1C1A-4BD2-AA9D-A23EC0DAF413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F3057D-3B2F-4FCD-80D2-DD0A6AE60657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B311263F-F3E2-4AE3-81A0-26516605E74E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B920FE-4D5C-49D3-BC3B-C519A368F127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE64FFA-2F99-4980-9F8B-16F30314039F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCEB7375-7C2C-4A7C-BC46-552CBC16E8F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287C4B1B-FFA8-452E-98BF-8B2EB30F6B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F666F65E-BFA9-4F06-A84F-844D7E5DEBBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B36C324-ADFA-4885-846E-059872C95B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB88D92E-A71C-4EA7-8A30-0109E62E9F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD8801EA-A577-4388-83F7-174F168B66E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF21371-BC95-4815-AE8D-34361B5FA3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C02D1A-F957-44AD-B7D0-ECF59695C6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B2CE32-1539-4120-BBB5-33E8A10CD518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C484C06-AB8D-4301-854B-22D15A7AE5E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "849EA7BD-A805-4A90-B237-B1EC6CB88FFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B2EF35-F280-4368-B6A0-2EFAE0719E2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A52D01-6AB6-4D2A-855E-36A7EEC2CC0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86931B59-DAD2-474B-B030-3B1389278C49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5C8198-D705-4202-B67D-7EA03081F69A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A36130-96FE-4C02-92E6-5B9D126C93AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C177E61-6CF2-4F48-9935-2E1A3581CB19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3902AF69-BA8C-41E2-9F56-1BFD2578731D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A843E5E4-E53E-484B-8A86-14DD2DA10943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81199A81-CAD2-4375-8C3B-2638D007E4FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BFC95D-3E59-4EF4-915A-14696072C8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDE86EE0-418E-4133-8F4B-03761F9EE0DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "866FF3B9-465E-4120-A2B8-089023BA3539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B3BBCE23-9F15-45CD-859F-77ED540B51F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "053A0DA6-483C-49BB-BC7A-E624DB2C269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "447212A4-FACD-475E-A62B-60FE6504F63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB694DC0-407A-4555-8B72-DAF3C169DCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "78B80C92-7EB5-4343-B830-32E8C011E572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "535FF689-13A2-40C6-8706-7782038FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "46E4ED9C-F013-48D2-8642-E5BA7599A512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "843246D3-C2DA-454D-916A-AC8905E5134E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A1E8108D-3CE7-4041-9027-1CA7473389EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "244B7FE4-C485-4993-9810-3433C83A120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BE586AB9-9D46-4BC2-8092-51482F297410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E8585133-1F25-494A-8859-87B1D93305A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-42-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264429-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020766.1-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-42-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264429-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020766.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1168",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-07-30T18:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through 12.0(32)SY9, 12.2(33)SXI1, 12.2XNC before 12.2(33)XNC2, 12.2XND before 12.2(33)XND1, and 12.4(24)T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to cause a denial of service (memory corruption and device reload) by using an RFC4271 peer to send an update with a long series of AS numbers, aka Bug ID CSCsy86021."
      }, {
        "lang" : "es",
        "value" : "Cisco IOS v12.0(32)S12 hasta v12.0(32)S13 y v12.0(33)S3 hasta v12.0(33)S4, v12.0(32)SY8 hasta v12.0(32)SY9, v12.2(33)SXI1, v12.2XNC anterior a v12.2(33)XNC2, v12.2XND anterior a v12.2(33)XND1, y v12.4(24)T1; y IOS XE v2.3 hasta v2.3.1t y v2.4 hasta v2.4.0; cuando el enrutado RFC4893 BGP está habilitado, lo que permite a los atacantes remotos causar una denegación de servicio (corrupción de memoria o reinicio del dispositivo) usando un par RFC4271 para enviar una actualización con una serie larga de números AS, también conocido como fallo ID CSCsy86021."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F505B0A-E9E0-4CF3-B85B-70EEE71314F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED66A91B-6429-4983-8167-07DECA601916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F288884-3DB7-474D-B56B-120E2DB7975A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A29860C6-75E6-43A4-8BF5-E6ABF2040B0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0C8019-BDDA-4019-AF64-352EFFAC9036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCFE974-9D9A-443D-A55D-6A2CBF96EC4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4627BEF7-CEEB-4CBC-8620-4D9C5A7F7C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "866E9A29-97D8-41E1-81BE-73FAF1B5E2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D57ACB3-4ADC-4FBE-BA46-395F277B9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2916FA5-1FFF-48FB-A079-693AD3444CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6AD6E5-EBB0-44D8-A63C-EFF7260E4CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91895083-E6C5-432A-BF41-8D157E539C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.3.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57F6EF3B-2F31-4449-9B2A-9114D41BBC6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4964AB2C-E255-4844-8DD9-FFFC9512B7C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0B52CA-3834-4435-A3E1-9684A41E6405"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36046",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080aea4c9.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35862",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022619",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2082",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6697",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/36046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080aea4c9.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2049",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-07-30T18:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through 12.0(32)SY9, 12.2(33)SXI1 through 12.2(33)SXI2, 12.2XNC before 12.2(33)XNC2, 12.2XND before 12.2(33)XND1, and 12.4(24)T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to cause a denial of service (device reload) by using an RFC4271 peer to send a malformed update, aka Bug ID CSCta33973."
      }, {
        "lang" : "es",
        "value" : "Cisco IOS v12.0(32)S12 hasta v12.0(32)S13 y v12.0(33)S3 hasta v12.0(33)S4, v12.0(32)SY8 hasta v12.0(32)SY9, v12.2(33)SXI1 hasta v12.2(33)SXI2, v12.2XNC hasta v12.2(33)XNC2, v12.2XND hasta v12.2(33)XND1, y v12.4(24)T1; y IOS XE v2.3 hasta v2.3.1t y v2.4 hasta v2.4.0; cuando el enrutado RFC4893 BGP está habilitado, lo que permite a los atacantes remoto causar una denegación de servicio (recarga del dispositivo) usando un par RFC4271 para enviar una actualización malformado, también conocido como Bud ID CSCta33973."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F505B0A-E9E0-4CF3-B85B-70EEE71314F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED66A91B-6429-4983-8167-07DECA601916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F288884-3DB7-474D-B56B-120E2DB7975A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A29860C6-75E6-43A4-8BF5-E6ABF2040B0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0C8019-BDDA-4019-AF64-352EFFAC9036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCFE974-9D9A-443D-A55D-6A2CBF96EC4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4627BEF7-CEEB-4CBC-8620-4D9C5A7F7C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "866E9A29-97D8-41E1-81BE-73FAF1B5E2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D57ACB3-4ADC-4FBE-BA46-395F277B9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2916FA5-1FFF-48FB-A079-693AD3444CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(24\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6AD6E5-EBB0-44D8-A63C-EFF7260E4CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91895083-E6C5-432A-BF41-8D157E539C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.3.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57F6EF3B-2F31-4449-9B2A-9114D41BBC6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4964AB2C-E255-4844-8DD9-FFFC9512B7C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0B52CA-3834-4435-A3E1-9684A41E6405"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36046",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080aea4c9.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35860",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022619",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2082",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6853",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/36046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080aea4c9.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2410",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-30T18:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account's username, in conjunction with an arbitrary password, over an ssh connection."
      }, {
        "lang" : "es",
        "value" : "La función local_handler_callback en server/responder/pam/pam_LOCAL_domain.c en sssd v0.4.1 no maneja apropiadamente contraseña en blanco en la base de datos  SSSD BE, lo que permite a los atacantes dependientes de contexto, obtener acceso, enviando el nombre de usuario, junto con una contraseña arbitraria, sobre una conexión ssh."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedorahosted:sssd:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD7E99D-15E0-4058-B69B-BC4E3EBC61FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36018",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35868",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/attachment.cgi?id=355424",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=514057",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01236.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/attachment.cgi?id=355424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=514057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01236.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-30T18:30:00.343",
      "lastModified" : "2023-11-07T02:04:11.273",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-2408.  Reason: This candidate is a duplicate of CVE-2009-2408.  Notes: All CVE users should reference CVE-2009-2408 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2408",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-30T19:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anterior a v3.5 y NSS anterior a v3.12.3  no tratan apropiadamente un carácter '\\0' en un nombre de dominio en el campo nombre común (CN) del asunto de un certificado X.509, que permite a un atacante de hombre-en-el-medio suplantar servidores SSL arbitrarios a través de un certificado manipulado por una autoridad de certificación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.13",
            "matchCriteriaId" : "311A4763-8018-4394-946D-C75220572EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.12.3",
            "matchCriteriaId" : "A21F310D-7D9F-45D7-974D-C615F99FBEB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.18",
            "matchCriteriaId" : "336E3C0C-0197-40FD-AD68-C13C518858C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0.23",
            "matchCriteriaId" : "C213A6FE-549A-4B85-BCBE-11CAF63A376C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3",
            "versionEndIncluding" : "11.1",
            "matchCriteriaId" : "FF141FBE-4CA5-4695-94A0-8BE1309D28CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise:10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AED08A6F-CD23-4405-B1CF-C96BB8AE7D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1608E282-2E96-4447-848D-DBE915DB0EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD2D897-E321-4CED-92E0-11A98B52053C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isc.sans.org/diary.html?storyid=7003",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125198917018936&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://osvdb.org/56723",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36088",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36125",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36139",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36157",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36434",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36669",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021030.1-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1874",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:197",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:217",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-42.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openldap.org/devel/cvsweb.cgi/libraries/libldap/tls_m.c.diff?r1=1.8&r2=1.11&f=h",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1207.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1432.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022632",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-810-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2085",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.wired.com/threatlevel/2009/07/kaminsky/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=510251",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10751",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8458",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/810-2/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=7003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125198917018936&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://osvdb.org/56723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021030.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-42.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openldap.org/devel/cvsweb.cgi/libraries/libldap/tls_m.c.diff?r1=1.8&r2=1.11&f=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1432.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-810-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.wired.com/threatlevel/2009/07/kaminsky/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=510251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/810-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2409",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-30T19:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time.  NOTE: the scope of this issue is currently limited because the amount of computation required is still large."
      }, {
        "lang" : "es",
        "value" : "La librería Network Security Services (NSS) en versiones anteriores a 3.12.3, como se utiliza en Firefox; GnuTLS en versiones anteriores a 2.6.4 y 2.7.4; OpenSSL 0.9.8 hasta la versión 0.9.8k; y otros productos que soportan MD2 con certificados X.509, lo que podrían permitir a atacantes remotos falsificar certificados usando defectos de diseño de MD2 para generar una colisión de hash en menos que tiempo que con fuerza bruta. NOTA: el alcance de este problema está actualmente limitado porque la cantidad de computación requerida es todavía grande."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.4",
            "matchCriteriaId" : "3306EB88-CE4C-4D5E-BE35-53DE6DEC5C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndExcluding" : "2.7.4",
            "matchCriteriaId" : "66221847-4F1D-4F26-8916-731BDFE5B3A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.12.3",
            "matchCriteriaId" : "A21F310D-7D9F-45D7-974D-C615F99FBEB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.9.8",
            "versionEndIncluding" : "0.9.8k",
            "matchCriteriaId" : "06458D9A-4AB2-4B8A-8902-D2A285801347"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36139",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36157",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36434",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36669",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/36739",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/42467",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200912-01.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1874",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:197",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:258",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1207.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1432.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/515055/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-810-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2010-0019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2085",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3126",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2010-0095.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/810-2/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2009/dsa-1888",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/36739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/42467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200912-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1432.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/515055/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-810-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2010-0019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2010-0095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/810-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2009/dsa-1888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-30T19:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.6 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246 and CVE-2009-0219."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad múltiple no especificado en PDF distiller en el componente Attachment Service en Research In Motion (RIM) BlackBerry Enterprise Server (BES) software v4.1.3 hasta v4.1.6 y BlackBerry Professional Software v4.1.4 permite a los atacantes remotos asistidos por usuarios causar una denegación de memoria(corrupción de memoria) o posiblemente ejecutar arbitrariamente código a través de un fichero adjunto .pdf manipulado, una vulnerabilidad diferente a CVE-2008-3246 y CVE-2009-0219."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4ACEF3E-E394-45E2-B20F-8575C92A490F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "C599BDFD-7985-4709-B7CA-2ED0A4B0F327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1:sp2:domino:*:*:*:*:*",
            "matchCriteriaId" : "B1CACCFE-8037-4B21-B386-31F8B5981089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9F71618E-5CB6-41A7-9705-6AD4344CDEA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BD344A-EE9C-4ECB-8CB1-35146FD6F056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1694E42-9AA5-4503-9714-CBDE388481A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F378AF-E25B-4D60-AF7E-9E6FB228BF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265D8F90-96C3-4627-ABA5-994C25F70A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:mr4:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A7A6BD-C0D7-40E0-BE1A-EC4396853296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_professional_software:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8534B50D-D051-4B26-957E-1A3E26E1E767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.blackberry.com/btsc/KB17953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/btsc/KB17953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-30T19:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Kaspersky Anti-Virus 2010 and Kaspersky Internet Security 2010 before Critical Fix 9.0.0.463 allows remote attackers to disable the Kaspersky application via unknown attack vectors unrelated to \"an external script.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Kaspersky Anti-Virus 2010 y Kaspersky Internet Security 2010 anteriores a Critical Fix v9.0.0.463  permite a los atacantes remotos deshabilitar la aplicación Kaspersky a través de un vector de ataque no relacionado a \"una secuencia de comandos externa\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:kaspersky_anti-virus:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CA50F0-B82E-46FB-9CAF-B6B02A77C8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:kaspersky_internet_security:2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6D7B95D-34B9-4F29-855D-61575B6198F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35978",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kaspersky.com/technews?id=203038755",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1998",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kaspersky.com/technews?id=203038755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-30T19:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FlashDen Guestbook allows remote attackers to obtain configuration information via a direct request to amfphp/phpinfo.php, which calls the phpinfo function."
      }, {
        "lang" : "es",
        "value" : "FlashDen Guestbook permite a los atacantes remotos obtener información de configuración a través de una petición directa a amfphp/phpinfo.php, que llama a la función phpinfo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flashden:guestbook:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "092878DC-6999-411B-ACBE-C9B6F1C93CE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56548",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/flashden-disclose.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36000",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/flashden-disclose.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-30T19:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IATA (ata) driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service (kernel panic) via a certain IOCTL request with a large count, which triggers a malloc call with a large value."
      }, {
        "lang" : "es",
        "value" : "El controlador IATA (ata) en FreeBSD v6.0 y v8.0, cuando está disponible la lectura en el directorio /dev, permite a usuarios locales provocar una denegación de servicio (kernel panic) a través de ciertas peticiones IOCTL con un \"count\" largo, que provoca  una llamada para la reserva de memoria (malloc) con un valor largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D2C79D5-D27F-4B08-A8DF-3E3AAF4E16A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF1F9EF-01AF-4708-AE02-765360AF3D66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-30T19:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .m3u or possibly (2) .pst file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica in Sorcerer Software MultiMedia Jukebox v4.0 Build 020124 permite a los atacantes remoto causar una denegación de servicio (caída de aplicación) o posiblemente ejecuta código arbitrario a través de archivos manipulados (1) .m3u o posiblemente (2) .pst"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sorcerersoftware:multimedia_jukebox:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D98A4E96-54DC-453D-AC5C-A7A3D7974BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35860",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-30T20:00:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service (crash) via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer."
      }, {
        "lang" : "es",
        "value" : "main/rtp.c en Asterisk Open Source v1.6.1 anterior v1.6.1.2, permite a atacantes remotos provocar una denegación de servicio (caída) a través de un marco de texto RTP sin un determinado delimitador, lo que provoca una deferencia a puntero NULL y su consecuente cálculo no válido de puntero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFF2686-0F5C-4F20-AA93-6B63C5ADCD82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2009-004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://downloads.digium.com/pub/security/AST-2009-004-1.6.1.diff.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/56571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36039",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2067",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2009-004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://downloads.digium.com/pub/security/AST-2009-004-1.6.1.diff.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/56571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-31T19:00:01.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer overflows, related to (1) the Imf::PreviewImage::PreviewImage function and (2) compressor constructors.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de enteros en OpenEXR v1.2.2 y v1.6.1 permite a los atacantes dependientes del contexto provocar una denegación de servicio (finalización de la aplicación) o posiblemente ejecutar código de su elección mediante vectores no especificados que provocan desbordamientos de búfer basados en memoria dinámica, relacionados con (1) al función Imf::PreviewImage::PreviewImage y (2) el contructor del compresor. NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D0003E3-C50B-4C46-8A24-A874A5C137E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763A3838-4D7D-4221-963C-8A58560A03F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://release.debian.org/proposed-updates/stable_diffs/openexr_1.6.1-3%2Blenny3.debdiff",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36030",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36032",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3+lenny3.diff.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1842",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35838",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-831-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2035",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/blob/master/CHANGES.md#version-170-july-23-2010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01286.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01290.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://release.debian.org/proposed-updates/stable_diffs/openexr_1.6.1-3%2Blenny3.debdiff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3+lenny3.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-831-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/blob/master/CHANGES.md#version-170-july-23-2010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01286.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01290.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-31T19:00:01.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger a free of an uninitialized pointer."
      }, {
        "lang" : "es",
        "value" : "La implementación de la descompresión en la función Imf::hufUncompress en OpenEXR v1.2.2 y v1.6.1 permite a los atacantes dependientes del contexto provocar una denegación de servicio (finalización de la aplicación) o posiblemente ejecutar código de su elección mediante vectores que provocan una estructura de punteros no inicializados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D0003E3-C50B-4C46-8A24-A874A5C137E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763A3838-4D7D-4221-963C-8A58560A03F6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33910C38-56F2-4D36-BBA3-C88E163704B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B68DF-1440-4587-8458-9C5F4D1E43F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.8",
            "matchCriteriaId" : "80C038E4-C24D-45E9-8287-C205C0C07809"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0507E91-567A-41D6-A7E5-5088A39F75FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB5EDB-520B-4DEF-B06E-65CA13152824"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://release.debian.org/proposed-updates/stable_diffs/openexr_1.6.1-3%2Blenny3.debdiff",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36030",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36032",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36123",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36753",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3+lenny3.diff.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1842",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:190",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:191",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35838",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022674",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-831-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2035",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01286.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01290.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://release.debian.org/proposed-updates/stable_diffs/openexr_1.6.1-3%2Blenny3.debdiff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3+lenny3.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-831-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01286.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01290.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-31T19:00:01.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the compression implementation in OpenEXR 1.2.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región heap de la memoria en la implementación de compresión en OpenEXR versión 1.2.2, permite a los atacantes dependiendo del contexto causar una denegación de servicio (bloqueo de aplicación) o posiblemente ejecutar código arbitrario por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D0003E3-C50B-4C46-8A24-A874A5C137E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36032",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1842",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35838",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-831-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2035",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/blob/master/CHANGES.md#version-170-july-23-2010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-831-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/blob/master/CHANGES.md#version-170-july-23-2010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2406",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-31T19:00:01.157",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to not ensuring that the key signature length in a Tag 11 packet is compatible with the key signature buffer size."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función parse_tag_11_packet en fs/ecryptfs/keystore.c en el subsistema eCryptfs del kernel de Linux anteriores a v2.6.30.4 permite a usuarios locales provocar una denegación de servicio (finalización del sistema) o posiblemente obtener mayores privilegios mediante vectores que utilizan un fichero eCryptfs modificado, relacionados con la no comprobación de que la longitud de la clave de firma en un paquete \"Tag 11\" es compatible con el tamaño del búfer de la clave de firma."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux:kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760FDC9-BB79-4299-8A6D-482085EE5BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux:kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56EEB157-5037-4EAD-8625-35B91B167111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.30.3",
            "matchCriteriaId" : "35E762F1-57F3-4E5D-938D-F966F4F5EDB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC8651-9291-4CAE-AA49-C1CA4C7AE450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:64-bit_x86:*:*:*:*:*",
            "matchCriteriaId" : "A12077FF-39D0-474A-AB6C-62926CC065B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:itanium_ia64_montecito:*:*:*:*:*",
            "matchCriteriaId" : "508BC14E-41D8-4847-AE0F-7830E2EE0522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241FF5F5-516B-4F77-ABAF-787DFEFEC1AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "79C73761-289A-4BEE-BC3F-A5EC4AC7B2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D7BBB5F-44F7-467F-B934-33ABF744A107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0478831E-87B2-441F-AEC2-403A35FED1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF02479-2124-4655-A38D-A4793D3B8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBB1A21-3826-4BC5-A243-AF8F8D1D4728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55F2549-F813-4BD6-8933-6788D898ECB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "980A6C7D-6175-4A44-8377-74AA7A9FD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C226902-04D9-4F32-866C-20225841ECF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "655DB612-AF49-4C17-AFB9-2E33EE8E0572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F65DF2-2794-47B7-9676-CCF150683CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:x86_32:*:*:*:*:*",
            "matchCriteriaId" : "A2B1B229-B325-4D8C-B326-1FF6D85891F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A252C50-D63A-4FC0-A51E-A63A939D6AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED4E9DD-DDAD-46A8-9AD2-9CAE406F7575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D97ED16-D6B7-4445-889C-4D6DE2EDC49A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C2D5D4-9A4B-4CDF-8D71-D22EB5E97D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFB2843-A867-48EC-97D7-B106C7BBAED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1E1A8B-6FA1-45AD-B034-EC34884527DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CBD2D9-3765-40B2-A056-D71BE750CC01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F4D967-ED04-42EA-8B3E-36301D39D651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git3:*:*:*:*:*:*",
            "matchCriteriaId" : "C498EE89-7F07-4B1E-90E6-5897E6B04670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git4:*:*:*:*:*:*",
            "matchCriteriaId" : "708656AF-92AE-4EAF-AF19-F457DB04ADB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git5:*:*:*:*:*:*",
            "matchCriteriaId" : "3B263AB8-74A4-4C73-915C-A02724C24B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git6:*:*:*:*:*:*",
            "matchCriteriaId" : "A96D739B-9E8B-4D2F-9DED-4C9B313473CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:git7:*:*:*:*:*:*",
            "matchCriteriaId" : "4ACDEFEE-B946-4232-8BD5-A9F7AA84ED85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "247E13CB-9B11-4B64-80AD-C0F8482CCC0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "903FE5D3-A9FB-466D-833B-448233BB0803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "958EDC43-0848-4D93-9D07-6A085A5940B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "AD35F21D-0A28-4C14-BCF5-8EDA760701C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "3AAD8BE9-A05B-40E8-80DF-0B2878968BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "D123AAFE-3F17-45C4-9382-BA392FD022C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "1BACA0F0-B7B5-4C8B-8D9A-DAA803960AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D42BA44-C69B-4170-9867-CABF93CA9BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A12DE15-E192-4B90-ADB7-A886B3746DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6588E7-F4FA-40F5-8945-FC7B6094376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA311B8-D32E-4853-9B07-58EAF1019D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F0F679-43C8-426E-A97E-C3B207A3331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA40BC48-D6B5-4424-B306-F99E85EBBCB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2DF2BB-F94A-4692-AFDC-47C42F04081B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "BB286B42-E739-46CD-BC96-972CFFAECB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "7636014B-CC2A-43A3-9C9A-04B26AEB06D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ED7CE5-3388-4CB9-AF60-A2AF19611327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0138807-6313-4A3F-AB5A-4B7D4A9BE287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA2227-F259-499D-BF50-5074B1E7DD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A896D0-032C-4467-9D57-E47E8C612704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:git7:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEBA0F6-5453-4993-932B-BB8941DCC5CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3463B83B-E46F-456E-98BA-801C59AEB337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "05FD0767-03F3-416C-AB6D-6BC4A12220B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8452D554-8DEB-4265-839C-6B40CCFB56B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "94F445F9-57A5-4453-BB5D-290349C04A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "62C97D20-4152-47C4-B21B-8206CF49E20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27430190-EB83-43C5-9584-4F65CF65151A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386B13F-9D7C-45F8-B86A-886384144A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:git1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F95AB2-319C-4BDE-8D34-9FBE69A2FB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D48FD9D7-E775-4E26-AEBF-01A09C404D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "89EA3CF3-0AB7-4648-96BA-25E978D2C8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc2_git7:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4DB179-F78F-4D36-A47D-557FB1B945DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc8-kk:*:*:*:*:*:*",
            "matchCriteriaId" : "23859759-4748-4A03-9D78-083C77CFF4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A701E87D-B807-426E-9CD4-6721DBCABE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5FC0A9-A78A-4D09-BDCC-208AFC899824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBFC9DD-B7C2-4FB2-A8F6-29FF50EFAAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.rc2-git1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B3BFC1-4B0A-4D63-BFA2-CF6A51A8D2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E242D3DE-D1DC-406A-BCC3-C4380B7EC369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC40B6DE-09D9-422B-965B-7EB9F6661DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6352a29305373ae6196491e6d4669f301e26492e",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://risesecurity.org/advisories/RISE-2009002.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35985",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36045",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36054",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36116",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36131",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1845",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.4",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:029",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1193.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505334/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35851",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022663",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-807-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2041",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10072",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8246",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00166.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00223.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6352a29305373ae6196491e6d4669f301e26492e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://risesecurity.org/advisories/RISE-2009002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1193.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505334/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-807-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00166.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00223.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG did not include support for eCryptfs, and therefore are not affected by this issue.\n\nRed Hat Enterprise Linux 5 was vulnerable to this issue and was addressed via: https://rhn.redhat.com/errata/RHSA-2009-1193.html",
        "lastModified" : "2009-08-18T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2407",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-07-31T19:00:01.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the parse_tag_3_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to a large encrypted key size in a Tag 3 packet."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la función parse_tag_3_packet en fs/ecryptfs/keystore.c en el subsistema eCryptfs del kernel de Linux anteriores a v2.6.30.4 permite a usuarios locales provocar una denegación de servicio (finalización del sistema) o posiblemente obtener mayores privilegios mediante vectores que emplean un fichero eCryptfs modificado, relacionado con un tamaño de clave de cifrado larga en un paquete \"Tag 3\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.30.3",
            "matchCriteriaId" : "35E762F1-57F3-4E5D-938D-F966F4F5EDB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACBB194-1D24-464A-B79C-44B8127EAD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0138807-6313-4A3F-AB5A-4B7D4A9BE287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA2227-F259-499D-BF50-5074B1E7DD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A896D0-032C-4467-9D57-E47E8C612704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A415FECF-89CC-4D71-B1BF-6A678D32599D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F77E54-5F4A-4D47-8DE8-097B4BBC7944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752148FC-1594-4108-AE0F-C5145B978454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09546671-E75D-4F50-9D86-DFDDAC9DC5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6964925C-4394-4E82-976B-770A99E74F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8C909E-02D7-4B29-AA68-897BD0200B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27430190-EB83-43C5-9584-4F65CF65151A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386B13F-9D7C-45F8-B86A-886384144A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67A63E8-837E-4162-999E-3B3DAAE57C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A701E87D-B807-426E-9CD4-6721DBCABE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F6E506-EC0A-4784-BDA3-B7B5CD938B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFA0277-B491-4BB1-88DC-85362F0A689C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE922924-6496-4D24-94A6-8EDD431A4568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E55450-F6D9-483C-9CC8-E651E5A12AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC40B6DE-09D9-422B-965B-7EB9F6661DEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f151cd2c54ddc7714e2f740681350476cda03a28",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://risesecurity.org/advisories/RISE-2009003.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35985",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36045",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36054",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36116",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36131",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1845",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.4",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1193.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505337/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35850",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-807-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2041",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11255",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8057",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00166.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00223.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f151cd2c54ddc7714e2f740681350476cda03a28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://risesecurity.org/advisories/RISE-2009003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1193.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505337/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-807-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00166.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00223.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG did not include support for eCryptfs, and therefore are not affected by this issue.\n\nRed Hat Enterprise Linux 5 was vulnerable to this issue and was addressed via: https://rhn.redhat.com/errata/RHSA-2009-1193.html",
        "lastModified" : "2009-08-18T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-31T19:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to a \"privilege escalation vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, permite a atacantes remotos provocar una denegación de servicio (finalización de la aplicación) o posiblemente ejecutar código de su elección mediante vectores no especificados, relacionados con una vulnerabilidad de escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "14F82070-F701-4F73-9E69-D694B0618B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697E64F5-0150-4542-B3C3-7443A00E8DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D16ACA-65FF-4FBD-818D-DF1606539687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2F45DC-32D8-4152-B090-C764B1998C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DDE65E-ED35-42B6-A139-BB6F571B5967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.22.87",
            "matchCriteriaId" : "C344DE1F-E67B-4B5D-9C2F-9E118C6220B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFF4A51-C936-4C5B-8276-FD454C9E4F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E93289-6EE0-401A-958D-F59D2CDAE2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C00E5438-DBD7-4A47-8E5F-0D3946EA3102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82D5B56-44E0-4120-B73E-0A1155AF4B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E895107-ED8A-4F88-87C3-935EAE299C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4007D621-A0BC-4927-82A7-10D73802BCF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641776AE-5408-439E-8290-DD9324771874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138A932A-D775-46A2-86EC-3C03C96884C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "F648661E-BA18-41F9-A0A7-F9D5D7E2056B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A88BDD68-3EDD-49F4-B656-EB03BF849664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32912721-F750-4C20-B999-E728F7D3A85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95FA639-346C-491C-81A8-6C2A7B01AA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7DD938-F963-4E03-B66B-F00436E4EA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934A869D-D58D-4C36-B86E-013F62790585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFA6611-99DA-48B0-89F7-DD99B8E30334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AF804B-BD7A-4AD7-AD44-B5D980443B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0557AA2A-FA3A-460A-8F03-DC74B149CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22F1B02-CCF5-4770-A79B-1F58CA4321CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93957171-F1F4-43ED-A8B9-2D36C81EB1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE89894-E492-4380-8A2B-4CDD3A15667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6ED706-BAF2-4795-B597-6F7EE8CA8911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E2CF6-4D15-4168-A933-3EC52D8F93FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D50BF190-2629-49A8-A377-4723C93FFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4028B-72E7-4E4A-AD0F-645F5AACAA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA646396-7C10-45A0-89A9-C75C5D8AFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D250C7-E7DE-491C-9FE3-F9F77C971B24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35890",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35900",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2086",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-31T19:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en Adobe Flash Player versiones anteriores a v9.0.246.0 y v10.x anteriores a v10.0.32.18, y Adobe AIR anteriores a v1.5.2, permite a atacantes remotos provocar una denegación de servicio (finalización de la aplicación) o posiblemente ejecutar código de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "14F82070-F701-4F73-9E69-D694B0618B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697E64F5-0150-4542-B3C3-7443A00E8DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D16ACA-65FF-4FBD-818D-DF1606539687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2F45DC-32D8-4152-B090-C764B1998C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DDE65E-ED35-42B6-A139-BB6F571B5967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.22.87",
            "matchCriteriaId" : "C344DE1F-E67B-4B5D-9C2F-9E118C6220B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFF4A51-C936-4C5B-8276-FD454C9E4F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E93289-6EE0-401A-958D-F59D2CDAE2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C00E5438-DBD7-4A47-8E5F-0D3946EA3102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82D5B56-44E0-4120-B73E-0A1155AF4B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E895107-ED8A-4F88-87C3-935EAE299C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4007D621-A0BC-4927-82A7-10D73802BCF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641776AE-5408-439E-8290-DD9324771874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138A932A-D775-46A2-86EC-3C03C96884C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "F648661E-BA18-41F9-A0A7-F9D5D7E2056B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A88BDD68-3EDD-49F4-B656-EB03BF849664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32912721-F750-4C20-B999-E728F7D3A85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95FA639-346C-491C-81A8-6C2A7B01AA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7DD938-F963-4E03-B66B-F00436E4EA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934A869D-D58D-4C36-B86E-013F62790585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFA6611-99DA-48B0-89F7-DD99B8E30334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AF804B-BD7A-4AD7-AD44-B5D980443B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0557AA2A-FA3A-460A-8F03-DC74B149CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22F1B02-CCF5-4770-A79B-1F58CA4321CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93957171-F1F4-43ED-A8B9-2D36C81EB1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE89894-E492-4380-8A2B-4CDD3A15667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6ED706-BAF2-4795-B597-6F7EE8CA8911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E2CF6-4D15-4168-A933-3EC52D8F93FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D50BF190-2629-49A8-A377-4723C93FFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4028B-72E7-4E4A-AD0F-645F5AACAA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA646396-7C10-45A0-89A9-C75C5D8AFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D250C7-E7DE-491C-9FE3-F9F77C971B24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35890",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35904",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2086",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-31T19:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, related to a \"null pointer vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player versiones anteriores a v9.0.246.0 y v10.x anteriores a v10.0.32.18, y Adobe AIR anteriores a v1.5.2, permite a atacantes remotos provocar una denegación de servicio (finalizar la aplicación) o posiblemente ejecutar código de su elección mediante vectores no especificados, relacionados con una vulnerabilidad de puntero nulo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "14F82070-F701-4F73-9E69-D694B0618B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697E64F5-0150-4542-B3C3-7443A00E8DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D16ACA-65FF-4FBD-818D-DF1606539687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2F45DC-32D8-4152-B090-C764B1998C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DDE65E-ED35-42B6-A139-BB6F571B5967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.22.87",
            "matchCriteriaId" : "C344DE1F-E67B-4B5D-9C2F-9E118C6220B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFF4A51-C936-4C5B-8276-FD454C9E4F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E93289-6EE0-401A-958D-F59D2CDAE2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C00E5438-DBD7-4A47-8E5F-0D3946EA3102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82D5B56-44E0-4120-B73E-0A1155AF4B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E895107-ED8A-4F88-87C3-935EAE299C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4007D621-A0BC-4927-82A7-10D73802BCF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641776AE-5408-439E-8290-DD9324771874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138A932A-D775-46A2-86EC-3C03C96884C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "F648661E-BA18-41F9-A0A7-F9D5D7E2056B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A88BDD68-3EDD-49F4-B656-EB03BF849664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32912721-F750-4C20-B999-E728F7D3A85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95FA639-346C-491C-81A8-6C2A7B01AA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7DD938-F963-4E03-B66B-F00436E4EA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934A869D-D58D-4C36-B86E-013F62790585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFA6611-99DA-48B0-89F7-DD99B8E30334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AF804B-BD7A-4AD7-AD44-B5D980443B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0557AA2A-FA3A-460A-8F03-DC74B149CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22F1B02-CCF5-4770-A79B-1F58CA4321CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93957171-F1F4-43ED-A8B9-2D36C81EB1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE89894-E492-4380-8A2B-4CDD3A15667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6ED706-BAF2-4795-B597-6F7EE8CA8911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E2CF6-4D15-4168-A933-3EC52D8F93FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D50BF190-2629-49A8-A377-4723C93FFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4028B-72E7-4E4A-AD0F-645F5AACAA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA646396-7C10-45A0-89A9-C75C5D8AFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D250C7-E7DE-491C-9FE3-F9F77C971B24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35890",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2086",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-31T19:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Adobe Flash Player versiones anteriores a v9.0.246.0 y v10.x anteriores a v10.0.32.18, y Adobe AIR anteriores a v1.5.2, permite a atacantes remotos provocar una denegación de servicio (finalización de aplicación) o posiblemente ejecutar código de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "14F82070-F701-4F73-9E69-D694B0618B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697E64F5-0150-4542-B3C3-7443A00E8DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D16ACA-65FF-4FBD-818D-DF1606539687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2F45DC-32D8-4152-B090-C764B1998C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DDE65E-ED35-42B6-A139-BB6F571B5967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.22.87",
            "matchCriteriaId" : "C344DE1F-E67B-4B5D-9C2F-9E118C6220B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFF4A51-C936-4C5B-8276-FD454C9E4F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E93289-6EE0-401A-958D-F59D2CDAE2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C00E5438-DBD7-4A47-8E5F-0D3946EA3102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82D5B56-44E0-4120-B73E-0A1155AF4B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E895107-ED8A-4F88-87C3-935EAE299C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4007D621-A0BC-4927-82A7-10D73802BCF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641776AE-5408-439E-8290-DD9324771874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138A932A-D775-46A2-86EC-3C03C96884C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "F648661E-BA18-41F9-A0A7-F9D5D7E2056B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A88BDD68-3EDD-49F4-B656-EB03BF849664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32912721-F750-4C20-B999-E728F7D3A85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95FA639-346C-491C-81A8-6C2A7B01AA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7DD938-F963-4E03-B66B-F00436E4EA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934A869D-D58D-4C36-B86E-013F62790585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFA6611-99DA-48B0-89F7-DD99B8E30334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AF804B-BD7A-4AD7-AD44-B5D980443B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0557AA2A-FA3A-460A-8F03-DC74B149CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22F1B02-CCF5-4770-A79B-1F58CA4321CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93957171-F1F4-43ED-A8B9-2D36C81EB1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE89894-E492-4380-8A2B-4CDD3A15667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6ED706-BAF2-4795-B597-6F7EE8CA8911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E2CF6-4D15-4168-A933-3EC52D8F93FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D50BF190-2629-49A8-A377-4723C93FFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4028B-72E7-4E4A-AD0F-645F5AACAA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA646396-7C10-45A0-89A9-C75C5D8AFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D250C7-E7DE-491C-9FE3-F9F77C971B24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35890",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2086",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-31T19:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a \"clickjacking vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player versiones anteriores a v9.0.246.0 y v10.x anteriores a v10.0.32.18, y Adobe AIR versiones anteriores a v1.5.2, permite que atacantes engañen al usuario para (1) pulsar en un enlace o (2) completar un diálogo, relacionado con una vulnerabilidad de \"clickjacking\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "14F82070-F701-4F73-9E69-D694B0618B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697E64F5-0150-4542-B3C3-7443A00E8DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D16ACA-65FF-4FBD-818D-DF1606539687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2F45DC-32D8-4152-B090-C764B1998C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DDE65E-ED35-42B6-A139-BB6F571B5967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.22.87",
            "matchCriteriaId" : "C344DE1F-E67B-4B5D-9C2F-9E118C6220B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFF4A51-C936-4C5B-8276-FD454C9E4F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E93289-6EE0-401A-958D-F59D2CDAE2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C00E5438-DBD7-4A47-8E5F-0D3946EA3102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82D5B56-44E0-4120-B73E-0A1155AF4B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E895107-ED8A-4F88-87C3-935EAE299C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4007D621-A0BC-4927-82A7-10D73802BCF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641776AE-5408-439E-8290-DD9324771874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138A932A-D775-46A2-86EC-3C03C96884C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "F648661E-BA18-41F9-A0A7-F9D5D7E2056B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A88BDD68-3EDD-49F4-B656-EB03BF849664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32912721-F750-4C20-B999-E728F7D3A85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95FA639-346C-491C-81A8-6C2A7B01AA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7DD938-F963-4E03-B66B-F00436E4EA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934A869D-D58D-4C36-B86E-013F62790585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFA6611-99DA-48B0-89F7-DD99B8E30334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AF804B-BD7A-4AD7-AD44-B5D980443B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0557AA2A-FA3A-460A-8F03-DC74B149CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22F1B02-CCF5-4770-A79B-1F58CA4321CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93957171-F1F4-43ED-A8B9-2D36C81EB1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE89894-E492-4380-8A2B-4CDD3A15667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6ED706-BAF2-4795-B597-6F7EE8CA8911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E2CF6-4D15-4168-A933-3EC52D8F93FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D50BF190-2629-49A8-A377-4723C93FFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4028B-72E7-4E4A-AD0F-645F5AACAA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA646396-7C10-45A0-89A9-C75C5D8AFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D250C7-E7DE-491C-9FE3-F9F77C971B24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2086",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-31T19:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving URL parsing."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en Adobe Flash Player versiones anteriores a v9.0.246.0 y v10.x anteriores a v10.0.32.18, y Adobe AIR versiones anteriores a v1.5.2, permite a atacantes remotos provocar una denegación de servicio (finalización de la aplicación) o posiblemente ejecutar código de su elección mediante vectores no especificados relacionados con el análisis sintáctico de una URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "14F82070-F701-4F73-9E69-D694B0618B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697E64F5-0150-4542-B3C3-7443A00E8DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D16ACA-65FF-4FBD-818D-DF1606539687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2F45DC-32D8-4152-B090-C764B1998C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DDE65E-ED35-42B6-A139-BB6F571B5967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.22.87",
            "matchCriteriaId" : "C344DE1F-E67B-4B5D-9C2F-9E118C6220B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFF4A51-C936-4C5B-8276-FD454C9E4F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E93289-6EE0-401A-958D-F59D2CDAE2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C00E5438-DBD7-4A47-8E5F-0D3946EA3102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82D5B56-44E0-4120-B73E-0A1155AF4B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E895107-ED8A-4F88-87C3-935EAE299C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4007D621-A0BC-4927-82A7-10D73802BCF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641776AE-5408-439E-8290-DD9324771874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138A932A-D775-46A2-86EC-3C03C96884C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "F648661E-BA18-41F9-A0A7-F9D5D7E2056B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A88BDD68-3EDD-49F4-B656-EB03BF849664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32912721-F750-4C20-B999-E728F7D3A85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95FA639-346C-491C-81A8-6C2A7B01AA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7DD938-F963-4E03-B66B-F00436E4EA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934A869D-D58D-4C36-B86E-013F62790585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFA6611-99DA-48B0-89F7-DD99B8E30334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AF804B-BD7A-4AD7-AD44-B5D980443B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0557AA2A-FA3A-460A-8F03-DC74B149CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22F1B02-CCF5-4770-A79B-1F58CA4321CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93957171-F1F4-43ED-A8B9-2D36C81EB1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE89894-E492-4380-8A2B-4CDD3A15667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6ED706-BAF2-4795-B597-6F7EE8CA8911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E2CF6-4D15-4168-A933-3EC52D8F93FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D50BF190-2629-49A8-A377-4723C93FFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4028B-72E7-4E4A-AD0F-645F5AACAA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA646396-7C10-45A0-89A9-C75C5D8AFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D250C7-E7DE-491C-9FE3-F9F77C971B24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35890",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35902",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2086",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-31T19:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an AVM2 file with a large intrf_count value that triggers a dereference of an out-of-bounds pointer."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en Adobe Flash Player versiones anteriores a v9.0.246.0 y v10.x anteriores a v10.0.32.18, y Adobe AIR versiones anteriores a v1.5.2, permite a atacantes remotos provocar una denegación de servicio (finalización de la aplicación) o posiblemente ejecutar código de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "14F82070-F701-4F73-9E69-D694B0618B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697E64F5-0150-4542-B3C3-7443A00E8DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D16ACA-65FF-4FBD-818D-DF1606539687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2F45DC-32D8-4152-B090-C764B1998C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DDE65E-ED35-42B6-A139-BB6F571B5967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.22.87",
            "matchCriteriaId" : "C344DE1F-E67B-4B5D-9C2F-9E118C6220B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFF4A51-C936-4C5B-8276-FD454C9E4F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E93289-6EE0-401A-958D-F59D2CDAE2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C00E5438-DBD7-4A47-8E5F-0D3946EA3102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82D5B56-44E0-4120-B73E-0A1155AF4B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E895107-ED8A-4F88-87C3-935EAE299C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4007D621-A0BC-4927-82A7-10D73802BCF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641776AE-5408-439E-8290-DD9324771874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138A932A-D775-46A2-86EC-3C03C96884C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "F648661E-BA18-41F9-A0A7-F9D5D7E2056B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A88BDD68-3EDD-49F4-B656-EB03BF849664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32912721-F750-4C20-B999-E728F7D3A85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95FA639-346C-491C-81A8-6C2A7B01AA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7DD938-F963-4E03-B66B-F00436E4EA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934A869D-D58D-4C36-B86E-013F62790585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFA6611-99DA-48B0-89F7-DD99B8E30334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AF804B-BD7A-4AD7-AD44-B5D980443B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0557AA2A-FA3A-460A-8F03-DC74B149CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22F1B02-CCF5-4770-A79B-1F58CA4321CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93957171-F1F4-43ED-A8B9-2D36C81EB1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE89894-E492-4380-8A2B-4CDD3A15667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6ED706-BAF2-4795-B597-6F7EE8CA8911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E2CF6-4D15-4168-A933-3EC52D8F93FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D50BF190-2629-49A8-A377-4723C93FFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4028B-72E7-4E4A-AD0F-645F5AACAA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA646396-7C10-45A0-89A9-C75C5D8AFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D250C7-E7DE-491C-9FE3-F9F77C971B24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://roeehay.blogspot.com/2009/08/advisory-adobe-flash-player-avm2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://roeehay.blogspot.com/2009/08/exploitation-of-cve-2009-1869.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505467/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35890",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2086",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://roeehay.blogspot.com/2009/08/advisory-adobe-flash-player-avm2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://roeehay.blogspot.com/2009/08/exploitation-of-cve-2009-1869.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505467/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-07-31T19:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a \"local sandbox vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Adobe Flash Player versiones anteriores a v9.0.246.0 y v10.x anteriores a v10.0.32.18, y Adobe AIR versiones anteriores a v1.5.2, permite que atacantes obtengan información sensible mediante vectores involucrados con el almacenamiento de un fichero SWF en el disco duro, relacionados con una vulnerabilidad en la \"sandbox\" local."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "14F82070-F701-4F73-9E69-D694B0618B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697E64F5-0150-4542-B3C3-7443A00E8DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D16ACA-65FF-4FBD-818D-DF1606539687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2F45DC-32D8-4152-B090-C764B1998C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DDE65E-ED35-42B6-A139-BB6F571B5967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.22.87",
            "matchCriteriaId" : "C344DE1F-E67B-4B5D-9C2F-9E118C6220B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFF4A51-C936-4C5B-8276-FD454C9E4F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E93289-6EE0-401A-958D-F59D2CDAE2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C00E5438-DBD7-4A47-8E5F-0D3946EA3102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82D5B56-44E0-4120-B73E-0A1155AF4B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E895107-ED8A-4F88-87C3-935EAE299C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4007D621-A0BC-4927-82A7-10D73802BCF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641776AE-5408-439E-8290-DD9324771874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138A932A-D775-46A2-86EC-3C03C96884C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "F648661E-BA18-41F9-A0A7-F9D5D7E2056B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "A88BDD68-3EDD-49F4-B656-EB03BF849664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32912721-F750-4C20-B999-E728F7D3A85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95FA639-346C-491C-81A8-6C2A7B01AA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7DD938-F963-4E03-B66B-F00436E4EA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934A869D-D58D-4C36-B86E-013F62790585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFA6611-99DA-48B0-89F7-DD99B8E30334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AF804B-BD7A-4AD7-AD44-B5D980443B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0557AA2A-FA3A-460A-8F03-DC74B149CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22F1B02-CCF5-4770-A79B-1F58CA4321CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93957171-F1F4-43ED-A8B9-2D36C81EB1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE89894-E492-4380-8A2B-4CDD3A15667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6ED706-BAF2-4795-B597-6F7EE8CA8911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E2CF6-4D15-4168-A933-3EC52D8F93FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D50BF190-2629-49A8-A377-4723C93FFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4028B-72E7-4E4A-AD0F-645F5AACAA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA646396-7C10-45A0-89A9-C75C5D8AFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D250C7-E7DE-491C-9FE3-F9F77C971B24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35890",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35908",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2086",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2404",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-08-03T14:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en el analizador de expresiones regulares en Mozilla NetWork Security Services (NSS) anteriores a 3.12.3 como las utilizadas en Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, y AOL Instant Messenger (AIM), permite a servidores SSL remotos provocar una denegación de servicio (caída de aplicación) o posiblemente ejecución de código de su elección a través de un nombre de dominio largo en el campo Common Name (CN) en un certificado X.509, relativo a la función cert_TestHost_Name.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:3.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "000A1698-C9DE-49A1-9F5D-FDED34A134E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DF7CEB-81F5-46FC-9588-AF5326957C89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gnome:evolution:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6606C39B-8137-44B6-A96E-E0B8F67FAFFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6A30E-7577-4569-9309-53A0AF7FE3AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138701FB-929A-4683-B41F-CB014ACFE44A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5C8E657-3049-4462-98F6-296C60BC8C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A0BF9F-F7E9-4196-BEF7-800B4C850990"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1185.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36088",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36102",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36125",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36139",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36157",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36434",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39428",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-273910-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021030.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021699.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.blackhat.com/presentations/bh-usa-09/MARLINSPIKE/BHUSA09-Marlinspike-DefeatSSL-SLIDES.pdf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1874",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:197",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:216",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-43.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1207.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35891",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-810-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103B.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2085",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=512912",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11174",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8658",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/810-2/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1185.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-273910-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021030.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021699.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blackhat.com/presentations/bh-usa-09/MARLINSPIKE/BHUSA09-Marlinspike-DefeatSSL-SLIDES.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-43.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-810-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=512912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/810-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-03T14:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Solaris Trusted Extensions in Sun Solaris 10, and OpenSolaris snv_37 through snv_120, allows remote attackers to cause a denial of service (panic) via vectors involving the parsing of labeled packets."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no específica en Solaris Trusted Extensions en Sun Solaris v10, y OpenSolaris snv_37 hasta snv_120, permite a atacantes remotos provocar una denegación de servicio (panic) a través de vectores que implican el analizador de paguetes etiquetados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B3BBCE23-9F15-45CD-859F-77ED540B51F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "053A0DA6-483C-49BB-BC7A-E624DB2C269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "447212A4-FACD-475E-A62B-60FE6504F63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB694DC0-407A-4555-8B72-DAF3C169DCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "535FF689-13A2-40C6-8706-7782038FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "843246D3-C2DA-454D-916A-AC8905E5134E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "244B7FE4-C485-4993-9810-3433C83A120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BE586AB9-9D46-4BC2-8092-51482F297410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "78B80C92-7EB5-4343-B830-32E8C011E572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "46E4ED9C-F013-48D2-8642-E5BA7599A512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A1E8108D-3CE7-4041-9027-1CA7473389EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E8585133-1F25-494A-8859-87B1D93305A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36040",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264808-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35882",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2089",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264808-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-03T14:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NtUserConsoleControl function in win32k.sys in Microsoft Windows XP SP2 and SP3, and Server 2003 before SP1, allows local administrators to bypass unspecified \"security software\" and gain privileges via a crafted call that triggers an overwrite of an arbitrary memory location.  NOTE: the vendor disputes the significance of this report, stating that 'the Administrator to SYSTEM \"escalation\" is not a security boundary we defend."
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA **  La función NtUserConsoleControl en win32k.sys en Microsoft Windows XP SP2 y SP3, y Server 2003 anterior a SP1, permite a usuarios administradores locales evitar \"programas de seguridad\" no especificados y obtener privilegios mediante una petición modificada que provoca la escritura de zonas de memoria de su elección. NOTA: el vendedor impugna la importancia de este informe, manteniendo que 'el \"escalado\" a SYSTEM de los administradores no es una limitación de seguridad que protejamos\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/srd/archive/2009/06/11/latest-baidu-public-posting-requires-adminisrator-to-elevate.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hi.baidu.com/azy0922/blog/item/f950cbc2890729130ef47783.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/56780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ntinternals.org/index.html#09_07_30",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/06/11/latest-baidu-public-posting-requires-adminisrator-to-elevate.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://hi.baidu.com/azy0922/blog/item/f950cbc2890729130ef47783.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/56780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ntinternals.org/index.html#09_07_30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-03T14:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in the URL, makes document.write calls to the resulting object, and then calls the stop method during the loading of the error page."
      }, {
        "lang" : "es",
        "value" : "Firefox de Mozilla anterior a versión 3.0.13, y versiones 3.5.x anteriores a 3.5.2, permite a atacantes remotos falsificar la barra de direcciones y posiblemente realizar ataques de tipo phishing, por medio de una página web diseñada que llama a window.open con un carácter no válido en la URL, hace llamadas de document.write hacia el objeto resultante y luego llama al método stop durante la carga de la página de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.1",
            "matchCriteriaId" : "033E4FC0-E968-429E-A684-35D0A54A038A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F72BFD4-000D-4B07-8261-C9F6839AD150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.2:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "229E350E-386C-4831-8988-5807A7601EE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.2:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "73DA5472-D97C-49F4-8D2D-E2522F59B68D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.2:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "83808B8E-0E9B-4F65-BF45-5FFD62B4F079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.mozilla.com/security/2009/07/28/url-bar-spoofing-vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://es.geocities.com/jplopezy/firefoxspoofing.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36126",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36141",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36435",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-44.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1431.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1432.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505242/30/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35803",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2006",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2142",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=451898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/811-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.mozilla.com/security/2009/07/28/url-bar-spoofing-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://es.geocities.com/jplopezy/firefoxspoofing.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-44.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1432.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505242/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=451898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/811-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-03T14:30:00.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mshtml.dll in Microsoft Internet Explorer 7 and 8 on Windows XP SP3 allows remote attackers to cause a denial of service (application crash) by calling the JavaScript findText method with a crafted Unicode string in the first argument, and only one additional argument, as demonstrated by a second argument of -1."
      }, {
        "lang" : "es",
        "value" : "mshtml.dll en Microsoft Internet Explorer v7 y v8 en Windows XP SP3 permite a atacantes remotos provocar una denegación de servicio (finalización de la aplicación) al llamar el método \"findText\" de código JavaScript con una cadena Unicode modificada en el primer argumento, y sólo un argumento adicional, como se ha comprobado con un segundo argumento con valor -1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52E757F-9B41-43B4-9D67-3FEDACA71283"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-03T18:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption, as demonstrated by Charlie Miller at SyScan '09 Singapore."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente CoreTelephony en Apple iPhone anterior a 3.0.1, permite a atacantes remotos ejecutar  código de su elección, obtener coordenadas GPS o activar el micrófono a través de un SMS que provoca una corrupción de memoria, como se demostró por Charlie Miller en la SyScan '09 en Singapur."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "F636A8C6-38F5-476B-BBDC-144B70957A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DB23F0-7226-4D0B-A3FA-A801F02EBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4AEDE82-E317-4066-A34F-BB3BCD3F53E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jul/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.cnet.com/8301-1009_3-10278472-83.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36070",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022626",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3754",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/55687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.syscan.org/Sg/program.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2105",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Jul/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.cnet.com/8301-1009_3-10278472-83.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/55687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.syscan.org/Sg/program.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2656",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-03T18:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service (network disconnection) via a crafted SMS message, as demonstrated by Collin Mulliner and Charlie Miller at Black Hat USA 2009."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el proceso com.android.phone en Android v1.0, v1.1 y v1.5, permite a atacantes remotos provocar una denegación de servicio (desconexión de la red) a través de un mensaje SMS manipulado, como se demostró por Collini Mulliner y Charlie Miller en la BlackHat USA 2009."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0721FD34-5F94-4828-A8AA-EF70FAB71FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CA4D29-321A-41ED-A75A-1EBB14A771C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C354829-6BEB-4C67-972A-60367073753C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56750",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35886",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://osvdb.org/56750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-04T16:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes it easier for remote web servers to track users."
      }, {
        "lang" : "es",
        "value" : "Apple GarageBand anterior a v5.1 reconfirura Safari aceptando todas las cookies sin importar el nombre de dominio, lo que hace que sea más sencillo para los servidores Web remotos seguir a los usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:garageband:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "F0AA3FD0-0103-4584-8D1D-2D8A105354AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:garageband:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B069491-5102-4BCB-8090-C3120898C14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:garageband:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C261362F-E7A5-4C21-9D3E-550D30640AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:garageband:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B16C1BB-7605-4B93-90E5-F480D71C2B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:garageband:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB160CA-FF32-4198-A06A-2AD26790A1DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36114",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3732",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35926",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2141",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2470",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-08-04T16:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox en versiones anteriores a la 3.0.12 y 3.5.x en versiones anteriores a la 3.5.2 permite a servidores proxy SOCKS5 remotos provocar una denegación de servicio (corrupción del flujo de datos) mediante un nombre de dominio largo en una respuesta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.1",
            "matchCriteriaId" : "033E4FC0-E968-429E-A684-35D0A54A038A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36126",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-38.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35925",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022665",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2142",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=459524",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52252",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10197",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-38.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=459524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-04T16:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2."
      }, {
        "lang" : "es",
        "value" : "nilfs-utils anterior a v2.0.14 instala multiples programas con privilegios setuid innecesarios, lo que permite a usuarios locales ejecutar comandos de su elección mediante la cadena de dispositivo en una opción -c de línea de comandos en mkfs.nilfs2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.13",
            "matchCriteriaId" : "0525D730-AA3E-476D-8C4B-06429C2BF656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3197F3B-BFC1-4E49-93CE-6905F37E5B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D3B8DD-4807-4AE4-AF9E-5787ABDA4F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F3928D-EF65-4AC4-8434-5CD365D26BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15AA866-D57A-4160-A8A4-484780324708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F8B68C-20DB-47B7-A08D-EE751B3E0014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0457D2C4-1692-4FEA-BCBA-C28ED551E2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ABDCB1F-ED12-4352-927D-C1FA8F23E654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA43728F-6636-4F00-83E6-E9BDAF37675F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6839A468-7AAB-49D3-800E-164026FBC37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25E1D19-2054-458A-BBD8-AC3A40046ED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ABD520E-589D-4B0E-8162-62103355DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B65C6883-5251-44C2-B679-82D188BBA098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC8FF77-9C3F-482F-81D9-BBE4F6E21575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD4B5E6-71C7-4B13-81CF-A97A8469DE75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E0B3B0-698E-4043-AB20-4CAC9040E579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF0A49D-AC5D-4E5D-968D-6ABC9832DA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15571B4-6A8F-49EE-BDAA-E00F9BD683F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C15CA21D-CB9B-4F3F-AB5C-FC202243FDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DD2FBA-834C-4646-95C1-FAF96DBC54C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E477B65-24C6-4A13-A31F-AB28DA67D64E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4104B28-C1FC-40AB-A56E-7E35A06FB144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD8DC56-05B1-4013-BB88-653EF4845594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602DAD58-1B2A-413F-996E-7F6F8259B248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B24056A-1D69-4F72-B935-A9C993229B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2851A8-46FB-41E2-A814-B791F0DB0407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7723F3C-0662-42F3-B867-F2B212B0DE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E10C3B-653A-467B-9784-7ACA8221A10F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72093057-2DD7-415F-9C95-E8AFE76EC14A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nilf:nilfs:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8EBF46-845F-4706-87C2-51139CD7D852"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=5c95a57102e23e6982467cbe23e922450d3f38ed",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=a5cb60e624e4863c8d6feaf2ea8791abb48d6f15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=d807e1c968c1f288486fb7d6f817434838fc12f7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/24/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=505374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=5c95a57102e23e6982467cbe23e922450d3f38ed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=a5cb60e624e4863c8d6feaf2ea8791abb48d6f15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=d807e1c968c1f288486fb7d6f817434838fc12f7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/24/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=505374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-04T16:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in ZNC before 0.072 allows remote attackers to overwrite arbitrary files via a crafted DCC SEND request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en ZNC anterior a v0.072 permite a atacantes remotos sobrescribir ficheros de su elección a través de una petición DCC SEND manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:znc:znc:0.044:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C012D55-9039-4D68-9CA0-5624ADEF583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:znc:znc:0.045:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C185E34-735D-4839-8C05-B46CE7028765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:znc:znc:0.047:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60AEE9F9-78B7-40B4-B28A-1B8F068CA953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:znc:znc:0.052:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AECFB9F-9630-438F-9BE4-E4A44A5023FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:znc:znc:0.054:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA564C01-2757-479C-9E33-2D7F0890C61C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:znc:znc:0.056:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFE27D3-487B-41A2-A6CE-AA36E07506BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:znc:znc:0.058:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E7CC41-1923-4295-8AFC-8D295FDD9C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:znc:znc:0.060:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2127D9-936F-4E71-BB78-02DE61FF44C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:znc:znc:0.062:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89151E35-63D2-440E-AD2F-A2BAECA6884B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:znc:znc:0.064:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952BC3B5-4D07-4C61-B3FE-650FBC699B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:znc:znc:0.066:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9983141A-3B1F-41EE-809A-0F435EC067C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:znc:znc:0.068:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A505A45-4404-4E0E-97AD-69D9C5D280DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:znc:znc:0.070:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8B51F-4FD7-463B-9E8B-6846E7E690A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://en.znc.in/w/index.php?title=ZNC&oldid=3209#WARNING",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://en.znc.in/wiki/ChangeLog/0.072",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35916",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/21/5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00965.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://en.znc.in/w/index.php?title=ZNC&oldid=3209#WARNING",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://en.znc.in/wiki/ChangeLog/0.072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/21/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00965.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2659",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-04T16:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected \"static media files,\" which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "El manejador Admin media en core/servers/basehttp.py en Django 1.0 y 0.96 no mapea de forma adecuada peticiones de URL de tipo \"static media files\", lo que permite a atacantes remotos dirigir ataques de salto de directorio y leer archivos de su elección mediante una URL elaborada para tal fin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:django_project:django:0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F54F75F-B2BC-4A44-B93B-DB75856BEC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:django_project:django:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAF388C-FD25-48AB-A957-807BE5AF2ABC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.djangoproject.com/changeset/11353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.djangoproject.com/weblog/2009/jul/28/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/29/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00055.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00069.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://code.djangoproject.com/changeset/11353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.djangoproject.com/weblog/2009/jul/28/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/29/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00055.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00069.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-04T16:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in CamlImages 2.2 might allow context-dependent attackers to execute arbitrary code via images containing large width and height values that trigger a heap-based buffer overflow, related to (1) crafted GIF files (gifread.c) and (2) crafted JPEG files (jpegread.c), a different vulnerability than CVE-2009-2295."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de enteros en CamlImages v2.2 podría permitir dependiendo del contexto a atacantes ejecutar código de su elección a través de imágenes que contengan valores de ancho y alto grande que provoca un desbordamiento de búfer basado en memoria dinámica, relacionado con (1) ficheros GIF manipulados (gifread.c) y (2) ficheros JPEG manipulados (jpegread.c), una vulnerabilidad diferente que CVE-2009-2295."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jun_furuse:camlimages:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2978CC2-5E05-45A3-AC78-75AE82095A03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_2.2.0-4+lenny2.diff.gz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_2.20-8+etch2.diff.gz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_3.0.1-3.diff.gz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=540146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://camlcvs.inria.fr/cgi-bin/cvsweb.cgi/bazar-ocaml/camlimages/src/jpegread.c.diff?r1=1.3%3Br2=1.4%3Bsortby=date%3Bf=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.2.0-4+lenny3.diff.gz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.20-8+etch3.diff.gz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/25/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.gentoo.org/attachment.cgi?id=199108",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=276235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_2.2.0-4+lenny2.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_2.20-8+etch2.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_3.0.1-3.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=540146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://camlcvs.inria.fr/cgi-bin/cvsweb.cgi/bazar-ocaml/camlimages/src/jpegread.c.diff?r1=1.3%3Br2=1.4%3Bsortby=date%3Bf=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.2.0-4+lenny3.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.20-8+etch3.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/25/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.gentoo.org/attachment.cgi?id=199108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=276235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-04T16:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The asn1_length function in strongSwan 2.8 before 2.8.11, 4.2 before 4.2.17, and 4.3 before 4.3.3 does not properly handle X.509 certificates with crafted Relative Distinguished Names (RDNs), which allows remote attackers to cause a denial of service (pluto IKE daemon crash) via malformed ASN.1 data.  NOTE: this is due to an incomplete fix for CVE-2009-2185."
      }, {
        "lang" : "es",
        "value" : "La función asn1_length en strongSwan 2.8 antes de 2.8.11, 4.2 antes de 4.2.17 y 4.3 antes de 4.3.3 no maneja adecuadamente certificados X.509 con Relative Distinguished Names (RDNs) modificados, lo que permite a atacantes remotos provocar una denegación de servicio (caída del demonio pluto IKE) mediante  datos ASN.1 malformados. NOTA: Esto es debido a una solución incompleta de CVE-2009-2185."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5518A917-D5D1-4985-BF71-B1A34BD3D5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778D7442-F54A-47DF-B87B-3CFA3CF08799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4B1F28-B3B8-4E31-8E4E-25F5A29F3AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16984E6E-7CA8-4DC3-B800-FFE007617FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C85F0BE-7E89-4B79-A036-9238785BE705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFF4780-2F92-4DF3-878A-C7E2BD57E39C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C794994-9367-4BBB-8940-BBB44B7C1C5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082272D3-0FE4-4959-978A-FFF795B52CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFEF9B3-C7F7-4588-A174-FAFD39C04116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:2.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E18EB62-1042-4F26-9EC3-B7EEA2182716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97027262-849C-4DE9-90C9-0D9FBBC9F96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8658539D-27D8-47EE-9468-A6B625E6D45F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89ACA351-D10F-4D1A-95B0-4B2E329F1E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4D6E89-5313-4016-8A7E-036579330DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F9E10-000D-4F3B-BEA6-DEE87405B89B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F37DFE8-2996-4904-B733-7BAECA95CB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38209DC9-3BE6-49EF-8BA1-6E2BC5D24FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155EB8F5-7C3C-4293-91EE-62DA561DA54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42B67A3-8650-426F-A8E8-DCA4180D787A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21CDA326-C5E4-4BAF-9DC6-4E5A57304C1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF119CF-2CC5-4313-8722-06BCE3DC6255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C0CAE-8AC3-47AA-9F1C-9DE6779CA583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00BC4DA6-BFD1-43CF-B8B8-DACBF09E4721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEDBF811-7E48-4E99-AE05-FFC12AAF1CDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.3.x_asn1_length.patch",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.x.x_asn1_length.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://up2date.astaro.com/2009/08/up2date_7505_released.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/27/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.strongswan.org/pipermail/announce/2009-July/000056.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.3.x_asn1_length.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.x.x_asn1_length.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://up2date.astaro.com/2009/08/up2date_7505_released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/27/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.strongswan.org/pipermail/announce/2009-July/000056.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-04T16:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The browser engine in Mozilla Firefox 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the TraceRecorder::snapshot function in js/src/jstracer.cpp, and unspecified other vectors."
      }, {
        "lang" : "es",
        "value" : "El motor de búsqueda en Mozilla Firefox anteriores v3.0.13 , y v3.5.x anteriores v3.5.2, permite a atacantes remotos causar una denegación de servicio (consumo de memoria y caída de aplicación) o probablemente ejecutar código a su elección a través de vectores relacionados con la función TraceRecorder::snapshot en js/src/jstracer.cpp, y otros vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.12",
            "matchCriteriaId" : "207B1B61-2203-4512-9EFF-5DEE049F73C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-45.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2142",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=502832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=503144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-45.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=502832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=503144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-04T16:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file."
      }, {
        "lang" : "es",
        "value" : "libvorbis anterior a r16182, usado en  Mozilla Firefox anterior a v3.0.13 y v3.5.x anterior a v3.5.2 y otros productos, permite a atacantes dependientes de contexto, provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente la ejecución de código de su elección a través de un archivo .ogg manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.1",
            "matchCriteriaId" : "033E4FC0-E968-429E-A684-35D0A54A038A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-45.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2142",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=500254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=516259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/825-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00481.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-45.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=500254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=516259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/825-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00481.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-04T16:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The js_watch_set function in js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla Firefox before 3.0.12 allows remote attackers to cause a denial of service (assertion failure and application exit) or possibly execute arbitrary code via a crafted .js file, related to a \"memory safety bug.\" NOTE: this was originally reported as affecting versions before 3.0.13."
      }, {
        "lang" : "es",
        "value" : "la función js_watch_set en js/src/jsdbgapi.cpp en el motor JavaScript de Mozilla Firefox anterior a v3.0.13, y v3.5.x anterior a v3.5.2, permite a atacantes remotos provocar una denegación de servicio (fallo de aserción o salida de aplicación) o posiblemente la ejecución de código de su elección a través de un archivo .js manipulado, relacionado con \"bug en la securización de la memoria\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.1",
            "matchCriteriaId" : "033E4FC0-E968-429E-A684-35D0A54A038A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-45.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2142",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=501270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-45.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=501270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-04T16:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The nsDocument::SetScriptGlobalObject function in content/base/src/nsDocument.cpp in Mozilla Firefox 3.5.x before 3.5.2, when certain add-ons are enabled, does not properly handle a Link HTTP header, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted web page, related to an incorrect security wrapper."
      }, {
        "lang" : "es",
        "value" : "La función nsDocument::SetScriptGlobalObject en content/base/src/nsDocument.cpp en Mozilla Firefox v3.5.x anterior a v3.5.2, cuando ciertos add-ons están activados, no maneja adecuadamente las cabeceras HTTP, lo que permite a atacantes remotos ejecutar JavaScript de su elección con privilegios chrome a través de una página web, relacionado con un paquete (wrapper) de seguridad incorrecto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-46.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2142",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=498897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-46.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=498897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-05T19:30:01.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in reward_points.post.php in the Reward points addon in CS-Cart before 2.0.6 allows remote authenticated users to execute arbitrary SQL commands via the sort_order parameter in a reward_points.userlog action to index.php, a different vulnerability than CVE-2005-4429.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en reward_points.post.php en el complemento Reward points de CS-Cart anterior v2.0.6, permite a usuarios autentificados remotamente ejecutar comandos SQL a su elección a través del parámetro sort_orde en la acción reward_points.userlog en index.php, vulnerabilidad diferente a CVE-2005-4429.2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.5",
            "matchCriteriaId" : "772E5AD9-A801-48B7-94AD-D2C0007775A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21449C4-0D1F-4642-9193-19E178C0A2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FFBA9BB-10CA-4EA4-A164-7B4AEB60BCA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA28C65-C87E-47B9-AEB2-A2007851A2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2560C3BF-C7DC-4645-B278-F86658660ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:1.3.2:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F6184F41-3EF2-4DDA-A22E-24CF5EA7F008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:1.3.2:sp2:trial_edition:*:*:*:*:*",
            "matchCriteriaId" : "9979A5D8-91BE-4956-A408-DECEADE7D16E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48662D7D-F946-45A4-AC02-0A25168154E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:1.3.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "7CFECABA-FEB5-407D-9324-9722E0545B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:1.3.5:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "8F660773-EA54-4596-A22E-951D66C927B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:1.3.5sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4FF089-8732-44B9-8E6C-A78843650899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:1.3.5sp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36E061E-3FB9-4036-97D7-652C6ADCC5C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A42E28-C26D-45EF-AAE4-DACFB5985F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A5FA82CA-6192-4339-89BB-6AE5603CBAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "31CEA327-84CE-4B4C-8D27-242EB22A6B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2AB928-9018-4264-A139-1C3826B4F86B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:2.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "16980629-1BF0-4ADE-918B-824C6B1AFCB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17EEE6D-48BD-4BEA-9246-CA3FF6A032C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36112",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bonsai-sec.com/research/vulnerabilities/cs-cart_SQL-injection-0100.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cs-cart.com/changelog206.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505492/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35936",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bonsai-sec.com/research/vulnerabilities/cs-cart_SQL-injection-0100.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cs-cart.com/changelog206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505492/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-05T19:30:01.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM Tivoli Key Lifecycle Manager (TKLM) 1.0 has unknown impact and attack vectors, related to a \"password security vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en IBM Tivoli Key Lifecycle Manager (TKLM) v1.0 tiene un impacto desconocido y vectores atacados, relacionados con la \"vulnerabilidad de seguridad de contraseñas\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tklm:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F27DF385-0A36-40A6-A747-31F9F57BF88D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21395577",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2144",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21395577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-05T19:30:01.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16473 allows remote attackers to cause a denial of service (CPU consumption) via an XML document composed of a long series of start-tags with no corresponding end-tags, a related issue to CVE-2009-1232."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer v6 hasta v6.0.2900.2180 y v7 hasta v7.0.6000.16473, permite a atacantes remotos causar una denegación de servicio (consumo CPU) a través de un documento XML compuesto de una serie larga de start-targs que no corresponden con end-tags, relacionado con el asunto CVE-2009-1232."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3216/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://websecurity.com.ua/3216/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-05T19:30:01.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A certain debugging component in IBM AIX 5.3 and 6.1 does not properly handle the (1) _LIB_INIT_DBG and (2) _LIB_INIT_DBG_FILE environment variables, which allows local users to gain privileges by leveraging a setuid-root program to create an arbitrary root-owned file with world-writable permissions, related to libC.a (aka the XL C++ runtime library) in AIX 5.3 and libc.a in AIX 6.1."
      }, {
        "lang" : "es",
        "value" : "Cierto componente de depuración en IBM AIX v5.3 y v6.1 no proporciona la gestión de los entornos (1) _LIB_INIT_DBG y (2) _LIB_INIT_DBG_FILE, que permite a usuarios locales obtener privilegios utilizando para ello un programa setuid-root para crear un archivo root-owned a su elección con permisos world-writable, relacionados con ibC.a (como la librería XL C++ runtime) en AIX v5.3 y libc.a en AIX v6.1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD518B94-9CD7-4C45-8766-578CF427B4CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/libC_advisory.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ54090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ54091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ54593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ56203",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ56204",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ56205",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ56206",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35934",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/libC_advisory.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ54090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ54091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ54593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ56203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ56204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ56205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ56206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-05T19:30:01.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties."
      }, {
        "lang" : "es",
        "value" : "El sistema de audio en Sun Java Runtime Environment (JRE) en JDK y JRE v6 anterior Update v15, y JDK y JRE v5.0 anterior Update v20, no previene el acceso a las propiedades java.lang.System (1) applets and (2)aplicaciones Java Web Start no confiables, permitiendo a atacantes dependientes del contexto obtener información sensible por la lectura de esas propiedades."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update_13:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "E6AF4AEB-CB27-4AAB-B4A9-CC65EC831D77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "6BB00A29-FEBB-4139-9E96-691EC1410EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC7389-9697-4EF0-9C4E-153731CDD75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "0EFEB813-B20D-4C8B-922D-0603CB93F72A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "41CE5B2D-5594-4026-BABF-CBE485764D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB84BBA-D93E-4517-BA7A-FCFB860736CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "82C49C78-ACE3-407D-AE21-EA180633C437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F91F8A2-D473-48DC-81DA-21291DE7B6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "0F69C703-8541-4AA8-A66A-0292E0FCB749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "99E08AB2-49AD-42C6-967F-773F2C6E188A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "9459F130-A3DD-4A4E-9582-4FB82619EB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "D7680A8A-EC07-4819-A93C-B8EBF8B1199F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "FA89349B-834C-42D0-84C6-CA73CE1F8B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "B7865369-9DE6-4C20-ACD2-CCC14ED54701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0818A-3675-4293-89FE-5001E36C0F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "95112B98-B6B2-43FA-BF76-F518649CF3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "3A18341A-3688-48E7-95AD-283EC9C95B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "E301C59A-47F5-4861-9091-D0002CBA5B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "BCD4F889-710C-43C5-85DD-70E96F8FE313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "ED195051-AAC7-4EE1-B936-18D1C8AD2498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44146DF6-F368-4F17-B379-34194873D80F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "18B70D77-F631-47D8-95A5-1D3A7E8BF63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update_13:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "C150A6B7-9C4C-46E4-99B6-792A0D326E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2379FC-BC33-4C90-97DD-ED3723172008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "86A1256D-7A34-4FDD-9536-82FD6497A712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "56F0F497-6586-408B-80AF-6BC2B9909397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1E022C6E-20DE-4124-9CA3-11400E13A05A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "5A34B1CB-EE08-48BB-BEC1-0720801DA0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C9F7-ACD1-4A89-AB18-ADF595995772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "89041A24-8354-410B-8026-875CC1791565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "D594E269-D722-45FC-B390-B0D38ADEC923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "3CAA89D6-651A-4B8C-A134-C3A2CB84002A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "B930EAFB-F2E6-4FCA-A21B-022656396A2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "4B20EB5F-D12A-4267-9887-C39A188EB9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "52347FDC-9983-4A64-8031-B4A50DDC9BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "8387A041-582A-4010-9C44-672090F41A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6FCAFC-F41C-4C6F-9EA4-46AEFF65CC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA9E6CD-F43F-487D-9638-406B72D51471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2F4664-E158-45ED-81B6-D8371F1C6B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC09958-5286-4C16-AB6F-63B4BDD902B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE1E9E9-85EF-4ACA-902B-00225EB4324F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "82C6F76F-68FD-4794-9182-935D85910C1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "6314C9DF-9421-445D-ABCC-79EDCED23156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "119B72FA-8B85-4D1F-8A14-5B07204DAED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263408-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263408-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-05T19:30:01.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El SOCKS proxy implementado en Java Runtime Environment (JRE) en JDK y JRE v6 anterior Update v15, y JDK y JRE v5.0 anterior Update v20, permite a atacantes remotos descubrir la cuenta de usuario que invoca un (1) applet o (2)aplicación Java Web Start no confiable a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update_13:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "E6AF4AEB-CB27-4AAB-B4A9-CC65EC831D77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "6BB00A29-FEBB-4139-9E96-691EC1410EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC7389-9697-4EF0-9C4E-153731CDD75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "0EFEB813-B20D-4C8B-922D-0603CB93F72A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "41CE5B2D-5594-4026-BABF-CBE485764D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB84BBA-D93E-4517-BA7A-FCFB860736CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "82C49C78-ACE3-407D-AE21-EA180633C437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F91F8A2-D473-48DC-81DA-21291DE7B6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "0F69C703-8541-4AA8-A66A-0292E0FCB749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "99E08AB2-49AD-42C6-967F-773F2C6E188A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "9459F130-A3DD-4A4E-9582-4FB82619EB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "D7680A8A-EC07-4819-A93C-B8EBF8B1199F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "FA89349B-834C-42D0-84C6-CA73CE1F8B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "B7865369-9DE6-4C20-ACD2-CCC14ED54701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0818A-3675-4293-89FE-5001E36C0F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "95112B98-B6B2-43FA-BF76-F518649CF3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "3A18341A-3688-48E7-95AD-283EC9C95B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "E301C59A-47F5-4861-9091-D0002CBA5B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "BCD4F889-710C-43C5-85DD-70E96F8FE313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "ED195051-AAC7-4EE1-B936-18D1C8AD2498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44146DF6-F368-4F17-B379-34194873D80F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "18B70D77-F631-47D8-95A5-1D3A7E8BF63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update_13:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "C150A6B7-9C4C-46E4-99B6-792A0D326E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2379FC-BC33-4C90-97DD-ED3723172008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "86A1256D-7A34-4FDD-9536-82FD6497A712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "56F0F497-6586-408B-80AF-6BC2B9909397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1E022C6E-20DE-4124-9CA3-11400E13A05A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "5A34B1CB-EE08-48BB-BEC1-0720801DA0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C9F7-ACD1-4A89-AB18-ADF595995772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "89041A24-8354-410B-8026-875CC1791565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "D594E269-D722-45FC-B390-B0D38ADEC923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "3CAA89D6-651A-4B8C-A134-C3A2CB84002A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "B930EAFB-F2E6-4FCA-A21B-022656396A2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "4B20EB5F-D12A-4267-9887-C39A188EB9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "52347FDC-9983-4A64-8031-B4A50DDC9BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "8387A041-582A-4010-9C44-672090F41A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6FCAFC-F41C-4C6F-9EA4-46AEFF65CC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA9E6CD-F43F-487D-9638-406B72D51471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2F4664-E158-45ED-81B6-D8371F1C6B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC09958-5286-4C16-AB6F-63B4BDD902B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE1E9E9-85EF-4ACA-902B-00225EB4324F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "82C6F76F-68FD-4794-9182-935D85910C1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "6314C9DF-9421-445D-ABCC-79EDCED23156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "119B72FA-8B85-4D1F-8A14-5B07204DAED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-05T19:30:01.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El mecanismo proxy implementado en Sun Java Runtime Environment (JRE) en JDK y JRE v6 anterior Update v15, y JDK y JRE v5.0 anterior Update v20, no previene el acceso a las cookies del buscador por (1) applets y (2) aplicaciones Java Web Start no confiables, que permiten a atacantes remotos secuestrar las sesiones web a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update_13:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "E6AF4AEB-CB27-4AAB-B4A9-CC65EC831D77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "6BB00A29-FEBB-4139-9E96-691EC1410EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC7389-9697-4EF0-9C4E-153731CDD75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "0EFEB813-B20D-4C8B-922D-0603CB93F72A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "41CE5B2D-5594-4026-BABF-CBE485764D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB84BBA-D93E-4517-BA7A-FCFB860736CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "82C49C78-ACE3-407D-AE21-EA180633C437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F91F8A2-D473-48DC-81DA-21291DE7B6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "0F69C703-8541-4AA8-A66A-0292E0FCB749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "99E08AB2-49AD-42C6-967F-773F2C6E188A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "9459F130-A3DD-4A4E-9582-4FB82619EB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "D7680A8A-EC07-4819-A93C-B8EBF8B1199F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "FA89349B-834C-42D0-84C6-CA73CE1F8B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "B7865369-9DE6-4C20-ACD2-CCC14ED54701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0818A-3675-4293-89FE-5001E36C0F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "95112B98-B6B2-43FA-BF76-F518649CF3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "3A18341A-3688-48E7-95AD-283EC9C95B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "E301C59A-47F5-4861-9091-D0002CBA5B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "BCD4F889-710C-43C5-85DD-70E96F8FE313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "ED195051-AAC7-4EE1-B936-18D1C8AD2498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44146DF6-F368-4F17-B379-34194873D80F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "18B70D77-F631-47D8-95A5-1D3A7E8BF63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update_13:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "C150A6B7-9C4C-46E4-99B6-792A0D326E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2379FC-BC33-4C90-97DD-ED3723172008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "86A1256D-7A34-4FDD-9536-82FD6497A712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "56F0F497-6586-408B-80AF-6BC2B9909397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1E022C6E-20DE-4124-9CA3-11400E13A05A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "5A34B1CB-EE08-48BB-BEC1-0720801DA0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C9F7-ACD1-4A89-AB18-ADF595995772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "89041A24-8354-410B-8026-875CC1791565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "D594E269-D722-45FC-B390-B0D38ADEC923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "3CAA89D6-651A-4B8C-A134-C3A2CB84002A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "B930EAFB-F2E6-4FCA-A21B-022656396A2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "4B20EB5F-D12A-4267-9887-C39A188EB9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "52347FDC-9983-4A64-8031-B4A50DDC9BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "8387A041-582A-4010-9C44-672090F41A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6FCAFC-F41C-4C6F-9EA4-46AEFF65CC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA9E6CD-F43F-487D-9638-406B72D51471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2F4664-E158-45ED-81B6-D8371F1C6B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC09958-5286-4C16-AB6F-63B4BDD902B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE1E9E9-85EF-4ACA-902B-00225EB4324F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "82C6F76F-68FD-4794-9182-935D85910C1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "6314C9DF-9421-445D-ABCC-79EDCED23156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "119B72FA-8B85-4D1F-8A14-5B07204DAED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-05T19:30:01.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword."
      }, {
        "lang" : "es",
        "value" : "El mecanismo proxy implementado en Sun Java Runtime Environment (JRE) en JDK y JRE v6 anteriores Update v15, y JDK y JRE v5.0 anteriores Update v20, permite a atacantes remotos evitar las restricciones de acceso previstas y conectarse a sitios a su elección a través de vectores no especificados, relacionados con una declaración que carece de clave final."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update_13:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "E6AF4AEB-CB27-4AAB-B4A9-CC65EC831D77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "6BB00A29-FEBB-4139-9E96-691EC1410EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC7389-9697-4EF0-9C4E-153731CDD75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "0EFEB813-B20D-4C8B-922D-0603CB93F72A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "41CE5B2D-5594-4026-BABF-CBE485764D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB84BBA-D93E-4517-BA7A-FCFB860736CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "82C49C78-ACE3-407D-AE21-EA180633C437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F91F8A2-D473-48DC-81DA-21291DE7B6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "0F69C703-8541-4AA8-A66A-0292E0FCB749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "99E08AB2-49AD-42C6-967F-773F2C6E188A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "9459F130-A3DD-4A4E-9582-4FB82619EB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "D7680A8A-EC07-4819-A93C-B8EBF8B1199F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "FA89349B-834C-42D0-84C6-CA73CE1F8B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "B7865369-9DE6-4C20-ACD2-CCC14ED54701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0818A-3675-4293-89FE-5001E36C0F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "95112B98-B6B2-43FA-BF76-F518649CF3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "3A18341A-3688-48E7-95AD-283EC9C95B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "E301C59A-47F5-4861-9091-D0002CBA5B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "BCD4F889-710C-43C5-85DD-70E96F8FE313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "ED195051-AAC7-4EE1-B936-18D1C8AD2498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44146DF6-F368-4F17-B379-34194873D80F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "18B70D77-F631-47D8-95A5-1D3A7E8BF63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update_13:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "C150A6B7-9C4C-46E4-99B6-792A0D326E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2379FC-BC33-4C90-97DD-ED3723172008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "86A1256D-7A34-4FDD-9536-82FD6497A712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "56F0F497-6586-408B-80AF-6BC2B9909397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1E022C6E-20DE-4124-9CA3-11400E13A05A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "5A34B1CB-EE08-48BB-BEC1-0720801DA0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C9F7-ACD1-4A89-AB18-ADF595995772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "89041A24-8354-410B-8026-875CC1791565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "D594E269-D722-45FC-B390-B0D38ADEC923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "3CAA89D6-651A-4B8C-A134-C3A2CB84002A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "B930EAFB-F2E6-4FCA-A21B-022656396A2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "4B20EB5F-D12A-4267-9887-C39A188EB9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "52347FDC-9983-4A64-8031-B4A50DDC9BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "8387A041-582A-4010-9C44-672090F41A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6FCAFC-F41C-4C6F-9EA4-46AEFF65CC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA9E6CD-F43F-487D-9638-406B72D51471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2F4664-E158-45ED-81B6-D8371F1C6B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC09958-5286-4C16-AB6F-63B4BDD902B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE1E9E9-85EF-4ACA-902B-00225EB4324F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "82C6F76F-68FD-4794-9182-935D85910C1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "6314C9DF-9421-445D-ABCC-79EDCED23156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "119B72FA-8B85-4D1F-8A14-5B07204DAED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-05T19:30:01.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de enteros en el archivo javaws.exe en Sun Java Web Start en Sun Java Runtime Environment (JRE) en JDK y JRE versión 6 anterior a Update 15, permite a los atacantes dependiendo del contexto ejecutar código arbitrario por medio de una imagen JPEG creada que no se maneja apropiadamente durante la visualización de una imagen de bienvenida, que desencadena un desbordamiento de búfer basado en la región heap de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "D7680A8A-EC07-4819-A93C-B8EBF8B1199F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "FA89349B-834C-42D0-84C6-CA73CE1F8B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "B7865369-9DE6-4C20-ACD2-CCC14ED54701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "8614E7A0-091C-4080-89FA-B2C7609B4AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0818A-3675-4293-89FE-5001E36C0F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "95112B98-B6B2-43FA-BF76-F518649CF3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "3A18341A-3688-48E7-95AD-283EC9C95B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "E301C59A-47F5-4861-9091-D0002CBA5B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "BCD4F889-710C-43C5-85DD-70E96F8FE313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "ED195051-AAC7-4EE1-B936-18D1C8AD2498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44146DF6-F368-4F17-B379-34194873D80F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "18B70D77-F631-47D8-95A5-1D3A7E8BF63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6FCAFC-F41C-4C6F-9EA4-46AEFF65CC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA9E6CD-F43F-487D-9638-406B72D51471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2F4664-E158-45ED-81B6-D8371F1C6B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "26826BB7-0EF6-439B-87F4-5BCCEA3A8907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC09958-5286-4C16-AB6F-63B4BDD902B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE1E9E9-85EF-4ACA-902B-00225EB4324F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "82C6F76F-68FD-4794-9182-935D85910C1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "6314C9DF-9421-445D-ABCC-79EDCED23156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "119B72FA-8B85-4D1F-8A14-5B07204DAED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36248",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263428-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-050/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263428-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-050/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-05T19:30:01.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de enteros en la utilidad unpack200 en Sun Java Runtime Environment (JRE) en JDK y JRE versión 6 anterior a Update 15, y JDK y JRE versión  5.0 anterior a Update 20, permite a los atacantes dependiendo del contexto alcanzar privilegios por medio de campos de longitud no especificados en el encabezado de un archivo JAR comprimido de Pack200-, que conlleva a un desbordamiento del búfer en la región heap de la memoria durante la descompresión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update_13:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "E6AF4AEB-CB27-4AAB-B4A9-CC65EC831D77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "6BB00A29-FEBB-4139-9E96-691EC1410EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC7389-9697-4EF0-9C4E-153731CDD75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "0EFEB813-B20D-4C8B-922D-0603CB93F72A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "41CE5B2D-5594-4026-BABF-CBE485764D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB84BBA-D93E-4517-BA7A-FCFB860736CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "82C49C78-ACE3-407D-AE21-EA180633C437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F91F8A2-D473-48DC-81DA-21291DE7B6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "0F69C703-8541-4AA8-A66A-0292E0FCB749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "99E08AB2-49AD-42C6-967F-773F2C6E188A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "9459F130-A3DD-4A4E-9582-4FB82619EB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "D7680A8A-EC07-4819-A93C-B8EBF8B1199F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "FA89349B-834C-42D0-84C6-CA73CE1F8B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "B7865369-9DE6-4C20-ACD2-CCC14ED54701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0818A-3675-4293-89FE-5001E36C0F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "95112B98-B6B2-43FA-BF76-F518649CF3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "3A18341A-3688-48E7-95AD-283EC9C95B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "E301C59A-47F5-4861-9091-D0002CBA5B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "BCD4F889-710C-43C5-85DD-70E96F8FE313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "ED195051-AAC7-4EE1-B936-18D1C8AD2498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44146DF6-F368-4F17-B379-34194873D80F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "18B70D77-F631-47D8-95A5-1D3A7E8BF63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update_13:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "C150A6B7-9C4C-46E4-99B6-792A0D326E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2379FC-BC33-4C90-97DD-ED3723172008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "86A1256D-7A34-4FDD-9536-82FD6497A712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "56F0F497-6586-408B-80AF-6BC2B9909397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1E022C6E-20DE-4124-9CA3-11400E13A05A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "5A34B1CB-EE08-48BB-BEC1-0720801DA0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C9F7-ACD1-4A89-AB18-ADF595995772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "89041A24-8354-410B-8026-875CC1791565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "D594E269-D722-45FC-B390-B0D38ADEC923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "3CAA89D6-651A-4B8C-A134-C3A2CB84002A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "B930EAFB-F2E6-4FCA-A21B-022656396A2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "4B20EB5F-D12A-4267-9887-C39A188EB9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "52347FDC-9983-4A64-8031-B4A50DDC9BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "8387A041-582A-4010-9C44-672090F41A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6FCAFC-F41C-4C6F-9EA4-46AEFF65CC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA9E6CD-F43F-487D-9638-406B72D51471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2F4664-E158-45ED-81B6-D8371F1C6B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC09958-5286-4C16-AB6F-63B4BDD902B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE1E9E9-85EF-4ACA-902B-00225EB4324F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "82C6F76F-68FD-4794-9182-935D85910C1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "6314C9DF-9421-445D-ABCC-79EDCED23156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "119B72FA-8B85-4D1F-8A14-5B07204DAED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36248",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263488-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-049/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263488-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-049/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-05T19:30:01.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.2_21 and earlier; allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en JNLPAppletlauncher en Sun Java SE, y SE Business, en JDK y JRE 6v Update v14 y anteriores y JDK y JRE v5.0 Update v19 y anteriores; y Java SE para Business de SDK y JRE v1.4.2_21 y anteriores, permiten a atacantes remotos crear o modificar un fichero a su elección a través de un vector relacionado con un applet Java no confiable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C990DFAD-716E-4404-939B-7F26CC2C945D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*",
            "matchCriteriaId" : "CB9A3291-3F2C-40E9-81D3-D148002E1782"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update19:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "6762C4F4-E46D-4D28-A9F3-D3B2311D55E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update_14:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "667643D3-A858-40D7-BDA0-E9347BFB37EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2AADA633-EB11-49A0-8E40-66589034F03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "B120F7D9-7C1E-4716-B2FA-2990D449F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "CD61E49F-2A46-4107-BB3F-527079983306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "D900AAE0-6032-4096-AFC2-3D43C55C6C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "88B0958C-744C-4946-908C-09D2A5FAB120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2D8D09-3F18-4E73-81CF-BB589BB8AEC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD24779-988F-4EC1-AC19-77186B68229E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE548B-DD0C-4C58-98CA-5B803F04F9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8E9AA0-8907-4B1A-86A1-08568195217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0754AFDC-2F1C-4C06-AB46-457B5E610029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DA4242-30D9-44C8-9D0D-877348FFA22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "C61C6043-99D0-4F36-AF84-1A5F90B895EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "F20FDD9F-FF45-48BC-9207-54FB02E76071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA326F5-894A-4B01-BCA3-B126DA81CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD30DAEB-4893-41CF-A455-B69C463B9337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update19:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "4291CC33-EC08-4CE0-9BFF-D9B2A3923AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update_14:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "13577021-8884-427B-82D3-8D6D236FD62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "9919D091-73D7-465A-80FF-F37D6CAF9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "02565D6F-4CB2-4671-A4EF-3169BCFA6154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "452A3E51-9EAC-451D-BA04-A1E7B7D917EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "55231B6B-9298-4363-9B5A-14C2DA7B1F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "E42CF0F7-418C-4BB6-9B73-FA3B9171D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "A5467E9D-07D8-4BEB-84D5-A3136C133519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*",
            "matchCriteriaId" : "B83B2CE1-45D7-47AD-BC0A-6EC74D5F8F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "44051CFE-D15D-4416-A123-F3E49C67A9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "F296ACF3-1373-429D-B991-8B5BA704A7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B863420B-DE16-416A-9640-1A1340A9B855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "724C972F-74FE-4044-BBC4-7E0E61FC9002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE909DE-E55A-4BD3-A5BF-ADE407432193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAC04D2-68FD-4793-A8E7-4690A543D7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*",
            "matchCriteriaId" : "CB9A3291-3F2C-40E9-81D3-D148002E1782"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.2_21",
            "matchCriteriaId" : "0C8B6FC1-2174-4D44-B801-66AA963D4FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226D142B-934F-4988-8826-64590C90F296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.0_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3583521D-5F4F-4F99-BDA4-6C6DF80E5A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.0_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1B607A-3C63-49B2-905D-4A394540C6E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.0_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00762633-7A01-4AA1-943F-5277F4CBA4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.0_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A59EFCF-4315-40B9-9C28-5A1A964C16A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355CB56A-A598-4CD6-9AFB-FE0B09FFC2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.1:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9A9879-295F-40DA-B827-72C0AE7B43CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.1:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1A84BB-6D97-45FA-839E-67E36AFFAC4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.1:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "58FC43CA-1F08-4A4B-838B-840838BC67FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.1:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "14037C2F-DDB4-4F9B-8A53-045AED23905A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.1:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "828F9F36-52A8-406E-97FD-50BE92892014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.1:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "09867873-957A-4E08-879E-B575C4C80232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.1:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "07C150C2-18D6-45C1-AF21-527923C45CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63978872-E797-4F13-B0F9-98CB67D0962A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC35937-880F-4B3B-807C-CFED4C399A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD0DFD8-0352-487B-AD0E-5BFD557F964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2:update18:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EE1DD5-9DB3-45EC-8821-23C52D55EFA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2:update19:*:*:*:*:*:*",
            "matchCriteriaId" : "69F872C7-9B0F-4C7B-928D-C652F56582A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "70B228DF-EE93-45D8-B2B9-71566BE7D1B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.2_21",
            "matchCriteriaId" : "857940E4-5457-46A8-9D9A-1C9ED025318B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25336CDC-E592-4022-A87A-364B24D13485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.0_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBDA2169-B799-4F71-AE26-0508B918E0C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.0_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F7E8AA-6CDD-4412-8530-AF7CAB8CA863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.0_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57859E96-91C9-483F-8C4B-E7AD574818B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.0_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069362D3-2C20-4685-AC2F-AA9E752D0C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED545E2-AE1C-45A1-8DF0-9674EF5295BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1BCD7F-751C-405D-BD82-7ACE1A9ED5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5861D4-2E57-4FA0-A786-000BD67FA23F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6C0900-9F2F-47DF-9504-0FABBDF2069D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B234F24-9C83-4E02-9009-8EF3CAEF681D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6080B96-4A1F-47B2-8DD6-43D890136030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559E35CF-0A08-40B6-A8BB-E4F970E6C534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F09AA185-F09D-4D57-9AA7-61C0F0CF9050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "002CA86D-3090-4C7A-947A-21CB5D1ADD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36248",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263490-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263490-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-05T19:30:01.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353."
      }, {
        "lang" : "es",
        "value" : "La función exif_read_data en el módulo Exif en PHP anteriores v5.2.10 permite a atacantes remotos causar una denegación de servicio (caída) a través de una imagen JPEG mal formada con campos inválidos en offset, siendo un asunto diferente a CVE-2005-3353."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.10",
            "matchCriteriaId" : "7DC23924-B7B6-4231-81A4-563CAB8CF621"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E8A89-7A16-411F-9D31-676313BB7244"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.php.net/bug.php?id=48378",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127680701405735&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/55222",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35441",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36462",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37482",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/40262",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1940",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:145",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:167",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.php.net/releases/5_2_10.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35440",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1632",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51253",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10695",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6655",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/824-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://bugs.php.net/bug.php?id=48378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127680701405735&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/55222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/40262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.php.net/releases/5_2_10.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/824-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue was addressed in php packages shipped in Red Hat Enterprise Linux 3, 4 and 5 via: https://rhn.redhat.com/errata/RHSA-2010-0040.html",
        "lastModified" : "2010-01-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-05T19:30:01.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in glyphs-eimage.c in XEmacs 21.4.22, when running on Windows, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) the tiff_instantiate function processing a crafted TIFF file, (2) the png_instantiate function processing a crafted PNG file, and (3) the jpeg_instantiate function processing a crafted JPEG file, all which trigger a heap-based buffer overflow.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de enteros en glyphs-eimage.c en XEmacs v21.4.22, cuando corre en Windows, permite a atacantes remotos causar una denegación de servicio (caída) o ejecutar código a su elección a través (1) la función tiff_instantiate produciendo un fichero TIFF manipulado, (2) la función png_instantiate produciendo un fichero PNG manipulado, y (3) la función jpeg_instantiate produciendo un fichero JPEG manipulado, todas provocan un desbordamiento de búfer basado en memoria dinámica. NOTA: el origen de esta información es desconocido; Los detalles han sido obtenidos a partir de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xemacs:xemacs:21.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246EDF0B-B3C0-489A-AD11-1FAC352F6694"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35348",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tracker.xemacs.org/XEmacs/its/issue534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1666",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=275397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=511994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tracker.xemacs.org/XEmacs/its/issue534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=275397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=511994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-2688\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/\n",
        "lastModified" : "2009-08-06T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-06T15:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The screen saver in Dock in Apple Mac OS X 10.5 before 10.5.8 does not prevent four-finger Multi-Touch gestures, which allows physically proximate attackers to bypass locking and \"manage applications or use Expose\" via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El protector de pantalla en el Dock en Apple Mac OS X v10.5 anterior a v10.5.8 no previene gestos multi-tactiles cuatro-dedos (four-finger Multi-Touch), lo cual permite a atacantes próximos físicamente eludir el bloqueo y \"gestionar aplicaciones o exposición al uso\" a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA315DB-10DF-4D18-A575-37A70F9AFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2398ADC8-A106-462E-B9AE-F8AF800D0A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF94705-562C-4EC8-993E-1AD88F01549C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-06T15:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CFNetwork in Apple Mac OS X 10.5 before 10.5.8 places an incorrect URL in a certificate warning in certain 302 redirection scenarios, which makes it easier for remote attackers to trick a user into visiting an arbitrary https web site by leveraging an open redirect vulnerability, a different issue than CVE-2009-2062."
      }, {
        "lang" : "es",
        "value" : "CFNetwork en Apple Mac OS X v10.5 anterior a v10.5.8 coloca una URL incorrecta en una advertencia de certificado  en algunos escenarios de redirección 302, lo cual hace más fácil para los atacantes remotos engañar a un usuario para que visite un sitio web https arbitrario aprovechando una vulnerabilidad de redireccionamiento abierto, una cuestión diferente que CVE-2009-2062."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA315DB-10DF-4D18-A575-37A70F9AFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2398ADC8-A106-462E-B9AE-F8AF800D0A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF94705-562C-4EC8-993E-1AD88F01549C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2412",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-08-06T15:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de entero en la biblioteca Apache Portable Runtime (APR) y en la biblioteca Apache Portable Utility (alias ARP-util) v0.9.x y v1.3.x permite a atacantes remotos provocar una denegación de servicio (cuelgue de aplicación) o posiblemente ejecutar código arbitrario a través de vectores que disparan las llamadas manipuladas a funciones (1) allocator_alloc o (2) apr_palloc en memory/unix/apr_pools.c en APR; o llamadas manipuladas a funciones (3) apr_rmm_malloc, (4) apr_rmm_calloc, o (5) apr_rmm_realloc en misc/apr_rmm.c en APR-util; desencadenando en desbordamientos de búfer.  NOTA: algunos de estos detalles se obtienen a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EC87975-74CA-42E6-84ED-0DD2BF9FFC78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A896FA5-D3FC-4BD9-965A-C9A72D62780D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:0.9.2-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC4D99D-9753-4C59-BBB5-959D42382DD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8EDB1D0-82A9-462F-9B3B-0EDF452341E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:0.9.3-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A8DC96A-6D25-4E98-808E-5159F8369224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DFFEDC-F5C7-47C7-95A9-6BF4208A1B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87B09F2-ECEA-409D-B27B-0747280D4AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126268B4-03AF-46B1-9840-80CB461429E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:0.9.7-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A6CE4A-9BA3-4936-B9EA-B8B649B3AF84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760EF10-E57D-42C6-AB26-9FCFAE40062F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6D2840-FF47-470F-B124-743592A6B465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56723D23-E6BC-4BB6-931E-5802528BE4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E706184-E7BC-452F-82FE-72EA8C37F4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "867962AD-8EF4-4DC4-96F6-77896CEF3F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB78030-8C3B-4ACA-B62B-DC5DC5FBD073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53CBDDE-D914-49A8-B65C-9352487B3CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C48811-5237-4752-857E-AEA5E879505A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.3.4-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88051185-C7B3-4540-BE0D-47B34FA4EC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC3307A0-BCD6-423F-AC32-2E4F1E1310F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA93EC05-1936-4A2A-BFE1-E3F3BA2FD20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.3.6-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC4B4907-8186-487C-97E8-A00BEC3D8116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3B4C44-163C-4D92-9BB0-C3BEC4F65665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apr-util:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBD5602-6DE8-47EC-8464-150D2AA562BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAC9B4C4-ABC3-4306-A207-41E43B1BE20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802A56B5-E4CC-49ED-A5EF-7F1BECBA2811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:0.9.2-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D62910-DF77-4DA5-B2E0-9C645DE21FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55CEAFE5-CD77-48C4-8B5E-A4FA173D5590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:0.9.3-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18A3B6CD-8D8A-47F1-8021-3779F3882E4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4C28F7-946E-4A8A-8D02-1166EE14E891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280DCE6C-A529-4B61-80E4-D0C66D1FA709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ECEA4AB-80B3-4E4D-A634-6A37E0C7A1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57DE26CB-8B98-4ADE-A9A5-8DC3020D03FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:0.9.7-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7686BB5B-9DD3-43DF-8852-2721D158AC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A13FE2-5580-446F-9963-DB978B97BCA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66FC842-29BD-4889-8436-D4BE271CE0AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:0.9.16-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97664E40-9802-4FFE-9AD1-78CE05B82FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB66AD7D-FF60-4320-A8AF-448836E61FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A42AC519-7FB4-4911-BA47-9CC87D0EA874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE38C6B-4042-4A01-9686-8CD38C995C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910818CC-6EED-4E78-B85C-51AAC3A945D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8176D3-0632-4D2C-B992-8FE32B023B45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:1.3.4-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D1F3F02-BED5-42D6-92D9-AA0A5336F1D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BE556A-5036-4CCC-A597-CA1FC1F89B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A5A93F-2BD6-4DAE-854F-8CF4FC32C6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:1.3.6-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35911DF-832A-417D-92C4-5DF02E5EC164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93F3369-74F6-49D0-94A3-C20603C43B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA090A3B-F678-4078-9B7A-6BF3E88F4F0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/56765",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/56766",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36138",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36140",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36166",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36233",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37221",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/CHANGES?revision=800736&view=markup",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/misc/apr_rmm.c?r1=230441&r2=800736",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://svn.apache.org/viewvc/apr/apr-util/branches/1.3.x/CHANGES?revision=800735&view=markup",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/apr/apr-util/branches/1.3.x/misc/apr_rmm.c?r1=647687&r2=800735",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://svn.apache.org/viewvc/apr/apr/branches/0.9.x/CHANGES?revision=800733&view=markup",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://svn.apache.org/viewvc/apr/apr/branches/0.9.x/memory/unix/apr_pools.c?r1=585356&r2=800733",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/apr/apr/branches/1.3.x/CHANGES?revision=800732&view=markup",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://svn.apache.org/viewvc/apr/apr/branches/1.3.x/memory/unix/apr_pools.c?r1=678140&r2=800732",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK93225",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK99482",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:195",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35949",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-813-2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1107",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8394",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9958",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00320.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00353.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/CHANGES?revision=800736&view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/misc/apr_rmm.c?r1=230441&r2=800736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.apache.org/viewvc/apr/apr-util/branches/1.3.x/CHANGES?revision=800735&view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/apr/apr-util/branches/1.3.x/misc/apr_rmm.c?r1=647687&r2=800735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.apache.org/viewvc/apr/apr/branches/0.9.x/CHANGES?revision=800733&view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.apache.org/viewvc/apr/apr/branches/0.9.x/memory/unix/apr_pools.c?r1=585356&r2=800733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/apr/apr/branches/1.3.x/CHANGES?revision=800732&view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.apache.org/viewvc/apr/apr/branches/1.3.x/memory/unix/apr_pools.c?r1=678140&r2=800732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK93225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK99482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-813-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00320.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00353.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2625",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-08-06T15:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework."
      }, {
        "lang" : "es",
        "value" : "Apache Xerces2 Java, tal como se utiliza en Sun Java Runtime Environment (JRE) en JDK y JRE v6 anterior a la actualización 15 y el JDK y JRE v5.0 antes de la actualización 20, y en otros productos, permite a atacantes remotos provocar una denegación de servicio (bucle infinito y la cuelgue de aplicación) a través de una entrada XML malformada, como lo demuestra Codenomicon XML fuzzing framework."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "711BCDB5-83BC-4DBA-8097-2CD33617FD19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F20B3E-781F-4DC1-B939-B0EAFC515F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB37E93-38EB-4AEE-A3DD-D2097C0D6852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "59DED85A-153E-40B1-9ABA-D405204E464E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "168E67FC-32BC-4DAE-B49C-840FD721D7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "83A2B4A2-ED27-4C12-871B-C0F78C3478FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8A5D2D-B620-449B-B599-51F5C9FC658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "9A39B469-5041-4715-B6AC-36D8777677EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "F49DBD1F-D3F5-400B-AE2E-BC87B05A5051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "8E605982-97A2-4E5E-847E-2BB8AD77910C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update18:*:*:*:*:*:*",
            "matchCriteriaId" : "848299EC-DE52-4511-BF53-C83022935964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update19:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5BD598-ADBC-42EE-BF81-049D89CCA426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "64AC19E5-A20C-4D51-B465-ABCDBADF550A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "A2CCCA1A-F0A1-4511-AF84-326DF406C0DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "81B0BEF9-25FD-48F7-83BC-BEA31BC3A1BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6D8590-0A99-43E0-9256-9572112F9C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2A0870-A4D3-481B-8A37-A4DC282B0DE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "20171515-B5A5-44D2-B7F7-21EDDE39989E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "F734AF76-4CEE-4F9D-AD6A-6BECF1F977CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "985B45F6-C285-4061-A656-A4C1A1FE59D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4A420DA5-1346-446B-8D23-E1E6DDBE527E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8CA8719-7ABE-4279-B49E-C414794A4FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "DC92B7EC-849F-4255-9D55-43681B8DADC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "2ABC1045-7D3D-4A14-B994-7E60A4BB4C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3C1E65-929A-4468-8584-F086E6E59839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "42C95C1D-0C2E-4733-AB1B-65650D88995D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "47A9F499-D1E3-41BD-AC18-E8D3D3231C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E07069-D6EE-4D44-94A6-CDCA4A50E6F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "344FA3EA-9E25-493C-976A-211D1404B251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "D081A380-5AA4-4451-94A9-7B65810106E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "112E7575-A3A0-4A94-AD39-7B2325B150B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "708E8CEF-82EE-4D4B-ABF9-87AA4878F517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.6.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D9D9A7-8819-44A4-80AC-52D6B63A0C9B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB5EDB-520B-4DEF-B06E-65CA13152824"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01C8B7E-EB19-40EA-B1D2-9AE5EA536C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD2D897-E321-4CED-92E0-11A98B52053C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:-:*:*:*",
            "matchCriteriaId" : "79A35457-EAA3-4BF9-A4DA-B2E414A75A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F13F07CC-739B-465C-9184-0E9D708BD4C7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F920C50-FE0F-4915-965A-AA58884DF7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "944FDBF2-1262-4B85-A7D3-537330144D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57C2F58F-13AA-45C5-9172-8465B44CA9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_web_services:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3115EB-0671-4E0C-9B75-FACFD6D42B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_web_services:7.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F3376F25-51D0-4D84-AFC7-AD1C1BCA0191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_web_services:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE00C3E-BB4E-4E71-86B8-E637BCD033A7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:xerces2_java:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3C1085-3255-449C-AFE3-984EFAC5BCCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "cret@cert.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "cret@cert.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2012-1232.html",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2012-1537.html",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37671",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37754",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38231",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38342",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43300",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/50549",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263489-1",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-272209-1",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021506.1-1",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/xerces/java/trunk/src/org/apache/xerces/impl/XMLScanner.java?r1=572055&r2=787352&pathrev=787353&diff_format=h",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cert.fi/en/reports/2009/vulnerability2009085.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.codenomicon.com/labs/xml/",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-1984",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:108",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.networkworld.com/columnists/2009/080509-xml-flaw.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/06/1",
        "source" : "cret@cert.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/22/9",
        "source" : "cret@cert.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/23/6",
        "source" : "cret@cert.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/26/3",
        "source" : "cret@cert.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1615.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2011-0858.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35958",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022680",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-890-1",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA10-012A.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "cret@cert.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cret@cert.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0359",
        "source" : "cret@cert.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=512921",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8520",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9356",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1636.html",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1637.html",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1649.html",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1650.html",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "cret@cert.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "cret@cert.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125787273209737&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2012-1232.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2012-1537.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/50549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263489-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-272209-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021506.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/xerces/java/trunk/src/org/apache/xerces/impl/XMLScanner.java?r1=572055&r2=787352&pathrev=787353&diff_format=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cert.fi/en/reports/2009/vulnerability2009085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.codenomicon.com/labs/xml/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-1984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.networkworld.com/columnists/2009/080509-xml-flaw.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/22/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/23/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/26/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1615.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2011-0858.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-890-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA10-012A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=512921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1636.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1637.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1649.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1650.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-06T16:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image containing an embedded ColorSync profile."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en ColorSync en Apple Mac OS X v10.4.11 y v10.5 anterior a v10.5.8 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de una imagen manipulada que contiene un perfil ColorSync incrustado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA315DB-10DF-4D18-A575-37A70F9AFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2398ADC8-A106-462E-B9AE-F8AF800D0A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF94705-562C-4EC8-993E-1AD88F01549C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/40196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT4220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/59162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/40196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/59162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-06T16:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X 10.5 before 10.5.8 makes it easier for user-assisted remote attackers to execute arbitrary JavaScript via a web page that offers a download with a Content-Type value that is not on the list of possibly unsafe content types for Safari."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de lista negra incompleta en CoreTypes en Apple Mac OS X v10.5 anterior a v10.5.8 hace mas fácil a atacantes remotos asistidos por usuarios ejecutar código JavaScript arbitrario a través de una pagina web que ofrece una descarga con un valor Content-Type que no esta en la lista de posibles tipos de contenido inseguros para Safari."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2398ADC8-A106-462E-B9AE-F8AF800D0A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF94705-562C-4EC8-993E-1AD88F01549C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-06T16:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Image RAW in Apple Mac OS X 10.5 before 10.5.8, and 10.4 before Digital Camera RAW Compatibility Update 2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Canon RAW image."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de Pila basado en búfer en Image RAW en Apple Mac OS X v10.5 anterior a v10.5.8, y v10.4 anterior a Digital Camera RAW Compatibility Update v2.6(actualización de compatibilidad con cámara digital RAW v2.6), permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de una imagen Canon RAW manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2398ADC8-A106-462E-B9AE-F8AF800D0A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF94705-562C-4EC8-993E-1AD88F01549C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09ED46A8-1739-411C-8807-2A416BDB6DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D089858-3AF9-4B82-912D-AA33F25E3715"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F60BF582-F700-4E26-A4AF-5BF657803525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE429EF-24D4-453A-8B43-8CCEF5D72773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504D78AB-5374-48C9-B357-DB6BD2267D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3029892E-1375-4F40-83D3-A51BDC4E9840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F8DA6D-2258-4138-8FB2-90BE3C68B230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-06T16:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in ImageIO in Apple Mac OS X 10.5 before 10.5.8, and Safari before 4.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image with crafted EXIF metadata."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en ImageIO en Apple Mac OS X v10.5 anterior a v10.5.8 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de una imagen con metadatos EXIF manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA315DB-10DF-4D18-A575-37A70F9AFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2398ADC8-A106-462E-B9AE-F8AF800D0A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF94705-562C-4EC8-993E-1AD88F01549C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-06T16:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "launchd in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to cause a denial of service (individual service outage) by making many connections to an inetd-based launchd service."
      }, {
        "lang" : "es",
        "value" : "launchd en Apple Mac OS X v10.5 anterior a v10.5.8 permite a atacantes remotos provocar una denegación de servicio (corte de servicio individual) haciendo muchas conexiones a un servicio lanzado basado en inetd-based."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA315DB-10DF-4D18-A575-37A70F9AFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2398ADC8-A106-462E-B9AE-F8AF800D0A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF94705-562C-4EC8-993E-1AD88F01549C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-06T16:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Login Window in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in an application name."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de formato de cadena en la ventana de inicio de sesión (Login Window) en Apple Mac OS X v10.4.11 y v10.5 anterior a v10.5.8 permite a atacantes ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de especificadores de formato de cadena en un nombre de aplicación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2398ADC8-A106-462E-B9AE-F8AF800D0A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF94705-562C-4EC8-993E-1AD88F01549C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-06T16:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MobileMe in Apple Mac OS X 10.5 before 10.5.8 does not properly delete credentials upon signout from the preference pane, which makes it easier for attackers to hijack a MobileMe session via unspecified vectors, related to a \"logic issue.\""
      }, {
        "lang" : "es",
        "value" : "MobileMe en Apple Mac OS X 10.5 anterior a v10.5.8 no elimina adecuadamente las credenciales al salir del panel de preferencias, lo cual hace más fácil para los atacantes secuestrar una sesión MobileMe a través de vectores no especificados, relacionado con una \"cuestión lógica\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA315DB-10DF-4D18-A575-37A70F9AFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2398ADC8-A106-462E-B9AE-F8AF800D0A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF94705-562C-4EC8-993E-1AD88F01549C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-06T16:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the kernel in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via a crafted AppleTalk response packet."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el núcleo de Apple Mac OS X v10.5 anteriores a v10.5.8 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (caída del sistema) a través de un paquete de respuesta AppleTalk manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA315DB-10DF-4D18-A575-37A70F9AFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2398ADC8-A106-462E-B9AE-F8AF800D0A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF94705-562C-4EC8-993E-1AD88F01549C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-06T16:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Mac OS X 10.5 before 10.5.8 does not properly share file descriptors over local sockets, which allows local users to cause a denial of service (system crash) by placing file descriptors in messages sent to a socket that has no receiver, related to a \"synchronization issue.\""
      }, {
        "lang" : "es",
        "value" : "Apple Mac OS X v10.5 anterior a v10.5.8 no comparte correctamente los descriptores de archivos sobre sockets locales, lo cual permite a usuarios locales provocar una denegación de servicio (caida del sistema) mediante la colocación de descriptores de archivo en los mensajes enviados a un socket que no tiene el receptor, relaccionado con una \"incidencia de sincronización\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA315DB-10DF-4D18-A575-37A70F9AFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2398ADC8-A106-462E-B9AE-F8AF800D0A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF94705-562C-4EC8-993E-1AD88F01549C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-218A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-07T19:00:01.063",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "socket.c in fetchmail before 6.3.11 does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."
      }, {
        "lang" : "es",
        "value" : "socket.c en fetchmail antes de v6.3.11 no maneja correctamente un caracter '\\ 0' en el nombre de dominio en el campo Common Name (CN) de un certificado X.509, lo cual permite a atacacantes hombre-en-el-medio (man-in-the-middle) suplantar servidores SSL a su elección a través de certificados manipulados expedidos por una Autoridad de Certificación (CA) legítima, una cuestión relacionada con CVE-2009-2408."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.10",
            "matchCriteriaId" : "21F26EF3-6F31-46C9-9D08-396B3708E498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF519D04-7596-42C6-A1D8-FC1018D1A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AFEC739-BDFA-4D14-9A04-96FFB71AE330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1923712-7B88-483E-B38A-0EA6FB38EB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9608A96-D131-401B-B041-09ADEEB59354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4555DBB-B63B-4637-86A9-399B34B27D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8AB8504-8CD1-4013-9413-1378F3BAE0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC47DA9-D110-4E6B-9F5B-D17ECB942B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345D0848-958F-4B44-8F31-0793C36A5ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E179061-FB6A-44AA-8EAC-4916719D9A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A6B5F4-C799-45C4-9EAD-A55023767033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FDB8B9-5537-4E08-8FA0-931D4BED43E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7EB9B1D-C6B0-494B-8A8C-752E5659EA1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC13DE1B-1428-4842-9567-BBE5EEF7042F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "215ED879-1E26-4FF4-8857-18499C5DE3A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72604F3D-2DE8-4BFF-97D5-4AFA64399201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8792F7FF-9E56-4201-89FD-F0146D4F0DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12812E8-1C5B-46CF-A266-EE19C5CD3B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DEAA0E8-746D-446D-AAEA-0ED287766332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D3E14C3-82AE-4D4A-8963-438BECBA5678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFB7BB-2879-4EB7-BE1D-163238E313C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED223B6-1864-415C-96D6-64E1EDE4C840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14CBC8ED-CC10-40B6-8AA7-9F1342432ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3417C2E-1117-4FE7-B2FA-74CAB57235B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C61DC4-50D5-44B2-92F8-A59C65144108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A37E19-1E07-4FD0-AC6D-6AC3ED954787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:4.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "570C9443-81CE-42AC-B4A6-3B2ABAD97EC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853DD3E0-668F-4FAC-BA0B-D4E9C416D646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF70FCA-5DA4-4C0B-B876-0345FA077D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0C4F7C-0003-4C77-AE22-A9C2FCBFAF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D12F53-07DE-447D-8403-40EB75B91955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19ECB844-F378-4A94-B9FC-A731B8186013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3169AA63-79F6-4B89-9405-8F6A2FB6FD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D1D54C-81A4-44CE-BE12-798CF7DD2CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6615C7D-09B5-4943-A124-2FF9A0F4B927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF18219F-0406-4D46-90DE-EA2A17C8EFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B56DFD-BDA9-4D8B-BE54-BF59B762D574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33EA0CA8-468F-4A94-8DA3-5D820AB65973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA21C847-57ED-4E7D-9366-6038467D9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0450BD04-15D2-4122-A210-6225B89BDA7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18428805-AEB2-4BA4-9762-906B59CE74D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFCCBB15-DFFE-4A57-A029-E57707D15E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0427B5C8-265C-47C3-9BAB-B2A0EAA1DEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A4B962-BE5B-471C-83EF-674525C5AE83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7166ECCB-54FB-44EA-BA80-4D2AAF494AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B309C89-99E2-4F0B-976C-95E44A45ADC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3DE7EE7-F627-4955-8D95-1F00F1F85C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D549098D-FE16-4BCB-91C4-D71A8C8D2E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BFA165-6E2E-49AF-9E2D-3D8923CF36C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C67DFF-A1BE-4486-A11F-CD3729927220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D365E6E-8777-4084-BEC8-7CBF4997D976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20C4FF28-0DBA-4995-8252-2D62FF896BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80C6B9B-AFCE-46A1-8DEF-51C1B526EB18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF667DB5-F41E-4E73-A01F-4EC3F60BAD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B144FA-A901-4CDF-AC3D-7F5E820B7A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96774635-9A12-4DAB-BCF6-2D678F244CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD2EE7A-36CB-4A26-8EEB-DACA2864D921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3898EBC-75A9-4DDD-A0AF-2CDEC72DAE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4267DCE8-985C-416D-A6B7-536585E5A573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E63EDF-FF0A-447C-A3FC-7BA2414C15CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DDD4A1-6185-41B6-A715-4C70F0AA2631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10A7E3C-07CD-48A6-9075-5314B4E1EEAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "319955A4-27A8-46FF-ACE7-97E6DF27B2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "925CF3DD-682B-40E6-900C-23F784CD9239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16366780-611E-4217-A614-EBA01421D148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43AEA36F-E730-4305-9CB6-738A7152F02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B9536BA-6334-4957-9632-6D64365B88AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F52FA32B-8048-4FD7-9D20-20DC5E52098B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA92DF1-3AAD-46AC-A9E4-E9386C977818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837D66DB-F9CB-41F1-A091-BCFBAC2F45B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74D12B67-6E66-419A-A28F-6306402931EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71FCBED-B25D-48E3-916C-FBA9E0DE8D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A17995E-DCAF-465A-8ABD-F1EA0D538784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93D03D78-C56E-4189-97FC-916C918EDFEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A66C77-041F-4A12-8A36-233A6B50641C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C945059C-EF39-486D-A804-FBB8704AB927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1258CA65-FBC1-4848-A9E5-A8F5E5D6FBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91C6418-41F0-46EB-ACFC-FCE907F5AA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:5.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C020534-7596-496C-B9B0-739F58F6F4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A77D40C-6FF5-42BD-9EFB-B532824D7606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04C6A76-2718-4DBA-8972-A3EECDDB1A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38ACD96E-5582-4ED0-BBB1-C891094D8217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264386DA-747F-492C-B660-D49BE9DB7139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4066AC-BE10-4189-86F6-BF94443738DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C25A146-50D5-4BA2-ABA2-20BF8784D7DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E76256-997F-4229-9B03-7BC3074F359D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A717C50-2C5A-4CD1-B2E6-8CDF450940CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F908FF-9986-4F71-B0B6-D6A86555EF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C1F99C-A246-40D3-B84A-5D11FF24AC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "028F7F83-AF15-443B-A7DB-4E695E62EAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B418C3CE-E6E6-401D-AD83-5BB181009A7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.6:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF06FD2-0A4C-4557-B8EF-F0F021179498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.6:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "38C949C2-07A0-4FE4-8FBF-86215CB999CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.6:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "88B23630-79DD-4B69-BB01-286193BA562E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc10:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE21564-68C0-4765-BA40-9D3046C4CB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "208102ED-6F22-44C5-BAF1-FD85EACF208F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CF7767-EB24-44E2-8E59-B4DBC99AFD23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CF3D6D4C-5FD8-4EE1-A34A-99D397F09E85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "D63D88C1-B201-4D48-9659-5802DC4FD3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "16463B23-E884-467E-9F63-6B57EED39856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "9F2C03AF-666D-4AF6-BC69-F8B081EB41AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F90AFA-4B13-46A0-89D7-4065300C94C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAD0F05-8B55-43ED-89D5-61A19F41EDFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99053698-7F8B-4E71-8647-1A8B0DF7CEB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9314F22D-22A8-4374-A2BF-3C64CF1F69BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "816E9640-A932-4E2F-9793-689F80D2AA89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D09BB43-6CBA-499B-91D1-BA256A65E40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE76611-08CE-4D85-B57A-021909835A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B98AFEDF-2BAB-4588-94E0-35AEA5F1B514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8BAB5B-4DBC-4D05-B5E2-591573BC05FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "02F6E729-A2F2-42AC-A941-F57A0A4E84A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "4143D519-4B49-4E71-8686-FC6A095F0999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "387ADB82-4FAD-44DA-ABF2-2F4645C4F1E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED4FBCB-B6DF-429D-871D-2A9F7F59E63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237F86BD-82CD-4A37-BF64-F103B1304F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667847D9-58DD-4693-B544-593AC6D7746D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "12BA2E29-5547-45F5-BC46-1A7B4A222055"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fetchmail.berlios.de/fetchmail-SA-2009-01.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=124949601207156&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36175",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36179",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36236",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505530/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.543463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2155",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://fetchmail.berlios.de/fetchmail-SA-2009-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=124949601207156&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505530/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.543463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-07T19:00:01.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276."
      }, {
        "lang" : "es",
        "value" : "Xscreensaver en Sun Solaris v9 y v10, OpenSolaris anterior a snv_120, y X11 v6.4.1 para Solaris v8, cuando el servidor Xorg o Xnewt es utilizado, permite a atacantes físicamente próximos obtener información sensible mediante la lectura de ventanas emergentes, que son mostrados incluso cuando la pantalla está bloqueado, una vulnerabilidad diferente que CVE-2009-1276."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B3BBCE23-9F15-45CD-859F-77ED540B51F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "053A0DA6-483C-49BB-BC7A-E624DB2C269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "447212A4-FACD-475E-A62B-60FE6504F63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB694DC0-407A-4555-8B72-DAF3C169DCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "535FF689-13A2-40C6-8706-7782038FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "843246D3-C2DA-454D-916A-AC8905E5134E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "244B7FE4-C485-4993-9810-3433C83A120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BE586AB9-9D46-4BC2-8092-51482F297410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "78B80C92-7EB5-4343-B830-32E8C011E572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "46E4ED9C-F013-48D2-8642-E5BA7599A512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A1E8108D-3CE7-4041-9027-1CA7473389EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E8585133-1F25-494A-8859-87B1D93305A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "32CF7469-6D2F-4E34-8013-7F0D3433D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09908FC0-5C90-4BEE-92A4-D7D67D657468"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36170",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-115298-02-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-258928-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020463.1-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35964",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-115298-02-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-258928-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020463.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-07T19:00:01.110",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties enables the debug flag, allows local users to discover cleartext passwords by reading debug files."
      }, {
        "lang" : "es",
        "value" : "Sun Java System Access Manager v6.3 2005Q1, v7.0 2005Q4, y v7.1; y OpenSSO Enterprise v8.0;  cuando AMConfig.properties permite a la marca de depuración, permite a los usuarios locales descubrir contraseñas en texto claro mediante la lectura de archivos de depuración."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_sparc:*:*:*:*:*",
            "matchCriteriaId" : "8ED84EE5-2C53-4A8E-98B7-4F9181D4E192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF718ABC-42C7-4FE1-82A0-00F3506F1D42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_sparc:*:*:*:*:*",
            "matchCriteriaId" : "F590A1DC-7E1B-44CF-83D2-3FEDA91765C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F24915-078C-4E4B-B173-671F0ABF9656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_sparc:*:*:*:*:*",
            "matchCriteriaId" : "CAABA44E-5FD1-4B71-A4DE-9DC671DD8223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_sparc:*:*:*:*:*",
            "matchCriteriaId" : "2A857F82-4146-48E9-8568-19393AC3856B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_sparc:*:*:*:*:*",
            "matchCriteriaId" : "B56B9BD3-2708-46C3-850D-865599F88BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_sparc:*:*:*:*:*",
            "matchCriteriaId" : "B6391170-5831-4303-85E5-A51BB431E788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_sparc:*:*:*:*:*",
            "matchCriteriaId" : "745D8651-B97C-48A9-AE4F-603A34516919"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_x86:*:*:*:*:*",
            "matchCriteriaId" : "B0617E1B-FE70-442E-AEE6-BACC8515F005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_x86:*:*:*:*:*",
            "matchCriteriaId" : "D2BC5828-0EF1-4640-91BF-9CC1E5FC6243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_x86:*:*:*:*:*",
            "matchCriteriaId" : "9096D748-9527-4061-8106-526741831F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_x86:*:*:*:*:*",
            "matchCriteriaId" : "AD06B92E-C23C-4648-A585-14FC54538FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_x86:*:*:*:*:*",
            "matchCriteriaId" : "4930E838-993A-4DA1-B504-4675EE20CF69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_x86:*:*:*:*:*",
            "matchCriteriaId" : "2D28C8EF-7525-48A0-A13A-EA95479A3B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_x86:*:*:*:*:*",
            "matchCriteriaId" : "207157F9-0AE4-45FB-A3DC-90C1F6E5376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_x86:*:*:*:*:*",
            "matchCriteriaId" : "9E8B1333-125A-44F7-A6C3-4B04D3FC9A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_x86:*:*:*:*:*",
            "matchCriteriaId" : "92BC8B61-3F58-43B3-9756-616376D4D2DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_linux:*:*:*:*:*",
            "matchCriteriaId" : "B9D7AA3C-6565-4291-A76F-3BE9311B77F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_linux:*:*:*:*:*",
            "matchCriteriaId" : "95ADB790-EF2D-4613-9F69-F37401518511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_linux:*:*:*:*:*",
            "matchCriteriaId" : "9E64CD07-4AF7-49C4-A3C0-EE2BF9E067A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_linux:*:*:*:*:*",
            "matchCriteriaId" : "D8C9CC43-EFB5-4192-81F2-0373961A7078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_linux:*:*:*:*:*",
            "matchCriteriaId" : "479657F1-8950-4C6C-9CD2-5FE3DF235E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_linux:*:*:*:*:*",
            "matchCriteriaId" : "6F238642-873A-4A50-BF14-6B173A20A36D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_linux:*:*:*:*:*",
            "matchCriteriaId" : "3DA96674-2050-4686-A592-F450655073E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_linux:*:*:*:*:*",
            "matchCriteriaId" : "5382933D-E32D-47F5-8892-65B94E06BD15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_linux:*:*:*:*:*",
            "matchCriteriaId" : "644C3EA4-607C-42E7-805B-8F2EF6AF694E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "B7821A43-2549-4B75-A201-95A3AC58E8BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "36C5F1CB-FEDE-4C19-B056-C846C86FDE8E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:7.0:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "134929FE-2EBA-4B55-904F-111A658160F3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:war:*:*:*:*:*",
            "matchCriteriaId" : "72304F6F-83F9-4207-93D9-6886AD9E88A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:opensso_enterprise:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D05F3A1-C5F3-43CA-9150-17FE55A89A30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36169",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-119465-16-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256668-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-119465-16-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-256668-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-07T19:00:01.140",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that \"policy advice\" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El componente CDCServlet en Sun Java System Access Manager v7.0 2005Q4 y v7.1, cuando Cross Domain Single Sign On (CDSSO) está habilitado, no garantiza que \"policy advice\" (aviso de políticas) se presenta al cliente correcto, lo cual permite a un atacante remoto obtener información sensible a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_sparc:*:*:*:*:*",
            "matchCriteriaId" : "8ED84EE5-2C53-4A8E-98B7-4F9181D4E192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF718ABC-42C7-4FE1-82A0-00F3506F1D42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_sparc:*:*:*:*:*",
            "matchCriteriaId" : "F590A1DC-7E1B-44CF-83D2-3FEDA91765C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F24915-078C-4E4B-B173-671F0ABF9656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_sparc:*:*:*:*:*",
            "matchCriteriaId" : "CAABA44E-5FD1-4B71-A4DE-9DC671DD8223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_sparc:*:*:*:*:*",
            "matchCriteriaId" : "2A857F82-4146-48E9-8568-19393AC3856B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_sparc:*:*:*:*:*",
            "matchCriteriaId" : "B56B9BD3-2708-46C3-850D-865599F88BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_sparc:*:*:*:*:*",
            "matchCriteriaId" : "B6391170-5831-4303-85E5-A51BB431E788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_sparc:*:*:*:*:*",
            "matchCriteriaId" : "745D8651-B97C-48A9-AE4F-603A34516919"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_x86:*:*:*:*:*",
            "matchCriteriaId" : "B0617E1B-FE70-442E-AEE6-BACC8515F005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_x86:*:*:*:*:*",
            "matchCriteriaId" : "D2BC5828-0EF1-4640-91BF-9CC1E5FC6243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_x86:*:*:*:*:*",
            "matchCriteriaId" : "9096D748-9527-4061-8106-526741831F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_x86:*:*:*:*:*",
            "matchCriteriaId" : "AD06B92E-C23C-4648-A585-14FC54538FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_x86:*:*:*:*:*",
            "matchCriteriaId" : "4930E838-993A-4DA1-B504-4675EE20CF69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_x86:*:*:*:*:*",
            "matchCriteriaId" : "2D28C8EF-7525-48A0-A13A-EA95479A3B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_x86:*:*:*:*:*",
            "matchCriteriaId" : "207157F9-0AE4-45FB-A3DC-90C1F6E5376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_x86:*:*:*:*:*",
            "matchCriteriaId" : "9E8B1333-125A-44F7-A6C3-4B04D3FC9A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_x86:*:*:*:*:*",
            "matchCriteriaId" : "92BC8B61-3F58-43B3-9756-616376D4D2DC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_linux:*:*:*:*:*",
            "matchCriteriaId" : "B9D7AA3C-6565-4291-A76F-3BE9311B77F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_linux:*:*:*:*:*",
            "matchCriteriaId" : "95ADB790-EF2D-4613-9F69-F37401518511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_linux:*:*:*:*:*",
            "matchCriteriaId" : "9E64CD07-4AF7-49C4-A3C0-EE2BF9E067A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_linux:*:*:*:*:*",
            "matchCriteriaId" : "D8C9CC43-EFB5-4192-81F2-0373961A7078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_linux:*:*:*:*:*",
            "matchCriteriaId" : "479657F1-8950-4C6C-9CD2-5FE3DF235E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_linux:*:*:*:*:*",
            "matchCriteriaId" : "6F238642-873A-4A50-BF14-6B173A20A36D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_linux:*:*:*:*:*",
            "matchCriteriaId" : "3DA96674-2050-4686-A592-F450655073E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_linux:*:*:*:*:*",
            "matchCriteriaId" : "5382933D-E32D-47F5-8892-65B94E06BD15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_linux:*:*:*:*:*",
            "matchCriteriaId" : "644C3EA4-607C-42E7-805B-8F2EF6AF694E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "B7821A43-2549-4B75-A201-95A3AC58E8BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "36C5F1CB-FEDE-4C19-B056-C846C86FDE8E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:7.0:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "134929FE-2EBA-4B55-904F-111A658160F3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.1:*:war:*:*:*:*:*",
            "matchCriteriaId" : "72304F6F-83F9-4207-93D9-6886AD9E88A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36167",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255968-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255968-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-07T19:00:01.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun VirtualBox 3.0.0 and 3.0.2 allows guest OS users to cause a denial of service (host OS reboot) via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Sun VirtualBox v3.0.0 y v3.0.2 permite a los usuarios del SO (sistema operativo) huésped provocar una denegación de servicio (reinicio del SO anfitrión) a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:virtualbox:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB28343-0302-4490-AD8C-C0C5F9B0527B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:virtualbox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44193C48-D911-457D-B152-DE36E37AC6E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36080",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-265268-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-265268-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-07T19:00:01.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a sysenter instruction."
      }, {
        "lang" : "es",
        "value" : "Sun VirtualBox v2.2 hasta v3.0.2 r49928 permite a los usuarios del SO (sistema operativo) huésped causar una denegación de servicio (reinicio del SO Linux anfitrión) a través de una instrucción sysenter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:virtualbox:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE04EDC-3616-447B-9BED-4A5EE6A470D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:virtualbox:3.0.2:r49928:*:*:*:*:*:*",
            "matchCriteriaId" : "FA21C04F-75D1-432C-922D-FE5DD7B3282D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-07T19:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Zope Object Database (ZODB) anterior a v3.8.2, cuando ciertos Zope Enterprise Objects (ZEO) habilitan compartir base de datos, permite a atacantes remotos ejecutar código Python arbitrario a través de vectores relaccionados con el protocolo de red ZEO."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.1",
            "matchCriteriaId" : "F9A7E1A6-8B87-43C2-A202-7383687A20B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:2.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC8B7904-4F44-4641-9275-D995ADDA0ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:2.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70191DA-A946-495D-A2CA-5DA5735B116F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:2.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB7982D-2F76-4237-8BBB-A4E5ADE1D497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:2.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A461879-EF34-4817-8EBB-1FE7A73E03C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF6448E-3BD4-4A3D-9D58-C39928F4FB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CB7404-734F-4838-AAEE-A5D5E987EBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64DF8BD4-31DC-44A5-944C-AA9AE57CBB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3CB7CF-91FC-4B7F-BD38-2F5033C70B99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05A4183-CCE7-4BE2-B8E5-10FC33ABDEA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02371BD4-F40F-4AA7-9214-E9FFCA80138C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B59CB22D-604D-4D9D-B7A4-E42026C7F3FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B0E78-B0E7-41F2-B776-B7B4AE937350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B6C5C0-E10B-437D-BF3C-0847B78EFDAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EF771A-6AE9-4006-A273-5B04B3EAADDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C38116E1-459C-45A7-A995-20C8ABDCCF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8568BD1E-839A-4C78-840D-47807D207C6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36204",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36205",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-07T19:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol."
      }, {
        "lang" : "es",
        "value" : "Zope Object Database (ZODB) anterior a v3.8.2, cuando ciertos Zope Enterprise Objects (ZEO) habilitan compartir base de datos, permite a atacantes remotos eludir la autenticación a través de vectores implicados en el protocolo de red ZEO."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.1",
            "matchCriteriaId" : "F9A7E1A6-8B87-43C2-A202-7383687A20B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF49B253-411F-4E83-93B3-556783B73965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8568BD1E-839A-4C78-840D-47807D207C6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36204",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36205",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2411",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-08-07T19:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de entero en la biblioteca libsvn_delta en Subversion anterior a v1.5.7 y v1.6.x anterior a v1.6.4, permite a los usuarios remotos autenticados y a los servidores Subversion remotos ejecutar código arbitrario a través de un flujo (stream) svndiff con grandes ventanas que desencadenan un desbordamiento de búfer basado en memoria dinámica, una cuestión relacionada con CVE-2009-2412."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.6",
            "matchCriteriaId" : "0434A631-5531-4C32-B5C5-730CA1890441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EA6517-6361-449E-8A50-3E8706A71211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.23.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "473B6660-AED8-4805-A48F-F4A18A4AB94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F087A7F-7D7D-4377-B7CD-FC0775A33568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E49F61-BC1D-4B0F-859F-89C331DA0E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D44285DE-6FD7-4B0D-9715-1E6D31FAB6BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.25.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D18EA18-8EB3-4924-B428-A4D329A87C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.27.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BB82A4-223F-43E3-8EE2-BA6276F51A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0D2D18-5141-4070-9390-2027967CBD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F3F14A-AD74-4318-A830-08DED8189E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56ADDE86-635F-4F24-A320-CBBE076BA182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AD9198-B051-4E0E-9B0B-CE99346EFF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.30.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A81E5045-969D-4064-A7DB-9F902D600251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.31.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61B5A517-AAD4-44AE-8B1B-F1BA3F9C21B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.32.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5342EE15-7AAD-4666-BEFB-172A7CE5BC96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.32.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71AD1DC9-1BEA-4C81-A4EF-B78B2344C65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.33.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A71B55-7F08-40BD-A60E-4EF679388B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.33.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39AA93C8-0CC1-46D0-8B67-2A3846BBDA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.34.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC08C9E-DC76-4F5E-9CA2-7952CC332EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.35.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB20C00-C6D6-4175-B659-018C4F4A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.35.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139E706E-202C-45B4-A5E3-2CDEEA14E20B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.36.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF79BC49-E4CD-4DCA-860F-A27F0371D4B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:0.37.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C12BDC3-6B07-47DD-96C8-1FA9F4B7BFE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F10E314-3897-4A63-AE40-F4E34C3F0BFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD801B94-DBE2-4A65-9428-8D4FC581866A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B95A69-2535-4844-B819-082D4349708C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930953B4-E972-48FB-913B-169E91F93FD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B41D875-F515-4A3F-9AA5-79BD09F74C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A8CCC20-8986-4028-B125-66F371A4A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E07F13C-A6FC-49E8-B10E-E4FC1F182DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04AB9C70-10CB-460B-91AD-1D79C9153194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E718DB-2A79-4277-BA15-6E6A904E483A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E10F1DA-64E9-4567-8727-3AE8A6788A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A8CED53-EC94-480C-BCBD-EE045F0AA2A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27FC24BB-5BF3-4A25-A5C0-F5A224736F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "286B7EBD-D663-440C-859B-1E0EE839AEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "408EC889-4D8B-49FC-9281-AC85559BB774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.1.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E2A83E-A244-4F1E-85E9-6EA075D32C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212AC756-866F-43F6-9659-61554824B884"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B612E0A1-C0F8-4E69-B32C-356ADE7F82E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B8E241-9E28-4627-8FBB-18CF5D12B11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D528D6-37F5-40D0-BAF2-CCA214862C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E73FF73-1F94-4657-83E2-375311A94440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2FAC312-66F0-4C9E-95DF-0C61F07A834D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9E80F6-728C-4474-AB90-23DF119E83DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "051434CF-6B62-4C29-B71A-C8800F048A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339A1BAC-F631-4355-9889-CE5EAC2FCB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72315FB6-EDB2-43AB-9DA8-E27118C84C08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C099833-CC13-47DD-9E6A-E10BF8103401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF74121-52AC-4EA8-9B51-BA68ED766ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6B791F-2DB2-4428-80DB-3203FD8868ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE0754E5-044C-445B-846F-1B7C7664F6BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D938FBF-02E3-4713-A7DB-7C552C65471C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A882A7B-5E03-4FC4-A92E-3681C67A0CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AF0C2C6-5FC0-4FB2-B31C-B9174789F904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D435D7-F523-4B8B-988F-37F85DA7ECCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CCBE47-1BD4-494A-8B9B-CB062F9741B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "457BD304-23A2-4FB4-AE9F-9F462DC27DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7899D782-7544-4113-AE78-B724689EDC74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E5887A-A560-40AA-96D4-45D65D9A9C16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C461DA24-27D3-44C6-A5A3-17716616C696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBF9A45-958C-4C65-B8AE-A7214D6A6922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE31846-6A08-47D5-8D20-D627DED5D8E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subversion:subversion:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6D800-A4A5-4835-941C-31C3FD00D5F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-08/0056.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/56856",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36184",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36224",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36232",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36257",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36262",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://svn.collab.net/repos/svn/tags/1.5.7/CHANGES",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://svn.collab.net/repos/svn/tags/1.6.4/CHANGES",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://svn.haxx.se/dev/archive-2009-08/0107.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://svn.haxx.se/dev/archive-2009-08/0108.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://svn.haxx.se/dev/archive-2009-08/0110.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1855",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:199",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1203.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35983",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022697",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-812-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2180",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11465",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00469.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00485.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-08/0056.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.collab.net/repos/svn/tags/1.5.7/CHANGES",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.collab.net/repos/svn/tags/1.6.4/CHANGES",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.haxx.se/dev/archive-2009-08/0107.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.haxx.se/dev/archive-2009-08/0108.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.haxx.se/dev/archive-2009-08/0110.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1203.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-812-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00469.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00485.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1896",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-08-10T18:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java Web Start framework in IcedTea in OpenJDK before 1.6.0.0-20.b16.fc10 on Fedora 10, and before 1.6.0.0-27.b16.fc11 on Fedora 11, trusts an entire application when at least one of the listed jar files is trusted, which allows context-dependent attackers to execute arbitrary code without the untrusted-code restrictions via a crafted application, related to NetX."
      }, {
        "lang" : "es",
        "value" : "La Java Web Start framework en IcedTea de OpenJDK en versiones anteriores a v1.6.0.0-20.b16.fc10 de Fedora 10, y anteriores a 1.6.0.0-27.b16.fc11 en Fedora 11, confía en toda una aplicación cuando al menos uno de los ficheros jar listados es confiable, lo que permite a atacantes depedientes del contexto ejecutar código de su elección sin restricciones de código no confiable a través de una aplicación modificada, relacionado con NetX."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB5EDB-520B-4DEF-B06E-65CA13152824"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.0.0",
            "matchCriteriaId" : "2B741611-EC22-410E-805F-010EB68FE309"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=512101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=512101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-10T18:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute arbitrary code via crafted data."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función de búsqueda de \"token\" (testigo) en la librería dtscore de los servicios Data Transport Services de CA Software Delivery r11.2 C1, C2, C3, y SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; y CA IT Client Manager r12."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:advantage_data_transport:3.0:c1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E6409A3-4F03-4CED-9A2E-2DE7B5EE624E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:it_client_manager:r12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31688D4-1C99-4764-A913-564E0FEB1E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:software_delivery:r11:c1:*:*:*:*:*:*",
            "matchCriteriaId" : "8E14834E-9E56-4036-B89C-E6F0E6775E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:software_delivery:r11:c2:*:*:*:*:*:*",
            "matchCriteriaId" : "F59A43E7-02A9-4656-A4C4-FE01DCE5E615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:software_delivery:r11:c3:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DE142E-A7C8-4280-9677-AE167FA3ACF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:software_delivery:r11:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD0F14E-A31D-4A2C-A464-A7DAC1CB2180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_software_delivery:4.0:c3:*:*:*:*:*:*",
            "matchCriteriaId" : "D546AF2C-34D9-4C7A-A2F1-F766D1CAA3E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36142",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505557/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2195",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-052/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214090",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505557/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-052/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2415",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-08-10T18:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in memcached 1.1.12 and 1.2.2 allow remote attackers to execute arbitrary code via vectors involving length attributes that trigger heap-based buffer overflows."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de entero en memcached v1.1.12 y v1.2.2 permiten a atacantes remotos ejecutar código de su elección a través de vectores de ataque que involucran los atributos de longitud que provocan desbordamientos de búfer basados en memoria dinámica."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BF997C-79FB-41F3-A4F5-455652BB2015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:memcachedb:memcached:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8789BF3-CA97-4DA2-99C4-53350CEEBB62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56906",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36133",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/m/memcached/memcached_1.1.12-1+etch1.diff.gz",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/m/memcached/memcached_1.2.2-1+lenny1.diff.gz",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1853",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35989",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00836.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/56906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/m/memcached/memcached_1.1.12-1+etch1.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/m/memcached/memcached_1.2.2-1+lenny1.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00836.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2475",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-08-10T18:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to (1) LayoutQueue, (2) Cursor.predefined, (3) AccessibleResourceBundle.getContents, (4) ImageReaderSpi.STANDARD_INPUT_TYPE, (5) ImageWriterSpi.STANDARD_OUTPUT_TYPE, (6) the imageio plugins, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Synth.Region.uiToRegionMap/lowerCaseNameMap, (11) the Introspector class and a cache of BeanInfo, and (12) JAX-WS, a different vulnerability than CVE-2009-2673."
      }, {
        "lang" : "es",
        "value" : "Sun Java SE v5.0 anterior a la actualización 20 y v6 anterior a la actualización 15, y OpenJDK, pueden permitir a atacantes dependientes del contexto obtener información confidencial a través de vectores de ataque relacionados con variables estáticas que son declaradas sin la palabra clave \"final\" relacionadas con (1) LayoutQueue, (2) Cursor.predefined, (3) AccessibleResourceBundle.getContents, (4) ImageReaderSpi.STANDARD_INPUT_TYPE, (5) ImageWriterSpi.STANDARD_OUTPUT_TYPE, (6) los complementos (\"plugins\") imageio, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Synth.Region.uiToRegionMap/lowerCaseNameMap, (11) la clase \"Introspector\" y una caché de BeanInfo, y (12) JAX-WS, una vulnerabilidad diferente de CVE-2009-2673."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:*:20:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0",
            "matchCriteriaId" : "625B941A-B638-46C2-A840-83724D5F826B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "EB9DE8D5-D4F6-45DE-9DB4-9E5BB7E518F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E78309B-E13F-4B65-9F59-39A993B900AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=513215",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10221",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=513215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2476",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-08-10T18:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType checks, which allows context-dependent attackers to bypass intended access restrictions by leveraging finalizer resurrection to obtain a reference to a privileged object."
      }, {
        "lang" : "es",
        "value" : "La implementación de Java Management Extensions (JMX) en Sun Java SE v6 anteriores a Update 15, y en OpenJDK, no refuerza adecuadamente las validaciones OpenType, permitiendo a los atacantes dependientes del contexto saltar las restricciones de acceso previstas al aprovechar la re-ejecución de un método finalizador para obtener una referencia a un objeto privilegiado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "EB9DE8D5-D4F6-45DE-9DB4-9E5BB7E518F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E78309B-E13F-4B65-9F59-39A993B900AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=513220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10381",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=513220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-10T18:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted (1) applet or (2) application."
      }, {
        "lang" : "es",
        "value" : "JDK13Services.getProviders en Sun Java SE v5.0 anteriores a Update 20 y v6 anteriores a Update 15, y en OpenJDK, proporciona privilegios completos a instancias de tipos de objeto no especificadas, permitiendo a atacantes dependientes del contexto saltar las restricciones de acceso previstas mediante (1)un applet o (2) una aplicación no confiables."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:*:20:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0",
            "matchCriteriaId" : "625B941A-B638-46C2-A840-83724D5F826B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "EB9DE8D5-D4F6-45DE-9DB4-9E5BB7E518F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E78309B-E13F-4B65-9F59-39A993B900AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=513222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=513222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2690",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-10T18:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-dependent attackers to obtain sensitive information via an untrusted (1) applet or (2) application."
      }, {
        "lang" : "es",
        "value" : "The codificador en Sun Java SE v6 anteriores a Update 15, y OpenJDK, permite acceso de lectura a variables privadas con nombres no especificados, permitiendo a atacantes dependientes del contexto obtener información sensible mediante (1) un applet o (2) una aplicación no confiables."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "EB9DE8D5-D4F6-45DE-9DB4-9E5BB7E518F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E78309B-E13F-4B65-9F59-39A993B900AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=513223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=513223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-10T20:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent attackers to leverage vulnerabilities in \"old zip and certificate handling\" and have unspecified other impact via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad de plugin en Sun Java SE v6 versiones anteriores a Update 15 no implementa adecuadamente la selección de versión, permitiendo a atacantes dependientes del contexto aprovechar vulnerabilidades en \"gestión antigua de ficheros zip y certificados\" y tener otro impacto no especificado mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "EB9DE8D5-D4F6-45DE-9DB4-9E5BB7E518F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-10T20:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on Windows 2000 Professional does not provide a Security Warning Icon, which makes it easier for context-dependent attackers to trick a user into interacting unsafely with an untrusted applet."
      }, {
        "lang" : "es",
        "value" : "La implementación de Abstract Window Toolkit (AWT) en Sun Java SE v6 anteriores a Update 15 para Windows 2000 Professional no proporciona un Security Warning Icon, facilitando a atacantes dependientes del contexto que engañen a un usuario al interactuar sin seguridad con un applet no confiable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "EB9DE8D5-D4F6-45DE-9DB4-9E5BB7E518F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-10T20:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on X11 does not impose the intended constraint on distance from the window border to the Security Warning Icon, which makes it easier for context-dependent attackers to trick a user into interacting unsafely with an untrusted applet."
      }, {
        "lang" : "es",
        "value" : "La implementación de Abstract Window Toolkit (AWT) en Sun Java SE v6 anteriores a Update 15 para X11 no impone la restricción de distancia prevista desde el borde de la ventana al Security Warning Icon, facilitando a atacantes dependientes del contexto que engañen a un usuario para interactuar sin seguridad con un applet no confiable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:6:14:*:*:*:*:*:*",
            "matchCriteriaId" : "D55A27B8-F579-4A83-B423-0D3249643437"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:x.org:x11:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09AEE820-942F-47D3-9CBE-B1D25DE05132"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-10T20:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java Web Start implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPointerException) via a crafted .jnlp file, as demonstrated by the jnlp_file/appletDesc/index.html#misc test in the Technology Compatibility Kit (TCK) for the Java Network Launching Protocol (JNLP)."
      }, {
        "lang" : "es",
        "value" : "La implementación de Java Web Start en Sun Java SE v6 anteriores a Update 15 permite a los atacantes dependientes del contexto provocar una denegación de servicio (excepción de puntero nulo) mediante un fichero .jnlp modificado, como se ha demostrado al probar jnlp_file/appletDesc/index.html#misc en el Technology Compatibility Kit (TCK) para el Java Network Launching Protocol (JNLP)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "EB9DE8D5-D4F6-45DE-9DB4-9E5BB7E518F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-10T20:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the javax.swing.plaf.synth.SynthContext.isSubregion method in the Swing implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPointerException in the Jemmy library) via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el método javax.swing.plaf.synth.SynthContext.isSubregion en la implementación de Swing en  Sun Java SE v6 anteriores a Update 15 permite a los atacantes dependientes del contexto provocar una denegación de servicio (excepción de puntero nulo en la biblioteca Jemmy) mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "EB9DE8D5-D4F6-45DE-9DB4-9E5BB7E518F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-10T20:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en la clase \"Provider\" en Sun Java SE v5.0 anteriores a Update 20 tienen un impacto y vectores de ataque desconocidos, también conocido como BugId 6406003."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:*:19:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0",
            "matchCriteriaId" : "DC8CDBBF-43EC-4FC0-BD17-C54BEB14F547"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-10T20:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6429594.  NOTE: this issue exists because of an incorrect fix for BugId 6406003."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades sin especificar en la clase Provider en  Sun Java SE v5.0 anterior a la actualización 20, tiene un impacto y vectores de ataque desconocidos, también conocido como BugId 6429594. NOTA: esta vulnerabilidad existe por una incorrecta corrección del BugId 6406003."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:*:19:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0",
            "matchCriteriaId" : "DC8CDBBF-43EC-4FC0-BD17-C54BEB14F547"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-10T20:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, aka BugId 6444262."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en la deserialización en la clase Provider en Sun Java SE v5.0 anterior a la actualización 20, tiene un impacto y vectores de ataque desconocidos, también conocido como BufId 6444262"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:*:19:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0",
            "matchCriteriaId" : "DC8CDBBF-43EC-4FC0-BD17-C54BEB14F547"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-10T20:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, related to a \"3Y Race condition in reflection checks.\""
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en el paquete java.lang en Sun Java SE v5.0 anterior a la actualización 20 tiene un impacto y vectores de ataque desconocidos, relacionados con \"Condición de carrera 3Y en comprobaciones de reflexión\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_se:*:19:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0",
            "matchCriteriaId" : "DC8CDBBF-43EC-4FC0-BD17-C54BEB14F547"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/j2se/1.5.0/ReleaseNotes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-10T23:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary code via a long XDR-encoded ASCII string to remote procedure 15."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función _tt_internal_realpath en la biblioteca ToolTalk (libtt.a) en IBM AIX v5.2.0, v5.3.0, v5.3.7 a la v5.3.10, y v6.1.0 a la v6.1.3, cuando el demonio rpc.ttdserver está activado en /etc/inetd.conf, permite a atacantes remotos ejecutar código de su elección a través de una cadena larga ASCII XDR-encoded sobre el procedimiento remoto 15."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A7DBFF-B11B-47EC-9E52-C12B156739D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B380F93D-5B13-49D0-B130-D45C2849A135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C8004D-639C-47BC-BE3E-CF5F06C1679C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD01F19-4B30-4147-AC48-7F5C64EE80CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104E5C14-6D87-494B-8D60-0443ADDCD31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE57C2-E728-4016-9774-28FB4B0509AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B11497-5622-4759-906A-A93A3E815584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F9CD013-D904-45DF-AD43-493A22D5744B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "307B47F5-D903-4763-A353-2538AFD6C9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16950BB-11BC-4A40-BB3B-841807BB2546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD518B94-9CD7-4C45-8766-578CF427B4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF417123-CCB6-48AF-A21B-1974173D516B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362CFB2F-817A-4E55-A315-86B6243E3F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53544921-1C1A-4382-99D7-0F3011BA76DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/libtt_advisory.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://risesecurity.org/advisories/RISE-2009001.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35505",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52842",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52843",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52844",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52845",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52846",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52847",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52848",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52849",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52850",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52851",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35419",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1620",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/libtt_advisory.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://risesecurity.org/advisories/RISE-2009001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ52851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0687",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-08-11T10:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer dereference during translation, related to an IPv4 packet with an ICMPv6 payload."
      }, {
        "lang" : "es",
        "value" : "La función pf_test_rule de OpenBSD Packet Filter (PF), tal como es usada en OpenBSD v4.2 hasta v4.5, NetBSD v5.0 anterior a RC3, MirOS v10 y anteriores y MidnightBSD v0.3 hasta la versión actual permite a atacantes remotos causar una denegación de servicio a través de paquetes IP modificados que provocan una \"desreferencia\" de un puntero nulo relacionada con un paquete IPv4 con datos (\"payload\") ICMPv6."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:midnightbsd:midnightbsd:0.3-current:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB266CE-0E06-4094-AE00-0ADBD2364F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mirbsd:miros:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10",
            "matchCriteriaId" : "A6A4B5B9-C443-4A85-852D-F3B71732BCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00564BAA-066A-4627-B6A8-78724E55D363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF8DD37-A337-4E9D-A34E-C2D561A24285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F12313A0-1EAF-4652-9AB1-799171CFFEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89CA041B-4153-43C7-BA69-D6052F4EBEEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B32BB973-60E5-402B-83FE-547786BC7A57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.3/common/013_pf.patch",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-001.txt.asc",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.helith.net/txt/multiple_vendor-PF_null_pointer_dereference.txt",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.openbsd.org/errata43.html#013_pf",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/errata44.html#013_pf",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/errata45.html#002_pf",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/53608",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502634",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1015",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49837",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8406",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8581",
        "source" : "cret@cert.org"
      }, {
        "url" : "ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.3/common/013_pf.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-001.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.helith.net/txt/multiple_vendor-PF_null_pointer_dereference.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/errata43.html#013_pf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/errata44.html#013_pf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/errata45.html#002_pf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/53608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-11T10:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing a %00 (encoded null byte)."
      }, {
        "lang" : "es",
        "value" : "CA SiteMinder permite a atacantes remotos evitar las protecciones contra las vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) de las aplicaciones J2EE a traves de una petición que contiene un %00 (byte \"null\")."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2ee:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC8FF1A-36F8-4625-A35A-AA9E20C0030C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://i8jesus.com/?p=55",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://i8jesus.com/?p=55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-11T10:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, \"overlong Unicode\" in place of blacklisted characters."
      }, {
        "lang" : "es",
        "value" : "CA SiteMinder permite a atacantes remotos evitar las protecciones contra las vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) de las aplicaciones J2EE a traves de una petición que contiene caracteres \"overlong Unicode\" mal formados en lugar de los caracteres prohibidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2ee:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC8FF1A-36F8-4625-A35A-AA9E20C0030C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:siteminder:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1959944A-2557-4D3D-A9AA-F7EB0F44DA20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://i8jesus.com/?p=55",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://i8jesus.com/?p=55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-11T10:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin.php in sun-jester OpenNews 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin.php en sun-jester OpenNews v1.0, cuando está deshabilitado \"magic_quotes_gpc\", permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"username\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun-jester:opennews:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31FB51B9-BB51-41B7-AC44-8454268378CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36154",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2168",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-11T10:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Static code injection vulnerability in admin.php in sun-jester OpenNews 1.0 allows remote authenticated administrators to inject arbitrary PHP code into config.php via the \"Overall Width\" field in a setconfig action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático en admin.php en sun-jester OpenNews v1.0 permite a usuarios administradores autenticados remotamente inyectar código PHP de su elección en \"config.php\" mediante el campo \"Overall Width\" en una acción \"setconfig\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun-jester:opennews:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31FB51B9-BB51-41B7-AC44-8454268378CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36154",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2168",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-11T10:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EditCSVAction function in cgi/actions.py in Roundup 1.2 before 1.2.1, 1.4 through 1.4.6, and possibly other versions does not properly check permissions, which allows remote authenticated users with edit or create privileges for a class to modify arbitrary items within that class, as demonstrated by editing all queries, modifying settings, and adding roles to users."
      }, {
        "lang" : "es",
        "value" : "La función EditCSVAction en cgi/actions.py en Roundup v1.2 anteriores a v1.2.1, v1.4 hasta v1.4.6, y posiblemente otras versiones no verifica adecuadamente los permisos, permitiendo a usuarios autenticados remotamente con privilegios de edición o creación en una clase modificar elementos de su elección con esa clase, como se ha demostrado al editar todas las consultas, modificar la configuración y añadir roles a los usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toni_mueller:roundup:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56733697-252E-46D4-9D1E-592EA9B07946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toni_mueller:roundup:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77E0664-DD8A-416B-A634-D20400699106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toni_mueller:roundup:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2841E10E-228B-4D0E-841A-73B19ECF1113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toni_mueller:roundup:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E28655-E926-4DA1-B447-3A04733C326C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toni_mueller:roundup:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82AED6E0-89EB-4C27-AA82-D256D5FDBADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toni_mueller:roundup:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44789245-3D9B-444C-921A-BF0E8E8002FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toni_mueller:roundup:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12164E11-5161-4CD5-9F0E-D4E496733F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toni_mueller:roundup:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424BBB10-A647-4B09-A838-5F4A05718B00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=518768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://issues.roundup-tracker.org/issue2550521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34192",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1754",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/56368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=489355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00429.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00439.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=518768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://issues.roundup-tracker.org/issue2550521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/56368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=489355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00429.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00439.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1885",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-08-11T18:30:00.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service (application crash) via vectors involving nested parentheses and invalid byte values in \"simply nested DTD structures,\" as demonstrated by the Codenomicon XML fuzzing framework."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de agotamiento de pila en validators/DTD/DTDScanner.cpp en Apache Xerces C++ v2.7.0 y v2.8.0 permite a atacantes dependientes de contexto producir una denegación de servicio (caída de aplicación) a través de vectores que incluyen el uso de paréntesis anidados y unos valores de byte no validos en \"estructuras simples anidadas DTD\", como se demostro en Codenomicon XML fuzzing framework."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:xerces-c\\+\\+:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E71C8D-D4DF-4F54-8CF8-D2AA67AC5690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:xerces-c\\+\\+:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C868E93-96F3-4199-83C8-B5055629911A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36201",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/xerces/c/trunk/src/xercesc/validators/DTD/DTDScanner.cpp?r1=781488&r2=781487&pathrev=781488&view=patch",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=781488",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cert.fi/en/reports/2009/vulnerability2009085.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.codenomicon.com/labs/xml/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:223",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.networkworld.com/columnists/2009/080509-xml-flaw.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35986",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2196",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=515515",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52321",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01099.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01136.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01150.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc/xerces/c/trunk/src/xercesc/validators/DTD/DTDScanner.cpp?r1=781488&r2=781487&pathrev=781488&view=patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=781488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cert.fi/en/reports/2009/vulnerability2009085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.codenomicon.com/labs/xml/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.networkworld.com/columnists/2009/080509-xml-flaw.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=515515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01099.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01136.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01150.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-1885\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future xerces-c packages update in Red Hat Enterprise MRG 1.1 may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/",
        "lastModified" : "2009-08-12T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2414",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-08-11T18:30:00.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allows context-dependent attackers to cause a denial of service (application crash) via a large depth of element declarations in a DTD, related to a function recursion, as demonstrated by the Codenomicon XML fuzzing framework."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de agotamiento de pila en  libxml2 v2.5.10, v2.6.16, v2.6.26, v2.6.27, y v2.6.32, y libxml v1.8.17, permite a atacantes dependientes de contexto producir una denegación de servicio (caída de aplicación) a través de una declaración de elementos en una DTD, relacionada con la recursión de función, como se demostro en Codenomicon XML fuzzing framework."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml:1.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C0B552-67E9-48E5-ABFB-AF0CD6DA46FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D463EC3C-88F1-46D9-ADB6-6283DC23B0B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD69C98-11AB-4BB5-A91A-F029BA0E1DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8135B1-FB22-4755-A5ED-CDB16E3E85A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4685BF-394A-4426-980A-2B1D37737C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7069A49C-038C-4E7B-AF03-4D90D5734414"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/35036",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36207",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36338",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37346",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT3949",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT4225",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.cert.fi/en/reports/2009/vulnerability2009085.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.codenomicon.com/labs/xml/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1859",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg678527.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.networkworld.com/columnists/2009/080509-xml-flaw.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openoffice.org/security/cves/CVE-2009-2414-2416.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36010",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-815-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2420",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3217",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=515195",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://git.gnome.org/browse/libxml2/commit/?id=489f9671e71cc44a97b23111b3126ac8a1e21a59",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10129",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8639",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00537.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00547.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00642.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cert.fi/en/reports/2009/vulnerability2009085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.codenomicon.com/labs/xml/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg678527.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.networkworld.com/columnists/2009/080509-xml-flaw.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openoffice.org/security/cves/CVE-2009-2414-2416.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-815-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=515195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.gnome.org/browse/libxml2/commit/?id=489f9671e71cc44a97b23111b3126ac8a1e21a59",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00537.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00547.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00642.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2416",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-08-11T18:30:00.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de uso anterior a la liberación en libxml2 v2.5.10, v2.6.16, v2.6.26, v2.6.27, y v2.6.32, y libxml v1.8.17, permite a atacantes dependientes de contexto producir una denegación de servicio (caída de aplicación) a través de una ,manipulación de (1) una notación o (2) tipos de atributo de enumeración en un fichero XML como se demostró en Codenomicon XML fuzzing framework."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml:1.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C0B552-67E9-48E5-ABFB-AF0CD6DA46FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D463EC3C-88F1-46D9-ADB6-6283DC23B0B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AD69C98-11AB-4BB5-A91A-F029BA0E1DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8135B1-FB22-4755-A5ED-CDB16E3E85A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4685BF-394A-4426-980A-2B1D37737C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:2.6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7069A49C-038C-4E7B-AF03-4D90D5734414"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB5EDB-520B-4DEF-B06E-65CA13152824"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D8DAE0-8E75-435C-9BD6-FAEED2ACB47C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6172AF57-B26D-45F8-BE3A-F75ABDF28F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.172.43",
            "matchCriteriaId" : "5725BE44-B621-422F-B9E2-D400ACFC43EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "77BC4840-8A34-40F9-873B-DF0F4CADCBDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "4.0",
            "matchCriteriaId" : "38364EB5-F557-4763-A555-9D66F51DE24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.4.11",
            "matchCriteriaId" : "A1E0F574-6859-45A6-B160-7DDE92C07CC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5.0",
            "versionEndExcluding" : "10.5.8",
            "matchCriteriaId" : "7A880FA4-5DBF-4894-8DAC-C3CD147D1EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.6.0",
            "versionEndExcluding" : "10.6.2",
            "matchCriteriaId" : "B30A1267-231F-44CA-9484-8849C1808DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.4.11",
            "matchCriteriaId" : "B2D0444E-6B76-46EE-95EF-617F8967F6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5.0",
            "versionEndExcluding" : "10.5.8",
            "matchCriteriaId" : "7F74FAC0-CC05-4797-9DE2-F7CE5CB8FC19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.6.0",
            "versionEndExcluding" : "10.6.2",
            "matchCriteriaId" : "4F769B77-FF42-442C-8D1A-4E2AE1F5DF39"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3",
            "versionEndIncluding" : "11.1",
            "matchCriteriaId" : "FF141FBE-4CA5-4695-94A0-8BE1309D28CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise:10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AED08A6F-CD23-4405-B1CF-C96BB8AE7D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1608E282-2E96-4447-848D-DBE915DB0EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD2D897-E321-4CED-92E0-11A98B52053C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:4.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D467EE9D-6A1F-4462-9BDA-C68B7EE375E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vma:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7426B5AC-D0FD-424D-9A1E-0875C2102D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902BA958-06AA-4EDF-9F9E-1030083EA361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF29100-E124-4416-95CF-18B4246D43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC337BB7-9A45-4406-A783-851F279130EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE88D8C-9CC3-46D1-9F26-290BC679F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13771B15-CD71-472A-BE56-718B87D5825D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openoffice.org:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.4.3",
            "matchCriteriaId" : "100F1988-1FF0-483A-9A56-F02A398343D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openoffice.org:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.1",
            "matchCriteriaId" : "12DF9C72-2B26-432D-9A16-1D21D2E54557"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/35036",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36207",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36338",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36417",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37346",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3949",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4225",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.cert.fi/en/reports/2009/vulnerability2009085.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.codenomicon.com/labs/xml/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1859",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg678527.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.networkworld.com/columnists/2009/080509-xml-flaw.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openoffice.org/security/cves/CVE-2009-2414-2416.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36010",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-815-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2420",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3217",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=515205",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://git.gnome.org/browse/libxml2/commit/?id=489f9671e71cc44a97b23111b3126ac8a1e21a59",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7783",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9262",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00537.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00547.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00642.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/35036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.cert.fi/en/reports/2009/vulnerability2009085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.codenomicon.com/labs/xml/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg678527.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.networkworld.com/columnists/2009/080509-xml-flaw.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openoffice.org/security/cves/CVE-2009-2414-2416.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-815-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=515205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://git.gnome.org/browse/libxml2/commit/?id=489f9671e71cc44a97b23111b3126ac8a1e21a59",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00537.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00547.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00642.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-11T18:30:01.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified requests via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Interfaz de usuario web en FreeNAS anteriores a v0.7RC1 permite a atacantes remotos secuestras la autenticación de los usuarios por peticiones sin especificar a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freenas:freenas:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.69.2",
            "matchCriteriaId" : "F4FAB5C2-6CA0-4B1D-A630-F428FAA0A8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freenas:freenas:0.69.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869D3D88-5520-4B03-A542-6670CDE6AE9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN15267895/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000053.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.freenas.org/index.php?option=com_frontpage&Itemid=22",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipa.go.jp/security/vuln/documents/2009/200908_freenas.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN15267895/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000053.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.freenas.org/index.php?option=com_frontpage&Itemid=22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipa.go.jp/security/vuln/documents/2009/200908_freenas.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-11T18:30:01.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en FreeNAS anteriores a v0.69.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freenas:freenas:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.69.1",
            "matchCriteriaId" : "ABA36EFB-9800-462F-9856-1E5998F96E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freenas:freenas:0.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DAB4E06-380A-44F5-A0C3-E22EDA699CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freenas:freenas:0.686.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E83F880-B508-4201-B145-DF1C7E3E4AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freenas:freenas:0.686.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F4C148-1238-4288-A74E-273F105976E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN89791790/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000052.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.freenas.org/index.php?option=com_frontpage&Itemid=22",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN89791790/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000052.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.freenas.org/index.php?option=com_frontpage&Itemid=22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-12T10:30:01.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP-UX B.11.31 allows local users to cause a denial of service (system crash) via unknown vectors related to the ttrace system call."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el sistema HP-UX B.11.31, permite a usuarios locales provocar una denegación de servicio (caída del sistema) a través de vectores desconocidos, relacionado con la llamada del sistema \"ttrace\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:hpux:b.11.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BD00FE5-4188-4DA0-B80B-5850027F5E16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832652",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36261",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022706",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2230",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-12T10:30:01.110",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SIP channel driver in Asterisk Open Source 1.2.x before 1.2.34, 1.4.x before 1.4.26.1, 1.6.0.x before 1.6.0.12, and 1.6.1.x before 1.6.1.4; Asterisk Business Edition A.x.x, B.x.x before B.2.5.9, C.2.x before C.2.4.1, and C.3.x before C.3.1; and Asterisk Appliance s800i 1.2.x before 1.3.0.3 does not use a maximum width when invoking sscanf style functions, which allows remote attackers to cause a denial of service (stack memory consumption) via SIP packets containing large sequences of ASCII decimal characters, as demonstrated via vectors related to (1) the CSeq value in a SIP header, (2) large Content-Length value, and (3) SDP."
      }, {
        "lang" : "es",
        "value" : "El driver SIP channel en Asterisk Open Source v1.2.x anterior a v1.2.34, v1.4.x anterior a v1.4.26.1, v1.6.0.x anterior a v1.6.0.12, y v1.6.1.x anterior a v1.6.1.4; Asterisk Business Edition vA.x.x, vB.x.x anterior a vB.2.5.9, vC.2.x anterior a vC.2.4.1, y vC.3.x anterior a vC.3.1; y Asterisk Appliance s800i v1.2.x anterior a v1.3.0.3, no utiliza el ancho máximo cuando se invocan las funciones de estilo sscanf, lo que permite a atacantes remotos producir una denegación de servicio (agotamiento de la pila de memoria) a través de paquetes SIP que contienen secuencias largas de caracteres ASCII decimales, como se demostró a través de vectores relacionados con (1) el valor CSeq en una cabecera SIP, (2) valores  Content-Length, y (3) SDP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:business:*:*:*:*:*",
            "versionEndExcluding" : "b.2.5.9",
            "matchCriteriaId" : "C7DBF0A2-9606-43EF-88E6-905B4864D377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:business:*:*:*:*:*",
            "versionStartIncluding" : "c.2.0",
            "versionEndIncluding" : "c.2.4.1",
            "matchCriteriaId" : "945FA0F6-42A8-4AF4-9EF6-4B16D08B2724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:business:*:*:*:*:*",
            "versionStartIncluding" : "c.3.0",
            "versionEndExcluding" : "c.3.1",
            "matchCriteriaId" : "7375080A-38B8-4230-875B-FC6184F23792"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:digium:s800i_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndExcluding" : "1.3.0.3",
            "matchCriteriaId" : "3E7FEE3E-B19C-4E7E-92D6-D0032A5DAA59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:digium:s800i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15C35F93-0E57-4AEB-AA5F-4EDFAE753451"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndExcluding" : "1.2.34",
            "matchCriteriaId" : "86564062-C367-4652-820A-7B4700011463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndExcluding" : "1.4.26.1",
            "matchCriteriaId" : "2CD3CE8A-7145-4501-A61A-D29F575E8795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.6.0",
            "versionEndExcluding" : "1.6.0.12",
            "matchCriteriaId" : "9E6BB86F-2FC7-4830-AC2E-4F114D87FE4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.6.1",
            "versionEndExcluding" : "1.6.1.4",
            "matchCriteriaId" : "A4DBF98F-EF1D-4DC0-93FE-2EC280AAA5EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.digium.com/pub/security/AST-2009-005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://labs.mudynamics.com/advisories/MU-200908-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36227",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505669/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36015",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022705",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2229",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://downloads.digium.com/pub/security/AST-2009-005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://labs.mudynamics.com/advisories/MU-200908-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505669/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-12T10:30:01.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libgnutls in GnuTLS before 2.8.2 does not properly handle a '\\0' character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority."
      }, {
        "lang" : "es",
        "value" : "libgnutls en GnuTLS versiones anteriores a v2.8.2 no gestiona adecuadamente un carácter '\\0' en el nombre de dominio en los campos de identificación (1) Common Name (CN) o (2) Subject Alternative Name (SAN) de un certificado X.509, permitiendo que atacantes \"hombre en el medio\" (man-in-the-middle) suplanten servidores SSL de su elección mediante un certificado modificado que ha sido proporcionado por una Autoridad de Certificación legítima."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1",
            "matchCriteriaId" : "D7DF1A90-D8BB-40B5-B136-39300DB1EFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FBB8F2C-498D-4D31-A7D7-9991BABEA7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8856E1B1-8007-42E5-82EF-4700D4DEEDDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9CF40D3-CE03-4C2A-8EEF-EB5989291806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC60D4CC-922C-4941-A400-0CBEAC7F31D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754A0D19-A17A-4007-8355-497D14CFCBF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8140DBE1-8116-4051-9A57-07535586E0AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D2DF7F-DCDD-486D-B906-F9DDE3A1DB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CC840D-AD01-4EE2-8652-06742A6286BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84224A82-6D58-4000-A449-20C1632DAE85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A466931C-769A-4A28-B072-10930CE655E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEE50AC-8730-4F04-B57C-6BDF8B957F6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F621DC-7967-4D97-A562-02E7033C89C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776E5481-399F-45BC-AD20-A18508B03916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D7F972-9128-4A4D-8508-B38CE2F155E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D56873-E8C5-4E4B-BB85-6DCF6526B453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FE4766-32D0-491E-8C71-5B998C468142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F980857-2364-466A-8366-BD017D242222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CDCF1F0-5A78-48FF-B4B0-303AE2420F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2E649D-5C45-4412-927B-E3EDCE07587C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066175C2-6E96-4BAE-B1A6-B23D25547FAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869D3010-67AE-44D0-BB8F-D9C410AEA1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052B40C1-C29B-4189-9A45-DAE873AB716D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F71E61-7455-4E10-B9D8-2B7FDDFB10F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E05A9A1-6B7A-43FB-A9B8-41B68CA5FDCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB08FD9-9AB8-4015-A8BE-FD9F7EBAC6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B588AAE0-8C3F-47C7-812F-8C97BD8795E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB9154B-4254-4F33-8DB2-5B96E2DA4931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D9C191-6A57-40BB-BDD1-6B1A6BBAB51E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EA79D1-2EA8-4040-A5B5-C93EE937945A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61D05BC3-1315-4AC7-884D-41459272C94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.8.1a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2901E522-6F54-4FA5-BF22-463A9D6B53D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738F29DA-9741-4BA5-B370-417443A3AC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52173492-1031-4AA4-A600-6210581059D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB636C36-2884-4F66-B68A-4494AEAF90C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "777A16E4-A1F5-48DC-9BF0-CD9F0DCF8B55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4231BD-201D-4B10-9E35-B9EEFC714F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9200C3-0F46-4238-918B-38D95BF11547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024A9511-7CB4-4681-8429-0FE7FC34DF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CEF5ED-87A5-44B2-8A4A-9896957C057B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B84A4F5-CED7-4633-913F-BE8235F68616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97564ABD-F9CE-4B3C-978A-1622DE3E4924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB6EC88-DCE0-439B-89CD-18229965849B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2C89DD-CDBD-4772-A031-089F32006D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C2FD618-91F4-48E7-B945-90CC0A367DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65DC9555-E76F-4F8D-AE39-5160B34A87FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B61D180-9EEA-4258-9A59-7F004F2C83F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DE1208-BDDC-405B-A34A-B58D00A279DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EF689E-59AA-4619-ADB2-E195CFD4094A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B62AB660-5DA4-4F13-AF9E-DC53D0A18EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22314ED6-D0CD-442E-A645-A9CCFE114AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1C5B2-27BF-4328-9336-98B8828EE4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5C952BF-A135-4B15-8A51-94D66B618469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ADED309-0A25-478D-B542-96217A0DD63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0403DE-76B1-4E24-8014-64F73DCB53DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69EA91B0-249F-41B2-8AD0-0C2AD29BE3D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F714D22-873A-4D64-8151-86BB55EFD084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9181F9-50FF-4995-9554-022CF93376C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED0B40F-3413-40D6-B1EF-E6354D2A91F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E99A7D8-2303-4268-8EF8-6F01A042BEDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C70F69-FB80-4F32-A798-71A5153E6C29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A1E604-500E-4181-BF66-BB69C7C3F425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8120E3-B60F-44E4-B837-4707A9BAEDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D3F16F-2C23-48E9-9F2D-1F1DF74719E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7073EAD-06C9-4309-B479-135021E82B99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "546C56AC-AFCC-47B7-A5A8-D3E3199BEA41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1895868E-E501-42C2-8450-EEED4447BAB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED1FCE0-260B-4FB2-9DBD-F4D0D35639AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199AA36A-3B23-438C-9109-CC9000372986"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6FFF05-37B2-4D69-86AF-921591382D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82BF8600-4E5D-4FF4-953C-F2DC726CA6CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C40F0E-B102-4FE8-9E93-0ACFBF35226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22802660-D33F-4683-B82F-C94AC6170A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3623E9BE-F513-4301-BF0C-6A7F87E78E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DBAF08-1441-4F14-A740-E90044B77042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE9BB7E-DDD8-4CBF-AEC2-40D59A560BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.7.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3B6684-3890-4B60-BE67-D06045A86B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81C6C982-21D5-4FE3-A342-FC45BD78D2F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69E3A01-D8C6-4C36-8C4E-52B96541D5B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D61596-01EB-4936-923B-63537625F926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "599EB59C-7717-47A8-84C6-78B6D79AEB02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A6CBB77-818D-4DFF-9DD9-07EBF9933B06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26E9005E-5034-43F2-B96E-7829E19FE3A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA854EA-29FE-4B91-AEA3-ED649D7FD25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC3A5EE-2892-4548-A0CB-D3289CD64D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F22BF4-A738-438B-8D0B-6993640F0D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3193B7-8FB9-45E4-BFF6-891A3F14F021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF269AE-121B-4982-A765-5C7E806FA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C9F604-7FBE-4759-B039-8F5894574203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191821CD-E4CB-4269-B04C-284A9F9783B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A71474-958D-4689-A652-3E2A731F47FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38169043-17DF-4CF9-963A-8770B8882357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7E5D9C-0976-4C9A-9FEB-AB923845BAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4537676-A72E-4433-B44F-3664EDD6F240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7CCCB66-C7CC-4E5C-8253-C29D57BE9B43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D090B10-68F2-424D-8234-2A280AA96B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23168B77-645D-4A2A-A6E3-7001104064A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D085B16-3116-423F-BDE0-2D93E12650A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59247E9-CDAE-4269-A8E4-F49F617CDD23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6019C0C-E9DD-4831-8E6A-785AE1A930FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F9CF15-8789-49B6-BB6D-B784C8FF20ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DAE798-14C9-4CB6-A39F-69CDF9D8FBB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C51E0C88-B19C-408D-AC17-10CE7462D48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7FBFAA-263C-4B7B-A135-9824DFD8CCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC41482-B3BC-4C93-A850-73A179BAB763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC80BE1-28A6-4348-A061-8FD9C805E945"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8EF703-AE06-4DD7-9235-2D8CCDB24F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8AC314-065B-4BC3-A5EE-CA6D3006F9F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8201FF6-53A8-4850-A2B2-47AA65B2CB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB33002-E5C6-4573-BC94-647DDE4E6F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D7D245A-D983-40AD-89A7-0EA00D38D570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7223691-225D-4649-B410-F41D2C489BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9E7F22-5BC4-4AD5-A630-25947CC1E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6B3DBF9-52EB-4741-85E4-E68645BD81E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350A6845-77D6-4D63-A13C-5DAB55F98727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A456D12-C43A-47B0-AC0D-BF02AEBA0828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D457688-987A-4059-AA58-D9BF19ABC48B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA20043D-EC85-4003-9E7B-27AB50F4E133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18A2C47E-510D-4537-8F51-3763A73E8E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4704D411-7B24-4B1F-9D40-A39A178FF873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3091701-9B7C-4494-A82E-6E6F64656D85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://article.gmane.org/gmane.network.gnutls.general/1733",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36266",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/14/6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1232.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2010-0095.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://article.gmane.org/gmane.network.gnutls.general/1733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/14/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1232.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2010-0095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0562",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-08-12T17:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 does not properly allocate memory, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger \"system state\" corruption, aka \"Office Web Components Memory Allocation Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El control Office Web Components ActiveX en Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 para el  2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 y 2006 SP1, y Office Small Business Accounting 2006, no asignan memoria adecuadamente, lo que permite a atacantes remotos la ejecución de código de su elección a través de vectores no especificados que lanzan una corrupción en el estado del sistema (System state), también conocida como \"Vulnerabilidad de asignación de memoria en Office Web Components\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2004:sp3:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "12FAB1BC-F8FB-4A14-8E38-703CF8E67B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2004:sp3:standard:*:*:*:*:*",
            "matchCriteriaId" : "BB4F1038-F652-4A76-874F-3FFAAF30AB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2006:sp1:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "64E8FCC6-B44E-4FA3-AE9E-9FB196D7CD7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2006:sp1:standard:*:*:*:*:*",
            "matchCriteriaId" : "91E957DC-91B8-470A-808C-9B2EA687B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:-:*:small_business_accounting_2006:*:*:*:*:*",
            "matchCriteriaId" : "F27860CB-929A-47F3-801E-3E69C53FA353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_components:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "D86088BB-C81D-4CCE-B7D1-1280818D99A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_components:2003:sp1:2007_microsoft_office:*:*:*:*:*",
            "matchCriteriaId" : "7B654504-9098-4F7F-8CE7-696CF15BCA38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_components:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9C5BA7-0ECB-4101-9DAD-ECAA42C9E0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_components:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B07BEA1E-F032-4E63-8548-C98DD6E05AAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id?1022708",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6337",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1133",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-08-12T17:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client for Mac 2.0, allows remote attackers to execute arbitrary code via unspecified parameters, aka \"Remote Desktop Connection Heap Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la conexión remota de escritorio de Microsoft (anteriormente Terminal Services Client) cuando corre RDP desde v5.0 hasta v6.1 en Windows, y Cliente de escritorio remoto para Mac 2.0, permite a atacantes remotos ejecutar código arbitrario a través de parámetros sin especificar, también conocido como \"Vulnerabilidad de memoria dinámica en la conexión de escritorio remoto\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "058039EE-3B8F-4ED2-933E-4AFD53866002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7C684420-1614-4DAE-9BD9-F1FE9102A50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "2C9B0563-D613-497D-8F2E-515E6DA00CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36229",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022709",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2238",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5693",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/36229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1534",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-08-12T17:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property values, aka \"Office Web Components Buffer Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Office Web Components ActiveX Control en Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, y Visual Studio .NET 2003 SP1 permite a atacantes remotos ejecutar código de su elección mediante valores modificados en la propiedad, también conocido como \"Vulnerabilidad de desbordamiento de búfer en Office Web Components\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:biztalk_server:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44BFE3B9-3C8C-4747-AAC0-A10EED857C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2004:sp3:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "12FAB1BC-F8FB-4A14-8E38-703CF8E67B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2004:sp3:standard:*:*:*:*:*",
            "matchCriteriaId" : "BB4F1038-F652-4A76-874F-3FFAAF30AB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2006:sp1:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "64E8FCC6-B44E-4FA3-AE9E-9FB196D7CD7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2006:sp1:standard:*:*:*:*:*",
            "matchCriteriaId" : "91E957DC-91B8-470A-808C-9B2EA687B2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:-:*:small_business_accounting_2006:*:*:*:*:*",
            "matchCriteriaId" : "F27860CB-929A-47F3-801E-3E69C53FA353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_components:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "D86088BB-C81D-4CCE-B7D1-1280818D99A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_components:2003:sp1:2007_microsoft_office:*:*:*:*:*",
            "matchCriteriaId" : "7B654504-9098-4F7F-8CE7-696CF15BCA38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_components:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9C5BA7-0ECB-4101-9DAD-ECAA42C9E0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_components:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B07BEA1E-F032-4E63-8548-C98DD6E05AAA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "85959AEB-2FE5-4A25-B298-F8223CE260D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56916",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35992",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022708",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6326",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/56916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1536",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-08-12T17:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka \"Remote Unauthenticated Denial of Service in ASP.NET Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "ASP.NET en Microsoft .NET Framework v2.0 SP1 y SP2 y v3.5 Gold y SP1, cuando ASP 2.0 es usado en modo integrado sobre IIS v7.0, no administra adecuadamente las peticiones de planificación, lo que permite a atacantes remotos provocar una denegación de servicio (parada de demonio) a través de una serie de peticiones HTTP manipuladas, también conocida como \"Vulnerabilidad de denegación de servicio remota no autenticada en ASP.NET\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C610747-93E5-4014-8ED2-47F333174832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32623D48-7000-4C7D-823F-7D2A9841D88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/srd/archive/2009/08/11/ms09-035-asp-net-denial-of-service-vulnerability.aspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56905",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36127",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35985",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022715",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2231",
        "source" : "secure@microsoft.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-036",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6393",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/08/11/ms09-035-asp-net-denial-of-service-vulnerability.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1544",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-08-12T17:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain privileges via a crafted RPC message to a Windows XP SP2 or SP3 or Server 2003 SP2 system, or cause a denial of service via a crafted RPC message to a Vista Gold, SP1, or SP2 or Server 2008 Gold or SP2 system, aka \"Workstation Service Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de doble liberación en el servicio de estación de trabajo en Microsoft Windows permite aumentar sus privilegios a usuarios remotos autenticados a través de un mensaje RPC manipulado al sistema en Windows XP SP2 o SP3 o Server 2003 SP2, o producir una denegación de servicio a través de un mensaje RPC manipulado al sistema de Vista Gold, SP1, o SP2 o Server 2008 Gold o SP2, tambien conocido como \"Vulnerabilidad de corrupción de memoria del servicio de estación de trabajo\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377F7D0C-6B44-4B90-BF90-DAF959880C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "D21D1DFE-F61B-407E-A945-4F42F86947B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "3461CEA0-6CCF-4AA9-B83A-420E1310C83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-041",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6286",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1545",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-08-12T17:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed header in a crafted AVI file, aka \"Malformed AVI Header Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la biblioteca Avifil32.dll en la funcionalidad de manejo de archivos de Windows Media en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1 y SP2, y Server 2008 Gold y SP2 permite a atacantes remotos ejecutar código arbitrario por medio de un encabezado con formato incorrecto en un archivo AVI creado, también se conoce como \"Malformed AVI Header Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377F7D0C-6B44-4B90-BF90-DAF959880C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "D21D1DFE-F61B-407E-A945-4F42F86947B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "3461CEA0-6CCF-4AA9-B83A-420E1310C83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36206",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35967",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022711",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2233",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-038",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5412",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/36206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1546",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-08-12T17:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute arbitrary code on a Windows 2000 SP4 system via a crafted AVI file, or cause a denial of service on a Windows XP SP2 or SP3, Server 2003 SP2, Vista Gold, SP1, or SP2, or Server 2008 Gold or SP2 system via a crafted AVI file, aka \"AVI Integer Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de enteros en la biblioteca Avifil32.dll en la funcionalidad de manejo de archivos de Windows Media en Microsoft Windows permite a los atacantes remotos ejecutar código arbitrario en un sistema Windows 2000 SP4 por medio de un archivo AVI creado, o causar una denegación de servicio en un sistema Windows XP SP2 o SP3, Server 2003 SP2, Vista Gold, SP1 o SP2, o Server 2008 Gold o SP2 por medio de un archivo AVI creado, también se conoce como \"AVI Integer Overflow Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377F7D0C-6B44-4B90-BF90-DAF959880C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "D21D1DFE-F61B-407E-A945-4F42F86947B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "3461CEA0-6CCF-4AA9-B83A-420E1310C83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56909",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/36206",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35970",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022711",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2233",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-038",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5930",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/56909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1922",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-08-12T17:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka \"MSMQ Null Pointer Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El servicio de cola de mensajes de Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, y Vista Gold no valida de forma adecuada los datos de una petición inespecífica IOCTL en el modo de usuario antes de pasar esta petición al modo kernel, lo que permite a usuarios locales conseguir un aumento de privilegios a través de una petición manipulada, también conocido como \"Vulnerabilidad de puntero nulo MSMQ\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://en.securitylab.ru/lab/PT-2008-09",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/56901",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/36214",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505691/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022714",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-040",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6109",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://en.securitylab.ru/lab/PT-2008-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505691/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1923",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-08-12T17:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka \"WINS Heap Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en el componente servicio de nombres de Internet (WINS) para Microsoft Windows 2000 SP4 y Server 2003 SP2 en Windows, permite a los atacantes remotos ejecutar arbitrariamente código a través de un paquete de replicación WINS manipulado que lanza un cálculo incorrecto de longitud de búfer, también conocido como \"Vulnerabilidad de desbordamiento de búfer WINS basado en memoria dinámica\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C0C7D2B-0AA5-4E82-B58B-2668A0EAC2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "C0D88E59-0DDC-4AE0-83B8-0C9DADAB2733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "4D5F7729-A095-43DF-BF2F-B4B6938087FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-039",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6410",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1924",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-08-12T17:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 allows remote WINS replication partners to execute arbitrary code via crafted data structures in a packet, aka \"WINS Integer Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en el el componente Windows Internet Name Service (WINS) para Windows 2000 SP4, permite a los partners (compañeros) de replicación WINS remota la ejecución de código de su elección a través de estructuras de datos manipuladas en un paquete, también conocida como  \"Vulnerabilidad de desbordamiento de entero en WINS\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C0C7D2B-0AA5-4E82-B58B-2668A0EAC2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "C0D88E59-0DDC-4AE0-83B8-0C9DADAB2733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "4D5F7729-A095-43DF-BF2F-B4B6938087FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-039",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6354",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1929",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-08-12T17:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, Vista SP1 or SP2, or Server 2008 Gold or SP2; or 5.2 or 6.1 on Windows XP SP3; allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka \"Remote Desktop Connection ActiveX Control Heap Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el control Microsoft Terminal Services Client ActiveX cuando se corre RDP v6.1 en Windows XP SP2, Vista SP1 o SP2, o Server 2008 Gold o SP2; o v5.2 o v6.1 en Windows XP SP3; permite a atacantes remotos ejecutar código de forma arbitraria a través de parámetros sin especificar mediante métodos desconocidos, también conocido como \"Vulnerabilidad de desbordamiento de búfer en el control ActiveX en la conexión a escritorio remoto\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377F7D0C-6B44-4B90-BF90-DAF959880C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "D21D1DFE-F61B-407E-A945-4F42F86947B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "3461CEA0-6CCF-4AA9-B83A-420E1310C83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56912",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/36229",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35973",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022709",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2238",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6329",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/56912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1930",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-08-12T17:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, aka \"Telnet Credential Reflection Vulnerability,\" a related issue to CVE-2000-0834."
      }, {
        "lang" : "es",
        "value" : "El servicio Telnet en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 Gold y SP2 permite a los servidores Telnet remotos ejecutar arbitrariamente código en máquinas cliente remplazando las credenciales NTLM de un usuario cliente, también conocido como \"Vulnerabilidad Reflejo de Credencial Telnet\", un asunto relativo a CVE-2000-0834."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377F7D0C-6B44-4B90-BF90-DAF959880C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "D21D1DFE-F61B-407E-A945-4F42F86947B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "3461CEA0-6CCF-4AA9-B83A-420E1310C83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56904",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/36222",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022716",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/35993",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2237",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-042",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6302",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/56904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2494",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-08-12T17:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via vectors related to erroneous free operations after reading a variant from a stream and deleting this variant, aka \"ATL Object Type Mismatch Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "La librería Active Template (ATL) en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 Gold y SP2  permite a atacantes remotos ejecutar código arbitrario a través de vectores relacionados con operaciones libres erróneas posteriormente a la lectura de una variante desde un stream y el borrado de esta variante, también conocido como \"Vulnerabilidad de mal emparejamiento de tipo de objeto ATL\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "2C9B0563-D613-497D-8F2E-515E6DA00CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/56910",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/36187",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35982",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022712",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2232",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5708",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2496",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-08-12T17:30:00.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka \"Office Web Components Heap Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en el Componentes Office Web  ActiveX Control en Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 para el 2007 Microsoft Office System, Internet Security y Acceleration (ISA) Server 2004 SP3 y 2006 SP1, y Office Small Business Accounting 2006 permite a los atacantes remotos ejecutar arbitrariamente código a través de parámetros no especificados a métodos desconocidos, también conocidos como \"Vulnerabilidad de corrupción de memoria dinámica en componentes de Office Web\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:biztalk_server:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44BFE3B9-3C8C-4747-AAC0-A10EED857C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2004:sp3:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "234D43DB-0FC3-4B94-8883-EEE99A427E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2004:sp3:standard:*:*:*:*:*",
            "matchCriteriaId" : "64ACA6AB-44C3-4B33-BEA1-04DFF004FA7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2006:sp1:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "CFF01816-AD1A-4D6D-92B3-348D70FC3920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2006:sp1:std:*:*:*:*:*",
            "matchCriteriaId" : "EE723FF8-0DC2-46C4-A3FA-953DCAB5612B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:-:*:small_business_accounting_2006:*:*:*:*:*",
            "matchCriteriaId" : "F27860CB-929A-47F3-801E-3E69C53FA353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_components:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "D86088BB-C81D-4CCE-B7D1-1280818D99A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_components:2003:sp1:2007_microsoft_office:*:*:*:*:*",
            "matchCriteriaId" : "7B654504-9098-4F7F-8CE7-696CF15BCA38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_components:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9C5BA7-0ECB-4101-9DAD-ECAA42C9E0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_components:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B07BEA1E-F032-4E63-8548-C98DD6E05AAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "85959AEB-2FE5-4A25-B298-F8223CE260D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitytracker.com/id?1022708",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5645",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-223A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-12T19:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted floating-point numbers."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en WebKit en Apple Safari anteriores a v4.0.3, permite a los atacantes remotos ejecutar arbitrariamente código o causar una denegación de servicio (caída de la aplicación) a través de un número punto-flotante manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC1878A-7B92-4DA4-B239-243DCE90E152"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2398ADC8-A106-462E-B9AE-F8AF800D0A3C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1335E35A-D381-4056-9E78-37BC6DF8AD98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF94705-562C-4EC8-993E-1AD88F01549C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B4CD59-9F37-4EF0-BA43-427CFD6E1329"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "C27DF35F-2121-4219-B7F0-81D26863D5E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F4ADD0-449B-4DDD-9878-DE86CBD56756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A419AE8-F5A2-4E25-9004-AAAB325E201A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "64FE1AA1-32D1-4825-8B2B-E66093937D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E760CD65-A10E-44F1-B835-DA6B77057C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A09DA0-83E9-491D-A0A5-AF97B5463D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C7EF0-A56B-40E6-9CED-1228405D034E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6078B0-4756-4E04-BAC4-C4EC90548A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87EDB53-FB6E-4B10-B890-A7195D841C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:85.8:*:*:*:*:*:*",
            "matchCriteriaId" : "957FCFC4-565A-4F2F-8D3D-D0982E1723F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*",
            "matchCriteriaId" : "22A450DC-CDF5-4EA0-A703-AFB3DEFE1395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857C92E2-6870-409A-9457-75F8C5C7B959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD75A4F-F529-4F5E-957D-380215F7B21B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834EC299-2010-4306-8CEE-35D735583101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443FF271-A3AB-4659-80B2-89F771BF5371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D29B98E-2F62-4F6F-976D-FEC4EB07F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3112AFEB-7893-467C-8B45-A44D5697BB79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC83309-3A97-4619-B5C1-574610838BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891514D5-50C8-4EDC-81C5-24ABF8BCC022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25032A3A-9D05-4E69-9A22-C9B332976769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9315ADD-5B97-4639-9B59-806EFD7BC247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:312.5:*:*:*:*:*:*",
            "matchCriteriaId" : "21BAC0B8-063C-4772-8F1B-EB9A2F7A585C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:312.6:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAB4071-A883-4E04-BDDF-A121C4738E61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B74019F-C365-4E13-BBB4-D84AD9C1F87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*",
            "matchCriteriaId" : "018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*",
            "matchCriteriaId" : "1082B33F-33B5-453A-A5AA-10F65AB2E625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*",
            "matchCriteriaId" : "EC348464-F08D-4ABF-BB90-3FA93C786F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61652033-FD15-47D6-8B18-CF28E6CE346C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDCF83E-620C-40FA-9901-5D939E315143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D113B5-070D-4F91-AB5E-222D71C90EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E86DEDD-ABDC-46BD-BAD3-A409635F7801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BAE980-449F-4F8C-A5BC-6CB7226E971A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A33F900-D405-40A8-A0A5-3C80320FF6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4444A309-5A97-4E1C-B4EA-C4A070A98CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B29951B-9A98-45B7-8E4B-5515C048EC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED950D-38AB-4D66-B97A-FB982D86057F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FDEB4F-133A-43DF-A89B-53E249F1293D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E78F43-07BD-4D62-9512-DA738A92BC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE25E9E-826E-4782-AED8-AC6297B18D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3180366-2240-467E-8AB9-BEA0430948F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:522.15.5:*:*:*:*:*:*",
            "matchCriteriaId" : "63FEA310-C6F2-4F2A-ABA8-6468308E3569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E834B8-545E-4472-9D60-B4CF1340D62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB9CC52-E533-4306-9E92-73C84B264D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02C814DE-1884-4F3E-944D-068F7FD55B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A5CA99-8B1C-4C35-85E3-DB0495444A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "912A26D1-3264-464F-B101-1796B35437E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D8C2EF-D552-4279-A12E-70E292F39E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00082E3-EBF5-4C23-9F57-BF73E587FC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C453B588-15FD-4A9C-8BC1-6202A21DAE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD634B1-4986-4E80-8BDC-58941893F6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BB6761-3581-4AE6-85E0-1609D15D7618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA1A4C8-9F87-449F-A11F-52E5D52247E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8498D2-DECC-4B88-BC1B-F8E2D076EE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC87F61-3463-468A-BF0B-070816BBC3CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FD40E4-D4C9-492E-8432-ABC9BD2C7E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0_beta:528.16:*:*:*:*:*:*",
            "matchCriteriaId" : "48644B6B-501A-4DAB-BD69-F6ADA4D36549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA27C19-7F59-4406-9055-1FDFC426F2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C977D9-26B7-4731-B8E1-CA44EB387B9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3733",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36023",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-12T19:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an arbitrary web site in the Top Sites view, and possibly conduct phishing attacks, via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Apple Safari 4 anteriores a v4.0.3 que permite a los servidores web remotos colocar un sitio web arbitrario en la vista \"Top Sites\", y posiblemente conducir un ataque de phishing, a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC1878A-7B92-4DA4-B239-243DCE90E152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2398ADC8-A106-462E-B9AE-F8AF800D0A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1335E35A-D381-4056-9E78-37BC6DF8AD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF94705-562C-4EC8-993E-1AD88F01549C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B4CD59-9F37-4EF0-BA43-427CFD6E1329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FD40E4-D4C9-492E-8432-ABC9BD2C7E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36EA71E0-63F7-46FF-AF11-792741F27628"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3733",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36022",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-12T19:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, via unspecified homoglyphs."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de lista negra incompleta en WebKit en Safari de Apple anterior a versión 4.0.3, como es usado en iPhone OS anterior a versión 3.1, iPhone OS anterior a  versión 3.1.1, para iPod touch y otras plataformas, permite a atacantes remotos falsificar nombres de dominio en URL y posiblemente conducir ataques de phishing, por medio de homoglifos no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "C27DF35F-2121-4219-B7F0-81D26863D5E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B74019F-C365-4E13-BBB4-D84AD9C1F87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*",
            "matchCriteriaId" : "018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*",
            "matchCriteriaId" : "1082B33F-33B5-453A-A5AA-10F65AB2E625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*",
            "matchCriteriaId" : "EC348464-F08D-4ABF-BB90-3FA93C786F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDCF83E-620C-40FA-9901-5D939E315143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A33F900-D405-40A8-A0A5-3C80320FF6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4444A309-5A97-4E1C-B4EA-C4A070A98CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B29951B-9A98-45B7-8E4B-5515C048EC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED950D-38AB-4D66-B97A-FB982D86057F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FDEB4F-133A-43DF-A89B-53E249F1293D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E78F43-07BD-4D62-9512-DA738A92BC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE25E9E-826E-4782-AED8-AC6297B18D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3180366-2240-467E-8AB9-BEA0430948F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E834B8-545E-4472-9D60-B4CF1340D62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB9CC52-E533-4306-9E92-73C84B264D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A5CA99-8B1C-4C35-85E3-DB0495444A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D8C2EF-D552-4279-A12E-70E292F39E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00082E3-EBF5-4C23-9F57-BF73E587FC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C453B588-15FD-4A9C-8BC1-6202A21DAE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BB6761-3581-4AE6-85E0-1609D15D7618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA1A4C8-9F87-449F-A11F-52E5D52247E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8498D2-DECC-4B88-BC1B-F8E2D076EE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EAC196-AE43-4787-9AF9-E79E2E1BBA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FD40E4-D4C9-492E-8432-ABC9BD2C7E67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "BE457690-CB2B-42BD-B97C-E723AFD02FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863383DA-0BC6-4A96-835A-A96128EC0202"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340C4071-1447-477F-942A-8E09EA29F917"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "2B1A9F14-4F3A-4B85-9050-84B51D59C9A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863383DA-0BC6-4A96-835A-A96128EC0202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FA2602-DDAB-4E23-A3D2-FB712970AAD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3733",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36026",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-12T19:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote attackers to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document."
      }, {
        "lang" : "es",
        "value" : "WebKit en Apple Safari anteriores a v4.0.3 no restringe apropiadamente el esquema URL del atributo pluginspage de un elemento EMBED, lo que permite a los atacantes remotos asistidos por usuarios lanzar un archivo arbitrario: URLs y obtener información sensible a través de un documento HTML manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC1878A-7B92-4DA4-B239-243DCE90E152"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2398ADC8-A106-462E-B9AE-F8AF800D0A3C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1335E35A-D381-4056-9E78-37BC6DF8AD98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF94705-562C-4EC8-993E-1AD88F01549C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B4CD59-9F37-4EF0-BA43-427CFD6E1329"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "C27DF35F-2121-4219-B7F0-81D26863D5E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F4ADD0-449B-4DDD-9878-DE86CBD56756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A419AE8-F5A2-4E25-9004-AAAB325E201A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "64FE1AA1-32D1-4825-8B2B-E66093937D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E760CD65-A10E-44F1-B835-DA6B77057C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A09DA0-83E9-491D-A0A5-AF97B5463D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C7EF0-A56B-40E6-9CED-1228405D034E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6078B0-4756-4E04-BAC4-C4EC90548A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87EDB53-FB6E-4B10-B890-A7195D841C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:85.8:*:*:*:*:*:*",
            "matchCriteriaId" : "957FCFC4-565A-4F2F-8D3D-D0982E1723F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*",
            "matchCriteriaId" : "22A450DC-CDF5-4EA0-A703-AFB3DEFE1395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857C92E2-6870-409A-9457-75F8C5C7B959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD75A4F-F529-4F5E-957D-380215F7B21B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834EC299-2010-4306-8CEE-35D735583101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443FF271-A3AB-4659-80B2-89F771BF5371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D29B98E-2F62-4F6F-976D-FEC4EB07F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3112AFEB-7893-467C-8B45-A44D5697BB79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC83309-3A97-4619-B5C1-574610838BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891514D5-50C8-4EDC-81C5-24ABF8BCC022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25032A3A-9D05-4E69-9A22-C9B332976769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9315ADD-5B97-4639-9B59-806EFD7BC247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:312.5:*:*:*:*:*:*",
            "matchCriteriaId" : "21BAC0B8-063C-4772-8F1B-EB9A2F7A585C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:312.6:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAB4071-A883-4E04-BDDF-A121C4738E61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B74019F-C365-4E13-BBB4-D84AD9C1F87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*",
            "matchCriteriaId" : "018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*",
            "matchCriteriaId" : "1082B33F-33B5-453A-A5AA-10F65AB2E625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*",
            "matchCriteriaId" : "EC348464-F08D-4ABF-BB90-3FA93C786F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61652033-FD15-47D6-8B18-CF28E6CE346C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDCF83E-620C-40FA-9901-5D939E315143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D113B5-070D-4F91-AB5E-222D71C90EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E86DEDD-ABDC-46BD-BAD3-A409635F7801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BAE980-449F-4F8C-A5BC-6CB7226E971A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A33F900-D405-40A8-A0A5-3C80320FF6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4444A309-5A97-4E1C-B4EA-C4A070A98CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B29951B-9A98-45B7-8E4B-5515C048EC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED950D-38AB-4D66-B97A-FB982D86057F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FDEB4F-133A-43DF-A89B-53E249F1293D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E78F43-07BD-4D62-9512-DA738A92BC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE25E9E-826E-4782-AED8-AC6297B18D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3180366-2240-467E-8AB9-BEA0430948F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:522.15.5:*:*:*:*:*:*",
            "matchCriteriaId" : "63FEA310-C6F2-4F2A-ABA8-6468308E3569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E834B8-545E-4472-9D60-B4CF1340D62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB9CC52-E533-4306-9E92-73C84B264D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02C814DE-1884-4F3E-944D-068F7FD55B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A5CA99-8B1C-4C35-85E3-DB0495444A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "912A26D1-3264-464F-B101-1796B35437E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D8C2EF-D552-4279-A12E-70E292F39E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00082E3-EBF5-4C23-9F57-BF73E587FC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C453B588-15FD-4A9C-8BC1-6202A21DAE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD634B1-4986-4E80-8BDC-58941893F6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BB6761-3581-4AE6-85E0-1609D15D7618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA1A4C8-9F87-449F-A11F-52E5D52247E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8498D2-DECC-4B88-BC1B-F8E2D076EE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC87F61-3463-468A-BF0B-070816BBC3CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FD40E4-D4C9-492E-8432-ABC9BD2C7E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0_beta:528.16:*:*:*:*:*:*",
            "matchCriteriaId" : "48644B6B-501A-4DAB-BD69-F6ADA4D36549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA27C19-7F59-4406-9055-1FDFC426F2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C977D9-26B7-4731-B8E1-CA44EB387B9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3733",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-13T16:30:01.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unquoted Windows search path vulnerability in the scheduler (sched.exe) in Avira AntiVir, AntiVir Premium, Premium Security Suite, and AntiVir Professional might allow local users to gain privileges via a malicious antivir.exe file in the \"C:\\Program Files\\avira\\\" directory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de búsqueda  de ruta no entrecomillada en Windows en el planificador (sched.exe) en Avira AntiVir, AntiVir Premium, Premium Security Suite y AntiVir Professional, podría permitir a usuarios locales elevar sus privilegios a través de un archivo antivir.exe malicioso en el directorio \"C:\\Program Files\\avira\\\" (\"C:\\Archivos de Programa\\avira\\\")."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:antivir:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDD00670-7EC0-4AA4-98EF-C8AE38330284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:antivir:*:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "38451FC5-030A-4766-9239-828089FA70D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:antivir:-:-:premium:*:*:*:*:*",
            "matchCriteriaId" : "60FC2C76-3B5F-418E-A2DD-9F5D2FBE4EF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:antivir_security_suite:-:-:premium:*:*:*:*:*",
            "matchCriteriaId" : "F805305F-CFA4-4BC9-8C89-885D85B4B8E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-01/0146.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.zoller.lu/2009/01/tzo-2009-2-avira-antivir-priviledge.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/3130",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/46568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-01/0146.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://blog.zoller.lu/2009/01/tzo-2009-2-avira-antivir-priviledge.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/3130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/46568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-13T16:30:01.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key[] array variable in a resetpass (aka rp) action, which bypasses a check that assumes that $key is not an array."
      }, {
        "lang" : "es",
        "value" : "wp-login.php en WordPress v2.8.3 y anteriores que permite a los atacantes remotos a forzar el restablecimiento de la contraseña para el primer usuario en la base de datos, posiblemente el administrador, a través de un key[] array variable en una acción resetpass (también conocido como rp), lo que evita un control que asume que $key no es un array."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.3",
            "matchCriteriaId" : "0A3A0FDB-5997-4C14-930C-F6C50850BD4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0114.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://core.trac.wordpress.org/changeset/11798",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36237",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wordpress.org/development/2009/08/2-8-4-security-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9410",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36014",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022707",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52382",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0114.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://core.trac.wordpress.org/changeset/11798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wordpress.org/development/2009/08/2-8-4-security-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-13T18:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Service Component Architecture (SCA) feature pack for IBM WebSphere Application Server (WAS) SCA 1.0 before 1.0.0.3 allows remote authenticated users to bypass intended authentication.transport access restrictions and obtain unspecified access via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "El Service Component Architecture (SCA) \"feature pack\" para IBM WebSphere Application Server (WAS)  SCA v1.0 anterior a v1.0.0.3, permite a usuarios autenticados remotamente evitar las restricciones de acceso establecidas por authentication.transport y obtener acceso no especificado a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFDC724-24B4-4FC2-9018-C915B4275790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:1.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538B9F5A-5160-430B-8028-940DEE765D3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36306",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27015429",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK86047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27015429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK86047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-13T18:30:00.267",
      "lastModified" : "2023-11-07T02:03:46.500",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-1899.  Reason: This candidate is a duplicate of CVE-2009-1899.  Notes: All CVE users should reference CVE-2009-1899 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-13T18:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5 does not properly handle use of Identity Assertion with CSIv2 Security, which allows remote attackers to bypass intended CSIv2 access restrictions via vectors involving Enterprise JavaBeans (EJB)."
      }, {
        "lang" : "es",
        "value" : "El componente Security en IBM WebSphere Application Server (WAS) v6.1 anterior a v6.1.0.25 y v7.0 anterior a v7.0.0.5  no maneja adecuadamente  la Aserción de Identidad (Identity Assertion) con CSIv2 Security, lo que permite a atacantes remotos evitar las restricciones de acceso establecidas con CSIv2 a través de vectores que involucran la \"Enterprise JavaBeans\" (EJB)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95255265-6D69-46D3-9FFA-8EDB1734375C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4191D3-64AB-482C-9DEF-DD04C4C942CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD75308-7F21-4DDF-AD66-C155CF4B721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C250D-8279-4071-871C-1C7C4DE09B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC300B03-7A8F-4E96-B55D-18CC258BBFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C8054A-8581-4936-AF94-291AE56EB4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026EBFCD-0BC1-404B-BC14-292F35BE667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D74F8-4321-48B3-A33E-FCCFA93013CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2043B836-3950-46A1-89E4-08985DEA0D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B009FD6-9352-4329-B67A-8155FB379889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108457A-50DC-4432-9E30-98ADBEBF2389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0661F4A0-A520-4443-B19D-6885920ADFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A553A6E7-64AA-41F2-9B92-4EC715C617B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK83097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK83097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-13T18:30:00.517",
      "lastModified" : "2023-11-07T02:04:04.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-1900.  Reason: This candidate is a duplicate of CVE-2009-1900.  Notes: All CVE users should reference CVE-2009-1900 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-13T18:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Web Services functionality in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, uses weak password obfuscation, which allows local users to cause a denial of service (deployment failure) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "la funcionalidad Web Services en IBM WebSphere Application Server (WAS) v6.1 anterior a v6.1.0.25 y v7.0 anterior a v7.0.0.5, en ciertas circunstancias e involucrando al archivo ibm-webservicesclient-bind.xmi y a la personalización de la encriptación de la contraseña, usa una ofuscación de contraseña débil, lo que permite a usuarios locales provocar una denegación de servicio (fallo en el despliegue) a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95255265-6D69-46D3-9FFA-8EDB1734375C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4191D3-64AB-482C-9DEF-DD04C4C942CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD75308-7F21-4DDF-AD66-C155CF4B721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C250D-8279-4071-871C-1C7C4DE09B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC300B03-7A8F-4E96-B55D-18CC258BBFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C8054A-8581-4936-AF94-291AE56EB4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026EBFCD-0BC1-404B-BC14-292F35BE667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D74F8-4321-48B3-A33E-FCCFA93013CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2043B836-3950-46A1-89E4-08985DEA0D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B009FD6-9352-4329-B67A-8155FB379889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108457A-50DC-4432-9E30-98ADBEBF2389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0661F4A0-A520-4443-B19D-6885920ADFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A553A6E7-64AA-41F2-9B92-4EC715C617B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK79275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK79275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-13T18:30:00.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, when SPNEGO Single Sign-on (SSO) and disableSecurityPreInvokeOnFilters are configured, allows remote attackers to bypass authentication via a request for a \"secure URL,\" related to a certain invokefilterscompatibility property."
      }, {
        "lang" : "es",
        "value" : "El componente Servlet Engine/Web Container en IBM WebSphere Application Server (WAS) v6.1 anterior a v6.1.0.25 y v7.0 anterior a v7.0.0.5, cuando SPNEGO Single Sign-on (SSO) y disableSecurityPreInvokeOnFilters son configurados, permite a los atacantes remotos evitar la autenticación a través de una petición a una \"URL segura\", relativa a cierta propiedad invokefilterscompatibility."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95255265-6D69-46D3-9FFA-8EDB1734375C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4191D3-64AB-482C-9DEF-DD04C4C942CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD75308-7F21-4DDF-AD66-C155CF4B721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C250D-8279-4071-871C-1C7C4DE09B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC300B03-7A8F-4E96-B55D-18CC258BBFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C8054A-8581-4936-AF94-291AE56EB4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026EBFCD-0BC1-404B-BC14-292F35BE667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D74F8-4321-48B3-A33E-FCCFA93013CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2043B836-3950-46A1-89E4-08985DEA0D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B009FD6-9352-4329-B67A-8155FB379889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108457A-50DC-4432-9E30-98ADBEBF2389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0661F4A0-A520-4443-B19D-6885920ADFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A553A6E7-64AA-41F2-9B92-4EC715C617B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24022479",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK77465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24022479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK77465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-13T18:30:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Migration component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, when tracing is enabled and a 6.1 to 7.0 migration has occurred, allows remote authenticated users to obtain sensitive information by reading a Migration Trace file."
      }, {
        "lang" : "es",
        "value" : "El componente Migration en IBM WebSphere Application Server (WAS) v6.1 anteriores a v6.1.0.25 y v7.0 anteriores a v7.0.0.5, cuando cuando la traza está habilitada y una migración de 6.0 a 7.0 ha sucedido, lo que permite a los usuarios remotos autenticados obtener información sensible leyendo un archivo Migration Trace."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95255265-6D69-46D3-9FFA-8EDB1734375C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4191D3-64AB-482C-9DEF-DD04C4C942CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD75308-7F21-4DDF-AD66-C155CF4B721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C250D-8279-4071-871C-1C7C4DE09B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC300B03-7A8F-4E96-B55D-18CC258BBFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C8054A-8581-4936-AF94-291AE56EB4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026EBFCD-0BC1-404B-BC14-292F35BE667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D74F8-4321-48B3-A33E-FCCFA93013CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2043B836-3950-46A1-89E4-08985DEA0D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B009FD6-9352-4329-B67A-8155FB379889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108457A-50DC-4432-9E30-98ADBEBF2389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0661F4A0-A520-4443-B19D-6885920ADFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A553A6E7-64AA-41F2-9B92-4EC715C617B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK80337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK80337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-13T18:30:00.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in wsadmin in the System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 allows remote attackers to bypass intended Java Management Extensions (JMX) Management Beans (aka MBeans) access restrictions, and cause a denial of service (daemon stop), via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en wsadmin en el componente System Management/Repository en IBM WebSphere Application Server (WAS) v7.0 anteriores a v7.0.0.5, permite a los atacantes remotos evitar las restricciones de acceso previstas para Java Management Extensions (JMX) Management Beans (aka MBeans), y causar una denegación de servicios (parada del demonio), a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108457A-50DC-4432-9E30-98ADBEBF2389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0661F4A0-A520-4443-B19D-6885920ADFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A553A6E7-64AA-41F2-9B92-4EC715C617B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK86328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK86328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-13T18:30:00.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 on z/OS uses weak file permissions for new applications, which allows remote attackers to obtain sensitive information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El componente System Management/Repository en IBM WebSphere Application Server (WAS) v7.0 anteriores a v7.0.0.5 en z/OS utiliza permisos de ficheros débiles para nuevas aplicaciones, lo que permite a los atacantes remotos obtener información sensible a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108457A-50DC-4432-9E30-98ADBEBF2389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0661F4A0-A520-4443-B19D-6885920ADFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A553A6E7-64AA-41F2-9B92-4EC715C617B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK83308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK83308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-13T18:30:00.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 does not properly read the portletServingEnabled parameter in ibm-portlet-ext.xmi, which allows remote attackers to bypass intended access restrictions via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server (WAS) v7.0 anteriores a v7.0.0.5 no lee apropiadamente el parámetro portletServingEnabled en ibm-portlet-ext.xmi, lo que permite a los atacantes remotos evitar las restricciones de acceso previstas a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108457A-50DC-4432-9E30-98ADBEBF2389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0661F4A0-A520-4443-B19D-6885920ADFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A553A6E7-64AA-41F2-9B92-4EC715C617B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK89385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK89385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-13T18:30:00.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the console in IBM WebSphere Partner Gateway (WPG) Enterprise 6.0 before FP8, 6.1 before FP3, 6.1.1 before FP2, and 6.2 before FP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la consola en IBM WebSphere Partner Gateway (WPG) Enterprise v6.0 anteriores a FP8, v6.1 anteriores a FP3, v6.1.1 anteriores a FP2, y v6.2 anteriores FP1 permite a los usuarios remotos autenticados ejecutar arbitrariamente comandos SQL a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "AF9BA887-4EC6-4BC1-87F8-1FB15C36FD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0:fp7:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC9F5DB-0CC0-4F2C-8B40-C3F1E2C80D90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E55335-9BDD-451B-A610-9389F072279D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.1.0:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "63F561F2-344E-4AA7-A58B-34970DF97A5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC33F02F-2381-4A6F-B322-B22E416B6887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.1.1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "465A6CF3-DAB2-4DD2-8633-96217629E768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.1.1:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "99A89D4A-5B8E-444E-BCDD-6F84457848AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA79605-3256-4E52-89B0-CE16873B4E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_partner_gateway:6.2:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "49FF0FBF-AA8D-4FCF-A49D-B7B457524DDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21382117",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1JR32386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1JR32607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1JR32608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1JR32609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1JR33176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21382117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1JR32386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1JR32607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1JR32608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1JR32609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1JR33176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-13T18:30:00.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM WebSphere Commerce 6.0 Enterprise before 6.0.0.8, when trace is enabled, allows local users to obtain sensitive information via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en IBM WebSphere Commerce v6.0 Enterprise anteriores a v6.0.0.8, cuando Trace es habilitado, permite a usuarios locales obtener información sensible a través de vectores desconocidos.\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 1.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 2.7,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C21677D0-CF4E-4958-83A7-EF8C3AF4B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "1FE46C0C-A5D0-4A0D-A936-67F5DB0799BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF24659-1284-4762-925C-4879B56AC386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.2:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "9DB9943D-6E0E-4044-B758-73442EC791FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "162FF755-CFF5-4AF2-B5D4-AEBA107DD93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.3:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "268E0C2C-E334-45EB-A716-F9A51EF75B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4783F5D2-0709-4E5B-B6B7-DF7823E928CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.4:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "5F496166-6606-4A90-AC87-E18EEEDBE0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB6E277-36B8-483E-8F9E-34D350BBB0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.5:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "B4485290-DA10-4FE5-B7E2-F9CAFE801E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A7EA48-BCC0-41BD-975D-0C01B6066BE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.6:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "4E59F3DB-5005-4CB4-85C4-B8167260E801"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://publib.boulder.ibm.com/infocenter/wchelp/v6r0m0/topic/com.ibm.commerce.admin.doc/refs/rig_new_and_changed.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1LI74286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://publib.boulder.ibm.com/infocenter/wchelp/v6r0m0/topic/com.ibm.commerce.admin.doc/refs/rig_new_and_changed.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1LI74286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T15:16:27.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a (1) http or (2) https request with 127.0.0.1 in the Host header."
      }, {
        "lang" : "es",
        "value" : "El interface Web en los teléfonos Snom VoIP modelos 320, 360, 270 y 820 con el firmware v6.5 anteriores a 6.5.20, 7.1 anteriores a 7.1.39 y 7.3 anteriores a 7.3.14 permite a atacantes remotos saltarse la autenticación, y reconfigurar el teléfono o hacer un uso arbitrario del mismo, a través de (1) http o (2) peticiones https con la dirección IP 127.0.0.1 en la cabecera Host."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snom:snom_300_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5",
            "versionEndExcluding" : "6.5.20",
            "matchCriteriaId" : "8C47AC90-80C9-4B17-8F55-1B8BFED83064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snom:snom_300_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1",
            "versionEndExcluding" : "7.1.39",
            "matchCriteriaId" : "3D4BB1BA-268E-47AE-B0B0-63F793C71794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snom:snom_300_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3",
            "versionEndExcluding" : "7.3.14",
            "matchCriteriaId" : "C8430CE2-6C4A-4200-B946-F0531A199139"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:snom:snom_300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C8CF7D-C185-42A3-AF2D-4088358150A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snom:snom_320_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5",
            "versionEndExcluding" : "6.5.20",
            "matchCriteriaId" : "1B8C016A-CFDA-4C22-97A2-E052C7E73C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snom:snom_320_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1",
            "versionEndExcluding" : "7.1.39",
            "matchCriteriaId" : "F0E4FA76-1F69-46D4-8444-F0CE59CD33AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snom:snom_320_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3",
            "versionEndExcluding" : "7.3.14",
            "matchCriteriaId" : "A0A83F90-7F85-4FD2-AC13-72C4B4FA62B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:snom:snom_320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B0A870E-6BEA-4F0C-9D96-698220682DD6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snom:snom_360_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5",
            "versionEndExcluding" : "6.5.20",
            "matchCriteriaId" : "5CA41185-98DB-48BA-8C4A-9F9202DCFFAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snom:snom_360_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1",
            "versionEndExcluding" : "7.1.39",
            "matchCriteriaId" : "A9575B25-7E2C-4E2D-9746-DA56EA97F015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snom:snom_360_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3",
            "versionEndExcluding" : "7.3.14",
            "matchCriteriaId" : "FE5E64C2-5D5F-4ACD-9339-069FE7FE8B6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:snom:snom_360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA7DFDB-2A67-4124-81E3-37E3F211568D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snom:snom_370_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5",
            "versionEndExcluding" : "6.5.20",
            "matchCriteriaId" : "2F62932D-6442-4A86-A13B-815A7ECF88BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snom:snom_370_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1",
            "versionEndExcluding" : "7.1.39",
            "matchCriteriaId" : "6883042A-CE06-4E23-B77F-CC76AEFBD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snom:snom_370_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3",
            "versionEndExcluding" : "7.3.14",
            "matchCriteriaId" : "E205BBA8-10C9-4ED4-9248-1D0CE023C129"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:snom:snom_370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D685F7DA-CE4F-497F-B863-6C6175712125"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snom:snom_820_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5",
            "versionEndExcluding" : "6.5.20",
            "matchCriteriaId" : "C9E7A799-BA1E-4D45-A261-33B234400A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snom:snom_820_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1",
            "versionEndExcluding" : "7.1.39",
            "matchCriteriaId" : "99D04CAF-58A1-42C8-B9FD-B9056EA3C5A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snom:snom_820_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3",
            "versionEndExcluding" : "7.3.14",
            "matchCriteriaId" : "EF2D9D65-BA9F-4A56-90F9-A1C7477B1BC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:snom:snom_820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66EEF924-599D-4D5E-88B4-65DE12315F19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36293",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.csnc.ch/misc/files/advisories/cve-2009-1048.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505723/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52424",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/36293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.csnc.ch/misc/files/advisories/cve-2009-1048.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505723/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2417",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-08-14T15:16:27.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."
      }, {
        "lang" : "es",
        "value" : "lib/ssluse.c en cURL y libcurl v7.4 hasta v7.19.5, cuando se usa OpenSSL, no maneja de forma aecuada el caracter '\\0' en un nombre de dominio en el campo sujeto del Common Name (CN) de un certificado X.509, lo que permite a atacantes de hombre en el medio hacer un spoofing de servidores SSL a través de la un certificado de una autoridad de Certificación legítima, manipulado, relativo a CVE_2009-2408."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4F46D5-85E5-4483-AD3D-207E9121FE3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3A6114-AA64-45E0-99D7-FAB060B8657B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCF67A1-874A-41A3-85C9-2BDCD193CE22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4321D25E-27DE-4649-A9B7-C6295F05ABB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25774954-E239-4337-9931-D4F6A69B42F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A000CAB-5986-4568-96C2-B7E213C77E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C5745B-2FFF-4DF8-883B-417015BDDF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A50325-2247-46EF-A991-70378C4D008F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58D1562-5A17-4124-8010-6098A204C898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C461E700-752D-4A31-A3A4-2B758CE07704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8B6BE8-BC9A-443D-B6C8-4B5FF2390306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83681317-F32A-4C73-915A-D431E8DF944C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D9C492-5F87-4149-ACAE-948DBE35E40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70655CE0-63F0-402C-B335-FCFA494335C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6A6A05-E568-46F2-B2F5-73300E4EA5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F102275D-8116-4F65-8910-478CB8DAAE76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D68C14C1-AFDF-4DE7-BD06-2A7FE079656D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD860AC-DE24-4CD5-B2C9-C77BD95AAFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403DDE56-5FA7-4920-A905-30349E61361B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F001A45E-CFD8-4B41-9281-F01A284ECD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "580BAB7A-3BE0-4FA1-9CAF-124F16882518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AE58E9-F201-41AA-A1DC-9EB09E50459A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C901C070-728C-41CD-8E4F-ECCB779906C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A1D7EA-6567-4A48-A431-EA28508D62C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D8F50B-495E-48B3-BF9F-8E4ACA556B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F4FFF6-6AB4-4857-BDFA-12801C972708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9987313-0256-4837-B347-6ABEF18DFCBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D703855E-6610-445D-B498-61CE1C763A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7B64A2-6779-4A01-9864-902E2C04B08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A07B1635-6F28-4ED4-A2AC-CD7E9549C920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA4392F-2582-4EFE-9450-3F12588BE981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E91EAD-3813-498B-9B5C-05F1DCF75D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CDDBC13-1646-490B-B778-DBD3BB3208C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B87F05D-C077-4929-8BBA-A7287A816470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEC85E8-5555-46A9-9A95-30E1497AFA09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA22553-089B-44D2-B545-82F7AED74E25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03060364-7DCD-4111-BF7A-BEF6AFCB3134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "319DADFB-081B-46AA-9F7D-DD4D1C5BE26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9C6906-5FBD-4736-87B6-720E288E394A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4931FF86-51B6-470A-A2E0-A1B0942D1CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA9DA33F-A33E-483E-AE4D-4422D62C02E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5028DB2-87D5-4AD8-87D4-325C519D6CD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E992CDB0-A787-4F7E-AC55-13FE7C68A1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "808143C5-108B-45BE-B626-A44F9F956018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EBBB3F1-98BD-40D1-B09F-1924D567625A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D5DAE5-ABEA-4FF1-836C-BA4741F13323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E15191F-D4E6-425C-81BE-2CD55A815B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0407CCC0-ACAA-4B2A-99A5-DA57791057B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248D86F7-A8E5-448D-A55A-C05278BB9822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295EE8FF-18BD-4F67-9045-83A5693AB783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249C50ED-B681-4DFB-83CD-625D703CD95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F060A3-FC8E-45CD-85AB-247D13A2896C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14BB81D-841D-456C-9CAE-CC679FFAB5E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBA081D-AB88-4895-8495-6B51EB6B5325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F6B4C1-B88F-4675-BAB7-66A4DFAC17AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44CE5AD-27B6-45EB-A0B8-CF9BDB31F0E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63984E6B-54EF-4DD6-8A5B-DD16A9A6A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBACF741-C988-4800-A9FF-E4836A1EE4E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C5A868-2EC9-4FC6-A074-E587A203A350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curl:libcurl:7.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54613E59-4583-405C-9BA3-609D47B9FFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libcurl:libcurl:7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7DE39A-325D-42F5-B4ED-C971725232DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libcurl:libcurl:7.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DEC10D0-622A-4037-9D4A-69814226CC6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libcurl:libcurl:7.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D0343C-175D-44BA-BCCF-5F204C749EE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libcurl:libcurl:7.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D4C0FC-6848-4D18-98E8-4A2F4D7BECC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libcurl:libcurl:7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E66EA58-F408-4D8B-9614-67B936B0F1FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libcurl:libcurl:7.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75BED785-BD7D-4A09-9B50-77548E64916D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libcurl:libcurl:7.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A61633-B9B8-44B5-B352-29F4BFBD2BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libcurl:libcurl:7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF6D258-2A8C-40C3-9171-4C4A5B22B30C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libcurl:libcurl:7.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DB80911-5BD5-401D-8C0A-8229A71D0804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libcurl:libcurl:7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE508863-DB77-41D3-A438-3F26C34703E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libcurl:libcurl:7.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B79E431-AD91-4269-B427-DD1169D12659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libcurl:libcurl:7.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479069C9-D3E5-4909-8368-0B0F4704810B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libcurl:libcurl:7.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DADB9299-3EFA-45E6-95BD-7FE2E1B1D565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libcurl:libcurl:7.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F93365-54FD-45D4-B878-13A53A6806A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.10.6-CVE-2009-2417.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.11.0-CVE-2009-2417.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.12.1-CVE-2009-2417.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.15.1-CVE-2009-2417.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.15.5-CVE-2009-2417.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.16.4-CVE-2009-2417.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.18.1-CVE-2009-2417.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.19.0-CVE-2009-2417.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.19.5-CVE-2009-2417.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://curl.haxx.se/docs/adv_20090812.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36238",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36475",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/45047",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://shibboleth.internet2.edu/secadv/secadv_20090817.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0124",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506055/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36032",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-1158-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2263",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52405",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10114",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8542",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.10.6-CVE-2009-2417.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.11.0-CVE-2009-2417.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.12.1-CVE-2009-2417.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.15.1-CVE-2009-2417.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.15.5-CVE-2009-2417.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.16.4-CVE-2009-2417.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.18.1-CVE-2009-2417.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.19.0-CVE-2009-2417.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://curl.haxx.se/CVE-2009-2417/curl-7.19.5-CVE-2009-2417.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://curl.haxx.se/docs/adv_20090812.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/45047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shibboleth.internet2.edu/secadv/secadv_20090817.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506055/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-1158-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T15:16:27.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in HP Insight Control Suite For Linux (aka ICE-LX) before 2.11 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en HP Insight Control Suite para Linux (también conocido como ICE-LX) anteriores a v2.11, permite a atacantes remotos secuestrar la autenticación de los usuarios no especificados a través de vectores no específicos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:insight_control_suite_for_linux:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10",
            "matchCriteriaId" : "14080634-7128-462D-8F46-51BC0126479C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=125017764422557&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125017764422557&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T15:16:27.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps and (2) smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition."
      }, {
        "lang" : "es",
        "value" : "La función mm_for_maps en fs/proc/base.c en el kernel Linux v2.6.30.4 y anteriores permiten a usuarios locales leer (1) mapas y (2) ficheros smaps bajo proc/ a través de vectores relativos a la carga ELF, un proceso setuid, y condición de carrera."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.30.4",
            "matchCriteriaId" : "63524387-5057-465B-AC04-C7C5CAEAE73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E55450-F6D9-483C-9CC8-E651E5A12AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "45273823-29EA-44DE-8444-3933402C5793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "88F60E74-09DB-4D4A-B922-4A46EED0EC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E242D3DE-D1DC-406A-BCC3-C4380B7EC369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8598D6E5-0C5C-4A31-841A-C12801DB7D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "59800B0A-477B-42F8-A58A-5144F455AE01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc7-git6:*:*:*:*:*:*",
            "matchCriteriaId" : "F166BF6B-BFB0-4206-BD59-179701572F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC40B6DE-09D9-422B-965B-7EB9F6661DEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=00f89d218523b9bf6b522349c039d5ac80aa536d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13f0feafa6b8aead57a2a328e2fca6a5828bf286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=704b836cbf19e885f8366bccb2e4b0474346c02d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2009/6/23/652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2009/6/23/653",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=124718946021193",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=124718949821250",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36265",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/11/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2246",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=516171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=00f89d218523b9bf6b522349c039d5ac80aa536d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13f0feafa6b8aead57a2a328e2fca6a5828bf286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=704b836cbf19e885f8366bccb2e4b0474346c02d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lkml.org/lkml/2009/6/23/652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lkml.org/lkml/2009/6/23/653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=124718946021193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=124718949821250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/11/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=516171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "The Red Hat Security Response Team has rated this issue as having moderate security impact.\n\nWe currently have no plans to fix this flaw in Red Hat Enterprise Linux 3, 4, and 5 as it is not possible to trigger the information leak if the suid_dumpable tunable is set to zero (which is the default).\n\nIt was addressed in Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "lastModified" : "2009-11-04T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T15:16:27.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket."
      }, {
        "lang" : "es",
        "value" : "El kernel de Linux versiones 2.6.0 hasta 2.6.30.4 y 2.4.4 hasta 2.4.37.4, no inicia todos los punteros de función para operaciones de socket en estructuras de proto_ops, lo que permite a los usuarios locales activar una desreferencia de puntero NULL y alcanzar privilegios mediante el uso de mmap que asigna la página cero, inserta el código arbitrario en esta página y luego invoca una operación no disponible, como es demostrado por la operación de sendpage (función sock_sendpage) en un socket PF_PPPOX."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.4",
            "versionEndExcluding" : "2.4.37.5",
            "matchCriteriaId" : "5960758C-4449-4D23-9EA6-92FB031C3725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.0",
            "versionEndExcluding" : "2.6.30.5",
            "matchCriteriaId" : "39A91A11-DDAB-4C83-90A4-CFFC7652955E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_real_time:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6CB9DA-D313-4CE9-BB48-6C399156311C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F2976D5-83A5-4A52-A1E6-D0E17F23FD62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "941713DB-B1DE-4953-9A9C-174EAFDCB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F87B994-28E4-4095-8770-6433DE9C93AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B5DCF29-6830-45FF-BC88-17E2249C653D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0174.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://blog.cr0.org/2009/08/linux-null-pointer-dereference-due-to.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=c18d0fe535a73b219f960d1af3d0c264555a12e3",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e694958388c50148389b0e9b9e9e8945cf0f1b98",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://grsecurity.net/~spender/wunderbar_emporium.tgz",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1222.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1223.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36278",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36289",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36327",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36430",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37298",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100067254",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0121",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1865",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/19933",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9477",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:233",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/14/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1233.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505751/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505912/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/512019/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36038",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2272",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://zenthought.org/content/file/android-root-2009-08-16-source",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=516949",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-3103",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11526",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11591",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8657",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0174.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://blog.cr0.org/2009/08/linux-null-pointer-dereference-due-to.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=c18d0fe535a73b219f960d1af3d0c264555a12e3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e694958388c50148389b0e9b9e9e8945cf0f1b98",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://grsecurity.net/~spender/wunderbar_emporium.tgz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1222.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1223.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100067254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/19933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/14/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1233.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505751/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505912/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/512019/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://zenthought.org/content/file/android-root-2009-08-16-source",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=516949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-3103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue. Please see http://kbase.redhat.com/faq/docs/DOC-18065.\n\nUpdates for Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG to correct this issue are available: https://rhn.redhat.com/cve/CVE-2009-2692.html",
        "lastModified" : "2009-09-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T15:16:27.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote attackers to cause a denial of service (application crash) via a certain DIV element in conjunction with SCRIPT elements that have empty contents and no reference to a valid external script location."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer v8.0.7100.0 en Windows 7 RC en la plataforma x64, permite a atacantes provocar una denegación de servicip (caída de la aplicación) a través de ciertos elementos DIV en conjunción con elementos SCRIPT que tienen contenidos vacíos y no referencias a una localización de script externa válida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8.0.7100.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1838B0F-5123-4DB0-B9E9-3362478B7CDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33796DB-4523-4F04-B564-ADF030553D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35941",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T15:16:27.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI."
      }, {
        "lang" : "es",
        "value" : "httpd.c en httpd en el gestor GUI en DD-WRT 24 sp1 y otras versiones anteriores a la build 12533, permite a atacantes remotos ejecutar comandos de su elección a través de metacaracteres shell en una petición a la URI cgi-bin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dd-wrt:dd-wrt:*:sp1:*:*:*:*:*:*",
            "versionEndIncluding" : "24",
            "matchCriteriaId" : "B493087F-145B-41F9-979C-ABE3DFCD63BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isc.sans.org/diary.html?storyid=6853",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://metasploit.com/svn/framework3/trunk/modules/exploits/linux/http/ddwrt_cgibin_exec.rb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1022596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.dd-wrt.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35742",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.theregister.co.uk/2009/07/21/critical_ddwrt_router_vuln/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=6853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://metasploit.com/svn/framework3/trunk/modules/exploits/linux/http/ddwrt_cgibin_exec.rb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1022596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.dd-wrt.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.theregister.co.uk/2009/07/21/critical_ddwrt_router_vuln/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T15:16:27.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remote attackers to change settings via HTTP requests."
      }, {
        "lang" : "es",
        "value" : "httpd.c en httpd en el gestor GUI en DD-WRT 24 sp1 no requiere autenticación administrativa para programas en cgi-bin/, lo que permite a atacantes remotos modificar la configuración a través del protocolo HTTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dd-wrt:dd-wrt:24:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "184B9DB2-7BB7-46D0-A095-5FAFE4F646CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T15:16:27.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibly gain privileges via a CLOCK_MONOTONIC_RAW clock_nanosleep call that triggers a NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "La función init_posix_timers en kernel/posix-timers.c en el kernel de linux anteriores a v2.6.31-rc6 permite a usuarios locales provocar una denegación de servicio (OOPS) o posiblemente conseguir privilegios a través de una llamada CLOCK_MONOTONIC_RAW clock_nanosleep que provoca una desreferencia a un puntero NULL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux:kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760FDC9-BB79-4299-8A6D-482085EE5BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux:kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56EEB157-5037-4EAD-8625-35B91B167111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:-rc5:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.16.31",
            "matchCriteriaId" : "6277DB43-CBB1-4E4A-B071-0D82CE293F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC36074C-C310-4341-8B3C-BB34E572BF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCC155A-C68C-44A8-8C44-7979C9889C34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "040EBFDA-7F8D-428F-BB69-BB1B52BB868B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E703D2-8CC9-421A-9728-75E8FCFB4FE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=70d715fd0597f18528f389b5ac59102263067744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2009/8/4/28",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/8/4/40",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36200",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/06/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2197",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=70d715fd0597f18528f389b5ac59102263067744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lkml.org/lkml/2009/8/4/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/8/4/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/06/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue only affected kernels version 2.6.28-rc1 and later.\nTherefore this issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG..",
        "lastModified" : "2009-08-18T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T15:16:27.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by executing a shared flat binary, which triggers an access of an \"uninitialized cred pointer.\""
      }, {
        "lang" : "es",
        "value" : "La función load_flat_shared_library en el archivo fs/binfmt_flat.c en el subsistema flat en el kernel de Linux anterior a versión 2.6.31-rc6, permite a los usuarios locales causar una denegación de servicio (desreferencia de un puntero NULL y bloqueo del sistema) o posiblemente tener otro impacto no especificado mediante la ejecución de un binario flat compartido, que activa el acceso de un \"uninitialized cred pointer.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.31",
            "matchCriteriaId" : "AE1BA972-91FE-417F-B0AD-D3067DA8C96F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4049867A-E3B2-4DC1-8966-0477E6A5D582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A2507858-675B-4DA2-A49E-00DB54700CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0A25EA55-3F1C-440C-A383-0BB9556C9508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "B2665356-4EF5-4543-AD15-67FDB851DCCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3440625d78711bee41a84cf29c3d8c579b522666",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/6/22/91",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36278",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://thread.gmane.org/gmane.linux.hardware.blackfin.kernel.devel/1905",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:051",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/13/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36037",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52909",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3440625d78711bee41a84cf29c3d8c579b522666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/6/22/91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://thread.gmane.org/gmane.linux.hardware.blackfin.kernel.devel/1905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/13/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG. Red Hat does not provide support for flat binary support, and additionally this issue only affected kernels version 2.6.29-rc1 and later.",
        "lastModified" : "2009-08-18T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T17:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the config[include_dir] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en include/timesheet.php en Ultrize TimeSheet v1.2.2, permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro \"config[include_dir]\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultrize:timesheet:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06931148-04EA-4996-B0B7-53D0A590B037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36033",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T17:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PowerUpload 2.4 allows remote attackers to bypass authentication and gain administrative access via a MIME encoded value of admin for the myadminname cookie."
      }, {
        "lang" : "es",
        "value" : "PowerUpload v2.4 permite a atacantes remotos saltarse la autenticación y obtener acceso administrativo a través de un valor codificado MIME en la cookie myaadminname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerupload:powerupload:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0340A214-1121-438C-91DF-158AC6ECFE9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1962",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T17:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Free Arcade Script 1.3 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to the default URI under search/."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Free Arcade Script v1.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro keyword a la URI por defecto bajo search/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freearcadescript:free_arcade_script:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47ECB19B-E18E-4900-BDFD-0701B1355A28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/fas-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36025",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/fas-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T17:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PG Roommate Finder Solution allow remote attackers to inject arbitrary web script or HTML via the part parameter to (1) quick_search.php and (2) viewprofile.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en PG Roommate Finder Solution permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro part a (1) quick_search.php y (2) viewprofile.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realtysoft:pg_roomate_finder_solution:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7ECD74D-B4E7-44F5-9722-40E7A1178B0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/pgroomate-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35906",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35814",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/56538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/pgroomate-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T17:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in home.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary PHP code via a URL in the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en home.php in PHP Paid 4 Mail Script, permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro \"page\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shop-020:php_paid_4_mail_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05798DF3-F7BD-4A28-9145-9B02D22F9432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56573",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35972",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T17:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in paidbanner.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary SQL commands via the ID parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en paidbanner.php in PHP Paid 4 Mail Script, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-paid4mail:php-paid4mail:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26267191-F274-4B16-B497-F83083AF8B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35972",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T17:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in linkout.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en linkout.php en PHPArcadeScript (PHP Arcade Script) v4.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phparcadescript:phparcadescript:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5E473E-6D25-47DF-AF50-CD4FA4EAB89D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35843",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T17:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to execute arbitrary SQL commands via the catid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en showresult.asp en Smart ASP Survey, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro catid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sellatsite.com:smart_asp_survey:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09EC5EC-ED50-4CC4-BA2C-0E2D6E186333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56575",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/smartasp-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36028",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/smartasp-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T17:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in visitor/view.php in GarageSales Script allows remote attackers to execute arbitrary SQL commands via the key parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en visitor/view.php en GarageSales Script, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro key."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:garagesalesjunkie:garagesales_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5287EE99-EB1E-4E4D-AB94-A9D98A983046"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/56578",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2023",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/56578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-14T17:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in visitor/view.php in GarageSales Script allows remote attackers to inject arbitrary web script or HTML via the key parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en visitor/view.php en GarageSales Script permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro key. NOTA: Algunos de estos detalles se han obtenidos de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:garagesalesjunkie:garagesales_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5287EE99-EB1E-4E4D-AB94-A9D98A983046"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2023",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-17T16:30:01.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via the id parameter in a productdetail action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en AJ Matrix DNA, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción productdetail."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ajsquare:aj_matrix_dna:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20736D8-5EC9-4F00-83AF-DCF07A2D25B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/ajmatrixdna-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36095",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/56639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/ajmatrixdna-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-17T16:30:01.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to category.php, view parameter to (2) login.php and (3) viewlisting.php, page parameter to (4) searchresults.php and (5) toplistings.php, and (6) member parameter to viewmember.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de Ejecución de secuencias de comandos en sitios cruzados en 68 Clasiffieds 4.1 permiten a atacantes remotos inyectar HTML o scripts web arbitrarios a través de (1) el parámetro cat en category.php, el parámetro view en (2) login.php y (3) viewlisting. php, el parámetro page en (4) searchresults.php y (5) toplistings.php, y (6)  el parámetros member en viewmember.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:68_classifieds:68_classifieds:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8CD8AE2-78FB-441C-A1D9-89FD1152E547"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/68classifieds-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36034",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56564",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/56565",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/56566",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/56567",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/56568",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/56569",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/68classifieds-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/56565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/56566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/56567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/56568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/56569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-17T16:30:01.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in forum.php in Arab Portal 2.x, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the qc parameter in an addcomment action, a different vector than CVE-2006-1666."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en forum.php en Arab Portal v2.x, cuando está deshabilitado magic_quotes_gpc, permite a usuarios remotos autenticados, ejecutar comandos SQL de su elección a través del parámetro qc en una acción addcomment, es un vector distinto de CVE-2006-1666."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arabportal:arab_portal:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F965001-F8AF-4033-8197-60451A92854B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arabportal:arab_portal:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DE5B82-2AC0-4DC1-976B-91BC33DC6CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arabportal:arab_portal:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11BC7BED-8129-45DB-B91B-E6088F903511"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35914",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-17T16:30:01.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the JFusion (com_jfusion) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de SQL en el componente JFusion (com_jfusion) de Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro Itemid en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jfusion:com_jfusion:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F44AF30-0DFB-4CEB-B73D-1B5592ABEA4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35912",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-17T16:30:01.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the (1) op parameter to modules/pm/viewpmsg.php and (2) query string to modules/profile/user.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en XOOPS v2.3.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro (1) op sobre modules/pm/viewpmsg.php y (2) cadena de petición sobre modules/profile/user.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149720D8-4C25-42ED-957D-179AD69C522A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=124905075425380&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/56638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36109",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35895",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022641",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.senseofsecurity.com.au/advisories/SOS-09-005.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://xoops.svn.sourceforge.net/viewvc/xoops/XoopsCore/trunk/htdocs/modules/pm/viewpmsg.php?r1=2621&r2=3292",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://xoops.svn.sourceforge.net/viewvc/xoops/XoopsCore/trunk/htdocs/modules/pm/viewpmsg.php?view=log#rev3292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=124905075425380&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/56638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.senseofsecurity.com.au/advisories/SOS-09-005.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://xoops.svn.sourceforge.net/viewvc/xoops/XoopsCore/trunk/htdocs/modules/pm/viewpmsg.php?r1=2621&r2=3292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://xoops.svn.sourceforge.net/viewvc/xoops/XoopsCore/trunk/htdocs/modules/pm/viewpmsg.php?view=log#rev3292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-17T16:30:01.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in dit.cms 1.3, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the path parameter to index.php in (1) install/, (2) menus/left_rightslideopen/, (3) menus/side_pullout/, (4) menus/side_slideopen/, (5) menus/simple/, (6) menus/top_dropdown/, and (7) menus/topside/; the sitemap parameter to index.php in (8) menus/left_rightslideopen/, (9) menus/side_pullout/, (10) menus/side_slideopen/, (11) menus/top_dropdown/, and (12) menus/topside/; and the (13) relPath parameter to index/index.php. NOTE: PHP remote file inclusion vulnerabilities reportedly also exist for some of these vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en dit.cms v1.3, cuando está habilitado register_globals, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) en el parámetro path sobre index.php en (1) install/, (2) menus/left_rightslideopen/, (3) menus/side_pullout/, (4) menus/side_slideopen/, (5) menus/simple/, (6) menus/top_dropdown/, y (7) menus/topside/; el parámetro sitemap sobre index.php en (8) menus/left_rightslideopen/, (9) menus/side_pullout/, (10) menus/side_slideopen/, (11) menus/top_dropdown/, y (12) menus/topside/; y el parámetro relPath sobre (13) index/index.php. NOTE: La vulnerabilidades reportadas de inclusión de ficheo remoto PHP existen también para algunos de estos vectores."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ditcms:dit.cms:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D49CB25-7328-4CB8-B549-E1B34DC71A15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36076",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-17T16:30:01.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter to buy.php and the id parameter to (2) contact.php and (3) tellafriend.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en PHP Open Classifieds Script, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) page to buy.php (2) id sobre contac.php y \"3) id sobre tellafriend.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:classifiedphpscript:php_open_classifieds_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06C948F-09A8-4369-AC39-27E3447CB8CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56657",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/56658",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/56659",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/openclassifieds-xss.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35929",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/56658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/56659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/openclassifieds-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-17T16:30:01.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the poster parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en reputation.php en el plugin Reputation v2.2.4, v2.2.3, v2.0.4, y anteriores para PunBB, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro poster."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B94FB2-2C83-42D6-BECC-D39E97594CA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reputation:reputation:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.4",
            "matchCriteriaId" : "34C14D23-4752-4010-A502-F21485E3D52C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reputation:reputation:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31410353-D72E-46E1-AF4E-8C95B2CD6FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reputation:reputation:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAA7734-2439-41C7-91F0-E2D9454F7485"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36020",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-17T16:30:01.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in include/reputation/rep_profile.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pun_user[language] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en include/reputation/rep_profile.php en el plugin Reputation v2.2.4, v2.2.3, v2.0.4, y anteriores para PunBB, cuando está habilitado register_globals y está deshabilitado magic_quotesgpc, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) en el parámetro pun_user[language]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B94FB2-2C83-42D6-BECC-D39E97594CA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reputation:reputation:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.4",
            "matchCriteriaId" : "34C14D23-4752-4010-A502-F21485E3D52C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reputation:reputation:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31410353-D72E-46E1-AF4E-8C95B2CD6FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reputation:reputation:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAA7734-2439-41C7-91F0-E2D9454F7485"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/punbbrep-lfi.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36020",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/punbbrep-lfi.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-17T16:30:01.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Mobilelib GOLD 3 allow remote attackers to execute arbitrary SQL commands via the (1) adminName parameter to cp/auth.php, (2) cid parameter to artcat.php, and (3) catid parameter to show.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidad de inyección SQL en Mobilelib GOLD v3, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1)adminName sobre cp/auth.php,(2) cid sobre artcat.php y (3) catid sobre show.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobilelib:mobilelib_gold:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3689A89A-85F2-412D-9A62-C81C0566BE26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35910",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-17T16:30:01.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Permis (com_groups) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a list action to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente Permis (com_groups) v1.0 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una lista de acciones sobre index.php. NOTA: El origen de esta información es desconocido, los detalles se han obtenido solamente de terceras partes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:permis:com_groups:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "872612F2-56AE-4DFA-9FFC-BF13B60BD7B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/35849",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-17T16:30:01.547",
      "lastModified" : "2026-04-06T14:29:26.030",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.  NOTE: this might overlap CVE-2006-3271.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en cat_products.php en SoftBiz Dating Script, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cid. NOTA: está vulnerabilidad podría superponerse a CVE-2006-3271.4."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softbizscripts:dating_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F620AC-CE0C-40F5-91DD-FDF199E3EA25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/softbizdating-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35896",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52158",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/softbizdating-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-17T16:30:01.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in pda_projects.php in WebDynamite ProjectButler 1.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the offset parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en pda_projects.php en WebDynamite ProjectButler v1.5.0, permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro Offset."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webdynamite:projectbutler:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715635CC-DFBE-41D7-9ED4-11F26846F32A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35919",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-17T16:30:01.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in plugings/pagecontent.php in Really Simple CMS (RSCMS) 0.3a allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PT parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en plugings/pagecontent.php en Really Simple CMS (RSCMS) v0.3a, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) en el parámetro PT."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joshua_oliver:really_simple_cms:0.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8615B437-BFB0-4395-95AB-1EF1F6536ABF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T20:30:00.877",
      "lastModified" : "2023-11-07T02:04:16.027",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-2768.  Reason: This candidate is a duplicate of CVE-2009-2768.  Notes: All CVE users should reference CVE-2009-2768 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T21:00:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service (crash) via a sequence of beacon frames in which one frame omits an SSID Information Element (IE) and the subsequent frame contains an SSID IE, which triggers a NULL pointer dereference in the cmp_ies function.  NOTE: a potential weakness in the is_mesh function was also addressed, but the relevant condition did not exist in the code, so it is not a vulnerability."
      }, {
        "lang" : "es",
        "value" : "cfg80211 en el archivo net/wireless/scan.c en el kernel de Linux versión 2.6.30-rc1 y otras versiones anteriores a 2.6.31-rc6,  permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) por medio de una secuencia de tramas beacon en los que una trama omite un Elemento de Información (IE) SSID y la trama posterior contiene un IE SSID, que desencadena una desreferencia de un puntero NULL en la función cmp_ies. NOTA: también se abordó una potencial debilidad en la función is_mesh, pero la condición relevante no existía en el código, por lo que no es una vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux:kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760FDC9-BB79-4299-8A6D-482085EE5BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux:kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56EEB157-5037-4EAD-8625-35B91B167111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:-rc5:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.16.31",
            "matchCriteriaId" : "6277DB43-CBB1-4E4A-B071-0D82CE293F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC36074C-C310-4341-8B3C-BB34E572BF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCC155A-C68C-44A8-8C44-7979C9889C34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "040EBFDA-7F8D-428F-BB69-BB1B52BB868B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E703D2-8CC9-421A-9728-75E8FCFB4FE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=cd3468bad96c00b5a512f551674f36776129520e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jon.oberheide.org/files/cfg80211-remote-dos.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/17/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/17/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=cd3468bad96c00b5a512f551674f36776129520e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jon.oberheide.org/files/cfg80211-remote-dos.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/17/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/17/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG.\n\nPlease note this issue only affected Linux kernel versions after v2.6.30-rc1 and was fixed in v2.6.31-rc6.",
        "lastModified" : "2009-08-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T21:00:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The eisa_eeprom_read function in the parisc isa-eeprom component (drivers/parisc/eisa_eeprom.c) in the Linux kernel before 2.6.31-rc6 allows local users to access restricted memory via a negative ppos argument, which bypasses a check that assumes that ppos is positive and causes an out-of-bounds read in the readb function."
      }, {
        "lang" : "es",
        "value" : "La función eisa_eeprom_read en el componente the parisc isa-eeprom (drivers/parisc/eisa_eeprom.c) en el kernel de Linux anterior a v2.6.31-rc6 permite a usuarios locales acceder a memoria restringida a través de argumentos negativos ppos, lo que evita un control que asume que ppos es positivo y causa una lectura fuera de rango en la función readb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:rc5:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.31",
            "matchCriteriaId" : "4116D22D-1003-4784-A5A4-2F7413A3041A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACBB194-1D24-464A-B79C-44B8127EAD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0138807-6313-4A3F-AB5A-4B7D4A9BE287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA2227-F259-499D-BF50-5074B1E7DD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A896D0-032C-4467-9D57-E47E8C612704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A415FECF-89CC-4D71-B1BF-6A678D32599D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F77E54-5F4A-4D47-8DE8-097B4BBC7944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752148FC-1594-4108-AE0F-C5145B978454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09546671-E75D-4F50-9D86-DFDDAC9DC5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6964925C-4394-4E82-976B-770A99E74F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8C909E-02D7-4B29-AA68-897BD0200B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27430190-EB83-43C5-9584-4F65CF65151A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386B13F-9D7C-45F8-B86A-886384144A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67A63E8-837E-4162-999E-3B3DAAE57C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A701E87D-B807-426E-9CD4-6721DBCABE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F6E506-EC0A-4784-BDA3-B7B5CD938B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFA0277-B491-4BB1-88DC-85362F0A689C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE922924-6496-4D24-94A6-8EDD431A4568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E55450-F6D9-483C-9CC8-E651E5A12AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC40B6DE-09D9-422B-965B-7EB9F6661DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91170B40-4D25-4E40-8F0B-DBC1AE217F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E28B8B9-B832-4D77-BE1A-BB5D8A678678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4049867A-E3B2-4DC1-8966-0477E6A5D582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A2507858-675B-4DA2-A49E-00DB54700CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0A25EA55-3F1C-440C-A383-0BB9556C9508"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=6b4dbcd86a9d464057fcc7abe4d0574093071fcc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/10/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/18/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=6b4dbcd86a9d464057fcc7abe4d0574093071fcc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/10/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/18/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG. Red Hat does not provide support for the Linux kernel on the PA-RISC architecture.",
        "lastModified" : "2009-08-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T21:00:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack function."
      }, {
        "lang" : "es",
        "value" : "La función do_sigaltstack en kernel/signal.c en el kernel de Linux 2.6 antes de 2.6.31-RC5, cuando se ejecuta en sistemas de 64 bits, no limpia algunos octetos de relleno de una estructura, lo que permite a usuarios locales obtener información sensible de la pila del núcleo a través de la función sigaltstack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux:kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760FDC9-BB79-4299-8A6D-482085EE5BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux:kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56EEB157-5037-4EAD-8625-35B91B167111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:-rc5:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.16.31",
            "matchCriteriaId" : "6277DB43-CBB1-4E4A-B071-0D82CE293F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC36074C-C310-4341-8B3C-BB34E572BF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCC155A-C68C-44A8-8C44-7979C9889C34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "040EBFDA-7F8D-428F-BB69-BB1B52BB868B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E703D2-8CC9-421A-9728-75E8FCFB4FE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:linux:linux:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "62F1CAA4-7A50-4F1C-A542-210C50273D8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=0083fc2c50e6c5127c2802ad323adf8143ab7856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1243.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/04/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/05/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/26/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1438.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=515392",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=0083fc2c50e6c5127c2802ad323adf8143ab7856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1243.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/04/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/05/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/26/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1438.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=515392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue has been rated as having moderate security impact. It was addressed in Red Hat Enterprise Linux 4, 5 and Red Hat Enterprise MRG:\nhttp://rhn.redhat.com/cve/CVE-2009-2847.html\n\nThis issue is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important or critical impact are addressed.  For further information about Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/",
        "lastModified" : "2009-09-15T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T21:00:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit."
      }, {
        "lang" : "es",
        "value" : "Una función execve en el kernel de Linux, posiblemente versión 2.6.30-rc6 y anteriores, no borra apropiadamente el puntero de current-)clear_child_tid, lo que permite a los usuarios locales causar una denegación de servicio (corrupción de memoria) o posiblemente alcanzar privilegios por medio de un sistema de clonación que llama con CLONE_CHILD_SETTID o CLONE_CHILD_CLEARTID habilitadas, que no son manejados apropiadamente durante la creación y salida de hilos (subprocesos)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:C",
            "baseScore" : 5.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.29.5",
            "matchCriteriaId" : "A4C33180-0CB1-4A35-8AD9-24F2832A3ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:-:*:*:*:*:*:*",
            "matchCriteriaId" : "77B40D2B-9AAA-49A4-9C74-7A94A82DBCCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "45273823-29EA-44DE-8444-3933402C5793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "88F60E74-09DB-4D4A-B922-4A46EED0EC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E242D3DE-D1DC-406A-BCC3-C4380B7EC369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE58B00-70BB-493D-ACDE-77F486984392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8598D6E5-0C5C-4A31-841A-C12801DB7D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "59800B0A-477B-42F8-A58A-5144F455AE01"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5595E484-647C-4F85-94AB-5A4D55CD766B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "513797E6-FCE6-4E84-9B66-202541F9601E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD2D897-E321-4CED-92E0-11A98B52053C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB5EDB-520B-4DEF-B06E-65CA13152824"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0507E91-567A-41D6-A7E5-5088A39F75FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397313C3-6BF5-4A87-90B3-55678E807171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FE6DAA-4702-409A-98B6-DE13B12805A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC337BB7-9A45-4406-A783-851F279130EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vma:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7426B5AC-D0FD-424D-9A1E-0875C2102D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://article.gmane.org/gmane.linux.kernel/871942",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1243.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35983",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36501",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36562",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36759",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37351",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/04/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/05/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1438.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/512019/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52899",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11412",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8598",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9766",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1550.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://article.gmane.org/gmane.linux.kernel/871942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1243.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/04/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/05/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1438.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/512019/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1550.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T21:00:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service (NULL pointer dereference) via vectors related to \"suspend_* sysfs attributes\" and the (1) suspend_lo_store or (2) suspend_hi_store functions.  NOTE: this is only a vulnerability when sysfs is writable by an attacker."
      }, {
        "lang" : "es",
        "value" : "El driver md (drivers/md/md.c) en el kernel de Linux anteriores a 2.6.30.2 podría permitir a usuarios locales producir una denegación de servicio (referencia a un puntero nulo)  a través de vectores relacionados con los \" atributos suspend*sysfs\" a la funciones (1) suspend_lo_store o (2) suspend_hi_store. NOTA:  Esto se trata de una vulnerabilidad cuando sysfs puede ser escrito por un atacante."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.30.1",
            "matchCriteriaId" : "DA86D0A4-F0F6-4E87-BAB0-6DADCFF86AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACBB194-1D24-464A-B79C-44B8127EAD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0138807-6313-4A3F-AB5A-4B7D4A9BE287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA2227-F259-499D-BF50-5074B1E7DD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A896D0-032C-4467-9D57-E47E8C612704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A415FECF-89CC-4D71-B1BF-6A678D32599D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F77E54-5F4A-4D47-8DE8-097B4BBC7944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752148FC-1594-4108-AE0F-C5145B978454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09546671-E75D-4F50-9D86-DFDDAC9DC5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6964925C-4394-4E82-976B-770A99E74F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8C909E-02D7-4B29-AA68-897BD0200B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27430190-EB83-43C5-9584-4F65CF65151A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386B13F-9D7C-45F8-B86A-886384144A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67A63E8-837E-4162-999E-3B3DAAE57C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A701E87D-B807-426E-9CD4-6721DBCABE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F6E506-EC0A-4784-BDA3-B7B5CD938B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFA0277-B491-4BB1-88DC-85362F0A689C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE922924-6496-4D24-94A6-8EDD431A4568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E55450-F6D9-483C-9CC8-E651E5A12AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91170B40-4D25-4E40-8F0B-DBC1AE217F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E28B8B9-B832-4D77-BE1A-BB5D8A678678"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.30.y.git%3Ba=commit%3Bh=3c92900d9a4afb176d3de335dc0da0198660a244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/24/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/26/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://xorl.wordpress.com/2009/07/21/linux-kernel-md-driver-null-pointer-dereference/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.30.y.git%3Ba=commit%3Bh=3c92900d9a4afb176d3de335dc0da0198660a244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/24/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/26/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xorl.wordpress.com/2009/07/21/linux-kernel-md-driver-null-pointer-dereference/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2849\n\nThe flaw was introduced in kernel version 2.6.17-rc1. The Linux kernel as shipped with Red Hat Enterprise Linux 3, and 4 are not affected by this issue.\n\nIt was addressed in Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1540.html\n\nA future kernel update for Red Hat Enterprise Linux 5 will address this flaw.",
        "lastModified" : "2009-11-04T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T21:00:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in NASA Common Data Format (CDF) allow context-dependent attackers to execute arbitrary code, as demonstrated using (1) an array index error in the ReadAEDRList64 function, and other errors in the (2) SearchForRecord_r_64, (3) LastRecord64, (4) CDFsel64, and other unspecified functions."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento múltiple de buffer en NASA Common Data Format (CDF)permite a atacantes dependientes del contexto ejecutar código a su elección, como es demostrado usando (1) un error en el array de indexación en la función  ReadAEDRList64, y otros errores en(2) SearchForRecord_r_64, (3) LastRecord64, (4) CDFsel64,y otras funciones no especificadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881ABFE7-AD96-4741-8339-E4DCADB53A10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cdf.gsfc.nasa.gov/html/CDF_changesnote2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cdf.gsfc.nasa.gov/html/CDF_v330.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/14/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505123/30/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://cdf.gsfc.nasa.gov/html/CDF_changesnote2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cdf.gsfc.nasa.gov/html/CDF_v330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/14/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505123/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T21:00:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via a comment author URL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el interfaz de administrador en Wordpress anterior a v2.8.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de una URL de comentarios de autor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1",
            "matchCriteriaId" : "7E2C6B7F-A315-4F40-B4FC-B7A567648E09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=278492",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022589",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://wordpress.org/development/2009/07/wordpress-2-8-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1871",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/21/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=512900",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01241.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01253.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=278492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://wordpress.org/development/2009/07/wordpress-2-8-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/21/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=512900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01241.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01253.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T21:00:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WP-Syntax plugin 0.9.1 and earlier for Wordpress, with register_globals enabled, allows remote attackers to execute arbitrary PHP code via the test_filter[wp_head] array parameter to test/index.php, which is used in a call to the call_user_func_array function."
      }, {
        "lang" : "es",
        "value" : "WP-Syntax plugin v0.9.1 y anteriores de Wordpress, que activan register_globals, permiten a atacantes remotos ejecutar código PHP a su elección a través del parámetro del array test_filter[wp_head]de test/index.php, que es usado en la llamada a la función call_user_func_array."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ryan.mcgeary:wp-syntax:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.1",
            "matchCriteriaId" : "816AA6AB-59AB-4FB9-88D6-BDA857F017AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847DA578-4655-477E-8A6F-99FBE738E4F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36040",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T21:00:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1) admin-footer.php, (2) edit-category-form.php, (3) edit-form-advanced.php, (4) edit-form-comment.php, (5) edit-link-category-form.php, (6) edit-link-form.php, (7) edit-page-form.php, and (8) edit-tag-form.php in wp-admin/."
      }, {
        "lang" : "es",
        "value" : "Wordpress anterior a v2.8.3 permite a atacantes remotos conseguir privilegios a traves de una peticion directa a (1) admin-footer.php, (2) edit-category-form.php, (3) edit-form-advanced.php, (4) edit-form-comment.php, (5) edit-link-category-form.php, (6) edit-link-form.php, (7) edit-page-form.php, y (8) edit-tag-form.php en wp-admin/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8B90E9-5DF5-45F5-9810-2973FDAA16A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.71:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "4B714413-D4C2-4532-A282-51C67FCA9F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.71:beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA5CF40-7AF0-4455-BE8E-269A4D1706FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F33ACD9-B4B6-4B5E-9CD5-26AA5997119C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.72:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CEF046C-8AA6-4AB8-B243-D7088926C2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.72:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC52C66-7819-4E64-8E94-254707954F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AF89F9-AE67-49B5-ACF0-3A645C454E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0174AF4F-9759-4762-ACF4-688E232AF1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.1:miles:*:*:*:*:*:*",
            "matchCriteriaId" : "701691ED-8A35-4F7A-9DDE-7ED62CA425BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A9FD311-FEB1-4CFD-AE48-01D3C26321B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "0666BEBE-BE45-41D3-8C53-E4C9E6853C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F595742-90E1-45AD-BC24-127A80172B81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64D4777-2ED6-4A47-A8F3-38A3A8EB1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614956CB-0582-4EAD-86F4-5AB0BB781CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E4894-3F39-471F-9A56-052718813BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38085E5A-7B41-4E43-8A22-5FD44970F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0B6EAC-E43D-4D1B-856F-7C23250A2355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51FAD0FC-CE84-4332-B061-75C0C8A0B6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF4671A-8449-438E-922B-94E5542137BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F05A1F-2227-4166-807B-1BDE2EA8F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73E23-7CD0-429C-986B-5F721F1696BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECE66B3-3696-4E98-AF63-DF2FB256A6FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.5:ronan:*:*:*:*:*:*",
            "matchCriteriaId" : "77D3033B-D648-4C07-8DF2-9F2456AE9725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA75368-506F-4772-B0F2-8AAECDF288F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDD9E5C-766F-4945-B87D-781E780AB03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6AAA17D-FBB8-4F54-82E2-870D6FA5C299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A0CAEE-5C14-44C6-85FB-6AFDAAA1C3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE667A-A937-4C38-B4D5-29B33F23F7B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1:ella:*:*:*:*:*:*",
            "matchCriteriaId" : "3945DE09-266B-482C-AA10-1ACB5C503808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7CBC45-320E-48CF-9A63-07DDE2FB61BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1.1:dangerous:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9FED63-94E4-428A-84C2-2CD2E9203AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "266E32CD-66FB-4E19-8091-EC748B177D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DD9120-2224-4612-A6EE-539F47BD50E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9FBA02-8A6A-471F-92CD-D8E77B5061C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5BC7E8-4C8A-4183-AB8C-1DAE12935387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F9137B-D13F-488B-8196-85E06FAB682E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82F257F4-CB62-4C6F-8866-AA253EC8C0C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AB6F6F-2FE3-4FC3-9009-D40EA852711F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "94ADC624-E43E-4F1D-8525-F6903943C932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "06A25444-2680-4379-B2CA-9858B6AF71CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82F4D88-779D-4D5D-96CD-2B31B61BA29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4801D56C-5ED6-4648-A0C9-EB4D06786A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0DABD9-DE15-4619-8668-0277A67F5205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BEC573-A346-4F07-8053-A5F6E92A343C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A777651-D2B2-47E0-A13C-BD667635F3E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B017F95A-90F8-4DE4-B74F-ABB712F32987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1503C4CB-5D58-4523-860C-4B637AD91CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55050BF2-A950-45FF-8CD7-7689431AD82A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1253161D-F1C8-46D6-B970-20335071500E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.7:coltrane:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA406D3-8DC9-4D55-BAD4-EE4D1E890B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5663CAA-0859-447E-8489-02CE4315DF91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480AE325-6DE1-4769-A931-0C6F40D15267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE23B6C2-354C-47BE-87B9-D4A0A3EE8ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC657077-8955-4CE6-93D8-F78B1BA3A949"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://core.trac.wordpress.org/changeset/11768",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://core.trac.wordpress.org/changeset/11769",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://wordpress.org/development/2009/08/wordpress-2-8-3-security-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1871",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/04/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://core.trac.wordpress.org/changeset/11768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://core.trac.wordpress.org/changeset/11769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://wordpress.org/development/2009/08/wordpress-2-8-3-security-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/04/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T21:00:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wordpress before 2.8.3 does not check capabilities for certain actions, which allows remote attackers to make unauthorized edits or additions via a direct request to (1) edit-comments.php, (2) edit-pages.php, (3) edit.php, (4) edit-category-form.php, (5) edit-link-category-form.php, (6) edit-tag-form.php, (7) export.php, (8) import.php, or (9) link-add.php in wp-admin/."
      }, {
        "lang" : "es",
        "value" : "Wordpress antes de v2.8.3 no comprueba los privilegios de ciertas acciones, lo cual facilita a atacantes remotos a la hora de hacer modificaciones no autorizadas a través de una solicitud directa a (1) edit-comments.php, (2)edit-pages.php, (3) edit. php, (4) edit-category-form.php (5) edit-link-category-form.php, (6) edit-tag-form.php, (7) export.php, (8) import.php, o (9) link-add.php en wp-admin/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.2",
            "matchCriteriaId" : "2DFBA1C6-B19C-47DA-A71E-9E945B41D803"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://core.trac.wordpress.org/changeset/11765",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://core.trac.wordpress.org/changeset/11766",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wordpress.org/development/2009/08/wordpress-2-8-3-security-release/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1871",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/04/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://core.trac.wordpress.org/changeset/11765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://core.trac.wordpress.org/changeset/11766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wordpress.org/development/2009/08/wordpress-2-8-3-security-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/04/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T21:00:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function."
      }, {
        "lang" : "es",
        "value" : "La función strListGetItem en src/HttpHeaderTools.c en Squid v2.7 a permite a los atacantes remotos causar una denegación de servicio a través de una cabecera auth manipulada con ciertos delimitadores coma que lanzan un bucle infinito de llamadas a la función strcspn."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C30CB9-FA3A-408D-A8B0-8805E75657BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:2.7:stable3:*:*:*:*:*:*",
            "matchCriteriaId" : "A03692DD-779F-4E3C-861C-29943870A816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:2.7:stable4:*:*:*:*:*:*",
            "matchCriteriaId" : "79FF6B3C-A3CE-4AA2-80F9-44D05A6B2F08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=31%3Bfilename=diff%3Batt=1%3Bbug=534982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/20/10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/03/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/04/6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=2541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=2704",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=518182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=31%3Bfilename=diff%3Batt=1%3Bbug=534982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/20/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/03/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/04/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=2541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squid-cache.org/bugs/show_bug.cgi?id=2704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=518182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of the squid packages, as shipped with Red Hat Enterprise Linux 3 and 4.\n\nThe issue was addressed in the squid packages as shipped with Red Hat Enterprise Linux 5 via:\nhttps://rhn.redhat.com/errata/RHSA-2010-0221.html\n",
        "lastModified" : "2010-03-31T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T22:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to (2) wizards/common/_logintowizard.cfm, (3) wizards/common/_authenticatewizarduser.cfm, or (4) administrator/enter.cfm."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Adobe ColdFusion Server 8.0.1 y anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro (1) startRow para administrator/logviewer/searchlog.cfm o (2) mediante la cadena de petición para wizards/common/_logintowizard.cfm, (3) wizards/common/_authenticatewizarduser.cfm o (4) administrator/enter.cfm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.1",
            "matchCriteriaId" : "2E1F57AD-3FE8-45F5-ACAC-0AA2FE5FF74D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DAF349-B29C-44D0-818B-8D665D2B35EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_multi-server:*:*:*:*:*",
            "matchCriteriaId" : "7095177E-CF72-4B79-8FF4-DB9C4353CDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "D003D474-8CC0-4C68-917B-FD750A029E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "1E13C3EA-3137-4C41-BB77-BC2625E2C905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "98E63512-A7F5-404B-B334-FA1433BA1A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720437A6-66D3-4DD6-A40F-23FC107AD710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_multi-server:*:*:*:*:*",
            "matchCriteriaId" : "53A802EA-FB56-4FBC-91C5-B824A8034FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "8B70C03A-1B4B-46D9-99CB-45EFB2109F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "FD8C938D-8194-4E86-AAB1-9AA984D81C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "427F0A38-747D-42FC-88D5-48926487EF6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D67D32-16BD-437C-8423-4704364EE737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_multi-server:*:*:*:*:*",
            "matchCriteriaId" : "FEF92A65-AE47-4A8B-BCBF-E8839A88A1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "B9C93E8B-6AD0-473C-9161-C71E03BFDEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "DB570811-F637-4E86-8A0E-73F2F9B29126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "7424F3BC-B8A0-4A45-8E36-16A10D0AD745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1CF5F6-BA6A-4EAC-8E94-238E0B9C64B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B015715F-9672-480E-B0AA-968D8C9070D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.2:unknown:mx:*:*:*:*:*",
            "matchCriteriaId" : "8E7948AA-CB18-4666-B469-871F0680134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6C1877-7412-4FBE-9641-334971F9D153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E1B9C-E32F-4788-8705-67F855DC9EE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-12.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dsecrg.com/pages/vul/show.php?id=122",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505803/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/57183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/57184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/57185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dsecrg.com/pages/vul/show.php?id=122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505803/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T22:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4 Updater 7 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the logfile parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en logging/logviewer.jsp en la consola de administración en Adobe JRun Application Server 4 Updater 7 permite a usuarios remotos autenticados leer ficheros de forma arbitraria a través de .. (punto punto) en el parámetro \"logfile\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:jrun:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92AEE969-DBA5-4240-850B-E34CEC231052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:jrun:4.0:updater7:*:*:*:*:*:*",
            "matchCriteriaId" : "3F67F854-FE93-480F-B84A-C0EF9706F582"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-12.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dsecrg.com/pages/vul/show.php?id=152",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505808/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dsecrg.com/pages/vul/show.php?id=152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505808/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T22:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Management Console in Adobe JRun 4.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos (XSS) en Management Console en Adobe JRun v4.0 permite a atacantes remotos inyectar script web o HTML a su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:jrun:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92AEE969-DBA5-4240-850B-E34CEC231052"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-12.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dsecrg.com/pages/vul/show.php?id=151",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505804/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dsecrg.com/pages/vul/show.php?id=151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505804/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T22:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1877."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de Ejecución de secuencias de comandos en sitios cruzados (XSS)  en Adobe ColdFusion v8.0.1 y anteriores permiten a atacantes remotos inyectar HTML o scripts web arbitrarios a través de vectores no especificados. Se trata de una vulnerabilidad diferente a CVE-2009-1877."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.1",
            "matchCriteriaId" : "2E1F57AD-3FE8-45F5-ACAC-0AA2FE5FF74D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DAF349-B29C-44D0-818B-8D665D2B35EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_multi-server:*:*:*:*:*",
            "matchCriteriaId" : "7095177E-CF72-4B79-8FF4-DB9C4353CDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "D003D474-8CC0-4C68-917B-FD750A029E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "1E13C3EA-3137-4C41-BB77-BC2625E2C905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "98E63512-A7F5-404B-B334-FA1433BA1A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720437A6-66D3-4DD6-A40F-23FC107AD710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_multi-server:*:*:*:*:*",
            "matchCriteriaId" : "53A802EA-FB56-4FBC-91C5-B824A8034FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "8B70C03A-1B4B-46D9-99CB-45EFB2109F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "FD8C938D-8194-4E86-AAB1-9AA984D81C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "427F0A38-747D-42FC-88D5-48926487EF6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D67D32-16BD-437C-8423-4704364EE737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_multi-server:*:*:*:*:*",
            "matchCriteriaId" : "FEF92A65-AE47-4A8B-BCBF-E8839A88A1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "B9C93E8B-6AD0-473C-9161-C71E03BFDEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "DB570811-F637-4E86-8A0E-73F2F9B29126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "7424F3BC-B8A0-4A45-8E36-16A10D0AD745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1CF5F6-BA6A-4EAC-8E94-238E0B9C64B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B015715F-9672-480E-B0AA-968D8C9070D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.2:unknown:mx:*:*:*:*:*",
            "matchCriteriaId" : "8E7948AA-CB18-4666-B469-871F0680134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6C1877-7412-4FBE-9641-334971F9D153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E1B9C-E32F-4788-8705-67F855DC9EE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-12.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T22:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via unspecified vectors, related to a \"double-encoded null character vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Adobe ColdFusion v8.0.1 y anteriores podrían permitir a atacantes obtener información sensible a través de vectores no especificado, esto es relativo a la \"vulenrabilidad del caracter NU¨LL doblemente codificado\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.1",
            "matchCriteriaId" : "2E1F57AD-3FE8-45F5-ACAC-0AA2FE5FF74D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DAF349-B29C-44D0-818B-8D665D2B35EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_multi-server:*:*:*:*:*",
            "matchCriteriaId" : "7095177E-CF72-4B79-8FF4-DB9C4353CDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "D003D474-8CC0-4C68-917B-FD750A029E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "1E13C3EA-3137-4C41-BB77-BC2625E2C905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "98E63512-A7F5-404B-B334-FA1433BA1A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720437A6-66D3-4DD6-A40F-23FC107AD710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_multi-server:*:*:*:*:*",
            "matchCriteriaId" : "53A802EA-FB56-4FBC-91C5-B824A8034FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "8B70C03A-1B4B-46D9-99CB-45EFB2109F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "FD8C938D-8194-4E86-AAB1-9AA984D81C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "427F0A38-747D-42FC-88D5-48926487EF6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D67D32-16BD-437C-8423-4704364EE737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_multi-server:*:*:*:*:*",
            "matchCriteriaId" : "FEF92A65-AE47-4A8B-BCBF-E8839A88A1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "B9C93E8B-6AD0-473C-9161-C71E03BFDEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "DB570811-F637-4E86-8A0E-73F2F9B29126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "7424F3BC-B8A0-4A45-8E36-16A10D0AD745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1CF5F6-BA6A-4EAC-8E94-238E0B9C64B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B015715F-9672-480E-B0AA-968D8C9070D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.2:unknown:mx:*:*:*:*:*",
            "matchCriteriaId" : "8E7948AA-CB18-4666-B469-871F0680134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6C1877-7412-4FBE-9641-334971F9D153"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-12.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T22:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1875."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Adobe ColdFusion 8.0.1 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados, una vulnerabilidad diferente que CVE-2009-1875."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.1",
            "matchCriteriaId" : "2E1F57AD-3FE8-45F5-ACAC-0AA2FE5FF74D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DAF349-B29C-44D0-818B-8D665D2B35EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_multi-server:*:*:*:*:*",
            "matchCriteriaId" : "7095177E-CF72-4B79-8FF4-DB9C4353CDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "D003D474-8CC0-4C68-917B-FD750A029E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "1E13C3EA-3137-4C41-BB77-BC2625E2C905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "98E63512-A7F5-404B-B334-FA1433BA1A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720437A6-66D3-4DD6-A40F-23FC107AD710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_multi-server:*:*:*:*:*",
            "matchCriteriaId" : "53A802EA-FB56-4FBC-91C5-B824A8034FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "8B70C03A-1B4B-46D9-99CB-45EFB2109F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "FD8C938D-8194-4E86-AAB1-9AA984D81C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "427F0A38-747D-42FC-88D5-48926487EF6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D67D32-16BD-437C-8423-4704364EE737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_multi-server:*:*:*:*:*",
            "matchCriteriaId" : "FEF92A65-AE47-4A8B-BCBF-E8839A88A1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "B9C93E8B-6AD0-473C-9161-C71E03BFDEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "DB570811-F637-4E86-8A0E-73F2F9B29126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "7424F3BC-B8A0-4A45-8E36-16A10D0AD745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1CF5F6-BA6A-4EAC-8E94-238E0B9C64B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B015715F-9672-480E-B0AA-968D8C9070D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.2:unknown:mx:*:*:*:*:*",
            "matchCriteriaId" : "8E7948AA-CB18-4666-B469-871F0680134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6C1877-7412-4FBE-9641-334971F9D153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E1B9C-E32F-4788-8705-67F855DC9EE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-12.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T22:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Session fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to hijack web sessions via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de fijación de sesión en Adobe ColdFusion v8.0.1 y versiones anteriores, que permite a los atacantes remotos, secuestrar una sesión web a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.1",
            "matchCriteriaId" : "2E1F57AD-3FE8-45F5-ACAC-0AA2FE5FF74D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DAF349-B29C-44D0-818B-8D665D2B35EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_multi-server:*:*:*:*:*",
            "matchCriteriaId" : "7095177E-CF72-4B79-8FF4-DB9C4353CDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "D003D474-8CC0-4C68-917B-FD750A029E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "1E13C3EA-3137-4C41-BB77-BC2625E2C905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "98E63512-A7F5-404B-B334-FA1433BA1A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720437A6-66D3-4DD6-A40F-23FC107AD710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_multi-server:*:*:*:*:*",
            "matchCriteriaId" : "53A802EA-FB56-4FBC-91C5-B824A8034FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "8B70C03A-1B4B-46D9-99CB-45EFB2109F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "FD8C938D-8194-4E86-AAB1-9AA984D81C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "427F0A38-747D-42FC-88D5-48926487EF6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D67D32-16BD-437C-8423-4704364EE737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_multi-server:*:*:*:*:*",
            "matchCriteriaId" : "FEF92A65-AE47-4A8B-BCBF-E8839A88A1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "B9C93E8B-6AD0-473C-9161-C71E03BFDEC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "DB570811-F637-4E86-8A0E-73F2F9B29126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "7424F3BC-B8A0-4A45-8E36-16A10D0AD745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1CF5F6-BA6A-4EAC-8E94-238E0B9C64B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B015715F-9672-480E-B0AA-968D8C9070D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.2:unknown:mx:*:*:*:*:*",
            "matchCriteriaId" : "8E7948AA-CB18-4666-B469-871F0680134A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6C1877-7412-4FBE-9641-334971F9D153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E1B9C-E32F-4788-8705-67F855DC9EE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-12.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-18T22:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Virtual Desktop Infrastructure (VDI) 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the network."
      }, {
        "lang" : "es",
        "value" : "Sun Virtual Desktop Infrastructure (VDI) v3.0, cuando la vinculación anónima esta activada, no se maneja adecuadamente el intento del cliente de establecer una conexión cifrada y autenticada, lo que permitiría a atacantes remotos leer las peticiones de datos de configuración mediante el escaneo de las sesiones de LDAP en la red."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:virtual_desktop_infrastructure:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13508CBB-9253-40A6-9CC9-5CD5535A35DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:virtual_desktop_infrastructure:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13508CBB-9253-40A6-9CC9-5CD5535A35DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36330",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-02-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-265488-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2282",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-02-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-265488-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-19T17:30:00.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service (system crash) via a crafted call."
      }, {
        "lang" : "es",
        "value" : "vetmonnt.sys en CA Internet Security Suite r3, vetmonnt.sys anteriores a v9.0.0.184 en Internet Security Suite r4, y vetmonnt.sys anteriores a v10.0.0.217 en Internet Security Suite r5 no verifica adecuadamente las llamadas IOCTL, lo que permite a usuarios locales producir una denegación de servicio ( caída de sistema) a través de una llamada manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:internet_security_suite:*:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C3A838-C3FC-4134-89E3-3AE13078A359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:internet_security_suite:9.0.0.184:r4:32bit:*:*:*:*:*",
            "matchCriteriaId" : "80B3EC69-F6F6-45E1-80BB-038C1D9C5FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:internet_security_suite:10.0.0.217:r5:32bit:*:*:*:*:*",
            "matchCriteriaId" : "E391D3E0-FEBF-4634-BB89-7AFCC04415E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://en.securitylab.ru/lab/PT-2009-05",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505880/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506103/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214673",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://en.securitylab.ru/lab/PT-2009-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/57228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505880/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506103/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1884",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-08-19T17:30:00.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service (application hang or crash) via a crafted bzip2 compressed stream that triggers a buffer overflow, a related issue to CVE-2009-1391."
      }, {
        "lang" : "es",
        "value" : "Error de superación de límite (Off-by-one) en la función bzinflate en Bzip2.xs en el módulo Compress-Raw-Bzip2 anterior a v2.018 para Perl permite a atacantes dependientes de contexto producir una denegación de servicio (cuelgue de aplicación o caída) a través de un stream comprimido de bzip2 que inicia un desbordamiento de búfer, una situación parecida a CVE-2009-1391."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:compress-raw-bzip2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.017",
            "matchCriteriaId" : "6C58C65A-621E-4EF4-ACD2-2B26ED08EA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:compress-raw-bzip2:2.0.00_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60FA80AE-D536-4323-9628-514C262DA129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:compress-raw-bzip2:2.0.00_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B324E22C-0273-42C5-BF76-4C54AF6578A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:compress-raw-bzip2:2.0.00_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD46A223-9CB9-48A4-B52D-8621B87AAAA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:compress-raw-bzip2:2.0.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51D3C0F-0537-4240-841B-70B21DBD4C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:compress-raw-bzip2:2.0.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D5A547D-5E85-4257-A71D-63078C5FF30A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:compress-raw-bzip2:2.0.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86CB8226-B0EC-4CB9-9678-6B127679A31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:compress-raw-bzip2:2.0.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F2C6E05-1CD8-4450-A101-3C2270A64B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:compress-raw-bzip2:2.0.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38E1A94-AA44-48AE-84A4-5C64451DFE96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:compress-raw-bzip2:2.0.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79442C31-96B2-4CEA-9AEB-DB7F332E938C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:compress-raw-bzip2:2.0.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802DF28F-724C-49E8-920E-E6CBA8E296DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:compress-raw-bzip2:2.010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C1D31B-123E-4294-81B6-46E4241C16DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:compress-raw-bzip2:2.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3F7EC80-16B6-4754-A8BE-28782D2FDC86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:compress-raw-bzip2:2.012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA78C9F-1925-4435-BFBD-129836C12238"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:compress-raw-bzip2:2.014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E299424-8560-4DCF-BDC1-8F88F0E7E8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip:compress-raw-bzip2:2.015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3026DDC6-DDCF-4244-A657-B45FAA6E4942"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB490BCA-8592-4324-BCE3-396BFD647D5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36386",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36415",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36082",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=281955",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=518278",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52628",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00982.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00999.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200908-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=281955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=518278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00982.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00999.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2055",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-08-19T17:30:01.047",
      "lastModified" : "2026-04-22T15:40:28.900",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009."
      }, {
        "lang" : "es",
        "value" : "Cisco IOS XR desde la v3.4.0 hasta la v3.8.1 permite a atacantes remotos producir una denegación de servicio (reset de sesión) a través de el mensaje BGP UPDATE con un atributo invalido, como se demostró el 17 de Agosto de 2009."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-25",
      "cisaActionDue" : "2022-04-15",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75538529-611A-43B5-AC4D-089C4E2E2ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DA2581-F618-4F2A-AB65-DA23DF51AF89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81797938-F953-42BE-B287-AA48B9860AF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92AED038-C73F-4499-B064-F01D80DB0C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7A249B-AF69-47D0-B6DE-968B4CD0BA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F992D03D-1DB8-44C1-B59D-1C09A32A2C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5F15240-6323-4766-801A-D887F3EA8A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99DC1CF-78DC-4E59-98BA-DD84702D6467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9FA754-E3D2-4D80-8F4B-41139973D9FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F497A05C-2FC5-427D-8036-2476ACA956C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2252E7B0-9112-4E9E-8CF4-4EC53C630CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1131A524-AA7A-4C94-9FFE-54546EA7D2CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D1A634-D39C-4305-8915-4AA289FB68EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BAB799-3150-46D8-AEA3-9FCC73203221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99042285-94AC-4C57-8EAA-EE63C678A94A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E752AA9-CC1C-44B6-A916-A3C76A57F05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CBE50E-9BD3-4F74-8C7A-BE4905090EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F48419-AF66-4B50-ACBF-9E38287A64FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB71A24-AA6C-4BAD-BD37-5C191751C9DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mailman.nanog.org/pipermail/nanog/2009-August/012719.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://securitytracker.com/id?1022739",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://mailman.nanog.org/pipermail/nanog/2009-August/012719.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://securitytracker.com/id?1022739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-2055",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2627",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-08-19T17:30:01.063",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure method vulnerability in the Acer LunchApp (aka AcerCtrls.APlunch) ActiveX control in acerctrl.ocx allows remote attackers to execute arbitrary commands via the Run method, a different vulnerability than CVE-2006-6121."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de método no seguro en el control ActiveX de LunchApp de Acer (también se conoce como AcerCtrls.APlunch), en el archivo acerctrl.ocx permite a atacantes remotos ejecutar comandos arbitrarios por medio del método Run, una vulnerabilidad diferente de CVE-2006-6121."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acer:lunchapp.aplunch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C630519-6C47-4BAA-970D-FAEC12FCB6D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57201",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/36343",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/485961",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36068",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022752",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2299",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52592",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://osvdb.org/57201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/485961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-19T17:30:01.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote attackers to cause a denial of service (system crash) via a malformed packet."
      }, {
        "lang" : "es",
        "value" : "kmxIds.sys anteriores a v7.3.1.18 en CA Host-Based Intrusion Prevention System (HIPS) v8.1 permite a atacantes remotos producir una denegación de servicio (caída de sistema) a través de un paquete malformado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:host-based_intrusion_prevention_system:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4924C835-EBFB-4B03-95A0-5FF7242D9A41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/505881/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214665",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505881/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-19T17:30:01.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service (deadlock and system halt) via vectors involving mmap and write operations on the same file."
      }, {
        "lang" : "es",
        "value" : "El kernel en Sun Solaris v8, v9, y v10, y OpenSolaris anteriores a snv_103, no maneja adecuadamente la interacción entre el sistema de ficheros y las implementaciones de memoria virtual, lo que permite a usuarios locales producir una denegación de servicio (bloqueo mutuo ,-deadlock- y parada del sistema) a través de vectores que incluyen operación de nmap y escritura en el mismo fichero."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:opensolaris:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "snv_103",
            "matchCriteriaId" : "E76824E6-0670-4010-B187-99CC695171A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722A52CF-4C6E-44D3-90C4-D2F72A40EF58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F864AD7-53A2-4225-870F-062876CE45DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36319",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-127721-02-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-257848-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2291",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6152",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-127721-02-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-257848-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-19T17:30:01.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows attackers to cause a denial of service (memory consumption) via unspecified vectors, related to private memory within the DB2 memory structure."
      }, {
        "lang" : "es",
        "value" : "Fuga de memoria en el componente de seguridad en IBM DB2 v8.1 anteriores a FP18 en plataformas Unix permite a atacantes producir una denegación de servicio a través de vectores sin especificar, relacionado con la memoria privada dentro de la estructura de memoria de DB2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:fp17:*:*:*:*:*:*",
            "versionEndIncluding" : "8.1",
            "matchCriteriaId" : "00D40BBF-DAC1-4C6D-806B-B04C88F237F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2418C923-2F94-4FAF-A9BD-D1C436308C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp10:*:*:*:*:*:*",
            "matchCriteriaId" : "18D59696-A477-4397-BC14-4EF69DAFA262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp11:*:*:*:*:*:*",
            "matchCriteriaId" : "BBABCAC8-0E04-44FC-BF1A-88CACB28E644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp12:*:*:*:*:*:*",
            "matchCriteriaId" : "AC318EEC-AFE5-4070-8711-B6560143CF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp13:*:*:*:*:*:*",
            "matchCriteriaId" : "5F02B3A6-F771-4F6A-A1E8-5E3EC1080272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp14:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF379F0-6D58-47A9-849E-C48D13496C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp15:*:*:*:*:*:*",
            "matchCriteriaId" : "1F878C22-6294-4DFD-AFA4-1094644D15F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp17a:*:*:*:*:*:*",
            "matchCriteriaId" : "F2799A9D-1BAC-491A-B36B-A124C44D9EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8AEBA7BD-E897-438E-8DD5-7AB5490AB931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA746B2-AC20-49D3-B8C6-655C268CB253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEC5C8E-9B3E-457F-8871-1EB172DBA7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp4a:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DA176E-1AD6-4524-9931-0165263D4E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4145E1-A805-4E64-904C-03B0B13BADBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "281B0499-11FD-4B99-B402-B44B609469E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp6a:*:*:*:*:*:*",
            "matchCriteriaId" : "81AB9705-2397-4218-9529-E0DAF3196DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp6b:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB197BE-6C4B-4081-8643-3CC3D2FDDB28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp6c:*:*:*:*:*:*",
            "matchCriteriaId" : "53C13821-A069-41B8-AECD-8562E22F37D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp7:*:*:*:*:*:*",
            "matchCriteriaId" : "385C934A-4374-491C-8A61-EBCC5E72AF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp7a:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A4B9D8-D8FE-4204-8D09-1C69B9676F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp8:*:*:*:*:*:*",
            "matchCriteriaId" : "286E4585-57F7-428D-B9C2-63B33FA2BF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp8a:*:*:*:*:*:*",
            "matchCriteriaId" : "E5F0F22B-EEA3-43B3-A600-53A471F32E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp9:*:*:*:*:*:*",
            "matchCriteriaId" : "E89ACCE1-873B-4C4A-A64B-F344F96C2C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp9a:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5437F4-8DD4-4539-A40A-63C5E2C8CF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36313",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ35635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024075",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ35635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-19T17:30:01.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 8.1 before FP18 allows attackers to obtain unspecified access via a das command."
      }, {
        "lang" : "es",
        "value" : "IBM DB2 v8.1 anterior a FP18 permite a atacantes obtener acceso sin especificar a través del comando \"das\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:fp17:*:*:*:*:*:*",
            "versionEndIncluding" : "8.1",
            "matchCriteriaId" : "00D40BBF-DAC1-4C6D-806B-B04C88F237F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2418C923-2F94-4FAF-A9BD-D1C436308C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp10:*:*:*:*:*:*",
            "matchCriteriaId" : "18D59696-A477-4397-BC14-4EF69DAFA262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp11:*:*:*:*:*:*",
            "matchCriteriaId" : "BBABCAC8-0E04-44FC-BF1A-88CACB28E644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp12:*:*:*:*:*:*",
            "matchCriteriaId" : "AC318EEC-AFE5-4070-8711-B6560143CF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp13:*:*:*:*:*:*",
            "matchCriteriaId" : "5F02B3A6-F771-4F6A-A1E8-5E3EC1080272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp14:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF379F0-6D58-47A9-849E-C48D13496C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp15:*:*:*:*:*:*",
            "matchCriteriaId" : "1F878C22-6294-4DFD-AFA4-1094644D15F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp17a:*:*:*:*:*:*",
            "matchCriteriaId" : "F2799A9D-1BAC-491A-B36B-A124C44D9EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8AEBA7BD-E897-438E-8DD5-7AB5490AB931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA746B2-AC20-49D3-B8C6-655C268CB253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEC5C8E-9B3E-457F-8871-1EB172DBA7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp4a:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DA176E-1AD6-4524-9931-0165263D4E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4145E1-A805-4E64-904C-03B0B13BADBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "281B0499-11FD-4B99-B402-B44B609469E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp6a:*:*:*:*:*:*",
            "matchCriteriaId" : "81AB9705-2397-4218-9529-E0DAF3196DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp6b:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB197BE-6C4B-4081-8643-3CC3D2FDDB28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp6c:*:*:*:*:*:*",
            "matchCriteriaId" : "53C13821-A069-41B8-AECD-8562E22F37D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp7:*:*:*:*:*:*",
            "matchCriteriaId" : "385C934A-4374-491C-8A61-EBCC5E72AF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp7a:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A4B9D8-D8FE-4204-8D09-1C69B9676F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp8:*:*:*:*:*:*",
            "matchCriteriaId" : "286E4585-57F7-428D-B9C2-63B33FA2BF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp8a:*:*:*:*:*:*",
            "matchCriteriaId" : "E5F0F22B-EEA3-43B3-A600-53A471F32E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp9:*:*:*:*:*:*",
            "matchCriteriaId" : "E89ACCE1-873B-4C4A-A64B-F344F96C2C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp9a:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5437F4-8DD4-4539-A40A-63C5E2C8CF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36313",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ34149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024075",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2293",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ34149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-19T17:30:01.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in db2jds in IBM DB2 8.1 before FP18 allows remote attackers to cause a denial of service (service crash) via \"malicious packets.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en db2jds en IBM DB2 v8.1 anteriores a FP18 permite a atacantes remotos producir una denegación de servicio (caída de servicio) a través de \"paquetes maliciosos\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:fp17:*:*:*:*:*:*",
            "versionEndIncluding" : "8.1",
            "matchCriteriaId" : "00D40BBF-DAC1-4C6D-806B-B04C88F237F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2418C923-2F94-4FAF-A9BD-D1C436308C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp10:*:*:*:*:*:*",
            "matchCriteriaId" : "18D59696-A477-4397-BC14-4EF69DAFA262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp11:*:*:*:*:*:*",
            "matchCriteriaId" : "BBABCAC8-0E04-44FC-BF1A-88CACB28E644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp12:*:*:*:*:*:*",
            "matchCriteriaId" : "AC318EEC-AFE5-4070-8711-B6560143CF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp13:*:*:*:*:*:*",
            "matchCriteriaId" : "5F02B3A6-F771-4F6A-A1E8-5E3EC1080272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp14:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF379F0-6D58-47A9-849E-C48D13496C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp15:*:*:*:*:*:*",
            "matchCriteriaId" : "1F878C22-6294-4DFD-AFA4-1094644D15F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp17a:*:*:*:*:*:*",
            "matchCriteriaId" : "F2799A9D-1BAC-491A-B36B-A124C44D9EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8AEBA7BD-E897-438E-8DD5-7AB5490AB931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA746B2-AC20-49D3-B8C6-655C268CB253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEC5C8E-9B3E-457F-8871-1EB172DBA7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp4a:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DA176E-1AD6-4524-9931-0165263D4E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4145E1-A805-4E64-904C-03B0B13BADBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "281B0499-11FD-4B99-B402-B44B609469E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp6a:*:*:*:*:*:*",
            "matchCriteriaId" : "81AB9705-2397-4218-9529-E0DAF3196DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp6b:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB197BE-6C4B-4081-8643-3CC3D2FDDB28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp6c:*:*:*:*:*:*",
            "matchCriteriaId" : "53C13821-A069-41B8-AECD-8562E22F37D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp7:*:*:*:*:*:*",
            "matchCriteriaId" : "385C934A-4374-491C-8A61-EBCC5E72AF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp7a:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A4B9D8-D8FE-4204-8D09-1C69B9676F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp8:*:*:*:*:*:*",
            "matchCriteriaId" : "286E4585-57F7-428D-B9C2-63B33FA2BF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp8a:*:*:*:*:*:*",
            "matchCriteriaId" : "E5F0F22B-EEA3-43B3-A600-53A471F32E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp9:*:*:*:*:*:*",
            "matchCriteriaId" : "E89ACCE1-873B-4C4A-A64B-F344F96C2C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:fp9a:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5437F4-8DD4-4539-A40A-63C5E2C8CF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36313",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ52433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024075",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2293",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ52433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-20T17:30:06.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Basilic 1.5.13 allow remote attackers to execute arbitrary SQL commands via the idAuthor parameter to (1) index.php and possibly (2) allpubs.php in publications/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Basilic v1.5.13 permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"idAuthor\" para (1) index.php y posiblemente (2) allpubs.php en publications/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artis.imag:basilic:1.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "081C9FBA-6772-4397-95B5-C7AE9183A144"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2005",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-20T17:30:09.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) browse_ladies.php and (2) browse_men.php, the (3) gender parameter to search.php, and the (4) id parameter to services.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en PG MatchMaking permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"show\" para (1) browse_ladies.php y (2) browse_men.php, el parámetro (3) \"gender\" para search.php, y el parámetro (4) \"id\" para services.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datingpro:matchmaking:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81AAF21C-465C-4734-B79E-A27C892FCA65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/pgmatchmaking-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36004",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35808",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/pgmatchmaking-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-20T17:30:09.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cp_username parameter, related to an error in the CleanVar function in includes/functions.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/login.php en SaphpLesson 4.0, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cp_username\", lo que está relacionado con un error en la función CleanVar en includes/functions.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arabless:saphplesson:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E3993D-7C20-4275-A93F-F7822A73EE08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35795",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-20T17:30:09.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to inject arbitrary web script or HTML via the rank parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en bios.php en PHP Scripts Now World's Tallest Buildings permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"rank\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpscriptsnow:world\\'s_tallest_buildings:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDA3D86-D234-4647-822B-4EA1D8998ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/tallestbuildings-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35935",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/tallestbuildings-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-20T17:30:09.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to execute arbitrary SQL commands via the rank parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en bios.php en PHP Scripts Now World's Tallest Buildings permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"rank\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpscriptsnow:world\\'s_tallest_buildings:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDA3D86-D234-4647-822B-4EA1D8998ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/tallestbuildings-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35935",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56121",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/tallestbuildings-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-20T17:30:09.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to execute arbitrary SQL commands via the rank parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en  bios.php en PHP Scripts Now President Bios permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"rank\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpscriptsnow:president_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1944FDD-7282-4EE0-B251-720D8FC94056"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/presidentbios-sqlxss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35935",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/presidentbios-sqlxss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-20T17:30:09.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to inject arbitrary web script or HTML via the rank parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en bios.php en PHP Scripts Now President Bios permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"rank\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpscriptsnow:president_bios:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1944FDD-7282-4EE0-B251-720D8FC94056"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/presidentbios-sqlxss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35935",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/presidentbios-sqlxss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2888",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-20T17:30:09.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to execute arbitrary SQL commands via the n parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en PHP Scripts Now Hangman permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"n\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpscriptsnow:hangman:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2C6557-D00A-4D9A-AB01-D9CA3F8D2BFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/tophangman-sqlxss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35888",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/tophangman-sqlxss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-20T17:30:09.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to inject arbitrary web script or HTML via the letters parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en PHP Scripts Now Hangman permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"letters\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpscriptsnow:hangman:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2C6557-D00A-4D9A-AB01-D9CA3F8D2BFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/tophangman-sqlxss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35888",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/tophangman-sqlxss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-20T17:30:09.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en results.php en PHP Scripts Now Riddles permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"searchquery\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpscriptsnow:riddles:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2FCB22-E08A-4D7B-9902-1FF2B012BCAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/riddledepot-sqlxss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35932",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/riddledepot-sqlxss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-20T17:30:09.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL commands via the catid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en list.php en PHP Scripts Now Riddles permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"catid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpscriptsnow:riddles:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2FCB22-E08A-4D7B-9902-1FF2B012BCAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/riddledepot-sqlxss.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35932",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56123",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/riddledepot-sqlxss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-20T17:30:09.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in header.php in Scripteen Free Image Hosting Script 2.3 allow remote attackers to execute arbitrary SQL commands via a (1) cookid or (2) cookgid cookie."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en header.php en Scripteen Free Image Hosting Script v2.3 permiten a atacantes remotos ejecutar comandos SQL de su elección mediante una cookie (1) cookid o (2) cookgid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scripteen:free_image_hosting_script:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE71B8BA-F093-4011-875D-F27482117A47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35976",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.scripteen.com/forum/bug-reports-f15-my-image-hosting-site-got-hacked-t764.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.scripteen.com/forum/news-announcements-f2-scripteen-free-image-hosting-script-v2-4-t766.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35800",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.scripteen.com/forum/bug-reports-f15-my-image-hosting-site-got-hacked-t764.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.scripteen.com/forum/news-announcements-f2-scripteen-free-image-hosting-script-v2-4-t766.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-20T17:30:09.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote attackers to inject arbitrary web script or HTML via (1) the postevent parameter in a post action or (2) the _xzcal_y parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index.php en XZero Community Classifieds v4.97.8 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"postevent\" en una acción de envío (post) o (2) \"_xzcal_y\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xzeroscripts:xzero_community_classifieds:4.97.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30649270-1E0A-4DFF-BAB4-B043E4EA8BD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/xzero-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35996",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35809",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2010",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/xzero-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-20T17:30:09.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to product_desc.php, and the cid parameter to (2) showcategory.php and (3) gallery.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Ebay Clone 2009 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"id\" para product_desc.php, (2) \"showcategory.php\" y (3) \"gallery.php\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clone2009:ebay_clone:2009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "252C575B-353B-45C9-A870-EBAA0E8A3AE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56265",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/56266",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/56268",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/clone2009-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35952",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/56266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/56268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/clone2009-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-20T17:30:11.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in rss.php in Ultimate Regnow Affiliate (URA) 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en rss.php en Ultimate Regnow Affiliate (URA) 3.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsugar:ultimate_regnow_affiliate:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA705BE-DED1-434B-94DD-1C00F5C01FDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-20T17:30:11.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in KMplayer 2.9.4.1433 and earlier allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long string in a subtitle (.srt) playlist file. NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en KMplayer v2.9.4.1433 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o ejecutar código de su elección mediante una cadena larga en el subtítulo de un archivo de lista de reproducción. NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kmplayer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.4.1433",
            "matchCriteriaId" : "37888303-7F03-4EE0-9D70-FE8F5A9D5448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kmplayer:2.9.3.1210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0C2195-A517-48EE-9F4E-8988AF802974"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35745",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1959",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0638",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-08-21T11:02:41.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service (traffic-handling outage) via a series of malformed ICMP messages."
      }, {
        "lang" : "es",
        "value" : "Cisco Firewall Services Module (FWSM) 2.x, 3.1 antes de 3.1(16), 3.2 antes de 3.2(13)y 4.0 antes de 4.0(6) para los switches Cisco Catalyst 6500 y los routers Cisco 7600 permite a atacantes remotos provocar una denegación de servicio (parada de la gestión del tráfico) mediante una serie de mensajes ICMP malformados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:2.1_\\(0.208\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6479D85C-1A12-486D-818C-6679F415CA26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AEE8A6C-2922-42DB-8C26-3A516F751F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:2.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A5D865-1A69-4563-9D2B-B7458C0D24EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A8528D-DF6A-4493-A77E-CBF08359F2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:2.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55C6770-7C6A-4684-A474-5C9D9902FDBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90E9070-781D-4D3D-98EB-5B6DB9D3C75E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:3.1\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE4BC31D-86C0-4E13-BA69-B35752298169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:3.1\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EF8892-389E-4F9E-B672-A5F1C05B1E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D799FD-6274-499B-8108-5093CE1482AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:3.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E49D8E9-7D46-4519-9A6B-B6F01D8DBAC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:3.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "205ECBCE-6D91-44C2-8E00-DB7C20967704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:3.2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D03FB87-63DE-45D0-ABB5-5209547F7166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26535762-EE50-4C4F-831E-A0ABFF4ADAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:4.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADDB8F07-38B4-498D-9455-9414B69A0626"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99DE48DF-A309-4A1C-B977-AE81B4EDB589"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_7600:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D63186-5834-448C-98F2-0C189A11D25D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36373",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022747",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af0d1d.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36085",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2329",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52591",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/36373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af0d1d.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T11:02:41.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376."
      }, {
        "lang" : "es",
        "value" : "La función msn_slplink_process_msg en libpurple/protocols/msn/slplink.c en libpurple, tal como se usa en Pidgin (anteriormente Gaim) en versiones anteriores a la 2.5.9 y Adium 1.3.5 y versiones anteriores, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) mediante el envío de múltiples mensajes SLP (alias MSNSLP) manipulados para disparar una sobreescritura de una zona de memoria de su elección. NOTA: esta vulnerabilidad reportada está causada por una reparación incompleta de CVE-2009-1376."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.5",
            "matchCriteriaId" : "01CB5803-0C03-4EC5-B865-8760B1231267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45233B3A-A3A1-45C0-A9F4-548B076742F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B5D964-9F9C-4EE0-AF9F-4FE64935D8AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FAFC986-0E07-48D7-9B67-66B65CAA9AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA83F88-808F-4D8B-A33D-16994C9074A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3779F8B3-15A9-4FBC-9176-B9B3CAB39DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A75801-F3AD-49E5-B981-6158E9B8F598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.8",
            "matchCriteriaId" : "7396CE73-35C6-4F72-8F1F-16D8B7E0C029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC2EBF3-73A7-4542-8E9C-47A4241A224C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF62072D-4956-4FE6-931E-E6EE9C49F3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6499D8D5-0801-498C-BD4D-508506918CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CC76CD-FF35-4B3A-9F1E-4E5A65963057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E216BC-29E4-4C31-9CF0-DE22C2E84968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD203F7-B983-4FDD-9837-D68D4F388A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8E3CBA-2B33-49EF-9105-8DDBB938F519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AA3282-CA7D-438C-A07C-A63392333630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEEFF420-2868-422B-BD22-9A5749C2398F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B139D83D-7D18-42C7-988C-2070B66CB943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047D9636-BCCE-4956-B5A3-D276F1C2EF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8A794E-E1CB-4F0F-9739-D625E94EA566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64EEEA0-89CE-46BD-B387-A96521E76A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E96AA3-B567-4E97-979A-D97A4F786D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C407C0-99A2-477B-87CF-6BE9F7B367E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBEF0457-39D8-465B-86A7-8DFA44A1F820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39468D5-1378-4441-B927-5C34C85B18AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80012AD-8F49-4287-8AEC-C21AC5774CA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.pidgin.im/viewmtn/revision/info/6f7343166c673bf0496ecb1afec9b633c1d54a0e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://developer.pidgin.im/wiki/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36384",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36392",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36401",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266908-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/content/libpurple-arbitrary-write",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1870",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.pidgin.im/news/security/?id=34",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2303",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=514957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1218.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://developer.pidgin.im/viewmtn/revision/info/6f7343166c673bf0496ecb1afec9b633c1d54a0e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://developer.pidgin.im/wiki/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266908-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/content/libpurple-arbitrary-write",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pidgin.im/news/security/?id=34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=514957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1218.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T11:02:42.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an Authorization HTTP header that lacks a : (colon) character in the base64-decoded string."
      }, {
        "lang" : "es",
        "value" : "La función checkHTTPpassword en http.c en ntop 3.3.10 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (referencia a un puntero nulo y caída del demonio) mediante una cabecera HTTP Authorization que carece de un caracter : (dos puntos) en la cadena base64-decoded."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntop:ntop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.10",
            "matchCriteriaId" : "9948EFEF-5AAD-4F94-8D96-F57D08E618C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36403",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505862/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505876/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2317",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505862/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505876/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T11:02:42.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) sendfile and (2) sendfilev functions in Sun Solaris 8 through 10, and OpenSolaris before snv_110, allow local users to cause a denial of service (panic) via vectors related to vnode function calls."
      }, {
        "lang" : "es",
        "value" : "Las funciones (1) sendfile y (2) sendfilev en Sun Solaris 8 a10 y OpenSolaris en versiones anteriores a snv_110, permiten a atacantes remotos provocar una denegación de servicio (panic) a través de vectores relacionados con llamadas a funciones vnode."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_109",
            "matchCriteriaId" : "20F63AA6-4323-42C1-918D-181E70F846D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_109",
            "matchCriteriaId" : "FE60E1CB-D2BD-4FE1-97F9-15D702729772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DBDFD8C-371E-42D2-9635-D8CDD1775984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36400",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-127721-02-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-258588-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020445.1-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2316",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-127721-02-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-258588-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020445.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T11:02:42.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 allows remote attackers to inject arbitrary web script or HTML via the URI.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en XZero Community Classifieds 4.97.8 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante la URI. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xzeroscripts:xzero_community_classifieds:4.97.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30649270-1E0A-4DFF-BAB4-B043E4EA8BD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35996",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T11:02:42.110",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en XZero Community Classifieds 4.97.8 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el nombre de un fichero subido. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xzeroscripts:xzero_community_classifieds:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.97.8",
            "matchCriteriaId" : "689C13E3-86A4-4212-88C7-677CD18EB1B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2009/2010",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T11:02:42.127",
      "lastModified" : "2023-11-07T02:04:17.850",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-2692.  Reason: This candidate is a duplicate of CVE-2009-2692.  A typo caused the wrong ID to be used.  Notes: All CVE users should reference CVE-2009-2692 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T11:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in 2fly_gift.php in 2FLY Gift Delivery System 6.0 allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a content action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en 2fly_gift.php in 2FLY Gift Delivery System 6.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro gameid en una acción content."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2fly:gift_delivery_system:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B83C52F-B5A1-4CB8-BDAB-15459EE02F6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/discuz60-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36294",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/discuz60-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T11:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the CNS_AddTxt function in logs.dll in 2K Games Vietcong 2 1.10 and earlier might allow remote attackers to execute arbitrary code via format string specifiers in the nickname."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cadena de formato en la función CNS_AddTxt en logs.dll en 2K Games Vietcong 2 1.10 y versiones anteriores puede permitir a atacantes remotos ejecutar código de su elección mediante especificaciones de cadenas de formato en el nickname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2kgames:vietcong_2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10",
            "matchCriteriaId" : "8F42A41F-AFB6-4BCD-A73D-7DAEA6866578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/vietcong2fs-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36301",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/vietcong2fs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/57002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T11:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in ImTOO MPEG Encoder 3.1.53 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted string in a (1) .cue or (2) .m3u playlist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en ImTOO MPEG Encoder 3.1.53 permite a atacantes remotos provocar una denegación de servicio (caída) o posiblemente ejecutar código de su elección mediante una cadena manipulada en un fichero de lista de reproducción (1) .cue o (2) .m3u."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imtoo:mpeg_encoder:3.1.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FC16D3-FEA9-4DAC-8E65-CFC9977D935A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T11:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted request to the 0x80000034 IOCTL, probably involving an input or output buffer size of 0."
      }, {
        "lang" : "es",
        "value" : "El driver tgbvpn.sys en TheGreenBow IPSec VPN Client 4.61.003 permite a usuarios locales provocar una denegación de servicio (referencia a un puntero nulo y caída del sistema) mediante una petición manipulada a el IOCTL 0x80000034, probablemente en relación con un tamaño de buffer de entrada o salida de 0."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thegreenbow:thegreenbow_vpn_client:4.61.003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91F5854-6846-4E79-A1D4-4E555E512423"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36332",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505816/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2294",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.evilfingers.com/advisory/Advisory/TheGreenBow_VPN_Client_tgbvpn.sys_DoS.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505816/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.evilfingers.com/advisory/Advisory/TheGreenBow_VPN_Client_tgbvpn.sys_DoS.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T11:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Boonex Orca 2.0 y 2.0.2 permite a atacantes remotos autenticados inyectar secuencias de comandos web o HTML de su elección mediante el campo \"topic title\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boonex:orca:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E979BBA5-14C9-4731-8B5F-B5E07C5EA579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boonex:orca:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F47C0E-2D9B-4F3A-B69C-BF2ABBD21A30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/exploitalert/5644",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/exploitalert/5644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/33545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/48434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T11:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Elvin 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) component and (2) priority parameters to buglist.php; and the (3) Username (4) E-mail, (5) Pass, and (6) Confirm pass fields to createaccount.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Elvin 1.2.2 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección los parámetros (1) component y (2) priority para buglist.php; y los campos (3) Username (4) E-mail, (5) Pass y (6) Confirm pass para createaccount.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elvinbts:elvinbts:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B415036E-2249-45A4-BE16-64401AA1824B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T11:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in login.php in MOC Designs PHP News 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) newsuser parameter (User field) and (2) newspassword parameter (Password field)."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en login.php en MOC Designs PHP News 1.1 permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) \"newsuser\"(campo User) y el parámetro  (2) \"newspassword\" (campo Password)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mocdesigns:php_news:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D98A56-06A1-4325-8B66-068B5946B089"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2161",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T11:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in pixaria.image.php in Pixaria Gallery 2.0.0 through 2.3.5 allows remote attackers to read arbitrary files via a base64-encoded file parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio absoluto en pixaria.image.php en Pixaria Gallery 2.0.0 a 2.3.5, permite a atacantes remotos leer archivos de su elección a través de un parámetro file base64-encoded."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixaria:pixaria_gallery:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F0C17D-4AB2-4482-8A7F-65614E9E27C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixaria:pixaria_gallery:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086A8378-5033-400D-BE62-57BCDAFF0627"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.pixaria.com/news/article/234",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35802",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pixaria.com/news/article/234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T11:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in BitmixSoft PHP-Lance 1.52 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) language parameter to show.php and (2) in parameter to advanced_search.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en BitmixSoft PHP-Lance 1.52 permite a atacantes remotos leer ficheros de su elección mediante un .. (punto punto) en el parámetro (1) \"language\" para show.php y en el parámetro (2) \"in\" para advanced_search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitmixsoft:php-lance:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73CB223-04D2-441A-AB3B-C73E1227A420"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57246",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/57247",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/57247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T11:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL commands via the (1) UploadID parameter to videoint.php, and possibly the (2) cat_id parameter to catvideo.php and (3) uid parameter to cviewchannels.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Videos Broadcast Yourself 2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) UploadID para videoint.php, y posiblemente el parámetro (2) cat_id para catvideo.php y el parámetro(3) uid para cviewchannels.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videosbroadcastyourself:videos_broadcast_yourself:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18968040-7AA1-4CBD-9073-E3C4466B6578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T11:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in DJcalendar.cgi in DJCalendar allows remote attackers to read arbitrary files via a .. (dot dot) in the TEMPLATE parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en DJcalendar.cgi en DJCalendar permite a atacantes remotos leer ficheros de su elección mediante un .. (punto punto) en el parámetro TEMPLATE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djcalendar:djcalendar:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD2F09AB-E64F-4B9C-A7CE-DBFB64AA9441"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1154",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-08-21T17:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service (process crash) via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute."
      }, {
        "lang" : "es",
        "value" : "Cisco IOS XR 3.8.1 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caida de proceso) mediante un mensaje BGP UPDATE, como se ha demostrado con un mensaje con muchos números AS en el AS Path Attribute."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.1",
            "matchCriteriaId" : "1A71883C-A3DF-4FB3-8BA9-61A0E4DFD2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75538529-611A-43B5-AC4D-089C4E2E2ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DA2581-F618-4F2A-AB65-DA23DF51AF89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81797938-F953-42BE-B287-AA48B9860AF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92AED038-C73F-4499-B064-F01D80DB0C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7A249B-AF69-47D0-B6DE-968B4CD0BA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F992D03D-1DB8-44C1-B59D-1C09A32A2C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5F15240-6323-4766-801A-D887F3EA8A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99DC1CF-78DC-4E59-98BA-DD84702D6467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9FA754-E3D2-4D80-8F4B-41139973D9FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F497A05C-2FC5-427D-8036-2476ACA956C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2252E7B0-9112-4E9E-8CF4-4EC53C630CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1131A524-AA7A-4C94-9FFE-54546EA7D2CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D1A634-D39C-4305-8915-4AA289FB68EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BAB799-3150-46D8-AEA3-9FCC73203221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99042285-94AC-4C57-8EAA-EE63C678A94A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E752AA9-CC1C-44B6-A916-A3C76A57F05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CBE50E-9BD3-4F74-8C7A-BE4905090EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F48419-AF66-4B50-ACBF-9E38287A64FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1022756",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T17:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.template.html in the express-install templates in the SDK in Adobe Flex before 3.4, when the installed Flash version is older than a specified requiredMajorVersion value, allows remote attackers to inject arbitrary web script or HTML via the query string."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.template.html en las plantillas express-install en el SDK de Adobe Flex en versiones anteriores a la 3.4, cuando la versión de Flash instalada es anterior a la especificada en el valor requiredMajorVersion, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante la cadena de petición."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flex_sdk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4",
            "matchCriteriaId" : "1127C241-FDFC-4094-A041-9644D0FFF65B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022748",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gdssecurity.com/l/b/2009/08/20/adobe-flex-3-3-sdk-dom-based-xss/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505948/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52608",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/36374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gdssecurity.com/l/b/2009/08/20/adobe-flex-3-3-sdk-dom-based-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505948/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2056",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-08-21T17:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service (process crash) via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path."
      }, {
        "lang" : "es",
        "value" : "Cisco IOS XR 3.8.1 y versiones anteriores permite a atacantes remotos autenticados provocar una denegación de servicio (caida de proceso) mediante vectores relacionados con un mensaje BGP UPDATE con muchos números AS al comienzo de la ruta AS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.1",
            "matchCriteriaId" : "1A71883C-A3DF-4FB3-8BA9-61A0E4DFD2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "904CA41E-8168-41DE-AE84-941962A7BB71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778F5573-0741-442F-AFFA-937053F8280C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B4F71CB-B8D6-44AA-B0E8-E6EC92F4273E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF0D7F5-7A9C-4E58-A9DB-33BF13CE135D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D69F8FA-D58A-4F53-86D8-A20C73E9B299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46BE68F-FFA9-4DF0-B407-1F5576047B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88B45F0-B1D1-4680-A29E-2C8A167573D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.3:*:crs-1:*:*:*:*:*",
            "matchCriteriaId" : "FBBD93B6-100E-481D-AE0A-FE65971A2280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.3:*:prp:*:*:*:*:*",
            "matchCriteriaId" : "E20FBF42-CC47-40E8-94A4-F6323886151C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265062D1-20BB-4B51-9407-AAA8F83A4D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDF9D75-6713-427F-A65F-1D59911A410B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD331C50-DB93-4001-B56A-C1012F894CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75538529-611A-43B5-AC4D-089C4E2E2ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DA2581-F618-4F2A-AB65-DA23DF51AF89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81797938-F953-42BE-B287-AA48B9860AF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92AED038-C73F-4499-B064-F01D80DB0C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7A249B-AF69-47D0-B6DE-968B4CD0BA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F992D03D-1DB8-44C1-B59D-1C09A32A2C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5F15240-6323-4766-801A-D887F3EA8A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99DC1CF-78DC-4E59-98BA-DD84702D6467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9FA754-E3D2-4D80-8F4B-41139973D9FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8BC298-4AF9-4281-9AD9-0D8F621E46B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F497A05C-2FC5-427D-8036-2476ACA956C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2252E7B0-9112-4E9E-8CF4-4EC53C630CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1131A524-AA7A-4C94-9FFE-54546EA7D2CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D1A634-D39C-4305-8915-4AA289FB68EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2FE436B-2117-4FB4-B550-8454848D1D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BAB799-3150-46D8-AEA3-9FCC73203221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99042285-94AC-4C57-8EAA-EE63C678A94A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E752AA9-CC1C-44B6-A916-A3C76A57F05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71CBE50E-9BD3-4F74-8C7A-BE4905090EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F48419-AF66-4B50-ACBF-9E38287A64FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1022756",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2473",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-08-21T17:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564."
      }, {
        "lang" : "es",
        "value" : "neon, en versiones anteriores a la 0.28.6, cuando se usa expat, no detecta adecuadamente la recursividad en la expansión de una entidad, esto permite a atacantes dependientes del contexto provocar una denegación de servicio (consumo de la memoria y CPU), mediante un documento XML manipulado que contiene un gran número de referencias anidadas a entidades, una cuestión similar a CVE-2003-1564."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webdav:neon:0.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "632E9CF9-8652-4FCB-B387-467B137C8CC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.manyfish.co.uk/pipermail/neon/2009-August/001044.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.manyfish.co.uk/pipermail/neon/2009-August/001045.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2013-0131.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36371",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4435",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:221",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2341",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52633",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9461",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00924.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00945.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.manyfish.co.uk/pipermail/neon/2009-August/001044.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.manyfish.co.uk/pipermail/neon/2009-August/001045.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2013-0131.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00924.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00945.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Updated neon packages for Red Hat Enterprise Linux 4 and 5 were released via:\nhttps://rhn.redhat.com/errata/RHSA-2009-1452.html\n\nEmbedded copy of the neon library is included in the versions of gnome-vfs2 packages as shipped with Red Hat Enteprise Linux 4 and Red Hat Enteprise Linux 5.  The Red Hat Security Response Team has rated this issue as having low security impact on gnome-vfs2, future updates may address this flaw.",
        "lastModified" : "2009-09-22T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2474",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-08-21T17:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."
      }, {
        "lang" : "es",
        "value" : "neon, en versiones anteriores a la 0.28.6, cuando OpenSSL está habilitado, no maneja adecuadamente un caracter '\\0' en un nombre de dominio, en el campo Common Name (CN) del asunto de un certificado X.509, lo cual permite a atacacantes hombre-en-el-medio (man-in-the-middle) suplantar servidores SSL a su elección a través de certificados manipulados expedidos por una Autoridad de Certificación (CA) legítima, una cuestión relacionada con CVE-2009-2408."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webdav:neon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.28.6",
            "matchCriteriaId" : "55788024-3E66-4489-AC67-8162BB5E8182"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.6.5",
            "matchCriteriaId" : "46E5D24A-8CA0-4590-9F35-F684D573D030"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB5EDB-520B-4DEF-B06E-65CA13152824"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.manyfish.co.uk/pipermail/neon/2009-August/001044.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.manyfish.co.uk/pipermail/neon/2009-August/001046.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36371",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36799",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4435",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:221",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36079",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-835-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2341",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11721",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00924.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00945.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.manyfish.co.uk/pipermail/neon/2009-August/001044.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.manyfish.co.uk/pipermail/neon/2009-August/001046.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-835-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00924.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00945.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T20:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PHP Competition System BETA 0.84 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) day parameter to show_matchs.php and (2) pageno parameter to persons.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en PHP Competition System BETA 0.84 y versiones anteriores permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) day parameter para show_matchs.php y el parámetro (2) pageno para persons.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcompet.free:php_competition_system:0.84:beta:*:fr:*:*:*:*",
            "matchCriteriaId" : "261BE672-F8BD-42A2-AFA7-0C0EA50B718B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T20:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the nFileId parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en DetailFile.php en DigitalSpinners DS CMS 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"nFileId\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digitalspinners:ds_cms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60759F0A-C5DB-4621-8C6C-3D5852AD0CCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T20:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in login.php in TGS Content Management 0.x allows remote attackers to inject arbitrary web script or HTML via the previous_page parameter, a different vector than CVE-2008-6839."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en login.php en TGS Content Management 0.x permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"previous_page\", un vector diferente que CVE-2008-6839."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C78B9E2-5E5F-4AE2-9FF7-DD5B05C5156D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D726819D-BEBC-4D9B-8316-66A0B789C110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48605CBA-AC9B-4380-8283-A482A6E941F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D23FFE-4B3E-4427-9D06-DDE2163528DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.2.5:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C4434CD2-309A-4B6D-A8D2-78134C1F411F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.2.5:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "332DD6FB-F23B-4A36-923C-A396DAFF8E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C8BA097-5AE5-4174-89B3-E4AD0AC37507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A13CED45-B95A-4B3A-A3A9-493F1A0FF1E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.3.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C25F9DA1-8624-4060-B519-DB121B4C5E9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T20:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in TGS Content Management 0.x allow remote attackers to execute arbitrary SQL commands via the (1) tgs_language_id, (2) tpl_dir, (3) referer, (4) user-agent, (5) site, (6) option, (7) db_optimization, (8) owner, (9) admin_email, (10) default_language, and (11) db_host parameters to cms/index.php; and the (12) cmd, (13) s_dir, (14) minutes, (15) s_mask, (16) test3_mp, (17) test15_file1, (18) submit, (19) brute_method, (20) ftp_server_port, (21) userfile14, (22) subj, (23) mysql_l, (24) action, and (25) userfile1 parameters to cms/frontpage_ception.php. NOTE: some of these parameters may be applicable only in nonstandard versions of the product, and cms/frontpage_ception.php may be cms/frontpage_caption.php in all released versions."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en TGS Content Management 0.x permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) tgs_language_id, (2) tpl_dir, (3) referer, (4) user-agent, (5) site, (6) option, (7) db_optimization, (8) owner, (9) admin_email, (10) default_language y (11) db_host para cms/index.php; y los parámetros (12) cmd, (13) s_dir, (14) minutes, (15) s_mask, (16) test3_mp, (17) test15_file1, (18) submit, (19) brute_method, (20) ftp_server_port, (21) userfile14, (22) subj, (23) mysql_l, (24) action y (25) userfile1 para cms/frontpage_ception.php. NOTA: algunos de estos parámetros pueden ser aplicables sólo en las versiones no estándar del producto y cms/frontpage_ception.php puede ser cms/frontpage_caption.php en todas las versiones publicadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C78B9E2-5E5F-4AE2-9FF7-DD5B05C5156D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D726819D-BEBC-4D9B-8316-66A0B789C110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48605CBA-AC9B-4380-8283-A482A6E941F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D23FFE-4B3E-4427-9D06-DDE2163528DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.2.5:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C4434CD2-309A-4B6D-A8D2-78134C1F411F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.2.5:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "332DD6FB-F23B-4A36-923C-A396DAFF8E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C8BA097-5AE5-4174-89B3-E4AD0AC37507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A13CED45-B95A-4B3A-A3A9-493F1A0FF1E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs-cms:tgs_content_management:0.3.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C25F9DA1-8624-4060-B519-DB121B4C5E9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T20:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Search feature in elka CMS (aka Elkapax) allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la característica Search en elka CMS (alias Elkapax) permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"q\" para la URI por defecto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elkagroup:elkapax_cms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1830D8EB-9DC8-464E-B672-7CE0E4EA4254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/505725/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505725/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T20:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in p.php in SlideShowPro Director 1.1 through 1.3.8 allows remote attackers to read arbitrary files via directory traversal sequences in the a parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en p.php en SlideShowPro Director 1.1 a 1.3.8 permite a atacantes remotos leer ficheros de su elección a través de secuencias de salto de directorio en el parámetro \"a\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slideshowpro:director:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED3C54C-8283-4BD9-9751-3C13316B1F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slideshowpro:director:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB03164-BFB0-4F08-81F2-17C859689D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slideshowpro:director:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A94FA7-92E9-4E87-A3FC-61570DD6D45F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slideshowpro:director:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05DC815A-532C-40BD-AF85-21C2ADCAF0B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36197",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slideshowpro.net/news/archive/2009/07/director-139-fi.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.clearskies.net/documents/css-advisory-css09001-sspdirector.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/56825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505534/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slideshowpro.net/news/archive/2009/07/director-139-fi.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.clearskies.net/documents/css-advisory-css09001-sspdirector.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/56825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505534/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T20:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in uddiclient/process in the UDDI client in SAP NetWeaver Application Server (Java) 7.0 allows remote attackers to inject arbitrary web script or HTML via the TModel Key field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en uddiclient/process en el cliente UDDI en SAP NetWeaver Application Server (Java) 7.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el campo TModel Key."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41FAC5DD-D577-47F9-B0CA-006032256642"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36228",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dsecrg.com/pages/vul/show.php?id=133",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505697/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://service.sap.com/sap/support/notes/1322098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dsecrg.com/pages/vul/show.php?id=133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505697/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://service.sap.com/sap/support/notes/1322098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T20:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the items_number parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Piwigo en versiones anteriores a 2.0.3 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"items_number\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "9931524C-ECD8-40DA-969D-94BF21DB7075"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36333",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505801/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.senseofsecurity.com.au/advisories/SOS-09-007.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/36333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505801/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.senseofsecurity.com.au/advisories/SOS-09-007.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-21T20:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in xaudio.dll in Programmed Integration PIPL 2.5.0 and 2.5.0D allow remote attackers to execute arbitrary code via a long string in a (1) .pls or (2) .pl playlist file."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en pila en xaudio.dll en Programmed Integration PIPL 2.5.0 y 2.5.0D permiten a atacantes remotos ejecutar código de su elección mediante una cadena larga en fichero de lista de reproducción (1) .pls o (2) .pl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:programmedintegration:pipl:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D656C2B-1EBC-49E9-8ACC-B9AE67A7F575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:programmedintegration:pipl:2.5.0d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCEDBAF-87CB-453A-B3BE-91715C586083"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36297",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-24T15:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Phenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it easier for context-dependent attackers to determine cleartext passwords."
      }, {
        "lang" : "es",
        "value" : "Phenotype CMS anterior a v2.9no utiliza una sal -salt- añadida aleatoria para el cifrado de las contraseñas, esto facilita a los atacantes dependientes del contexto llegar a conocer la contraseña en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8",
            "matchCriteriaId" : "CBF0838A-2FC3-4407-BBFC-1C6D4632B0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12B07C8-92E1-45A6-97C8-ED81A50B7A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D584096C-20F6-48E2-AFED-43C35E0D102F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3DDB99-189F-4239-998E-FB03304F67B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E80761B-1C6C-4E1F-98BD-B4D65BA8ED10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29E323CC-81A8-4997-A89D-7951C51FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDFD819F-5AC0-47F3-A9F7-5E4D02058958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50DE5FF2-DD49-4B5C-B7AF-75824C8AAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F09617-AFBD-4FC7-820B-5A43F2AA9668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13EB4778-9EAB-4E5D-BAE8-75D58A4ECF98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C714422D-4A39-4ED7-B244-05F56CEDF7E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.phenotype-cms.com/wiki/development-changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phenotype-cms.com/wiki/development-changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-24T15:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the pollwakeup function in Sun Solaris 10, and OpenSolaris before snv_51, allows local users to cause a denial of service (panic) via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la función pollwakeup en Sun Solaris 10, y OpenSolaris anteriores a snv_51, permiten a los usuarios locales causar una denegación de servicio (pánico) a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_50",
            "matchCriteriaId" : "FF57FBEB-7713-4058-A5E7-7EB34E52A597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_50",
            "matchCriteriaId" : "34FB5C76-5357-47CF-B498-D94321714DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-09-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-265248-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-09-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-265248-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-24T15:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3.0.6 through 3.0.13, and 3.5.x, allows remote attackers to cause a denial of service (CPU consumption) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715."
      }, {
        "lang" : "es",
        "value" : "Mozilla FireFox v3.0.6 a la v3.0.13, y v3.5.x, permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) a través de código JavaScript con un  valor largo de cadena para la propiedad \"hash\" (también conocida como location.hash). Cuestión relacionada con el CVE-2008-5715."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D595F649-ECBE-45E0-8AAD-BCBC65A654B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD09DE40-8C9B-41EA-B372-9E4E4830E8F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3424/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506006/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3424/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-24T15:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU consumption and application hang) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer v6.0.2900.2180 y anteriores, permite a atacantes remotos provocar una denegación de servicio (consumo de  CPU o cuelgue de aplicación) a través de código JavaScript con un valor de cadena larga para la propiedad \"hash\" (también conocida como location.hash). Cuestión relacionada con el CVE-2008-5715."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.2900.2180",
            "matchCriteriaId" : "DD2BF527-F6EB-4E46-9B33-B97795CCF74E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF9241-A175-438C-A793-3D245BE2AE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F62AC866-A06F-47DB-AEDF-E345CE0B14A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "943D5C5C-FC49-4EDE-AE75-A79CFF42208E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59EB6841-0427-479B-8771-06DF62EE3C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8873A08F-D4C7-46FC-8FE5-972644F85ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B815D9-BC21-4A17-AF00-B8AD181027D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42502347-DD40-4F8C-9861-C0A88A3F8608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF9C64F-9A67-4BA9-A653-75507935E6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "C375A9AA-505B-444C-A45F-2BAAD0B2CD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D82B89-456D-41CB-A894-B6A22FB4415D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FF4E47-AD75-42C7-BB84-42BBA46A58B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.01:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E21CE6E-2B33-4225-B1DC-C19F1D578040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B26CE22-E730-4247-853E-5E640DB3ECB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.40.308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A652453-AB5F-405C-ABDE-CE1B54FEACED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.40.520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141080AB-48DE-4885-BAB6-6F0937ABD49B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB758D76-B7F6-4E87-B88D-620443655CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1158:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28655AC5-1512-4F45-9963-CA26F73981CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1215:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00F4F36-B88A-4FDB-BE52-83C6EF60BDB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC05584-F553-4D29-9C46-C9EE5F0CB166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.71.544:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108A86E-8387-446C-B823-BE6FCAE747A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3F79B8-512A-4B88-868C-7C4ADFD223C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "078C3A86-C9F8-4A19-9DDC-1065B54E640F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9030923C-356E-4FAB-8E64-03D462B4DB5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0FFABC-8BED-4838-85FE-406DC9CF9B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DB4A00-4F70-4189-81BD-9318C52DF2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4071D03-D955-4C1B-ACD8-A864F7D0FA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B8985B-B927-4928-B1DB-18E29F796992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04FEA6-37B0-44B0-844F-55652ABA1F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56FB8E-2553-47C1-82A2-9E59023780CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8541EEED-94F4-42F8-9719-57F3EC85D52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "40372520-08CF-4F64-A7AC-7E0AE0964138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFE8C8E-F46C-4179-AE83-CE4720C8E0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61125B09-23AA-4D5A-8332-6B5CCD80C7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AECF59F-B3C0-44CC-B77A-30E32B3E8BB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2314.1003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4690B85-86B9-448E-9249-B3885DEDC60E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2516.1900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E215C82-E4AD-4B87-92D8-DD4D486EB6EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F4C80-3B1B-45BD-966F-C9DBF98B875D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65E0DC1-40F6-4252-945A-A972343D1E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C07C1A9-1A94-4653-8C57-6FCFC25854E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC57519-AD96-4ECF-A5B2-4E45F7D55298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37DE3DE6-A355-41F2-BF5E-E7526449E753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB24B4F-44FF-4F0F-90FA-240A34B9599F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "919A6551-DB18-49BD-AB92-4C453B3B728F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C512DAB3-2720-42D2-B27E-28F30FE0FE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB90458F-1F2B-4F4C-88C6-4B670787D126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2EFDB4-97C2-4DDF-8A65-FCFB60FCB540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A99CDC7-9341-4DFB-BB18-FF06C05FF9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CFF390-FF33-45CA-BC96-C6766491C616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3BFFB565-F656-43E3-89E1-E412DC4C9D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F4336F0E-75FE-4592-9D98-4F689804956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA6E5E4B-9E95-4019-8622-6E707FEC2FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*",
            "matchCriteriaId" : "8E93C22E-812E-4CDA-9850-2386CE1E817A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA6BA38-8B3B-4B9A-95BF-BCD412DD83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BD2A05-3FCE-4C5D-8228-968630F27E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4430779C-C678-4950-AE9E-82CDFC1A08D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0EC334-AEAD-43CA-A609-C027060F4F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF320BE-F022-4E0E-9815-B8AEED87B384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75532B2D-6814-4D20-8AEB-E7DFD66B6423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83802E30-8E7D-4CAB-B8FC-10056CF833D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.2462.0000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314538E8-48EC-4869-9074-2A1F5B7CBB3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.2479.0006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F56B3A72-7C5E-4F0C-BBC7-AA13DDFBEE70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68656E52-AD8A-474E-9160-CD5F8857254B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.00.2600.0000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6876CE89-AA70-44C5-8A69-E2ED7A63F570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F47C82-E767-47A8-88DE-417B004ED7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86E7189-CE21-4007-A3FA-39A6B51A5AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3424/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506006/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3424/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-24T15:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU consumption and application hang) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715."
      }, {
        "lang" : "es",
        "value" : "Google Chrome v1.0.154.48 y anteriores permite a atacantes remotos provocar una denegación de servicio (consumo de CPU y cuelgue de la aplicación) a través de código javascript con un valor de cadena largo en la propiedad hash (también conocida como location.hash), cuestión relativa a CVE-2009-5715."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.154.48",
            "matchCriteriaId" : "4E9FA397-22DD-448C-8CC5-93549EAD7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55D5075-D233-42D6-B1D6-77B7599650EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8FF77A-7802-4963-B532-3F16C7BB012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73576CF-76EE-42A3-9955-D7991384B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3424/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506006/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3424/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-24T15:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) Net.Commerce and (2) Net.Data components in IBM WebSphere Commerce Suite store sensitive information under the web root with insufficient access control, which allows remote attackers to discover passwords, and database and filesystem details, via direct requests for configuration files."
      }, {
        "lang" : "es",
        "value" : "Los componentes (1) Net.Commerce y (2) Net.Data en IBM WebSphere Commerce Suite almacenan información sensible en el directorio web raíz con un control de acceso insuficiente, permitiendo a atacantes remotos descubrir contraseñas, y detalles de la base de datos y el sistema de ficheros, mediante una petición directa a los ficheros de configuración."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_commerce_suite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9325A374-8168-4C9C-8A6B-FF034FB7EC30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-25T17:30:00.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the waterfall web status view (status/web/waterfall.py) in Buildbot 0.7.6 through 0.7.11p1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la vista en cascada del status web (status/web/waterfall.py) en Buildbot desde v0.7.6 hasta v0.7.11p1 permite a atacantes rmeotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buildbot:buildbot:0.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF87890D-2959-4BCC-B330-9D4F5390CF46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buildbot:buildbot:0.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7383F155-BDF8-4152-A319-F93B47E86F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buildbot:buildbot:0.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DFEED21-3F57-4D94-B9DA-BD3E0D892E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buildbot:buildbot:0.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E07C8D9-6058-49B8-872C-EF269AECEE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buildbot:buildbot:0.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8E5580-BD81-4E25-86BC-D30359609F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buildbot:buildbot:0.7.10p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB3EBB2A-F24F-44E7-AC1B-1BF3419AAF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buildbot:buildbot:0.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03A368C-706A-445C-9F2C-926C756FCEE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buildbot:buildbot:0.7.11p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5FCC5EE-D97C-4589-974B-5E31DEFCE16C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://buildbot.net/trac#SecurityAlert",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36352",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36418",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_name=42338fbf0908121232mb790a6cn787ac3de90e8bc31%40mail.gmail.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36100",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2352",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00978.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00985.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://buildbot.net/trac#SecurityAlert",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_name=42338fbf0908121232mb790a6cn787ac3de90e8bc31%40mail.gmail.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00978.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00985.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-25T17:30:00.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CuteFlow 2.10.3 and 2.11.0_c does not properly restrict access to pages/edituser.php, which allows remote attackers to modify usernames and passwords via a direct request."
      }, {
        "lang" : "es",
        "value" : "CuteFlow v2.10.3 and v2.11.0_c no restringe adecuadamente el acceso a pages/edituser.php, lo que permite a atacantes remotos modificar los nombres de usuario y las contraseñas a través de una petición directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cuteflow:cuteflow:2.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D0F1F5-5D3E-408F-8B3F-33347D0D4C08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cuteflow:cuteflow:2.11.0_c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED3B413-DB83-422A-9F42-29BCA38C2308"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36349",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506000/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36099",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506000/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-25T17:30:00.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Thaddy de Konng KOL Player 1.0 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a .MP3 playlist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Thaddy de Konng KOL Player v1.0 permite a atacantes remotos producir una denegación de servicio (caída) o ejecutar código arbitrario a través de una URL larga en un fichero de lista de reproducción de MP3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kolmck:kol_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9600972A-3C0A-4056-AFB8-FB9E440B5707"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-25T17:30:00.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the update feature in Toolbar Uninstaller 1.0.2 allows remote attackers to force the download and execution of arbitrary files via attack vectors related to a \"malformed update url and a malformed update website.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en la caracteristica \"actualizar\" en Toolbar Uninstaller v1.0.2 permite a atacantes remotos forzar la descarga y ejecución de ficheros de forma arbitraria a través de vectores de ataque relacionados con \"url de actualización malformada y web de actualización malformada\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:decomputeur:toolbar_uninstaller:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D9B52D-8E96-4039-9833-29F9E5EF12A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36366",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.decomputeur.nl/pdf/security-risk-found.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.decomputeur.nl/pdf/security-risk-found.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-25T17:30:01.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.19 and earlier, and NaSMail before 1.7, allow remote attackers to hijack the authentication of unspecified victims via features such as send message and change preferences, related to (1) functions/mailbox_display.php, (2) src/addrbook_search_html.php, (3) src/addressbook.php, (4) src/compose.php, (5) src/folders.php, (6) src/folders_create.php, (7) src/folders_delete.php, (8) src/folders_rename_do.php, (9) src/folders_rename_getname.php, (10) src/folders_subscribe.php, (11) src/move_messages.php, (12) src/options.php, (13) src/options_highlight.php, (14) src/options_identities.php, (15) src/options_order.php, (16) src/search.php, and (17) src/vcard.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de falsificación de petición en sitios cruzados(CSRF) en SquirrelMail v1.4.19 y anteriores permite a atacantes remotos secuestrar la autenticacion de victimas inespecificas a traves de caracteristicas tales como \"enviar mensaje\" y \"cambiar preferencias\", relacionado con (1) functions/mailbox_display.php, (2) src/addrbook_search_html.php, (3) src/addressbook.php, (4) src/compose.php, (5) src/folders.php, (6) src/folders_create.php, (7) src/folders_delete.php, (8) src/folders_rename_do.php, (9) src/folders_rename_getname.php, (10) src/folders_subscribe.php, (11) src/move_messages.php, (12) src/options.php, (13) src/options_highlight.php, (14) src/options_identities.php, (15) src/options_order.php, (16) src/search.php, y (17) src/vcard.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.19",
            "matchCriteriaId" : "233C72FD-F76C-4192-8981-72757E4E093E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "565E131D-56A9-46AB-800D-12B097FE3B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAB6F43-2DAE-4E02-8F0A-EE4D4FB3E005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD41781D-1F7E-43A7-AD59-ADFE1D04D825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78650B7E-9638-46FF-9656-38E8DFE3FA93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CBBB8E-E0AB-4F7B-A55E-F7BD5F83EAAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1E1172-9D9E-439E-BD4B-4EF372344F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBF40C5-6272-427C-97A1-3CE3B1D47B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB15C5DD-2D76-47ED-883C-D1901B96F391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E249ED-76DA-44B3-A3A7-788F4B1A19DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD0A21F-CD80-4B01-B5D3-9B2281E4F143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA516843-2A45-4705-9669-4B719F722192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA068C0-8067-4A94-9F74-0D1DACF9A9EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F37AD5-120E-4FEA-ADA5-F6C3434B9BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C059835E-8FD9-40DF-BA6F-7E313E49F511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E28A825-56F4-4EC5-9D62-661C0F4B477F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "545CD944-7C64-49E3-A32E-3388B5F3ECF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55A98B3-34ED-4A90-BB78-50CB56B1B51F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7F3531-E0EE-48AA-BCB4-872BEB853531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22E1FA6-7C9C-4D01-A645-CF41939C1988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5143ED-D4C5-4830-9C96-0B54D03679CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B765AEC-09E9-456C-8B57-09927E55D119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AAFC3B0-DCE3-4190-B279-E095C666FA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9291A565-0BD6-4B5E-B45F-9DE65AB8159D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F53A84-FC66-4963-A728-7285F63D4761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A941FF-423E-49C5-AE1F-FE7ED016CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6-rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80FE1297-04B7-4F1D-B932-1015EE3070C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B34FDB1D-881B-4343-A76E-F23B93A0469A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052914F8-B52C-4AB4-8F85-68D788B588C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617C554F-8E7D-4F8A-AF63-C193934C8215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F11950-A2E4-4F57-BF87-57788B841A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F886B99-E996-4BF7-9BE3-14A6713A997F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65801122-2E5D-4244-9D37-5483F5C731F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A29559D-0DB8-40C8-A6E6-4F37DDD27571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026730B8-3919-4100-8607-C640ADBDD662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D1297B-EE36-46E2-8722-34F385A54751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C179A3C-8C8C-429B-BACA-8ADAE4170465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3A6CFE-CFA4-4B48-9738-063A2B1025FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:rc2a:*:*:*:*:*:*",
            "matchCriteriaId" : "2664D22F-B0E6-48AB-BBBA-C653C1AF77A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0-r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6B4BA8-1379-44CF-B87D-9DA66B5F2484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F869F3-6D8D-4C95-95F7-5AE42C67362B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B96BB4F-12B0-460A-B5CC-8BA6D69911FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD31177-05BB-4623-AED7-765DB7E44E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20247A22-9AB9-4BCE-BF28-350B52FBC62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0ABD26-2EA3-4884-BA0B-FFB88177CFDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC479F3-6F3B-46CB-9D28-2DB7D76FDAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EDC2C56-E977-452F-9263-541091356B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B743DEC2-1ED2-4CAC-87F4-4EFDF16159FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCE37B1-932D-4A4A-B4CA-056E26D78659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E6734C-EE1C-40B6-9759-15298707A6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "F66D66B1-992E-4EE0-A189-0974B96FE721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "70484027-647C-47DF-85FD-3323F4685613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6733B8C-5A9E-45CE-8938-F39A69EB0DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08E51F1-3764-4146-89C1-20B9B8EE1222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F28456D-EA59-4900-AEAD-F8CB06F5129D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4071B2-3D4F-4755-98B1-E28CEB05EA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3aa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AAFE2B-77AB-4AC3-A22C-C3C256E2E45A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6591E5-5F36-4663-85A6-9D870FD49FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "03D847B0-DE1D-49D7-9ED4-30C0A82209AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D062B70A-E5FF-403B-8BD1-777D6462B7CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4CFD4D-EAC3-4325-A87F-9D5F4C513208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D58980B8-6D4B-4E90-8410-80FDD7CF15C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A884536-4D27-4350-B815-AB4E625879DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4429B95B-273A-45F3-A066-9AF548AC3FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.6_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD09187-16B2-4A0C-907C-40375E865EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7ED3CC3-E0A8-4C20-9EF7-405CD32E9EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD89F143-EEBF-472D-9653-E7534F5799FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "796C453E-D59A-4988-BD91-24F31646D8FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.8.4fc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A901766-B49B-4983-98AB-880B333C284B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9851AD9-5093-4482-A632-487C6D104C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA5BA42-F53A-4E0D-B04C-D70D2291E408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18AF3BC6-E33B-44BD-A2F6-A7F5244AA4FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77776503-3258-400D-8404-233EAFA940AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682BC5E2-F2C5-4B6F-8EF0-E05152BB9B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC24558-B7C1-4DE7-BC24-AF092DF0DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "537E4C91-91F9-469B-BF7D-5B05624D637A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0986D113-C9F9-4645-8968-D165EC6B917D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3893B3D9-BAA3-4FCD-BC58-C4B664E688B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.15_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85F80F3-DC0E-4228-9FA3-D870BC2200D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.15rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5C975-D1EE-4248-9DA9-81C10E28B7F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8608AE1-7930-47CF-B2E8-9E86E2FB5A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34EB1B08-4377-4496-A278-19616238900F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF9DF8F-368B-44A0-9258-49298E41E0E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442BF5C9-DC58-4A94-A634-33D6A4F3C6DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://download.gna.org/nasmail/nasmail-1.7.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN30881447/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002207.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/60469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34627",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36363",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/40220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/40964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog?revision=13818&view=markup&pathrev=13818",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13818",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/57001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2009-08-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2262",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/2080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=517312",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gna.org/forum/forum.php?forum_id=2146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00927.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00954.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://download.gna.org/nasmail/nasmail-1.7.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN30881447/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/60469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/40220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/40964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog?revision=13818&view=markup&pathrev=13818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/57001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2009-08-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/2080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=517312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gna.org/forum/forum.php?forum_id=2146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00927.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00954.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2965",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-25T17:30:01.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in entry/index.jsp in Radvision Scopia 5.7, and possibly other versions before SD 7.0.100, allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en entry/index.jsp en Radvision Scopia v5.7, y posiblemente otras versiones anteriores a SD 7.0.100, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"page\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radvision:scopia:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8415BFC4-4A2D-4C6C-993C-F82519420613"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/506013/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506013/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2966",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-25T17:30:01.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of service (CPU consumption and network connectivity loss) via an HTTP URL request that contains a large number of dot \".\" characters."
      }, {
        "lang" : "es",
        "value" : "avp.exe en Kaspersky Internet Security v9.0.0.459 y Anti-Virus v9.0.0.463 permite a atacantes remotos producir una denegación de servicio (consumo de CPU y perdida de conectividad con la red) a través de una petición de URL HTTP que contiene un gran numero de puntos \".\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:kaspersky_anti-virus:9.0.0.463:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CDF003-FD3C-4F9D-891A-B624A71A3228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:kaspersky_internet_security:9.0.0.459:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B893210A-8792-4AAD-BA14-D1F740C31B75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0252.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36405",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/66",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.h-online.com/security/Kaspersky-confirm-and-close-DoS-vulnerability--/news/114077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/57173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36084",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0252.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.h-online.com/security/Kaspersky-confirm-and-close-DoS-vulnerability--/news/114077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/57173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2967",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-26T14:24:17.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Buildbot 0.7.6 through 0.7.11p2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, different vulnerabilities than CVE-2009-2959."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Buildbot v0.7.6 a la v0.7.11p2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados. Vulnerabilidad distinta de CVE-2009-2959."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buildbot:buildbot:0.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF87890D-2959-4BCC-B330-9D4F5390CF46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buildbot:buildbot:0.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7383F155-BDF8-4152-A319-F93B47E86F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buildbot:buildbot:0.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DFEED21-3F57-4D94-B9DA-BD3E0D892E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buildbot:buildbot:0.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E07C8D9-6058-49B8-872C-EF269AECEE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buildbot:buildbot:0.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8E5580-BD81-4E25-86BC-D30359609F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buildbot:buildbot:0.7.10p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB3EBB2A-F24F-44E7-AC1B-1BF3419AAF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buildbot:buildbot:0.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B03A368C-706A-445C-9F2C-926C756FCEE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buildbot:buildbot:0.7.11p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5FCC5EE-D97C-4589-974B-5E31DEFCE16C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buildbot:buildbot:0.7.11p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D53045-3EE6-4BF0-B73B-95807C989DCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://buildbot.net/trac#SecurityAlert",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36352",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36418",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_name=42338fbf0908130837o86b77d6y725233076286226f%40mail.gmail.com",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2352",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00978.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00985.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://buildbot.net/trac#SecurityAlert",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_name=42338fbf0908130837o86b77d6y725233076286226f%40mail.gmail.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00978.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00985.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2050",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-08-27T17:00:00.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Unified Communications Manager (aka CUCM, formerly CallManager) before 6.1(1) allows remote attackers to cause a denial of service (voice-services outage) via a malformed header in a SIP message, aka Bug ID CSCsi46466."
      }, {
        "lang" : "es",
        "value" : "Cisco Unified Communications Manager (también conocido como CUCM, formalmente CallManager) anteriores a v6.1(1) permite a los atacantes remotos causar una denegación de servicio (parada servicio de voz) a través de cabeceras malformadas en un mensaje SIP, también conocido como Bug ID CSCsi46466."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1\\(1\\)",
            "matchCriteriaId" : "955CAD70-C632-4317-9B5D-89B68AAD1C8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57452",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36495",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36499",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36152",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022775",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://osvdb.org/57452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2051",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-08-27T17:00:00.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), and 7.x before 7.1(2) allow remote attackers to cause a denial of service (device reload or voice-services outage) via a malformed SIP INVITE message that triggers an improper call to the sipSafeStrlen function, aka Bug IDs CSCsz40392 and CSCsz43987."
      }, {
        "lang" : "es",
        "value" : "Cisco Unified Communications Manager (también conocido como CUCM, formalmente CallManager) v4.x, v5.x anteriores a v5.1(3g), v6.x anteriores v6.1(4), y v7.x anteriores v7.1(2) permite a los atacantes remotos causar una denegación de servicio (parada del servicio de voz) a través de mensajes malformados SIP INVITE que lanzan una llamada incorrecta a la función sipSafeStrlen, también conocida como Bug ID CSCsz40392."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndExcluding" : "5.1\\(3g\\)",
            "matchCriteriaId" : "B48B0779-7796-45D2-8967-459F562A6243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1\\(1\\)",
            "versionEndExcluding" : "6.1\\(4\\)",
            "matchCriteriaId" : "98AF7F97-8702-4E7B-BDE4-BD5A3114FDF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1",
            "versionEndExcluding" : "7.1\\(2\\)",
            "matchCriteriaId" : "96DB29BF-9A40-4591-BE41-C519B86C2EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2",
            "versionEndIncluding" : "12.4",
            "matchCriteriaId" : "FBB64D7E-7C96-4A3D-BA83-60EE8D5DFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.1",
            "matchCriteriaId" : "537031DB-5ADF-475E-BFFA-9092652BF2B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndIncluding" : "2.6.1",
            "matchCriteriaId" : "2DEE9D2D-BE50-4216-8F7E-CB6F46880E08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57453",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36498",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36499",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a30f.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36152",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022775",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://osvdb.org/57453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a30f.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2052",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-08-27T17:00:01.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2), and 7.1 before 7.1(2); and Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4); allows remote attackers to cause a denial of service (TCP services outage) via a large number of TCP connections, related to \"tracking of network connections,\" aka Bug IDs CSCsq22534 and CSCsw52371."
      }, {
        "lang" : "es",
        "value" : "Unified Communications Manager de Cisco (también conocido como CUCM, anteriormente CallManager) versión 4.x, versión 5.x anterior a 5.1 (3g), versión 6.x anterior a 6.1 (4), versión 7.0 anterior a 7.0 (2) y versión 7.1 anterior a 7.1 (2); y Unified Presence de Cisco  versión 1.x, versión 6.x anterior a 6.0 (6) y versión 7.x anterior a 7.0 (4); permite a los atacantes remotos causar una denegación de servicio (interrupción de los servicios TCP) por medio de una gran cantidad de conexiones TCP, relacionadas con el  \"tracking of network connections,\" también conocida como Bug Id. CSCsq22534 y CSCsw52371."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndExcluding" : "5.1\\(3g\\)",
            "matchCriteriaId" : "B48B0779-7796-45D2-8967-459F562A6243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1\\(1\\)",
            "versionEndExcluding" : "6.1\\(4\\)",
            "matchCriteriaId" : "98AF7F97-8702-4E7B-BDE4-BD5A3114FDF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndExcluding" : "7.0\\(2\\)",
            "matchCriteriaId" : "70FFE57A-3D1F-4310-87F5-CEE420125357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1",
            "versionEndExcluding" : "7.1\\(2\\)",
            "matchCriteriaId" : "96DB29BF-9A40-4591-BE41-C519B86C2EEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36498",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36499",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37039",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023018",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080afc930.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36152",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36676",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022775",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2915",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080afc930.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2053",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-08-27T17:00:01.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 before 7.1(2) allows remote attackers to cause a denial of service (file-descriptor exhaustion and SCCP outage) via a flood of TCP packets, aka Bug ID CSCsx32236."
      }, {
        "lang" : "es",
        "value" : "Cisco Unified Communications Manager (también conocido, formalmente CallManager) v4.x, v5.x anteriores a v5.1(3g), v6.x anteriores a v6.1(4), v7.0 anteriores a v7.0(2a)su1, y v7.1 anteriores a v7.1(2) permite a los atacantes remotos causar una denegación de servicio (agotamiento del descriptor de fichero y parada SCCP) a través de la inundación de paquetes TCP, también conocido como Bug ID CSCsx32236."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndExcluding" : "5.1\\(3g\\)",
            "matchCriteriaId" : "B48B0779-7796-45D2-8967-459F562A6243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1\\(1\\)",
            "versionEndExcluding" : "6.1\\(4\\)",
            "matchCriteriaId" : "98AF7F97-8702-4E7B-BDE4-BD5A3114FDF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndExcluding" : "7.0\\(2a\\)su1",
            "matchCriteriaId" : "906EED24-1D35-4952-AFCA-D7D5223F66D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1",
            "versionEndExcluding" : "7.1\\(2\\)",
            "matchCriteriaId" : "96DB29BF-9A40-4591-BE41-C519B86C2EEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57455",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36498",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36499",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36152",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022775",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://osvdb.org/57455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2054",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-08-27T17:00:01.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 before 7.1(2a)su1 allows remote attackers to cause a denial of service (file-descriptor exhaustion and SIP outage) via a flood of TCP packets, aka Bug ID CSCsx23689."
      }, {
        "lang" : "es",
        "value" : "Cisco Unified Communications Manager (también conocido como CUCM, formalmente CallManager) v4.x, v5.x anteriores a v5.1(3g), v6.x anteriores a v6.1(4), v7.0 anteriores a v7.0(2a)su1, y v7.1 anteriores a v7.1(2a)su1 permite a los atacantes remotos causar una denegación de servicio (agotamiento de la descripción del fichero y parada SIP) a través de una inundación de paquetes TCP, también conocido como Bug ID CSCsx23689."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "5.1\\(3g\\)",
            "matchCriteriaId" : "4C7C8DA6-9BAD-4ECB-8901-F1527C8710D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.1\\(4\\)",
            "matchCriteriaId" : "8E11B055-9625-4A00-8252-6E1660037F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndExcluding" : "7.0\\(2a\\)su1",
            "matchCriteriaId" : "906EED24-1D35-4952-AFCA-D7D5223F66D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1",
            "versionEndExcluding" : "7.1\\(2a\\)su1",
            "matchCriteriaId" : "307FB584-44E5-4A1C-B219-E438D9C0CF5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57456",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36498",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36499",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36152",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022775",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://osvdb.org/57456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2861",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-08-27T17:00:01.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Over-the-Air Provisioning (OTAP) functionality on Cisco Aironet Lightweight Access Point 1100 and 1200 devices does not properly implement access-point association, which allows remote attackers to spoof a controller and cause a denial of service (service outage) via crafted remote radio management (RRM) packets, aka \"SkyJack\" or Bug ID CSCtb56664."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad Over-the-Air Provisioning (OTAP) en dispositivos Cisco Aironet Lightweight Access Point 1100 y 1200 no implementan apropiadamente la asociación al punto de acceso, lo que permite a los atacantes remoto suplantar un controlador y causar una denegación de servicio (parada de servicio) a través de una gestión de paquetes de radio remota (RRM) manipulados, también conocidos como \"SkyJack\" o Bug ID CSCtb56664."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:C/A:C",
            "baseScore" : 7.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.5,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap1100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D954F30-8AD0-41E9-8D62-BEFEBDCB3B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap1200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8B5553-7295-4786-9F81-B4527EAD4F0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1022774",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18919",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.airmagnet.com/news/press_releases/2009/08252009.php",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36145",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2419",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.airmagnet.com/news/press_releases/2009/08252009.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-27T17:00:01.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript."
      }, {
        "lang" : "es",
        "value" : "Google V8, usado en Google Chrome anteriores a v2.0.172.43, permite a los atacantes remotos, evitar restricciones intencionadas o lecturas de memoria, y posiblemente obtener información sensible o ejecución arbitraria de código en el Chrome sandbox, a través de JavaScript manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.172.37",
            "matchCriteriaId" : "1FBFF8DA-5CD2-420E-A9A3-53475271997B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55D5075-D233-42D6-B1D6-77B7599650EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8FF77A-7802-4963-B532-3F16C7BB012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73576CF-76EE-42A3-9955-D7991384B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6659833E-E309-4797-84D4-A782237714A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4C0D93-0308-48D4-A953-9398B88E2868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5094C4-1338-4189-B5FD-C9AFFF091D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F95770-F36F-43C0-986F-5C819648271E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCE1FD3-8D27-4304-97F9-6F9689F2498D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6CA696-49AA-4445-B978-96C1D8CE58DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CFA3BF-6C07-448B-8C83-AD4C524A6577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8497F93-D88A-4FFA-B988-7210608530A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CDF938-2998-403F-B343-29B620E05D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F5223F1-85CD-4DF9-9665-BDF7B554A784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD7AFBA-A9A2-4EE9-B652-78D25EFBB690"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=18639",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36417",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2420",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=18639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-27T17:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket."
      }, {
        "lang" : "es",
        "value" : "La función udp_sendmsg en la implementación UDP en los archivos (1) net/ipv4/udp.c y (2) net/ipv6/udp.c en el kernel de Linux anterior a versión 2.6.19,  permite a los usuarios locales obtener privilegios o causar una denegación de servicio (Desreferencia de puntero NULL y bloqueo de sistema) por medio de vectores que involucran el flag MSG_MORE y un socket UDP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.19",
            "matchCriteriaId" : "B46C2EC7-EC2C-45D6-A7F2-CED2C433271E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "513797E6-FCE6-4E84-9B66-202541F9601E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD2D897-E321-4CED-92E0-11A98B52053C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F2976D5-83A5-4A52-A1E6-D0E17F23FD62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "941713DB-B1DE-4953-9A9C-174EAFDCB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F87B994-28E4-4095-8770-6433DE9C93AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B5DCF29-6830-45FF-BC88-17E2249C653D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:4.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D467EE9D-6A1F-4462-9BDA-C68B7EE375E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13771B15-CD71-472A-BE56-718B87D5825D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1e0c14f49d6b393179f423abbac47f85618d3d46",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1222.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1223.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23073",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36430",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36510",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37298",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100067254",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:051",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/25/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1233.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/512019/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36108",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022761",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=518034",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11514",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8557",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9142",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1e0c14f49d6b393179f423abbac47f85618d3d46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1222.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2009-1223.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100067254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/25/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1233.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/512019/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=518034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise MRG. Updates for Red Hat Enterprise Linux 3, 4 and 5 to correct this issue are available: https://rhn.redhat.com/cve/CVE-2009-2698.html",
        "lastModified" : "2009-09-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-27T17:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "in.lpd in the print service in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors that trigger a \"fork()/exec() bomb.\""
      }, {
        "lang" : "es",
        "value" : "in.lpd en el servicio de impresión en Sun Solaris v8 y v9 permite a los atacantes remotos causar una denegación de servicio (consumo de memoria) a través de vectores no especificado que lanzan una \"bomba fork()/exec().\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DBDFD8C-371E-42D2-9635-D8CDD1775984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36445",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-109320-23-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264608-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36148",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2417",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-109320-23-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264608-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-27T17:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome before 2.0.172.43 does not prevent SSL connections to a site with an X.509 certificate signed with the (1) MD2 or (2) MD4 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary HTTPS servers via a crafted certificate, a related issue to CVE-2009-2409."
      }, {
        "lang" : "es",
        "value" : "Google Chrome anteriores a v2.0.172.43 no impide conexiones SSL a un sitio con un certificado X.509 firmado con el algoritmo (1) MD2 o (2) MD4, lo que hace más fácil para los ataques de \"hombre en el medio\" suplantar arbitrariamente servidores HTTPS a través de certificados manipulados, relativo al asunto CVE-2009-2409."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.172.37",
            "matchCriteriaId" : "1FBFF8DA-5CD2-420E-A9A3-53475271997B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55D5075-D233-42D6-B1D6-77B7599650EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8FF77A-7802-4963-B532-3F16C7BB012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73576CF-76EE-42A3-9955-D7991384B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6659833E-E309-4797-84D4-A782237714A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4C0D93-0308-48D4-A953-9398B88E2868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5094C4-1338-4189-B5FD-C9AFFF091D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F95770-F36F-43C0-986F-5C819648271E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCE1FD3-8D27-4304-97F9-6F9689F2498D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6CA696-49AA-4445-B978-96C1D8CE58DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CFA3BF-6C07-448B-8C83-AD4C524A6577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8497F93-D88A-4FFA-B988-7210608530A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CDF938-2998-403F-B343-29B620E05D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F5223F1-85CD-4DF9-9665-BDF7B554A784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD7AFBA-A9A2-4EE9-B652-78D25EFBB690"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=18725",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36417",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2420",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=18725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2974",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-27T17:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to (1) cause a denial of service (application hang) via vectors involving a chromehtml: URI value for the document.location property or (2) cause a denial of service (application hang and CPU consumption) via vectors involving a series of function calls that set a chromehtml: URI value for the document.location property."
      }, {
        "lang" : "es",
        "value" : "Google Chrome v1.0.154.65, v1.0.154.48, y anteriores permite a los atacantes remotos (1) causar una denegación de servicio (cuelgue de la aplicación) a través de vectores relativos a chromehtml: valor URI para la propiedad document.location o (2) causar una denegación de servicio (cuelgue de la aplicación y consumo de la CPU) a través de vectores relativos a una serie de llamadas a funciones que establecen un chromehtml: valor URI para la propiedad document.location."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.154.48",
            "matchCriteriaId" : "4E9FA397-22DD-448C-8CC5-93549EAD7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55D5075-D233-42D6-B1D6-77B7599650EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8FF77A-7802-4963-B532-3F16C7BB012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73576CF-76EE-42A3-9955-D7991384B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4C0D93-0308-48D4-A953-9398B88E2868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5094C4-1338-4189-B5FD-C9AFFF091D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C0798F-CC7F-4069-810E-B81F8BB77CCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-08/0217.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-08/0236.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3435/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-08/0217.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-08/0236.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3435/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2975",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-27T17:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3.5.2 on Windows XP, in some situations possibly involving an incompletely configured protocol handler, does not properly implement setting the document.location property to a value specifying a protocol associated with an external application, which allows remote attackers to cause a denial of service (memory consumption) via vectors involving a series of function calls that set this property, as demonstrated by (1) the chromehtml: protocol and (2) the aim: protocol."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox v3.5.2 en Windows XP, en algunas situaciones posiblemente envuelvan una configuración incompleta del manejador de protocolo, no implementa apropiadamente la configuración de la propiedad  document.location para un valor, especificando un protocolo asociado con una aplicación externa, lo que permite a los atacantes remotos causar una denegación de servicio (consumo de memoria) a través de un vector que envuelve una serie de llamadas a funciones que establecen esta propiedad, como se demuestra por (1) el chromehtml: protocolo y (2) el aim: protocolo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-08/0234.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-08/0236.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-08/0246.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-08/0234.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-08/0236.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-08/0246.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2976",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-27T17:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Cisco Aironet Lightweight Access Point (AP) envían el contenido de ciertos paquetes de multidifusión en texto plano, lo que permite a atacantes remotos descubrir las direcciones IP y MAC del Wireless LAN Controller así como los detalles de configuración del Punto de Acceso (AP) espiando la red wireless."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap1100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D954F30-8AD0-41E9-8D62-BEFEBDCB3B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap1200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8B5553-7295-4786-9F81-B4527EAD4F0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1022774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.airmagnet.com/news/press_releases/2009/08252009.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.airmagnet.com/news/press_releases/2009/08252009.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2977",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-27T17:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files."
      }, {
        "lang" : "es",
        "value" : "Cisco Security Monitoring, Analysis and Response System (CS-MARS) v6.0.4 y anteriores guardan contraseñas e texto claro en un archivo log/sysbacktrace.## dentro de un archivo error-logs.tar.gz, lo que permite a los atacantes dependientes de contexto obtener información sensible leyendo estos archivos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cs-mars:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "AB6F4DF5-643F-45D2-B80C-98C461BAC088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cs-mars:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7BF76D-85A6-4976-B6A8-3D39579C4DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cs-mars:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C48D948-7524-41F9-A818-F6774049A574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cs-mars:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52CC0B4-6C76-420C-98DF-D5B24826E2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cs-mars:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F69D1B2-17A3-457D-8381-ABF214608F4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtb52450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505995/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505998/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2364",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtb52450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505995/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505998/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2978",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-27T18:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in SugarCRM 4.5.1o and earlier, 5.0.0k and earlier, and 5.2.0g and earlier, allows remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en SugarCRM v4.5.1o y anteriores, v5.0.0k y anteriores, y v5.2.0g y anteriores, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.1o",
            "matchCriteriaId" : "E53F4C99-9892-4E15-AC43-7C350F84B5D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:*:*:sugar_community_edition:*:*:*:*:*",
            "versionEndIncluding" : "5.0.0k",
            "matchCriteriaId" : "5C668E68-AA42-4D18-9C9D-45D1C73F5C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.0g",
            "matchCriteriaId" : "7A97B4C9-4510-4970-AD03-1106294A4FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4107E934-D5CF-4ABF-8CB6-0DA90F3D9A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.0f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85742E7F-C06C-46A5-9008-245BE6E4E0BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.0g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B820A83B-0F03-4523-9D4D-3EB2930B35F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FA30E3-7572-4BCC-8EFA-9D259DF892E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBB2BDD-5FA2-40E1-9395-A9DED672E3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022D7E5E-BCBC-4E14-9C0D-50E5DD237D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22E73109-5473-417C-A003-7C1EE1DC3ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F183CCFF-6D5B-43E7-A70F-E9AEA6E46880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA73438-7BA5-4668-90E2-2EECDBBB58A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C3E6DF-AE5C-4D7F-99B3-16C3967A6A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:1.5d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF53885-8C5B-4654-AB42-587290E58355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A197BD9-85DD-47F2-B30B-6C7F372F6DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:2.0.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F2BB29-5136-4F23-8D1B-0507A5FCBF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:2.0.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603F5E29-5D0B-4872-A125-D7B1CD77BACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "687D4794-4163-4EC8-9673-47E5EF216371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12DAF9EB-FED5-482D-820E-553E9057B92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6842129-2DF6-47C9-8960-BF39D1A337C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF5360C-C07C-413A-9B8C-50907187DAC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED8B842-AAEB-4227-A2D3-64229F4B9FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4525F5B5-E268-4B50-8244-E8829C106FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28098D0F-B3E2-470E-92B1-C9138A664496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F7EFEF-004A-458A-9B3C-3B1B654C6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB97DBC-4525-4227-9698-4B05140CCAB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:4.5.0f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58854312-8672-4399-83FB-DF12DF6052F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8BAEB-B6E3-48AF-90E8-28D7146115AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:5.0.0:*:sugar_community_edition:*:*:*:*:*",
            "matchCriteriaId" : "6FEB4B61-0F95-45CA-AB7A-BA07FF2FCA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:5.0.0h:*:sugar_community_edition:*:*:*:*:*",
            "matchCriteriaId" : "B23F68DA-DFB0-42E1-959A-F7A68AA83BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:5.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "439E75C4-C02D-4905-9D73-CE27D6A54C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:5.2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF95EA0-16E7-4173-AEC8-D66A3F8FB62B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:5.2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA524F8-A78F-414A-A5AC-1A89901BD917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:5.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCC9802-4642-4331-9D56-4E1F76151E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:5.2e:*:sugar_community_edition:*:*:*:*:*",
            "matchCriteriaId" : "0B6D79D5-2E61-4C1F-906B-EB16F0D97586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:5.2f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7922DB4E-9812-4636-A61D-8D201CE92D93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN31035930/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000056.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36423",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipa.go.jp/security/vuln/documents/2009/200908_sugarcrm.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sugarcrm.com/forums/showthread.php?t=50907",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sugarcrm.com/forums/showthread.php?t=50953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN31035930/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000056.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ipa.go.jp/security/vuln/documents/2009/200908_sugarcrm.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sugarcrm.com/forums/showthread.php?t=50907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sugarcrm.com/forums/showthread.php?t=50953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-28T15:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory addresses, which allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities, related to (1) the default configuration of the allow_unconfined_mmap_low boolean in SELinux on Red Hat Enterprise Linux (RHEL) 5, (2) an error that causes allow_unconfined_mmap_low to be ignored in the unconfined_t domain, (3) lack of a requirement for the CAP_SYS_RAWIO capability for these mmap operations, and (4) interaction between the mmap_min_addr protection mechanism and certain application programs."
      }, {
        "lang" : "es",
        "value" : "El kernel de Linux antes de v2.6.31-rc7 no previene debidamente las operaciones nmap que apuntan a una pagina cero y otras direcciones de memoria bajas, lo que permite a usuarios locales obtener privilegios mediante la explotación de vulnerabilidades de desreferencia a puntero NULL, relacionados con (1) la configuración por defecto del boolano allow_unconfined_mmap_low en SELinux en Red Hat Enterprise Linux (RHEL) 5, (2) un error que provoca allow_unconfined_mmap_low para ser ignorado en el dominio unconfined_t, (3) la falta de un requisito de la capacidad CAP_SYS_RAWIO para estas nmap operaciones, y (4) la interacción entre el mecanismo de protección mmap_min_addr y algunos programas de aplicación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:rc6:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.31",
            "matchCriteriaId" : "5336FAF2-3F84-409F-8DDB-F228ED22ACE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACBB194-1D24-464A-B79C-44B8127EAD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0138807-6313-4A3F-AB5A-4B7D4A9BE287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA2227-F259-499D-BF50-5074B1E7DD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A896D0-032C-4467-9D57-E47E8C612704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A415FECF-89CC-4D71-B1BF-6A678D32599D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F77E54-5F4A-4D47-8DE8-097B4BBC7944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752148FC-1594-4108-AE0F-C5145B978454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09546671-E75D-4F50-9D86-DFDDAC9DC5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6964925C-4394-4E82-976B-770A99E74F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8C909E-02D7-4B29-AA68-897BD0200B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27430190-EB83-43C5-9584-4F65CF65151A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386B13F-9D7C-45F8-B86A-886384144A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67A63E8-837E-4162-999E-3B3DAAE57C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A701E87D-B807-426E-9CD4-6721DBCABE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F6E506-EC0A-4784-BDA3-B7B5CD938B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFA0277-B491-4BB1-88DC-85362F0A689C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE922924-6496-4D24-94A6-8EDD431A4568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E55450-F6D9-483C-9CC8-E651E5A12AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC40B6DE-09D9-422B-965B-7EB9F6661DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91170B40-4D25-4E40-8F0B-DBC1AE217F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E28B8B9-B832-4D77-BE1A-BB5D8A678678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4049867A-E3B2-4DC1-8966-0477E6A5D582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A2507858-675B-4DA2-A49E-00DB54700CF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://danwalsh.livejournal.com/30084.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://eparis.livejournal.com/606.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=47d439e9fb8a81a90022cfa785bf1c36c4e2aff6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=7c73875e7dda627040b12c19b01db634fa7f0fd1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=84336d1a77ccd2c06a730ddd38e695c2324a7386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=a2551df7ec568d87793d2eea4ca744e86318f205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1d9959734a1949ea4f2427bd2d8b21ede6b2441c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=788084aba2ab7348257597496befcbccabdc98a3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8cf948e744e0218af604c32edecde10006dc8e9e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9c0d90103c7e0eb6e638e5b649e9f6d8d9c1b4b3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ab5a91a8364c3d6fc617abc47cc81d162c01d90a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kbase.redhat.com/faq/docs/DOC-18042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://patchwork.kernel.org/patch/36539/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://patchwork.kernel.org/patch/36540/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://patchwork.kernel.org/patch/36649/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://patchwork.kernel.org/patch/36650/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36501",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://thread.gmane.org/gmane.linux.kernel.lsm/9075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://twitter.com/spendergrsec/statuses/3303390960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/17/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1672.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36051",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=511143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=517830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1548.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://danwalsh.livejournal.com/30084.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://eparis.livejournal.com/606.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=47d439e9fb8a81a90022cfa785bf1c36c4e2aff6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=7c73875e7dda627040b12c19b01db634fa7f0fd1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=84336d1a77ccd2c06a730ddd38e695c2324a7386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=a2551df7ec568d87793d2eea4ca744e86318f205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1d9959734a1949ea4f2427bd2d8b21ede6b2441c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=788084aba2ab7348257597496befcbccabdc98a3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8cf948e744e0218af604c32edecde10006dc8e9e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9c0d90103c7e0eb6e638e5b649e9f6d8d9c1b4b3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ab5a91a8364c3d6fc617abc47cc81d162c01d90a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kbase.redhat.com/faq/docs/DOC-18042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://patchwork.kernel.org/patch/36539/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://patchwork.kernel.org/patch/36540/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://patchwork.kernel.org/patch/36649/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://patchwork.kernel.org/patch/36650/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://thread.gmane.org/gmane.linux.kernel.lsm/9075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://twitter.com/spendergrsec/statuses/3303390960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/17/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1672.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=511143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=517830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1548.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3000",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-28T15:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv_41 through snv_122, when Network Cache Accelerator (NCA) logging is enabled, allows remote attackers to cause a denial of service (panic) via unspecified web-server traffic that triggers a NULL pointer dereference in the nl7c_http_log function, related to \"improper http response handling.\""
      }, {
        "lang" : "es",
        "value" : "El módulo sockfs del kernel de Sun Solaris 10 y OpenSolaris snv_41 a snv_122, cuando se habilita el registro del Acelerador de cache de red(NCA), permite a atacantes remotos provocar una denegación de servicio (mediante un panic del kernel) a través de tráfico del servidor web no especificado que genera una desreferencia a un puntero nulo en la función nl7c_http_log, relacionados con un \"manejo inadecuado de una respuesta HTTP.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "78B80C92-7EB5-4343-B830-32E8C011E572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "46E4ED9C-F013-48D2-8642-E5BA7599A512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A1E8108D-3CE7-4041-9027-1CA7473389EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E8585133-1F25-494A-8859-87B1D93305A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_121:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "3D01EACB-9DB4-4940-A1F2-40474B24AEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_122:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D1BBB436-9F7A-4E2D-908B-D57A531B1B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B3BBCE23-9F15-45CD-859F-77ED540B51F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "053A0DA6-483C-49BB-BC7A-E624DB2C269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "447212A4-FACD-475E-A62B-60FE6504F63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB694DC0-407A-4555-8B72-DAF3C169DCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "535FF689-13A2-40C6-8706-7782038FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "843246D3-C2DA-454D-916A-AC8905E5134E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "244B7FE4-C485-4993-9810-3433C83A120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BE586AB9-9D46-4BC2-8092-51482F297410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1A06-2588-47AA-81F8-E3655F915C33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5972E930-76E2-40FD-8E7F-74E012D34E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141690-02-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-265888-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141690-02-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-265888-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-28T15:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain data structure, which allows local users to read the contents of some kernel memory locations by calling getsockname on an AF_LLC socket."
      }, {
        "lang" : "es",
        "value" : "La función llc_ui_getname en net/llc/af_llc.c del kernel de Linux v2.6.31-rc7 y anteriores no inicializa cierta estructura de datos, lo que permite leer a los usuarios locales el contenido de algunas celdas de memoria del núcleo llamando a la función getsockname a través de un socket AF_LLC."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.31",
            "matchCriteriaId" : "AE1BA972-91FE-417F-B0AD-D3067DA8C96F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2887290A-1B43-4DB9-A9D0-B0B56CD78E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4049867A-E3B2-4DC1-8966-0477E6A5D582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A2507858-675B-4DA2-A49E-00DB54700CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0A25EA55-3F1C-440C-A383-0BB9556C9508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "B2665356-4EF5-4543-AD15-67FDB851DCCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "26E7609B-B058-496D-ACDD-7F69FBDE89E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=28e9fc592cb8c7a43e4d3147b38be6032a0e81bc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jon.oberheide.org/files/llc-getsockname-leak.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9513",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/26/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36126",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=519305",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52732",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=28e9fc592cb8c7a43e4d3147b38be6032a0e81bc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jon.oberheide.org/files/llc-getsockname-leak.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/26/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=519305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG. Red Hat does not provide support for PF_LLC sockets in the Linux kernels.",
        "lastModified" : "2009-08-31T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-28T15:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on (1) an AF_APPLETALK socket, related to the atalk_getname function in net/appletalk/ddp.c; (2) an AF_IRDA socket, related to the irda_getname function in net/irda/af_irda.c; (3) an AF_ECONET socket, related to the econet_getname function in net/econet/af_econet.c; (4) an AF_NETROM socket, related to the nr_getname function in net/netrom/af_netrom.c; (5) an AF_ROSE socket, related to the rose_getname function in net/rose/af_rose.c; or (6) a raw CAN socket, related to the raw_getname function in net/can/raw.c."
      }, {
        "lang" : "es",
        "value" : "El kernel de Linux antes de v2.6.31-rc7 no inicializa ciertas estructuras de datos dentro de las funciones getname, lo que permite a usuarios locales leer el contenido de algunas celdas de memoria del núcleo llamando a getsockname en (1) un socket AF_APPLETALK, relacionado con la función atalk_getname en net/appletalk/ddp.c; (2) un socket AF_IRDA, relacionado con la función irda_getname en net/irda/af_irda.c; (3) un socket AF_ECONET, relacionado con la función econet_getname en net/econet/af_econet.c; (4) un socket AF_NETROM, relacionado con la función nr_getname en net/netrom/af_netrom.c; (5) un socket AF_ROSE, relacionado con la función rose_getname en net/rose/af_rose.c, o (6) un raw socket CAN , relacionado con la función raw_getname en net/can/raw.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.31",
            "matchCriteriaId" : "AE1BA972-91FE-417F-B0AD-D3067DA8C96F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2887290A-1B43-4DB9-A9D0-B0B56CD78E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4049867A-E3B2-4DC1-8966-0477E6A5D582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A2507858-675B-4DA2-A49E-00DB54700CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0A25EA55-3F1C-440C-A383-0BB9556C9508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "B2665356-4EF5-4543-AD15-67FDB851DCCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "26E7609B-B058-496D-ACDD-7F69FBDE89E5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=09384dfc76e526c3993c09c42e016372dc9dd22c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=17ac2e9c58b69a1e25460a568eae1b0dc0188c25",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d392475c873c10c10d6d96b94d092a34ebd4791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=80922bbb12a105f858a8f0abb879cb4302d0ecaa",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e84b90ae5eb3c112d1f208964df1d8156a538289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f6b97b29513950bfbf621a83d85b6f86b39ec8db",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36438",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37351",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9521",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc7",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/27/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/27/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/512019/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36150",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=519305",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11611",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11741",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1550.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=09384dfc76e526c3993c09c42e016372dc9dd22c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=17ac2e9c58b69a1e25460a568eae1b0dc0188c25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d392475c873c10c10d6d96b94d092a34ebd4791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=80922bbb12a105f858a8f0abb879cb4302d0ecaa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e84b90ae5eb3c112d1f208964df1d8156a538289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f6b97b29513950bfbf621a83d85b6f86b39ec8db",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/27/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/27/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/512019/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=519305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1550.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "CVE-2009-3002 describes a collection of similar information leaks that affect numerous networking protocols.\n\nThe Linux kernel as shipped with Red Hat Enterprise Linux 4 and 5 did not enable support for the AppleTalk DDP protocol, and therefore were not affected by issue (1). It was addressed in Red Hat Enterprise Linux 3 and Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1550.html and https://rhn.redhat.com/errata/RHSA-2009-1540.html respectively.\n\nThe Linux kernel as shipped with Red Hat Enterprise Linux 4, 5 and Red Hat Enterprise MRG did not enable support for IrDA sockets, and therefore were not affected by issue (2). It was addressed in Red Hat Enterprise Linux 3 via: https://rhn.redhat.com/errata/RHSA-2009-1550.html\n\nThe Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG did not enable support for the Acorn Econet and AUN protocols, and therefore were not affected by issue (3).\n\nThe Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG did not enable support for the NET/ROM and ROSE protocols, and therefore were not affected by issues (4) and (5). They were addressed in Red Hat Enterprise Linux 3 via: https://rhn.redhat.com/errata/RHSA-2009-1550.html\n\nThe raw_getname() leak was introduced in the Linux kernel version 2.6.25-rc1. The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG  therefore were not affected by issue (6).",
        "lastModified" : "2009-11-04T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-28T15:30:00.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 through 8 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer v6 a v8 permiten falsificar la barra de direcciones a atacantes remotos, a través de window.open con una URI relativa, que muestre una dirección URL arbitraria de un sitio web visitado por la víctima, como lo demuestra la visita a una web controlada por el atacante, que lanza un formulario de acceso falso para el sitio que contiene esa página."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52E757F-9B41-43B4-9D67-3FEDACA71283"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36334",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-28T15:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Avant Browser 11.7 Builds 35 and 36 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page.  NOTE: a related attack was reported in which an arbitrary file: URL is shown."
      }, {
        "lang" : "es",
        "value" : "Avant Browser v11.7 Builds 25 y 26 permiten falsificar la barra de direcciones a atacantes remotos, a través de window.open con una URI relativa, que muestra una dirección URL arbitraria de un sitio web visitado por la víctima, como lo demuestra la visita a una web controlada por el atacante, que lanza un formulario de acceso falso para el sitio que contiene esa página. NOTA: Se ha informado de un ataque relacionado en el que se muestra una URL arbitraria de tipo File:"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avant_force:avant_browser:11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1191E53A-C118-4DCF-A27E-E4C88C39E6FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-28T15:30:00.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lunascape 5.1.3 and 5.1.4 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page.  NOTE: a related attack was reported in which an arbitrary file: URL is shown."
      }, {
        "lang" : "es",
        "value" : "Lunascape v5.1.3 y v5.1.4 permiten falsificar la barra de direcciones a atacantes remotos, a través de window.open con una URI relativa, que muestra una dirección URL arbitraria de un sitio web visitado por la víctima, como lo demuestra la visita a una web controlada por el atacante, que lanza un formulario de acceso falso para el sitio que contiene esa página. NOTA: Se ha informado de un ataque relacionado en el que se muestra una URL arbitraria de tipo File:"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lunascape:lunascape:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9233B883-5C93-41CB-83BD-973BE4E53BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lunascape:lunascape:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ADC6FB9-477C-48A3-A34A-3E8D2C9D4FFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-28T15:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page."
      }, {
        "lang" : "es",
        "value" : "Maxthon Browser v2.5.3.80 Unicode permite a atacantes remotos falsificar la barra de direcciones, a través de window.open con una URI relativa, que muestre una dirección URL arbitraria en el sitio web visitado por la víctima, como lo demuestra la visita a una página controlada por un atacante, que abre un formulario de acceso falso para el sitio que contiene esa página."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxthon:maxthon_browser:2.5.3.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "371E0500-EADC-484C-8A88-C9ADA7D60087"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-28T15:30:00.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3.5.1 and SeaMonkey 1.1.17, and Flock 2.5.1, allow context-dependent attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary file: URL after a victim has visited any file: URL, as demonstrated by a visit to a file: document written by the attacker."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox v3.5.1, SeaMonkey v1.1.17 y Flock v2.5.1 permiten falsificar a atacantes remotos dependiendo del contexto la barra de direcciones a través de un window.open con una URI relativa, que muestra una URL de tipo File: arbitraria que una victima haya visitado anteriormente, como se demuestra visitando un documento de tipo file: escrito por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flock:flock:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2ADE2F3-13FC-4BC1-B3DF-60514887E530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-28T15:30:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "K-Meleon 1.5.3 allows context-dependent attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary file: URL after a victim has visited any file: URL, as demonstrated by a visit to a file: document written by the attacker."
      }, {
        "lang" : "es",
        "value" : "K-Meleon v1.5.3 permite falsificar la barra de direcciones a atacantes, dependiendo del contexto, a través de window.open con una URI relativa, para que muestre una URL de tipo file: después de que una victima haya visitado ficha URI de tipo file: , como se demuestra al acceder a un documento file: escrito por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:christophe_thibault:k-meleon:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD637248-8B51-48CE-BB20-1A7BA6B1CCD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T16:30:06.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header.  NOTE: in some product versions, the JavaScript executes outside of the context of the HTTP site."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox v3.0.13 y anteriores, v3.5, v3.6 a1 pre, y v3.7 a1 pre; SeaMonkey v1.1.17; y Mozilla v1.7.x y anteriores no bloquean de forma adecuada las URIs data: en las cabeceras Refresh de las respuestas HTTP, lo que permite a atacantes remotos realizar ataques de ejecución de secuencias de comandos en sitios cruzados (XSS) a través de vectores relativos a (1) inyectar una cabecera Refresh que contiene secuencias Javascript en una URI data:text/html p (2) introduciendo una URI data:text/html con secuencias javascript cuando se especifica el contenido de una cabecera Refresh. NOTA: en algunas versiones del producto, el javascript se ejecuta fuera del contexto del sitio HTTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.13",
            "matchCriteriaId" : "667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.6:a1_prerelease:*:*:*:*:*:*",
            "matchCriteriaId" : "A5CA287A-0263-4F6A-B685-E243D42FCFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.7:a1_prerelease:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCEA654-2A7F-4950-9FC3-015E2E4582B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.12",
            "matchCriteriaId" : "AA9F1412-B29B-4D13-AEEA-4AF7B12260D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB559BD-4BF7-417F-962F-B8971FF1614B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3315/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52999",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://websecurity.com.ua/3315/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T16:30:06.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome 1.0.154.48 and earlier, 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta does not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header.  NOTE: the JavaScript executes outside of the context of the HTTP site."
      }, {
        "lang" : "es",
        "value" : "Google Chrome v1.0.154.48 y anteriores, v2.0.172.28, v2.0.172.37 y v3.0.193.2 Beta, no bloquea adecuadamente los datos: URIs en cabeceras \"Refresh\" en respuestas HTTP, lo que permite a atacantes remotos llevar a cabo ataques de ejecución de secuencias de comandos en sitios cruzados relacionado con (1) la inyección de una cabecera \"Refresh\" que contienen secuencias JavaScript en una URI data:text/html o (2) introduciendo una URI data:text/html con secuencias JavaScript cuando se especifica el contenido de una cabecera \"Refresh\". NOTA: el JavaScript se ejecuta fuera del contexto del sitio HTTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.154.48",
            "matchCriteriaId" : "4E9FA397-22DD-448C-8CC5-93549EAD7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55D5075-D233-42D6-B1D6-77B7599650EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8FF77A-7802-4963-B532-3F16C7BB012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73576CF-76EE-42A3-9955-D7991384B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A621B1-3186-4CE2-8BCC-916027CC74CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B9D6ED9-D5C5-4CA9-84EA-8007F48CF597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F85551-EDB5-4790-8095-EFFA7DEC7F98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3315/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3315/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T16:30:06.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre does not properly block data: URIs in Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header.  NOTE: the JavaScript executes outside of the context of the HTTP site."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox v3.0.13 y anteriores, v3.5, v3.6 a1 pre y v3.7 a1 pre no bloquea adecuadamente los datos: URIs en las cabeceras Location en las respuestas HTTP, esto permite a atacantes remotos provocar ataques de secuencias de comandos en sitios cruzados (XSS) mediante vectores que están relacionados con (1) la inyección de una cabecera Location que contenga secuencias JavaScript en una URI data:text/html o (2) la introducción de una URI data:text/html con secuencias JAvaScript que especifiquen el contenido de una cabecera Location. NOTA: El JavaScript se ejecuta fuera del contexto del sitio HTTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.13",
            "matchCriteriaId" : "667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.6:a1_pre:*:*:*:*:*:*",
            "matchCriteriaId" : "C100B62E-9199-4983-AFC2-EBC55AF230BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.7:a1_pre:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5C2EED-CA12-416C-8695-18DD215B0351"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3323/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3323/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T16:30:06.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera 9.52 and earlier, and 10.00 Beta 3 Build 1699, does not properly block data: URIs in Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header.  NOTE: the JavaScript executes outside of the context of the HTTP site."
      }, {
        "lang" : "es",
        "value" : "Opera v9.52 y anteriores, y 10.00 Beta 3 Build 1699, no bloquea apropiadamente las URIs data: en las cabeceras Location en las respuestas HTTP, lo que permite realizar, a atacantes remotos, ataques de ejecución de secuencias de comandos en sitios cruzados(XSS) a través de vectores relacionados con (1) la inyección de una cabecera Location contiene secuencias de JavaScript en una URI data:text/html o (2) intrducción de una URI data:text/html con secuencias de JavaScript cuando se especifica el contenido de una cabecera Location. NOTA: el código JavaScript se ejecuta fuera del contexto del sitio HTTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.52",
            "matchCriteriaId" : "BC7CF5F1-7CB8-4E77-8462-CE1BF0591D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C35850-B79C-4EE4-A6F2-CC5D2304724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7965089-8592-47F2-958B-7DBE669BCAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1750B2D-7AC8-45CF-9879-1D0476EEE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE4473-88C0-4E28-A5B5-F7383B0E5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC41D6-73D4-44E9-87E4-E1E955B9580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5A5E5-3703-44AC-9963-A20A55002B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3E5BEF-3F29-4929-A37C-C49322B19047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0E7B5D-2568-4128-8F99-E74D24A7E991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A04906-7267-4A09-87BF-D639C7CF315B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E48C83-01AE-4A33-A004-14B99792674C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A2B78-70BD-439B-B1ED-A17FA5EF0990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623E4466-82CC-4BDD-BE25-3BB33B585547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECA190-D7D3-4248-A61E-0D87E67E3D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC4250E-E638-4015-B5EF-7B5405F7FBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.00:beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB6D630-28EC-4506-AD0D-8C9A5E7D45CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3323/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3323/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T16:30:06.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly handle javascript: URIs in HTML links within 302 error documents sent from web servers, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location HTTP response header or (2) specifying the content of a Location HTTP response header."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox v3.0.13 y anteriores, v3.5, v3.6 a1 pre, y v3.7 a1 pre; SeaMonkey v1.1.17; y Mozilla v1.7.x y anteriores no manejan de forma adecuada las URIs javascript en los enlaces HTML incluidos en los documentos de error 302 enviados desde servidores web, lo que permite a atacantes remotos asistidos por usuarios realizar un ataque de ejecución de secuencias de comandos en sitios cruzados (XSS) a través de vectores relativos a (1) inyectar una cabecera Location de respuesta HTTP o (2) especificando el contenidos de una cabecera Location de respuesta HTTP.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.13",
            "matchCriteriaId" : "667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.6:a1_pre:*:*:*:*:*:*",
            "matchCriteriaId" : "C100B62E-9199-4983-AFC2-EBC55AF230BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.7:a1_pre:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5C2EED-CA12-416C-8695-18DD215B0351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7",
            "matchCriteriaId" : "A9239E8A-8155-462A-A409-D66FF6B94B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA58BA23-4CFE-40F8-A2F4-104007E12E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F00276-9071-4B96-B49C-2E0898476874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB84CC9B-346B-4AF4-929E-D56D85960103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9420CD82-0E5F-4486-9AF8-9DCD6ED7E037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9C79AB-4ABE-49E6-BAB2-94610AE0316F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04DE7CCB-79B8-4F9B-AC14-E4A100F9E473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1444C77E-FF98-40E5-9CA9-B4C71B3C9304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B40771F-30CB-45D0-9EDE-1F13852085B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4F64F8-CCC2-47FF-9B9D-41B3BCDD513C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47315EC4-1EED-4070-A087-8E37C8FE6703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F1EB38F-CEB2-40BC-AA5D-CC539F597137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE6B0681-B96F-405C-8042-1BF2DDB41648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5436BBD2-E3FF-4558-B8F5-FFF5CA9FC045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDAEAE6-BA9F-4D40-B264-4A72930239E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9296197-0EE0-4CC0-A11F-E44E3443E990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A76ACC55-754D-4501-8312-5A4E10D053B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "347AB95F-166E-449A-82D7-BEC10257E0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8987151-0901-4547-B750-5DC470BB9CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E60BCC-6D1C-489E-9F3B-9BE42B46704F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A87ED8-9E1F-4C2C-B806-A41765081C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C795D86F-9B08-41FE-B82B-5BBB3DE6357D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "2637D552-4A3D-4867-B52A-ACCED8681AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC237C8-CFE0-4128-B549-93CD16894E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8EA79A-8426-44CF-AF13-58F7EF8B6D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "367A5D46-0FF3-4140-9478-251363822E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA58EE9-05C7-4395-A8A4-5F54BE4C5DAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656A621-BE62-4BB8-9B25-A3916E60FA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DE4889-424F-4A44-8C14-9F18821CE961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "1003D688-3EEA-45F9-BB2C-5BAB395D7678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE678D7-812D-4C55-91B0-F3AC6BE0CD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098458D4-635B-4A4D-9472-39370094E1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF63077-4E98-497D-8CE6-B84B022DB21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEC6B13-3088-4ECB-9D81-6480F439601C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "20ECA520-780A-4EF8-8C80-B7564F4148B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB559BD-4BF7-417F-962F-B8971FF1614B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3373/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506163/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3373/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506163/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T16:30:06.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QtWeb 3.0 Builds 001 and 003 does not properly block javascript: and data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains a javascript: URI, (2) entering a javascript: URI when specifying the content of a Refresh header, (3) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header, (5) injecting a Location header that contains JavaScript sequences in a data:text/html URI, or (6) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header."
      }, {
        "lang" : "es",
        "value" : "QtWeb v3.0 Builds 001 y 003 no bloquea apropiadamente las URIs javascript: y data: en las cabeceras Refresh y Location de las respuestas HTTP, lo que permite realizar a atacantes remotos ataques de ejecución de secuencias de comandos en sitios cruzados(XSS) a través de vectores  relacionados con (1) la inyección de un encabezado Refresh que contiene una URI javascript: , (2) la introducción de una URI javascript: cuando se especifica el contenido de una cabecera Refresh, (3) la inyección de una cabecera Refresh que contenga secuencias JavaScript en una URI data:text/html, (4) la introducción de URIs data:text/html con secuencias JavaScript cuando se especifica el contenido de una cabecera Refresh, (5) la inyección de una cabecera Location que contenga secuencias de JavaScript en una URI data:text/html, o (6) la introducción de una URI data:text/html con secuencias JavaScript cuando se especifica el contenido de una cabecera Location."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qtweb:qtweb:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB0F606-5A79-4A6F-A4BB-564C3763EA3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T16:30:07.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari 4.0.3 does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains a javascript: URI, (2) entering a javascript: URI when specifying the content of a Refresh header, (3) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, or (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header."
      }, {
        "lang" : "es",
        "value" : "Apple Safari v4.0.3 no bloquea URIs JavaScript: ni data: de forma adecuada en las cabeceras Refresh en las respuestas HTTP, lo que permite a atacantes remotos realizar un ataque de ejecución de secuencias de comandos en sitios cruzados (XSS) a través de vectores relativos a (1) inyectando una cabecera Refresh que contiene una URI javascript:, (2) introduciendo una URI javascript: cuando se especifica el contenido de una cabecera Refresh, (3) inyectando a una cabecera Refresh que contiene secuencias javascript en una URI data:text/html, o (4) introduciendo una URI data:text/html con secuencias javascript cuando se especifica el contenido de una cabecera Refresh."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E36485-565D-4FAA-A6AD-57DF42D47462"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T16:30:07.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Orca Browser 1.2 build 5 does not properly block data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header, (3) injecting a Location header that contains JavaScript sequences in a data:text/html URI, or (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header; and does not properly handle javascript: URIs in HTML links within 302 error documents sent from web servers, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (5) injecting a Location HTTP response header or (6) specifying the content of a Location HTTP response header."
      }, {
        "lang" : "es",
        "value" : "Orca Browser v1.2 build 5 no bloquea URIs data: en cabeceras Refresh y Location en respuestas HTTP, lo que permite a atacantes remotos realizar un ataque de ejecución de secuencias de comandos en sitios cruzados a través de vectores relativos a (1) inyectando una cabecera Refresh que contiene secuencias Javascript en URIs data:text/html, (2) introduciendo una _URI data:text/html con secuencias javascript cuando se especifica el contenidos de una cabecera Refresh, (3) inyectando una cabecera Location que contiene secuencias Javascript en una URI data:text/html o (4) introduciendo una URI data:text/html con secuencias Javascript cuando se especifica el contenido de la cabecera Location; y no maneja de forma adecuada las URIs Javascript: en los enlaces Javascript incluidos en los documentos de error 302 enviados por los servidores web, lo que provoca que atacantes remotos asistidos por usuarios realizar un ataque de ejecución de secuencias de comandos en sitios cruzados a través de vectores relativos a (5) inyección de una cabecera Location de respuesta HTTP o (6) especificando el contenido de una cabecera Location de respuesta HTTP.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orcabrowser:orca_browser:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B546ACE7-C740-4E0E-8B58-DB30D05FD375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506163/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506163/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T16:30:07.063",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Maxthon Browser 3.0.0.145 Alpha with Ultramode does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains a javascript: URI, (2) entering a javascript: URI when specifying the content of a Refresh header, (3) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, or (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header; does not properly block data: URIs in Location headers in HTTP responses, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (5) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (6) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header; and does not properly handle javascript: URIs in HTML links within (a) 301 and (b) 302 error documents sent from web servers, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (7) injecting a Location HTTP response header or (8) specifying the content of a Location HTTP response header."
      }, {
        "lang" : "es",
        "value" : "Maxthon Browser versión 3.0.0.145 Alpha con Ultramode no bloquea apropiadamente los URI javascript: y data: en encabezados Refresh en respuestas HTTP, lo que permite a los atacantes remotos conducir ataques de tipo cross-site scripting (XSS) por medio de vectores relacionados a (1) inyectar un encabezado Refresh que contiene un URI javascript:, (2) ingresando un URI javascript: al especificar el contenido de un encabezado Refresh, (3) inyectando un encabezado Refresh que contiene secuencias de JavaScript en un URI data:text/html, o (4) ingresando un URI data:text/html con secuencias de JavaScript al especificar el contenido de un encabezado Refresh; no bloquea apropiadamente los URI data: en los encabezados Location en las respuestas HTTP, lo que permite a los atacantes remotos asistidos por el usuario conducir ataques de tipo cross-site scripting (XSS) por medio de vectores relacionados a (5) inyectar un encabezado Location que contiene secuencias de JavaScript en un URI data:text/html o (6) ingresando un URI data:text/html con secuencias de JavaScript al especificar el contenido de un encabezado Location; y no maneja apropiadamente los URI JavaScript: en enlaces HTML dentro de documentos de error (a) 301 y (b) 302  enviados desde los servidores web, lo que permite a los atacantes remotos asistidos por el usuario conducir ataques de tipo cross-site scripting (XSS) por medio de vectores relacionados a ( 7) inyectar un encabezado de respuesta HTTP Location o (8) especificar el contenido de un encabezado de respuesta HTTP Location."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxthon:maxthon_browser:3.0.0.145:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "076D336E-B917-42B5-8038-82C7B0073E3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506163/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3386/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506163/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T16:30:09.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, and Internet Explorer 7 on Vista, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls createElement to create an instance of the LI element, and then calls setAttribute to set the value attribute."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6 en Windows XP SP2 y SP3, e Internet Explorer 7 en Vista, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de código Javascript que hace una llamada a createElement para crear una instancia del elemento LI, y entonces llama a setAttribute para fijar el valor del atributo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T16:30:09.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service (system crash) by referencing a crafted .eot file in the src descriptor of an @font-face Cascading Style Sheets (CSS) rule in an HTML document, possibly related to the Embedded OpenType (EOT) Font Engine, a different vulnerability than CVE-2006-0010, CVE-2009-0231, and CVE-2009-0232.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "win32k.sys en Microsoft Windows Server 2003 SP2 permite a atacantes remotos provocar una denegación de servicio (caída del sistema) referenciando a un fichero .eot manipulado en el descriptor src de una regla @font-face de una hoja de estilo en cascada (Cascading Style Sheets, CSS) en un documento HTML, posiblemente relativo a Embedded OpenType (EOT) Font Engine, es una vulnerabilidad distinta a CVE-2006-0010, CVE-2009-0231, y CVE-2009-0232.  NOTE: alguna información de estos detalles se ha obtenido de de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://milw0rm.com/sploits/2009-wwbsod.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36250",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/57016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36029",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://milw0rm.com/sploits/2009-wwbsod.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/57016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T20:30:00.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de lista negra incompleta en el plugin teximg en ikiwiki anterior a v3.1415926 y v2.x anterior a v2.53.4, permite a atacantes dependientes de contexto leer archivos de su elección a través de comando TeX manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.141592",
            "matchCriteriaId" : "5A161EE7-4B7F-43C2-ADE3-0F3FD7A333EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196439CC-B5BE-4016-B6CF-B8308002D61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE568DE-413C-4EF7-96C6-AF2D47EB36BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20FFAE6B-9EBD-461A-AF5C-BB00EA2A652F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C064545-5C87-4CC5-A9FA-379A9F4ED0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729BA91F-625A-4734-814D-EADE78A42CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "025BA9CF-1F77-4BC1-A884-3E49B23BB668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3120790-F2E2-4780-8022-B88EB326C8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF180F3A-2B55-4555-9A3B-D8C12CB52CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF68A8E1-96D7-49A5-B844-9FE7A0FE9631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1152479-FAAA-4AF5-85A8-9454C48CE087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4490706B-50FF-4126-8EB8-4F4AFDE5B2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DD7148-E3ED-4726-A7B7-E4DEB6978DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350315D5-C124-430D-BD7C-9EE5C3F4D957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA658C7-2D79-4A8D-977E-D7F4640CEAFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8892C63F-297A-4D7A-8F63-B15BAE578645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E83FBBB-0837-41EE-A56A-C837FAE6394C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E14AF144-D023-4FF1-B6B6-FF3E74D61F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDE3606-418B-4E76-97F8-655CE1679857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6877A1-D793-48A7-9187-63EA568EC854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "739EB847-21B4-4728-9F38-3925893A37A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1630A6-8578-4B0A-9F12-549EE0C42E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15FE7BEB-A9E9-476A-ABDF-663A8F69BA7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E53E42-F691-4237-AAC1-A93E35EADD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6994F418-61A4-4CB5-94FA-C7DC7A31BBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "356A3B66-637B-4429-A201-EAB0A8FD9DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11BC2505-E5EF-4CA4-B747-F74F20BFDCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.31.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CDB27DC-1B2B-4893-AFC7-71535919567B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.31.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18275BA3-A5D0-410B-9D90-B8DBDB486849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E20D04-ADEA-4773-843A-2D6BB0FC5591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76D329C-975F-4180-9102-2CAA24230C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A6C38C-6B71-4A83-B280-C1195D668DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB24A6A-D1D2-4200-ACF6-93F20AA2CEE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B998D73-576D-4942-A164-8898437815DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FBED8F-C567-4366-97E7-E5CF6A9BC479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01494227-D431-4F2B-8174-25A5C2CBC3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C26EFAF6-5DE3-4562-A831-DE9CCD40B31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "553F2BF0-0375-406F-9F6D-33E49543BC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06FBD3B4-99E3-4ED5-A49F-8747C26962BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4888637D-EBA4-4DD3-9EE9-ABA9D26799AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6F140A-2391-4663-B680-8E58FD315C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DF1E0B-250C-47C1-BC76-4F9EE90AB836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82F41174-0E9C-4A09-BAEB-D75595181334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "744A8DB6-3FD4-4891-B623-6E4AE0518867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90056C13-CF77-4BE1-A9CE-C8811ABA29C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E013025D-F390-4206-8BE6-42F5F6DBCDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C334708-7565-4E30-BEC5-75CB91B13645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E0BDA8-8EBE-4D8F-B65E-6D22C89A7F54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "502FAEEA-7E31-49A2-9F1B-79CB5D7A094B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.62.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "325CDDEF-2C66-4B9B-9B70-B4FA5D619F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B7CA1D-C4CA-45CD-B6AB-48E3CA289714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BC2691-C9B1-46C1-A3DD-D232BEB25B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE00B3B-220C-4FD0-83FC-CB235E2C91D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "984B8C95-0B58-4585-9EC8-393563DA7851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3261F3F5-BBAC-407A-BD0B-159F295D6B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FFEB95-74D2-4EF9-9816-279546590319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.69:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA175F1E-3D1F-42B1-9FA5-66187EB89670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6EA187-821B-4673-9581-FD1A877E6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAE832BA-23B5-4D10-866D-10EB86217795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:2.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA08E303-A084-4CAF-AA7D-39E3289B6514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CF7F5FD-27CB-4E7E-AF50-EAAB20DAD289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02ADB4DC-4FA7-4696-BE15-4038AA7C8440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA76343-5D08-4E79-8E83-29799E8BF9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110383CC-7DAB-4FC7-9898-92AF1CB76585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB47B7AD-40A2-466F-AF26-92DB4BF9EDCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4560DD73-D1A2-46D9-A3F7-BAC5A294B91B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D8EE30-BFBB-45C6-8B27-012E17CA3C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7374FCDB-55E7-48AC-8E38-51C20500BBE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FA5A43-6317-4510-BC00-7BCF3DB4F502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695759BE-8539-496A-AABD-2F56ACFDA0FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0566B074-7F01-4482-8F26-F08EDD4F0B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3D2C53-A15F-4FEF-A56B-A4A00C24DF39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F89322-85B0-4C8B-AB60-4577FB914D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B55BCD8-E214-4C75-86F7-247ECBEAFF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19DCEDD-AC25-48F2-B0D9-F35C67AA3A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.141:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDE6204-5CC9-4867-BD9E-9C999C1E6D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.1415:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29453740-F182-4BD1-ADD8-BF3F37D2D4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ikiwiki:ikiwiki:3.14159:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FA5E6A-F504-43DC-8021-1BE35FB25269"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ikiwiki.info/security/#index35h2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36516",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36181",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2475",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ikiwiki.info/security/#index35h2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T20:30:00.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Site Calendar 'mycaljp' plugin 2.0.0 through 2.0.6, as used in the Japanese extended package of Geeklog 1.5.0 through 1.5.2 and when distributed 20090629 or earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el plugin Site Calendar 'mycaljp' v2.0.0 hasta v2.0.6, como la utilizada en el paquete extendido de japonés de Geeklog v1.5.0 hasta v1.5.2 cuando se distribuyo el 29/06/2009 o antes, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no específicos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoshinori_tahara:mycaljp:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E265B56-01BD-439E-9066-5C1135D55E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoshinori_tahara:mycaljp:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69674298-BA2B-4B3C-847A-EE0D8F00B0C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoshinori_tahara:mycaljp:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2F3E9B-2E71-4752-9C92-A6FF80520B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoshinori_tahara:mycaljp:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44A96D41-F822-4AC5-A7CD-5F6D9A9ACCDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoshinori_tahara:mycaljp:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B0A03BD-9761-4E55-B763-87C647A27165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoshinori_tahara:mycaljp:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE857DE6-CB9A-45EA-8140-6BBCF1B8F7F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoshinori_tahara:mycaljp:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22101718-AFAD-4B6C-A8EB-067E46B45C8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.5.0:*:ja:*:*:*:*:*",
            "matchCriteriaId" : "C6FE3BFA-538B-4379-AFF3-1B2C3D4DEE30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.5.1:*:ja:*:*:*:*:*",
            "matchCriteriaId" : "2962D789-37F2-4F15-BD4E-4F5DBCE00941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.5.2:*:ja:*:*:*:*:*",
            "matchCriteriaId" : "A29526EC-7D84-4411-9715-0F64A0F44CC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN20478978/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000055.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36404",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36413",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.geeklog.jp/article.php/20090820020302431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN20478978/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000055.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.geeklog.jp/article.php/20090820020302431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T20:30:01.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in bingo!CMS 1.2 and earlier allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en bingo!CMS v1.2 y anteriores, permite a atacantes remotos secuestrar la autenticación de otros usuarios para peticiones que modifican la configuración o cambian el contenidos a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itd-inc:bingo\\!cms:*:-:commercial:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "F782FA95-6C66-4A3E-AE0E-AD4419A89C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itd-inc:bingo\\!cms:*:-:core:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "C8D7A923-B0C6-4660-A204-7FB68CBE78A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN68640473/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000058.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://osvdb.org/57425",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36458",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bingo-cms.jp/security/jvn68640473.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52838",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN68640473/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000058.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://osvdb.org/57425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bingo-cms.jp/security/jvn68640473.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T20:30:01.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka \"IIS FTP Service RCE and DoS Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en el Servicio FTP en Internet Information Services (IIS) de Microsoft versiones 5.0 hasta 6.0, permite a los usuarios autenticados remotos ejecutar código arbitrario por medio de un comando NLST (LISTA DE NOMBRES) diseñado que utiliza comodines, conllevando a la corrupción de memoria, también se conoce como \"IIS FTP Service RCE and DoS Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "D7385B58-3890-47B1-8847-F48921B46996"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*",
            "matchCriteriaId" : "9F98AE07-3995-4501-9804-FEA5A87ADFAD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "A7371547-290D-4D0D-B98D-CA28B4D2E8B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*",
            "matchCriteriaId" : "C6109348-BC79-4ED3-8D41-EA546A540C79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:itanium:*",
            "matchCriteriaId" : "87842DF1-F3AC-4585-A117-904B936D5C9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:x64:*",
            "matchCriteriaId" : "3A118DC8-CD3A-461F-867E-5174F24FBAE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:x86:*",
            "matchCriteriaId" : "1114016B-B51D-495D-96AC-A0E7992DA551"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:*",
            "matchCriteriaId" : "FFFD8C6B-7A46-484C-8701-81D58AB1C2CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:-:*:x86:*",
            "matchCriteriaId" : "62E01D64-DEAB-4858-9B39-B747728C3DA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:-:*",
            "matchCriteriaId" : "0609C246-ADCB-4B39-935F-BB3229B8B6CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "51160A46-6768-44D5-89CD-6DB9D2268A2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:-:*",
            "matchCriteriaId" : "BD6ACAD9-55E9-4DCC-BEA5-F042AD6E43B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:-:*:x64:*",
            "matchCriteriaId" : "889F98DA-4266-470B-AE3D-480BDF6BADB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:-:*:x64:*",
            "matchCriteriaId" : "08627673-D381-4481-BD04-F56599C43105"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ975191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9541",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9559",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/276653",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36189",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2481",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-053",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6080",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ975191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/276653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T20:30:01.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL (IO::Socket::SSL) 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate."
      }, {
        "lang" : "es",
        "value" : "La función verify_hostname_of_cert en la funcionalidad de verificación de certificado en IO-Socket-SSL (IO::Socket::SSL) v1.14 a la v1.25 únicamente compara el prefijo de un hostname cuando no se usa un comodín, lo que permite a atacantes remotos evitar la validación de un hostname para un certificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EEE704-744B-487E-89D0-C38F0F0F00D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50AF3CCC-A126-40C2-BDE8-A376F286A5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7922D38-6AD7-4D81-AF30-623BB8234E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.16_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760ED2EB-9255-49A4-AFE7-4DD960215BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.16_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7131102E-BEDB-4D63-9005-0EB646CAA918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.16_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064EBF4B-37EF-4334-87B4-EC4407A4F621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "288417CD-C82F-48DE-9D9F-897E3A6EB833"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEE69A2-16BF-4E7B-9985-BFDFA5354DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AED6875-A544-4608-9277-E82C5977D9EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669BA841-F8D7-4E4D-B9B5-776248A7C9D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA78DEB-D81F-4442-ABF1-37FD5226EC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BAC664-C570-4F8F-9CAB-8DEF9A3D54CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82C2F301-5CD4-4729-BC62-16B60E0EC9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75C353EA-2FCC-4B0C-A4E7-CD8E0AC89255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6CA710-EC56-46A1-9114-48E928DFFB6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cpansearch.perl.org/src/SULLR/IO-Socket-SSL-1.30/Changes",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/42893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-201101-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/28/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/29/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/31/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cpansearch.perl.org/src/SULLR/IO-Socket-SSL-1.30/Changes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/42893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-201101-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/28/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/29/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/31/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T20:30:01.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service (crash) via a link in a Yahoo IM."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no específica en Pidgin v2.6.0 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un enlace en Yahoo IM.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8321D92-B935-4C2A-81B1-5984BFF4FD57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.pidgin.im/wiki/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/19/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.pidgin.im/wiki/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/19/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of pidgin as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
        "lastModified" : "2009-09-09T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-08-31T20:30:01.140",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the \"require TLS/SSL\" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption and allows remote attackers to sniff sessions."
      }, {
        "lang" : "es",
        "value" : "protocols/jabber/auth.c en libpurple en Pidgin v2.6.0, y posiblemente otras versiones, no siguen las preferencias \"requeridas en TSL/SSL\" cuando se conectan a un servidor Jabber viejo, que no siguen las especificaciones XMPP, lo que provoca que libpurple se conecte al servidor sin el cifrado esperado y permita  a atacantes remotos poder espíar la sesión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8321D92-B935-4C2A-81B1-5984BFF4FD57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.pidgin.im/ticket/8131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.pidgin.im/viewmtn/revision/diff/312e056d702d29379ea61aea9d27765f127bc888/with/55897c4ce0787edc1e7721b7f4a9b5cbc8357279",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/24/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://developer.pidgin.im/ticket/8131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://developer.pidgin.im/viewmtn/revision/diff/312e056d702d29379ea61aea9d27765f127bc888/with/55897c4ce0787edc1e7721b7f4a9b5cbc8357279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/24/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat has released updates to correct this issue:\nhttps://rhn.redhat.com/errata/RHSA-2009-1453.html",
        "lastModified" : "2009-09-22T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-01T16:30:00.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec BrightMail Appliance, Symantec Data Loss Prevention (DLP), and other products, allows remote attackers to execute arbitrary code via a crafted .xls spreadsheet attachment."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en xlssr.dll en Autonomy KeyView XLS viewer(también conocido como File Viewer para Excel)usado en IBM Lotus Notes v5.x hasta v8.5.x, Symantec Mail Security, Symantec BrightMail Appliance, Symantec Data Loss Prevention (DLP), y otros productos, permite a atacantes remotos ejecutar código a su elección a través de una manipulación de la hoja de cálculo .xls adjunta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D5D749-546A-4655-A0BF-0A2D4E9F51A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C43E91B-492D-42E0-9C59-3DA83AF7367B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C944AEC-18C2-487E-8E0F-EC525D21EDF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D4B2601-B62F-4235-BFFD-281235737450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA83054E-5E6B-48A4-8799-5C8507BFEB68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7DEAC0E-C59B-42DB-BB81-E34C9F843486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8809E947-43E1-4D92-A5A5-63FEDBF12318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:5.0.9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780C6EC1-11FD-458C-B59F-11668BA1E466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A7F5626-EB8B-4339-9EB5-C23962DAC95A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB071DF-5C48-4FE8-8DCC-68582A3C1EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "273DF27B-9441-4925-BD7E-5709D7D059EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD51B7AD-1523-4BF4-8DFF-54D5F9A0E66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E234AD1-7202-421E-82C8-880E84876021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D037CC-1207-48E2-882E-8B236EE7138F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5059BEF2-84EB-4B5F-84F5-9E3200B068F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB71B7AA-957B-46A6-9BC9-CE23EC721189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46CF28C0-51AD-4783-B1F0-205DF64D133A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0015A2-A70E-4B0C-B59A-44F5F611293D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360A50E-C1E1-4690-874A-04CC7C1A77CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94927A9-61FD-459F-9A6D-E581A4AF505C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B32BA2-9EB7-4294-A857-226A5B1CC401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF64CA16-6C20-42E1-BA68-BD63A873BFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D7DD7B-CA90-44A5-9B7B-4A4985150689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63D40DF-C6F3-4502-9816-939265F10532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.5:*:fp2:*:*:*:*:*",
            "matchCriteriaId" : "F8B5BF9A-F8A7-4C2B-B093-8226D0ED1425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.5:*:fp3:*:*:*:*:*",
            "matchCriteriaId" : "04CB50C2-2B01-4A68-BE96-1127B9954F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4598C4A8-B19D-4562-A5B5-D3B090F0C8D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.6:*:fp2:*:*:*:*:*",
            "matchCriteriaId" : "66D334E1-9326-4D0A-8D87-572F3E6B44BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68AEB13D-C7C6-426F-8484-85EFF7245DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957BA698-9D48-4906-9FF3-584927C978B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94646433-DE15-4214-9C78-7D1DAB5A12D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3449A490-865A-4262-8482-429DEF455644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:7.0.2:*:fp1:*:*:*:*:*",
            "matchCriteriaId" : "5614CD60-7690-47E6-AEB3-FB0151EB264C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F01C5CFC-7FB8-4D29-95AC-8EF59B0C170D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692E295E-E650-42D5-AF7A-D6276C3D76E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E25625-8570-4744-A2A2-4A4FB4D8AC6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50660BA1-A24A-4DBF-AB59-1CF04FA54120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0119A252-73B1-490F-9371-06E8FDB8B979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_appliance:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF63CB53-00F5-42F5-B2AC-A0B02DB9B636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_appliance:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA56769-FBFE-4546-8672-5FB3BADF939F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_appliance:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0E09688-A7FA-496B-AA03-D211BF09FA23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:data_loss_prevention_detection_servers:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D947D4-2750-4C73-8CEA-6F9BF3DA5C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:data_loss_prevention_detection_servers:8.1.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "D804B423-8990-497F-9FB8-86E3D06F4F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:data_loss_prevention_detection_servers:8.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6A13CD3B-0529-43E4-A4F8-96B5180B0DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:data_loss_prevention_detection_servers:9.0.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "5D92BC1D-E75F-420E-A2DB-DBFC07508A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:data_loss_prevention_detection_servers:9.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "ED4D0804-7AE2-45D6-AAD5-F70C14354BBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:data_loss_prevention_endpoint_agents:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14920820-3D26-4AC4-839E-531ABA6933A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:data_loss_prevention_endpoint_agents:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA274AFE-D535-4683-964A-FBCBF2D1291E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:5.0:*:smtp:*:*:*:*:*",
            "matchCriteriaId" : "96E660E2-C0F9-499F-A01D-DB368179F28F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:5.0.0:*:smtp:*:*:*:*:*",
            "matchCriteriaId" : "5E7788BD-652E-4306-AED0-6AE7F9A07836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:5.0.1:*:smtp:*:*:*:*:*",
            "matchCriteriaId" : "A8430D5E-A8A7-4724-8A6B-B5E2CA437729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:5.0.1.181:*:smtp:*:*:*:*:*",
            "matchCriteriaId" : "D602A441-863D-4E90-A01D-57C41725D008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:5.0.1.182:*:smtp:*:*:*:*:*",
            "matchCriteriaId" : "A792A9C1-95EF-4CE2-B14F-3DEE09BFAF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:5.0.1.189:*:smtp:*:*:*:*:*",
            "matchCriteriaId" : "5D9C7B86-7F9A-4DF8-A4DF-9A7CA5991D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:5.0.1.200:*:smtp:*:*:*:*:*",
            "matchCriteriaId" : "0117D61C-DEE6-4803-9CF8-27EEBAA493CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:5.0.10:*:microsoft_exchange:*:*:*:*:*",
            "matchCriteriaId" : "5BF163AF-E470-492A-940C-B2FB37AA2322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:5.0.11:*:microsoft_exchange:*:*:*:*:*",
            "matchCriteriaId" : "95D5B1CF-6C20-4D66-9D30-631441FA953B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:5.0.12:*:microsoft_exchange:*:*:*:*:*",
            "matchCriteriaId" : "868EFAF0-F5FA-46EB-99CC-19C1DAF06954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:6.0.6:*:microsoft_exchange:*:*:*:*:*",
            "matchCriteriaId" : "0026CDBB-92E2-45DE-9637-F18224CE3E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:6.0.7:*:microsoft_exchange:*:*:*:*:*",
            "matchCriteriaId" : "12AC5934-DAC3-4866-B31F-71EC14F42CED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:6.0.8:*:microsoft_exchange:*:*:*:*:*",
            "matchCriteriaId" : "A7604B25-6AA0-4814-A8D4-780811A247B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:7.5.3.25:*:domino:*:*:*:*:*",
            "matchCriteriaId" : "07FADB30-A418-43C5-A798-4769C5350E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:7.5.4.29:*:domino:*:*:*:*:*",
            "matchCriteriaId" : "6EAB0E10-A62F-42DB-BA86-FBFCFCF0E13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:7.5.5.32:*:domino:*:*:*:*:*",
            "matchCriteriaId" : "70F1A708-9914-4875-B594-D8A9D65182D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:7.5.6:*:domino:*:*:*:*:*",
            "matchCriteriaId" : "5D04308D-D372-4760-B67F-A25DEEDF52E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:8.0:*:domino:*:*:*:*:*",
            "matchCriteriaId" : "2ABC5ED9-168A-4420-9286-179345BD89DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security_appliance:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA92128-13DD-47D8-8822-23C4CDDFB715"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security_appliance:5.0.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00BFCE1-D01F-408C-931B-A19BC472124B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security_appliance:5.0.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5F6573-0FF1-4660-A9B9-5C6696525C82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autonomy:keyview:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A31DE25-F7B5-4AEA-B870-2B852F4FD8A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36472",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36474",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21396492",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090825_00",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2389",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21396492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090825_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-01T16:30:00.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion (RIM) Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service (Internet Explorer crash) by referencing the control's CLSID in the classid attribute of an OBJECT element."
      }, {
        "lang" : "es",
        "value" : "Un cierto control ActiveX en lnresobject.dll v7.1.1.119 en el conector Research In Motion (RIM) Lotus Notes para BlackBerry Desktop Manager v5.0.0.11 permite a atacantes remotos causar una denegación de servicio (caída Internet Explorer) referenciando el CLSID de control en el atributo classid de un elemento OBJECT."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes_connector:*:*:blackberry_desktop_manager_5.0.0.11:*:*:*:*:*",
            "matchCriteriaId" : "46BA5A1F-1859-4CC0-BA0E-B28E1E9FA7B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:rim:blackberry_desktop_manager:5.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A70EE7-7BEA-47F1-A573-81FDA6F9F7CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-01T18:30:03.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for Unix allow remote attackers to execute arbitrary SQL commands via the (1) N, (2) DL, (3) O and (4) V parameters to download.php and the (5) SYSTEMID parameter to group_show.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Open Computer and Software (OCS) Inventory NG v1.02 para Unix permite a atacantes remotos ejecutar comandos SQL a su elección a través de los parámetros (1) N, (2) DL, (3) O y(4) V en download.php y el parámetro (5) SYSTEMID en group_show.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02:*:unix:*:*:*:*:*",
            "matchCriteriaId" : "1C4201BC-7C0A-4B66-9ECD-A395A5012AC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.leidecker.info/advisories/2009-05-30-ocs_inventory_ng_sql_injection.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=140&cntnt01returnid=72",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503936/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.leidecker.info/advisories/2009-05-30-ocs_inventory_ng_sql_injection.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=140&cntnt01returnid=72",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/503936/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-01T18:30:04.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire/exec/install.php and (2) ecrire/index.php, which allows remote attackers to conduct unauthorized activities related to installation and backups, as exploited in the wild in August 2009."
      }, {
        "lang" : "es",
        "value" : "SPIP v1.9 anterior v1.9.2i y v2.0.x hasta 2.0.8 no usa propiedades de control de acceso para 1) ecrire/exec/install.php y(2) ecrire/index.php, permitiendo a atacantes remotos dirigir actividades no autorizadas relacionadas con la instalación y copias de seguridad, tal como se ha explotado en Agosto de 2009."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A71331-3291-4A16-80DC-32365C9EDAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:1.9:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "324F81F8-E104-49FD-ABF5-96C9EFF42F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E65B5367-E751-40B9-B022-B10421B6E7F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:1.9.2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD35BCDB-E05F-45D7-9B2A-604A1DEF0B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:1.9.2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56F0AC27-1BDD-435F-8ED1-0AD108E83DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:1.9.2g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A29C0816-7A4E-49BE-AB9F-D6E51C5DA6C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:1.9.2h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D39BD0E-5B03-4B7B-86E4-AEDC8B9C185E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:1.9.alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAEC67D9-8D16-4943-B66F-07C269498E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B5168F84-0D94-41A6-B0A2-CA43BF6BD0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF1BEB1-2CCB-47F6-8EFB-E4F9AA6A4ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5698E04-FD77-45A1-8FBE-200897595CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1ED3E6-4FD2-43FE-A87B-FB7C39F0066E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69C6572-561B-400C-9060-55473A3F02EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F3FB07-3CA8-4A41-AAEA-9719B44DEDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4A7340-3BBE-4ABB-A7A2-6ECA951C46E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16142135-D7C6-4090-8ADC-51979C95EE13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771B6518-8EAB-4A88-ACD9-6AA8AC551511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956220B5-85C3-4C40-B6C5-99251360ADD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fil.rezo.net/secu-14346-14350+14354.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36365",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36008",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.spip-contrib.net/SPIP-Security-Alert-new-version",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://fil.rezo.net/secu-14346-14350+14354.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.spip-contrib.net/SPIP-Security-Alert-new-version",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-01T18:30:04.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remote attackers to execute arbitrary SQL commands via the systemid parameter, a different vector than CVE-2009-3040."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en machine.php en Open Computer and Software (OCS) Inventory NG v1.02.1 permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro systemid, un vector diferente que CVE-2009-3040."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7B35C5-6165-4377-ABC8-3474905F325F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2009/Aug/0143.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35311",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=147&cntnt01returnid=15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505675/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Aug/0143.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=147&cntnt01returnid=15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505675/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-02T15:30:01.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read (aka RRQ) request."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la función tftp_request en tftp.c en dnsmasq anterior v2.50, cuando --enable-tftp es usado, puede permitir a atacantes remotos ejecutar código a su elección a través de un nombre de fichero largo en un paquete TFTP, como queda demostrado en una lectura de respuesta (RRQ)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.49",
            "matchCriteriaId" : "4C214CD9-059C-4211-A20F-A9C32D96EE5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C940D03A-EAAB-4A9F-BAD9-F5B3A8B626F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF93550-7A3C-4F8F-B242-EBA90F8DA820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB34D798-1CE9-478E-ABF6-502AEB5153BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83842D26-CD1A-4880-BFB2-A29C681DEF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F2C4F7-183F-43A6-AB7E-D7A11E8FA6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5BB5AEA-8B22-4F2A-A7B2-B974475C92D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C97061-04B7-42F9-8C82-B405C3AD0614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.992:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1936D4A9-A8DF-4DCE-94CA-027C40E86E62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.996:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8954FA-4913-47A1-8FAD-A2D1E9CAF8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E34FF38A-8B3B-4299-911D-FBB0DC6AC700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DFBABB9-056D-45EB-87F6-47A25C5A0297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2263A232-EAA9-49DC-B91F-2F73C45AA68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869D7B02-6EA7-4A7D-B6CA-93BD2E057784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D90FB55-73CB-4F99-92C6-99AD49872CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE1A634-20CF-43A0-9441-E249C09D1938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE397BC5-E523-4048-8B75-A332B618C64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC86CFA8-7019-481D-B6ED-F4152DA64C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EFFFBE-15EB-4A17-A285-A7299D771391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CAF4136-4587-4C1D-B303-518820A6E17A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4F393-64A2-42AD-8CBA-80F9FBC3307A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C26CD9-9357-4275-A46B-D63A5C20EDE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CC931A-3B4D-4E0C-AB80-DCBB18260079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E80EE61-3271-4BB6-BCBD-F85492B2B865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B539B5-ACCD-4BDC-962E-7E9FCE33D263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1537C31B-FB1A-40AC-8FFF-033B3CBD236B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86965249-76A4-4963-AD92-CE244E1EC6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2B2312-A4F9-422E-89EC-687D26500B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "955C42CA-93C0-41B5-9687-1F8476BA9846"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D463C1BC-35A9-4AD7-8908-BBB293CE2FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3F0716-7898-40AC-8E25-B93CA64A04E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FB1BA4-C1F9-44F4-8048-33CC26AD1C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6730AA2-C4EE-4FE6-BA20-CBC58EDD16B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61593637-2CD7-48A1-A31C-E5DE62424B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52309F28-53FD-438C-9913-7228B8387DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B252C33B-0144-4737-B34E-761B227F9EF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C6DA43-93AC-462B-81E7-6A6819AF8988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BFBF5E9-7287-4B1D-AD78-0E30A5E2F0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58DB4CAB-2ED9-473A-8B36-FA4F941A8281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644F05EE-9019-4BD8-9F2C-5DEF2E8FE486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07A3613F-A4FC-4643-A155-27A6BAB890C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F74BAF2-F875-4394-9447-9201520E65A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96141817-BC07-4643-8E57-63445E65F720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C391DF4E-9FA3-44FE-AF61-52461EC209C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F06E581B-2A84-4145-91DC-2B9D4ADC227B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC75365-A06A-4EF2-A54D-2595B480C9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34412174-A7A5-4D8A-8D04-BB187594852B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC0DDCD-5AE5-4F4C-9C17-97803CCB8810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FAD4A7-FB21-4B37-9403-09D2CCF68888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A05414-B0DC-4D7B-B542-ACF407822EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C8F897-1A9F-4D25-A42B-8F31DD14E2C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5505D0A5-9D21-4563-81AA-7CAB3D369514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC53D53-4652-40D4-8F9A-D704BCEABDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ADECE43-F034-43E5-AA84-3EB336877DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F10EE3-93C4-4FF5-874D-BEDD9E3F3A93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0603A8CB-3096-4A68-8B9E-4512A9E8D210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C29425C5-EBDF-4092-8A47-9D0A00122B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36FDAB2B-740B-4AA8-AF48-DB7FA69E5F9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED55642-B6EA-437E-9DA3-23A77C3D2131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65412752-9C17-4DAC-A623-FA6AAF36A303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB334E27-499F-4C42-BDA7-3E62EE7CE562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE126DF-AF32-4146-82D0-64D7423155DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6ACF5F-43D6-442E-9846-CCCF37DB4F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8995A4B1-C576-443B-BA96-6FC39E63A7BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1AF984-B7BA-4F1A-BDA2-DBF66E3FB320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F34176B-9712-4F36-8C4F-B2FAD72B4441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F978EB99-7E43-4E2D-92B5-F09AFBB80949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15AC9BA-102F-401B-A7C7-D2B1AF81F795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DE877B-54A3-4631-ABA8-29BAB4D3DD6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE68B29-59F7-443A-A185-A11DE153D969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00A857D2-A159-4577-AF8B-51742256DC59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09679031-5CDD-46DC-9FD9-7C3459775D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DE3027-9521-491F-B982-402D191214EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF13585-74CE-4B62-BB29-8F7E5FABB66B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2ECBD5-AF65-402E-80FE-BAF1144B3C29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "558DDC2F-DAF6-42BE-B36A-D998EBADBC95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/content/dnsmasq-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1238.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36121",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-827-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=519020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2010-0095.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/content/dnsmasq-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-827-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=519020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2010-0095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-02T15:30:01.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option."
      }, {
        "lang" : "es",
        "value" : "La función tftp_request en tftp.c en dnsmasq en versiones anteriores a la 2.50, cuando se usa --enable-tftp, permite a atacantes remotos provocar una denegación de servicio (referencia a un puntero nulo y caída del demonio) mediante una petición de lectura TFTP (alias RRQ) con una opción blksize malformada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.49",
            "matchCriteriaId" : "4C214CD9-059C-4211-A20F-A9C32D96EE5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C940D03A-EAAB-4A9F-BAD9-F5B3A8B626F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF93550-7A3C-4F8F-B242-EBA90F8DA820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB34D798-1CE9-478E-ABF6-502AEB5153BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83842D26-CD1A-4880-BFB2-A29C681DEF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F2C4F7-183F-43A6-AB7E-D7A11E8FA6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5BB5AEA-8B22-4F2A-A7B2-B974475C92D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C97061-04B7-42F9-8C82-B405C3AD0614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.992:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1936D4A9-A8DF-4DCE-94CA-027C40E86E62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:0.996:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8954FA-4913-47A1-8FAD-A2D1E9CAF8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E34FF38A-8B3B-4299-911D-FBB0DC6AC700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DFBABB9-056D-45EB-87F6-47A25C5A0297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2263A232-EAA9-49DC-B91F-2F73C45AA68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869D7B02-6EA7-4A7D-B6CA-93BD2E057784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D90FB55-73CB-4F99-92C6-99AD49872CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE1A634-20CF-43A0-9441-E249C09D1938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE397BC5-E523-4048-8B75-A332B618C64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC86CFA8-7019-481D-B6ED-F4152DA64C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EFFFBE-15EB-4A17-A285-A7299D771391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CAF4136-4587-4C1D-B303-518820A6E17A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4F393-64A2-42AD-8CBA-80F9FBC3307A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C26CD9-9357-4275-A46B-D63A5C20EDE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CC931A-3B4D-4E0C-AB80-DCBB18260079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E80EE61-3271-4BB6-BCBD-F85492B2B865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B539B5-ACCD-4BDC-962E-7E9FCE33D263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1537C31B-FB1A-40AC-8FFF-033B3CBD236B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86965249-76A4-4963-AD92-CE244E1EC6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2B2312-A4F9-422E-89EC-687D26500B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "955C42CA-93C0-41B5-9687-1F8476BA9846"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D463C1BC-35A9-4AD7-8908-BBB293CE2FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3F0716-7898-40AC-8E25-B93CA64A04E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FB1BA4-C1F9-44F4-8048-33CC26AD1C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6730AA2-C4EE-4FE6-BA20-CBC58EDD16B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61593637-2CD7-48A1-A31C-E5DE62424B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52309F28-53FD-438C-9913-7228B8387DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B252C33B-0144-4737-B34E-761B227F9EF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C6DA43-93AC-462B-81E7-6A6819AF8988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BFBF5E9-7287-4B1D-AD78-0E30A5E2F0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58DB4CAB-2ED9-473A-8B36-FA4F941A8281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644F05EE-9019-4BD8-9F2C-5DEF2E8FE486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07A3613F-A4FC-4643-A155-27A6BAB890C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F74BAF2-F875-4394-9447-9201520E65A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96141817-BC07-4643-8E57-63445E65F720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C391DF4E-9FA3-44FE-AF61-52461EC209C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F06E581B-2A84-4145-91DC-2B9D4ADC227B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC75365-A06A-4EF2-A54D-2595B480C9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34412174-A7A5-4D8A-8D04-BB187594852B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC0DDCD-5AE5-4F4C-9C17-97803CCB8810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FAD4A7-FB21-4B37-9403-09D2CCF68888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A05414-B0DC-4D7B-B542-ACF407822EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C8F897-1A9F-4D25-A42B-8F31DD14E2C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5505D0A5-9D21-4563-81AA-7CAB3D369514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC53D53-4652-40D4-8F9A-D704BCEABDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ADECE43-F034-43E5-AA84-3EB336877DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F10EE3-93C4-4FF5-874D-BEDD9E3F3A93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0603A8CB-3096-4A68-8B9E-4512A9E8D210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C29425C5-EBDF-4092-8A47-9D0A00122B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36FDAB2B-740B-4AA8-AF48-DB7FA69E5F9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED55642-B6EA-437E-9DA3-23A77C3D2131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65412752-9C17-4DAC-A623-FA6AAF36A303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB334E27-499F-4C42-BDA7-3E62EE7CE562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE126DF-AF32-4146-82D0-64D7423155DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6ACF5F-43D6-442E-9846-CCCF37DB4F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8995A4B1-C576-443B-BA96-6FC39E63A7BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1AF984-B7BA-4F1A-BDA2-DBF66E3FB320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F34176B-9712-4F36-8C4F-B2FAD72B4441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F978EB99-7E43-4E2D-92B5-F09AFBB80949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15AC9BA-102F-401B-A7C7-D2B1AF81F795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DE877B-54A3-4631-ABA8-29BAB4D3DD6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE68B29-59F7-443A-A185-A11DE153D969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00A857D2-A159-4577-AF8B-51742256DC59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09679031-5CDD-46DC-9FD9-7C3459775D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DE3027-9521-491F-B982-402D191214EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF13585-74CE-4B62-BB29-8F7E5FABB66B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2ECBD5-AF65-402E-80FE-BAF1144B3C29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:2.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "558DDC2F-DAF6-42BE-B36A-D998EBADBC95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/content/dnsmasq-vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1238.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-827-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=519020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2010-0095.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/content/dnsmasq-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-827-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=519020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2010-0095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0200",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-09-02T17:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en en OpenOffice.org (OOo)anteriores v3.1.1 permite a atacantes remotos ejecutar código de su elección a través de registros manipulados en la tabla de documentos de un documento Word, desencadenando un desbordamiento basado en pila."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "9CD78E51-0BF4-463C-8A16-C55974B6D419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.0-ru:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E740A1-6BF3-4AAF-904F-96A4EE2C0620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48652F8C-2CC8-4A71-B21D-FA322B443F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E28599C-D1DD-457E-96AF-148F767BAF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9680C-1292-441E-BE3F-F2E8DA61EEF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B207A9D-9C22-47FA-AEED-9BEBD399B72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC7AB3-1C64-4EC3-AA05-C75AE3886B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C12EF2-3946-4468-B3D8-FFFCB3480C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A7292C24-BEF1-4D3C-872D-E1F0C4D85FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E63C5EC4-C870-4498-99EB-B3498EB76DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A33E7146-7BB6-4C50-9FC4-2EA1207FAC28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D519A561-5B82-4485-89F5-B448777D4B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3CA2D68-D190-43B7-93CD-266EEAA9E5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A1204A-BA46-46BF-9E1F-BACFA84D3761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738D5F15-A9D2-4CB3-8D78-685AB805DD7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E697B8A3-447B-4D7B-A02B-191119453CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.9.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BCAC00A-4A0D-4220-8C81-644F5FEE7FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.9.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "515605F8-168D-4364-B986-06EB751DAEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.9.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F74D363-A6E4-4913-8966-2DB49D329FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.9.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19769E9A-17CE-4D74-B43F-9EB5FF388454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.9.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0839CC56-0C66-4143-8B98-38CE94314458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.9.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0C9A7D-CA5D-4D36-9A5D-611ACF78D328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.9.104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "063368CB-679D-408D-BE54-EB7244CBE573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.9.113:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BFADAF-0A5C-40EF-B6F0-716A4937B81C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.9.118:*:*:*:*:*:*:*",
            "matchCriteriaId" : "833EFDA8-165D-4224-9A3A-CD8DE9BDA17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.9.122:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E3C9B5C-722C-42A0-BFE8-B8575CA01682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.9.130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93A102A-A73B-4324-A7DD-7E31EC74AE1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.9.156:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75B93365-B4F3-407B-8302-C97CF1127201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.9.680:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BC39728-FC54-4E12-9BB3-6EBB7228C96C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45DD57AC-8CA4-48DB-90F9-2D7260AB7650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "746D96DA-2292-4264-BCEA-153C3AA8FCDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24EFAF1D-6A29-4718-A875-7CFC2C9753A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C065AAB-58E3-4312-AD74-A3E103AC73DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.0.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "36C501B2-4947-445E-9AA5-62BD5E642584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.0.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FEFD553D-2522-4CBA-AAF6-747FEB586212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9487A325-308D-442A-89A9-E8650925F43F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B493F3-833A-47E9-AB60-BE2D635EF8AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66D86258-594A-4843-9B7E-6C25B3881BC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.1.152:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63531F85-93DC-4DC6-ACA7-04A46DDC580F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.1.154:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573DAEB-1D0D-4549-87E4-22EFDD62F6F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F14135-C9B1-481E-8A2F-5010F8174ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54678E59-299F-4236-86C4-95F5B68C11D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443F587C-2D08-45F8-80AC-60F288D2556C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC884B82-CEF3-47B7-A578-B502AD52DBF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51167FA-13DD-46DE-AC16-A2AB2A315110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "437E06E4-019B-4AFF-9D66-AE0A635B9A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.4.1:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "F8F3702B-7F00-48A2-90A7-7FADF083A523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607C9D74-188D-4356-A16D-FAA440A2E951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:605b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC1EEFE-F5FF-42AA-9286-83D61E428733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:609:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ADAEDA-5EDC-4A75-9B85-4BF955165E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:614:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA26C74A-C5D0-4D73-ADDE-A3F0B072D3C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:619:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB979FC-3722-4E96-AF69-0FECA7D7AB77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:627:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DD2151-F5E2-49D7-80D8-B3967DE1054F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:633:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91938F63-3F7C-4CCC-95D5-F4BC5E25555A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:638:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1AAB61-1476-4058-9268-718D272D8130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:638c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C3311B-CFB8-4397-9524-58D81BCBBF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:641b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B61A6A83-6B46-4BF4-84E5-0E715056A20D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:641d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D186B89-CA3B-4566-9734-602055BAE5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:643:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2A53AE-6901-4939-B712-79B17F3C5477"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://development.openoffice.org/releases/3.1.1.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/35036",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36750",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/60799",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-26/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263508-1",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020715.1-1",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1880",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:035",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:091",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:105",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.openoffice.org/security/cves/CVE-2009-0200-0201.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506194/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36200",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2490",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10881",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://development.openoffice.org/releases/3.1.1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/60799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-26/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263508-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020715.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openoffice.org/security/cves/CVE-2009-0200-0201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506194/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0201",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-09-02T17:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via unspecified records in a crafted Word document, related to \"table parsing.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en OpenOffice.org (OOo) en versiones anteriores a la 3.1.1 puede permitir atacantes remotos ejecutar código de su elección mediante registros no especificados en un documento de Word manipulado, en relación con \"table parsing.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "9CD78E51-0BF4-463C-8A16-C55974B6D419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3CA2D68-D190-43B7-93CD-266EEAA9E5CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A1204A-BA46-46BF-9E1F-BACFA84D3761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738D5F15-A9D2-4CB3-8D78-685AB805DD7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E697B8A3-447B-4D7B-A02B-191119453CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45DD57AC-8CA4-48DB-90F9-2D7260AB7650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C065AAB-58E3-4312-AD74-A3E103AC73DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9487A325-308D-442A-89A9-E8650925F43F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B493F3-833A-47E9-AB60-BE2D635EF8AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66D86258-594A-4843-9B7E-6C25B3881BC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F14135-C9B1-481E-8A2F-5010F8174ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54678E59-299F-4236-86C4-95F5B68C11D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443F587C-2D08-45F8-80AC-60F288D2556C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC884B82-CEF3-47B7-A578-B502AD52DBF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51167FA-13DD-46DE-AC16-A2AB2A315110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "437E06E4-019B-4AFF-9D66-AE0A635B9A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:2.4.1:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "F8F3702B-7F00-48A2-90A7-7FADF083A523"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://development.openoffice.org/releases/3.1.1.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/35036",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36750",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/60799",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-27/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263508-1",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020715.1-1",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1880",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:035",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:091",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:105",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.openoffice.org/security/cves/CVE-2009-0200-0201.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506195/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36200",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022798",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2490",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10726",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://development.openoffice.org/releases/3.1.1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/60799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2009-27/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263508-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020715.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openoffice.org/security/cves/CVE-2009-0200-0201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506195/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-02T17:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."
      }, {
        "lang" : "es",
        "value" : "src/network/ssl/qsslcertificate.cpp en Nokia Trolltech Qt v4.x no gestiona adecuadamente el carácter '\\0'en un nombre de dominio en el campo Subject Alternative Name field de un certificado X.509, lo cual permite a atacantes hombre-en-el-medio (man-in-the-middle) suplantar servidores SSL a su elección a través de certificados manipulados expedidos por una Autoridad de Certificación legítima, una cuestión relacionada con CVE-2009-2408."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C966DAAB-74E1-4594-9CE7-5A1A60F5061E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51BFA7D-281E-49ED-9A4B-60AD5143C4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A38B91E-698F-4638-BC3B-BD02F3313B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7629BAB0-5077-4B82-9F11-B228E8EAFA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76366D45-3604-49D1-BD97-8A9FACEA2171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEEF60A1-5FF0-465F-A872-62F80899F870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D5386EE-376B-4773-8687-5314BFF35E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ACE447E-BFBC-4059-9786-F8E5F512AEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC6465-B459-410E-A5C5-EBFF5C866009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF48233D-EFFE-40A1-B50A-F2184D9CF325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610017B4-3C0A-4A59-82A1-4E20BCF786E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D848BD49-3C88-4458-B8AB-AAD8DEB790BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A12D978-B6FF-4C67-97D4-91A285C47813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBD073E-F3E0-4273-81E9-AF010B711F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D58ACBA-7DF3-403A-AC0E-94749383C750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59D6E752-3B2E-4A95-A76A-3326CD490EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A27E4EC-9573-4C82-9B78-244DB0B06FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678A25E8-57E3-4E0C-9B24-C68F11F108BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D16BB8CE-3871-4DFA-84BB-C089894437D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "965B37FD-E22F-4AA7-BDC2-147A9962CFD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE12FD7-2FB2-444A-A660-86294646F8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA4B9F55-4BFF-4FD3-A8BC-842B0467DCD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA805A7-7C62-49FD-B9A2-F81C981691C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5596442-5608-439B-8BE6-53A70F20C079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29FD745E-4B61-417F-BC66-386877E75351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B74E5F5-CEE1-47B1-BE84-7F1C45D4FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "82A767D8-6194-4ED5-B9BE-2A14541C141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "874E217C-98AC-4F0B-B120-D721164912CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3051F46B-E301-4DF7-A89B-4E8495617888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8BED3D-E6E9-4A7F-A186-DD7DC20706D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C5CFCD4-6CB1-489D-9619-B0169EA1719C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2D2DA2-4D77-4396-97A7-D4ED0F633E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC1BC2C-6D99-463F-9326-AF9B468E03F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "342A67CF-B332-46D1-A3FF-604552953C66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9239A893-506A-4853-8B00-FCDE5EC3E5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6196C5-BB95-447A-B610-4765AB702F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E398049-C78A-452C-9FBF-E32DC86BDBD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B307395A-36B6-4F54-92C9-D732580F3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D0CB6E-5275-4D51-81F1-84D456F936B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214A1125-FBE9-433D-8B05-10595CD59F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7CC6B1-7E40-4D6A-94CF-7412EA3F8534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "062A62AA-EC5B-4D8E-9337-D25DF4FE56FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://qt.gitorious.org/qt/qt/commit/802d8c02eaa0aa9cd8d0c6cbd18cd814e6337bc6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36536",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36702",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-829-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2499",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://qt.gitorious.org/qt/qt/commit/802d8c02eaa0aa9cd8d0c6cbd18cd814e6337bc6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-829-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of qt and qt4 as shipped with Red Hat Enterprise Linux 3, 4, or 5.  Affected code was introduced upstream in version 4.3.",
        "lastModified" : "2009-09-03T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2968",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-02T17:30:00.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in a support component in the web interface in VMware Studio 2.0 public beta before build 1017-185256 allows remote attackers to upload files to arbitrary locations via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en un componente de apoyo en la interfaz web en VMware Studio 2.0 public beta en versiones anteriores a la build 1017-185256 permite a atacantes remotos subir ficheros a ubicaciones de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:studio:2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9B713DE4-B9A1-4556-A72F-A00AD2C2F6ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000064.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506191/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0011.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/developer/studio/studio20/release_notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2501",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000064.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506191/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/developer/studio/studio20/release_notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-02T17:30:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tty_ldisc_hangup function in drivers/char/tty_ldisc.c in the Linux kernel 2.6.31-rc before 2.6.31-rc8 allows local users to cause a denial of service (system crash, sometimes preceded by a NULL pointer dereference) or possibly gain privileges via certain pseudo-terminal I/O activity, as demonstrated by KernelTtyTest.c."
      }, {
        "lang" : "es",
        "value" : "La función tty_ldisc_hangup en el archivo drivers/char/tty_ldisc.c en el kernel de Linux versiones 2.6.31-rc anteriores a 2.6.31-rc8, permite a los usuarios locales causar una denegación de servicio (bloqueo de sistema, a veces precedido por una desreferencia de puntero NULL) o posiblemente alcanzar privilegios por medio de cierta actividad de I/O pseudoterminal, como es demostrado por el archivo KernelTtyTest.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:rc7:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.31",
            "matchCriteriaId" : "36B533F1-9794-41F4-BEF6-B923232B0C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACBB194-1D24-464A-B79C-44B8127EAD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0138807-6313-4A3F-AB5A-4B7D4A9BE287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA2227-F259-499D-BF50-5074B1E7DD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A896D0-032C-4467-9D57-E47E8C612704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A415FECF-89CC-4D71-B1BF-6A678D32599D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F77E54-5F4A-4D47-8DE8-097B4BBC7944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752148FC-1594-4108-AE0F-C5145B978454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09546671-E75D-4F50-9D86-DFDDAC9DC5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6964925C-4394-4E82-976B-770A99E74F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8C909E-02D7-4B29-AA68-897BD0200B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27430190-EB83-43C5-9584-4F65CF65151A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386B13F-9D7C-45F8-B86A-886384144A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67A63E8-837E-4162-999E-3B3DAAE57C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A701E87D-B807-426E-9CD4-6721DBCABE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F6E506-EC0A-4784-BDA3-B7B5CD938B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFA0277-B491-4BB1-88DC-85362F0A689C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE922924-6496-4D24-94A6-8EDD431A4568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E55450-F6D9-483C-9CC8-E651E5A12AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC40B6DE-09D9-422B-965B-7EB9F6661DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91170B40-4D25-4E40-8F0B-DBC1AE217F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E28B8B9-B832-4D77-BE1A-BB5D8A678678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4049867A-E3B2-4DC1-8966-0477E6A5D582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A2507858-675B-4DA2-A49E-00DB54700CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "26E7609B-B058-496D-ACDD-7F69FBDE89E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5c58ceff103d8a654f24769bb1baaf84a841b0cc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2009/8/20/21",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/8/20/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/8/20/68",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/31/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/03/6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/03/7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36191",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5c58ceff103d8a654f24769bb1baaf84a841b0cc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lkml.org/lkml/2009/8/20/21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/8/20/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/8/20/68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/31/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/03/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/03/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG, as they do not contain a backport of the tty ldisc rewrite (upstream commits 65b770468e98 and cbe9352fa08f).",
        "lastModified" : "2009-09-03T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-02T17:30:00.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera before 10.00 does not properly handle a (1) '\\0' character or (2) invalid wildcard character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority."
      }, {
        "lang" : "es",
        "value" : "Opera anterior v10.00 no maneja apropiadamente (1) caracter '\\0' o (2)el carácter comodín invalido en el nombre de dominio en el campo Common Name (CN) de un certificado X.509, lo cual permite a atacantes hombre-en-el-medio (man-in-the-middle) suplantar servidores SSL a su elección a través de certificados manipulados expedidos por una Autoridad de Certificación legítima."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:beta3:*:*:*:*:*:*",
            "versionEndIncluding" : "10.00",
            "matchCriteriaId" : "ECEF9B68-A095-4FE2-8270-EAE060034064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F892EEF-54EC-4EC0-84B3-BD5C216AED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089BEFE3-24B2-4C73-BA25-7C905ED68A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "76AECDD0-C14D-4A68-AF2E-1C41A51089EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D888C22C-41F9-427D-9249-F010891DA48E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FAD06C-830A-4CB6-B9AF-7E093B64B69B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5366D587-7E77-4288-AB31-48108D04E0B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFFC44-A329-4FA5-B57C-FA8892F8226B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9241CFD0-9E61-487F-B076-2D7B8ACEA381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB49750B-DAA1-4417-8384-1F4D47F2227D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1099D38B-82EC-43C9-9DF5-D5EDC19834DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D64030-1877-4F29-8340-93DB6E0F1F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "85184E8A-C42D-4CBD-ACB4-B58752C305D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DA682571-536B-4CD9-A820-47E897B01480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "298457B8-051B-46D0-81B4-C5B63B69EB98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D4BC07-C37E-4F99-8DEA-54A45250050A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECFBC71-7814-4A24-A918-C593673727B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "57824075-E3F7-4B23-B4D6-8417C3147085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "FE078F27-6FC1-466C-8331-A89F8B6FE0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "5839EB88-DF5E-4AB0-899B-DF9F72F5F442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1865A4-E038-4A1C-877D-5A3CFA9576BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "93966A66-4332-4E76-9B1A-2BBF10AF0ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA91E77-301C-48F6-9A57-D5FDCEF743BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49DDEF-681C-4A34-9FF8-17249C42842D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF365891-F3FA-4740-94B2-01F85254A2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42B4261-C511-4F3A-8596-6BD4E343DC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2F38FE-7E98-48B2-B0B2-35312368B21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "63687D75-860D-4A36-B6BB-45BD4268B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BD500741-CF39-4F0C-9F96-6CBDFF8973D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*",
            "matchCriteriaId" : "359941FD-A5CE-43C1-AA76-C1B79BCB08C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9AC78A-CA47-476D-935E-67932BAB98A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E9662C-441F-4AB2-AC4C-30F31C32949A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D681B3-73E6-4257-84B4-DE83F6D659B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E5F2A5-F50F-4085-AB7D-8C91121A429A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E90912E-0CF8-404B-9E86-461497C65A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E19DD71-9447-4946-931F-4866537C8BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54075890-6E0C-4AB7-8BD5-2023419CC251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABC3435-77CD-4591-8282-7ADA60225CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C35850-B79C-4EE4-A6F2-CC5D2304724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "50B797C8-3290-4278-9D4B-A15A14FB8D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEC078C-A8F4-471B-A367-59A86B78590D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E10F658D-D2E4-4789-8172-F8842C3EEA05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81687D99-7444-4205-A7BE-992CC758675F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75C4301-68E9-4A10-B9C5-711252BF629B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC690371-3326-421E-8BAC-14F48840671B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E20418A7-1FA7-45EF-99B5-12D283EA6CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE50982-8026-466C-9F51-867425C9986F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD889EC7-E5D2-4137-B85C-86D7DB5CED27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "97452A26-7231-43BE-B70E-B8D05365CAB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DBA733-467C-4505-8199-DD25A5FFBF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B332FF1C-731D-454C-AA9E-3534040F09E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7965089-8592-47F2-958B-7DBE669BCAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1750B2D-7AC8-45CF-9879-1D0476EEE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBAA39D-01A0-4B6B-926B-C36C238E5258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE4473-88C0-4E28-A5B5-F7383B0E5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9754B270-E01D-415E-9A91-09ECB9B82B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D4682E92-E5E7-4351-959E-25A79CA4271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC41D6-73D4-44E9-87E4-E1E955B9580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5A5E5-3703-44AC-9963-A20A55002B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3E5BEF-3F29-4929-A37C-C49322B19047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0E7B5D-2568-4128-8F99-E74D24A7E991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A04906-7267-4A09-87BF-D639C7CF315B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "76C58A91-23BA-4336-A81B-B7FDFAF6CA91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6E40C4-FA29-4D7A-9018-44154503A68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E48C83-01AE-4A33-A004-14B99792674C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A2B78-70BD-439B-B1ED-A17FA5EF0990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623E4466-82CC-4BDD-BE25-3BB33B585547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0002A4-8A90-471C-9813-F648D53E4F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECA190-D7D3-4248-A61E-0D87E67E3D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A15E0FA-5570-4C5F-B087-38591D9EBABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9F72B1-F398-4E07-8652-2042ADDB8414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA2F504-6690-4AAD-97A6-6487E450C92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B927D3-D766-4D53-9870-15A7184E4C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FE202A-E068-4ECE-B61D-230EFF0E60B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B43E22F-D894-4763-BF55-C9B77911C8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4218D36C-CCE7-443B-842B-AA1A2C865734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "3311565E-3971-416B-AC9C-6CF9F4EF0F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC4250E-E638-4015-B5EF-7B5405F7FBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B7AA6F-9918-4356-894C-72833B791201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.00:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "85DB12A2-D43F-47BE-9719-466BE967E30E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.00:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "F12E0FE8-3982-453B-9C01-ABB2DE96866F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.00:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA76A537-6A1B-41D8-A923-24DC77F92E0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/support/kb/view/934/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/support/kb/view/934/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-02T17:30:01.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted server certificate."
      }, {
        "lang" : "es",
        "value" : "opera anterior a v10.00 confía en los certificados raíz X.509 firmados con el algoritmo MD2, lo que facilita a atacantes hombre-en-el-medio (Man-in-the-middle) suplantar cualquier servidor SSL a través de un certificado de servidor manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:beta_3:*:*:*:*:*:*",
            "versionEndIncluding" : "10.00",
            "matchCriteriaId" : "9D8253AD-F98A-4110-AC5B-ED979F97CFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C35850-B79C-4EE4-A6F2-CC5D2304724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7965089-8592-47F2-958B-7DBE669BCAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1750B2D-7AC8-45CF-9879-1D0476EEE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE4473-88C0-4E28-A5B5-F7383B0E5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC41D6-73D4-44E9-87E4-E1E955B9580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5A5E5-3703-44AC-9963-A20A55002B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3E5BEF-3F29-4929-A37C-C49322B19047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0E7B5D-2568-4128-8F99-E74D24A7E991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A04906-7267-4A09-87BF-D639C7CF315B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E48C83-01AE-4A33-A004-14B99792674C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A2B78-70BD-439B-B1ED-A17FA5EF0990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623E4466-82CC-4BDD-BE25-3BB33B585547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECA190-D7D3-4248-A61E-0D87E67E3D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC4250E-E638-4015-B5EF-7B5405F7FBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B7AA6F-9918-4356-894C-72833B791201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14200693-2B22-42BF-9917-FF4B541D9188"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/support/kb/view/933/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/support/kb/view/933/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-02T17:30:01.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera before 10.00 does not check all intermediate X.509 certificates for revocation, which makes it easier for remote SSL servers to bypass validation of the certificate chain via a revoked certificate."
      }, {
        "lang" : "es",
        "value" : "Opera anterior v10.00 no chequea todos los certificados X.509 de revocación, lo que hace que los servidores remotos SSL superen fácilemente la validación del certificado a través de certificados revocados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.00",
            "matchCriteriaId" : "72795166-DE8D-400D-B5A5-82839ED19708"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/1000/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/1000/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/1000/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/1000/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/1000/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/support/kb/view/929/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6357",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/support/kb/view/929/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-02T17:30:01.140",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera before 10.00, when a collapsed address bar is used, does not properly update the domain name from the previously visited site to the currently visited site, which might allow remote attackers to spoof URLs."
      }, {
        "lang" : "es",
        "value" : "Opera anterior a v10.00, cuando se usa una dirección colapsada en la barra, no actualiza adecuadamente el nombre de dominio del sitio web previo al sitio web actual, lo que podría permitir a atacantes remotos suplantar URLs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:beta_3:*:*:*:*:*:*",
            "versionEndIncluding" : "10.00",
            "matchCriteriaId" : "9D8253AD-F98A-4110-AC5B-ED979F97CFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C35850-B79C-4EE4-A6F2-CC5D2304724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7965089-8592-47F2-958B-7DBE669BCAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1750B2D-7AC8-45CF-9879-1D0476EEE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE4473-88C0-4E28-A5B5-F7383B0E5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC41D6-73D4-44E9-87E4-E1E955B9580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5A5E5-3703-44AC-9963-A20A55002B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3E5BEF-3F29-4929-A37C-C49322B19047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0E7B5D-2568-4128-8F99-E74D24A7E991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A04906-7267-4A09-87BF-D639C7CF315B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E48C83-01AE-4A33-A004-14B99792674C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A2B78-70BD-439B-B1ED-A17FA5EF0990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623E4466-82CC-4BDD-BE25-3BB33B585547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECA190-D7D3-4248-A61E-0D87E67E3D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC4250E-E638-4015-B5EF-7B5405F7FBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B7AA6F-9918-4356-894C-72833B791201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14200693-2B22-42BF-9917-FF4B541D9188"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/support/kb/view/930/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/support/kb/view/930/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-02T17:30:01.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the \"INPUT TYPE=file\" functionality, which allows remote attackers to trick a user into uploading an unintended file via vectors involving a \"dropped file.\""
      }, {
        "lang" : "es",
        "value" : "Opera anterior a la v10.00 sobre Linux, SOlaris y FreeBSD no implementa adecuadamente la funcionalidad \"INPUT TYPE=file\", lo que permite a atacantes remotos engañar al usuario para que suba un archivo a través de vectores que involucran un \"archivo para descargar\" (dropped file)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:beta3:*:*:*:*:*:*",
            "versionEndIncluding" : "10.00",
            "matchCriteriaId" : "ECEF9B68-A095-4FE2-8270-EAE060034064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F892EEF-54EC-4EC0-84B3-BD5C216AED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089BEFE3-24B2-4C73-BA25-7C905ED68A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "76AECDD0-C14D-4A68-AF2E-1C41A51089EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D888C22C-41F9-427D-9249-F010891DA48E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FAD06C-830A-4CB6-B9AF-7E093B64B69B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5366D587-7E77-4288-AB31-48108D04E0B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFFC44-A329-4FA5-B57C-FA8892F8226B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9241CFD0-9E61-487F-B076-2D7B8ACEA381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB49750B-DAA1-4417-8384-1F4D47F2227D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1099D38B-82EC-43C9-9DF5-D5EDC19834DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D64030-1877-4F29-8340-93DB6E0F1F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "85184E8A-C42D-4CBD-ACB4-B58752C305D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DA682571-536B-4CD9-A820-47E897B01480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "298457B8-051B-46D0-81B4-C5B63B69EB98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D4BC07-C37E-4F99-8DEA-54A45250050A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECFBC71-7814-4A24-A918-C593673727B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "57824075-E3F7-4B23-B4D6-8417C3147085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "FE078F27-6FC1-466C-8331-A89F8B6FE0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "5839EB88-DF5E-4AB0-899B-DF9F72F5F442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1865A4-E038-4A1C-877D-5A3CFA9576BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "93966A66-4332-4E76-9B1A-2BBF10AF0ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA91E77-301C-48F6-9A57-D5FDCEF743BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49DDEF-681C-4A34-9FF8-17249C42842D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF365891-F3FA-4740-94B2-01F85254A2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42B4261-C511-4F3A-8596-6BD4E343DC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2F38FE-7E98-48B2-B0B2-35312368B21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "63687D75-860D-4A36-B6BB-45BD4268B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BD500741-CF39-4F0C-9F96-6CBDFF8973D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*",
            "matchCriteriaId" : "359941FD-A5CE-43C1-AA76-C1B79BCB08C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9AC78A-CA47-476D-935E-67932BAB98A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E9662C-441F-4AB2-AC4C-30F31C32949A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D681B3-73E6-4257-84B4-DE83F6D659B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E5F2A5-F50F-4085-AB7D-8C91121A429A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E90912E-0CF8-404B-9E86-461497C65A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E19DD71-9447-4946-931F-4866537C8BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54075890-6E0C-4AB7-8BD5-2023419CC251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABC3435-77CD-4591-8282-7ADA60225CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C35850-B79C-4EE4-A6F2-CC5D2304724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "50B797C8-3290-4278-9D4B-A15A14FB8D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEC078C-A8F4-471B-A367-59A86B78590D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E10F658D-D2E4-4789-8172-F8842C3EEA05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81687D99-7444-4205-A7BE-992CC758675F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75C4301-68E9-4A10-B9C5-711252BF629B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC690371-3326-421E-8BAC-14F48840671B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E20418A7-1FA7-45EF-99B5-12D283EA6CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE50982-8026-466C-9F51-867425C9986F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD889EC7-E5D2-4137-B85C-86D7DB5CED27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "97452A26-7231-43BE-B70E-B8D05365CAB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DBA733-467C-4505-8199-DD25A5FFBF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B332FF1C-731D-454C-AA9E-3534040F09E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7965089-8592-47F2-958B-7DBE669BCAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1750B2D-7AC8-45CF-9879-1D0476EEE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBAA39D-01A0-4B6B-926B-C36C238E5258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE4473-88C0-4E28-A5B5-F7383B0E5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9754B270-E01D-415E-9A91-09ECB9B82B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D4682E92-E5E7-4351-959E-25A79CA4271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC41D6-73D4-44E9-87E4-E1E955B9580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5A5E5-3703-44AC-9963-A20A55002B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3E5BEF-3F29-4929-A37C-C49322B19047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0E7B5D-2568-4128-8F99-E74D24A7E991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A04906-7267-4A09-87BF-D639C7CF315B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "76C58A91-23BA-4336-A81B-B7FDFAF6CA91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6E40C4-FA29-4D7A-9018-44154503A68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E48C83-01AE-4A33-A004-14B99792674C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A2B78-70BD-439B-B1ED-A17FA5EF0990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623E4466-82CC-4BDD-BE25-3BB33B585547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0002A4-8A90-471C-9813-F648D53E4F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECA190-D7D3-4248-A61E-0D87E67E3D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A15E0FA-5570-4C5F-B087-38591D9EBABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9F72B1-F398-4E07-8652-2042ADDB8414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA2F504-6690-4AAD-97A6-6487E450C92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B927D3-D766-4D53-9870-15A7184E4C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FE202A-E068-4ECE-B61D-230EFF0E60B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B43E22F-D894-4763-BF55-C9B77911C8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4218D36C-CCE7-443B-842B-AA1A2C865734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "3311565E-3971-416B-AC9C-6CF9F4EF0F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC4250E-E638-4015-B5EF-7B5405F7FBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B7AA6F-9918-4356-894C-72833B791201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB76FFE-CB54-4A5B-B8FF-02B1A5D55D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.60:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA48444-F998-425B-896A-CE9276869BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9BFC45-39DF-47A6-B013-4299D2A0FB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "177B7245-4E8F-44E7-BF34-43939DD75AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2B3A26-D8C3-4508-8A6B-3858D5CB8381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14200693-2B22-42BF-9917-FF4B541D9188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.00:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "85DB12A2-D43F-47BE-9719-466BE967E30E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.00:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "F12E0FE8-3982-453B-9C01-ABB2DE96866F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.00:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA76A537-6A1B-41D8-A923-24DC77F92E0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C74C8F2C-92F4-4A9F-BF5A-8B5DF1A50DC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EC02F3-3905-460D-8949-3B26394215CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:*:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FEEC0C5A-4A6E-403C-B929-D1EC8B0FE2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/1000/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/1000/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/1000/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/support/kb/view/931/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/support/kb/view/931/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-02T17:30:01.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote attackers to spoof URLs and conduct phishing attacks, related to Unicode and Punycode."
      }, {
        "lang" : "es",
        "value" : "Opera anterior v10.00 no muestra apropiadamente todos los caracteres en el nombre de dominio (IDN) en la barra de direcciones, lo que permite a atacantes remotos falsificar las URLs y derivar en ataques phishing, relacionado con Unicode y Punycode."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:beta_3:*:*:*:*:*:*",
            "versionEndIncluding" : "10.00",
            "matchCriteriaId" : "9D8253AD-F98A-4110-AC5B-ED979F97CFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C35850-B79C-4EE4-A6F2-CC5D2304724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7965089-8592-47F2-958B-7DBE669BCAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1750B2D-7AC8-45CF-9879-1D0476EEE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE4473-88C0-4E28-A5B5-F7383B0E5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC41D6-73D4-44E9-87E4-E1E955B9580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5A5E5-3703-44AC-9963-A20A55002B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3E5BEF-3F29-4929-A37C-C49322B19047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0E7B5D-2568-4128-8F99-E74D24A7E991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A04906-7267-4A09-87BF-D639C7CF315B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E48C83-01AE-4A33-A004-14B99792674C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A2B78-70BD-439B-B1ED-A17FA5EF0990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623E4466-82CC-4BDD-BE25-3BB33B585547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECA190-D7D3-4248-A61E-0D87E67E3D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC4250E-E638-4015-B5EF-7B5405F7FBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B7AA6F-9918-4356-894C-72833B791201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14200693-2B22-42BF-9917-FF4B541D9188"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/1000/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/support/kb/view/932/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/freebsd/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/linux/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/solaris/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/1000/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/support/kb/view/932/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-02T17:30:01.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the set_page_size function in util.cxx in HTMLDOC 1.8.27 and earlier allows context-dependent attackers to execute arbitrary code via a long MEDIA SIZE comment.  NOTE: it was later reported that there were additional vectors in htmllib.cxx and ps-pdf.cxx using an AFM font file with a long glyph name, but these vectors do not cross privilege boundaries."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función set_page_size en util.cxx en HTMLDOC 1.8.27 y versiones anteriores permite a atacantes dependientes de contexto ejecutar código de su elección mediante un comentario MEDIA SIZE largo. NOTA: más tarde se informó que había vectores adicionales en htmllib.cxx y ps-pdf.cxx utilizando un archivo de fuentes AFM con un nombre glyph largo, pero estos vectores no traspasan la frontera de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htmldoc:htmldoc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.27",
            "matchCriteriaId" : "869A7EC3-6B3E-45B8-A507-CE0004CC12E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htmldoc:htmldoc:1.8.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC979928-F1B0-43C6-97A2-066BC6DC5B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htmldoc:htmldoc:1.8.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACF69DD-2922-4B08-A13C-8F5AB50E2FB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htmldoc:htmldoc:1.8.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1F2321-B852-4660-BAF2-A19B3A501897"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=278186",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/htmldoc-overflow.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35780",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.htmldoc.org/str.php?L214",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/25/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/26/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/01/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=278186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/htmldoc-overflow.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.htmldoc.org/str.php?L214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/25/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/26/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/01/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3052",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-03T17:30:08.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in root/includes/prime_quick_style.php in the Prime Quick Style addon before 1.2.3 for phpBB 3 allows remote authenticated users to execute arbitrary SQL commands via the prime_quick_style parameter to ucp.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en root/includes/prime_quick_style.php en el complemento Prime Quick Style anterior a v1.2.3 para phpBB v3 permite a usuarios autenticados remotamente ejecutar comandos SQL de su elección a través del parámetro prime_quick_style en ucp.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:phpbb:phpbb:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF122E0D-ABB7-4042-A127-B061CD1F1165"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:absoluteanime:prime_quick_style:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E94124-565E-4A76-878B-E1BB0F41CDBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36532",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.absoluteanime.com/forum/mods/Prime%20Quick%20Style/install.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpbb.com/community/viewtopic.php?f=70&t=692625&start=150#p10649315",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36214",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.absoluteanime.com/forum/mods/Prime%20Quick%20Style/install.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpbb.com/community/viewtopic.php?f=70&t=692625&start=150#p10649315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3053",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-03T17:30:10.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the Agora (com_agora) component 3.0.0b for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter to the avatars page, reachable through index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el componente Agora (com_agora) v3.0.0b para Joomla! permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de secuencias de salto de directorio en el parámetro action en la página avatars, al que se puede acceder a través de index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jvitals:com_agora:3.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFECA50-71D5-433A-80D2-61517336B3AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36207",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-03T17:30:10.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Artetics.com Art Portal (com_artportal) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the portalid parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente Artetics.com Art Portal (com_artportal) v1.0 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro portalid en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artetics:com_artportal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D3B1D5-D273-4406-B1B6-E7297BD18623"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36206",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-03T17:30:12.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in engine/api/api.class.php in DataLife Engine (DLE) 8.2 allows remote attackers to execute arbitrary PHP code via a URL in the dle_config_api parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en engine/api/api.class.php en DataLife Engine (DLE) v8.2 permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro dle_config_api."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dlecms:dle:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337E0A15-7D57-4FB3-8F82-98BADF6ADD60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36212",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-03T17:30:14.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include/engine/content/elements/menu.php in KingCMS 0.6.0 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[AdminPath] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en include/engine/content/elements/menu.php en KingCMS v0.6.0, permite a atacantes remotos ejecutar archivos PHP de su elección a través de una URL en el parámetro CONFIG[AdminPath]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bas_bloemsaat:kingcms:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE9907F-75BB-457C-A129-FB8FE316BCA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-03T17:30:14.157",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in AOM Software Beex 3 allow remote attackers to inject arbitrary web script or HTML via the navaction parameter to (1) news.php and (2) partneralle.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en AOM Software Beex v3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro navaction en (1) news.php and (2) partneralle.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aom-software:beex:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F5C74B-4E2E-4F79-B61F-3256A9F69EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/beex-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36550",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/beex-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-03T17:30:14.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in akPlayer 1.9.0 allows remote attackers to execute arbitrary code via a long string in a .plt playlist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en akPlayer v1.9.0, permite a atacantes remotos ejecutar código de su elección a través de una cadena larga en un archivo de lista de reproducción .plt."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aksoft:akplayer:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A11B1CD9-D540-4530-A9F6-4B23DC852F1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/akplayer-overflow.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36521",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2517",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/akplayer-overflow.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-03T17:30:17.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Joker Board (aka JBoard) 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via (1) core/select.php or (2) the city parameter to top_add.inc.php, reachable through sboard.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Joker Board (también conocido como JBoard) v2.0 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través de 1) core/select.php o (2) el parámetro city en top_add.inc.php, reachable through sboard.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:allpublication:jboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "18825BF9-B4C6-4BFF-8778-F800469E38D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/jboard-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2473",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/jboard-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-03T17:30:17.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Joker Board (aka JBoard) 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the notice parameter to editform.php, (2) the edit_user_message parameter to core/edit_user_message.php, or (3) the user_title parameter to inc/head.inc.php, reachable through any PHP script."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Joker Board (también conocido como JBoard) v2.0 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"notice\"  aeditform.php, (2) \"edit_user_message\" a core/edit_user_message.php, o (3) \"user_title parameter\" a inc/head.inc.php, posible mediante cualquier secuencia de comandos PHP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:allpublication:jboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "18825BF9-B4C6-4BFF-8778-F800469E38D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/jboard-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2473",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/jboard-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-03T17:30:20.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in lesson.php in Alqatari Q R Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en lesson.php en Alqatari Q R Script v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\". NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alqa6ari:script_q_r:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E38BB0-0243-4BC8-B469-C13B7B3400B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/alqatarigroup-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36554",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/alqatarigroup-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-03T17:30:20.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in message_box.php in OSI Codes PHP Live! 3.3 allows remote attackers to execute arbitrary SQL commands via the deptid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en message_box.php en OSI Codes PHP Live! v3.3 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro deptid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplivesupport.:phplive\\!:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F4D5513-B742-451E-8FBF-A7E93D0C8E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-03T17:30:21.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Game Server (com_gameserver) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a gamepanel action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL el componente Game Server(com_gameserver) v1.0 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"gamepanel\" en una acción a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:indianpulses:com_gameserver:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E132EBB-F9CB-42DB-94B6-F5F97F43E239"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36213",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2523",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-03T17:30:21.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in debugger/debug_php.php in Ve-EDIT 0.1.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the _GET[filename] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en debugger/debug_php.php en Ve-EDIT v0.1.4 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un ..(punto punto) en el parámetro _GET[nombre de fichero]"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rein_velt:vedit:01.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF62AEA-85CD-4802-A1EE-2D2AAAF5469C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2522",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-03T17:30:21.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in editor/edit_htmlarea.php in Ve-EDIT 0.1.4 allows remote attackers to execute arbitrary PHP code via a URL in the highlighter parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en editor/edit_htmlarea.php en Ve-EDIT v0.1.4 permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro highlighter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rein_velt:vedit:01.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF62AEA-85CD-4802-A1EE-2D2AAAF5469C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2522",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-03T17:30:23.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PropertyWatchScript.com Property Watch 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) videoid parameter to tools/email.php and (2) redirect parameter to tools/login.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en PropertyWatchScript.com Property Watch v2.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro (1) videoid en tools/email.php y (2) redirect en tools/login.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:propertywatchscript:property_watch:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA4C93B8-3413-4940-9438-F51C50372CDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/propertywatch-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36548",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/propertywatch-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-03T17:30:23.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Reservation Manager allows remote attackers to inject arbitrary web script or HTML via the resman_startdate parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución secuencias de comandos en sitios cruzados (XSS) en index.php en Reservation Manager permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro resman_startdate."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webformatique:reservation_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E139D9C-2B10-4925-A003-5D77E7995006"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/resvman-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36547",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/resvman-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2521",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-09-04T10:30:01.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows remote authenticated users to cause a denial of service (daemon crash) via a list (ls) -R command containing a wildcard that references a subdirectory, followed by a .. (dot dot), aka \"IIS FTP Service DoS Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de consumo de pila en el Servicio FTP en Internet Information Services (IIS) de Microsoft versiones 5.0 hasta 7.0, permite a los usuarios autenticados remotos causar una denegación de servicio (bloqueo del demonio) por medio de un comando list (ls) -R que contiene un comodín que hace referencia a un subdirectorio, seguido por un .. (punto punto), también se conoce como \"IIS FTP Service DoS Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_information_services:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "4ED209E9-04E3-4FDD-947E-8103273FF41D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0040.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ975191",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-053",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6508",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ975191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-04T18:30:01.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows remote attackers to execute arbitrary code by uploading a Java Archive (.jsp) file during a PUBLISH action, then accessing it via a direct request to the file in the robohelp/robo/reserved/web directory under its sessionid subdirectory, as demonstrated by the vd_adobe module in VulnDisco Pack Professional 8.7 through 8.11."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de carga de archivos sin restricciones en el Servlet RoboHelpServer (robohelp/server) en RoboHelp Server de Adobe versión 8, permite a los atacantes remotos ejecutar código arbitrario mediante la carga de un archivo Java Archive (.jsp) durante una acción PUBLISH, y luego, acceder a él por medio de una petición directa al archivo en el directorio robohelp/robo/reserved/web bajo su subdirectorio sessionid, como es demostrado por el módulo vd_adobe en VulnDisco Pack Professional versiones 8.7 hasta 8.11."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:robohelp_server:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8557D7-2DFA-4AD0-BEDC-28A60570C774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.adobe.com/psirt/2009/09/potential_robohelp_server_8_is.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36467",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://twitter.com/elegerov/statuses/3727947465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://twitter.com/elegerov/statuses/3737538715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://twitter.com/elegerov/statuses/3737725344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-14.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.intevydis.com/blog/?p=26",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.intevydis.com/blog/?p=69",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506687/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.adobe.com/psirt/2009/09/potential_robohelp_server_8_is.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://twitter.com/elegerov/statuses/3727947465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://twitter.com/elegerov/statuses/3737538715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://twitter.com/elegerov/statuses/3737725344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.intevydis.com/blog/?p=26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.intevydis.com/blog/?p=69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506687/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-04T20:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via XDMCP connections, a different vulnerability than CVE-2007-5079."
      }, {
        "lang" : "es",
        "value" : "Red Hat build script para GNOME Display Manager (GDM) anterior a v2.16.0-56 en Red Hat Enterprise Linux (RHEL) v5 no da soporte a TCP Wrapper, lo que podría permitir a atacantes remotos saltar las restricciones de acceso previstas a través de conexiones XDMCP, una vulnerabilidad diferente que CVE-2007-5079."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.16",
            "matchCriteriaId" : "CD13F270-B165-47B7-BBA3-6D1EF33AD277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501714EA-1C5D-4EA7-B069-8E6521574AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D650E6-F568-4B7F-8913-3DC10E8F4201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3296F925-6D41-4DA7-BDB2-3B04CF22A53B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7960EC63-69CF-474C-996C-E431CCDD07E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38317A3-3725-4F32-B675-00F8FB288F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F01AD1-EB1B-4932-B8D7-CBC899B1A02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B760EB2A-6461-477F-B7E5-857117E21AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "973BF2BF-BBF7-41F6-9E38-5150BC8AE7B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7756E66E-2296-4B20-ABC0-B1A2ACF2657B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC30F499-35B6-40BB-A420-A55F6993DF3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70640B9F-4EAA-4513-80E4-9DD4A862F27D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A6CC80-BC52-4B39-9424-E96DDA03666E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9B3CC0-DF1C-4A86-B2A3-A9D428A5A6E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36553",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=239818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1364.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=239818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1364.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-04T20:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección \"Eval\" en scripts/uscan.pl anterior a Rev 1984 en devscripts permite a atacantes remotos ejecutar código Perl de su elección a través de nombres de rutas manipulados en servidores de distribución de código fuente utilizado en paquetes Debian GNU/Linux."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devscripts_devel_team:devscripts:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97FDE91-579A-4598-8E99-728249DE1810"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:debian:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7B30CD4-008C-4452-843C-EB5DB15FA7A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.debian.org/wsvn/devscripts/trunk/scripts/uscan.pl?op=diff&rev=1984&sc=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.debian.org/wsvn/devscripts/trunk/scripts/uscan.pl?op=log&rev=0&sc=1&isdir=0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.debian.org/wsvn/devscripts/trunk/scripts/uscan.pl?op=diff&rev=1984&sc=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.debian.org/wsvn/devscripts/trunk/scripts/uscan.pl?op=log&rev=0&sc=1&isdir=0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-04T20:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the month parameter in a calendar action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Uiga Church Portal permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"month\" en la acción calendar. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uiga:church_portal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0FE5883-4483-4C83-81F7-2F925C185CF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57464",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36479",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-04T20:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in wcategory.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en wcategory.php en Snow Hall Silurus System v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ID. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snowhall:silurus_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30A6EFA-CE20-44CA-B354-B3DFE5900328"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36124",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6.0.15, and 1.6.1.x before 1.6.1.6; Business Edition B.x.x before B.2.5.10, C.2.x before C.2.4.3, and C.3.x before C.3.1.1; and s800i 1.3.x before 1.3.0.3 allows remote attackers to cause a denial of service (call-number exhaustion) by initiating many IAX2 message exchanges, a related issue to CVE-2008-3263."
      }, {
        "lang" : "es",
        "value" : "La implementación del protocolo IAX2 en Asterisk Open Source v1.2.x antes de v1.2.35, v1.4.x antes de v1.4.26.2, v1.6.0.x antes de v1.6.0.15, v1.6.1.x antes de v1.6.1.x; Business Edition vB.x.x antes de que vB.2.5.10, vC.2.x antes vC.2.4.3 y vC.3.x antes de C.3.1.1; y S800i v1.3.x antes de v1.3.0.3 permite a atacantes remotos causar una denegación de servicio iniciando muchos intercambios de mensajes IAX2. Se trata de una aunto relacionado con la CVE-2008-3263."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:b.1.3.2:*:business:*:*:*:*:*",
            "matchCriteriaId" : "524CF00B-1B36-4C1F-80B4-28349891669B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:b.1.3.3:*:business:*:*:*:*:*",
            "matchCriteriaId" : "2942FA48-42CE-4E67-A5BF-7852652EDE28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:b.2.2.0:*:business:*:*:*:*:*",
            "matchCriteriaId" : "4160A834-9194-474C-819B-60627E470D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:b.2.2.1:*:business:*:*:*:*:*",
            "matchCriteriaId" : "D81F6E55-80F1-4770-9FF0-305EEEF3C4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:b.2.3.1:*:business:*:*:*:*:*",
            "matchCriteriaId" : "087DC9EC-0DF2-48AE-BB62-8DDF95C3EC56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:b.2.3.2:*:business:*:*:*:*:*",
            "matchCriteriaId" : "471032A5-5EB6-44D1-91C8-BEA42C1E205A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:b.2.3.3:*:business:*:*:*:*:*",
            "matchCriteriaId" : "6FEB3FCA-065E-4C32-A4C7-F2C79F214F17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:b.2.3.4:*:business:*:*:*:*:*",
            "matchCriteriaId" : "636D765F-C47B-4762-9419-D7B51FA38AEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:b.2.3.5:*:business:*:*:*:*:*",
            "matchCriteriaId" : "36F29EE8-E05F-4F0A-B0FA-66C551856C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:b.2.3.6:*:business:*:*:*:*:*",
            "matchCriteriaId" : "CEAA72FE-E13C-4363-AF5C-7D1CEEE2FA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:b.2.5.1:*:business:*:*:*:*:*",
            "matchCriteriaId" : "3BAD5B3E-80FC-4B23-BD51-41D17BFA9C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:b.2.5.3:*:business:*:*:*:*:*",
            "matchCriteriaId" : "0B09EFBF-B8AD-455F-8F47-7C8F52371214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:b.2.5.4:*:business:*:*:*:*:*",
            "matchCriteriaId" : "4CF18A17-E16D-4529-9705-6E2333C89CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:b.2.5.5:*:business:*:*:*:*:*",
            "matchCriteriaId" : "1ED6AC46-E485-4D0A-BFC1-3DEED113B9B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:b.2.5.6:*:business:*:*:*:*:*",
            "matchCriteriaId" : "25A4B8D6-373F-442B-978A-61E53EEA9870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:b.2.5.8:*:business:*:*:*:*:*",
            "matchCriteriaId" : "30D7485F-109D-46B9-8E6E-52E963080BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:b.2.5.9:*:business:*:*:*:*:*",
            "matchCriteriaId" : "D5C22240-282C-4B10-8CAE-CC07E5784C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:c.1.0_beta7:*:business:*:*:*:*:*",
            "matchCriteriaId" : "D0A87D63-35F5-47D7-893B-E8B179B16C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:c.1.0_beta8:*:business:*:*:*:*:*",
            "matchCriteriaId" : "95C1809E-9031-483F-B873-160284FA71D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:c.1.6:*:business:*:*:*:*:*",
            "matchCriteriaId" : "E35C336A-A786-476B-8B9F-E682D999B6AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:c.1.6.1:*:business:*:*:*:*:*",
            "matchCriteriaId" : "8121721B-EBC6-44EA-86D6-7B0FF1C8FF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:c.1.6.2:*:business:*:*:*:*:*",
            "matchCriteriaId" : "1E76B3DD-5C38-4323-9F24-9327CC4E6FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:c.1.8.1:*:business:*:*:*:*:*",
            "matchCriteriaId" : "EB75A0FE-9D22-4DDB-909C-C87036328499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:c.1.10.3:*:business:*:*:*:*:*",
            "matchCriteriaId" : "75003D80-231D-4AC4-8346-4D4E4C8643E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:c.1.10.4:*:business:*:*:*:*:*",
            "matchCriteriaId" : "A04E037D-7F3F-4387-818D-1D618885AAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:c.1.10.5:*:business:*:*:*:*:*",
            "matchCriteriaId" : "2CACA83A-4D1E-458D-BA30-3C138FB848E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:c.2.1.2.1:*:business:*:*:*:*:*",
            "matchCriteriaId" : "32D447AB-DAF1-4F70-8686-156C0ACDAE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:c.2.3:*:business:*:*:*:*:*",
            "matchCriteriaId" : "6A958EDA-6FB8-447B-B190-8802C9DC9D3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:c.2.3.3:*:business:*:*:*:*:*",
            "matchCriteriaId" : "30FDE355-2209-46D4-A4E9-4DF7B128014F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:c.2.4.2:*:business:*:*:*:*:*",
            "matchCriteriaId" : "9CCDC56D-22F0-4617-A2FE-A23889F9C9AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:asterisk:c.3.1.0:*:business:*:*:*:*:*",
            "matchCriteriaId" : "E6B4EC4D-957C-4A93-B65C-10114845A226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7971E1-F136-4ADC-95EC-BC4F92E838CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E62D108C-862D-4BDB-BE37-285AA4C9C59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "CF1422F3-829D-498C-83A6-02989DFB70A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEB9D69-A404-4053-92F9-CAC3481AFF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E816CCDB-4169-4F09-AE87-E467F4BE7685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27202966-2C41-4964-9497-1887D2A834C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1471B5A2-15BE-4E7C-BA49-2E6002F7C8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.2:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "65223182-1675-462C-AF67-4A48760A63F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7108D72F-5AFD-4EEF-B2A9-CA4FA792E193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.3:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7EB4CD-6436-4E0B-A620-9DF2AC8A3C66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "107DA2D8-FE7C-4B70-856D-43D58B988694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.4:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "02D5E6DF-7C9C-479F-986B-D5C8A144ACB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD71DD9-8A15-45E2-9FB3-F0544D7E1B80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.5:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "68AF6200-1385-449F-A00E-2BACEE16450B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C14614F-4E27-40A6-9E56-2B1DBB10330B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.6:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "61C0769F-6739-41D2-ADD8-924AC04C5F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2F2F5A-66FD-4057-917C-66332A88D83E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.7:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF13987-5767-4FED-9584-63D74B0A30A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399B0206-B48B-46EF-8CA6-A6E5A2550B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.7.1:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "C57C1324-E11A-4B2B-9722-A4A63AEF0497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26E9760F-C0EB-47BB-8DA4-CC7815099DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.8:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "EE6D9718-D57D-48F6-A2B1-CECAFFCDDFB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C510A9A-C3E2-4AF8-9919-1A22E918CDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD915CD-A7D3-4305-A6C0-290C648A226C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.9.1:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "3249AB40-2058-42E9-9A33-64E434E5BB64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E79CCE5-C29B-4726-8D2F-BC20F70959BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.10:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF6584D-A7BB-4BD5-8232-9293FEE4A971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29C13DB-6F04-4B41-90A2-2408D70F3641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.11:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "174D6B56-7D0F-46F0-849A-FD05CB348FAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4F734E-0E78-4957-B323-8E9FBA7FF15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.12:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "938F545A-F8A7-455E-8E5A-2B5454B6CE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4B117B-E945-4033-A79D-10DFAA3DF18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.12.1:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C0897A-C841-4AAB-A6B3-1FCF7A99A60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6D866F-8189-4FFD-AA24-47C0A015C246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.13:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BAA1B3-7DD3-4248-915D-2BCC0ACFA2C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4EBFB79-C269-4132-BFAB-451F66CE8289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.14:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "21612C17-7368-4108-B55B-5AB5CA6733E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E1028E-2C07-4BA3-B891-FA853A87B280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.15:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0D57D7-15AD-4CDF-A5A7-AB83F8E6154E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E74F577-70BD-4FAF-BCFD-10CD21FC5601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.16:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "06DB25C8-4EA5-465F-8EFA-BCA8D40F1795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BB03E2-E61C-4A94-82DF-8720698CE271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.17:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "A149F8C2-3DA5-44B2-A288-3482F3975824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B30A36F-5CE6-4246-8752-176FB5999C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.18:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "9462B320-B69D-409D-8DCC-D8D6CA1A757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F76DFD-4DAC-4B02-8967-B242CDEEF6C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.19:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCCBAE9-8FD4-43F0-9EF8-56E9BBA3D8C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A59BC20-3217-4584-9196-D1CD9E0D6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.20:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA0014A-659B-4533-A393-6D4ADC80EB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56F728BA-FC9E-4EEE-9A08-C9C7433BD8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.21:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1621F9-7C84-4CF0-BBCD-CEAEE8683BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C64DF29-5B3D-401E-885E-8E37FD577254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.21.1:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "346C9F65-B5FB-4A75-8E1B-137112F270D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7BF52A-2FF8-40ED-B757-28A1101DE8F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.22:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFEE380-0C64-4413-AF3A-45ABC8833500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A321C2D-852B-4498-ADD6-79956410AB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.23:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA18FC6-1480-400E-A885-8CDAE45AA7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5F0DCF-C6A2-4A09-90C9-D70F174FDEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.24:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "93741261-378B-4C02-8D68-0E5F39128375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C820538E-14EC-43C1-80DB-6AAE4905EF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.25:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "07CF9DD6-B624-49F0-A8E4-7EBCE7932BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9562112-2505-4F78-86DE-F30EFAEE47D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.26:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "9EEA1E9C-C1FB-4EFD-86EA-DCF78C57FC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6D8FD0-C8C1-4868-9AF1-96B1949C18AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.26.1:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "5E20FAF7-9031-478E-A89C-D6FB3B5FDE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A840B4-216B-4063-997F-791FBC8C8658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.26.2:netsec:*:*:*:*:*:*",
            "matchCriteriaId" : "72375576-F857-4585-A677-A326D89A65B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE47A547-26E7-48F9-B0A6-2F65E04A1EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AEB744-FCF2-4A41-8866-9D1D20E6C6B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E5EB34-30AD-4E81-8BD4-4AB905E52B82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4359322B-08D0-4710-A9C3-54BD4A17B800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F84DF4-DBA7-430C-AF17-F52024EF80D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.30.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34266614-3588-485C-A609-37823F8499AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.30.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD299B8E-D912-4B67-85C3-79CFF4C4F3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9890504F-AA2E-44E9-8510-BFFD75FD6D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CF30B7-832F-40D4-8DA2-47B55BAC78B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2072ADDC-C105-49CD-929A-011C8B9C6CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.2.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16BE0C5-4569-4F62-AC58-4B4D5B60D935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967DF432-DEF4-4FA2-8C8D-19A7FB663A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "40850BF4-E252-4667-9B46-9B6FEF6E997D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB01DD1-B29B-4210-88CC-9ADB3148A410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "5C0FA6A3-BFA9-4397-B75B-75C8357C36B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295D4042-2D3C-481B-B969-2DDAC1161198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E9EE2A-56AD-42BC-8CB0-D34091849B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96877A3E-B54B-4F31-B281-76CDC98B2D02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0B4503-42A6-4D88-954E-A662E91EC204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B73813-BCD8-429E-B9B9-D6665E026BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBA3ECC-4F40-41CD-A6D7-BBD680DDBACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBE2156-AF86-4C72-B33D-3FF83930F828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61408884-FBBF-4D94-A552-F99AB46DCED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A527277-D97D-4B74-906F-7481BDBD96D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B57A32-7B83-4783-A244-C26301970444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044FD0D0-FC92-4A01-B0D4-11A703EF21FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3477EC1A-9634-492C-B052-35770A9C9F4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C90F104-FA2C-4091-B149-1774AC982C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9328768-7C08-4143-B5F8-F5C2D735D21A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C04E2B3-094B-4828-A2FC-BB66244A9F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDE3D31-4BB2-45A3-B085-8C91152A3152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0107D4-395E-45F1-B963-7618CCC007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53B8E11B-4984-45A8-A107-D276205988B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2495DB98-F923-4E60-86EC-2DBB7A98C90C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E186D125-996E-4900-A2B8-5CDC8B5D5136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27DC6CF7-4DF8-4472-A684-8CCB5E26FCFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88576385-EF03-408B-9775-B52E6AFFE48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A838577-2BA1-4792-8B69-6FB07FFD7727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDEED3E1-13E0-46E6-8AAB-D24D2D04AE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED2BF36F-CF10-4F24-970B-3D0BB7561C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.19:rc-2:*:*:*:*:*:*",
            "matchCriteriaId" : "D35DD57B-EF77-4C5F-9B44-DAF5E0560E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC1BB05-15C6-4829-86EB-5B1BFA4B5B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AB77E88B-7233-4979-914E-24E671C1FB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C4FF0F09-0268-480F-A2F3-6F8C3F323EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCF9CAE-674A-4833-9D5C-FCBD865BE9F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1593E1-BF21-4DB9-A18E-9F221F3F9022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC8E9FE3-FA25-4054-876E-4A3CE6E71AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBAEADC-D1DE-46EF-808C-2F6D2A74D988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF8EB4B-2947-4BD3-ADF3-345AEFE85B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E4476FB3-A759-49F5-ABDE-6D2A321B61BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.20:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC109C3-2F52-48BE-B07E-3D65F31C1012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54101A9-3967-4111-8A03-DA1BB23141BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.21:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B00600-1D45-41F7-9A10-97FB39012FDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.21:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D8CB2331-0F95-45E0-AF5B-0B9C74C5BA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4ADB6A7-76AC-4AE3-B1AA-9F8DFA635418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776BC35C-CF37-4F4E-9FD5-EC351D4C2C2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10DAABC-FF06-44FB-98EC-B6AD17C03FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.22:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA8AFD5-4C7C-4876-93CA-C5B3E881C455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.22:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "547EEB2B-2ECA-4B00-83BB-CFAA11BE0145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83829E0F-C24B-4BD6-88EA-98898A9AD86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C19141-823E-4057-A699-FD1DFF92DF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE7FE41-E749-49B8-99DF-19F9E7C4827A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E78234B-39B6-4DB4-A10F-AA55F174D4F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3984CF42-2431-4661-B333-C6721DF7123A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4.23:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "303CBFC2-22C1-47CE-A26C-A99B05763374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.4beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A8012CE-4D4B-4131-87E7-16D7907E3BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F88914-6097-4AF1-8337-DCF062EB88AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDB49DC-5344-451E-B8D6-D02C3431CE78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "B1FDA8D3-5082-479B-BA0A-F1E83D750B5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "7305910F-42BA-44CE-A7AC-B6F74200B68D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "B93EB4D6-3375-44BC-870F-714A3BC00C2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "52F60D6E-64EB-4223-8A79-595693B444C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta7.1:*:*:*:*:*:*",
            "matchCriteriaId" : "37CF29B9-4397-4298-9326-0443E666CDC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "7D85DA34-A977-4A82-8E79-7BFE064DE9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:beta9:*:*:*:*:*:*",
            "matchCriteriaId" : "1476EF7B-A6F8-4B10-AF0F-986EA6BA3116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "98E222F0-4CAA-4247-A00D-C6CEC2E55198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "63744245-6126-47F6-B9F5-E936538140C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "C8805BEE-A4CF-45C2-B948-F1E8EF0A0886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E474C33-B42A-4BB8-AC57-8A9071316240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83B3132-7D78-4AC3-B83A-A6A20AA28993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0147FCED-AE75-4945-B76E-33F2AA764B9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.0.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C976AB0-2D1A-40CA-AEC3-E271B59B6960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "785205F3-88C1-4F63-B091-4920AF1C892D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "879A19B4-C037-407C-AC3F-76D6095E950C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:open_source:1.6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF16907E-5B0A-4312-AB20-0020A6EDFDE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:opensource:1.4.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876044E9-1B51-4877-A92F-63502D17E28F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:opensource:1.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBF0F165-E75F-4990-8369-5FD275E453AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:opensource:1.4.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A194CAD2-A056-4664-B24A-0424F69BA1E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:opensource:1.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "017F1C0D-0469-412A-99B0-70BF8195B148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asterisk:opensource:1.4.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D0BE8E-1D28-4402-851E-C900E8609898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A0A1ED-5EDB-4D7B-9514-FD92BA00F940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:1.6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DFDEB7-5220-4501-8499-9114727CD29A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:asterisk:appliance_s800i:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F70E5D-58B9-451D-96E9-CE788B5EEF9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:asterisk:appliance_s800i:1.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08893AA-F51D-44CA-97C1-8E7E5A7A7F54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2009-006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36593",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506257/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.asterisk.org/pub/security/AST-2009-006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506257/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Zope Enterprise Objects (ZEO) funcionalidad storage-server en Zope Object Database (ZODB) v3.8 anterior v3.8.3 y v3.9.x anterior v3.9.0c2, cuando cierta base de datos ZEO compartida y el soporte blob es activado, permite usuarios autenticarse remotamente para leer o borrar archivos de su elección a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF49B253-411F-4E83-93B3-556783B73965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8568BD1E-839A-4C78-840D-47807D207C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552E429F-964F-4BF8-B974-C4C59EA7871F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204FA56B-576D-4274-B17C-6AC4FC1EB58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5CCCAA-83AD-4CD6-B7FD-46809B786395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.9.0b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F38F2B2-E061-4D77-9A88-1C432F31FAFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.9.0b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA88DF5-7A25-4187-8B9D-567B0279FEAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.9.0b3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFE0BF9-0AC2-4461-BAAE-BDE91A830788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.9.0b4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8EA11C-98BD-419F-9817-4071B287F87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.9.0b5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "283DC1FE-6F98-4FFA-A17F-6277AB9815C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zodb:3.9.0c1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A991E3D-03E9-4B2F-90FB-0B308D142B20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pypi.python.org/pypi/ZODB3/3.8.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://pypi.python.org/pypi/ZODB3/3.9.0c2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2534",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://mail.zope.org/pipermail/zope-announce/2009-September/002221.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://pypi.python.org/pypi/ZODB3/3.8.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://pypi.python.org/pypi/ZODB3/3.9.0c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://mail.zope.org/pipermail/zope-announce/2009-September/002221.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."
      }, {
        "lang" : "es",
        "value" : "KDE KSSL en kdelibs v3.5.4, v4.2.4, y v4.3 no maneja apropiadamente un carácter '\\0' en un nombre de dominio en el campo Nombre de Asunto Alternativo de un certificado X.509, lo que permite a los atacantes \"hombre en el medio\" suplantar un servidor SLL a través de certificados manipulados emitido por una Autoridad Certificadora legítima, un asunto relativo a  CVE-2009-2408."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kdelibs:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF92CC57-A136-4018-A350-44B8416E2111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kdelibs:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9184861-CD72-403A-B217-E58F7375D156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kdelibs:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DEE716D-C9EA-4BEB-9B60-A4C4512D9DF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36468",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2532",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=520661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=520661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2702\n\nThis issue did not affect kdelibs packages as shipped in Red Hat Enterprise Linux 3 and 4.\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw in Red Hat Enterprise Linux 5.",
        "lastModified" : "2009-09-18T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string."
      }, {
        "lang" : "es",
        "value" : "libpurple/protocols/irc/msgs.c en el complemento (plugin) de protocolo IRC de libpurple en Pidgin v2.6.2 permite causar a servidores IRC remotos para una denegación de servicio (mediante una desreferencia a puntero NULL y caida de la aplicación) a través de un mensaje TOPIC que carece de una cadena de asunto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:libpurple:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5DB51C-9FD1-41CB-AAFD-5F6A072C3F82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.1",
            "matchCriteriaId" : "4B6B929B-1F85-4584-AA92-5B30BE110D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC2EBF3-73A7-4542-8E9C-47A4241A224C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF62072D-4956-4FE6-931E-E6EE9C49F3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6499D8D5-0801-498C-BD4D-508506918CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "5C5B2A50-6734-4B64-AFD0-DB34C3BDA86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CC76CD-FF35-4B3A-9F1E-4E5A65963057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E216BC-29E4-4C31-9CF0-DE22C2E84968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD203F7-B983-4FDD-9837-D68D4F388A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8E3CBA-2B33-49EF-9105-8DDBB938F519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AA3282-CA7D-438C-A07C-A63392333630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.0:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D1DFC7-4B7F-4006-9058-8335A292821E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEEFF420-2868-422B-BD22-9A5749C2398F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.1:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "12095F49-8DFD-4C74-9454-5C3A5992A3FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B139D83D-7D18-42C7-988C-2070B66CB943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.2:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "C62110B5-61D7-406D-B1A5-65AEC202DDFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047D9636-BCCE-4956-B5A3-D276F1C2EF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.3:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "CD01B8C6-7D3E-4FF9-A5B5-AAF33F4CEBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8A794E-E1CB-4F0F-9739-D625E94EA566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.0:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6D98DC-06FC-46E7-A790-98A0B43A4E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64EEEA0-89CE-46BD-B387-A96521E76A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E96AA3-B567-4E97-979A-D97A4F786D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.2:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEE4F73-A426-4B47-8BAF-1C7D2F955850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C407C0-99A2-477B-87CF-6BE9F7B367E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.3:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "777EF35C-195A-4784-986D-3811CF1DCF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBEF0457-39D8-465B-86A7-8DFA44A1F820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.4:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD21F1-7A08-4F2D-B8EA-C02771E960FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E593BFF0-650E-4EDB-BF65-C509C8A807C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.5:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "01256F83-6E67-409A-B99A-6E27E83DA05F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39468D5-1378-4441-B927-5C34C85B18AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80012AD-8F49-4287-8AEC-C21AC5774CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB3CF0C-BECE-4685-A370-96424B0A5703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D5BC0FC-2F7D-41BE-83E4-AEDACD71F427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8321D92-B935-4C2A-81B1-5984BFF4FD57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.pidgin.im/viewmtn/revision/info/ad2c6ee53ec9122b25aeb1f918db53be69bdeac3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36601",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.pidgin.im/news/security/index.php?id=40",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.pidgin.im/viewmtn/revision/info/ad2c6ee53ec9122b25aeb1f918db53be69bdeac3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.pidgin.im/news/security/index.php?id=40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución secuencias de comandos en sitios cruzados (XSS) en Roby en Rails v2.x anterior 2.2.3, y v2.3.x anterior v2.3.4, permite a atacantes remotos inyectar código web o HTML a su elección colocando cadenas malformadas Unicode en un formulario de ayuda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50EEAFDA-7782-4E1E-9058-205AD4BE9A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC748BB-BFC5-44F7-B633-CEEBB1279889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "38CF2C31-70BB-41D3-9462-0A8B9869A5F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8584B37-7950-4C89-83D2-04E1ACDC60BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CB26F65-5CFB-4BF8-BCC4-679327D4A8DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF12EA5D-5EB5-46A8-AC60-65B327D610AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B4B121-94BD-4E0F-8860-6239890043B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63CF211C-683E-4F7D-8C62-05B153AC1960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "456A2F7E-CC66-48C4-B028-353D2976837A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B1CDAFA-2AC6-4C46-9E65-0BE9127E770F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9806A84-2160-40EA-9960-AE7756CE4E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC67D4-3D0F-4FF9-8197-71175DCB2723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1467583-23E9-4E2B-982D-80A356174BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC784C0-5618-4C32-8C17-BE7041656E14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=545063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://groups.google.com/group/rubyonrails-security/msg/7f57cd7794e1d1b4?dmode=source",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36600",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36717",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022824",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://weblog.rubyonrails.org/2009/9/4/xss-vulnerability-in-ruby-on-rails",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/57666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2544",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=545063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://groups.google.com/group/rubyonrails-security/msg/7f57cd7794e1d1b4?dmode=source",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://weblog.rubyonrails.org/2009/9/4/xss-vulnerability-in-ruby-on-rails",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/57666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client."
      }, {
        "lang" : "es",
        "value" : "La función msn_slp_sip_recv de libpurple/protocols/msn/slp.c en el \"plugin\" (complemento) del protocolo MSN de libpurple de Pidgin en sus versiones anteriores a la v2.6.2 permite a atacantes remotos provocar una denegación de servicio (resolución de una referencia a puntero NULL y caída de la aplicación) a través de un mensaje SLP invite que carece de determinados campos obligatorios, tal como se ha demostrado con un mensaje mal formado desde un cliente KMess."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:libpurple:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5DB51C-9FD1-41CB-AAFD-5F6A072C3F82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.1",
            "matchCriteriaId" : "4B6B929B-1F85-4584-AA92-5B30BE110D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC2EBF3-73A7-4542-8E9C-47A4241A224C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF62072D-4956-4FE6-931E-E6EE9C49F3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6499D8D5-0801-498C-BD4D-508506918CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "5C5B2A50-6734-4B64-AFD0-DB34C3BDA86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CC76CD-FF35-4B3A-9F1E-4E5A65963057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E216BC-29E4-4C31-9CF0-DE22C2E84968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD203F7-B983-4FDD-9837-D68D4F388A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8E3CBA-2B33-49EF-9105-8DDBB938F519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AA3282-CA7D-438C-A07C-A63392333630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.0:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D1DFC7-4B7F-4006-9058-8335A292821E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEEFF420-2868-422B-BD22-9A5749C2398F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.1:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "12095F49-8DFD-4C74-9454-5C3A5992A3FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B139D83D-7D18-42C7-988C-2070B66CB943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.2:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "C62110B5-61D7-406D-B1A5-65AEC202DDFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047D9636-BCCE-4956-B5A3-D276F1C2EF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.3:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "CD01B8C6-7D3E-4FF9-A5B5-AAF33F4CEBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8A794E-E1CB-4F0F-9739-D625E94EA566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.0:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6D98DC-06FC-46E7-A790-98A0B43A4E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64EEEA0-89CE-46BD-B387-A96521E76A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E96AA3-B567-4E97-979A-D97A4F786D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.2:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEE4F73-A426-4B47-8BAF-1C7D2F955850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C407C0-99A2-477B-87CF-6BE9F7B367E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.3:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "777EF35C-195A-4784-986D-3811CF1DCF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBEF0457-39D8-465B-86A7-8DFA44A1F820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.4:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD21F1-7A08-4F2D-B8EA-C02771E960FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E593BFF0-650E-4EDB-BF65-C509C8A807C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.5:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "01256F83-6E67-409A-B99A-6E27E83DA05F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39468D5-1378-4441-B927-5C34C85B18AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80012AD-8F49-4287-8AEC-C21AC5774CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB3CF0C-BECE-4685-A370-96424B0A5703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D5BC0FC-2F7D-41BE-83E4-AEDACD71F427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8321D92-B935-4C2A-81B1-5984BFF4FD57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.pidgin.im/ticket/10159",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://developer.pidgin.im/viewmtn/revision/diff/6d3fc30a0a0a379281efc5a6872a9c1d7c24c650/with/b4a95ea62b81a06ffc1993912471c511b786efdd/libpurple/protocols/msn/slp.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://developer.pidgin.im/viewmtn/revision/info/b4a95ea62b81a06ffc1993912471c511b786efdd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36601",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.pidgin.im/news/security/index.php?id=39",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.pidgin.im/ticket/10159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://developer.pidgin.im/viewmtn/revision/diff/6d3fc30a0a0a379281efc5a6872a9c1d7c24c650/with/b4a95ea62b81a06ffc1993912471c511b786efdd/libpurple/protocols/msn/slp.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://developer.pidgin.im/viewmtn/revision/info/b4a95ea62b81a06ffc1993912471c511b786efdd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.pidgin.im/news/security/index.php?id=39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service (application crash) via a handwritten (aka Ink) message, related to an uninitialized variable and the incorrect \"UTF16-LE\" charset name."
      }, {
        "lang" : "es",
        "value" : "La función msn_slp_process_msg de libpurple/protocols/msn/slpcall.c en el conector de protocolo MSN de libpurple v2.6.0 y v2.6.1, como se ha utilizado en Pidgin anterior a v2.6.2; permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de un mensaje manuscrito (también llamado Tinta). Está relacionado con una variable no iniciada y el nombre del conjunto de caracteres \"UTF16-LE\" incorrecto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.1",
            "matchCriteriaId" : "4B6B929B-1F85-4584-AA92-5B30BE110D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC2EBF3-73A7-4542-8E9C-47A4241A224C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF62072D-4956-4FE6-931E-E6EE9C49F3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6499D8D5-0801-498C-BD4D-508506918CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "5C5B2A50-6734-4B64-AFD0-DB34C3BDA86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CC76CD-FF35-4B3A-9F1E-4E5A65963057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E216BC-29E4-4C31-9CF0-DE22C2E84968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD203F7-B983-4FDD-9837-D68D4F388A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8E3CBA-2B33-49EF-9105-8DDBB938F519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AA3282-CA7D-438C-A07C-A63392333630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.0:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D1DFC7-4B7F-4006-9058-8335A292821E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEEFF420-2868-422B-BD22-9A5749C2398F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.1:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "12095F49-8DFD-4C74-9454-5C3A5992A3FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B139D83D-7D18-42C7-988C-2070B66CB943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.2:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "C62110B5-61D7-406D-B1A5-65AEC202DDFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047D9636-BCCE-4956-B5A3-D276F1C2EF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.3:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "CD01B8C6-7D3E-4FF9-A5B5-AAF33F4CEBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8A794E-E1CB-4F0F-9739-D625E94EA566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.0:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6D98DC-06FC-46E7-A790-98A0B43A4E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64EEEA0-89CE-46BD-B387-A96521E76A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E96AA3-B567-4E97-979A-D97A4F786D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.2:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEE4F73-A426-4B47-8BAF-1C7D2F955850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C407C0-99A2-477B-87CF-6BE9F7B367E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.3:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "777EF35C-195A-4784-986D-3811CF1DCF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBEF0457-39D8-465B-86A7-8DFA44A1F820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.4:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD21F1-7A08-4F2D-B8EA-C02771E960FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E593BFF0-650E-4EDB-BF65-C509C8A807C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.5:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "01256F83-6E67-409A-B99A-6E27E83DA05F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39468D5-1378-4441-B927-5C34C85B18AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80012AD-8F49-4287-8AEC-C21AC5774CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB3CF0C-BECE-4685-A370-96424B0A5703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D5BC0FC-2F7D-41BE-83E4-AEDACD71F427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8321D92-B935-4C2A-81B1-5984BFF4FD57"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:libpurple:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8CE5BE-03B4-4556-8ADE-6E645AD211F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:libpurple:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BDC1AE-C390-42D5-A0EF-80A59C350F5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.pidgin.im/viewmtn/revision/diff/92ce3e48744b40fb0fea89e3de5e44bedb100c07/with/567e16cbc46168f52482e5ec27626c48e7a5ba95/libpurple/protocols/msn/slpcall.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://developer.pidgin.im/viewmtn/revision/info/567e16cbc46168f52482e5ec27626c48e7a5ba95",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36601",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.pidgin.im/news/security/index.php?id=38",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.pidgin.im/viewmtn/revision/diff/92ce3e48744b40fb0fea89e3de5e44bedb100c07/with/567e16cbc46168f52482e5ec27626c48e7a5ba95/libpurple/protocols/msn/slpcall.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://developer.pidgin.im/viewmtn/revision/info/567e16cbc46168f52482e5ec27626c48e7a5ba95",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.pidgin.im/news/security/index.php?id=38",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Pidgin packages, as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
        "lastModified" : "2009-09-10T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images."
      }, {
        "lang" : "es",
        "value" : "El plugin para el protocolo XMPP en libpurple en Pidgin anterior a v2.6.2 no maneja adecuadamente un error en la trama IQ (petición de información) durante un intento de traer un smiley personalizado, permitiendo a atacantes remotos provocar una denegación de servicio (fin de la aplicación) mediante contenido XHTML-IM con imagenes \"cid:\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:libpurple:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5DB51C-9FD1-41CB-AAFD-5F6A072C3F82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.1",
            "matchCriteriaId" : "4B6B929B-1F85-4584-AA92-5B30BE110D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC2EBF3-73A7-4542-8E9C-47A4241A224C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF62072D-4956-4FE6-931E-E6EE9C49F3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6499D8D5-0801-498C-BD4D-508506918CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "5C5B2A50-6734-4B64-AFD0-DB34C3BDA86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CC76CD-FF35-4B3A-9F1E-4E5A65963057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E216BC-29E4-4C31-9CF0-DE22C2E84968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD203F7-B983-4FDD-9837-D68D4F388A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8E3CBA-2B33-49EF-9105-8DDBB938F519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AA3282-CA7D-438C-A07C-A63392333630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.0:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D1DFC7-4B7F-4006-9058-8335A292821E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEEFF420-2868-422B-BD22-9A5749C2398F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.1:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "12095F49-8DFD-4C74-9454-5C3A5992A3FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B139D83D-7D18-42C7-988C-2070B66CB943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.2:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "C62110B5-61D7-406D-B1A5-65AEC202DDFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047D9636-BCCE-4956-B5A3-D276F1C2EF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.3:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "CD01B8C6-7D3E-4FF9-A5B5-AAF33F4CEBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8A794E-E1CB-4F0F-9739-D625E94EA566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.0:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6D98DC-06FC-46E7-A790-98A0B43A4E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64EEEA0-89CE-46BD-B387-A96521E76A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E96AA3-B567-4E97-979A-D97A4F786D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.2:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEE4F73-A426-4B47-8BAF-1C7D2F955850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C407C0-99A2-477B-87CF-6BE9F7B367E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.3:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "777EF35C-195A-4784-986D-3811CF1DCF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBEF0457-39D8-465B-86A7-8DFA44A1F820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.4:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD21F1-7A08-4F2D-B8EA-C02771E960FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E593BFF0-650E-4EDB-BF65-C509C8A807C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.5:32_bit:*:*:*:*:*:*",
            "matchCriteriaId" : "01256F83-6E67-409A-B99A-6E27E83DA05F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39468D5-1378-4441-B927-5C34C85B18AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80012AD-8F49-4287-8AEC-C21AC5774CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB3CF0C-BECE-4685-A370-96424B0A5703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D5BC0FC-2F7D-41BE-83E4-AEDACD71F427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8321D92-B935-4C2A-81B1-5984BFF4FD57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.pidgin.im/viewmtn/revision/info/fd5955618eddcd84d522b30ff11102f9601f38c8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36601",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.pidgin.im/news/security/index.php?id=37",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.pidgin.im/viewmtn/revision/info/fd5955618eddcd84d522b30ff11102f9601f38c8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.pidgin.im/news/security/index.php?id=37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x before 2.3.4, leaks information about the complexity of message-digest signature verification in the cookie store, which might allow remote attackers to forge a digest via multiple attempts."
      }, {
        "lang" : "es",
        "value" : "Un determinado algoritmo de Ruby on Rails v2.1.0 hasta v2.2.2 y v2.3.x antes de v2.3.4, filtra información de la complejidad de la verificación de firmas Hash en el almacen de cookies, lo que podría permitir crear una firma Hash a atacantes remotos a través de múltiples intentos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B4B121-94BD-4E0F-8860-6239890043B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63CF211C-683E-4F7D-8C62-05B153AC1960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "456A2F7E-CC66-48C4-B028-353D2976837A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B1CDAFA-2AC6-4C46-9E65-0BE9127E770F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9806A84-2160-40EA-9960-AE7756CE4E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC67D4-3D0F-4FF9-8197-71175DCB2723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1467583-23E9-4E2B-982D-80A356174BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC784C0-5618-4C32-8C17-BE7041656E14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://weblog.rubyonrails.org/2009/9/4/timing-weakness-in-ruby-on-rails",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2011/dsa-2260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/37427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2544",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://weblog.rubyonrails.org/2009/9/4/timing-weakness-in-ruby-on-rails",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2011/dsa-2260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/37427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in nserver.exe in the server in IBM Lotus Domino 8.0 on Windows Server 2003 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en nserver.exe en el servidor de IBM Lotus Domino v8.0 para Windows Server 2003, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de vectores desconocidos, como se ha demostrado en cierto módulo de VulnDisco Pack Professional 8.11. NOTA: a fecha de 03/09/2009, este aviso no cuenta con más información. Sin embargo, debido a que el autor de VulnDisco Pack es una fuente fiable, se ha decidido asignarle un identificador al CVE para poder realizar un seguimiento del mismo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3DB9C3-4DAC-4663-9097-95600E13FCDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36556",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in ibmdiradm in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to have an unspecified impact via unknown vectors that trigger heap corruption, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en ibmdiradm de IBM Tivoli Directory Server (TDS) v6.0 en Linux permite a atacantes remotos tener un impacto sin especificar a través de vectores de ataque desconocidos que provocan una corrupción de la memoria dinámica, tal como se ha demostrado por ciertos módulos en VulnDisco Pack Professional 8.11. NOTA: a fecha de 03/09/2009, esta información no es explotable. Si embargo, como el autor de VulnDisco Pack es un investigador fiable se ha asignado un identificador CVE a está información con propósitos de seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155AD4FB-E527-4103-BCEF-801B653DEA37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF905E9-DDA5-4369-AC6C-FD6E2573E667"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36565",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Directory Server (TDS) 6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors, related to (1) the ibmslapd.exe daemon on Windows and (2) the ibmdiradm daemon in the administration server on Linux, as demonstrated by certain modules in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2006-0717.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Directory Server (TDS) v6.0 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero nulo y fin del demonio) mediante vectores no especificados, relacionados con (1) el demonio \"ibmslapd.exe\" para Windows y (2) el demonio \"ibmdiradm\" en el servidor de administración para Linux, como se ha demostrado por cierto módulo en VulnDisco Pack Professional v8.11, siendo una vulnerabilidad diferente a CVE-2006-0717. NOTA: hasta el 3-3-2009, esta divulgación no tenía información para su puesta en práctica. En cualquier caso, como el autor de VulnDisco Pack es un investigador reputado, se ha asignado un identificador CVE con fines de seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF905E9-DDA5-4369-AC6C-FD6E2573E667"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36565",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en IBM Tivoli Directory Server (TDS) v6.0 para Linux permite a atacantes remotos provocar una denegación de servicio mediante vectores no especificados, como se ha demostrado por cierto módulo en VulnDisco Pack Professional 8.11. NOTA: hasta el 3-3-2009, esta divulgación no tenía información para su puesta en práctica. En cualquier caso, como el autor de VulnDisco Pack es un investigador reputado, se ha asignado un identificador CVE con fines de seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF905E9-DDA5-4369-AC6C-FD6E2573E667"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155AD4FB-E527-4103-BCEF-801B653DEA37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36565",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability on the ASUS WL-330gE has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el ASUS WL-330gE, tiene impacto y vectores de ataque desconocidos, como se ha demostrado en cierto módulo de VulnDisco Pack Professional 8.11. NOTA: a fecha de 03/09/2009, este aviso no cuenta con más información. Sin embargo, debido a que el autor de VulnDisco Pack es una fuente fiable, se ha decidido asignarle un identificador al CVE para poder realizar un seguimiento del mismo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:asus:asus_wl-330ge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A821FCAD-C6B8-412F-A2E0-670FA790C546"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow on the ASUS WL-500W wireless router has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el router wireless ASUS WL-500W tiene un impacto y vectores de ataque desconocidos, como se ha demostrado por cierto módulo en VulnDisco Pack Professional v8.11. NOTA: hasta el 3-3-2009, esta divulgación no tenía información para su puesta en práctica. En cualquier caso, como el autor de VulnDisco Pack es un investigador reputado, se ha asignado un identificador CVE con fines de seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:asus:asus_wl-500w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C349BDCD-F00C-4A19-BAD0-65A87FAE3A71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36439",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability on the ASUS WL-500W wireless router has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el router inalámbrico ASUS WL-500W tiene impacto y vectores de ataque desconocidos, como se ha demostrado con cierto módulo de VulnDisco Pack Professional 8.11. NOTA: A fecha de 03/09/2009 este aviso no cuenta con más información. Sin embargo, debido a que el autor de VulnDisco Pack en un investigador fiable, le hemos asignado un identificador CVE a este problema para poder hacer un seguimiento del mismo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:asus:asus_wl-500w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C349BDCD-F00C-4A19-BAD0-65A87FAE3A71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36439",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command."
      }, {
        "lang" : "es",
        "value" : "La función ap_proxy_ftp_handler en modules/proxy/proxy_ftp.c en el módulo mod_proxy_ftp en Apache HTTP Server v2.0.63  y v2.2.13, permite a servidores FTP remotos provocar una denegación de servicio (referencia a puntero NULL o caída de proceso hijo) a través de una respuesta mal formada al comando EPSV."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.35",
            "versionEndExcluding" : "2.0.64",
            "matchCriteriaId" : "838655CB-43E7-4BDA-A80C-2314C9870717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.14",
            "matchCriteriaId" : "2979A101-9EC8-4E80-BFFC-7300F94C8453"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44669D7-6C1E-4844-B78A-73E253A7CC17"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126998684522511&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127557640302499&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=133355494609819&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36549",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37152",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0155",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK96858",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM09161",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1934",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.intevydis.com/blog/?p=59",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/508075/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0609",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=521619",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10981",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8087",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00645.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00944.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126998684522511&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127557640302499&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=133355494609819&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK96858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM09161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.intevydis.com/blog/?p=59",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/508075/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=521619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00645.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00944.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "List of the errata fixing this flaw in affected products can be found at:\nhttps://www.redhat.com/security/data/cve/CVE-2009-3094.html",
        "lastModified" : "2009-11-12T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11."
      }, {
        "lang" : "es",
        "value" : "El módulo mod_proxy_ftp en el sevidor HTTP Apache, permite a atacantes remotos evitar las restricciones de acceso establecidas y enviar comandos de su elección a un servidor FTP mediante vectores relacionados con la incrustación de estos comandos en una cabecera \"Authorization HTTP\", como se demostró con un determinado módulo en VulnDisco Pack Professional v8.11. NOTA: hasta el 03/09/2009 esta vulnerabilidad no tenía información para su puesta en práctica. Sin embargo, ya que el autor de VulnDisco Pack en un investigador de confianza, se ha asignado un CVE al problema para su seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.35",
            "versionEndExcluding" : "2.0.64",
            "matchCriteriaId" : "838655CB-43E7-4BDA-A80C-2314C9870717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.14",
            "matchCriteriaId" : "2979A101-9EC8-4E80-BFFC-7300F94C8453"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44669D7-6C1E-4844-B78A-73E253A7CC17"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B68DF-1440-4587-8458-9C5F4D1E43F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "513797E6-FCE6-4E84-9B66-202541F9601E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "1E496249-23A8-42FC-A109-634A54B5600F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD2D897-E321-4CED-92E0-11A98B52053C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:-:*:*:*",
            "matchCriteriaId" : "79A35457-EAA3-4BF9-A4DA-B2E414A75A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F13F07CC-739B-465C-9184-0E9D708BD4C7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.6.3",
            "matchCriteriaId" : "04C722E3-68B2-4E05-BFE0-1F2139151165"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126998684522511&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127557640302499&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=133355494609819&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37152",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0155",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1934",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/508075/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=522209",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8662",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9363",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00645.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00944.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126998684522511&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127557640302499&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=133355494609819&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/508075/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=522209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00645.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00944.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "List of the errata fixing this flaw in affected products can be found at:\nhttps://www.redhat.com/security/data/cve/CVE-2009-3095.html",
        "lastModified" : "2009-11-12T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in HP Performance Insight 5.3 allow remote attackers to have an unknown impact, related to (1) a \"Remote exploit\" on Windows platforms, and (2) a \"Remote preauthentication exploit\" on the Windows Server 2003 SP2 platform, as demonstrated by certain modules in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades sin especificar en HP Performance Insight v5.3 permiten a usuarios remotos tener un impacto desconocido sobre el sistema, relacionado con (1) un exploit remoto en plataformas Windows, y (2) un exploit de pre-autenticación remota en la plataforma Windows Server 2003 SP2, tal como se ha demostrado por ciertos módulos en VulnDisco Pack Professional 8.11. NOTA: a fecha de 03/09/2009, esta información no es explotable. Si embargo, como el autor de VulnDisco Pack es un investigador fiable se ha asignado un identificador CVE a está información con propósitos de seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:performance_insight:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B29A22-B34C-4A34-A67B-E1E51E0545A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36520",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in HP Performance Insight 5.3 on Windows allow attackers to obtain sensitive information via unknown vectors, as demonstrated by certain modules in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades sin especificar en HP Performance Insight v5.3 sobre Windows, permite a atacantes obtener información sensible a través de vectores no especificados, como se ha demostrado mediante determinados módulos en VulnDisco Pack Professional v8.11.  NOTA: hasta el 03/09/2009 la vulnerabilidad no tiene ninguna información para ponerla en práctica. Sin embargo, como el autor de VulnDisco Pack es un investigador fiable, el problema ha sido asignado a un CVE para su seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:performance_insight:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B29A22-B34C-4A34-A67B-E1E51E0545A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36520",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Portal in HP Operations Dashboard 2.1 on Windows Server 2003 SP2 allows remote attackers to have an unknown impact, related to a \"Remote exploit,\" as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el portal en HP Operations Dashboard v2.1 para Windows Server 2003 SP2 permite a atacantes remotos provocar un impacto desconocido, relacionado con un exploit remoto, como se ha demostrado por cierto módulo en VulnDisco Pack Professional v8.11. NOTA: hasta el 3-3-2009, esta divulgación no tenía información para su puesta en práctica. En cualquier caso, como el autor de VulnDisco Pack es un investigador reputado, se ha asignado un identificador CVE con fines de seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:operations_dashboard:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C861EC3-DD39-423F-9D80-59CBFEBDF258"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36535",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP OpenView Operations Manager 8.1 on Windows Server 2003 SP2 allows remote attackers to have an unknown impact, related to a \"Remote exploit,\" as demonstrated by a certain module in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2007-3872.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en HP OpenView Operations Manager v8.1 en Windows Server 2003 SP2 permite a atacantes remotos tener un impacto no determinado, relativo a \"Remote exploit,\" como se demostró por un módulo concreto en VulnDisco Pack Professional v8.11, es una vulnerabilidad distinta a CVE-2007-3872. NOTA: como en 20090903, de esto no se tiene información de la acción. Sin embargo como el autor de VulnDisco Pack es un investigador fiable, se le ha asignado un identificador CVE con el propósito de hacer un seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:operations_manager:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "833AEA20-60E8-4F1F-95B9-3520315ABF6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36541",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 9 and 10, OpenSolaris snv_109 through snv_122, and X11 6.4.1 on Solaris 8 does not properly handle Accessibility support, which allows local users to cause a denial of service (system hang) by locking the screen and then attempting to launch an Accessibility pop-up window, related to a regression in certain Solaris and OpenSolaris patches."
      }, {
        "lang" : "es",
        "value" : "xscreensaver (también conocido como Gnome-XScreenSaver) en Sun Solaris v9 y v10, OpenSolaris snv_109 hasta snv_122, y X11 v6.4.1 en Solaris 8 no maneja apropiadamente el soporte Accesibilidad, lo que permite a los usuarios locales causar una denegación de servicio (parada del sistema) cerrando la pantalla y logrando lanzar una venta emergente de Accesibilidad, relativa a una regresión en ciertos parches Solaris y OpenSolaris."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B3BBCE23-9F15-45CD-859F-77ED540B51F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "053A0DA6-483C-49BB-BC7A-E624DB2C269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "447212A4-FACD-475E-A62B-60FE6504F63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB694DC0-407A-4555-8B72-DAF3C169DCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "78B80C92-7EB5-4343-B830-32E8C011E572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "535FF689-13A2-40C6-8706-7782038FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "46E4ED9C-F013-48D2-8642-E5BA7599A512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "843246D3-C2DA-454D-916A-AC8905E5134E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A1E8108D-3CE7-4041-9027-1CA7473389EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "244B7FE4-C485-4993-9810-3433C83A120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BE586AB9-9D46-4BC2-8092-51482F297410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E8585133-1F25-494A-8859-87B1D93305A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_121:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "3D01EACB-9DB4-4940-A1F2-40474B24AEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1A06-2588-47AA-81F8-E3655F915C33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_122:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D1BBB436-9F7A-4E2D-908B-D57A531B1B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5972E930-76E2-40FD-8E7F-74E012D34E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09908FC0-5C90-4BEE-92A4-D7D67D657468"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DBDFD8C-371E-42D2-9635-D8CDD1775984"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.opensolaris.org/view_bug.do?bug_id=6839026",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266469-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.opensolaris.org/view_bug.do?bug_id=6839026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266469-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 10, and OpenSolaris snv_109 through snv_122, does not properly handle Trusted Extensions, which allows local users to cause a denial of service (CPU consumption and console hang) by locking the screen, related to a regression in certain Solaris and OpenSolaris patches."
      }, {
        "lang" : "es",
        "value" : "xscreensaver (también conocido como  Gnome-XScreenSaver) en Sun Solaris v0, y OpenSolaris snv_109 hasta snv_122, no maneja adecuadamente Trusted Extensions, permitiendo a usuarios locales provocar una denegación de servicio (consumo de CPU y bloqueo de consola) mediante el cierre de pantalla, relacionado con una regresión en ciertos parches para Solaris y OpenSolaris."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "78B80C92-7EB5-4343-B830-32E8C011E572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "46E4ED9C-F013-48D2-8642-E5BA7599A512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A1E8108D-3CE7-4041-9027-1CA7473389EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E8585133-1F25-494A-8859-87B1D93305A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_121:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "3D01EACB-9DB4-4940-A1F2-40474B24AEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_122:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D1BBB436-9F7A-4E2D-908B-D57A531B1B3C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B3BBCE23-9F15-45CD-859F-77ED540B51F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "053A0DA6-483C-49BB-BC7A-E624DB2C269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "447212A4-FACD-475E-A62B-60FE6504F63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB694DC0-407A-4555-8B72-DAF3C169DCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "535FF689-13A2-40C6-8706-7782038FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "843246D3-C2DA-454D-916A-AC8905E5134E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "244B7FE4-C485-4993-9810-3433C83A120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BE586AB9-9D46-4BC2-8092-51482F297410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1A06-2588-47AA-81F8-E3655F915C33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5972E930-76E2-40FD-8E7F-74E012D34E39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.opensolaris.org/view_bug.do?bug_id=6839026",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266469-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.opensolaris.org/view_bug.do?bug_id=6839026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266469-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T18:30:00.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The doHotCopy subroutine in socket-server.pl in Zmanda Recovery Manager (ZRM) for MySQL 2.x before 2.1.1 allows remote attackers to execute arbitrary commands via vectors involving a crafted $MYSQL_BINPATH variable."
      }, {
        "lang" : "es",
        "value" : "La subrutina soHotCopy en socket-server.pl en Zmanda Recovery Manager (ZRM) para  MySQL  v2.x anterior a v2.1.1, permite a atacantes remotos ejecutar comandos de su elección a través de vectores que involucran una variable $MYSQL_BINPATH manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zmanda:zrm_for_my_sql:2.1:*:community:*:*:*:*:*",
            "matchCriteriaId" : "AF0F5FC6-EEE9-4515-BE89-72798BCC9644"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.zmanda.com/showthread.php?p=8068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36424",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36429",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://twitter.com/elegerov/statuses/3518763099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://twitter.com/elegerov/statuses/3547652507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.intevydis.com/blog/?p=51",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.zmanda.com/showthread.php?p=8068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://twitter.com/elegerov/statuses/3518763099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://twitter.com/elegerov/statuses/3547652507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.intevydis.com/blog/?p=51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0199",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-09-08T22:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Windows might allow remote attackers to execute arbitrary code via a video file with crafted dimensions (aka framebuffer parameters)."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en el VMnc media codec en VMware Movie Decoder anteriores a v6.5.3 build 185404, VMware Workstation v6.5.x anteriores a v6.5.3 build 185404, VMware Player v2.5.x anteriores a v2.5.3 build 185404, y VMware ACE v2.5.x anteriores a v2.5.3 build 185404 para Windows podría permitir a atacantes remotos ejecutar código de su elección mediante un fichero de video con una dimensión modificada (también conocido como parámetros framebuffer)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71537AE-346D-4BA9-90E7-EA0AB0CD0886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5674C3DD-F510-4701-ACA8-437576307528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62960B2-91AE-4DD7-8085-9BA6BCB84473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:movie_decoder:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE79F3F7-A21A-4CAA-BB0D-2955299EE8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE944A70-CB9C-4712-9802-509531396A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "252D2C0B-B89A-4C89-8D6B-6A8E58FCD8DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DA49FA-6657-45B5-BF69-D3A03BA62A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5.2_build_156735:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0075432-4410-41D7-BF36-C3C56A7CA2A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC6B629-30B3-4C45-B5E9-1B4310F186FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8F3BFF-676B-4E2C-98BA-DCA71E49060F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E658DA-56E8-49F0-B486-4EF622B63627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541D77A2-99C5-4CDB-877F-7E83E1E3369E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000065.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34938",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-25/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506286/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36290",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0012.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2553",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000065.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2009-25/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506286/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1132",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-09-08T22:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the Wireless LAN AutoConfig Service (aka Wlansvc) in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed wireless frame, aka \"Wireless Frame Parsing Remote Code Execution Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento del búfer basado en memoria dinámica en el Servicio Wireless LAN AutoConfig (también llamado Wlansvc) en Microsoft Windows Vista Gold, SP1 y SP2, y Server 2008 Gold y SP2, permite a atacantes remotos ejecutar código de su elección a través de una trama inalámbrica mal formada. También es conocido como \"Vulnerabilidad de Ejecución de Código Remoto en el Análisis de Tramas Inalámbricas\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "2C9B0563-D613-497D-8F2E-515E6DA00CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-251A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-049",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6389",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-251A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1920",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-09-08T22:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JScript scripting engine 5.1, 5.6, 5.7, and 5.8 in JScript.dll in Microsoft Windows, as used in Internet Explorer, does not properly load decoded scripts into memory before execution, which allows remote attackers to execute arbitrary code via a crafted web site that triggers memory corruption, aka \"JScript Remote Code Execution Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El motor de secuencias de comandos JScript v5.1, v5.6, v5.7, y v5.8 en JScript.dll en Microsoft Windows, utilizado en Internet Explorer, no carga apropiadamente dentro de  memoria secuencias de comandos decodificada o  anteriores a la ejecución, lo que permite a los atacantes remoto ejecutar arbitrariamente código a través de una página web manipulada que lanza una corrupción de memoria, también conocido como \"Vulnerabilidad de ejecución remota de código JScript\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "2C9B0563-D613-497D-8F2E-515E6DA00CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-251A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-045",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6316",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-251A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1925",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-09-08T22:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly manage state information, which allows remote attackers to execute arbitrary code by sending packets to a listening service, and thereby triggering misinterpretation of an unspecified field as a function pointer, aka \"TCP/IP Timestamps Code Execution Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "La implementación de TCP/IP en Microsoft Windows Vista Gold, SP1, y SP2 y en Server 2008 Gold y SP2 no maneja adecuadamente la información de estado, permitiendo a atacantes remotos ejecutar código de su elección al enviar paquetes a un servicio en escucha, y así provocar una malinterpretación de un campo no especificado como un puntero a función, también conocido como \"TCP/IP Timestamps Code Execution Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "2C9B0563-D613-497D-8F2E-515E6DA00CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-251A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6374",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-251A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1926",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-09-08T22:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service (TCP outage) via a series of TCP sessions that have pending data and a (1) small or (2) zero receive window size, and remain in the FIN-WAIT-1 or FIN-WAIT-2 state indefinitely, aka \"TCP/IP Orphaned Connections Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1 y SP2, y Server 2008 Gold y SP2 permiten a los atacantes remotos provocar una denegación de servicio (interrupción de TCP) por medio de una serie de sesiones TCP que tienen datos pendientes y un tamaño de ventana de recepción (1) pequeña o (2) cero y permanecen en el estado FIN-WAIT-1 o FIN-WAIT-2 indefinidamente, también se conoce como \"TCP/IP Orphaned Connections Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "2C9B0563-D613-497D-8F2E-515E6DA00CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional:*:*:*:*:*",
            "matchCriteriaId" : "C29F02ED-85FC-4D22-A6DE-5F9C77ECCD70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57797",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.recurity-labs.com/content/pub/Microsoft_Windows_CVE-2009-1926",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506331/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36269",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-251A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5965",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/57797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.recurity-labs.com/content/pub/Microsoft_Windows_CVE-2009-1926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506331/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-251A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2498",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-09-08T22:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) .asf, (2) .wmv, or (3) .wma file, aka \"Windows Media Header Parsing Invalid Free Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows Media Format Runtime v9.0, v9.5, y v11 y Windows Media Services v9.1 y 2008 no no analiza apropiadamente cabeceras malformadas en archivos Advanced Systems Format (ASF), lo que permite a los atacantes remotos ejecutar arbitrariamente código a través de archivo manipulado (1) .asf, (2) .wmv, o (3) .wma, también conocido como \"Vulnerabilidad libre invalidada de analizador de cabeceras en Windows Media\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DEC28F-EB69-4B28-AAE9-674DE2C994E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6DBB016-22A2-4B12-A1A4-DEE8ABF14B9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "87AA5126-90FF-40F5-8664-E8260C2C8CF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61AAD264-CC98-4FB7-BDDD-6920D4AD1B5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "2C9B0563-D613-497D-8F2E-515E6DA00CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_services:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E3CAB6-D1AF-4B13-97E3-0E96D4F32F87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_services:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB686D09-A33F-408E-9083-F988066FCE66"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "2C9B0563-D613-497D-8F2E-515E6DA00CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:media_foundation_sdk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4773A9EC-E368-4198-8BDD-21B5DB296272"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "2C9B0563-D613-497D-8F2E-515E6DA00CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-251A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-047",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6257",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-251A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2499",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-09-08T22:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka \"Windows Media Playback Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows Media Format Runtime v9.0, v9.5, y v11; y Microsoft Media Foundation en Windows Vista Gold, SP1, y SP2 y Server 2008; permite a atacantes remotos ejecutar código a su elección en un fichero MP3 con metadatos manipulados que desembocan en un error de memoria, también llamado \"Vulnerabilidad de error de memoria Windows Media Playback.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DEC28F-EB69-4B28-AAE9-674DE2C994E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6DBB016-22A2-4B12-A1A4-DEE8ABF14B9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "87AA5126-90FF-40F5-8664-E8260C2C8CF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61AAD264-CC98-4FB7-BDDD-6920D4AD1B5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "2C9B0563-D613-497D-8F2E-515E6DA00CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_services:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E3CAB6-D1AF-4B13-97E3-0E96D4F32F87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_services:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB686D09-A33F-408E-9083-F988066FCE66"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "2C9B0563-D613-497D-8F2E-515E6DA00CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_foundation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBC8864-560B-480A-903B-19215000C69D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*",
            "matchCriteriaId" : "26A548AB-7C40-4CB7-B024-8A2DA947F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "5BE99796-BADE-40D1-AD85-03D28A466E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "2C9B0563-D613-497D-8F2E-515E6DA00CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-251A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-047",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5531",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-251A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2519",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-09-08T22:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary code via a crafted web site that triggers \"system state\" corruption, aka \"DHTML Editing Component ActiveX Control Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El control ActiveX \"DHTML Editing Component\" en Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP2 no da formato adecuado a las marcas HTML, permitiendo a atacantes remotos ejecutar código de su elección mediante un sitio web manipulado que provoca una corrupción \"system state\", también conocido como \"DHTML Editing Component ActiveX Control Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36592",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36280",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022843",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-251A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-046",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6271",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/36592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-251A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2628",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-09-08T22:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Windows does not properly handle certain small heights in video content, which might allow remote attackers to execute arbitrary code via a crafted AVI file that triggers heap memory corruption."
      }, {
        "lang" : "es",
        "value" : "El codec multimedia  VMnc en  vmnc.dll en VMware Movie Decoder anterior a v6.5.3 build 185404, VMware Workstation v6.5.x anterior a v6.5.3 build 185404, VMware Player v2.5.x anterior a v2.5.3 build 185404 y  VMware ACE v2.5.x anterior a v2.5.3 build 185404 sobre Windows, no maneja adecuadamente determinados tamaños de altura en el contenido de video, lo que podría permitir a atacantes remotos ejecutar código de su elección  a través de un archivo AVI manipulado que provocaría un corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71537AE-346D-4BA9-90E7-EA0AB0CD0886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5674C3DD-F510-4701-ACA8-437576307528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62960B2-91AE-4DD7-8085-9BA6BCB84473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:movie_decoder:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE79F3F7-A21A-4CAA-BB0D-2955299EE8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE944A70-CB9C-4712-9802-509531396A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "252D2C0B-B89A-4C89-8D6B-6A8E58FCD8DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DA49FA-6657-45B5-BF69-D3A03BA62A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC6B629-30B3-4C45-B5E9-1B4310F186FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8F3BFF-676B-4E2C-98BA-DCA71E49060F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E658DA-56E8-49F0-B486-4EF622B63627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541D77A2-99C5-4CDB-877F-7E83E1E3369E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000065.html",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34938",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/444513",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506286/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36290",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0012.html",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2553",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000065.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/34938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/444513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506286/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3103",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-09-08T22:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka \"SMBv2 Negotiation Vulnerability.\" NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Error de índice de matriz en la implementación del protocolo SMBv2 en srv2.sys en Windows Vista versión Gold, SP1 y SP2, Windows Server 2008 versión Gold y SP2, y Windows 7 RC, de Microsoft, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de sistema) por medio de un carácter & (ampersand) en un campo de encabezado Process ID High en un paquete NEGOTIATE PROTOCOL REQUEST, que activa un intento de desreferencia de una ubicación de memoria fuera de límites, también se conoce como \"SMBv2 Negotiation Vulnerability\" NOTA: algunos de estos datos fueron obtenidos de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7C684420-1614-4DAE-9BD9-F1FE9102A50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:x32:*:*:*:*:*:*",
            "matchCriteriaId" : "9517571A-BC1A-4838-A094-30081A86D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:x64:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7CA7F0-9C4D-4172-91BD-90A8C86EE337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0090.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://blog.48bits.com/?p=510",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://g-laurent.blogspot.com/2009/09/windows-vista7-smb20-negotiate-protocol.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=7093",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://osvdb.org/57799",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/36623",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9594",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/135940",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/975497.mspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.reversemode.com/index.php?option=com_content&task=view&id=64&Itemid=1",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506300/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506327/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36299",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022848",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53090",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6489",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0090.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://blog.48bits.com/?p=510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://g-laurent.blogspot.com/2009/09/windows-vista7-smb20-negotiate-protocol.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=7093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/57799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/135940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/975497.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.reversemode.com/index.php?option=com_content&task=view&id=64&Itemid=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506300/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506327/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T22:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2 before MR3; and Client Security 2.0 before MR7, 3.0, and 3.1 before MR8; when Internet Email Scanning is installed and enabled, allows remote attackers to cause a denial of service (CPU consumption and persistent connection loss) via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Symantec Norton AntiVirus 2005 hasta 2008; Norton Internet Security 2005 hasta 2008; AntiVirus Corporate Edition v9.0 anteriores a MR7, v10.0, v10.1 anteriores a MR8, y v10.2 anteriores a MR3; y Client Security v2.0 anteriores a MR7, v3.0, y v3.1 anteriores a MR8; cuando Internet Email Scanning está instalado y habilitado, permite a los atacantes remotos causar una denegación de servicio (consumo CPU y pérdida de conexión persistente) a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:9.0:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "655D99D5-1805-4A6F-A5C1-FB4A8B3A6520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:9.0:mr6:corporate:*:*:*:*:*",
            "matchCriteriaId" : "BF932C81-A605-4A38-8642-A903692860BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "EEB639EF-B434-42ED-A162-A2593FA78E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0:mr1:corporate:*:*:*:*:*",
            "matchCriteriaId" : "0048A5E9-B07B-44BE-B79C-A37DBE96592A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.0:mr2:corporate:*:*:*:*:*",
            "matchCriteriaId" : "436B467D-0C3C-44FF-A900-431197CA9033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "09C311A9-7F82-46C1-8A69-49C2890B1CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.1:mp1:corporate:*:*:*:*:*",
            "matchCriteriaId" : "9ADCB5F2-CCE8-4123-8E7E-EAF4885FD482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.1:mr4:corporate:*:*:*:*:*",
            "matchCriteriaId" : "6110CF45-3C3D-4560-A8F3-A5C47CD5265F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.1:mr5:corporate:*:*:*:*:*",
            "matchCriteriaId" : "D1F6FC33-2929-45A3-9AD1-057456EC366E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.1:mr6:corporate:*:*:*:*:*",
            "matchCriteriaId" : "084FCB30-F79A-45D0-B310-F3DB20EE3D2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.1:mr7:corporate:*:*:*:*:*",
            "matchCriteriaId" : "B24D11E4-5927-4C3D-BBEB-21DC2990122F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.2:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "94E10F15-5F41-4B6B-9C42-7ED34E8420C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus:10.2:mr2:corporate:*:*:*:*:*",
            "matchCriteriaId" : "8F35EA2A-B446-446F-8FDE-1C09D9A73687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDD0E02-306D-4675-B73A-2C2F619CDDCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0:mr6:*:*:*:*:*:*",
            "matchCriteriaId" : "437DD896-93F5-49E1-AEE6-F7910F087FC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844A6963-F60C-4D48-8445-9056C99201D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0:mr1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D4A3BB0-C293-47D5-AC66-4AFAEC45EFBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0:mr2:*:*:*:*:*:*",
            "matchCriteriaId" : "120CD307-806A-45A8-9DCF-D23FEE072432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D24019B-20F0-4B4D-86A5-9409698E6216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.1:mr4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD25A172-D70C-44E0-9551-F390AF0AD8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.1:mr5:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB89648-5727-4F8F-83B7-3E11CE69EA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.1:mr6:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5A8C92-95C4-4ECC-AEA4-37F830B890E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.1:mr7:*:*:*:*:*:*",
            "matchCriteriaId" : "589E62A1-067B-4220-9959-03367E5E014F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11477B6E-C4C5-4664-91A7-D253077981F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44843812-35FC-4378-B239-EEC74A0C8A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C988B309-F397-412A-8570-C3823C7FE7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA990FD5-DF2F-470A-936D-155A36BEDE3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C7CD61-A47B-4521-8C6F-4BB1F4C95614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CC64B1-772C-42A9-9B0A-08CA92DC87E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692ECBCD-AB6B-4965-93F4-BDAD4777C018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF87752-C86D-4C89-9DE9-F874068C89EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2449",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/34670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T22:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 211.241 for Domino 8.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR EZEL7UURYC."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS)IBM Lotus iNotes (conocido como Domino Web Access o DWA) anterior v211.241 para Domino v8.0.1 permite a atacantes remotos ejecutar código web o HTML de su elección a través de vectores no especificados, como SPR EZEL7UURYC."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:domino_web_access:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6608F6B-DA78-4CCF-8496-67EA0AB87D84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36626",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27016745",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2557",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27016745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T22:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.37 does not properly implement security constraints on the (1) doGet and (2) doTrace methods, which allows remote attackers to bypass intended access restrictions and obtain sensitive information via a crafted HTTP HEAD request to a Web Application."
      }, {
        "lang" : "es",
        "value" : "El componente Servlet Engine/Web Container en IBM WebSphere Application Server (WAS) v6.0.2 anterior a v6.0.2.37, no implementa adecuadamente las restricciones de seguridad sobre los métodos (1) doGet y (2) doTrace, lo que permite a atacantes remotos evitar las restricciones de acceso intencionadas y obtener información sensible a través de una petición de cabecera (HEAD) HTTP a la Aplicación Web."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:fp17:*:*:*:*:*",
            "matchCriteriaId" : "D592217D-3489-40AE-8338-BF5AA5BBA251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2604E01-E43E-4882-8896-5E646E850286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B68EE27-CC4F-4530-9DFE-D94171C45F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E5AEC-5C35-4962-B9BB-32D66290D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEBF289-F630-4386-8F79-5A1BF73BE6F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521DB050-3C94-49BF-8666-6EC2C358AA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98E5593-1534-48E2-8CD5-B2D1CACDDAB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4AB6BD-4439-4100-A3CE-4600AED10B65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD71D5EA-9AF5-422C-810A-D136A5F132F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9D6BDA-39E1-4D15-9D86-E212809998FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2A78FE-8FA6-4532-9E9E-CF6F860EFAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BEDD70-B6DB-448F-A998-3E8774B0DB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63099EF9-0512-44CD-946A-9B25144E50D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9132BB1-5E2E-4CA6-9B63-027CF2A7229D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D839EDB9-A44F-4F7F-94EF-1A77371D705C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4421929D-C4B9-43C5-BE61-E68484D3B198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB622117-C91F-47D2-9832-B7DB340796E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D87691D-0719-4447-B258-5FA2BD10F11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5594891-E790-44E7-BC9E-0A413B385E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C286007A-361F-47BB-A099-E041D5CF6E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD464F13-942D-40EC-8144-6D23A0AEAA81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BC8C52-DA95-4BF2-AD47-9922741CAAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D51FEAC-6D35-4DDA-AB7E-6226A27CCA85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK83258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27006876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK83258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0627",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-09-08T23:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cisco NX-OS before 4.0(1a)N2(1), when running on Nexus 5000 platforms, allows remote attackers to cause a denial of service (crash) via an unspecified \"sequence of TCP packets\" related to \"TCP State manipulation,\" possibly related to separate attacks against CVE-2008-4609."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Cisco NX-OS anterior a v4.0(1a)N2(1), cuando se ejecuta sobre plataformas Nexus 5000, permite a atacantes remotos provocar una denegación de servicio (caída) a través de \"una secuencia no especificada de paquetes TCP\", relacionadas con la \"manipulación del estado TCP\". Posiblemente relacionado con ataques distintos contra el CVE-2008-4609."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0",
            "matchCriteriaId" : "1788D9DF-BA68-45B7-B669-A621C221485E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:nexus_5000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB04F2B-04E2-4EB1-83BA-4F7537AF1099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16DE0FB3-1DC2-4BA4-BD26-FF6E7C06EC11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022847",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T23:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in svtools/source/filter.vcl/wmf/enhwmf.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allows remote attackers to execute arbitrary code via a crafted EMF file, a similar issue to CVE-2008-2238."
      }, {
        "lang" : "es",
        "value" : "Hay un desbordamiento de búfer en la región heap de la memoria en svtools/source/filter.vcl/wmf/enhwmf.cxx en Go-oo versiones 2.xy 3.x anterior a 3.0.1, anteriormente ooo-build y relacionado con OpenOffice.org (OOo), permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo EMF creado, un problema similar al CVE-2008-2238."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openoffice.org:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F46C7F-E645-4F87-B897-431039A17BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openoffice.org:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2693A016-B0D3-4B14-9EAF-D79623931CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openoffice.org:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2CB19D-E988-4757-A06C-C10FA529822B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openoffice.org:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A76AAD8-2ACB-44C4-895A-FBA85058FC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openoffice.org:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71982BDE-67C3-4BEF-B878-CD5701F48983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openoffice.org:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "229AB3A5-5ED7-4B43-9116-E432BC139481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openoffice.org:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD5BBAD-8555-4C89-9168-4DB54636D13A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openoffice.org:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EA0695-7A9E-44C4-AF0C-070F4B974989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openoffice.org:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E3D4EA-25F3-4EB9-A1E4-AD10315B6CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openoffice.org:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78642E4-BBF6-4593-9666-42ED2145107E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openoffice.org:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA9E3C2-AF95-48D4-9329-7D0C424DCC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openoffice.org:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F711CC8-3DD6-479B-AC6A-1AB3D90DE1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:openoffice.org:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64366513-9A88-4D89-BB29-5B91781AA51C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cgit.freedesktop.org/ooo-build/ooo-build/commit/?id=49b4e38571912a7d28c4044e5b2bd57e51c77d55",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125258116800739&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125265261125765&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125363445702917&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36613",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1880",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/26/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cgit.freedesktop.org/ooo-build/ooo-build/commit/?id=49b4e38571912a7d28c4044e5b2bd57e51c77d55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125258116800739&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125265261125765&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125363445702917&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/26/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of openoffice.org and openoffice.org2 packages as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
        "lastModified" : "2009-09-10T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2632",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-09-08T23:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the SIEVE script component (sieve/script.c), as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to the incorrect use of the sizeof operator for determining buffer length, combined with an integer signedness error."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en el componente script SIEVE (archivo sieve/script.c), tal y como es usado en cyrus-imapd en IMAP Server versiones 2.2.13 y 2.3.14, y Dovecot versiones 1.0 anteriores a 1.0.4 y versiones 1.1 anteriores a 1.1.7, de Cyrus, permite a los usuarios locales ejecutar código arbitrario y leer o modificar mensajes arbitrarios por medio de un script SIEVE diseñado, relacionado con el uso incorrecto del operador sizeof para determinar la longitud del búfer, combinado con un error de firma de enteros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmu:cyrus_imap_server:2.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE067B25-86BF-4607-9988-F7564478805A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmu:cyrus_imap_server:2.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "507FD8BF-2387-4745-A15F-FC7389D02695"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dovecot.org/list/dovecot-news/2009-September/000135.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/36629",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36632",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36698",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/36713",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/36904",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1881",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/14/3",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.osvdb.org/58103",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36296",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36377",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-838-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2559",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2641",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sieve/script.c.diff?r1=1.62&r2=1.62.2.1&only_with_tag=cyrus-imapd-2_2-tail",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://lists.andrew.cmu.edu/pipermail/cyrus-cvs/2009-September/001253.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://lists.andrew.cmu.edu/pipermail/cyrus-cvs/2009-September/001254.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10082",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00491.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://dovecot.org/list/dovecot-news/2009-September/000135.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/14/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/58103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-838-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sieve/script.c.diff?r1=1.62&r2=1.62.2.1&only_with_tag=cyrus-imapd-2_2-tail",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.andrew.cmu.edu/pipermail/cyrus-cvs/2009-September/001253.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.andrew.cmu.edu/pipermail/cyrus-cvs/2009-September/001254.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00491.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T23:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service."
      }, {
        "lang" : "es",
        "value" : "Symantec Altiris Deployment Solution v6.9.x anterior a v6.9 SP3 Build 430 no restringe el acceso de forma adecuada al puerto de escucha para el servicio DBManager, esto permite a atacantes remotos evitar la autenticación y modificar tareas o la base de datos Altiris mediante una conexión a este servicio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0002047-0965-4086-A5E6-AEC02200B6CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD29C7F-B147-4CDE-8AC3-FCA6CA15C464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC0FB60-BF58-455B-B5D1-97EDF2D6D0E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36502",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36110",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022779",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T23:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Aclient GUI in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 installs a client executable with insecure permissions (Everyone:Full Control), which allows local users to gain privileges by replacing the executable with a Trojan horse program."
      }, {
        "lang" : "es",
        "value" : "Aclient GUI en Symantec Altiris Deployment Solution v6.9.x anterior v6.9 SP3 Build 430 instala un cliente ejecutable con permisos no seguros (todos: control total), que permite a usuarios locales obtener privilegios y reemplazar el ejecutable con un programa troyano."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0002047-0965-4086-A5E6-AEC02200B6CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD29C7F-B147-4CDE-8AC3-FCA6CA15C464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9.164:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA744B2A-B81E-4E97-A720-307041478B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9.176:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9301CFC-5925-4249-8439-5E2BBAF06687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4070F9F-F63E-4708-8DA0-339A777383B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9DD5AC-7E4C-4A62-A5B3-B179359635A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36502",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T23:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the AClient agent in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430, when key-based authentication is being used between a deployment server and a client, allows remote attackers to bypass authentication and execute arbitrary commands as SYSTEM by spoofing the deployment server and sending \"alternate commands\" before the handshake is completed."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el agente AClient en Symantec Altiris Deployment Solution v6.9.x anteriores a 6.9 SP3 Build 430, cuando la autenticación basado en clave está siendo utilizada entre un servidor de desarrollo y un cliente, permite a los atacantes remotos evitar la autenticación y eje3cutar arbitrariamente comandos como SYSTEM suplantando el servidor de desarrollo y enviando \"comandos alternativos\" anteriores a que la negociación esté completada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0002047-0965-4086-A5E6-AEC02200B6CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD29C7F-B147-4CDE-8AC3-FCA6CA15C464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC0FB60-BF58-455B-B5D1-97EDF2D6D0E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36502",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36112",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-08T23:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en la funcionalidad de transferencia de ficheros en Symantec Altiris Deployment Solution v6.9.x anterior a v6.9 SP3 Build 430, permite a atacantes remotos leer archivos sensibles y prevenir las actualizaciones de los clientes mediante la conexión a un puerto de transferencia antes de que lo  haga el autentico cliente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0002047-0965-4086-A5E6-AEC02200B6CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD29C7F-B147-4CDE-8AC3-FCA6CA15C464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9.164:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA744B2A-B81E-4E97-A720-307041478B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9.176:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9301CFC-5925-4249-8439-5E2BBAF06687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4070F9F-F63E-4708-8DA0-339A777383B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9DD5AC-7E4C-4A62-A5B3-B179359635A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36502",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-09T17:30:01.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information (session details and order history of other users) via a crafted cookie."
      }, {
        "lang" : "es",
        "value" : "OXID eShop v4.x anterior a v4.1.4-21266, v3.x, y v2.x, permite a atacantes remotos obtener información sensible (detalles de sesión y orden del histórico de otros usuarios) a través de una cookie manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:*:*:enterprise:*:*:*:*:*",
            "versionEndIncluding" : "2.7.0.3",
            "matchCriteriaId" : "B419C941-7801-40D4-B2BD-BD164714373B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:*:*:professional:*:*:*:*:*",
            "versionEndIncluding" : "3.0.4.1",
            "matchCriteriaId" : "76797267-F284-43E9-9B4B-76FCF0D5CF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_13895:*:community:*:*:*:*:*",
            "matchCriteriaId" : "35418237-65BC-4D9A-BBF0-B493AE5D614C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_13895:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "F0FFF17B-3157-4EC7-8771-0E80DC660AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_13895:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "B1DF3C0C-7C52-4CCF-852B-547E967C297D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_13934:*:community:*:*:*:*:*",
            "matchCriteriaId" : "88F9BFE8-1F36-401E-B61E-05094B40DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_13934:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "78EABFE9-C31D-4010-85ED-2F4695CEEDCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_13934:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "09F5D5DA-2667-4EC7-BC17-7A5EDD555E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_14260:*:community:*:*:*:*:*",
            "matchCriteriaId" : "EC8BD657-13BE-4AA8-97CF-BACA19D09BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_14260:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "F137D711-4793-41D7-8F93-18A9CB5BBE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_14260:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D7478417-B8F4-471E-8FDF-E4F0AE201306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.1_14455:*:community:*:*:*:*:*",
            "matchCriteriaId" : "06FF6116-54F6-4891-B625-155F4390F20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.1_14455:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "1788B08F-7904-4922-868A-DD3F080D420C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.1_14455:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "74A7D3CB-5183-4191-88BC-2D9005078C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.2_14842:*:community:*:*:*:*:*",
            "matchCriteriaId" : "677CFAC0-64FF-46BE-92EE-4F23EB2A86BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.2_14842:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "34A9F0DE-D85A-4D22-A2C9-6627D1240E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.2_14842:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "A1CBE1A6-B4B1-4DEA-9BC0-0E341D3EEDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.2_14967:*:community:*:*:*:*:*",
            "matchCriteriaId" : "8E9A0B9A-0514-4ACE-95AB-7B270C9CDD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.2_14967:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "13FCEFC1-F560-4DB6-B5F7-9B66B72B8E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.2_14967:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3906AE67-EF4D-41EF-BF38-3159223FBF30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.1.0_15990:*:community:*:*:*:*:*",
            "matchCriteriaId" : "2D1FDBC8-7451-483E-BE6C-1B95596233C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.1.0_15990:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "70ABDEB3-A81F-4D63-B2AE-D86C63BC07FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.1.0_15990:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "279D75B5-88C3-4B6F-986E-244F4135F7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.0-17976:*:community:*:*:*:*:*",
            "matchCriteriaId" : "09C1716A-0B38-4E1D-9E1A-FD0E5E06A1D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.0-17976:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "E2C078EE-8AE9-4CB5-B5F2-A35C824B99CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.0-17976:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "5830331E-8B65-4EDF-BF6C-9907F73C65E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.1-18442:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D51ABC69-676C-410D-8D63-884A614396BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.2-18998:*:community:*:*:*:*:*",
            "matchCriteriaId" : "91680B03-7671-4A9F-8366-EB27BFAA64C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.2-18998:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "D460A617-8ECD-4EFD-A9D8-46A262AB57BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.2-18998:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "140C7C21-60D3-4C0A-B964-56F27C53C384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.3-19918:*:community:*:*:*:*:*",
            "matchCriteriaId" : "E72F522A-6901-4B41-9ADD-4F66A495F0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.3-19918:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "F288FEDB-3AAD-4A4A-8526-9844EE0E5328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.3-19918:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "32FDCF5F-6AE0-4AD3-833C-159348FBF125"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oxidforge.org/wiki/Security_bulletins/2009-003",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.oxidforge.org/wiki/Security_bulletins/2009-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-09T18:30:00.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11.  NOTE: this is a regression error related to CVE-2003-0967."
      }, {
        "lang" : "es",
        "value" : "La función rad_decode FreeRADIUS  anterior a v1.1.8, permite a atacantes remotos provocar una denegación de servicio (caída de radiusd) a través de los atributos zero-length Tunnel-Password. NOTA: esto es una regresión al error relacionado con el CVE-2003-0967."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.7",
            "matchCriteriaId" : "F6D6F259-6145-48C9-A81B-5A331F43A76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AEDD86F-92B9-43EC-80E3-54010E249FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDB110B-4057-4BA4-993A-9DA14888A093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C8708B-4D1A-48A7-87DF-DF4B53E66D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0369C1A6-A0FE-4BF8-89F5-5ED384565DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1638CC08-8886-4863-8532-883A8616592F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4FD4F2-0449-4562-ABF2-927206CB77DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636F3F00-97A5-4497-A6A9-722AFC5BD689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECDFCD7-0189-4C59-842D-C5F9064033A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3EC2A3-5FB6-4D39-B1EA-C8E17AF1F0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD634946-ED9B-47EB-8D0F-88EA6057D17C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49152208-4DBD-4AF7-BCB3-3D56650899F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90AF846A-F239-4963-B260-7CB48334B8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E95ADE53-BFBE-4B06-A1BF-EF576D567554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F03F8FE-80BA-41A3-85CE-FFB6A18E6DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C48FE12-68CB-462D-B75E-204894325F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1321F1E7-4B14-4B16-91D0-AE9E9951D12A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313EFEC5-1580-4ACE-BB9C-84E3714F2C37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B93BEF0-09C1-4DF8-8761-582DE975F306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F927232-6275-497E-BF09-B4DCF19642C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F07F89D7-504B-4892-9840-A3FED5274F5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://github.com/alandekok/freeradius-server/commit/860cad9e02ba344edb0038419e415fe05a9a01f4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/09/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1451.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.freeradius.org/pipermail/freeradius-users/2009-September/msg00242.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://github.com/alandekok/freeradius-server/commit/860cad9e02ba344edb0038419e415fe05a9a01f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/09/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1451.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.freeradius.org/pipermail/freeradius-users/2009-September/msg00242.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-09T19:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.0 allows remote attackers to gain administrator privileges and access the shop backend via a crafted parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en OXID eShop Professional, Enterprise y Community Edition anterior a v4.1.0, permite a atacantes remotos obtener privilegios de administrador y obtener acceso a la parte de administración de la tienda a través de un parámetro manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13895:*:community_edition:*:*:*:*:*",
            "matchCriteriaId" : "E44C79B6-3202-4BC2-B9B0-D64D901F9311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13895:*:enterprise_edition:*:*:*:*:*",
            "matchCriteriaId" : "5C2B1CDA-C7C5-47E7-9546-30654B09EED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13895:*:pro_edition:*:*:*:*:*",
            "matchCriteriaId" : "87B0B40A-D8E6-4012-ADFF-66D31D7C4527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13934:*:community_edition:*:*:*:*:*",
            "matchCriteriaId" : "4D7542E8-0B6F-47D7-BF04-01E1B3BBA3AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13934:*:enterprise_edition:*:*:*:*:*",
            "matchCriteriaId" : "8CFC66DD-A1C2-4480-97EA-DD27E9148D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13934:*:pro_edition:*:*:*:*:*",
            "matchCriteriaId" : "C8D6A066-0BF4-4FEA-9954-D296865207AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_14260:*:community_edition:*:*:*:*:*",
            "matchCriteriaId" : "56B2B231-EE68-4256-B1D5-64E2329AE0AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_14260:*:enterprise_edition:*:*:*:*:*",
            "matchCriteriaId" : "4C263684-C635-4770-BBD4-2E4353D4D9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_14260:*:pro_edition:*:*:*:*:*",
            "matchCriteriaId" : "EF6C39CF-0FF8-4539-AFAB-CACD20C37965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.1_14455:*:community_edition:*:*:*:*:*",
            "matchCriteriaId" : "877CDCA5-0224-42F9-AD1F-6C5267EACBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.1_14455:*:enterprise_edition:*:*:*:*:*",
            "matchCriteriaId" : "BBBE0604-2224-4B36-9508-FB2CE995AB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.1_14455:*:pro_edition:*:*:*:*:*",
            "matchCriteriaId" : "46DE5EA3-A071-44D8-8E59-06A34F142F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.2_14842:*:community_edition:*:*:*:*:*",
            "matchCriteriaId" : "63F3D137-A115-487D-88D0-3CDCF78A9786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.2_14842:*:enterprise_edition:*:*:*:*:*",
            "matchCriteriaId" : "32DE0A8E-9586-408D-BC78-C6ACF0E5DAD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.2_14842:*:pro_edition:*:*:*:*:*",
            "matchCriteriaId" : "5C93FF04-F9A5-4A29-A86E-76C68DF3521D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.2_14967:*:enterprise_edition:*:*:*:*:*",
            "matchCriteriaId" : "541F6878-696B-4F12-B96F-CA61083C1C16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.2_14967:*:pro_edition:*:*:*:*:*",
            "matchCriteriaId" : "7651E6B7-CC66-48EF-96C3-AD6BE284510A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.1.0_15990:*:enterprise_edition:*:*:*:*:*",
            "matchCriteriaId" : "9D0B0694-BD8E-463D-B069-D1A64F4017D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:4.0.1.0_15990:*:pro_edition:*:*:*:*:*",
            "matchCriteriaId" : "0E298B3E-64EF-4511-9401-AAB8F8680F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:44.0.1.0_15990:*:community_edition:*:*:*:*:*",
            "matchCriteriaId" : "DF9E8AEC-F335-430F-95C4-B3C65230E73C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop4.0.0.2_14967:*:community_edition:*:*:*:*:*:*",
            "matchCriteriaId" : "55081C31-C15A-4EAF-81CE-7A47C705FAF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oxidforge.org/wiki/Security_bulletins/2009-001",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.oxidforge.org/wiki/Security_bulletins/2009-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-09T19:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en OXID eShop Professional, Enterprise y Community Edition anterior a v4.1.2, v3.x y 2.x, permite a atacantes remotos obtener privilegios de acceso a las revisiones de productos a través de un parámetro manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:*:*:enterprise:*:*:*:*:*",
            "versionEndIncluding" : "2.7.0.3",
            "matchCriteriaId" : "B419C941-7801-40D4-B2BD-BD164714373B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:*:*:professional:*:*:*:*:*",
            "versionEndIncluding" : "3.0.4.1",
            "matchCriteriaId" : "76797267-F284-43E9-9B4B-76FCF0D5CF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_13895:*:community:*:*:*:*:*",
            "matchCriteriaId" : "35418237-65BC-4D9A-BBF0-B493AE5D614C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_13895:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "F0FFF17B-3157-4EC7-8771-0E80DC660AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_13895:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "B1DF3C0C-7C52-4CCF-852B-547E967C297D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_13934:*:community:*:*:*:*:*",
            "matchCriteriaId" : "88F9BFE8-1F36-401E-B61E-05094B40DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_13934:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "78EABFE9-C31D-4010-85ED-2F4695CEEDCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_13934:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "09F5D5DA-2667-4EC7-BC17-7A5EDD555E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_14260:*:community:*:*:*:*:*",
            "matchCriteriaId" : "EC8BD657-13BE-4AA8-97CF-BACA19D09BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_14260:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "F137D711-4793-41D7-8F93-18A9CB5BBE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.0_14260:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D7478417-B8F4-471E-8FDF-E4F0AE201306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.1_14455:*:community:*:*:*:*:*",
            "matchCriteriaId" : "06FF6116-54F6-4891-B625-155F4390F20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.1_14455:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "1788B08F-7904-4922-868A-DD3F080D420C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.1_14455:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "74A7D3CB-5183-4191-88BC-2D9005078C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.2_14842:*:community:*:*:*:*:*",
            "matchCriteriaId" : "677CFAC0-64FF-46BE-92EE-4F23EB2A86BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.2_14842:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "34A9F0DE-D85A-4D22-A2C9-6627D1240E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.2_14842:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "A1CBE1A6-B4B1-4DEA-9BC0-0E341D3EEDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.2_14967:*:community:*:*:*:*:*",
            "matchCriteriaId" : "8E9A0B9A-0514-4ACE-95AB-7B270C9CDD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.2_14967:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "13FCEFC1-F560-4DB6-B5F7-9B66B72B8E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.0.2_14967:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3906AE67-EF4D-41EF-BF38-3159223FBF30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.1.0_15990:*:community:*:*:*:*:*",
            "matchCriteriaId" : "2D1FDBC8-7451-483E-BE6C-1B95596233C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.1.0_15990:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "70ABDEB3-A81F-4D63-B2AE-D86C63BC07FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.0.1.0_15990:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "279D75B5-88C3-4B6F-986E-244F4135F7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.0-17976:*:community:*:*:*:*:*",
            "matchCriteriaId" : "09C1716A-0B38-4E1D-9E1A-FD0E5E06A1D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.0-17976:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "E2C078EE-8AE9-4CB5-B5F2-A35C824B99CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.0-17976:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "5830331E-8B65-4EDF-BF6C-9907F73C65E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.1-18442:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D51ABC69-676C-410D-8D63-884A614396BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.2-18998:*:community:*:*:*:*:*",
            "matchCriteriaId" : "91680B03-7671-4A9F-8366-EB27BFAA64C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.2-18998:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "D460A617-8ECD-4EFD-A9D8-46A262AB57BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.2-18998:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "140C7C21-60D3-4C0A-B964-56F27C53C384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.3-19918:*:community:*:*:*:*:*",
            "matchCriteriaId" : "E72F522A-6901-4B41-9ADD-4F66A495F0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.3-19918:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "F288FEDB-3AAD-4A4A-8526-9844EE0E5328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxid:eshop:4.1.3-19918:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "32FDCF5F-6AE0-4AD3-833C-159348FBF125"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oxidforge.org/wiki/Security_bulletins/2009-002",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.oxidforge.org/wiki/Security_bulletins/2009-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-09T22:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el Java Web Start Command Launcher en Java para Mac OS X v10.5 anterior a la actualización 5, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2442D35-7484-43D8-9077-3FDF63104816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC90AA12-DD17-4607-90CB-E342E83F20BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3267A41-1AE0-48B8-BD1F-DEC8A212851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA315DB-10DF-4D18-A575-37A70F9AFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855288F1-0242-4951-AB3F-B7AF13E21CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082781-B93E-4B84-94F2-FA9749B4D92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1EBF04-C440-4A6B-93F2-DC3A812728C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB077A2-927B-43AF-BFD5-0E78648C9394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2398ADC8-A106-462E-B9AE-F8AF800D0A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8648C-5469-4280-A581-D4A9A41B7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7817232-BE3E-4655-8282-A979E5D40D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8D614-E1EE-42F1-9E55-EA54FB500621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73BED9E-29FB-4965-B38F-013FFE5A9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147E866-B80F-4FFA-BBE8-19E84A46DB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF94705-562C-4EC8-993E-1AD88F01549C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:java_1.4:*:21:*:*:*:*:*:*",
            "versionEndIncluding" : "2",
            "matchCriteriaId" : "CA48B4BD-D73D-406E-A2CB-40AFD586A6E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:java_1.4:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D939C2B-44CB-4FFF-A3A1-AE34CF5EEC9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:java_1.4:2:16:*:*:*:*:*:*",
            "matchCriteriaId" : "C456DD9A-A666-4F58-A62E-31783674B0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:java_1.4:2:18:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B0BBE8-D809-47D4-BE97-89DC01AAA9A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:java_1.5:*:19:*:*:*:*:*:*",
            "versionEndIncluding" : "0",
            "matchCriteriaId" : "3BC5B357-2264-4E59-BB14-8FEFD6BC5F1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:java_1.6:*:13:*:*:*:*:*:*",
            "versionEndIncluding" : "0",
            "matchCriteriaId" : "B7F07B54-7C97-46EF-8D6E-6DF25E01344C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:java_1.6:0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3921FB86-2E5A-4756-B59F-0F093B28590A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:java_1.6:0:05:*:*:*:*:*:*",
            "matchCriteriaId" : "750853B2-5D03-48D2-A6A8-6084312D1C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:java_1.6:0:07:*:*:*:*:*:*",
            "matchCriteriaId" : "E286B78C-E651-483F-8778-DE22A5197C91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022820",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-09T22:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows remote attackers to execute arbitrary script in Internet Explorer's Local Machine Zone via a crafted feed, aka SPR RGAU7RDJ9K."
      }, {
        "lang" : "es",
        "value" : "El widget RSS reader en Lotus Notes de IBM versiones 8.0 y 8.5, guarda elementos de una fuente RSS como documentos HTML locales, lo que permite a los atacantes remotos ejecutar scripts arbitrarios en la Local Machine Zone de Internet Explorer  por medio de un feed diseñado, también se conoce como SPR RGAU7RDJ9K."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0119A252-73B1-490F-9371-06E8FDB8B979"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36813",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21403834",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.scip.ch/?vuldb.4021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506296/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21403834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.scip.ch/?vuldb.4021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-09T22:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "SolarWinds TFTP Server v9.2.0.111 y anteriores permite a atacantes remotos provocar una denegación de servicio (parada del servicio) a través de una petición Option Acknowledgement (OACK) manipulada. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:tftp_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.2.0.111",
            "matchCriteriaId" : "EEDEAA42-AD4C-4B17-BC26-43EE11F5F0C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:tftp_server:5.0.55:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C0E7CE16-41F8-49E4-97B3-81D8A507E03A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:tftp_server:5.0.60:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "CC71B132-C2EE-490E-BF5F-7F4AF7FF49BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:tftp_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B81E06B-C2C5-435A-8801-2FAA7A9F6115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:tftp_server:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614A5ECD-4D35-4B02-9105-06C234AEA7A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36505",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36182",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-09T22:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the year parameter in a calendar action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Uiga Church Portal, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"year\" en una acción \"calendar\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uiga:church_portal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0FE5883-4483-4C83-81F7-2F925C185CF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57464",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36479",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2458",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3117",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-09T22:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in category.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en category.php en Snow Hall Silurus System v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"ID\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snowhall:silurus_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30A6EFA-CE20-44CA-B354-B3DFE5900328"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36124",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2467",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3118",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-09T22:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in mod/poll/comment.php in the vote module in Danneo CMS 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the comtext parameter, in conjunction with crafted comname and comtitle parameters, in a poll action to index.php, related to incorrect input sanitization in base/danneo.function.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en mod/poll/comment.php en el módulo de voto en Danneo CMS v0.5.2  anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"context\", conjuntamente con los parámetros modificados \"comname\" y \"comtitle\" en una acción \"poll\" al index.php. Relacionado con una limpieza incorrecta de los datos de entrada en base/danneo.function.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:danneo:cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.2",
            "matchCriteriaId" : "A61C4D44-70DD-400C-82B0-33160DCCB9A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:danneo:cms:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34DB705-9A63-4B8A-953D-FA046D067412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:danneo:cms:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3096EA16-F0C8-4636-9CD1-D97CC05B7528"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/danneo052-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36440",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2459",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/danneo052-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-09T22:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in screen.php in the Download System mSF (dsmsf) module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the view_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en screen.php del módulo Download System mSF (dsmf) para PHP-Fusion, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"view_id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x-iweb.ru:download_system_msf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E40DF1-2A0A-4765-953B-4F26CF5AAA47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:php-fusion:php-fusion:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E3E18BD-EA3F-4136-A256-A6A74F7066DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/phpfusiondsmsf-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36180",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2469",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/phpfusiondsmsf-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-09T22:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos de sitios cruzados (XSS) en public/index.php en BIGACE Web CMS v2.6, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del parámetro \"id\". NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigace:bigace:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F31B8D-9F25-44C6-8D25-A422F1A3D2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bigace.cvs.sourceforge.net/viewvc/bigace/BIGACE/CORE/public/index.php?revision=1.22&view=markup",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36523",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bigace.cvs.sourceforge.net/viewvc/bigace/BIGACE/CORE/public/index.php?revision=1.22&view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3121",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-09T22:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Ajax Table module 5.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en el el módulo Ajax Table v5.x para Drupal, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chris_shattuck:ajaxtable:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67343C11-7314-4634-9B31-E5D4EFFC08B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/560298",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36497",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2452",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/560298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-09T22:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary users and nodes via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El módulo Ajax Table v5.x para Drupal, no realiza un control de acceso, lo que permite a atacantes remotos eliminar archivos y nodos de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chris_shattuck:ajaxtable:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67343C11-7314-4634-9B31-E5D4EFFC08B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/560298",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36497",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/57435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2452",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/560298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/57435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-09T22:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in gallery/gallery.php in Wap-Motor before 18.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the image parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en gallery/gallery.php en Wap-Motor anterior a 18.1, permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro \"image\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:visavi:wap-motor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "18.0",
            "matchCriteriaId" : "4115BA8E-01F9-41C2-AB13-53A76BADACC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57426",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/wapmotor-lfi.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36416",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/wapmotor-lfi.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-09T22:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in get_message.cgi in QuarkMail allows remote attackers to read arbitrary files via a .. (dot dot) in the tf parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en get_message.cgi in QuarkMail, permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro \"tf\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipmotor:quarkmail:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E194B0A-92FE-41B6-9EF1-2C6A2854A7DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/quarkmail-lfi.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2460",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/quarkmail-lfi.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in lib/silcclient/client_entry.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the (1) silc_client_add_client, (2) silc_client_update_client, and (3) silc_client_nickname_format functions."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de formato de cadena en lib/silcclient/client_entry.c de Secure Internet Live Conferencing (SILC) Toolkit anterior a v1.1.10, y SILC Client anterior a v1.1.8, permite a atacantes remotos ejecutar código de su elección a través de especificadores de formato de cadena en un campo nickname (apodo). Está relacionado con las funciones (1) silc_client_add_client, (2) silc_client_update_client y (3) silc_client_nickname_format."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_client:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.7",
            "matchCriteriaId" : "818C2A1A-90A7-4B9C-8A41-F99B641C679E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_client:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F3F92C-7A47-4F14-BB23-74902AACB8E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_client:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F083A8-E3BD-4434-9F55-93E7D5B8F735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_client:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7036B3C2-0D64-474E-81CF-2013F2F20AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_client:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3471C30-9633-4A9D-A445-8B286C1294E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_client:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75B46F7C-353D-41C7-8F39-7BE3FC2C83EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.9",
            "matchCriteriaId" : "3F1B96DE-36B1-484B-87FC-6156D8B65F75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06811A1-DF33-4EC9-A2EE-49CE2F4A4EC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE803FA-43C9-4565-A1B6-6890A2275A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9754DA96-8464-412C-8337-51F8DE9884B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4BC8115-1A4B-4CFD-9431-3C2A231D0237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262AEDC5-8FB8-4D15-AC4D-906110718D07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F422F232-FDA3-4FB4-AD84-2641EF0A0134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "301B0871-8F41-483F-B457-488A89428975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B207531-E87A-49F4-8D49-BF7BB9F791DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36134",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36614",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://silcnet.org/docs/changelog/SILC%20Client%201.1.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.10",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://silcnet.org/docs/release/SILC%20Client%201.1.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://silcnet.org/general/news/news_client.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://silcnet.org/general/news/news_toolkit.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1879",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/31/5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/03/5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35940",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2150",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://silcnet.org/docs/changelog/SILC%20Client%201.1.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://silcnet.org/docs/release/SILC%20Client%201.1.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://silcnet.org/general/news/news_client.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://silcnet.org/general/news/news_toolkit.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/31/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/03/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of libsilc as shipped with Red Hat Enterprise Linux 4, or 5.",
        "lastModified" : "2009-09-11T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search_advance.php in ArticleFriend Script allows remote attackers to inject arbitrary web script or HTML via the SearchWd parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en search_advance.php en ArticleFriend Script permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro SearchWd. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:articlefriend:articlefriend_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3051D0B0-D329-4FC3-A1C2-C97F789B862E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36077",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in showproduct.php in ReviewPost Pro vB3 allows remote attackers to inject arbitrary web script or HTML via the date parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en showproduct.php de ReviewPost Pro vB3, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro date -fecha-."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:allenthusiast:reviewpost_php_pro:b3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8D26B4-A26F-48F4-9E38-9A53E0DDAA81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/reviewpost-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36029",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/reviewpost-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PortalXP Teacher Edition 1.2 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) calendar.php, (2) news.php, and (3) links.php; and the (4) assignment_id parameter to assignments.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en PortalXP Teacher Edition v1.2 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro \"id\" a (1) calendar.php, (2) news.php, y (3) links.php; (4) y el parámetro assignment_id  a assignments.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:portalxp:portalxp:1.2:*:teacher:*:*:*:*:*",
            "matchCriteriaId" : "FB31A994-1773-49FA-9279-1282F511E0F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in _css/js.php in Elgg 1.5, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the js parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en _css/js.php en Elgg v1.5, cuando magic_quotes_gpc es activado, permite a atacantes remotos leer ficheros de forma arbitraria a través de .. (punto punto) en el parámetro \"js\". NOTA: Algunos de los detalles fueron obtenidos de una tercera parte."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curveriderhq:elgg:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9972881-543F-46F9-BA0F-FACD80F92B70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36147",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to execute arbitrary SQL commands via the Browse parameter in a vote action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php de Multi Website v1.5, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro Browse -Navegar-, en una acción vote -votar-."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multi-website:multi_website:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD754924-6DA1-47AA-8C1A-BDE02426F7B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36107",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2132",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in actions/downloadFile.php in Ultrize TimeSheet 1.2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the fileName parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en actions/downloadFile.php de Ultrize TimeSheet v1.2.2, permite a atacantes remotos leer ficheros de su elección a través de un .. (punto punto) en el parámetro nombre de fichero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultrize:timesheet:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06931148-04EA-4996-B0B7-53D0A590B037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Professional allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) bt_code, and (3) b_no parameters in a board view action."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en becommunity/community/index.php en NTSOFT BBS E-Market Professional permite a atacantes remotos inyectar secuencias de comandos arbitrarios web o HTML a través de los parametros (1) page, (2) bt_code, y (3) b_no en una accion \"board view\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nt:bbs_e-market:*:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "B35AF236-5EF9-4753-B8E6-38E372155581"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/ntsoft-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/26117",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35893",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/ntsoft-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/26117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) pic_id parameter to includes/video_ad.php, (2) category parameter to linkvideos_listing.php, id parameter to (3) templates/header1.php and (4) mp3/lyrics.php, key parameter to (5) video_listing.php and (6) adult/video_listing.php, and name parameter to (7) mp3/embed.php and (8) mp3/info.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados - XSS - en el motor de búsquedas MP3 x10 v1.6.5, permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del (1) parámetro pic_id para includes/video_ad.php, (2) parámetro category para linkvideos_listing.php, parámetro id para (3) templates/header1.php y (4) mp3/lyrics.php, parámetro key para (5) video_listing.php y (6) adult/video_listing.php, y parámetro name para (7) mp3/embed.php y (8) mp3/info.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x10media:mp3_search_engine:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7950272-B78B-42FD-86CE-EBD56BB38FDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/x10mp3se-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36059",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/x10mp3se-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 7.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the replid parameter in a manw_repl add_form action to index.php, a different vector than CVE-2009-2567."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente Almond Classifieds (com_aclassf) v7.5 para Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"replid\" en la acción manw_repl add_form a index.php, un vector diferente del que aparece en CVE-2009-2567."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:almondsoft:com_aclassf:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B682F8B-6F2D-4345-9021-64641E31C7F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35998",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in gmap.php in the Almond Classifieds (com_aclassf) component 7.5 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the addr parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en gmap.php en el componente Almond Classifieds (com_aclassf) v7.5 para Joomla! permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro addr."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:almondsoft:com_aclassf:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B682F8B-6F2D-4345-9021-64641E31C7F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35998",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/56561",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/56561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Date Tools sub-module in the Date module 6.x before 6.x-2.3 for Drupal allows remote authenticated users, with \"use date tools\" or \"administer content types\" privileges, to inject arbitrary web script or HTML via a \"Content type label\" field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos de sitios cruzados (XSS) en el sub-modulo Date Tools del modulo Date v6.x anteriores a 6.x-2.3 para Drupal permite a usuarios remotos autenticados con privilegios de \"use date tools\" o \"administer content types\" inyectar secuencias de comandos web o HTML arbitrarios a través del campo \"Content type label\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:date:6.x-1.0-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0415C2C-C9BB-4DD6-B827-C140B2EB08B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:date:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47962BD0-9938-4DF4-AA83-FC36E962EE6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:date:6.x-2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F26B0B-F3C3-45BF-90F8-0F3EAB5F2C17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:date:6.x-2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB57869E-0886-4770-B26B-E1D8542B5C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:date:6.x-2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5BDB03-7356-4522-BD20-6322D726EDD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:date:6.x-2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "77038900-2F18-42E7-8E45-7C1A7E3AE1B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:date:6.x-2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A922CA8F-2AAD-4842-9887-D3D4BCE6868C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:date:6.x-2.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "17BA84A3-E818-482F-9B33-32C709BFE21B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:date:6.x-2.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0D09CD-F116-4186-9F60-EC44AB22CA55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:date:6.x-2.0-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34871D3D-233B-41C6-8A74-F93A5C640D42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:date:6.x-2.0-beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69506981-E5A4-4089-BF94-509A5F005CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:date:6.x-2.0-beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A78FE81-E49F-4766-BB8F-6253D0B56ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:date:6.x-2.0-beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE3BF49-9D2B-4182-BBA9-A491A2F89AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:date:6.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20844EE0-6771-45FE-8B4E-AA9462488F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:date:6.x-2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4DF0E66-9076-4535-B42E-326A9A6C0D7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/534332",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/534636",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lampsecurity.org/drupal-date-xss-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/36006",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35790",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2103",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01312.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01339.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/534332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/534636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lampsecurity.org/drupal-date-xss-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/36006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01312.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01339.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Calendar module 6.x before 6.x-2.2 for Drupal allows remote authenticated users, with \"create new content types\" privileges, to inject arbitrary web script or HTML via the title of a content type."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo \"Calendar\" (calendario) en versiones v6.x anteriores a la v6.x-2.2 para Drupal permite a atacantes remotos autenticados, con privilegios \"create new content types\" (crear nuevos tipos de contenido), inyectar codigo de script web o código HTML a través de  el título de un tipo de contenido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF461E1-BAD6-4EA9-999B-28E515B3C9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "DF802478-60B4-4EED-880C-320CF940F850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "48570299-4C69-44E6-B2B6-183A747FE114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "72B43E12-93F6-4DC0-8A6F-BADEF1C4BF30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "5984E48E-8F38-4A9B-9CFF-10C60DD70053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E1C221-0634-4288-BF67-867F07256362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "26A44D34-643D-4BC4-99F0-397BCF3BE1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "3704AAC9-8924-4FBB-A0BA-6216B9F12D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "072BD158-7B67-427F-ACE0-1DBA02C1E525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "7BBED39D-C109-4BEB-BC23-E8F6FFA46BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "39ADC5A2-E80B-48F4-9D55-7826846B4687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:calendar:6.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A30A1F-88EA-40B6-88A8-1E14C4B2CDAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karen_stevenson:calendar:6.x-2.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292DA7F8-A5EE-4359-98DB-481AACD73AD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/534336",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/534652",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lampsecurity.org/drupal-date-xss-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/36012",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35790",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/534336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/534652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lampsecurity.org/drupal-date-xss-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/36012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/files.php in simplePHPWeb 0.2 does not require authentication, which allows remote attackers to perform unspecified administrative actions via unknown vectors.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "admin/files.php en simplePHPWeb 0.2 no requiere autenticación, lo que permite a los atacantes remotos desarrollar acciones administrativas no especificadas a través de vectores desconocidos. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carsten_wulff:simplephpweb:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1DFDEC-C80C-4965-9804-042F559D7E02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2129",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the rriDecompress function in IBM WebSphere MQ 7.0.0.0, 7.0.0.1, and 7.0.0.2 allows remote attackers to cause a denial of service via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en la función rriDecompress function de IBM WebSphere MQ v7.0.0.0, v7.0.0.1 v7.0.0.2 permite a atacantes remotos provocar una denegación de servicio a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "985DE0C7-1F86-4128-B177-0A2C84C138EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "896273C9-11F9-45A0-BA46-66F37DFACCC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF396289-8409-4FE2-96DB-99818D5680B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36647",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024153",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IC62450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2578",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IC62450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a \"memory overwrite\" issue."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere MQ v6.x desde v6.0.2.7, v7.0.0.0, v7.0.0.1, v7.0.0.2, y v7.0.1.0, cuando \"read ahead\" o \"asynchronous message consumption\" esta activado, permite a atacantes remotos obtener un impacto desconocido a traves de vectores desconocidos, relacionado con la sobrescritura de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:C/A:C",
            "baseScore" : 8.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "548ED888-1255-456C-88FD-2884539C157F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6D2279B-482A-4CA6-9EF2-C57A95969BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9728448F-E295-4C33-B2F4-17FAAFCDF169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F36C644-664C-4758-9762-E808C80AE904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C670A3F-7BBB-4115-A037-B5E732ABB6BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CD8F97-39E0-455C-92CA-F0FE9AE5A0CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97EC1D0-CA59-4E2C-84EB-054BF27D1BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CCD33A5-6567-43CB-909D-D1851ACF4AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3664585-D0B4-467C-9B6D-4F8E239F7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2216808-BAE9-4034-9618-5EC4CCB80E7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6263B9D-A62A-4E41-958A-968F9ACA0CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19983CDF-4769-4B56-98ED-CE7EE0C1AFF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9377F533-15D0-4F81-B7C1-A84E5346EF6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "985DE0C7-1F86-4128-B177-0A2C84C138EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "896273C9-11F9-45A0-BA46-66F37DFACCC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF396289-8409-4FE2-96DB-99818D5680B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E60ABB-E703-4745-98F3-22609FF70F6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36647",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024153",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2578",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The server in IBM WebSphere MQ 7.0.0.1, 7.0.0.2, and 7.0.1.0 allows attackers to cause a denial of service (trap) or possibly have unspecified other impact via malformed data."
      }, {
        "lang" : "es",
        "value" : "El servidor IBM WebSphere MQ v7.0.0.1, v7.0.0.2, y v7.0.1.0 permite a los atacantes causar una denegación de servicio (compuerta) o posiblemente otro impacto no especificado a través de datos mal formados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "896273C9-11F9-45A0-BA46-66F37DFACCC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF396289-8409-4FE2-96DB-99818D5680B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_mq:7.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E60ABB-E703-4745-98F3-22609FF70F6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36647",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024153",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IC62164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2578",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IC62164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T18:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Multi Website 1.5 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to the default URI."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Multi Website v1.5 permite a usuarios remotos inyectar codigo de script web o código HTML a través del parámetro \"search\" (búsqueda) en una acción \"search\" a una URI por defecto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multi-website:multi_website:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD754924-6DA1-47AA-8C1A-BDE02426F7B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/multiwebsite-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36107",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/multiwebsite-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T21:30:01.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted H.264 movie file."
      }, {
        "lang" : "es",
        "value" : "Apple QuickTime anterior a v7.6.4, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un fichero de película H.264 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:-:mac:*:*:*:*:*",
            "versionEndIncluding" : "7.6.1",
            "matchCriteriaId" : "FBBE7D6D-5D75-48D9-AF41-E57D1E1B913D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "7.6.1",
            "matchCriteriaId" : "C4D2A738-C558-4FF4-AD8B-B24213FB3A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "ACE0F153-80B3-4469-AE49-4B7517218574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "53527707-E903-4A12-AB87-6EC5FA9F2EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A91242F5-485E-4125-A19C-4C20B602DD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "63D7214C-FAF6-4DCA-8520-8A539BDCD98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D02D35D-E957-4949-B5DA-F3654B13A308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8399665C-F8A8-4133-A0CD-E767F8266E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ADED98-62C6-4961-894C-1D26E3B3EE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "6469AEDC-6F9D-4CAC-84B2-F13107626FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F522CEA4-B3BB-4C94-B070-6679EEA43439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "904FA4B7-A6CB-48B4-B887-4B349479D1A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CB2DFC1B-6452-4575-A099-2E5FD387A8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B630944-F838-4C02-90D4-F5EB2A073CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "01A24DD9-5AB8-4091-A293-1A2D7953D455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9066C81B-A69F-450D-8606-5E29AF1AD286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BB113931-F886-425C-A0F8-171F6D71A02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D282FA67-0089-4ED5-8168-E3CE8B510BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71285AD2-3966-4817-B630-8335BE985D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2B5928A2-C989-4B27-91E1-7019277B2E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458480E-F222-452A-AB21-933F924F8F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "05AA3258-E556-4443-AF79-96882A9CF33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "51292C8C-4905-4C30-B166-ACCE39D9DEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C83A78-6BB9-443E-B508-CC6F8D157A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "546B9E74-E86B-462B-A58E-017E3B780B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3433487A-98ED-4C28-8659-609BF395E23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61463F4F-BBE0-42AA-AC22-8F39E94EB520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "335F4D89-983A-4C05-937A-EEE802A260D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "49477EAA-5AA2-4B55-8BEF-AB3E118DE618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7F189FAB-3BA1-4C1B-975F-E174D5CB8771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "19AAC0DE-53D7-42E4-90D2-939C5DF6F651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "284BAF97-86BC-4520-BAB6-D75D18FFA1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3F4075B0-0F9F-466B-8521-2156849247C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E1B24679-4C63-4320-A79F-E19CCFA537D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0D28529-2A0A-4398-98C2-C35BABB9373A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F8BF6A6A-F734-4395-9305-2E9F52EE888F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AFCB45F3-397E-42A8-8D08-ECF667939FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "60500521-46FC-4734-901C-0A5E5D3DB9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F45B47BB-E14F-4437-8828-EF059496BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "682C7A59-6F3C-4E50-A145-D081614CD42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B353211-F90E-4F38-9D0B-B8C7EC00E66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D69BB04E-E696-4B34-95DE-B42F46697F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C0638BF3-4B18-4747-AD33-D04B3B4E217F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B8F4241-551B-492D-8602-06146B05CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "CF370413-96F7-4882-899F-577A8F3DAD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2BA9C6F7-513B-426F-90AD-7E826433CEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5B709D68-8474-4AAE-AA11-777EF510E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84D320E-ACA2-4B6E-B682-00202B9ADF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "4DCEE583-6CD2-4098-9A2A-B006A5023318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "268B4FBA-D6AC-4595-898A-721E284F3399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "52AD56F9-0CE6-4949-9853-3274A2C81601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FEBA83-C845-4334-9B9A-921BA0F44DE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "DA476E79-5145-4EE3-BD81-3773C6B19825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "555B1A2A-95F5-4B06-8774-FF952BEC2FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CEA210F5-71F6-4528-B2B4-507AA4A435EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "081712FF-C6B8-423B-8F20-C79D25DE782F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CF045B49-11A3-447A-9D05-1E8794980A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "939BE521-A385-4A1A-B4B0-C4687751D4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "304CFC80-E925-4CB8-8251-0FD0F09B8410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22D0674-0EC7-4176-97FB-940F2F7D6AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "4DDB8D28-183F-4B16-8610-592A210311E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6470EC-B72B-404C-9E69-03C3FEFD56F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "6ED97A46-DE85-4019-AE15-CDFF0E1371F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F3ECF41A-8B4E-4A9B-BEE7-5F0EB0ED6791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3FB6BA-D0FA-4DC3-8A4D-453C2EE51D09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3859",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36328",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T21:30:01.063",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG-4 video file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Apple QuickTime en versiones anteriores a la v7.6.4 permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de la aplicación) a través de un fichero de video MPEG-4 modificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.2",
            "matchCriteriaId" : "19679D07-BB28-4E47-A0A1-0D5BFBED823B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "ACE0F153-80B3-4469-AE49-4B7517218574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "53527707-E903-4A12-AB87-6EC5FA9F2EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A91242F5-485E-4125-A19C-4C20B602DD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "63D7214C-FAF6-4DCA-8520-8A539BDCD98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D02D35D-E957-4949-B5DA-F3654B13A308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8399665C-F8A8-4133-A0CD-E767F8266E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ADED98-62C6-4961-894C-1D26E3B3EE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "6469AEDC-6F9D-4CAC-84B2-F13107626FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F522CEA4-B3BB-4C94-B070-6679EEA43439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "904FA4B7-A6CB-48B4-B887-4B349479D1A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CB2DFC1B-6452-4575-A099-2E5FD387A8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B630944-F838-4C02-90D4-F5EB2A073CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "01A24DD9-5AB8-4091-A293-1A2D7953D455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9066C81B-A69F-450D-8606-5E29AF1AD286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BB113931-F886-425C-A0F8-171F6D71A02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D282FA67-0089-4ED5-8168-E3CE8B510BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71285AD2-3966-4817-B630-8335BE985D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2B5928A2-C989-4B27-91E1-7019277B2E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458480E-F222-452A-AB21-933F924F8F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "05AA3258-E556-4443-AF79-96882A9CF33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "51292C8C-4905-4C30-B166-ACCE39D9DEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C83A78-6BB9-443E-B508-CC6F8D157A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "546B9E74-E86B-462B-A58E-017E3B780B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3433487A-98ED-4C28-8659-609BF395E23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61463F4F-BBE0-42AA-AC22-8F39E94EB520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "335F4D89-983A-4C05-937A-EEE802A260D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "49477EAA-5AA2-4B55-8BEF-AB3E118DE618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7F189FAB-3BA1-4C1B-975F-E174D5CB8771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "19AAC0DE-53D7-42E4-90D2-939C5DF6F651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "284BAF97-86BC-4520-BAB6-D75D18FFA1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3F4075B0-0F9F-466B-8521-2156849247C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E1B24679-4C63-4320-A79F-E19CCFA537D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0D28529-2A0A-4398-98C2-C35BABB9373A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F8BF6A6A-F734-4395-9305-2E9F52EE888F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AFCB45F3-397E-42A8-8D08-ECF667939FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "60500521-46FC-4734-901C-0A5E5D3DB9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F45B47BB-E14F-4437-8828-EF059496BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "682C7A59-6F3C-4E50-A145-D081614CD42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B353211-F90E-4F38-9D0B-B8C7EC00E66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D69BB04E-E696-4B34-95DE-B42F46697F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C0638BF3-4B18-4747-AD33-D04B3B4E217F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B8F4241-551B-492D-8602-06146B05CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "CF370413-96F7-4882-899F-577A8F3DAD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2BA9C6F7-513B-426F-90AD-7E826433CEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5B709D68-8474-4AAE-AA11-777EF510E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84D320E-ACA2-4B6E-B682-00202B9ADF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "4DCEE583-6CD2-4098-9A2A-B006A5023318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "268B4FBA-D6AC-4595-898A-721E284F3399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "52AD56F9-0CE6-4949-9853-3274A2C81601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FEBA83-C845-4334-9B9A-921BA0F44DE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "DA476E79-5145-4EE3-BD81-3773C6B19825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "555B1A2A-95F5-4B06-8774-FF952BEC2FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CEA210F5-71F6-4528-B2B4-507AA4A435EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "081712FF-C6B8-423B-8F20-C79D25DE782F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CF045B49-11A3-447A-9D05-1E8794980A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "939BE521-A385-4A1A-B4B0-C4687751D4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "304CFC80-E925-4CB8-8251-0FD0F09B8410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22D0674-0EC7-4176-97FB-940F2F7D6AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "4DDB8D28-183F-4B16-8610-592A210311E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6470EC-B72B-404C-9E69-03C3FEFD56F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "6ED97A46-DE85-4019-AE15-CDFF0E1371F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F3ECF41A-8B4E-4A9B-BEE7-5F0EB0ED6791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3FB6BA-D0FA-4DC3-8A4D-453C2EE51D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "181ABD08-3AFB-492B-B59F-FF971B6DF759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "B907F62E-696E-41C6-9748-F16D0D96982C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3859",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36328",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T21:30:01.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted (1) AAC or (2) MP3 file, as demonstrated by a ringtone with malformed entries in the sample size table."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en la región heap de la memoria en la biblioteca AudioCodecs en el componente CoreAudio en iPhone OS anterior a versión 3.1, y iPhone OS anterior a versión 3.1.1 para iPod touch, de Apple, permiten a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de un archivo (1) AAC o (2) MP3 diseñado, como es demostrado mediante un tono de llamada con entradas malformadas en la tabla de tamaño de muestra."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "BE457690-CB2B-42BD-B97C-E723AFD02FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863383DA-0BC6-4A96-835A-A96128EC0202"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "340C4071-1447-477F-942A-8E09EA29F917"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "2B1A9F14-4F3A-4B85-9050-84B51D59C9A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863383DA-0BC6-4A96-835A-A96128EC0202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FA2602-DDAB-4E23-A3D2-FB712970AAD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506464/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2009-007.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506464/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trapkit.de/advisories/TKADV2009-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T21:30:01.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MobileMail component in Apple iPhone OS 3.0 and 3.0.1, and iPhone OS 3.0 for iPod touch, lists deleted e-mail messages in Spotlight search results, which might allow local users to obtain sensitive information by reading these messages."
      }, {
        "lang" : "es",
        "value" : "El componente MobileMail en Apple iPhone OS v3.0 y v3.0.1, y iPhone OS v3.0 para iPod touch, lista mensajes de correo electrónico borrados en los resultados de búsqueda de Spotlight, lo que permitiría a usuarios locales obtener información sensible mediante la lectura de estos mensajes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863383DA-0BC6-4A96-835A-A96128EC0202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "F07B3FE7-96B3-493A-A230-5642BA11FBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T21:30:01.140",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Exchange Support component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not properly implement the \"Maximum inactivity time lock\" functionality, which allows local users to bypass intended Microsoft Exchange restrictions by choosing a large Require Passcode time value."
      }, {
        "lang" : "es",
        "value" : "El componente Exchange Support en Apple iPhome OS anteriores a la 3.1, e iPhone OS anteriores a 3.1.1 para iPod touch, no implementan de forma adecuada la funcionalidad de bloqueo por tiempo de inactividad máximo, lo que permite a usuarios locales saltarse las restricciones impuestas por Microsoft Exchange seleccionando un valor de tiempo grande para Requiere Passcode."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "0A66D6DC-9A48-4BD6-9E01-0D9FF388457C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "C59B8C50-BF5D-4E9A-8E5B-99B34E974B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "D4CE4199-BBF5-4F42-8BBC-BD946079C912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "34346F55-4972-427B-8F96-780FA91DB95D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "AE65CA8B-68CB-428C-AC32-6F9100F9E507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "AD136376-331D-494F-9D12-7E631546E8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863383DA-0BC6-4A96-835A-A96128EC0202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "F07B3FE7-96B3-493A-A230-5642BA11FBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T21:30:01.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the Recovery Mode component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allows local users to bypass the passcode requirement and access arbitrary data via vectors related to \"command parsing.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en el componente Recovery Mode en Apple iPhone OS anterior a v3.1, e iPhone OS anterior a v3.1.1 para iPod touch, permite a usuarios locales evitar el requisito de \"requerir clave\" y acceder a datos de su elección a través de vectores relacionados con el \"análisis de comandos\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1",
            "matchCriteriaId" : "FF765D52-58F5-49F1-8323-2EB7EB5006A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:ipod_touch:*:*",
            "versionEndExcluding" : "3.1.1",
            "matchCriteriaId" : "3935C1A3-3488-465C-ADE2-DC6B31365DC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36341",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53183",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T21:30:01.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UIKit component in Apple iPhone OS 3.0, and iPhone OS 3.0.1 for iPod touch, allows physically proximate attackers to discover a password by watching a user undo deletions of characters in the password."
      }, {
        "lang" : "es",
        "value" : "El componente UIKit  en Apple iPhone OS v3.0, y iPhone OS v3.0.1 para iPod touch, permite a atacantes que estén físicamente próximos  podrían descubrir la contraseña vigilando al usuario cuando borra caracteres del la contraseña"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863383DA-0BC6-4A96-835A-A96128EC0202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T21:30:01.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not remove usernames and passwords from URLs sent in Referer headers, which allows remote attackers to obtain sensitive information by reading Referer logs on a web server."
      }, {
        "lang" : "es",
        "value" : "El componente WebKit de Safari en Apple iPhone OS en versiones anteriores a la v3.1, e iPhone OS en versiones anteriores a la v3.1.1 para iPod touch, no elimina los nombres de usuario y contraseñas de las URLs enviadas en las cabeceras \"Referer\", lo que permite a atacantes remotos obtener información confidencial leyendo los logs \"Referer\" en el servidor web."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1",
            "matchCriteriaId" : "FF765D52-58F5-49F1-8323-2EB7EB5006A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:ipod_touch:*:*",
            "versionEndExcluding" : "3.1.1",
            "matchCriteriaId" : "3935C1A3-3488-465C-ADE2-DC6B31365DC0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87614B58-24AB-49FB-9C84-E8DDBA16353B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/41856",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36339",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-1006-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/2722",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0552",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53187",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/41856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-1006-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/2722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T21:30:01.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FlashPix file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en Apple QuickTime anterior a v7.6.4, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (Caída de aplicación) a través de un archivo FlashPix manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.2",
            "matchCriteriaId" : "19679D07-BB28-4E47-A0A1-0D5BFBED823B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "ACE0F153-80B3-4469-AE49-4B7517218574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "53527707-E903-4A12-AB87-6EC5FA9F2EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A91242F5-485E-4125-A19C-4C20B602DD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "63D7214C-FAF6-4DCA-8520-8A539BDCD98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D02D35D-E957-4949-B5DA-F3654B13A308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8399665C-F8A8-4133-A0CD-E767F8266E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ADED98-62C6-4961-894C-1D26E3B3EE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "6469AEDC-6F9D-4CAC-84B2-F13107626FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F522CEA4-B3BB-4C94-B070-6679EEA43439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "904FA4B7-A6CB-48B4-B887-4B349479D1A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CB2DFC1B-6452-4575-A099-2E5FD387A8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B630944-F838-4C02-90D4-F5EB2A073CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "01A24DD9-5AB8-4091-A293-1A2D7953D455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9066C81B-A69F-450D-8606-5E29AF1AD286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BB113931-F886-425C-A0F8-171F6D71A02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D282FA67-0089-4ED5-8168-E3CE8B510BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71285AD2-3966-4817-B630-8335BE985D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2B5928A2-C989-4B27-91E1-7019277B2E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458480E-F222-452A-AB21-933F924F8F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "05AA3258-E556-4443-AF79-96882A9CF33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "51292C8C-4905-4C30-B166-ACCE39D9DEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C83A78-6BB9-443E-B508-CC6F8D157A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "546B9E74-E86B-462B-A58E-017E3B780B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3433487A-98ED-4C28-8659-609BF395E23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61463F4F-BBE0-42AA-AC22-8F39E94EB520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "335F4D89-983A-4C05-937A-EEE802A260D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "49477EAA-5AA2-4B55-8BEF-AB3E118DE618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7F189FAB-3BA1-4C1B-975F-E174D5CB8771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "19AAC0DE-53D7-42E4-90D2-939C5DF6F651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "284BAF97-86BC-4520-BAB6-D75D18FFA1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3F4075B0-0F9F-466B-8521-2156849247C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E1B24679-4C63-4320-A79F-E19CCFA537D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0D28529-2A0A-4398-98C2-C35BABB9373A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F8BF6A6A-F734-4395-9305-2E9F52EE888F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AFCB45F3-397E-42A8-8D08-ECF667939FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "60500521-46FC-4734-901C-0A5E5D3DB9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F45B47BB-E14F-4437-8828-EF059496BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "682C7A59-6F3C-4E50-A145-D081614CD42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B353211-F90E-4F38-9D0B-B8C7EC00E66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D69BB04E-E696-4B34-95DE-B42F46697F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C0638BF3-4B18-4747-AD33-D04B3B4E217F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B8F4241-551B-492D-8602-06146B05CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "CF370413-96F7-4882-899F-577A8F3DAD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2BA9C6F7-513B-426F-90AD-7E826433CEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5B709D68-8474-4AAE-AA11-777EF510E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84D320E-ACA2-4B6E-B682-00202B9ADF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "4DCEE583-6CD2-4098-9A2A-B006A5023318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "268B4FBA-D6AC-4595-898A-721E284F3399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "52AD56F9-0CE6-4949-9853-3274A2C81601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FEBA83-C845-4334-9B9A-921BA0F44DE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "DA476E79-5145-4EE3-BD81-3773C6B19825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "555B1A2A-95F5-4B06-8774-FF952BEC2FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CEA210F5-71F6-4528-B2B4-507AA4A435EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "081712FF-C6B8-423B-8F20-C79D25DE782F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CF045B49-11A3-447A-9D05-1E8794980A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "939BE521-A385-4A1A-B4B0-C4687751D4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "304CFC80-E925-4CB8-8251-0FD0F09B8410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22D0674-0EC7-4176-97FB-940F2F7D6AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "4DDB8D28-183F-4B16-8610-592A210311E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6470EC-B72B-404C-9E69-03C3FEFD56F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "6ED97A46-DE85-4019-AE15-CDFF0E1371F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F3ECF41A-8B4E-4A9B-BEE7-5F0EB0ED6791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3FB6BA-D0FA-4DC3-8A4D-453C2EE51D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "181ABD08-3AFB-492B-B59F-FF971B6DF759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "B907F62E-696E-41C6-9748-F16D0D96982C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3859",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36328",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T21:30:01.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted H.264 movie file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en Apple QuickTime anterior a v7.6.4, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de la aplicación) a través de un fichero de película H.264 manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.2",
            "matchCriteriaId" : "19679D07-BB28-4E47-A0A1-0D5BFBED823B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE08FAE-0862-4C36-95BC-878B04CBF397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "ACE0F153-80B3-4469-AE49-4B7517218574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "53527707-E903-4A12-AB87-6EC5FA9F2EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A91242F5-485E-4125-A19C-4C20B602DD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "63D7214C-FAF6-4DCA-8520-8A539BDCD98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D02D35D-E957-4949-B5DA-F3654B13A308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8399665C-F8A8-4133-A0CD-E767F8266E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ADED98-62C6-4961-894C-1D26E3B3EE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "6469AEDC-6F9D-4CAC-84B2-F13107626FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F522CEA4-B3BB-4C94-B070-6679EEA43439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "904FA4B7-A6CB-48B4-B887-4B349479D1A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CB2DFC1B-6452-4575-A099-2E5FD387A8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B630944-F838-4C02-90D4-F5EB2A073CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "01A24DD9-5AB8-4091-A293-1A2D7953D455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9066C81B-A69F-450D-8606-5E29AF1AD286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BB113931-F886-425C-A0F8-171F6D71A02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D282FA67-0089-4ED5-8168-E3CE8B510BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71285AD2-3966-4817-B630-8335BE985D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2B5928A2-C989-4B27-91E1-7019277B2E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458480E-F222-452A-AB21-933F924F8F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "05AA3258-E556-4443-AF79-96882A9CF33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "51292C8C-4905-4C30-B166-ACCE39D9DEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C83A78-6BB9-443E-B508-CC6F8D157A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "546B9E74-E86B-462B-A58E-017E3B780B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3433487A-98ED-4C28-8659-609BF395E23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61463F4F-BBE0-42AA-AC22-8F39E94EB520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "335F4D89-983A-4C05-937A-EEE802A260D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "49477EAA-5AA2-4B55-8BEF-AB3E118DE618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7F189FAB-3BA1-4C1B-975F-E174D5CB8771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "19AAC0DE-53D7-42E4-90D2-939C5DF6F651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "284BAF97-86BC-4520-BAB6-D75D18FFA1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3F4075B0-0F9F-466B-8521-2156849247C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E1B24679-4C63-4320-A79F-E19CCFA537D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0D28529-2A0A-4398-98C2-C35BABB9373A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F8BF6A6A-F734-4395-9305-2E9F52EE888F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AFCB45F3-397E-42A8-8D08-ECF667939FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "60500521-46FC-4734-901C-0A5E5D3DB9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F45B47BB-E14F-4437-8828-EF059496BF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "682C7A59-6F3C-4E50-A145-D081614CD42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B353211-F90E-4F38-9D0B-B8C7EC00E66F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D69BB04E-E696-4B34-95DE-B42F46697F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E518B27-A79B-43A4-AFA6-E59EF8E944D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C0638BF3-4B18-4747-AD33-D04B3B4E217F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9B8F4241-551B-492D-8602-06146B05CF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "CF370413-96F7-4882-899F-577A8F3DAD47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2BA9C6F7-513B-426F-90AD-7E826433CEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5B709D68-8474-4AAE-AA11-777EF510E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C9B657-5484-4458-861E-D6FB5019265A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84D320E-ACA2-4B6E-B682-00202B9ADF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "4DCEE583-6CD2-4098-9A2A-B006A5023318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "268B4FBA-D6AC-4595-898A-721E284F3399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "52AD56F9-0CE6-4949-9853-3274A2C81601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF20D38-BFA3-4403-AB24-7B74EFD68229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FEBA83-C845-4334-9B9A-921BA0F44DE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "DA476E79-5145-4EE3-BD81-3773C6B19825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "555B1A2A-95F5-4B06-8774-FF952BEC2FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE2A89-B2FC-413D-A059-526E6DE301BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CEA210F5-71F6-4528-B2B4-507AA4A435EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31662D02-7FA9-4FAD-BE49-194B7295CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "081712FF-C6B8-423B-8F20-C79D25DE782F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8461AF0A-D4D3-4010-A881-EDBB95003083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CF045B49-11A3-447A-9D05-1E8794980A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E1332A-5B4D-4590-BFA5-4557C71F894B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8E5C77-573F-4EA3-A59C-4A7B11946E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "939BE521-A385-4A1A-B4B0-C4687751D4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "304CFC80-E925-4CB8-8251-0FD0F09B8410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22D0674-0EC7-4176-97FB-940F2F7D6AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "4DDB8D28-183F-4B16-8610-592A210311E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6470EC-B72B-404C-9E69-03C3FEFD56F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "6ED97A46-DE85-4019-AE15-CDFF0E1371F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F3ECF41A-8B4E-4A9B-BEE7-5F0EB0ED6791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3FB6BA-D0FA-4DC3-8A4D-453C2EE51D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "181ABD08-3AFB-492B-B59F-FF971B6DF759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.6.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "B907F62E-696E-41C6-9748-F16D0D96982C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3859",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36328",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T21:30:01.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service (NULL pointer dereference and service interruption) via a crafted SMS message."
      }, {
        "lang" : "es",
        "value" : "El componente Telephony en Apple iPhone OS anterior a v3.1 no maneja adecuadamente las notificaciones de llegada SMS, lo que permite a atacantes remotos provocar una denagación de servicio (puntero a deferencia NULL e interrupción del servicio) a través de un mensaje SMS manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "BE457690-CB2B-42BD-B97C-E723AFD02FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DB23F0-7226-4D0B-A3FA-A801F02EBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4AEDE82-E317-4066-A34F-BB3BCD3F53E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863383DA-0BC6-4A96-835A-A96128EC0202"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3069",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-09-10T21:30:01.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el motor del navegador en Mozilla Firefox  v3.5.x anterior a v3.5.3,  permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente la ejecución remota de código a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=506838",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5989",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=506838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3070",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-09-10T21:30:01.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades sin especificar en el motor del navegador de Mozilla Firefox en versiones anteriores a la v3.0.14 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) o probablemente ejecutar código de su elección a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.13",
            "matchCriteriaId" : "667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36692",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1885",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=430569",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=437565",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=465651",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11702",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6073",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=430569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=437565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=465651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3071",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-09-10T21:30:01.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el motor del navegador Mozilla Firefox anteriores a v3.0.14, y v3.5.x anteriores a v3.5.2, permite a los atacantes remotos causar una denegación de servicios (corrupción de memoria y caída de la aplicación) o posiblemente ejecutar arbitrariamente código a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.13",
            "matchCriteriaId" : "667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36692",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1885",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=490196",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=493649",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=495444",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=502017",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10698",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5905",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=490196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=493649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=495444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=502017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3072",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-09-10T21:30:01.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el motor de navegación de Mozilla Firefox anterior a v3.0.14 y v3.5.x anterior a v3.5.3; permiten a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) o puede que ejecutar código de su elección a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.13",
            "matchCriteriaId" : "667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36669",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36692",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/38977",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39001",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1885",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1431.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1432.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-915-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0648",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=494283",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=501900",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=508074",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10349",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6315",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1432.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-915-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=494283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=501900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=508074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3073",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-09-10T21:30:01.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el motor JavaScript en Mozilla Firefox  v3.5.x anterior a v3.5.3,  permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente la ejecución remota de código a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=507292",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6398",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=507292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3074",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-09-10T21:30:01.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the JavaScript engine in Mozilla Firefox before 3.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el motor JavaScript de Mozilla Firefox en versiones anteriores a la v3.0.14 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) o posiblemente ejecutar código de su elección a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.13",
            "matchCriteriaId" : "667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36692",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1885",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=467493",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53157",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6053",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9444",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=467493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3075",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-09-10T21:30:01.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades sin especificar en el motor JavaScript en Mozilla Firefox anterior a v3.0.14, y v3.5.x anterior a v3.5.2,  permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente la ejecución remota de código a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.13",
            "matchCriteriaId" : "667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36669",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36692",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/38977",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39001",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1885",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1431.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1432.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-915-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0648",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=441714",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=505305",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53158",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11365",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5717",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1432.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-915-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=441714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=505305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3076",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-09-10T21:30:01.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anterior a v3.0.4 no implementa adecuadamente ciertos dialogos asociados con las operaciones  (1) pkcs11.addmodule y (2) pkcs11.deletemodule, lo que facilita a atacantes remotos engañar a un usuario instalando o eliminando un módulo PKCS11 de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.13",
            "matchCriteriaId" : "667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36669",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36692",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1885",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-48.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1431.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1432.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022877",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=326628",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=509413",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6140",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9306",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-48.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1432.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=326628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=509413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3077",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-09-10T21:30:01.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a \"dangling pointer vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox en versiones anteriores a la v3.0.14 y las versiones v3.5.x anteriores a v3.5.3, no gestiona apropiadamente los punteros para las columnas (también conocido como \"TreeColumns\") de un elemento de árbol XUL, lo que permite a atacantes remotos ejecutar código de su elección a través de un documento HTML modificado. Vulnerabilidad relacionada con la \"dangling pointer vulnerability\" (vulnerabiliad de puntero colgado)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.13",
            "matchCriteriaId" : "667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36669",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36692",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/38977",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39001",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1885",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-49.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1431.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1432.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-915-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=506871",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10730",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5606",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-49.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1432.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-915-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=506871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3078",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-09-10T21:30:01.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to trigger a vertical scroll and spoof URLs via unspecified Unicode characters with a tall line-height property."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de truncado visual en Mozilla Firefox anteriores a v3.0.14, y v3.5.x anteriores a  v3.5.3, permite a atacantes remotos iniciar un scroll vertical y falsificar URLs a traves de caracteres Unicode con una propiedad \"line-height\" alta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.13",
            "matchCriteriaId" : "667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36692",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1885",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-50.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022875",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=453827",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10871",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5418",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-50.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=453827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3079",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-09-10T21:30:01.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute arbitrary JavaScript with chrome privileges via vectors involving an object, the FeedWriter, and the BrowserFeedWriter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en Mozilla Firefox anteriores a la v3.0.14, y v3.5.x anterior a la v3.5.3, permite a atacantes remotos ejecutar Javascript arbitrario con privilegios de chrome a través de vectores que incluyen un objeto, el FeedWriter, y el BrowserFeedWriter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.13",
            "matchCriteriaId" : "667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7AA88B-638A-451A-B235-A1A1444BE417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01AD7C-8470-47AB-B8AE-670E3A381E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43F2F1-9252-4B44-8A61-D05305915A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A360D595-A829-4DDE-932E-9995626917E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07243837-C353-4C25-A5B1-4DA32807E97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B832C034-F793-415F-BFC8-D97A18BA6BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CD1A13-66CB-49CC-BD84-5D8334DB774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15536D0-B6A3-4106-8196-021724324CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*",
            "matchCriteriaId" : "438AACF8-006F-4522-853F-30DBBABD8C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18A45C0-419C-4723-AB7D-5880EF668CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2917BD67-CE81-4B94-B241-D4A9DDA60319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524A94E-F19B-42B9-AA8E-171751C339AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71436CF-F756-44E0-8E69-6951F6B3E54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE839-B83F-4908-9780-D0C92DC44FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824369CF-00A0-434E-94BC-71CA1317012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717DB967-F658-4699-A224-5B261BFEC10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A956C036-1E47-49B2-A971-69868A510B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AA254D-D41E-464F-9E2A-A950F08C6946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D609B2-F66C-40F1-B7D9-965189F875A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327D8879-0B61-4681-886D-C53BE251E0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59017F18-6C4E-4803-8A65-DB2A849C3197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF006282-943B-4885-B523-6E575D664059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26356AB4-1C06-4E16-BAC1-B6A41626A222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC11707-DF87-4046-964D-40CF22385A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0422C796-ECC4-42C1-9580-1CE22A096244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36757",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1886",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-51.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022873",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=454363",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10390",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6250",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-51.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2009_48_firefox.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=454363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T21:30:01.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.10, and SILC Client 1.1.8 and earlier, allow remote attackers to execute arbitrary code via format string specifiers in a channel name, related to (1) silc_client_command_topic, (2) silc_client_command_kick, (3) silc_client_command_leave, and (4) silc_client_command_users."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de formato de cadena en lib/silcclient/command.c en Secure Internet Live Conferencing (SILC) Toolkit anteriores a v1.1.10, y SILC Client v1.1.8 y anteriores , permite a atacantes remotos ejecutar código arbitrario a través de los especificadores de cadena en el nombre de canal, relacionado con (1) silc_client_command_topic, (2) silc_client_command_kick, (3) silc_client_command_leave, y (4) silc_client_command_users."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_client:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.8",
            "matchCriteriaId" : "238D6CE9-A76F-4010-B4CD-A27879EE5F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_client:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F3F92C-7A47-4F14-BB23-74902AACB8E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_client:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F083A8-E3BD-4434-9F55-93E7D5B8F735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_client:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7036B3C2-0D64-474E-81CF-2013F2F20AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_client:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3471C30-9633-4A9D-A445-8B286C1294E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_client:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75B46F7C-353D-41C7-8F39-7BE3FC2C83EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_client:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0293F28-E7E8-49B4-AFA6-7A20EAA6F876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.9",
            "matchCriteriaId" : "3F1B96DE-36B1-484B-87FC-6156D8B65F75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06811A1-DF33-4EC9-A2EE-49CE2F4A4EC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE803FA-43C9-4565-A1B6-6890A2275A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9754DA96-8464-412C-8337-51F8DE9884B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4BC8115-1A4B-4CFD-9431-3C2A231D0237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262AEDC5-8FB8-4D15-AC4D-906110718D07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F422F232-FDA3-4FB4-AD84-2641EF0A0134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "301B0871-8F41-483F-B457-488A89428975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silcnet:silc_toolkit:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B207531-E87A-49F4-8D49-BF7BB9F791DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36614",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://silcnet.org/general/news/news_toolkit.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1879",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/31/5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/03/5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://silcnet.org/general/news/news_toolkit.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/31/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/03/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of libsilc as shipped with Red Hat Enterprise Linux 4, or 5.",
        "lastModified" : "2009-09-11T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-10T22:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv_01 through snv_82 and snv_111 through snv_122, when a Cassini GigaSwift Ethernet Adapter (aka CE) interface is used, allows remote attackers to cause a denial of service (panic) via vectors involving jumbo frames.  NOTE: this issue exists because of an incomplete fix for CVE-2009-2136."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en la pila de red IPv6 en Sun Solaris v10, y Open Solaris desde snv_01 hasta snv_82 y desde snv_111 hasta snv_122, cuando se utiliza la interfaz de Cassini GigaSwift Ethernet Adapter (aka CE), permite a atacantes remotos producir una denegación de servicio (panic) a través de vectores que incluyen frames jumbo. NOTA: Esta vulnerabilidad existe debido a un arreglo incompleto de CVE-2009-2136."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "78B80C92-7EB5-4343-B830-32E8C011E572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "46E4ED9C-F013-48D2-8642-E5BA7599A512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A1E8108D-3CE7-4041-9027-1CA7473389EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E8585133-1F25-494A-8859-87B1D93305A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_121:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "3D01EACB-9DB4-4940-A1F2-40474B24AEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_122:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D1BBB436-9F7A-4E2D-908B-D57A531B1B3C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B3BBCE23-9F15-45CD-859F-77ED540B51F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "053A0DA6-483C-49BB-BC7A-E624DB2C269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "447212A4-FACD-475E-A62B-60FE6504F63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB694DC0-407A-4555-8B72-DAF3C169DCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "535FF689-13A2-40C6-8706-7782038FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "843246D3-C2DA-454D-916A-AC8905E5134E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "244B7FE4-C485-4993-9810-3433C83A120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BE586AB9-9D46-4BC2-8092-51482F297410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1A06-2588-47AA-81F8-E3655F915C33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5972E930-76E2-40FD-8E7F-74E012D34E39"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-10-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-265608-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020829.1-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-10-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-265608-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020829.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-11T18:30:03.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Alias Manager in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted alias file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Alias Manager en Apple Mac OS X v10.4.11 y v10.5.8, permite a atacantes  ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de un fichero alias manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1335E35A-D381-4056-9E78-37BC6DF8AD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B4CD59-9F37-4EF0-BA43-427CFD6E1329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-11T18:30:03.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en  index.php en Anantasoft Gazelle CMS v1.0, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos leer ficheros de su elección a través de un .. (punto punto) en el parámetro template."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anantasoft:gazelle_cms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799EE835-86AB-492B-8536-558CBC2504DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33686",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/7895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/33483",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/7895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/33483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3168",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-11T20:30:00.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to (1) admin/reset.php and (2) admin/user_add.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request."
      }, {
        "lang" : "es",
        "value" : "Mevin Productions Basic PHP Events Lister v2.0 no restringe de forma adecuada el acceso a (1) admin/reset.php y (2) admin/user_add.php, lo que permite a usuarios remotos autenticados resetear las contraseñas administrativas o añadir administradores a través de una petición directa."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mevin:basic_php_events_lister:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32244E1A-2E1F-4AF2-BC45-871DA3772C02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36525",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9558",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/57595",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36198",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2497",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/57595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3169",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-11T20:30:00.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Hitachi JP1/File Transmission Server/FTP before 09-00 allow remote attackers to execute arbitrary code via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no específicas en Hitachi JP1/File Transmission Server/FTP anteriores a v09-00, permite a atacantes remotos ejecutar código de su elección a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "08_10",
            "matchCriteriaId" : "AD99DDF8-D9AC-4E2D-AB04-214D7B47D8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:01_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBE0448-61B1-49AB-90BD-C37661CB0F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:01_00:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "EF81446A-2D08-46B2-87CF-2EA8BD512BDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F58F18-1941-41B3-9610-7E25FAED171E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_00:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "AAF342C6-FC8A-40FB-91A6-7A0FD44BFED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC215EB-7A90-413C-A1D9-35F996714586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10:*:hiux_we2:*:*:*:*:*",
            "matchCriteriaId" : "0E46D311-0B79-47BD-BE12-075EC9729B5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "73A89817-B1B7-4B0E-AB75-A073751872B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7527DBE0-63CC-4047-A62C-134711014FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_a:*:hiux_we2:*:*:*:*:*",
            "matchCriteriaId" : "18933B6C-DDCC-4CFB-B9C9-47CFF416741F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_a:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "202DF268-5756-4FB5-B928-28FF5B8E0BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "273E5D41-C86B-439A-A4D3-5F579256DE78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_b:*:hiux_we2:*:*:*:*:*",
            "matchCriteriaId" : "F9FC56B4-3F85-4C5E-BC9B-9146BD656EC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_b:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "4C704103-1A13-4EAC-AAA6-AAC8ECA20F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "426002CA-8C3B-41B2-A113-EDAF2C702F3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_c:*:hiux_we2:*:*:*:*:*",
            "matchCriteriaId" : "C8597815-5459-4900-A47F-3C455209F1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_c:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "D68EF6E7-13E3-444E-9226-379D732AC621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF217230-B3DC-4690-B5F3-BDBDB5163307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_d:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "B8E9A295-40ED-481E-8A45-46A982277EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4571607C-0617-4906-ABD9-04B80055E42C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_e:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "0D6E7413-4FC1-487B-9854-A9215DDB3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02188B74-EB40-4F36-A038-CA3363C39DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_f:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "0E7784F1-A565-4D96-B72E-961D453C2738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "556D9B15-C7D4-4F76-A134-07221A550012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_g:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "0997AB0C-68B4-4EDE-8EAE-E847BA2E40A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FFC2A7-D782-4981-9E50-C014302E7E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_h:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "90408D2A-28F5-44F5-8A37-0D32A357A7F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F288B1A5-C69E-4D66-8D4C-5973730DE9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "C21C16FB-811E-41ED-B499-6B6E1CD09649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00:*:hiux_we2:*:*:*:*:*",
            "matchCriteriaId" : "E9E44AAF-80DF-4DCA-808C-1B655050AF9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "8E920A63-F7FB-4850-AACD-8C341E2319DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00:*:hpux_english:*:*:*:*:*",
            "matchCriteriaId" : "F4C5F1B0-5806-442D-8B80-B06368330BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "6E59B66F-2B8D-4FA3-8432-3592BE10FC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01C34F8-F3A3-4F4D-BBA0-521A49C8C35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_a:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "29C2FEBA-DE8E-4366-9F0C-4633067C7997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_a:*:hiux_we2:*:*:*:*:*",
            "matchCriteriaId" : "D2143AD6-3731-488C-BA82-0620D0B85A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_a:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "BA0044E2-69DB-4CF2-B668-409929245101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D9BCC1-48DE-4A8B-B875-257633B6DB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_b:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "8C88ACDD-B947-4D72-8B37-9057D1DFFD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_b:*:hiux_we2:*:*:*:*:*",
            "matchCriteriaId" : "964ECD84-5323-4178-BE7B-70EB1A4212DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_b:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "D487F7F3-40D6-4154-AD4C-152509DD0460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34EE1745-5D52-43A3-AF42-B37ED64D0709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_c:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "70B0E258-5F40-47C2-96E8-D91EF164E711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_c:*:hiux_we2:*:*:*:*:*",
            "matchCriteriaId" : "5C12A76F-7CAC-4562-911F-85A1C456C1F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_c:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "27958F22-A138-4B30-82FE-8328EB76FB92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1BF327-3C1C-4E1F-B510-CDB4B204243B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_d:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "A55F3117-FFB1-43EA-A390-7A05DC9BF873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_d:*:hiux_we2:*:*:*:*:*",
            "matchCriteriaId" : "464AAE8F-0713-4E76-B150-4606449F97D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41C60045-319E-4C41-8EF0-A47AF5CA5535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_e:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "47AB2A76-2D62-486B-BBF6-45613245DF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_e:*:hiux_we2:*:*:*:*:*",
            "matchCriteriaId" : "2FD0CC65-A536-4B3F-8823-65E9484AFA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E50726-2775-4E34-A610-D54C6A19EC04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_f:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "500954E0-4F6F-4248-8550-401FA0799935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC25BACE-89C0-4E09-8D22-8DBBE8759C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "F18298FB-DD15-41C6-A210-3C2B45380D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "71F9B852-7EF5-4F61-B552-040C81193B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF63E661-0896-47CD-9394-08A535CFA0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_a:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "58A89F21-407F-4F31-A0E3-2F2DAE31E888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_a:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "184575C8-BE51-410E-8616-62DE5CABD790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1193473-45A7-4F64-8C61-BDCABEC8E3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_b:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3AA12B4D-2C3B-4EBF-8F22-C93F9AC6170D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_b:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "B5887BF2-7DEE-40CF-9ED8-ED07DD6457C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B92FA6B5-95F5-4096-9AE2-F444E5DC4842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_c:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "63EA8CF9-A957-4E85-8D61-5D854EC3F7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_c:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "ACB2F505-E6E3-4185-8771-ACC30E3C26C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E696B5-284C-4049-BCA9-EE8B583B1066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_d:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "0EEF2942-CE53-4D37-AF26-B33F000B8DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3FCE070-ABD8-4732-9695-CF7B44F918E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_e:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "230F32E6-D98D-441D-A416-8C41891B9132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3145838-952A-4D02-86D2-0B69D752BA49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3EE965E9-85A1-4119-8B29-9D7B8AB1D6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "BCE46442-A9D0-42A8-BEBC-F45A6E4EAE83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "989FB0A1-7223-4577-AB1F-358BA7C577E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02B2A8C-53BD-431C-B37D-AB1A8839F743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_a:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "EF8DB303-B7F0-41B2-9675-7EB982BCBB22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_a:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "FB3CBE91-5D2A-46E6-8161-AC14267F4249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_a:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "5C366FDF-12FC-471A-9EFE-601442426B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F644F620-E3B3-4226-AAB4-6B4E7898CFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_b:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "10722BA3-02FD-4496-BB57-593A3CC34366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_b:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "AD179968-7315-4A62-A091-95CA68916355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_b:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "9D0E4456-81B4-46A3-A1FC-0EB4E8B7A1A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C8141E-F14A-4116-9198-6E88E25DD9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_c:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "764C2EF8-E058-4CEA-96CC-27A4FD951C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_c:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "B9055C38-3CAB-45E0-A4AC-0C7032E4239C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_c:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "163BCB99-45AF-49F4-AD63-3702D2ECB043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81AD1688-AD56-488A-A1F4-8A6074EDE8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_d:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "F4E4CF0E-D11D-4C75-9F47-F688094A7BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_d:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "8E3D0406-0BF8-4BA5-9AE7-B677D7B7250A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_d:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "8AF82674-52DD-4895-8384-89119DAF9976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAB3E52-93D3-4B03-BB1C-46D79798A91D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_e:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "A131402C-B591-4F94-B0B2-B5B9F652B4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_e:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "68076473-40D4-43B3-A25A-C10594ED8DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_e:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "906EF61F-ED87-4EC4-A9DE-2ADFBA68AC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3229750-6EA2-470B-BB1A-C16E5167AB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_2_f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EACB301-4AA3-4A63-912F-05A125CEC9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_f:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "516D8403-4618-4FE4-B2EF-7158E5E6A421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_f:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "1E788908-B37E-450F-9F2F-5960A3D9F6B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE20E759-3863-4E46-997E-8DF5D1E88B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_g:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "FB513ADF-35B3-43E1-8A07-6E209E40C2BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "2E4CEFA6-69E5-4802-AD51-67CA3D3B814D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "9D7D645F-DA6E-4801-9181-7447C741C758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00:*:hpux_english:*:*:*:*:*",
            "matchCriteriaId" : "227F52CD-0125-4BE5-818D-D52D75B753BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "B0902AE1-ADED-4D6B-BA70-092BC1347F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "D8E33B84-B5AF-4F4A-90CF-3FD68DF5A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00:*:linux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "3F388090-6A8C-422D-9EC6-A4F5A0ADAA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "2F981134-414B-41BA-9269-C7C9699C39BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC0CA73-E65C-4D02-B178-AFC64C2A0579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00_a:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "EC41F6BB-CDCD-4E42-8387-61782E3B3EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00_a:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "DEDC97E8-60D7-4331-9C7F-AC0B7ED69A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00_a:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "74665C79-D477-4BD1-803A-B37222CBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00_a:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "9EC4A29B-CD3A-4B3A-B740-2C2B2EE56EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC93484-A03D-49BC-BE49-719CC9B24124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00_b:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "F33D8922-8EEE-48AD-8E8C-C20F59BEB800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF3A7BA5-AFCA-4D2C-8DF7-1375C34EA7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "308D4AA3-1501-4A42-A467-1A8C307F77AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "EB0E3AAA-F85F-476C-81FE-B4A7F9CBBFAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "FC7E6148-2404-4D61-A6D1-A032E537489A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "3C2C7DC7-54DF-4437-A149-BF5F2BDD863D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "45D98BFF-7A7F-42CD-8168-107B2D67F12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3CF881F-CD40-4F82-B281-206BC68372BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C293E3A6-F0EA-476F-A6E4-45C89C4213B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_a:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "FCF7ED11-7D09-432B-9421-0FDEB9C66A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_a:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "69C5D050-1240-489E-A902-1C4FAC034468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_a:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "76CB079C-DDFC-4EF4-A356-5976C54ECA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_a:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "2E1C8468-70D9-44DB-B549-D382B932098B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_a:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "7BD0BE6C-F8AD-4B30-9BAB-937BE8C3AF2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E69E6AE-6C98-4865-A648-646639C2D31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_b:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "CA3887A0-7202-4AD8-88E8-BAE91A00B60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_b:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "614868BC-5B90-4D11-B9C3-16FC04E92F67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_b:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "894F972F-37C6-4374-8163-3187906C4C32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AEB2F88-5CF0-48A7-A214-3BA00F945F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_c:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "14B0A0FD-C241-4459-9B9A-D88C4763382E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8471E11-F0A4-4FFC-B5F8-28DEE544CDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_11:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "9EAC2573-2A46-450E-9551-70CB69B431D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_11_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E77194E-E1DD-483F-A6C5-B40B36CC1BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_11_a:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "8080D59E-9E0D-40F3-B9A5-885A199C7E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "342A3909-8330-4895-BB2D-89347E003984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_20:*:linux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "BACF8A84-514F-4B6A-A366-1705A135CFD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_20_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9F958C-53DA-441D-8E0B-C3B3C0056587"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_20_a:*:linux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "0D90A7C6-ACDD-4D5E-AB4C-3229F944DED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_20_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F4698F1-23C0-43AF-A746-1A98EB444879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_20_b:*:linux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "0CEA8BD0-B040-4677-AA2C-89EE2F45C3AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AF7614-EFC9-4155-BDEE-25273EBF4C70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "6017FEE8-445A-45A4-888C-73F71ED1B98F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "309CADB4-AE42-49C6-9D4D-6FEDEA845CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50:*:hpux_english:*:*:*:*:*",
            "matchCriteriaId" : "0D11C6D7-7D39-4B4A-935F-1214BE167A3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "03EE8AD1-0536-43D7-9B90-CCE30BCBD694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C963245D-EF66-493F-B2EB-2DD86E0F9336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "B0CCB26A-662D-43DE-B7C9-B7C7D05C6D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEEE70C5-F0DE-4E5E-BD22-92C336F3595F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_01:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "D50370E9-9784-4D08-9974-43673DC602B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_01:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "0F4EB6B1-E6CA-498C-A4F5-C4AB03B872B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_01:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "BF2C37BE-A91E-4B92-A143-00DE4DC9619D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_01:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "488176F9-3AF4-424B-8784-475AD89FAA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_01:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "3B7BEBA0-0D96-4795-A836-12A9078670D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39C5A11E-5014-46E5-83CB-9A207BE5C022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_02:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "F810B138-B86C-42AB-8EBA-CACB3B72116D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_02:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "17E9CEBA-EFA3-4AF9-AD70-429F8C34AADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_02:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "66913023-3DEB-4D88-AAAF-9DE03A5A73CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_02:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "AB4E8243-F3C5-40A6-BC09-BBC044F30046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_02:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "CE9D9D8C-32E6-4664-9573-CB2440DB98BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB786338-49A4-4BF3-AD8D-CCBDD2AFC9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_03:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "DE4DBB57-E897-4F4A-8FE0-76DAD9257EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221210B4-2F87-4227-B041-50F304E32580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_04:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "CCAAFF95-0349-445A-AFE5-9D51E964CD60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48055C8-003A-4293-A11D-7350B0304FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "F3D0F3EC-2BA3-4583-9BAB-5F4C99FDF09E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "C11F5485-16E3-485A-BAD9-AD07FAA6D6ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00:*:hpux_english:*:*:*:*:*",
            "matchCriteriaId" : "E444521C-FF09-4373-B668-99656EAC1E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "9670D972-B0CD-470E-B933-8B2383A74B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00:*:linux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "FC08AB71-65D0-4D04-AEDF-0EE9DD7DA379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "209E781E-0DEA-4873-8D93-991738965E6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A1B56C-A019-4098-A214-592D77A0180B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_01:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "2367C73D-C7B9-43DA-B4C4-B0178B46F639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_01:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "D204C355-3251-49D7-A49D-2E9FC80E6945"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_01:*:hpux_english:*:*:*:*:*",
            "matchCriteriaId" : "53D98B0A-6089-46A4-8531-13CBCC7BC03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_01:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "FF4B9C90-6C6A-442A-B9D8-AAA6055C87CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_01:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C9B2C145-3217-4FF0-B339-B94F891844C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_01:*:linux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "844F7145-AC3A-43DE-B151-EF972563175A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_01:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "23FB6A44-7090-4CC5-9451-3C387861841C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFE8E4A-3E79-4425-AD2A-AC03FB46E7B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_02:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "1A12B662-BCCD-472F-B61E-17ACB66754A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_02:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "F1C5150E-F572-4950-8C2D-7F9E7F1F503B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_02:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "1BDF0556-AD35-4608-9B88-752C2A409E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_02:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "24592C37-7BAF-4BE4-B015-792C5D7D2F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_02:*:linux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "C6F9C9D8-0994-4EB5-896F-733F9C6CD885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_02:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "09E80E47-F13A-4BDF-87A4-1ED750FE1AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDD3EBD-C2CD-4671-8A0D-ADC37447EB7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_03:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "D89CA486-CEF9-469A-8D87-85FF2F7D6E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_03:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "12A5B0AA-69FA-46F7-9AAC-7B86A79C840F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_03:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "8EE5ED61-B5A9-40EC-838A-CB8B617179E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_03:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "2487D5DB-9DFA-4148-B800-49E6C42817DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_03:*:linux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "699DEE9D-1230-4E4F-925D-4F9D44BFB12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_03:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "15A35184-D3FC-4CD6-9762-8D10FA0D9123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E5C69A-F118-4487-992D-C4CF6B5A0934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_04:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "A1F16DB0-F5A9-40BC-83B5-92248636248E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_04:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "395076C2-8A86-47BE-966D-2EAAAC2F74AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_04:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "919BBE2C-9768-4D5E-903E-CAF327BAD569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_04:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "F4CB544D-5E61-40B4-B370-15CB9C00A836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_04:*:linux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "E17A95B4-C12E-4080-A259-73576D307CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_04:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "6848C367-DCE5-4E33-9250-66BD41CF79FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A08FCF-C92E-40BC-9EDC-752C5449DC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_05:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "784AAEF2-F980-4908-AEBC-8E42AF9CF018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3F2C866-BBC7-426E-B499-FD8A3A8D5BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "2F0A7DB2-D536-4B5D-B756-6F20F286DB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "CBCF0AA0-D9CC-4F89-80E6-5C93BF5E23FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "A5A260A4-5021-4AFB-B5F7-030D153C9C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6513CD3C-C8A3-4EAC-B649-A1A3FA7F1EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01:*:linux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "9191BA12-86DC-49EF-8B93-E39DCEFC56B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "41F30472-B564-4071-9CCD-3786296879FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "719CCDCD-1B6B-4380-9674-DF0B1768AF37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_01:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "68F55638-CE02-47BB-92A6-ABB9AFD64CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_01:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "95295734-5B6D-4083-B974-C98F6BACAAA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_01:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "DB7E0059-D039-48B5-943E-A47BBEE406DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_01:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "E83748E9-391E-4FFF-913D-B5D82639809B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_01:*:linux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "38EC3D66-448B-46D6-80C7-264516103973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_01:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "557DFE66-CE0D-46D9-8B6D-18B641881BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AEE45DA-18F1-4B14-9824-27506BE9712B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_02:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "D021D98B-1909-4999-9A2F-2A1A7501C4F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_02:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "FEF0574F-223F-4C00-A6DF-2BEC41CA0D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_02:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "F67CF3FE-097D-44EE-9125-F7EC0DAD622C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_02:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "04667F7A-50E3-4D5D-ACCE-1ED83C7E248C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_02:*:linux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "D765B86F-7FEA-4ABE-8AF2-7AEFCF3CF1E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_02:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "E1AC962C-5AD1-4B30-9157-5571402D0258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA650FA-8345-465A-ADE4-EF8A5C8C351D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_03:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "48892DB9-CBB2-47C6-855F-59A3ECE39ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_03:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "A6CF3AF7-B174-45A0-B5ED-4D24385CCBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_03:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "124DCB14-7CE3-414C-B4A9-869478EEB2F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_03:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "EA2B5714-4E5D-4FCC-BADD-6ED4331F3E8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_03:*:linux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "3BC9EF6E-AC69-43FA-A6FE-69685A9A8A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_03:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "0BA1F29C-B73D-47EA-A7AD-275DD034AB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF680E0-BE3B-4902-BC4C-9930C01ED063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_04:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "CAC2123D-22EA-47EE-9018-C000E6493403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_04:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "A7CCF8AE-36E2-4520-9786-02CB354DCB49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_10_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6786B05-00BC-4B56-9618-EA18211C0B0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_10_01:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "1C05C30B-8304-4E3A-9367-6C10AD94E5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_10_01:*:hpux:*:*:*:*:*",
            "matchCriteriaId" : "23B0AD10-693F-4C58-BDDE-5CD4588B53BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_10_01:*:hpux_ipf:*:*:*:*:*",
            "matchCriteriaId" : "87C7DBAA-E515-43F2-AF69-09F3E5A0B7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_10_01:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "E3A05199-9071-4972-A411-75591E653250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1_file_transmission_server:08_10_01:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "4FD19784-7E66-40D1-92C9-A00580089CF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36645",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-015/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2575",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-015/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3170",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-11T20:30:00.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in AIMP2 Audio Converter 2.53 (build 330) and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long File1 argument in a (1) .pls or (2) .m3u playlist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en AIMP2 Audio Converter v2.53 (build 330) y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) o posiblemente ejecutar código a través de un argumento File1 largo en una lista de reproducción (1) .pls o (2) .m3u."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aimp:aimp2_audio_converter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.53",
            "matchCriteriaId" : "25F4206E-5800-4E16-80FA-FFC59F9CF184"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35295",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2530",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3171",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-11T20:30:00.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter to user.php or (2) lookup parameter to search.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Anantasoft Gazelle CMS v1.0 y anteriores, permiten a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro (1) user sobre user.php o (2) lookup sobre search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anantasoft:gazelle_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "37EB6459-F0E4-493A-BF5B-606D3E147159"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/gazellecms-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33686",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2541",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/gazellecms-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3172",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-11T20:30:01.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Hitachi Groupmax Groupware Server 07-00 through 07-50-/A, Groupmax Server Set 03-00 through 06-52, Groupware Server Set 03-00 through 06-52, and Scheduler Server Set 03-00 through 06-52 has unknown impact and attack vectors related to invalid access rights."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades no específicas en Hitachi Groupmax Groupware Server v07-00 hasta v07-50-/A, Groupmax Server Set v03-00 hasta v06-52, Groupware Server Set v03-00 hasta v06-52, y Scheduler Server Set v03-00 hasta 06-52 tiene un impacto y vectores de ataque desconocidos, relativo a derechos de acceso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DBE4E1A-6297-4A28-BBFA-D8C275C46C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07-00-_j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92057239-5161-4905-91D8-0DCE42C541D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07-00-_k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64BF4F72-D600-4705-9EC0-6B2463953C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07-00-_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E3D3990-1A4C-426F-8104-A51C9D00A2E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07-10-_f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34C7B902-9522-4B16-AC33-57186EF907E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07-10-_g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8F3974-787F-470B-BE77-E904997E3F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07-20_g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "452F9BC1-C515-451E-963D-B7DC43B36FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE64BF64-C49A-41CC-BE1A-8CF4A3666F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_f:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "FAA844C9-56E5-449A-AC9F-CC617E5F28DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7B537C-170C-49B5-95A2-9878F1FFAA15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_g:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "5F15F76E-B900-429E-862E-34CC8C96EC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A66334-FB4B-4715-A379-7FE50659FDA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_i:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "0C67283E-04D4-4D5F-8A90-69225244AA20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87BE121-C8A3-4D89-819E-69B60AD9FB16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_j:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "65016992-A3FE-4835-A006-CCB4BFC73384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_j:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "188F6E6F-8D13-46B7-AF2C-1A18D1EBE9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38DD41D4-EB35-4439-9249-A45192BA7173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64047F0-4401-4ECD-BC45-BDC6009F6E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_l:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "F20DA526-B4D8-4383-815B-4A219DE643E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561430CF-247B-412E-9259-1AAB220BDA24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_d:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "D41C58B6-BB81-4935-ACDD-B2F9F986CEC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F71C3C8-1740-4E2C-96BD-E27BC121A707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_e:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "4007788F-6FFD-45C9-B234-7B9A5205BC84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34ADEF69-AFD4-4553-A457-777B24E20B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_f:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "300ED48E-7580-4A97-954A-C3A3243682F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C91C9E-535B-4746-AA07-C2B5E4919CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_h:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "D7FFA518-E68A-4480-992F-C08356812658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_h:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "926876A2-265C-49A4-85CD-64BBC4AC85C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F74F79D-91B9-4999-A2FB-1CD7D7E15B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_i:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "1923CB6D-8CB7-4F4F-9E58-301367C7A0E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F46C61-72D0-40A5-9E85-5F2B593CD891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_c:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "B0A4588E-17E6-44B3-9B3A-F88251454608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94F369A9-D325-4B53-8088-C4317C877489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_d:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "50A3864A-6829-4139-A076-175600CFEB6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7742-F9CA-48D4-803C-6A1A71C7D007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_e:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "969E8DE5-2C20-4141-BB55-D9729748A8A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC270B0-50A6-421E-AA6E-AEB5D50EB394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_f:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "C412964F-A106-405E-823D-EABD9C4A2CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A9E4A8-0D99-45C0-AACC-6500FD254CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_g:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "C62FC6ED-0A1F-4F20-B3D1-D02DBE0E0F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_g:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6A64F8CC-C020-483B-943E-AC03BAB76CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B237B90-82DD-4269-A360-B9C1BA80CC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_b:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "4F46E1FE-F777-44A5-BAF9-7BB49EC5470B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_b:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "E2C0C532-5317-4455-87E6-708009D811B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F23B6C4-E5E2-4BFF-BC2B-68F4D9A2A3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_c:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "E705A335-F420-4B64-859A-97A2B6D085BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_c:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "29B7DF20-D862-4D8E-B470-62E681DDE2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB58FE90-AE7B-4CF0-A9C5-12C590B2096F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_d:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "BDC0FE3D-82D9-4C5C-8D28-B6939F267F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_d:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "F9B9C058-E426-4ADB-9BEE-497004BAD98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26A289A1-32EE-4B5B-AA4B-37B60D0A1CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.32:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "19DECC03-B259-45B3-87A5-9C685FF66236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.32:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "6500B180-3149-49EA-B316-F74C271656E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.32:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0C1E6BDF-BA08-4A9D-A1BA-8FB6BC8815FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.32_a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB0B451-78FE-4F2C-A86F-4334A88FA25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.32_a:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "B5D0E285-AC9A-4A8B-ABBC-5622EB398751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.32_a:*:hp-ux:*:*:*:*:*",
            "matchCriteriaId" : "93A8B977-1920-42A5-8745-2A26BC5359BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_groupware_server:07.32_a:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "68205969-80E4-49D4-ABB2-8D2FD6B3DFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_scheduler_server_set:03:00:*:*:*:*:*:*",
            "matchCriteriaId" : "FA47EEA4-E702-415B-88F8-1B83E9D823DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_scheduler_server_set:06-52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A0B8E8-36A4-4AEB-A429-E0DA62D17804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_server_set:03-00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FC495A-38B6-4E8D-972D-50434E44C84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_server_set:06-52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8F27AC-20F9-4DDE-AE79-2B5F8BC76458"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001930.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36527",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-012/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/57565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2480",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001930.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-012/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/57565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-11T20:30:01.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in admin/add_album.php in The Rat CMS Alpha 2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de subida de archivos sin restricción en admin/add_album.php en The Rat CMS Alpha 2, permite a atacantes remotos ejecutar código de su elección subiendo un archivo con extensión ejecutable, después accediendo al mismo a través de una petición directa al fichero en images/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theratstudios:the_rat_cms:2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "484CD1A2-DB95-4355-8179-09B83F38BB85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-11T20:30:01.063",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in fonctions_racine.php in OBOphiX 2.7.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin_lib parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en fonctions_racine.php en OBOphiX v2.7.0 y anteriores, permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro chemin_lib."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odelao:obophix:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.0",
            "matchCriteriaId" : "2773D5E3-2B6C-410C-8D64-D2E2CF1E14D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:odelao:obophix:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CD7F92-EE3A-4373-A184-AB5742746FA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-11T20:30:01.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Model Agency Manager PRO (formerly Modeling Agency Content Management Script) allow remote attackers to execute arbitrary SQL commands via the user_id parameter to (1) view.php, (2) photos.php, and (3) motm.php; and the (4) id parameter to forum_message.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Model Agency Manager PRO (anteriormente Modeling Agency Content Management Script), permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro user_id sobre (1) view.php, (2) photos.php, y (3) motm.php; y a través del parámetro id sobre (4) forum_message.php.."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boldfx:model_agency_manager_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6314816A-948A-46DE-A20E-0458A41EAC6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-11T20:30:01.110",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the ActiveX control in Novell iPrint Client 4.38 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.1, \"Novell iPrint Client 4.38 ActiveX exploit.\" NOTE: as of 20090909, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "El desbordamiento de búfer en el control ActiveX en Novell iPrint Client versión 4.38 permite a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de vectores de ataque desconocidos, como es demostrado por un módulo en VulnDisco Pack Professional versión 8.1, \"Novell iPrint Client 4.38 ActiveX exploit \". NOTA: a partir de 09-09-2009, esta divulgación no tiene información procesable. Sin embargo, debido a que el autor del VulnDisco Pack es un investigador confiable, al problema se le asigna un identificador de CVE para fines de rastreo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:iprint:4.38:*:client:*:*:*:*:*",
            "matchCriteriaId" : "5DEEE521-1D76-4ED8-951E-058D9311C6BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36579",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/57922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/57922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-11T20:30:01.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Kaspersky Online Scanner 7.0 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, (1) \"Kaspersky Online Antivirus Scanner 7.0 exploit (Linux)\" and (2) \"Kaspersky Online Antivirus Scanner 7.0 exploit (Windows).\" NOTE: as of 20090909, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no específica en Kaspersky Online Scanner v7.0, tiene un impacto y verctores de ataque desconocidos, como se demostró por un módulo concreto en VulnDisco Pack Professional v8.8, (1) \"Kaspersky Online Antivirus Scanner v7.0 exploit (Linux)\" y (2) \"Kaspersky Online Antivirus Scanner 7.0 exploit (Windows).\" NOTA, como en 20090909, de esta información no se tiene información de la acción. Sin embargo, debido a que el autor VulnDisco Pack es un investigador confiable, se le ha asignado un identificador CVE con fines de seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:kaspersky_anti-virus_scanner:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "1CF0832A-FC08-4C37-8FBB-98AAC24E63BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:kaspersky_anti-virus_scanner:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D8EBF8A6-A017-4AFA-B480-40C756198DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:kaspersky_online_scanner:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFDD623-1862-439D-9991-275DDD8C6D4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36570",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-11T20:30:01.157",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in mm.exe in Symantec Altiris Deployment Solution 6.9 allows remote attackers to cause a denial of service via unknown attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.18, \"Symantec Altiris Deployment Solution 6.9 DoS.\" NOTE: as of 20090909, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no específica en mm.exe en Symantec Altiris Deployment Solution v6.9, permite a atacantes remotos provocar una denegación de servicio a través de vectores de ataque desconocidos, como se demostró por un módulo concreto en VulnDisco Pack Professional v7.18, \" Symantec Altiris Deployment Solution 6.9 DoS\". NOTA, como en 20090909, de esta información no se tiene información de la acción. Sin embargo, debido a que el autor VulnDisco Pack es un investigador confiable, se le ha asignado un identificador CVE con fines de seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0002047-0965-4086-A5E6-AEC02200B6CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36587",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-11T20:30:01.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Symantec Altiris Deployment Solution 6.9 might allow remote attackers to execute arbitrary code via unknown client-side attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.17, as identified by (1) \"Symantec Altiris Deployment Solution 6.9 exploit, (2) \"Symantec Altiris Deployment Solution 6.9 exploit (II),\" and (3) \"Symantec Altiris Deployment Solution 6.9 exploit (III).\" NOTE: as of 20090909, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Symantec Altiris Deployment Solution v6.9, podrían permitir a atacantes remotos ejecutar código de su elección a través de vectores de ataque del lado del cliente, como se demostró por un módulo concreto en VulnDisco Pack Professional v7.17, como se identificó por (1) exploit \"Symantec Altiris Deployment Solution v6.9, (2) exploit \"Symantec Altiris Deployment Solution v6.9 (II),\" y (3) exploit \"Symantec Altiris Deployment Solution v6.9 (III).\" NOTA, como en 20090909, de esta información no se tiene información de la acción. Sin embargo, debido a que el autor VulnDisco Pack es un investigador confiable, se le ha asignado un identificador CVE con fines de seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0002047-0965-4086-A5E6-AEC02200B6CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36587",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-11T20:30:01.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php."
      }, {
        "lang" : "es",
        "value" : "Anantasoft Gazelle CMS v1.0 permite a usuarios remotos realizar un restablecimiento de la contraseña a otros usuarios a través de un parámetro user modificado sobre  renew.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anantasoft:gazelle_cms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799EE835-86AB-492B-8536-558CBC2504DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33686",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-11T20:30:01.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the customizetemplate parameter in a direct request to admin/settemplate.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en Anantasoft Gazelle CMS v1.0, permite a atacantes remotos sobrescribir ficheros de su elección a través de un .. (punto punto) en el parámetro customizetemplate en una petición directa sobre admin/settemplate.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anantasoft:gazelle_cms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799EE835-86AB-492B-8536-558CBC2504DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33686",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-11T20:30:01.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in user/File/."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de subida de archivos sin restricción en admin/editor/filemanager/browser.html en Anantasoft Gazelle CMS v1.0, permite a atacantes remotos ejecutar código de su elección subiendo un archivo con extensión ejecutable, después accediendo al mismo a través de una petición directa en user/file/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anantasoft:gazelle_cms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799EE835-86AB-492B-8536-558CBC2504DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33686",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-14T16:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CarbonCore in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a file with a crafted resource fork."
      }, {
        "lang" : "es",
        "value" : "CarbonCore en Apple Mac OS X 10.4.11 y 10.5.8 permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un fichero con una bifurcación de recurso manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1335E35A-D381-4056-9E78-37BC6DF8AD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B4CD59-9F37-4EF0-BA43-427CFD6E1329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-14T16:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5.8, and Safari before 4.0.4 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ColorSync profile embedded in an image, leading to a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento enteros en ColorSync en Mac OS X versiones 10.4.11 y 10.5.8, y Safari anterior a versión 4.0.4, de Apple, en Windows, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de un bloqueo de un perfil ColorSync diseñado insertado en una imagen, conllevando a un desbordamiento de búfer en la región heap de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1335E35A-D381-4056-9E78-37BC6DF8AD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B4CD59-9F37-4EF0-BA43-427CFD6E1329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.3",
            "matchCriteriaId" : "276684F5-5CD2-44E6-931A-E8B11D022B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F4ADD0-449B-4DDD-9878-DE86CBD56756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A419AE8-F5A2-4E25-9004-AAAB325E201A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "64FE1AA1-32D1-4825-8B2B-E66093937D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E760CD65-A10E-44F1-B835-DA6B77057C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A09DA0-83E9-491D-A0A5-AF97B5463D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C7EF0-A56B-40E6-9CED-1228405D034E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6078B0-4756-4E04-BAC4-C4EC90548A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87EDB53-FB6E-4B10-B890-A7195D841C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD75A4F-F529-4F5E-957D-380215F7B21B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834EC299-2010-4306-8CEE-35D735583101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443FF271-A3AB-4659-80B2-89F771BF5371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D29B98E-2F62-4F6F-976D-FEC4EB07F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3112AFEB-7893-467C-8B45-A44D5697BB79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC83309-3A97-4619-B5C1-574610838BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891514D5-50C8-4EDC-81C5-24ABF8BCC022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25032A3A-9D05-4E69-9A22-C9B332976769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9315ADD-5B97-4639-9B59-806EFD7BC247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E44913D-BC8B-4AA1-84EB-EFEAC531B475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B74019F-C365-4E13-BBB4-D84AD9C1F87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*",
            "matchCriteriaId" : "018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*",
            "matchCriteriaId" : "1082B33F-33B5-453A-A5AA-10F65AB2E625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*",
            "matchCriteriaId" : "EC348464-F08D-4ABF-BB90-3FA93C786F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61652033-FD15-47D6-8B18-CF28E6CE346C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDCF83E-620C-40FA-9901-5D939E315143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D113B5-070D-4F91-AB5E-222D71C90EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E86DEDD-ABDC-46BD-BAD3-A409635F7801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BAE980-449F-4F8C-A5BC-6CB7226E971A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A33F900-D405-40A8-A0A5-3C80320FF6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4444A309-5A97-4E1C-B4EA-C4A070A98CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B29951B-9A98-45B7-8E4B-5515C048EC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED950D-38AB-4D66-B97A-FB982D86057F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FDEB4F-133A-43DF-A89B-53E249F1293D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E78F43-07BD-4D62-9512-DA738A92BC7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE25E9E-826E-4782-AED8-AC6297B18D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3180366-2240-467E-8AB9-BEA0430948F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E834B8-545E-4472-9D60-B4CF1340D62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB9CC52-E533-4306-9E92-73C84B264D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02C814DE-1884-4F3E-944D-068F7FD55B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A5CA99-8B1C-4C35-85E3-DB0495444A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "912A26D1-3264-464F-B101-1796B35437E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D8C2EF-D552-4279-A12E-70E292F39E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00082E3-EBF5-4C23-9F57-BF73E587FC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C453B588-15FD-4A9C-8BC1-6202A21DAE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD634B1-4986-4E80-8BDC-58941893F6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BB6761-3581-4AE6-85E0-1609D15D7618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA1A4C8-9F87-449F-A11F-52E5D52247E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8498D2-DECC-4B88-BC1B-F8E2D076EE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D70D21-2FFC-4006-92AE-CFD7D5AE99CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC87F61-3463-468A-BF0B-070816BBC3CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EAC196-AE43-4787-9AF9-E79E2E1BBA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FD40E4-D4C9-492E-8432-ABC9BD2C7E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36EA71E0-63F7-46FF-AF11-792741F27628"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37346",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3217",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/57949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-14T16:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JBIG2 stream in a PDF file, leading to a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en CoreGraphics de Apple Mac OS X v10.4.11 y v10.5.8, permite a atacantes remotos ejecutar código de su elección o probocar una denegación de servicio (caída de la aplicación) a través de un flujo JBIG2 en un fichero PDF, conduciendo a un desbordamiento de búfer basado en memoria dinámica."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1335E35A-D381-4056-9E78-37BC6DF8AD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B4CD59-9F37-4EF0-BA43-427CFD6E1329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-14T16:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the USB backend in CUPS in Apple Mac OS X 10.5.8 allows local users to gain privileges via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en el panel de gestión USB en CUPS en Apple Mac OS X, permite a usuarios locales obtener privilegios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1335E35A-D381-4056-9E78-37BC6DF8AD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B4CD59-9F37-4EF0-BA43-427CFD6E1329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cups.org/articles.php?L588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36350",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cups.org/articles.php?L588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-14T16:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageIO in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PixarFilm encoded TIFF image, related to \"multiple memory corruption issues.\""
      }, {
        "lang" : "es",
        "value" : "ImageIO en Apple Mac OS X 10.4.11 y 10.5.8, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de una imagen PixarFil manipulada codificada con TIFF, relacionado con \"múltiples cuestiones de corrupción de memoria\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE39585-CF3B-4493-96D8-B394544C7643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1335E35A-D381-4056-9E78-37BC6DF8AD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B4CD59-9F37-4EF0-BA43-427CFD6E1329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-14T16:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code via a .fileloc file, which does not trigger a \"potentially unsafe\" warning message in the Quarantine feature."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de lista negra incompleta en Apple Mac OS X 10.5.8, permite a atacantes remotos asistidos por usuarios ejecutar comandos de su elección a través de un fichero .fileloc, el cual no provoca un mensaje de advertencia \"potencialmente inseguro\" en la característica de cuarentena."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1335E35A-D381-4056-9E78-37BC6DF8AD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B4CD59-9F37-4EF0-BA43-427CFD6E1329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-14T16:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Launch Services in Apple Mac OS X 10.5.8 does not properly recognize an unsafe Uniform Type Identifier (UTI) in an exported document type in a downloaded application, which allows remote attackers to trigger the automatic opening of a file, and execute arbitrary code, via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Launch Services en Apple Mac OS X 10.5.8 no reconoce adecuadamente un Identificador de Tipo Uniform (uniforme/único) no seguro en un documento de tipo exportado en un aplicación descargado, lo que permite a atacantes remotos lanzar la apertura automática de un archivo, y ejecutar código de su elección, a través de un sitio web manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1335E35A-D381-4056-9E78-37BC6DF8AD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B4CD59-9F37-4EF0-BA43-427CFD6E1329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-14T16:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories."
      }, {
        "lang" : "es",
        "value" : "Samba 3.4 en versiones anteriores a 3.4.2, 3.3 en versiones anteriores a 3.3.8, 3.2 en versiones anteriores a 3.2.15 y 3.0.12 hasta la versión 3.0.36, como es utilizado en el subsistema SMB en Apple Mac OS X 10.5.8 cuando Windows File Sharing está habilitado, Fedora 11 y otros sistemas operativos, no maneja adecuadamente errores al resolver nombres de ruta, lo que permite a usuarios remotos autenticados eludir las restricciones previstas para los recursos compartidos así como, leer, crear o modificar archivos, en determinadas circunstancias que involucran a las cuentas de usuario que carecen de directorios de inicio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E05AD3-C7F0-421D-8C9B-604E553332E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A53517C-F12D-4D74-A722-5AE23598CEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF4A0A7-E176-4009-BAA2-E23B330D91A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EB6115-CC45-4464-8400-D7E3A9402803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B06DAF-869F-481B-965D-70353581A6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF1A1D4-39DE-4227-A6E0-7E7817BDCCE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F0E277-09BD-4FA8-B2A3-7E83AD1656BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F260B05-3963-49BF-9D96-EB06722C5483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A7E91B-7B13-47E5-B8E6-CE7D6DC490F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F002F105-A911-4E56-8630-C287DC527E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1936E19-9887-4E53-AA0C-738ABD4B97EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2206C09-6A4B-4EC4-A206-E48EDF966913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B918306-8743-404D-A035-CC3997ADCC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43684906-D3AA-40FB-A75D-ED65C1DC9BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E39538-4811-49DB-97CF-1F018C58BAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C85D69FE-AF43-4B0E-A7A9-2D2C16426180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86347948-C08F-4F02-89A0-4F4A55CD4BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A908DA9D-A8BD-46BA-A71F-BFDEC0A1341E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA7905C-51A0-4A56-A6A5-330288613055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE85033-0658-4D60-8C7A-6E2BD63AFDCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4600AAA4-834D-4F63-8E9A-88CB555C029E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FE8D2E-AF0D-4C84-A5BC-2CE6759B534C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BFA3B82-9440-49E1-8088-FA22C0B7DD88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0762B1DA-7232-478D-805F-5E2A50F8BEAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F22FC74-5999-4158-A253-674BF1C21E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEB31C4-5352-4905-8D9E-BD754991F07E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BE2AEC-6ACD-422C-AD20-6C034D68C891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "101163D7-D440-43CC-8704-A9614CD8CEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E4811D-3387-4838-94A0-1BD7F3C9C3D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B69EA9CF-627C-4600-B4EC-10E91DB07E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF740A1-0BEC-4E29-9C74-F1F906EF3EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A8D6D8-A207-498F-8DB2-EB7ED842CE1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BB5BA1-F499-40FC-80F6-B3CD2F1BB074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.26a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A973443-C497-41FB-AF47-529AA2906CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BEE83D0-8377-49FB-AC7D-3B5E9DB6918B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.27a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC24403-E706-4073-A04D-53E1B79B59B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F2EB0A-249D-4E81-B459-A88AC60A1D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.28a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3AA114-63C8-4B25-86BA-73C6933EE21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBEA8397-6E23-49FE-9555-39C9599C6362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "023C2353-750A-42FC-AC7E-115627E74AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F28A8721-CA4A-44E1-B740-0B4610374CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93572BB-7F00-4137-A079-6FE96CD73F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0B13E8-EF18-4A3D-B228-C7FF128D1FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B843321-9A8D-4541-9E54-58E2978E2437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF36A20-3607-43A8-A4CC-169922BC0327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB71265E-60C4-4495-8B66-360E96B76FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE530BB9-A3ED-4EBB-B8E5-86D4CC5A8C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44746973-3CFD-4808-9545-755E296EFF6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E4627C-5D19-4599-B304-D0E4D4193170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE162A7-969D-44D5-B9ED-764F20F19C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DF45AE-DF03-4321-A019-D3BBC16433B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D87AD2-89F2-455F-916E-D404E6BD02C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6218AB51-DE71-40F3-8CBC-AF33586D36EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02F8427-0DCC-48A9-A04F-939571D511E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AEDE0A-B15C-4B0B-AFE9-4F96E5F71429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8A9943-6949-4B0A-9864-8B4696704098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1D6FEB-A3C8-41D1-B222-3AD11DB9C4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4970BB40-085C-4069-B6F1-7E3726F1CFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1E6CDA-36BF-4374-BBDF-B6DD52598AA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA43C063-EBE1-4C61-9C9E-C84C3A594A52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6962B6DA-5D78-4702-9546-216971D03F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FAD067-8547-41E7-B1BC-74CC55D58AA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787C3CBF-5E4E-4727-950A-D99F15327CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9E86C9-14FE-4C55-A08F-9A0C555260ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4B0684-FDCC-4EE8-AABA-F71204167C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7172A430-F124-4200-88C2-8BE486BA5DDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EB9DC7-A196-48ED-893B-733E8CDA961F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D03508-3D54-4D05-A5BC-6F8641B45C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F235FA61-ECBB-45C8-A48D-FAF12A5E2EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0E09D3-68FA-40C9-A478-53707E5F78BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66D41850-968D-431D-8075-EE9EFF013408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "873A4A35-2CB0-4D55-B455-19D892776293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDCD3046-85BB-40A6-A898-774833033891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C78E2B3A-10C4-4226-A224-8D4AC792B2F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFCF854-E316-442F-A62F-ACC1CA4E9892"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1335E35A-D381-4056-9E78-37BC6DF8AD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B4CD59-9F37-4EF0-BA43-427CFD6E1329"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB5EDB-520B-4DEF-B06E-65CA13152824"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126514298313071&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.samba.org/releases/3.0.37/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.samba.org/releases/3.2.15/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.samba.org/releases/3.3.8/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.samba.org/releases/3.4.2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36893",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36918",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36937",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36953",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37428",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.samba.org/samba/security/CVE-2009-2813.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507856/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-839-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2810",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126514298313071&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.samba.org/releases/3.0.37/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.samba.org/releases/3.2.15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.samba.org/releases/3.3.8/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.samba.org/releases/3.4.2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/57955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.samba.org/samba/security/CVE-2009-2813.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507856/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-839-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-14T16:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Wiki Server in Apple Mac OS X 10.5.8 allows remote attackers to inject arbitrary web script or HTML via a search request containing data that does not use UTF-8 encoding."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Wiki Server en Apple Mac OS X v10.5.8, permite a atacantes remotos inyectare secuencias de comandos web o HTML de su elección a través de una petición de búsqueda de datos que no usa la codificación UTF-8."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B4CD59-9F37-4EF0-BA43-427CFD6E1329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-14T16:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Xapian Omega before 1.0.16 allows remote attackers to inject arbitrary web script or HTML via unspecified CGI parameter values, which are sometimes included in exception messages."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Xapian Omega v1.0.16, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de valores no especificados en el parámetro CGI, que en ocasiones es incluido en los mensajes de excepción."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.15",
            "matchCriteriaId" : "E5B32B09-2211-446C-9605-50E5D2A647CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0DDC19-0F30-4974-918A-C30C86ABFA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBED9111-D09D-4216-85AC-DEE45FA3F7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A52A7C-45E2-4EBD-8F0D-3689EB2D5E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE37440F-00ED-4CE5-83F8-6E37FD6BDAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F73199-1EA7-46DF-8B2E-AA14D85A1DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8902A27-A219-46FA-9A8A-3E946A253EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C83D2F-C7B0-4010-9C17-FE5F813C07B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0E29D0-A8A9-4859-8B96-46BC77474EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "625F72A9-33B2-4599-BB85-307BB0E1A70C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "586A4BFF-EE02-446D-813D-4047CAB76691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB61F8E-5796-42C5-BC33-F1DD0177CFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7E31076-63C4-402C-9DB4-67A466722B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE12CF1-0D72-48B4-B775-1E504F27E4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BB55590-D2E5-4D22-A3BB-0A2D33C584AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5EE25F-10A4-41EE-8E28-2C9CBD4736BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B3321D2-77C1-4592-8CD0-3E7C52F7F107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27123FE-9348-48A1-9678-A31548CA21EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBA3DE2E-FECC-4775-A4C7-FA88FB474EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B31509-3028-498C-8FF3-B93F1F33BDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2C533D-ED06-4676-A8F3-BA664CB107A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF912E95-618D-439B-8231-CD45C5966CE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A89463B-AD9B-4B61-9BFF-F003470E8D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1E5EE7-A605-4D0A-BC1C-A6F42BDA39C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DA8916-91BE-4C3E-83FD-2471BDE93BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E982B22A-3368-4FD7-BD4D-A7A1E3F2DEBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458012D3-B354-4984-BAC1-E8810EF73432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B66D8A5-8CF6-4752-AD21-CCB32780286B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EE2CF9-5C0E-4291-A694-C0D327415730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6FB0460-C0C2-4A72-A575-F3DAD299EE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B462D97-AD4D-4F0E-865D-D2D879ADC177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xapian:omega:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEA96B4-838C-4137-B5A3-736DD618B3CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.xapian.org/pipermail/xapian-discuss/2009-September/007115.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36674",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36693",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.xapian.org/%2Acheckout%2A/tags/1.0.16/xapian-applications/omega/NEWS",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.xapian.org/pipermail/xapian-discuss/2009-September/007115.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.xapian.org/%2Acheckout%2A/tags/1.0.16/xapian-applications/omega/NEWS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-14T16:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in w in Sun Solaris 8 through 10, and OpenSolaris before snv_124, allows local users to gain privileges via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en w en Sun Solaris 8 hasta 10, y OpenSolaris anterior a snv_124, permite a usuarios locales obtener privilegios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B38088AD-968D-44B9-ABCE-4E4D8675A88A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7C385492-0B33-4757-9907-E69C7F709527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "01C7A393-6744-4913-A9CC-75F311D2C59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4DCF6792-8671-4CC0-99D5-7224E2B751A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FFB7E165-13D6-41D5-B1C3-F96669E54796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D6011B94-9326-47A7-8292-BA0210401DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2F57B586-3593-41F9-9D01-0E18F58EB81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B3BBCE23-9F15-45CD-859F-77ED540B51F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "053A0DA6-483C-49BB-BC7A-E624DB2C269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "447212A4-FACD-475E-A62B-60FE6504F63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB694DC0-407A-4555-8B72-DAF3C169DCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "78B80C92-7EB5-4343-B830-32E8C011E572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "535FF689-13A2-40C6-8706-7782038FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "46E4ED9C-F013-48D2-8642-E5BA7599A512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "843246D3-C2DA-454D-916A-AC8905E5134E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A1E8108D-3CE7-4041-9027-1CA7473389EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "244B7FE4-C485-4993-9810-3433C83A120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BE586AB9-9D46-4BC2-8092-51482F297410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E8585133-1F25-494A-8859-87B1D93305A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_121:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "3D01EACB-9DB4-4940-A1F2-40474B24AEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1A06-2588-47AA-81F8-E3655F915C33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_122:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D1BBB436-9F7A-4E2D-908B-D57A531B1B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5972E930-76E2-40FD-8E7F-74E012D34E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_123:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "45B5E359-6FF2-4029-AB6A-3C906DE6AF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_123:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A5991C3F-29F6-462F-A34E-2446E357A220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DBDFD8C-371E-42D2-9635-D8CDD1775984"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14CFA6D3-A611-4DF0-97AB-C30B79833DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F2F5901D-AB91-4F12-BF08-0BC3797833E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-113718-04-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266348-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://unsecurityresearch.blogspot.com/2009/02/advisories-published.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-113718-04-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266348-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://unsecurityresearch.blogspot.com/2009/02/advisories-published.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T21:30:06.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in Pirates of The Caribbean in the E-Gold Game Series allow remote attackers to execute arbitrary SQL commands via the (1) x and (2) y parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en index.php en Piratas del Caribe en E-Gold Game Series permite a atacantes remotos ejecutar comandos SQL a través de los parámetros (1)x y (2)y."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grapari:e-gold_game_series_pirates_of_the_caribbean:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6C04ED-F191-49DB-A4CD-CCB72AB2DB33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/egoldgame-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36488",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2442",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/egoldgame-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T21:30:06.140",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL commands via the fmid parameter in a view action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en plugin.php en el plugin v2.0 Crazy Star para Discuz! permite a usuarios autenticados remotamente ejecutar comandos SQL de su elección a través del parámetro fmid en una acción view."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comsenz:crazy_star_plugin:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D640F28-0F1F-4B4C-A6AE-1761F3A97B01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:comsenz:discuz\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEC31FB-8FAC-40EC-A320-1F0AAD6C5878"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2432",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T21:30:06.157",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web script or HTML via the (1) t parameter to forum.php, (2) profile_name parameter to profile.php, and (3) p parameter to view.php."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en VideoGirls BiZ permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de (1) el parámetro t en forum.php, (2) parámetro profile_name en profile.php, y (3) parámetro p en view.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videogirls:videogirls_biz:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE358E2F-B3E9-4B56-95DE-268FE472C6EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/videogirls-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36480",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36168",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2437",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/videogirls-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T21:30:06.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in gamelist.php in Stand Alone Arcade 1.1 allows remote attackers to inject arbitrary web script or HTML via the cat parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en gamelist.php en Stand Alone Arcade v1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro cat."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:standalonearcade:saa:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "823EB6EE-2D19-4E81-9ACA-FFD337407CCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/saa-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36481",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2438",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/saa-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T21:30:06.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in save.php in phpSANE 0.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the file_save parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en save.php en phpSANE v0.5.0 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro file_save."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_frohlich:phpsane:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E13629-8B1F-4B6D-9571-8498EEEB4B80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36476",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2436",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T21:30:06.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in DigiOz Guestbook 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the search_term parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos de sitios cruzados (XSS) en search.php en DigiOz Guestbook v1.7.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro search_term."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digioz:digioz_guestbook:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA758418-00B7-42E0-9B60-4D8BA7859427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/digiozgb-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36489",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2443",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/digiozgb-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T21:30:06.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to list.php and (2) cat parameter to rss.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en PAD Site Scripts v3.6 permite a atacantes remotos ejecutar comandos SQL de su elección a través del (1) parámetro search en list.php y (2) parámetro cat en rss.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pad-site-scripts:pad_site_scripts:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F08379-EC8B-4FDF-8650-72ECED9DD7A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2434",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T21:30:06.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to inject arbitrary web script or HTML via the cat parameter to (1) rss.php and (2) opml.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en PAD Site Scripts v3.6 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro cat en (1) rss.php y (2) opml.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pad-site-scripts:pad_site_scripts:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F08379-EC8B-4FDF-8650-72ECED9DD7A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2434",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T21:30:06.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in LinkorCMS 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the searchstr parameter in a search action; or the (2) nikname, (3) realname, (4) homepage, or (5) city parameter in a registration action."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en LinkorCMS v1.2 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través (1) del parámetro searchstr en una acción search; o del (2) nikname, (3) realname, (4) homepage, o (5) del parámetro city en una acción registration."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linkorcms:linkorcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "DB139560-ADE9-4CED-A31C-C5A54C1062C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linkorcms:linkorcms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "629FB767-1DA1-4F1E-91CC-489DEF7CD2A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linkorcms:linkorcms:1.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "0D3BB694-2012-4E7B-92F6-3706188A28A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/linkorcms-xss.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36487",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/linkorcms-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T21:30:06.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the DigiFolio (com_digifolio) component 1.52 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a project action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente DigiFolio(com_digifolio) v1.58 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"project\" a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uwix:com_digifolio:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4755FA33-3ADB-4EE6-8714-611E2C544C1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T21:30:06.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech SearchFeed Script allows remote attackers to inject arbitrary web script or HTML via the search parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en index.php en JCE-Tech SearchFeed Script permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro search."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jce-tech:searchfeed_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C4030D-00FB-44D0-9616-AD5AF56E9209"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/searchfeed-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36482",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2439",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/searchfeed-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T21:30:06.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rss.php and (2) search.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en JCE-Tech Auction RSS Content Script v3.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"id\" a (1) rss.php y (2) search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jce-tech:auction_rss_content_script:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9967A014-F1E5-4B39-88A3-6D3CD5E4251E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/auctionrsscs-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36490",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2444",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/auctionrsscs-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T21:30:06.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech PHP Video Script allows remote attackers to inject arbitrary web script or HTML via the key parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en JCE-Tech PHP Video Script, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"key\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jce-tech:php_video_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B5C2F2A-93CF-4EDF-ABAF-79D78B00495A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/phpvideoyoutube-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36483",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2440",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/phpvideoyoutube-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T21:30:06.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in JCE-Tech PHP Calendars Script allows remote attackers to inject arbitrary web script or HTML via the search parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php en JCE-Tech PHP Calendars Script permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jce-tech:php_calendars_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23399CF7-CEC0-4C5C-9F53-AAC32762A657"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/phpcalsearch-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36484",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2441",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/phpcalsearch-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T21:30:06.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in JCE-Tech Affiliate Master Datafeed Parser Script 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en search.php en JCE-Tech Affiliate Master Datafeed Parser Script v2.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"search\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jce-tech:affiliate_master_datafeed_parser:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747DFB7F-9572-4337-A944-343AB565396D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/ams-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36491",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2445",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/ams-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T21:30:06.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uebimiau Webmail 3.2.0-2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database with usernames and password hashes via a direct request for system_admin/admin.ucf."
      }, {
        "lang" : "es",
        "value" : "Uebimiau Webmail v3.2.0-2.0 almacena información sensible bajo la raíz del directorio web con control de acceso insuficiente, lo que permite a atacantes remotos descargar una base de datos con nombres de usuarios y hashes de contraseñas a través de un petición directa a system_admin/admin.ucf."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uebimiau:uebimiau:3.2.0-2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "083301CE-D67D-49A9-BD92-196BD627A4E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T22:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog."
      }, {
        "lang" : "es",
        "value" : "La característica de pantalla compartida en la aplicación Admin en  Apple Xsan anterior a v2.2, ubica en texto plano el nombre de usuario y la contraseña en una URL dentro de un mensaje de error, lo que permite a atacantes que se encuentren cerca físicamente, el obtener las credenciales leyendo dicho mensaje."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xsan:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "089C95C5-26EC-4199-B73C-A3C92BF568F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xsan:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5897F93-F78D-42CB-9882-00769B3411D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xsan:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539F122F-FBB5-45DE-8CB4-EEE5E35B4548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xsan:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA03C6F-A7AA-4759-AD7B-A6365ACBA801"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3797",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36385",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2644",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2629",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-09-15T22:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer inferior en src/http/ngx_http_parse.c en nginx v0.1.0 a la v0.5.37, v0.6.x a la v0.6.39, v0.7.x a la v0.7.62, y v0.8.x anterior a v0.8.15, permite a atacantes ejecutar código de su elección a través de peticiones HTTP manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.1.0",
            "versionEndExcluding" : "0.5.38",
            "matchCriteriaId" : "F0DE2A3E-F210-4B55-900A-13C309891E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.6.0",
            "versionEndExcluding" : "0.6.39",
            "matchCriteriaId" : "692B1E17-4FB8-484E-85D2-4E90641268F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.7.0",
            "versionEndExcluding" : "0.7.62",
            "matchCriteriaId" : "587F3642-4CB9-4D61-A5C9-55D7D172D96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.8.0",
            "versionEndExcluding" : "0.8.15",
            "matchCriteriaId" : "93F18982-44F0-4A93-9A6A-D857E1577A5B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E8A89-7A16-411F-9D31-676313BB7244"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB5EDB-520B-4DEF-B06E-65CA13152824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44669D7-6C1E-4844-B78A-73E253A7CC17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nginx.net/CHANGES",
        "source" : "cret@cert.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://nginx.net/CHANGES-0.5",
        "source" : "cret@cert.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://nginx.net/CHANGES-0.6",
        "source" : "cret@cert.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://nginx.net/CHANGES-0.7",
        "source" : "cret@cert.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://sysoev.ru/nginx/patch.180065.txt",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1884",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/180065",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00428.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00442.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00449.html",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nginx.net/CHANGES",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://nginx.net/CHANGES-0.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://nginx.net/CHANGES-0.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://nginx.net/CHANGES-0.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://sysoev.ru/nginx/patch.180065.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/180065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00428.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00442.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00449.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2903",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-09-15T22:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddp\"N\" device is not found, allows remote attackers to cause a denial of service (memory consumption) via IP-DDP datagrams."
      }, {
        "lang" : "es",
        "value" : "Fuga de memoria en el subsistema appletalk en el Kernel de Linux v2.4.x hasta v2.4.37.6 y v2.6.x hasta v2.6.31, cuando los módulos appletalk y ipddp están cargados pero el dispositivo ipddp\"N\" no se encuentra, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de datagramas IP-DDP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndIncluding" : "2.4.37.6",
            "matchCriteriaId" : "6B3A0E29-6F2B-452D-8396-A3C52159F026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.0",
            "versionEndIncluding" : "2.6.31",
            "matchCriteriaId" : "58224BF0-332E-4C2D-84ED-F40B8A6EBA08"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E135846-8959-4D7E-A8E6-07F0EC15F010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0623AA-88D4-4E53-AD50-C9AF8E0B0247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "513797E6-FCE6-4E84-9B66-202541F9601E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "1E496249-23A8-42FC-A109-634A54B5600F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD2D897-E321-4CED-92E0-11A98B52053C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "25CBACD3-AFB7-410D-927F-0C1FF477D396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BEE9CB-F0AF-44B1-B454-1AE2F04D7299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB8A616-865B-4E70-BA2E-BE5F0BA7A351"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/davem/net-next-2.6.git%3Ba=commit%3Bh=ffcfb8db540ff879c2a85bf7e404954281443414",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36707",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37909",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:329",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/14/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/14/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/17/11",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36379",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=522331",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/davem/net-next-2.6.git%3Ba=commit%3Bh=ffcfb8db540ff879c2a85bf7e404954281443414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/14/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/14/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/17/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=522331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue. Please see http://kbase.redhat.com/faq/docs/DOC-19077\n\nThis issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 and 5, as the affected driver is not enabled in these kernels. The affected driver is available in Red Hat Enterprise MRG. It is also available in Red Hat Enterprise Linux 3, but only if the kernel-unsupported package is installed. Future kernel updates in Red Hat Enterprise Linux 3 and Red Hat Enterprise MRG will address this issue.",
        "lastModified" : "2009-09-17T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T22:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "weblogin/login.fcgi (aka the WebLogin login script) in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history."
      }, {
        "lang" : "es",
        "value" : "weblogin/login.fcgi (alias el script de conexión WebLogin) en WebAuth de la Universidad de Stanford v3.5.5, v3.6.0 y v3.6.1 coloca contraseñas en en las URL en determinadas circunstancias que implique una conversión de una solicitud POST a una petición GET, lo cual permite a atacantes dependiendo del contexto descubrir contraseñas mediante la lectura de (1) registros de acceso al servidor web, (2) registros Referer del servidor web, o (3) el historial del navegador."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanford:webauth:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97D7A1DC-4604-487F-8016-C3C0A27D1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanford:webauth:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64D291D-898C-40E2-9E03-14EED5D7A6B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanford:webauth:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "464011F9-EA17-4000-92CB-CE303026D856"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36640",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://webauth.stanford.edu/security/2009-09-10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://webauth.stanford.edu/security/2009-09-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T22:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Bug.search WebService function in Bugzilla 3.3.2 through 3.4.1, and 3.5, allows remote attackers to execute arbitrary SQL commands via unspecified parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la función Bug.search de WebService en Bugzilla v3.3.2 hasta la v3.4.1 y v3.5, permite a atacantes remotos ejecutar comandos SQL a través de parámetros no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF288A74-070E-4EB4-BB92-7D4D41635DD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8B31F0-6FCC-4258-865B-B65ECBFAF252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A0CCF96-777F-4CEE-BC04-2974663CF5E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A71919-DC70-4AE2-9D16-76A177DAE331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA43E47B-F474-4F5B-A91B-9AF99359FE5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "850ADB66-21F2-49CB-B105-BDA16A286CFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36718",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugzilla.org/security/3.0.8/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36371",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=515191",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugzilla.org/security/3.0.8/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=515191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T22:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Bug.create WebService function in Bugzilla 2.23.4 through 3.0.8, 3.1.1 through 3.2.4, and 3.3.1 through 3.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la función de WebService Bug.create en Bugzilla v2.23.4 hasta la v3.0.8, v3.1.1 a v3.2.4, y v3.3.1 hasta la v3.4.1 permite a atacantes remotos ejecutar comandos SQL a través de parámetros no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4880D54-CA42-4CCA-B01E-2C125002BF5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9F54A-15A7-4899-B695-D9D8B96C4A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BD56D9C0-38C6-4679-8104-1A0B88B71C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF2DF96F-E45E-45AF-85E5-E939F923EC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C6713F-01ED-4AE9-AE42-89926067E6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB5010D-37A3-4B6E-92B6-6F41A3708851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB09719-122F-4D25-B680-18029D5D9DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF585D92-9FAF-4858-A956-68AF77227333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA67823-C9D9-4C5B-A4ED-669E6F1851C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0F7531-A660-4604-80BD-15B01E2916BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585F05F2-B294-4218-9209-C487B4D2994B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3246890-8D66-474F-AC9C-BC556426467D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7090332F-4CC2-4ADD-AEEC-75238BCA55CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F960BE59-05B1-4438-A854-279612E13A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F248EA4D-1A39-40FD-8D3C-9701D36FD6B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "170EB43B-9488-4E25-9401-B84DE838247B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B1ED7682-A315-4F92-9F9F-38290BCC058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B5A433-526F-436E-9FCD-B71E661180FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EDC5BC-AD4B-4E67-B79C-F44292307AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEC62B7-2CAA-4A0D-A9B2-B4A6B105A6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4A7A67-1355-4648-B8C9-3231BED96547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2962084-F778-4574-8105-8C5A260CCBD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF288A74-070E-4EB4-BB92-7D4D41635DD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8B31F0-6FCC-4258-865B-B65ECBFAF252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A0CCF96-777F-4CEE-BC04-2974663CF5E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A71919-DC70-4AE2-9D16-76A177DAE331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "780896D3-3B49-486F-A136-D3D175C00A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA43E47B-F474-4F5B-A91B-9AF99359FE5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36718",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugzilla.org/security/3.0.8/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36373",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=515191",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugzilla.org/security/3.0.8/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=515191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T22:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "token.cgi in Bugzilla 3.4rc1 through 3.4.1 places a password in a URL at the beginning of a login session that occurs immediately after a password reset, which allows context-dependent attackers to discover passwords by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history."
      }, {
        "lang" : "es",
        "value" : "token.cgi en Bugzilla v3.4rc1 hasta v3.4.1 coloca una contraseña en una URL al comienzo del inicio de sesión que ocurre inmediatamente después del restablecimiento de la contraseña, lo que permite dependiendo del contexto a atacantes descubrir contraseñas leyendo (1) logs de acceso del servidor web, (2) logs Referer del servidor web, o (3) el historial del navegador."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A71919-DC70-4AE2-9D16-76A177DAE331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "780896D3-3B49-486F-A136-D3D175C00A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA43E47B-F474-4F5B-A91B-9AF99359FE5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36718",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugzilla.org/security/3.0.8/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36372",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=508189",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugzilla.org/security/3.0.8/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=508189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-15T23:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Media Player Classic 6.4.9 allows user-assisted remote attackers to cause a denial of service (application crash) via a MIDI file (.mid) with a malformed header, which triggers a buffer overflow, a different vulnerability than CVE-2007-4940."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en Media Player Classic v6.4.9 permite a atacantes remotos asistidos por usuarios provocar una denegación de servicio (cuelgue de aplicación) a través de un archivo MIDI (.mid) con un encabezado mal formado, que provoca un desbordamiento de búfer, una vulnerabilidad diferente que CVE-2007-4940."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_schultz:media_player_classic:6.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15C545CC-97AF-4F01-AB08-8AF3A63F30EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36333",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T17:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in ULoKI PHP Forum 2.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en search.php en ULoKI PHP Forum v2.1 permite a atacantes remotos ejecutar código web o HTML de su elección a través del parámetro term."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uloki:uloki_php_forum:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "028193DB-AA18-43BD-97DC-45002AA45372"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57176",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/uloki-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36407",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/uloki-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T17:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in store.php in AJ Auction Pro OOPD 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en store.php en AJ Auction Pro OOPD v2.x permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ajsquare:aj_auction_pro-oopd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCF81AC-EF99-454A-920A-1B9AB96160F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/ajauctionoopd2-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36369",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/ajauctionoopd2-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T17:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Stiva Forum 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) demo.php and (2) forum.php, and the PATH_INFO to (3) include_forum.php."
      }, {
        "lang" : "es",
        "value" : "Múltiple vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Stiva Forum v1.0 permite a atacantes remotos ejecutar código web y HTML de su elección a través del parámetro id en (1) demo.php y(2) forum.php, y PATH_INFO en (3) include_forum.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stivaforum:stiva_forum:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "827F106F-A5F3-4F2A-9CCD-0EC19FF9F2DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/stivaforum-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36409",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/57178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/stivaforum-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T17:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in main.php in CBAuthority allows remote attackers to execute arbitrary SQL commands via the id parameter in a view_product action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en CBAuthority permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción view_product."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cbauthority:cbauthority:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2712D77-EEC9-4490-A0BB-1A520F23E9AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/cbauthority-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36345",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/cbauthority-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T17:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the ImageCache module 5.x before 5.x-2.5 and 6.x before 6.x-2.0-beta10, a module for Drupal, allow remote authenticated users, with \"administer imagecache\" permissions, to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Multiple vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el módulo ImageCache v5.x anterior v5.x-2.5 y v6.x anterior v6.x-2.0-beta10, un módulo para Drupal, permite a usuarios autentificados remotamente, con permisos \"administer imagecache\", inyectar código web y HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E982E5E-D0A8-4A85-9929-BC18D987A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A7BDD21-2283-4985-B003-4F78FBA0099E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0735BB2F-3945-4211-995E-CD8AD6CFCDE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48AF9DF0-2EF1-4E05-9D36-2CC1E8063ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F5151F-8721-48C2-AFEE-0764DAEB82CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9958DAE2-AA70-4289-8422-800C0B3FC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249681B4-A22C-4B1B-B660-1524331E379E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69FBB8C-C8CE-42C6-9EB8-6AD42456A8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "9A345EBF-8312-48B4-9360-9A27B8AD992E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F451BE63-D858-48D9-934D-9F5552C5F8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3329BA-B4B8-4EF1-8EDC-F28BF1AC2483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "156B4E1E-BC71-4A82-89C7-8CC0894F495B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "204EB521-0F5F-4668-828E-6572C93DDB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA39C0A-DAC6-42CD-AF77-EEC3A9FFD569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6E5797-038D-4D34-8725-5D597046A031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D678996-D8C7-44DD-9D3B-C80C2DA9C801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74201E80-46E1-4C25-8265-05DBB05729F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403B89A6-005B-4513-A28B-DF7AEA617A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E5509B-FAC1-4C06-A619-0980BFCF0904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-1.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD07C419-D7A7-4767-A824-BCFD0CDB40D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-1.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0CD381-AE3C-4809-88B9-54719D0E064A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A24AC64-B2EE-41A4-9FC9-3EE895044881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "68583881-F8A6-426F-A370-25C5089C74FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "205FF3A1-65C7-441C-A1EF-B7F01C9AAB0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB6455A-7D4B-41C7-9AFD-DFF3F5341F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAD2CBB-F518-40EB-8543-92E7CAF2679B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "A112BBAE-2500-47B8-907F-4ED4E9C3D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "E87457B0-1E46-42AE-90AD-733A23851CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "3B457D48-4F6D-4EE5-BC0C-59C4124CE9CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta9:*:*:*:*:*:*",
            "matchCriteriaId" : "80F548C6-1B06-4B0A-8835-BCE38391C45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2631AA34-AC24-4BF5-9682-D2CC0F32D4DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/554084",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36412",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/554084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T17:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ImageCache module 5.x before 5.x-2.5 and 6.x before 6.x-2.0-beta10, a module for Drupal, when the private file system is used, does not properly perform access control for derivative images, which allows remote attackers to view arbitrary images via a request that specifies an image's filename."
      }, {
        "lang" : "es",
        "value" : "El módulo ImageCache v5.x anterior v5.x-2.5 y v6.x anterior v6.x-2.0-beta10, un modulo para Drupal, cuando el sistema de archivos privados es usado, no realiza un control de acceso para imágenes derivadas, lo que permite a atacantes remotos ver imágenes a su elección a través de peticiones que especifican el nombre de la imagen."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E982E5E-D0A8-4A85-9929-BC18D987A24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A7BDD21-2283-4985-B003-4F78FBA0099E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0735BB2F-3945-4211-995E-CD8AD6CFCDE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48AF9DF0-2EF1-4E05-9D36-2CC1E8063ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F5151F-8721-48C2-AFEE-0764DAEB82CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9958DAE2-AA70-4289-8422-800C0B3FC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249681B4-A22C-4B1B-B660-1524331E379E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69FBB8C-C8CE-42C6-9EB8-6AD42456A8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-1.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "9A345EBF-8312-48B4-9360-9A27B8AD992E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F451BE63-D858-48D9-934D-9F5552C5F8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3329BA-B4B8-4EF1-8EDC-F28BF1AC2483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "156B4E1E-BC71-4A82-89C7-8CC0894F495B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "204EB521-0F5F-4668-828E-6572C93DDB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA39C0A-DAC6-42CD-AF77-EEC3A9FFD569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6E5797-038D-4D34-8725-5D597046A031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D678996-D8C7-44DD-9D3B-C80C2DA9C801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74201E80-46E1-4C25-8265-05DBB05729F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403B89A6-005B-4513-A28B-DF7AEA617A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:5.x-2.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E5509B-FAC1-4C06-A619-0980BFCF0904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-1.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD07C419-D7A7-4767-A824-BCFD0CDB40D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-1.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0CD381-AE3C-4809-88B9-54719D0E064A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A24AC64-B2EE-41A4-9FC9-3EE895044881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "68583881-F8A6-426F-A370-25C5089C74FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "205FF3A1-65C7-441C-A1EF-B7F01C9AAB0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB6455A-7D4B-41C7-9AFD-DFF3F5341F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAD2CBB-F518-40EB-8543-92E7CAF2679B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "A112BBAE-2500-47B8-907F-4ED4E9C3D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "E87457B0-1E46-42AE-90AD-733A23851CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "3B457D48-4F6D-4EE5-BC0C-59C4124CE9CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.0:beta9:*:*:*:*:*:*",
            "matchCriteriaId" : "80F548C6-1B06-4B0A-8835-BCE38391C45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drewish:imagecache:6.x-2.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2631AA34-AC24-4BF5-9682-D2CC0F32D4DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/505904",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://drupal.org/node/554084",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/554086",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/554090",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36412",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/505904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://drupal.org/node/554084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/554086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/554090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T17:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in phpfreeBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to permalink.php and (2) year parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en phpfreeBB v1.0 permite a atacantes remotos ejecutar comandos SQL a través de (1) parámetro id en permalink.php y (2) parámetro year en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prakashatma_mishra:phpfreebb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314F0615-4B9D-4F08-A1FD-312CB67F767F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/phpfreebb-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/phpfreebb-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T17:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in remove.php in PHP eMail Manager 3.3.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en remove.php en PHP eMail Manager v3.3.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raizlabs:php_email_manager:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A4B219-21F0-403D-A290-ABB47C9C2926"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/phpem-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36346",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/phpem-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T17:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.8 and 6.x before 6.x-1.8, a module for Drupal, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en el módulo Print (también conocido como Printer, versión para e-mail y PDF) v5.x anterior a v5.x-4.8 y v6.x anterior a v6.x-1.8 para Drupal, permite a usuarios autenticados inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2893881B-C60B-4786-9C96-642840809B9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7F4CFF-4DE4-44CC-A1AF-8A1AEB8E6A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1CFCAA-B1C3-4786-8DDA-692F5469A559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2301487B-942B-4F0B-9E45-05AC26902DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A355B60A-196D-450D-9234-509C2977575A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3504933-2428-4F1B-B9A1-4883CD7246FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E950A2A1-2A92-4A26-88CE-1806BE758B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751FE639-78A3-4B8A-B5BC-478C4C9E7411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABBDB896-8B17-4A6B-A36D-57A39ED12C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-3.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C15189-5BA1-413F-9B61-D8F41DCF4686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929EF949-E619-4663-8E5A-32DC1FB759F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46041FE-A508-42CE-A944-08A2590DFEB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026E16DA-B5ED-4295-8A90-91C4039BB4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "570C4DBC-86CE-42AF-81D6-9D8A4C0E9233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871017DE-E12E-495D-A208-07EE6CCDF4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F9EAB0F-606A-4D87-A704-56A7A54CAA9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBBC7558-7A67-41C0-BDDC-ED32645F387B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "605EC83A-E689-4D45-AB0E-1B8B3A7D9CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:5.x-4.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A17598-3ED7-4B2A-B4F8-0B7425CFF6E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C1B4CE-7783-4A6F-9FED-82B3A70DA5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:6.x-1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B841C77C-FEF8-4253-9887-9CE4942431DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:6.x-1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C9FE51-FD7F-472F-8C44-EA20578244CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:6.x-1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D11FD1BF-ABD6-4D38-96C8-2E32CBD9473D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:6.x-1.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5F787E18-3790-4F33-928F-59E2398FB76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:6.x-1.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "A156B352-D91A-4408-8240-88EAACA55B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:6.x-1.0:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC82E86-F2AB-4FF8-98C5-1A35D467C358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:6.x-1.0:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "EC8E8F4D-D9FF-4A9D-9861-E1C5A9C6DBCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938C1B6D-7449-49C9-853F-2AD939E784B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15BA3E26-5B28-4DFD-8B6B-24119139B274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:6.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD23BBD1-7550-4D9B-9A88-12B2E5F20189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:6.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FD0BC0-AEC5-4DD5-986A-F6B0CADD9368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:6.x-1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A819F021-0530-4AE3-802F-E73C6669D607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:6.x-1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8453CB-2E8E-4108-81C2-A7B2B61C44AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:6.x-1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B1C895-6087-4D83-9347-760CCEB1E41F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joao_ventura:print:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290B7085-8CC9-494E-85F7-28BE1A32E975"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/554326",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/554328",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/554448",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36395",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/57192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/554326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/554328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/554448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/57192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T17:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the options[style_dir] parameter to the default URI."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en VivaPrograms Infinity Script v2.x.x, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro options[style_dir] a la URI por defecto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dimofinf:infinity_script:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBCA4B4-962A-4EFF-AD2E-1AFD4525144F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/infinity-disclose.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/infinity-disclose.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T17:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en VivaPrograms Infinity Script v2.x.x, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del campo \"username\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dimofinf:infinity_script:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBCA4B4-962A-4EFF-AD2E-1AFD4525144F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/infinity-disclose.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/infinity-disclose.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T17:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in broid 1.0 Beta 3a allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .mp3 file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en broid 1.0 Beta 3a, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente la ejecución de código de su elección a través de una cadena larga en un archivo .mp3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broid:broid:1.0:beta_3a:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5EF20A-9FE4-4D77-B551-CC95E9FFFCD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/broid-overflow.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/broid-overflow.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T17:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project (.psh) file, related to the (1) cell[n].images[m].image and (2) cell[n].sound.file fields."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en pila en Photodex ProShow Gold v4.0.2549 permite a atacantes remotos ejecutar código de su elección a través de ficheros crafted Slideshow project (.psh), referidos a los campos (1) cell[n].images[m].image y (2) cell[n].sound.file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photodex:proshow_gold:4.0.2549:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF768F11-CBAE-433F-9A7A-DBA277EC05CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.bkis.com/?p=737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57226",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36357",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505957/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.bkis.com/?p=737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/57226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505957/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T19:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allows remote attackers to execute arbitrary SQL commands via the parent parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en componentes IXXO Cart Standalone anterior v3.9.6.1, y IXXO Cart para Joomla! v1.0.x, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro parent."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-shop-system:ixxo_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F37976DD-34B9-4F70-8EA3-BB36212200FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9709F901-EDD2-4369-89F0-8AF3A63655E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC268591-FDFD-42A2-887F-4F1639CAB73C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89946AA1-0694-44A5-962E-ED36B4BFCE9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6024ABB5-0CB7-4874-8758-CC6FBF3073D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C21464-3FD4-4528-A512-7C0DE70E331C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663EE640-2BE7-42FC-B848-7379C6DADA60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B64E85-CA80-46A6-9E62-B1F28CBED5CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4007FCB-589A-413D-8009-64404926CA7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B0B037-5E62-4069-AF35-F05A777E05D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314E12E1-107E-4AB3-8092-9F6C2C5FA11B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65860314-7B34-46B4-BA29-1A8EA715BF00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A235591C-1860-4877-8B61-7390EE359E12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D9FB89-D522-410F-8E68-763E9931E955"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E9C4B0-5B4B-4103-AA4E-419E08C22306"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2017D307-89B3-4D94-A266-C7D8D45960A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "302D47E2-CFA8-438C-82DB-335319454448"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "94B01AD8-2B71-4A6A-8932-E61B0FE54246"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1058A361-4B10-4D7C-B789-64A38FE7E201"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D548B3C9-483F-492C-A6BB-694B7217FEE8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9813E813-2983-4471-9E56-6F254810A66B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F4F9E7-BA44-4235-A246-DB6C432C3873"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "495BD724-45BE-4214-B120-3A83BD9AD11B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCDBF4D-A797-4828-A084-8C775FA94BDF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1B7CF2-B717-4F37-A923-0E188FF3C47F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3333C204-A022-4B53-B61F-3C5601F21FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2752717-AA95-4398-8091-24FD5925C4F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B3B3FB-E67D-4D9A-BE01-855FA2545772"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29D3E39-7B43-4D19-B39F-2EB56E30F737"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F155C3B-AAF5-4393-A964-E655113D84DE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DA8EEE-F091-49D0-9F9D-4C83574B6A36"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "731CC868-70FC-44A0-8CC2-D0A4AC5CE094"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.5rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFF92A2-FEBD-49F6-8C41-3DF2D9AB56C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04931295-5046-4B39-ABA7-CFBC47500F5A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-shop-system:ixxo_cart:*:*:standalone:*:*:*:*:*",
            "versionEndIncluding" : "3.9.6.0",
            "matchCriteriaId" : "FD489728-7E9F-43DE-B179-B97741C2109B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36009",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.davidsopas.com/2009/07/25/ixxo-cart-standalone-and-joomla-component-sql-injection/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505266/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35810",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.davidsopas.com/2009/07/25/ixxo-cart-standalone-and-joomla-component-sql-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505266/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T19:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in iWiccle 1.01, when magic_quotes_gpc is disabled, allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the show parameter to the admin module, reachable through index.php; or (2) the module parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de salto de directorio en iWiccle v.1.01, cuando magic_quotes_gpc es desactivado, permite a atacantes remotos leer archivos a su elección  a través de un ... (punto a punto) en (1)el parámetro show en el módulo admin, accesible a través de index.php; o (2) parámetro module en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wiccle:iwiccle:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B91FDDC-0572-4A6F-98BA-4E559155FAC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36015",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T19:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers to execute arbitrary SQL commands via the member_id parameter in an edit_user action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el módulo de administración en iWiccle v1.01 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro member_id en una acción edit_user en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wiccle:iwiccle:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B91FDDC-0572-4A6F-98BA-4E559155FAC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T19:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in control/login.php in AR Web Content Manager (AWCM) 2.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en control/login.php en AR Web Content Manager (AWCM) v2.1, cuando magic_quotes_gpc es disactivado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the-ghost:ar_web_content_manager:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587C48D9-A6C5-41A5-8180-5C3747286698"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35955",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T19:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in a.php in AR Web Content Manager (AWCM) 2.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the a parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en a.php en AR Web Content Manager (AWCM) v2.1, cuando magic_quotes_gpc es desactivado, permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de ... (punto a punto) en el parámetro a."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the-ghost:ar_web_content_manager:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587C48D9-A6C5-41A5-8180-5C3747286698"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56336",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35955",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T19:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in cp_html2txt.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en All In One Control Panel (AIOCP) v1.4.001 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tecnick:aiocp:1.4.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7DB67-3FCE-4EF7-81EA-A90FE4B61B21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/505250/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35811",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505250/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T19:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Audio Lib Player (ALP) allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Audio Lib Player (ALP) permite a atacantes remotos ejecutar código de su elección a través de la URL larga en un archivo de reproducción de lista .m3u"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basicunivers.free.fr:audio_lib_player:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "712FF30A-7B4A-45B5-8880-40F07CA4B1F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/alp-overflow.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35867",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1963",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/alp-overflow.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T19:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in FreeWebScriptz Honest Traffic (FWSHT) 1.x allows remote attackers to inject arbitrary web script or HTML via the msg parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en FreeWebScriptz Honest Traffic (FWSHT) v1.x permite a atacantes remotos inyectar código web o HTML de su elección a través del parámetro msg."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freewebscriptz:honest_traffic:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61269ED6-9E39-49F5-B295-6DDE355536CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/honesttraffic-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35887",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security-shell.ws/showthread.php?t=38085",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/honesttraffic-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security-shell.ws/showthread.php?t=38085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T19:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ppc-add-keywords.php in Inout Adserver allows remote authenticated users to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en ppc-add-keywords.php en Inout Adserver permite a usuarios autentificados remotamente ejecutar comandos SQL de su elección a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inoutscripts:inout_adserver:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8C0CFC-27BB-42A3-B89B-5C859B677777"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35975",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2028",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T19:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Super Mod System, when using the 68 Classifieds 3.1 Core System, allows remote attackers to execute arbitrary SQL commands via the s parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Super Mod System, cuando es usado 68 Classifieds v3.1 Core System, permite a atacantes remotos ejecutar comandos SQL a través del parámetro s."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:68classifieds:68_classifieds:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F2A809-30D7-4651-AC58-96D4B66EA5D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:classified-software:super_mod_system:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D206C9-B5A5-4FCF-B73B-BE0DD31D8DEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35973",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2027",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T19:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network Classifieds, allow remote attackers to inject arbitrary web script or HTML via (1) the page parameter in a browse action to index.php or (2) the addr parameter to gmap.php.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Multiple vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en AlmondSoft Almond Classifieds Wap and Pro, y probablemente en Almond Affiliate Network Classifieds permite a atacantes remotos ejecutar código web o HTML de su elección a través del (1)parámetro pthe page en una acción de busqueda en index.php o (2) el parámetro addr  en gmap.php. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:almondsoft:almond_classifieds:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "E89433A5-C49A-4A53-90CB-096CFF091379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:almondsoft:almond_classifieds:*:*:wap:*:*:*:*:*",
            "matchCriteriaId" : "19CC3E34-2ED7-4766-B3E8-E871246A97BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/almondclassifieds-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36003",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35816",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/almondclassifieds-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T19:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to execute arbitrary SQL commands via the replid parameter in a manw_repl add_form action.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en AlmondSoft Almond Classifieds Ads Enterprise y Almond Affiliate Network Classifieds permite a atacantes remotos ejecutar comandos SQL de su elección  a través del parámetro replid en una acción manw_repl add_form. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:almondsoft:affiliate_network_classifieds:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F745A40-D1C4-49FC-B7BA-A813B3B6808C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:almondsoft:almond_classifieds:*:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "79AF613E-4185-488B-85AB-BE039DA1669E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/almondclassifiedsads-bsqlxss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36003",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35816",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/almondclassifiedsads-bsqlxss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-16T19:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to inject arbitrary web script or HTML via the city parameter in a search action.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en AlmondSoft Almond Classifieds Ads Enterprise y Almond Affiliate Network Classifieds permite a atacantes remotos inyectar código web y HTML de su elección a través del parámetro city en una acción de busqueda. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:almondsoft:affiliate_network_classifieds:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F745A40-D1C4-49FC-B7BA-A813B3B6808C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:almondsoft:almond_classifieds:*:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "79AF613E-4185-488B-85AB-BE039DA1669E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/almondclassifiedsads-bsqlxss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36003",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35816",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/almondclassifiedsads-bsqlxss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-17T10:30:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by \"re-LOAD-ing\" libraries from a certain plugins directory."
      }, {
        "lang" : "es",
        "value" : "El componente core server de PostgreSQL desde v8.4 anteriores a v8.4.1, desde v8.3 anteriores a v8.3.8, y desde v8.2 anteriores a v8.2.14  permite a usuarios remotos autenticados producir una denegación de servicio (caída del backend) mediante \"recarga\" de librerías desde cierto directorio de plugins."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7213327F-6909-43A7-952E-11600C28D4E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10EF0EA6-C8B6-40A7-A3AE-8639CA94D5C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F645F3-9767-4FD8-94EB-1096DF24E6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C342A823-EF6F-4557-9F9E-D8893EA4C2BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85A443F-0802-412F-9AEE-3525311C93D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06253BA8-7F1E-4C79-9B2E-197307A627F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A213AB8-A5FE-4062-B895-2FC4B19F60A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3F083E-59A8-41B1-826F-2CA39BD425C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE49E2D5-8EAC-49C7-B704-E626FBE7EC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5059B2F-B588-463E-8E96-BC9DA129C12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C919AF97-9713-44F8-B742-89C438DB0B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400BBC62-5D03-465B-A864-9CD479B963F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8C96F7-7F85-4E47-A05F-15E3C70AF583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C236CF1-72C0-4C3D-AE04-B67E3F18EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A705DF-3654-427F-8B11-62DB0B6C9813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AD5D33-86F4-4BFF-BA84-02AA1347BEEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02FDCF30-D0F7-48AA-9633-9CC060495F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "788975F6-B3F1-4C21-B963-6BA59F14B71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6713D96-338B-4467-9F05-3153997F62E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01EB1A77-92AD-47FB-8290-D05C9B6C19C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74857259-30C7-422D-A24D-BE1E33F09466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD80066B-787E-496B-88FD-F0AE291468C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F30CA60-0A82-45CD-8044-CE245393593D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134124585221119&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36660",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36727",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.postgresql.org/docs/8.3/static/release-8-3-8.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.postgresql.org/support/security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/509917/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-834-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us.debian.org/security/2009/dsa-1900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=522092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134124585221119&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.postgresql.org/docs/8.3/static/release-8-3-8.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.postgresql.org/support/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/509917/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-834-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2009/dsa-1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=522092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of PostgreSQL as shipped with Red Hat Enterprise Linux 3, 4, or 5.\n\nIn PostgreSQL versions prior to 8.2, only database administrator was able to LOAD additional plugins and use it to cause server crash.  However, this does not bypass trust boundary, so its not a security flaw for older PostgreSQL versions.  Additionally, no plugins are shipped in Red Hat PostgreSQL packages by default.\n\nThis issue was addressed in Red Hat Application Stack v2 via https://rhn.redhat.com/errata/RHSA-2009-1461.html .",
        "lastModified" : "2009-09-24T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-17T10:30:00.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges.  NOTE: this is due to an incomplete fix for CVE-2007-6600."
      }, {
        "lang" : "es",
        "value" : "El componente core server en PostgreSQL desde v8.4 anteriores a v8.4.1, desde v8.3 anteriores a v8.3.8, desde v8.2 anteriores a v8.2.14, desde v8.1 anteriores a v8.1.18, desde v8.0 anteriores a v8.0.22, y v7.4 anteriores a v7.4.26 no maneja adecuadamente los privilegios para las operaciones (1)BORRADO DE ROL (2)BORRADO DE AUTORIZACIÓN DE SESIÓN, lo que permite a usuarios remotos autenticados ganar privilegios. NOTA: Esto es debido a un arreglo incompleto de CVE-2007-6600."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE2567C-BF48-4255-9E56-590A6F9DD932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8DDD98-9A2D-402D-9172-F3C4C4C97FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20C8302B-631A-4DF7-839B-C6F3CC39E000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB318EB9-1B49-452A-92CF-89D9BA990AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5913A53B-7B72-4CBD-ADAE-318333EB8B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815E58C0-327D-4F14-B496-05FC8179627E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF2D056-5120-4F98-8343-4EC31F962CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516E0E86-3D8A-43F9-9DD5-865F5C889FC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7A9D3C-4BB6-4974-BF96-6E6728196F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486EDE1B-37E0-4DDF-BFC9-C8C8945D5E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC7F18-B227-4C46-9A33-FB34DDE456CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB903F-0C89-4E65-857E-553CF9C192E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6BF8B1E-68F7-4F27-AD1F-FA02B256BDAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0DEB63-CA70-44C1-9491-E0790D1A8E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA8E73E5-BA41-4FA2-8457-803A97FB00C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9B64CA-778F-405D-A441-34599246A3F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4975D8ED-7DCB-430F-98E1-DB165D6DA7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCBF8CDE-5E75-4DF8-AE1A-B7377953917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC4A04B-738C-4018-BB2F-FBEC8746200C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A2824A-A43F-436B-B9DA-B7E283A00426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBBAF0F1-7A70-41DC-89A7-2EF9851E4FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A12EC07-1938-41BF-BCFC-C269668F1EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D7CE0D-510C-46BB-8896-42DD84F57017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA5858F-7DFF-460D-B862-83DD636D0A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4394564D-131D-41C8-AE3A-BFF44779F27B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CCC06DB-1C93-4DE5-AEDC-03E532DA89F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94222D76-82BE-4FFB-BE4B-5DBAF3080D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D1232E-4D0A-4BDC-99F6-25AEE014E9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "105E9F52-D17E-4A0B-9C46-FD32A930B1E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE2055D-AAA4-4A6A-918F-349A9749AF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C12409B2-161B-4F78-B7AD-3CF69DDCC574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2F1DA4-6625-469D-988B-5457B68851A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "870F4348-6001-4C2F-A547-61964074E7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E26D52-D95A-4547-BE6E-4F142F54A624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAB2D1D-BE61-4D7C-B305-58B4F4126620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A5F8D8B-34C5-4EBC-BB20-4D11191238B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E260F1F9-0068-4289-A8E8-C30220C2E1F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE16023-9A5E-46D5-B597-E6885C224786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D64D74-9645-4CB7-B710-4FC26FB65B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF2794E-6B48-496B-B6CA-CDC7FC2160CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB12063-F487-4067-A7A5-4482E19D8D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51AE5B72-DDC5-4207-B467-A9583F3AC781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99398182-C98C-4B16-9DBA-B1980BDFFA54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6FEC1DE-A2A5-4945-95B8-75FDC9ED3B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264AB44D-D014-4734-B538-09E5834EC30B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D5DD1E6-E190-4D75-9D27-5EFB2544B158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CD7F8CA-09B3-4038-B8B0-2D62A77F2478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64815C3D-1A1A-4525-9BCD-D89BAEACC950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF590F2-899F-42E1-8A57-6F514C94CE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEEC35A2-B17C-46EC-8697-9E03568339BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00562C18-DD81-4B09-AF93-739AF8757A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B52D093-7867-4FE8-B055-D8190103A1E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1A06EE-26BD-4CDA-AEB9-01124FC37E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF855730-C61C-4FDC-96CB-57775A903421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93296E1-AEA2-443E-B9AA-D70535DDD093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992C3EC0-4C12-4FB0-8844-9EFB91DA95E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E3EBF1D-D5BD-4A22-B76A-2BAB21534E70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02DC4E8A-A728-4734-B67A-C58C37DA90C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59B0E32-9E71-4E41-BBAF-7A20008E43E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA6511DE-AF52-4953-8394-37D24A732538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B93DC5-F632-47A5-9C58-52429B034D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011C676-47D3-4D78-9C58-749AF6C7DBDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD5BE40-CF55-4C0E-BD89-5CC7DF41F6BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1EE1C3-4472-4CE2-AB60-9535C1C4AF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B903334-2F67-4725-8277-6913E03BEFC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7213327F-6909-43A7-952E-11600C28D4E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10EF0EA6-C8B6-40A7-A3AE-8639CA94D5C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F645F3-9767-4FD8-94EB-1096DF24E6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C342A823-EF6F-4557-9F9E-D8893EA4C2BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85A443F-0802-412F-9AEE-3525311C93D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06253BA8-7F1E-4C79-9B2E-197307A627F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A213AB8-A5FE-4062-B895-2FC4B19F60A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3F083E-59A8-41B1-826F-2CA39BD425C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE49E2D5-8EAC-49C7-B704-E626FBE7EC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5059B2F-B588-463E-8E96-BC9DA129C12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C919AF97-9713-44F8-B742-89C438DB0B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400BBC62-5D03-465B-A864-9CD479B963F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8C96F7-7F85-4E47-A05F-15E3C70AF583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C236CF1-72C0-4C3D-AE04-B67E3F18EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AD5D33-86F4-4BFF-BA84-02AA1347BEEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02FDCF30-D0F7-48AA-9633-9CC060495F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "788975F6-B3F1-4C21-B963-6BA59F14B71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6713D96-338B-4467-9F05-3153997F62E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01EB1A77-92AD-47FB-8290-D05C9B6C19C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74857259-30C7-422D-A24D-BE1E33F09466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD80066B-787E-496B-88FD-F0AE291468C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F30CA60-0A82-45CD-8044-CE245393593D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.postgresql.org/pgsql-www/2009-09/msg00024.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134124585221119&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36660",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36695",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36727",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.postgresql.org/docs/8.3/static/release-8-3-8.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.postgresql.org/support/security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/509917/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-834-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us.debian.org/security/2009/dsa-1900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2602",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=522085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.postgresql.org/pgsql-www/2009-09/msg00024.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134124585221119&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.postgresql.org/docs/8.3/static/release-8-3-8.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.postgresql.org/support/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/509917/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-834-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2009/dsa-1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=522085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-17T10:30:01.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password."
      }, {
        "lang" : "es",
        "value" : "El componente core server en PostgreSQL desde v8.3 anteriores a v8.3.8 y desde v8.2 anteriores a v8.2.14, cuando se utiliza la autenticación de LDAP con imposiciones anónimas, permite a atacantes remotos evitar la autenticación a través de una contraseña vacía."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2",
            "versionEndExcluding" : "8.2.14",
            "matchCriteriaId" : "8E2B520E-AB78-490D-87F0-1CEAB599D73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3",
            "versionEndExcluding" : "8.3.8",
            "matchCriteriaId" : "18915BE0-FFBE-4B74-B8F1-1E55DB6C06D3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3",
            "versionEndIncluding" : "11.1",
            "matchCriteriaId" : "FF141FBE-4CA5-4695-94A0-8BE1309D28CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise:10.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3B50EE-F432-40BE-B422-698955A6058D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1608E282-2E96-4447-848D-DBE915DB0EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD2D897-E321-4CED-92E0-11A98B52053C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB5EDB-520B-4DEF-B06E-65CA13152824"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134124585221119&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/36660",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36727",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36800",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36837",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.postgresql.org/docs/8.3/static/release-8-3-8.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.postgresql.org/support/security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/509917/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36314",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-834-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us.debian.org/security/2009/dsa-1900",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=522084",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134124585221119&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/36660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.postgresql.org/docs/8.3/static/release-8-3-8.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.postgresql.org/support/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/509917/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-834-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us.debian.org/security/2009/dsa-1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=522084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of PostgreSQL as shipped with Red Hat Enterprise Linux 3, 4, or 5, as they do not support LDAP authentication, which was introduced upstream in version 8.2.\n\nThis issue was addressed in Red Hat Application Stack v2 via https://rhn.redhat.com/errata/RHSA-2009-1461.html .",
        "lastModified" : "2009-09-24T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-17T10:30:01.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pam-auth-update for PAM, as used in Ubuntu 8.10 and 9.4, and Debian GNU/Linux, does not properly handle an \"empty selection\" for system authentication modules in certain rare configurations, which causes any attempt to be successful and allows remote attackers to bypass authentication."
      }, {
        "lang" : "es",
        "value" : "pam-auth-update para PAM, tal y como se utiliza Ubuntu v8.10 y v9.4, y Debian GNU/Linux,  no gestiona adecuadamente una \"selección vacía\" para los módulos de autenticacion del sistema en ciertas configuraciones poco frecuentes, lo que lleva a que cualquier intento de autenticación tenga exito lo que permite a atacantes remotos evitar este paso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519927",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/36620",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/08/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36306",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.net/bugs/410171",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/828-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/36620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/08/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.net/bugs/410171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/828-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-17T10:30:01.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filename in a directory that is checked by changetrack."
      }, {
        "lang" : "es",
        "value" : "changetrack v4.3 permite a usuarios locales ejecutar comandos arbitrarios a través de secuencias CRLF y metacaracteres de shell en un nombre de fichero en un directorio que es chequeado por changetrack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cameron_morland:changetrack:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22EC7BE-E511-428B-819F-366B2AD8F791"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/546791",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36756",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/16/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36420",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://bugs.debian.org/546791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/16/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-17T10:30:01.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the perf_copy_attr function in kernel/perf_counter.c in the Linux kernel 2.6.31-rc1 allows local users to cause a denial of service (crash) and execute arbitrary code via a \"big size data\" to the perf_counter_open system call."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la función perf_copy_attr en el archivo kernel/perf_counter.c en el kernel de Linux versión 2.6.31-rc1, permite a los usuarios locales causar una denegación de servicio (bloqueo) y ejecutar código arbitrario por medio de un \"big size data\" en la llamada del sistema perf_counter_open."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://article.gmane.org/gmane.linux.kernel/890654",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/16/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/17/13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://article.gmane.org/gmane.linux.kernel/890654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/16/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/17/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue only affected kernels version v2.6.31-rc1 and later. Therefore this issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG.",
        "lastModified" : "2009-09-21T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-17T10:30:01.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by forwarding an e-mail message to a large number of recipients, a different vulnerability than CVE-2009-2632."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en pila en el complemento -plugin- Sieve de Dovecot v1.0 anterior a v1.0.4 y v1.1 anterior a v1.1.7, como se deriva de Cyrus libsieve, permiten a atacantes dependientes del contexto provocar una denegación de servicio (caída) y puede que ejecutar código de su elección a través de una secuencia de comandos SIEVE, como se ha demostrado reenviando un mensaje de correo a un gran número de usuarios. Se trata de una vulnerabilidad diferente de CVE-2009-2632."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dovecot:dovecot:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4240BD98-3C31-42CE-AF8F-045DD4BFC084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dovecot:dovecot:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D7A4A82-6C8D-453E-ACC5-2C8BAC7804D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dovecot:dovecot:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C05ACA0-ED87-4DDF-94B6-8D25BE1790F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dovecot:dovecot:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A8C0C4A-F9DB-4BB7-BFC5-BEC22C3FE40B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dovecot:dovecot:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BE860F-A3C2-43E0-BC75-503C437DAADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dovecot:dovecot:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E57B06-8650-4374-B643-6FCBE3ABDAF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dovecot:dovecot:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0384E42-1506-4C08-AA5A-18B2A711C7F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dovecot:dovecot:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC1CE5-50B9-426E-B98A-224DC499AB15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dovecot:dovecot:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350A26D6-A8BA-4125-A640-264E08D28CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dovecot:dovecot:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71057F4B-3040-4771-B989-9F3453934AAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dovecot:dovecot:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1730EBB1-4071-4A23-B770-D564AF422273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dovecot:dovecot:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10A27394-E1C7-4EF0-94C8-71D6EA33CE6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dovecot.org/list/dovecot-news/2009-September/000135.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36698",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36713",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/14/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/58103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-838-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2641",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00491.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dovecot.org/list/dovecot-news/2009-September/000135.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/14/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/58103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-838-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00491.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-17T10:30:01.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before 1.1.6 and 1.2 before 1.2.4; reuses temporary filenames during the upload process which allows remote attackers, with privileges to write to the address book, to overwrite arbitrary files and execute PHP code via crafted Horde_Form_Type_image form field elements."
      }, {
        "lang" : "es",
        "value" : "La biblioteca de formularios en Horde Application Framework versión 3.2 anterior a 3.2.5 y versión 3.3 anterior a 3.3.5; Groupware versión 1.1 anterior a 1.1.6 y versión 1.2 anterior a 1.2.4; y Groupware Webmail Edition versión 1.1 anterior a 1.1.6 y versión 1.2 anterior a 1.2.4; reutiliza los nombres de archivo temporales durante el proceso de carga, lo que permite a los atacantes remotos, con privilegios para escribir en la libreta de direcciones, sobrescribir archivos arbitrarios y ejecutar código PHP por medio de elementos de campo de formulario Horde_Form_Type_image creados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F91CDA-B425-4DB2-89E4-12267B600D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8BB743-A760-4C72-880C-759E54FB7CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89477FCC-C925-418A-A3FF-F5B02736600C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5862181-4CE7-452F-8877-41E099440188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E601FE-94F1-48AD-A0F2-42824A3A4FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE2B06C-EDBD-4FA1-90AA-148E39EF5AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CF33A8-C497-4C86-8C5D-7181597BEC53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B312DB-14BE-425C-9B07-0CBED6F39E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2CF2865-CA12-4C4C-9BEC-7A97E6AAB377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF389AE4-D2AD-4992-BFBD-68FB1CBEE50B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6BBB036-494E-41D4-BD04-40906FAB5C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C10E681-5D2B-4EA4-B8E1-C0CA4FC9D3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CC5154-42C5-4877-9147-5DFD61BD5CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62AAEBBF-1696-4EAC-8837-68A03C2D2F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F626876D-99FC-4DE0-BEE0-35874C4E25F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A849DD3E-882A-4621-BB6C-315A76677BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB711B5E-9011-4BA2-917A-DB8545705E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "50DC1068-F426-497F-A5A0-E032BC3816F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C5A176-8C72-40EA-85AC-F11B40FD53A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4C3487-4556-47E5-8BF3-1DEDF0E9AFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F24E43-491B-4AD1-B905-66F7FC6DA98D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6BBB036-494E-41D4-BD04-40906FAB5C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "37B76B27-ADF0-4E88-B92C-304FB38A356E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "965F245A-879A-4DF0-ABC5-588E78C4CBBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "3DCB29F9-3875-4264-8117-5751FEDC3350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "59FC250F-EF0B-4604-99A2-3EEB8B2DEB77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C10E681-5D2B-4EA4-B8E1-C0CA4FC9D3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CC5154-42C5-4877-9147-5DFD61BD5CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62AAEBBF-1696-4EAC-8837-68A03C2D2F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F626876D-99FC-4DE0-BEE0-35874C4E25F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A849DD3E-882A-4621-BB6C-315A76677BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB711B5E-9011-4BA2-917A-DB8545705E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "50DC1068-F426-497F-A5A0-E032BC3816F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C5A176-8C72-40EA-85AC-F11B40FD53A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4C3487-4556-47E5-8BF3-1DEDF0E9AFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F24E43-491B-4AD1-B905-66F7FC6DA98D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.2.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F577A169-8354-4218-B3C6-04DA4BDF1E3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=horde-announce&m=125291625030436&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125292088004087&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125292314007049&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125292339907481&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125294558611682&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125295852706029&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36665",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36882",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/58107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125291625030436&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125292088004087&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125292314007049&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125292339907481&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125294558611682&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125295852706029&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/58107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-17T10:30:01.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before 1.1.6 and 1.2 before 1.2.4; allow remote attackers to inject arbitrary web script or HTML via the (1) crafted number preferences that are not properly handled in the preference system (services/prefs.php), as demonstrated by the sidebar_width parameter; or (2) crafted unknown MIME \"text parts\" that are not properly handled in the MIME viewer library (config/mime_drivers.php)."
      }, {
        "lang" : "es",
        "value" : "Múltiple vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Horde Application Framework desde v3.2 anteriores a v3.2.5 y desde v3.3 anteriores a v3.3.5; Groupware desde v1.1 anteriores a v1.1.6 y 1.2 anteriores a  v1.2.4; y Groupware Webmail Edition desde v1.1 anteriores a v1.1.6 y desde v1.2 anteriores a v1.2.4; permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de (1) preferencias numéricas manipuladas que no han sido adecuadamente gestionadas en el sistema de preferencias (services/prefs.php), como quedo demostrado por el parámetro sidebar_width o (2) \"fragmentos de texto\" MIME desconocidos manipulados que no son gestionados adecuadamente por la librería de visor de MIME (config/mime_drivers.php)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88BE4BD4-174C-4EC5-BCE7-CA63D1369043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D32C974-121E-4FAB-8E39-2933C912935F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A02DC9-3602-43B2-8574-15A6D4528142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F847C8-7775-4FC0-BBE1-C56DFC3D9A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1ECC0C8-DE09-4079-8476-B0C82ABE980A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADA6AAC-7511-47F6-B805-A5C48BA4CD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3CB720-A1C0-4E49-BA2C-02283499F252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE83C51-175E-4FB9-BA2B-505A8B559D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "172260F8-D4E5-470D-84EA-00B88B090A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51487521-E1DB-4CD0-9071-C9449EFB681E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_groupware:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FB18AE-EDA5-48DF-9592-9970FFD3C72F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_groupware:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF79BF-E978-49BF-BF07-DF4A75C6E52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_groupware:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B142D-AAF2-49EE-B152-C1C4524E4543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_groupware:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8CFFA11-C38E-4F92-8BF2-223B97911E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_groupware:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4151CC-DC68-4883-91E2-712D9FD0C160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_groupware:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F359B33-A791-4792-9CD3-BA551F1291DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_groupware:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F105C6-75E5-4BD8-A7A2-0DB31B6F5498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_groupware:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2187B702-3598-4353-81AA-EBDCC3E48A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_groupware:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D84C54-EAFF-4368-ADEF-589F95EA6BD5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6BBB036-494E-41D4-BD04-40906FAB5C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "37B76B27-ADF0-4E88-B92C-304FB38A356E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "965F245A-879A-4DF0-ABC5-588E78C4CBBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "3DCB29F9-3875-4264-8117-5751FEDC3350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "59FC250F-EF0B-4604-99A2-3EEB8B2DEB77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C10E681-5D2B-4EA4-B8E1-C0CA4FC9D3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CC5154-42C5-4877-9147-5DFD61BD5CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62AAEBBF-1696-4EAC-8837-68A03C2D2F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F626876D-99FC-4DE0-BEE0-35874C4E25F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF1A6AE-0748-476B-ACE2-DA43A9443B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB711B5E-9011-4BA2-917A-DB8545705E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "50DC1068-F426-497F-A5A0-E032BC3816F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C5A176-8C72-40EA-85AC-F11B40FD53A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4C3487-4556-47E5-8BF3-1DEDF0E9AFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F24E43-491B-4AD1-B905-66F7FC6DA98D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:1.2.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F577A169-8354-4218-B3C6-04DA4BDF1E3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.horde.org/ticket/?id=8311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.horde.org/ticket/?id=8399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125291625030436&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125292088004087&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125292314007049&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125292339907481&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125294558611682&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125295852706029&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36665",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/58109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.horde.org/ticket/?id=8311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.horde.org/ticket/?id=8399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125291625030436&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125292088004087&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125292314007049&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125292339907481&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125294558611682&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=horde-announce&m=125295852706029&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/58109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1883",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-09-18T10:30:00.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The z90crypt_unlocked_ioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage."
      }, {
        "lang" : "es",
        "value" : "La función z90crypt_unlocked_ioctl en el controlador z90crypt del kernel de Linux v2.6.9, no realiza una comprobaciónd e capacidad en la operación Z90QUIESCE, esto permite a usuarios locales elevar los privilegios euid 0 para forzar una parada en el controlador."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36759",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/15/1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/15/3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1438.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=505983",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9513",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/15/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/15/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1438.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=505983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect kernel packages as shipped in Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 1.\n\nIt was addressed in Red Hat Enterprise Linux 4 via https://rhn.redhat.com/errata/RHSA-2009-1438.html .\n\nThis issue has been rated as having moderate security impact.\n\nIt is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important or critical impact are addressed.\n\nFor further information about Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/",
        "lastModified" : "2009-09-22T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2707",
      "sourceIdentifier" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88",
      "published" : "2009-09-18T10:30:00.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in ia32el (aka the IA 32 emulation functionality) before 7042_7022-0.4.2 in SUSE Linux Enterprise (SLE) 10 SP2 on Itanium IA64 machines allows local users to cause a denial of service (system crash) via a 32-bit x86 application."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en ia32el (también conocido como la funcionalidad de emulación IA 32) anterior a v7042_7022-0.4.2 en SUSE Linux Enterprise (SLE) v10 SP2 en máquinas Itanium IA64, permite a usuarios locales provocar una denegación de servicio(caída del sistema) a través de una aplicación de 32 bits x86."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:suse_linux_enterprise_server:10:sp2:itanium_ia64:*:*:*:*:*",
            "matchCriteriaId" : "933DC6C0-4860-4306-B4C7-BB91C9F95786"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://support.novell.com/security/cve/CVE-2009-2707.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.securityfocus.com/bid/36393",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://bugs.launchpad.net/bugs/cve/2009-2707",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=521524",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/security/cve/CVE-2009-2707.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/bugs/cve/2009-2707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=521524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of ia32el as shipped with Red Hat Enterprise Linux 3, 4 or 5.",
        "lastModified" : "2009-09-23T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2937",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T10:30:01.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed."
      }, {
        "lang" : "es",
        "value" : "Vulnerabildiad de Secuencias de Comandos en Sitios Cruzados (XSS) en Planet v2.0 y Planet Venus, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del atributo SRC en un elemento IMG en una fuente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intertwingly:planet:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "417082A5-EFA1-45C4-8418-B19455F05F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intertwingly:planet_venus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC161B8-37DD-46BE-B2CF-4AF5900020C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intertwingly.net/blog/2009/09/09/Venus-Updates",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.planetplanet.org/archives/devel/2009-September/001999.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36636",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36766",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36392",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=522802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00504.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00525.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://intertwingly.net/blog/2009/09/09/Venus-Updates",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.planetplanet.org/archives/devel/2009-September/001999.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=522802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00504.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00525.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T10:30:01.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value, and possibly defeat protection mechanisms based on randomization, via vectors that leverage the function's tendency to \"return the same value over and over again for long stretches of time.\""
      }, {
        "lang" : "es",
        "value" : "La función get_random_int de drivers/char/random.c en el kernel de Linux anterior a v2.6.30, produce números que nos son suficientemente aleatorios, esto permite a los atacantes predecir el valor devuelto y permite que se puedan superar los mecanismos de protección basados en la aleatoriedad, a través de vectores que eleven la tendencia de la función a \"devolver el mismo valor una y otra vez durante largos periodos de tiempo\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.30",
            "matchCriteriaId" : "F029386E-52D4-46E9-84BF-4D24CA35383E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "513797E6-FCE6-4E84-9B66-202541F9601E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8a0a9bd4db63bc45e3017bedeafbd88d0eb84d02",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://patchwork.kernel.org/patch/21766/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37351",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1438.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=499785",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=519692",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11168",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03836en_us",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8a0a9bd4db63bc45e3017bedeafbd88d0eb84d02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://patchwork.kernel.org/patch/21766/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1438.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=499785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=519692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03836en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T10:30:01.327",
      "lastModified" : "2023-11-07T02:04:23.920",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-2139, CVE-2009-2140.  Reason: This candidate is a duplicate of CVE-2009-2139 and CVE-2009-2140.  Notes: All CVE users should reference CVE-2009-2139 and CVE-2009-2140 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T10:30:01.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Happy Linux XF-Section module 1.12a for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos cruzados (XSS) en el módulo Happy Linux XF-Section v1.12a para XOOPS, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ohwada:xf-section:1.12a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3D24E7-E91B-4840-96F8-0E9FB7644442"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB325E21-BD1E-4C12-B3B1-7210AFFD1235"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN00425482/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000062.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://linux.ohwada.jp/modules/smartsection/item.php?itemid=458",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN00425482/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000062.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://linux.ohwada.jp/modules/smartsection/item.php?itemid=458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T10:30:01.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via malformed OPCUA Service CallRequest packets."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el analizador OpcUa (OPC UA) de Wireshark v0.99.6 hasta v1.0.8 y v1.2.0 hasta v1.2.1, permite a atacantes remotos provocar una denegación de servicio (consumo de la memoria y la CPU) a través de paquetes OPCUA Service CallRequest mal formados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB52B779-7A2D-43E0-9F12-C65053002EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A85B028-7384-403A-817C-B5001F02A8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801B1795-3DC4-4BE3-A693-37B6BD116B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA611B86-AB5C-4CA1-9620-6F5532F4C819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17808311-AC2A-428A-BB8B-B08549C5DAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978C483C-A6F7-456F-9488-833D520D4A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB94CE6-03D3-43C3-B765-AC36961CD83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FADA30-FD98-42F3-80F1-E8794C77AC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3F8A55-10DE-4197-9F9D-5F6570A94860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F1728E-ED97-4203-90D1-9E81E96BD7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5629542-FD8E-4C7B-B396-BC76FB462083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CB9265-B7A4-4EB4-9C20-F747F3786C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0059BA2-86B2-4DA5-A6C1-7248D07BB37C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36754",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36408",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-05.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-06.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-06.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
        "lastModified" : "2009-09-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T10:30:01.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in packet.c in the GSM A RR dissector in Wireshark 1.2.0 and 1.2.1 allows remote attackers to cause a denial of service (application crash) via unknown vectors related to \"an uninitialized dissector handle,\" which triggers an assertion failure."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en packet.c en el analizador GSM A RR en Wireshark v1.2.0 y v1.2.1, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de vectores desconocidos relacionados con \"el manejo no inicializado del analizador\", que provoca un fallo de aserción."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0059BA2-86B2-4DA5-A6C1-7248D07BB37C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36754",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36408",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-06.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-06.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
        "lastModified" : "2009-09-24T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T10:30:01.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the TLS dissector in Wireshark 1.2.0 and 1.2.1, when running on Windows, allows remote attackers to cause a denial of service (application crash) via unknown vectors related to TLS 1.2 conversations."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el analizador TLS de Wireshark v1.2.0 y v1.2.1, cuando se ejecuta en Windows, permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de vectores desconocidos relacionados con las conversaciones TLS v1.2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0059BA2-86B2-4DA5-A6C1-7248D07BB37C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36754",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36408",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-06.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-06.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
        "lastModified" : "2009-09-24T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T10:30:01.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PlayerVersion property value."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región heap de la memoria en el control ActiveX de la biblioteca SwDir.dll en Shockwave Player de Adobe versiones 11.5.1.601 y  anteriores, permite a los atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario por medio de un valor de propiedad PlayerVersion largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.5.1.601",
            "matchCriteriaId" : "E2616516-18CA-4F56-803F-8CD3DBC56006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA5643BC-12F8-4F05-A363-9FC97EF1DD0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085FA7DD-8048-4768-816C-82828022FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0DC258D-1C2B-4A7F-AD80-6C88A7A78A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966A8542-E5E1-468F-989E-47F71123A426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC1BCC0-B24B-4CFC-B3B9-FA3B0D968CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFDAAB3-CC22-4604-80B3-4A54CCEFD29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77F1733-6755-44E7-8ECC-CFB397FC79A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.0.196:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9282EC1A-DFDB-49A9-8BE1-013D9B494D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.0.196a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A8422D-39E4-490C-B3EC-FED7468D6B4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.0.204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A75AF4-F7BA-4CA4-8079-5D9794E1BD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.0.205:*:*:*:*:*:*:*",
            "matchCriteriaId" : "712325E1-B37A-4994-B42E-F02553A3CB9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC55CB2C-4DBC-4D16-96A7-FB3316A21D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.5.1.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADB5808-5F9A-4FBD-A6FC-3DB17A6C6CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.5.1.103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC415B5-F7C8-4277-A4A3-ECFA2CB38515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.5.1.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3454FF46-3D72-4FF9-AF5B-2E948DA412D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.5.1.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4726504-850B-4434-A149-09000D21F917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.5.321:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D89450-C92C-4541-917B-AD047803A2AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.5.323:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798EB26B-14D6-4E90-AC84-FF47B89B82E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.5.324:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA562619-7FAA-4FA6-AE42-55801AF00D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.5.325:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA961FB2-C543-4A1C-9C9E-C56641EB13FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F5982F-35BD-49A0-9DBE-774816136D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:9.0.383:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D23F59-4939-4ABE-A5BC-283BFC362E45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:9.0.432:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE1DB962-10C6-4536-B693-4AF59F0C4D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:10.0.0.210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA60B4FB-2BA4-4304-A7B8-8F0676C4F022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:10.0.1.004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D6B993-1CF8-4944-8456-B99A72F24814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18289BB-6568-4671-BC70-C8744DD2E0C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:10.1.0.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD29AACC-E101-494B-BFD4-D97FDBE4A584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:10.1.1.016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F52120E-9CAB-40D9-A577-5D8278139F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:10.1.4.020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB05A7D-3017-4589-AE5C-B1A377AF02B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:10.2.0.021:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C665F7-E05D-4A8C-B217-6689C95D3FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:10.2.0.022:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8441B2BB-3837-4EDE-B44E-323B434CBF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:10.2.0.023:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2007F032-06BA-4347-9D9E-2C7C4C9BBCD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.0.0.456:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF19CBB1-F047-4472-A19D-48A147396383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.0.3.471:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C51EB3CF-6770-4626-BDA7-9ED94A374911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61B9485-2A42-4C95-9A10-3F1102E4EBBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.596:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FEEF7E-B477-485A-B9BC-98F6D1A2B10B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.5.2.602:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9506D5-D8CA-4845-B2FA-0E47C9BB3C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.5.6.606:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBAFFFF-D658-45F0-AF14-BA29AA2D5394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.5.7.609:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BFB28F3-ADA5-4BD1-9723-73FA291307BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.5.8.612:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9760A554-1D44-4249-97DE-8423A97BA9FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-16.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3134",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T20:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in spnews.php in MyBuxScript PTC-BUX allows remote attackers to execute arbitrary SQL commands via the id parameter in an spnews action to the default URI.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en spnews.php de MyBuxScript PTC-BUX, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción spnews a la URI por defecto. NOTA: Algunos de estos detalles se han obtenidos de fuentes de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybuxscript:pts-bux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0079B19-21F6-4D80-A148-01AECB1F17E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.packetstormsecurity.com/0909-exploits/mybuxscript-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2495",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.packetstormsecurity.com/0909-exploits/mybuxscript-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T20:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Activities module in vtiger CRM 5.0.4 allows remote attackers to inject arbitrary web script or HTML via the action parameter to phprint.php.  NOTE: the query_string vector is already covered by CVE-2008-3101.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo Activities en vtiger CRM v5.0.4, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"action\" al phprint.php. NOTA: el vector query_String actualmente está reportado en el CVE-2008-3101."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84AE51A9-59AF-47F9-8AFC-5219505FD170"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36309",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/57240",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36062",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2319",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/57240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T20:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in the RSS module in vtiger CRM 5.0.4 allows remote attackers to hijack the authentication of Admin users for requests that modify the news feed system via the rssurl parameter in a Save action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el módulo RSS de vtiger CRM v5.0.4, permite a atacantes remotos secuestrar la autenticación de los usuarios Admin para solicitudes que modifican el sistema de fuentes de noticias a través del parámetro rssurl en una acción Save -guardar- en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84AE51A9-59AF-47F9-8AFC-5219505FD170"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=125060676515670&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36309",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/57238",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36062",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2319",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125060676515670&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/57238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T20:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the module parameter to graph.php; or the (2) module or (3) file parameter to include/Ajax/CommonAjax.php, reachable through modules/Campaigns/CampaignsAjax.php, modules/SalesOrder/SalesOrderAjax.php, modules/System/SystemAjax.php, modules/Products/ProductsAjax.php, modules/uploads/uploadsAjax.php, modules/Dashboard/DashboardAjax.php, modules/Potentials/PotentialsAjax.php, modules/Notes/NotesAjax.php, modules/Faq/FaqAjax.php, modules/Quotes/QuotesAjax.php, modules/Utilities/UtilitiesAjax.php, modules/Calendar/ActivityAjax.php, modules/Calendar/CalendarAjax.php, modules/PurchaseOrder/PurchaseOrderAjax.php, modules/HelpDesk/HelpDeskAjax.php, modules/Invoice/InvoiceAjax.php, modules/Accounts/AccountsAjax.php, modules/Reports/ReportsAjax.php, modules/Contacts/ContactsAjax.php, and modules/Portal/PortalAjax.php; and allow remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the step parameter in an Import action to the (4) Accounts, (5) Contacts, (6) HelpDesk, (7) Leads, (8) Potentials, (9) Products, or (10) Vendors module, reachable through index.php and related to modules/Import/index.php and multiple Import.php files."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en vtiger CRM versión 5.0.4, permiten a los atacantes remotos incluir y ejecutar archivos locales arbitrarios por medio de un .. (punto punto) en (1) el parámetro module en el archivo graph.php; o el parámetro (2 ) module o (3) file en el archivo include/Ajax/CommonAjax.php, accesible por medio de los archivos modules/Campaigns/CampaignsAjax.php, modules/SalesOrder/SalesOrderAjax.php, modules/System/SystemAjax.php, modules/Products/ProductsAjax.php, modules/uploads/uploadsAjax.php, modules/Dashboard/DashboardAjax.php, modules/Potentials/PotentialsAjax.php, modules/Notes/ NotesAjax.php, modules/Faq/FaqAjax.php, modules/Quotes/QuotesAjax.php, modules/Utilities/UtilitiesAjax.php, modules/Calendar/ActivityAjax.php, modules/Calendar/CalendarAjax.php, modules/PurchaseOrder/PurchaseOrderAjax.php, modules/ HelpDesk/HelpDeskAjax.php, modules/Invoice/InvoiceAjax.php, modules/Accounts/AccountsAjax.php, modules/Reports/ReportsAjax.php, modules/Contacts/ContactsAjax.php y modules/Portal/PortalAjax.php; y permitir que los usuarios autenticados remotos incluyan y ejecuten archivos locales arbitrarios por medio de un .. (punto punto) en el parámetro step en una acción Import en el módulo (4) Accounts, (5) Contacts, (6) HelpDesk, (7) Leads, (8) Potenciales, (9) Products, o (10) Vendors, accesible por medio del archivo index.php y relacionado al archivo modules/Import/index.php y múltiples archivos Import.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84AE51A9-59AF-47F9-8AFC-5219505FD170"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=125060676515670&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36309",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/8118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/57239",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36062",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2319",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125060676515670&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/8118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/57239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T20:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated users to execute arbitrary code by composing an e-mail message with an attachment filename ending in (1) .php in installations based on certain Apache HTTP Server configurations, (2) .php. on Windows, or (3) .php/ on Linux, and then making a direct request to a certain pathname under storage/."
      }, {
        "lang" : "es",
        "value" : "El procedimiento \"saveForwardAttachments\" de la funcionalidad \"Crear correo\" de vtiger CRM v5.0.4 permite a usuarios remotos autenticados ejecutar código de su elección creando un mensaje de correo electrónico con un fichero adjunto cuyo nombre acabe en (1) .php en entornos basados en configuraciones determinadas del servidor HTTP Apache, (2) .php. en Windows, o (3) .php/ en Linux; y, a continuación, realizando una petición directa a una ruta de directorio bajostorage/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84AE51A9-59AF-47F9-8AFC-5219505FD170"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=125060676515670&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36309",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/57237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36062",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2319",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125060676515670&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/57237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T20:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "include/utils/ListViewUtils.php in vtiger CRM before 5.1.0 allows remote authenticated users to bypass intended access restrictions and read the (1) visibility, (2) location, and (3) recurrence fields of a calendar via a custom view."
      }, {
        "lang" : "es",
        "value" : "include/utils/ListViewUtils.php en vtiger CRM anteriores a 5.1.0 permite a usuarios remotos autenticados evitar las restricciones de acceso previstas y leer los campos (1) visibilidad, (2) localización, y (3) recurrencia de un calendario a través de una vista personalizada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.0",
            "matchCriteriaId" : "29C2C106-F074-445B-9C3C-B28252EE36D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36309",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/12407",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/4208",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/57241",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/12407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/4208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/57241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T20:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en news.php en Rock Band CMS v0.10 que permite a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) \"year\" y (2) \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dave_robinson:rockbandcms:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0DCFB87-A797-433F-9544-40D1F0E25778"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36517",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2494",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T20:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in TriceraSoft Swift Ultralite 1.032 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long string in a .M3U playlist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en TriceraSoft Swift Ultralite v1.032 permite a atacantes remotos producir una denegación de servicio (caída) o ejecutar código arbitrario a través de una cadena larga en un fichero de lista de reproducción .m3u."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tricerasoft:swift_ultralite:1.032:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6217FB0-E561-4738-AA41-8C16B5F2C796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36508",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T20:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in Ultimate Player 1.56 beta allow remote attackers to execute arbitrary code via a long string in a (1) .m3u or (2) .upl playlist file."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en pila en Ultimate Player v1.56 beta el cual permite a atacantes remotos ejecutar código arbitrario a través de una cadena larga en un fichero de lista de reproducción del tipo (1) .m3u o (2) .upl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimatevideosite:ultimate_player:1.56:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "7274EC33-660B-471E-B65E-A20D614197D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2491",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T20:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in RASH Quote Management System (RQMS) 1.2.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an admin action to the default URI."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en RASH Quote Management System (RQMS) v1.2.2  y anteriores, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a través de el parámetro \"user\" en una acción administrativa a una URI por defecto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomas_cuchta:rash:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.2",
            "matchCriteriaId" : "77B44607-A988-415A-908E-A0F7F8395691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomas_cuchta:rash:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA86ADDC-71F0-46D6-962E-67972D4E612B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomas_cuchta:rash:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D20AFB9-2D82-4FAB-B26B-A8D5CCA13247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomas_cuchta:rash:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36A4EF6-1A5B-4BA4-BD52-6C6CA90355F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomas_cuchta:rash:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB01C78-FEEE-478D-BA75-6E2AD5F2994E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomas_cuchta:rash:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB39FF4-2BAE-434E-8A56-B0AE176DBF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomas_cuchta:rash:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E9CDF8-7363-49A7-93A6-358FD9A3F2C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomas_cuchta:rash:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A9851E-0EB5-40D6-B4B5-BEF53CA1944B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/rqms-bypass.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36477",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2446",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/rqms-bypass.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T20:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the URI, as demonstrated by a SCRIPT element in an arbitrary parameter such as the asd parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en include/ajax/blogInfo.php en LiveStreet v0.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a traves de una URI, como se demuestra mediante un elemento \"SCRIPT\" en un parametro arbitrario como el parametro \"asd\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:livestreet:livestreet:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D882ADEF-CB0F-4695-9536-BA2616CA764F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T21:30:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the (1) Account Billing Address and (2) Shipping Address fields in a profile by creating a Sales Order (SO) associated with that profile."
      }, {
        "lang" : "es",
        "value" : "vtiger CRM anteriores a v5.1.0 permite a usuarios remotos autenticados evitar los permisos de los campos (1) Cuenta de dirección de pago y (2) Dirección de envío en un perfil de Orden de Ventas (SO) asociado con aquel perfil."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.1.0",
            "matchCriteriaId" : "42168098-4C0F-4AC4-B4C6-5C96784CB7FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36309",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5055",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T21:30:00.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vtiger CRM before 5.1.0 allows remote authenticated users, with certain View privileges, to delete (1) attachments, (2) reports, (3) filters, (4) views, and (5) tickets; insert (6) attachments, (7) reports, (8) filters, (9) views, and (10) tickets; and edit (11) reports, (12) filters, (13) views, and (14) tickets via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "vtiger CRM anteriores a v5.1.0 permite a usuarios autenticados, con algunos privilegios de Vista, borrar (1) adjuntos, (2) informes, (3) filtros, (4) Vistas, y (5) tickets; insertar (6) adjuntos, (7) informes, (8) filtros, (9) vistas, y (10) tickets; y editar (11) informes, (12) filtros, (13) vistas, y (14) tickets a través de vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E55C900-AAB5-46A2-B650-ED3A9DE52C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB4792CC-85E3-4317-A632-5A130E9C6F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB300C8-ABE4-45BA-B260-570DD1E32F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0C897F-2066-43C3-AB44-EE66DB0C2B22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458323BE-8583-435D-85B6-9F5F66F664A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67FC276-11EB-4196-BDD9-84D69173EFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:3.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "81A5C9AA-0C13-4DA4-845B-28CCE80D5A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "288A4DD7-765B-4957-869F-98A836E4EF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5C4B4A-507F-4389-9094-96AE7D84DE93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:4:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CDF5A9-E641-4FC3-8602-D47594524B20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:4:beta:*:it:*:*:*:*",
            "matchCriteriaId" : "83868C6E-8280-428D-9162-443FE263581F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04C6B97E-408B-49B1-A1F3-C0D1107500D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F2DEEE-E081-4ED2-AB1A-9ED966474CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33644DF3-9777-405A-A106-1A6B4F1D6FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B3F151-0398-42C7-B194-FF528696D1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:4.2:*:*:*:validation:*:*:*",
            "matchCriteriaId" : "DA72C37D-EB9E-46BD-946C-B87DAC303CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57840915-C75E-4D62-A017-E60DD1396D34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20038138-B797-40A5-A45B-9AB6C21033D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98DE0A56-EA74-4EA8-B941-F0DFF0F86F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF126B8-8BE9-4775-904B-5F6FD0FC97CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84AE51A9-59AF-47F9-8AFC-5219505FD170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7983E217-C378-4D29-AB23-0A1F6FF483B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:5.1.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "16C7FC4B-4253-45C5-92A4-26705A1D98FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.vtiger.com/viewtopic.php?t=15094",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://forums.vtiger.com/viewtopic.php?t=16756",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36309",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5249",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://forums.vtiger.com/viewtopic.php?t=15094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://forums.vtiger.com/viewtopic.php?t=16756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T21:30:00.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in RASH Quote Management System (RQMS) 1.2.2 allow remote attackers to execute arbitrary SQL commands via (1) the search parameter in a search action, (2) the quote parameter in a quote addition, or (3) a User_Name cookie in unspecified administrative actions.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en RASH Quote Management System (RQMS) v1.2.2 permite a atacantes remotos ejecutar comandos SQL a traves de (1) el parámetro \"search\" en una acción de búsqueda, (2) el parámetro \"quote\" en una adición de quote o (3) en una cookie \"User_Name\" en acciones administrativas inespecíficas. NOTA: La procedencia de esta información es desconocida; los detalles fueron obtenidos únicamente de terceras partes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomas_cuchta:rash:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57068B74-8CD7-4494-8235-624D8543AD88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36477",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/57469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/57470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T21:30:01.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the header of the topic in a comment."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en LiveStreet v0.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de la cabecera del tema de un comentario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:livestreet:livestreet:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D882ADEF-CB0F-4695-9536-BA2616CA764F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2471",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T21:30:01.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "update/update_0.1.2_to_0.2.php in LiveStreet 0.2 does not require administrative authentication, which allows remote attackers to perform DROP TABLE operations via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "update/update_0.1.2_to_0.2.php in LiveStreet v0.2 no exige autenticación administrativa, lo que permite a atacantes remotos realizar operaciones DROP TABLE a través de vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:livestreet:livestreet:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D882ADEF-CB0F-4695-9536-BA2616CA764F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T21:30:01.063",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Self Service UI (SSUI) in IBM Tivoli Identity Manager (ITIM) 5.0.0.5 allows remote authenticated users to inject arbitrary web script or HTML via the last name field in a profile."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Self Service UI (SSUI) en IBM Tivoli Identity Manager (ITIM) v5.0.0.5 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML de forma arbitraria a través de el campo \"last name\" en un perfil."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_identity_manager:5.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4908A93-BA67-4031-8794-F6A87A3A072C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36511",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54747",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ],
      "evaluatorSolution" : "Per http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54747\r\n\r\n A fix is available\r\n\r\nIBM Tivoli Identity Manager, ver 5.0, Interim Fix 5.0.0.6-TIV-TIM-IF0031"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T22:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the wberuntimeear application in the test servlet in IBM WebSphere Business Events 6.1 and 6.2 allows remote attackers to execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en la aplicación wberuntimeear en el servlet de prueba en IBM WebSphere Business Events v6.1 y v6.2 que permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_business_events:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2F6267A-554A-4358-B869-3E8FCE792485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_business_events:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF14447-0ACE-4EB1-A03C-9E016D8621AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ56367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ56367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T22:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the iret instruction, which might allow local users to gain privileges via vectors related to a tempEIP pseudocode variable that is outside of the code-segment limits."
      }, {
        "lang" : "es",
        "value" : "El kernel en NetBSD, posiblemente 5.0.1 y anteriores, en plataformas x86 no gestiona adecuadamente el fallo de preasignación de la instrucción \"iret\", lo que permitiría a usuarios locales conseguir privilegios a través de vectores relacionados con la variable de pseudocódigo tempEIP que esta fuera de los limites de segmento de código."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.1",
            "matchCriteriaId" : "ABB5BE84-628A-4845-92C7-E20ADEE7E904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555181C9-75B1-427B-BF36-47C7D969DCC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC89BD6-8376-4C8D-A120-1430D8CA113F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF613C9-DC4A-45F0-BEE1-8450762B0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441CEF2E-9687-4930-8536-B8B83018BD28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DD3C82-0B7D-4B25-B603-AD6C6D59239A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7A39CD-C4B2-4FD9-A450-E5C7A5480174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBA1B13-B378-4F13-BD13-EC58F15F5C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C8CAB1-2D8C-4875-A795-41178D48410F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3C937A-E9D8-474A-ABEB-A927EF7CC5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E10D9BF9-FCC7-4680-AD3A-95757FC005EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E8C3A4-9FA7-4F2A-8C65-D4404715E674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA2E3A3-EB9B-4B20-B754-EEC914FB1D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC78BA4-70F4-4B9F-93C2-B107E4DCC418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A10F5A-067E-4DD8-B585-ABCD6F6B324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249FA642-3732-4654-88CB-3F1D19A5860A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5071CA39-65B3-4AFB-8898-21819E57A084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C95A3-15E3-41B8-AC28-ACEA57021E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BD9F91-2384-4557-9648-25FC00D04677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CABFAA-594C-45D7-A0C7-795872A0C68A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9432E9-AACA-4242-BDAB-8792ACF72C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29C02C6B-AAFD-4594-94A4-F26BA3648CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57C533D7-771E-4E33-A4FE-764C0B73F920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9875E709-11BA-4B8F-A2FC-26844DD4D563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49AF042F-5047-4FA2-B20C-65B2C6EBEA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00564BAA-066A-4627-B6A8-78724E55D363"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/506531/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506531/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T22:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Google Chrome 2.x and 3.x before 3.0.195.21 allows remote attackers to inject arbitrary web script or HTML via a (1) RSS or (2) Atom feed, related to the rendering of the application/rss+xml content type as XML \"active content.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Google Chrome 2.x y 3.x anteriores a 3.0.195.21 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de feeds (1) RSS o (2) Atom, relacionado con el renderizado de un contenido del tipo application/rss+xml como \"contenido activo\" XML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F95770-F36F-43C0-986F-5C819648271E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCE1FD3-8D27-4304-97F9-6F9689F2498D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6CA696-49AA-4445-B978-96C1D8CE58DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CFA3BF-6C07-448B-8C83-AD4C524A6577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8497F93-D88A-4FFA-B988-7210608530A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FB50A3-FFDA-4BB9-A2C1-DA6DACC2DAAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F93BC8-FE87-4CEC-B28A-4B0B5A468EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D459C7-2555-42FA-9C68-619E410D7CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CDF938-2998-403F-B343-29B620E05D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F89EA6-B411-4887-90A1-FF3A054424F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D2BA3B-1C69-470C-9C40-001FAE82DDB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3583995C-CD74-401F-905D-65B73CFC4595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A621B1-3186-4CE2-8BCC-916027CC74CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F5223F1-85CD-4DF9-9665-BDF7B554A784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD7AFBA-A9A2-4EE9-B652-78D25EFBB690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B9D6ED9-D5C5-4CA9-84EA-8007F48CF597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7F7897-ECD1-499E-81CD-E224241B6607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7422307-271F-4953-9CA4-C50238D27BAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DCC3490-5B06-4992-8E31-CA46E18607B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F85551-EDB5-4790-8095-EFFA7DEC7F98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=21238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/09/stable-channel-update.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36770",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506517/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=21238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/09/stable-channel-update.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506517/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per http://www.securityfocus.com/archive/1/archive/1/506517/100/0/threaded\r\n\r\n\r\nVII. SOLUTION\r\n-------------------------\r\nChrome: Upgrade to latest version of Google Chrome (v3.0.195.21 or higher).\r\nIf you remain connected to the internet, this should be automatic.\r\nOpera: Wait for upcoming patch for Scenario (3) in next minor release\r\n(non-alpha/beta) of Opera 10 [Opera 9 users need to upgrade]. However, you\r\nwill still continue to be vulnerable to script execution."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T22:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The getSVGDocument method in Google Chrome before 3.0.195.21 omits an unspecified \"access check,\" which allows remote web servers to bypass the Same Origin Policy and conduct cross-site scripting attacks via unknown vectors, related to a user's visit to a different web server that hosts an SVG document."
      }, {
        "lang" : "es",
        "value" : "El método getSVGDocument en Google Chrome anteriores a v3.0.195.21 omite una comprobación de acceso inespecífica, lo que permite a servidores web remotos evitar la politica Same Originy dirigir ataques de ejecución de secuencias de comandos en sitios cruzados (XSS) a través de vectores desconocidos, relacionado con la visita de usuarios a un servidor diferente del que hospeda el documento SVG."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:beta:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.193.2",
            "matchCriteriaId" : "72A0D17D-4BA8-4726-9D8E-BCD675199A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55D5075-D233-42D6-B1D6-77B7599650EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8FF77A-7802-4963-B532-3F16C7BB012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73576CF-76EE-42A3-9955-D7991384B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6659833E-E309-4797-84D4-A782237714A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4C0D93-0308-48D4-A953-9398B88E2868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5094C4-1338-4189-B5FD-C9AFFF091D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C0798F-CC7F-4069-810E-B81F8BB77CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F95770-F36F-43C0-986F-5C819648271E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCE1FD3-8D27-4304-97F9-6F9689F2498D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6CA696-49AA-4445-B978-96C1D8CE58DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CFA3BF-6C07-448B-8C83-AD4C524A6577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8497F93-D88A-4FFA-B988-7210608530A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FB50A3-FFDA-4BB9-A2C1-DA6DACC2DAAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F93BC8-FE87-4CEC-B28A-4B0B5A468EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D459C7-2555-42FA-9C68-619E410D7CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CDF938-2998-403F-B343-29B620E05D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F89EA6-B411-4887-90A1-FF3A054424F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D2BA3B-1C69-470C-9C40-001FAE82DDB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3583995C-CD74-401F-905D-65B73CFC4595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A621B1-3186-4CE2-8BCC-916027CC74CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F5223F1-85CD-4DF9-9665-BDF7B554A784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD7AFBA-A9A2-4EE9-B652-78D25EFBB690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B9D6ED9-D5C5-4CA9-84EA-8007F48CF597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7F7897-ECD1-499E-81CD-E224241B6607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7422307-271F-4953-9CA4-C50238D27BAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DCC3490-5B06-4992-8E31-CA46E18607B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=21338",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/09/stable-channel-update.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36770",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.google.com/p/chromium/issues/detail?id=21338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://googlechromereleases.blogspot.com/2009/09/stable-channel-update.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/58193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T22:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Opera 9 and 10 allows remote attackers to inject arbitrary web script or HTML via a (1) RSS or (2) Atom feed, related to the rendering of the application/rss+xml content type as \"scripted content.\" NOTE: the vendor reportedly considers this behavior a \"design feature,\" not a vulnerability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Opera 9 y 10 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de feeds (1) RSS o (2) Atom, relacionado con el renderizado de contenido del tipo application/rss+xml como \"contenido de secuencias de comandos\". NOTA: El fabricante considera esto como una \"característica de diseño\" y no una vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D03F8C2-1193-45ED-B38E-C76C41A0FD9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506517/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506517/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T22:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera before 10.01 does not properly restrict HTML in a (1) RSS or (2) Atom feed, which allows remote attackers to conduct cross-site scripting (XSS) attacks, and conduct cross-zone scripting attacks involving the Feed Subscription Page to read feeds or create feed subscriptions, via a crafted feed, related to the rendering of the application/rss+xml content type as \"scripted content.\""
      }, {
        "lang" : "es",
        "value" : "El navegador Opera anterior a la versión 10.01 no restringe de manera apropiada el HTML en un (1) RSS o (2) Atom feed, que permite a los atacantes remotos realizar ataques de tipo Cross-Site Scripting (XSS), y realizar ataques de tipo cross-zone scripting, que involucran la página Feed Subscription, para leer feeds o crear subscripciones feed, por medio de un feed creado, relacionado con la representación del tipo de contenido application/rss+xml como \"scripted content.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECFBC71-7814-4A24-A918-C593673727B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "57824075-E3F7-4B23-B4D6-8417C3147085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "FE078F27-6FC1-466C-8331-A89F8B6FE0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "5839EB88-DF5E-4AB0-899B-DF9F72F5F442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1865A4-E038-4A1C-877D-5A3CFA9576BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "93966A66-4332-4E76-9B1A-2BBF10AF0ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA91E77-301C-48F6-9A57-D5FDCEF743BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49DDEF-681C-4A34-9FF8-17249C42842D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF365891-F3FA-4740-94B2-01F85254A2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42B4261-C511-4F3A-8596-6BD4E343DC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2F38FE-7E98-48B2-B0B2-35312368B21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "63687D75-860D-4A36-B6BB-45BD4268B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BD500741-CF39-4F0C-9F96-6CBDFF8973D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*",
            "matchCriteriaId" : "359941FD-A5CE-43C1-AA76-C1B79BCB08C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9AC78A-CA47-476D-935E-67932BAB98A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E9662C-441F-4AB2-AC4C-30F31C32949A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D681B3-73E6-4257-84B4-DE83F6D659B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E5F2A5-F50F-4085-AB7D-8C91121A429A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E90912E-0CF8-404B-9E86-461497C65A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E19DD71-9447-4946-931F-4866537C8BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54075890-6E0C-4AB7-8BD5-2023419CC251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABC3435-77CD-4591-8282-7ADA60225CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C35850-B79C-4EE4-A6F2-CC5D2304724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "50B797C8-3290-4278-9D4B-A15A14FB8D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEC078C-A8F4-471B-A367-59A86B78590D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E10F658D-D2E4-4789-8172-F8842C3EEA05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81687D99-7444-4205-A7BE-992CC758675F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75C4301-68E9-4A10-B9C5-711252BF629B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC690371-3326-421E-8BAC-14F48840671B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E20418A7-1FA7-45EF-99B5-12D283EA6CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE50982-8026-466C-9F51-867425C9986F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD889EC7-E5D2-4137-B85C-86D7DB5CED27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "97452A26-7231-43BE-B70E-B8D05365CAB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DBA733-467C-4505-8199-DD25A5FFBF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B332FF1C-731D-454C-AA9E-3534040F09E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7965089-8592-47F2-958B-7DBE669BCAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1750B2D-7AC8-45CF-9879-1D0476EEE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBAA39D-01A0-4B6B-926B-C36C238E5258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE4473-88C0-4E28-A5B5-F7383B0E5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9754B270-E01D-415E-9A91-09ECB9B82B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D4682E92-E5E7-4351-959E-25A79CA4271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC41D6-73D4-44E9-87E4-E1E955B9580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5A5E5-3703-44AC-9963-A20A55002B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3E5BEF-3F29-4929-A37C-C49322B19047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0E7B5D-2568-4128-8F99-E74D24A7E991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A04906-7267-4A09-87BF-D639C7CF315B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "76C58A91-23BA-4336-A81B-B7FDFAF6CA91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6E40C4-FA29-4D7A-9018-44154503A68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E48C83-01AE-4A33-A004-14B99792674C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A2B78-70BD-439B-B1ED-A17FA5EF0990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623E4466-82CC-4BDD-BE25-3BB33B585547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0002A4-8A90-471C-9813-F648D53E4F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECA190-D7D3-4248-A61E-0D87E67E3D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A15E0FA-5570-4C5F-B087-38591D9EBABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9F72B1-F398-4E07-8652-2042ADDB8414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA2F504-6690-4AAD-97A6-6487E450C92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B927D3-D766-4D53-9870-15A7184E4C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FE202A-E068-4ECE-B61D-230EFF0E60B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B43E22F-D894-4763-BF55-C9B77911C8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4218D36C-CCE7-443B-842B-AA1A2C865734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "3311565E-3971-416B-AC9C-6CF9F4EF0F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC4250E-E638-4015-B5EF-7B5405F7FBFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B7AA6F-9918-4356-894C-72833B791201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB76FFE-CB54-4A5B-B8FF-02B1A5D55D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.60:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA48444-F998-425B-896A-CE9276869BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9BFC45-39DF-47A6-B013-4299D2A0FB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "177B7245-4E8F-44E7-BF34-43939DD75AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2B3A26-D8C3-4508-8A6B-3858D5CB8381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14200693-2B22-42BF-9917-FF4B541D9188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D03F8C2-1193-45ED-B38E-C76C41A0FD9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.00:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "F12E0FE8-3982-453B-9C01-ABB2DE96866F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.00:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA76A537-6A1B-41D8-A923-24DC77F92E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.00:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA36E65-596D-4E84-A15C-1DF5FA3AAC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320B5684-5006-4BA8-87ED-25C40E90F2DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE9E7F2-68B1-448D-86B6-52B345DD3C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3C98DA-3261-4BEB-8403-BE2E54A7056C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137E9883-BF1D-4B54-A904-AFDE179452A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.50:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "872AEFA4-F7B2-49CF-8279-8BE602D70B95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.50:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "35400232-18B1-4641-8C98-6E8EB3A9C7E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90EFC130-7E02-47AE-AC4E-569B59241FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2745A8-9F99-48AF-A3C9-9659FA542B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57C77E63-E7CF-4EFF-9177-715C1815A0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:10.53:b:*:*:*:*:*:*",
            "matchCriteriaId" : "4D74A8DF-DCD2-41AB-BDC1-A314B3B55DAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-10/0289.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37182",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securethoughts.com/2009/10/hijacking-operas-native-page-using-malicious-rss-payloads/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/1001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/unix/1001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/1001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.opera.com/support/kb/view/939/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/59358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506517/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3073",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2009-10/0289.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securethoughts.com/2009/10/hijacking-operas-native-page-using-malicious-rss-payloads/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/1001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/unix/1001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/1001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.opera.com/support/kb/view/939/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/59358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506517/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T22:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 through 6.0.2900.2180, and 7.0.6000.16711, allows remote attackers to cause a denial of service (CPU consumption) via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer v6 desde v6.0.2900.2180, y v7.0.6000.16711, permite a atacantes remotos producir una denegación de servicio (consumo de CPU) a través de un envío automático de un formulario que contenga un elemento generador de claves, una vulnerabilidad relacionada con CVE-2009-1828."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndIncluding" : "6.00.2900.2180",
            "matchCriteriaId" : "3471C9B5-B59C-4242-927B-C403574A931D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndIncluding" : "7.0.6000.16711",
            "matchCriteriaId" : "B9ADEE72-541B-42CB-BAF8-3071F653DA3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3194/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506328/100/100/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5519",
        "source" : "cve@mitre.org",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "http://websecurity.com.ua/3194/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506328/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3268",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T22:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828."
      }, {
        "lang" : "es",
        "value" : "Google Chrome v1.0.154.48 y anteriores permite a atacantes remotos producir una denegación de servicio (consumo de CPU) a través de un envío automático de un formulario que contenga un elemento generador de claves, una vulnerabilidad relacionada con CVE-2009-1828."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.154.48",
            "matchCriteriaId" : "4E9FA397-22DD-448C-8CC5-93549EAD7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55D5075-D233-42D6-B1D6-77B7599650EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8FF77A-7802-4963-B532-3F16C7BB012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73576CF-76EE-42A3-9955-D7991384B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3194/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506328/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3194/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506328/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T22:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera 9.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a series of automatic submissions of a form containing a KEYGEN element, a related issue to CVE-2009-1828."
      }, {
        "lang" : "es",
        "value" : "Opera v9.52 y anteriores permite a atacantes remotos producir una denegación de servicio (consumo de CPU) a través de series de envíos automáticos de un formulario que contiene un elemento generador de claves, una vulnerabilidad relacionada con CVE-2009-1828."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.52",
            "matchCriteriaId" : "BC7CF5F1-7CB8-4E77-8462-CE1BF0591D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F892EEF-54EC-4EC0-84B3-BD5C216AED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089BEFE3-24B2-4C73-BA25-7C905ED68A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "76AECDD0-C14D-4A68-AF2E-1C41A51089EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D888C22C-41F9-427D-9249-F010891DA48E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FAD06C-830A-4CB6-B9AF-7E093B64B69B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5366D587-7E77-4288-AB31-48108D04E0B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFFC44-A329-4FA5-B57C-FA8892F8226B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9241CFD0-9E61-487F-B076-2D7B8ACEA381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB49750B-DAA1-4417-8384-1F4D47F2227D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1099D38B-82EC-43C9-9DF5-D5EDC19834DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D64030-1877-4F29-8340-93DB6E0F1F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "85184E8A-C42D-4CBD-ACB4-B58752C305D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DA682571-536B-4CD9-A820-47E897B01480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "298457B8-051B-46D0-81B4-C5B63B69EB98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D4BC07-C37E-4F99-8DEA-54A45250050A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECFBC71-7814-4A24-A918-C593673727B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "57824075-E3F7-4B23-B4D6-8417C3147085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "FE078F27-6FC1-466C-8331-A89F8B6FE0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "5839EB88-DF5E-4AB0-899B-DF9F72F5F442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1865A4-E038-4A1C-877D-5A3CFA9576BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "93966A66-4332-4E76-9B1A-2BBF10AF0ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA91E77-301C-48F6-9A57-D5FDCEF743BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49DDEF-681C-4A34-9FF8-17249C42842D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF365891-F3FA-4740-94B2-01F85254A2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42B4261-C511-4F3A-8596-6BD4E343DC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2F38FE-7E98-48B2-B0B2-35312368B21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "63687D75-860D-4A36-B6BB-45BD4268B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BD500741-CF39-4F0C-9F96-6CBDFF8973D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*",
            "matchCriteriaId" : "359941FD-A5CE-43C1-AA76-C1B79BCB08C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9AC78A-CA47-476D-935E-67932BAB98A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E9662C-441F-4AB2-AC4C-30F31C32949A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D681B3-73E6-4257-84B4-DE83F6D659B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E5F2A5-F50F-4085-AB7D-8C91121A429A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E90912E-0CF8-404B-9E86-461497C65A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E19DD71-9447-4946-931F-4866537C8BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54075890-6E0C-4AB7-8BD5-2023419CC251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABC3435-77CD-4591-8282-7ADA60225CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C35850-B79C-4EE4-A6F2-CC5D2304724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "50B797C8-3290-4278-9D4B-A15A14FB8D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEC078C-A8F4-471B-A367-59A86B78590D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E10F658D-D2E4-4789-8172-F8842C3EEA05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81687D99-7444-4205-A7BE-992CC758675F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75C4301-68E9-4A10-B9C5-711252BF629B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC690371-3326-421E-8BAC-14F48840671B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E20418A7-1FA7-45EF-99B5-12D283EA6CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE50982-8026-466C-9F51-867425C9986F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD889EC7-E5D2-4137-B85C-86D7DB5CED27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "97452A26-7231-43BE-B70E-B8D05365CAB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DBA733-467C-4505-8199-DD25A5FFBF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B332FF1C-731D-454C-AA9E-3534040F09E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7965089-8592-47F2-958B-7DBE669BCAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1750B2D-7AC8-45CF-9879-1D0476EEE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBAA39D-01A0-4B6B-926B-C36C238E5258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE4473-88C0-4E28-A5B5-F7383B0E5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9754B270-E01D-415E-9A91-09ECB9B82B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D4682E92-E5E7-4351-959E-25A79CA4271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC41D6-73D4-44E9-87E4-E1E955B9580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5A5E5-3703-44AC-9963-A20A55002B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3E5BEF-3F29-4929-A37C-C49322B19047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0E7B5D-2568-4128-8F99-E74D24A7E991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A04906-7267-4A09-87BF-D639C7CF315B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "76C58A91-23BA-4336-A81B-B7FDFAF6CA91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6E40C4-FA29-4D7A-9018-44154503A68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E48C83-01AE-4A33-A004-14B99792674C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56A2B78-70BD-439B-B1ED-A17FA5EF0990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623E4466-82CC-4BDD-BE25-3BB33B585547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0002A4-8A90-471C-9813-F648D53E4F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECA190-D7D3-4248-A61E-0D87E67E3D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A15E0FA-5570-4C5F-B087-38591D9EBABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9F72B1-F398-4E07-8652-2042ADDB8414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA2F504-6690-4AAD-97A6-6487E450C92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B927D3-D766-4D53-9870-15A7184E4C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FE202A-E068-4ECE-B61D-230EFF0E60B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B43E22F-D894-4763-BF55-C9B77911C8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "4218D36C-CCE7-443B-842B-AA1A2C865734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "3311565E-3971-416B-AC9C-6CF9F4EF0F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC4250E-E638-4015-B5EF-7B5405F7FBFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/3194/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506328/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://websecurity.com.ua/3194/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506328/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3270",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-18T22:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a \"printing DoS attack,\" possibly a related issue to CVE-2009-0821."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 7 desde 7.0.6000.16711 permite a atacantes remotos producir una denegación de servicio (navegador inutilizable) mediante una llamada en bucle a la función window.print, también conocido como \"ataque DoS de impresión\", posiblemente relacionado con CVE-2009-0821."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndIncluding" : "7.0.6000.16711",
            "matchCriteriaId" : "B9ADEE72-541B-42CB-BAF8-3071F653DA3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://websecurity.com.ua/2872/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506328/100/100/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/79354",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6281",
        "source" : "cve@mitre.org",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "http://websecurity.com.ua/2872/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506328/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/79354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-21T19:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in cppcanvas/source/mtfrenderer/emfplus.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allow remote attackers to execute arbitrary code via a crafted EMF+ file, a similar issue to CVE-2008-2238."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer de memoria dinámica en cppcanvas/source/mtfrenderer/emfplus.cxx de Go-oo v2.x y v3.x en versiones anteriores a v3.0.1, previamente llamado ooo-build y relacionado con OpenOffice.org (OOo), permiten a atacantes remotos ejecutar código de su elección a través de un fichero EMF+ modificado. Una vulnerabilidad similar a la CVE-2008-2238."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:go-oo:go-oo:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E878677-3E1E-4986-884F-20F3D89F87AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:go-oo:go-oo:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3FD1AF-3397-4D17-877D-B4053112F874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:go-oo:go-oo:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C9505A5-CC6A-44CC-AC59-FF9B767153B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:go-oo:go-oo:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274B998D-61B2-41FC-9D88-74C2D4EA4401"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cgit.freedesktop.org/ooo-build/ooo-build/commit/?id=49b4e38571912a7d28c4044e5b2bd57e51c77d55",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125258116800739&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125265261125765&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125363445702917&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cgit.freedesktop.org/ooo-build/ooo-build/commit/?id=49b4e38571912a7d28c4044e5b2bd57e51c77d55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125258116800739&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125265261125765&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125363445702917&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-21T19:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Eclipse Help in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27 allows remote attackers to inject arbitrary web script or HTML via unspecified input."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la ayuda de Eclipse del servidor de aplicaciones IBM WebSphere (WAS) en versiones v6.1 anteriores a la v 6.1.0.27 permite a usuarios remotos inyectar codigo de script web o código HTML a través de una entrada sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABBABA44-D18E-4329-9C2B-90828DAD468B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK78917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK78917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-21T19:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27, and 7.0 before 7.0.0.7, does not properly handle an exception occurring after use of wsadmin scripts and configuration of JAAS-J2C Authentication Data, which allows local users to obtain sensitive information by reading the First Failure Data Capture (FFDC) log file."
      }, {
        "lang" : "es",
        "value" : "En WebSphere Application Server (WAS) de IBM versiones 6.1 anteriores a 6.1.0.27 y versiones 7.0 anteriores a 7.0.0.7, no manejan apropiadamente una excepción que se produce después del uso de scripts wsadmin y la configuración de JAAS-J2C Authentication Data, que permite a los usuarios locales obtener información confidencial mediante la lectura del archivo de registro de First Failure Data Capture (FFDC)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABBABA44-D18E-4329-9C2B-90828DAD468B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0905C80-A1BA-49CD-90CA-9270ECC3940C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108457A-50DC-4432-9E30-98ADBEBF2389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8FC820-48D5-4850-82F7-8DA4A18EFF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0661F4A0-A520-4443-B19D-6885920ADFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A553A6E7-64AA-41F2-9B92-4EC715C617B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFBDE57-3895-4841-B23C-06336A7016EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF56870A-F9D3-4544-B63A-EFC2E82A1F7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37796",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK86137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2721",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27014463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK86137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-21T19:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27 allows remote attackers to cause a denial of service via unknown vectors, related to \"an error in fixpacks 6.1.0.23 and 6.1.0.25.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en IBM WebSphere Application Server (WAS) v6.1 anteriores a v6.1.0.27 permite a atacantes remotos provocar una denegación de servicio mediante vectores desconocidos, relacionado con \"un error en fixpacks v6.1.0.23 y v6.1.0.25\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95255265-6D69-46D3-9FFA-8EDB1734375C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4191D3-64AB-482C-9DEF-DD04C4C942CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC6EB31-9707-408B-8BF5-66BD23441A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B73E052-AF4F-4543-AA03-F5B1FA976EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23171B81-C991-467A-95A4-EDDAC59C37BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD75308-7F21-4DDF-AD66-C155CF4B721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2586C584-3258-414B-AB28-1EBA0DBD0B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431C250D-8279-4071-871C-1C7C4DE09B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA175EA-EDC6-4228-8E28-E9BBC981E60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC300B03-7A8F-4E96-B55D-18CC258BBFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF5BB33-4E78-4123-8093-EBEE2F2B5598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45B6F32-5DFF-4833-9F0F-89576724CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C8054A-8581-4936-AF94-291AE56EB4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9A59-DFE4-4566-8719-E6FA4720F06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026EBFCD-0BC1-404B-BC14-292F35BE667A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D74F8-4321-48B3-A33E-FCCFA93013CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2043B836-3950-46A1-89E4-08985DEA0D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B009FD6-9352-4329-B67A-8155FB379889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABBABA44-D18E-4329-9C2B-90828DAD468B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C152D8-CF12-44D9-BDCE-336311BB4B95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK91709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK91709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-21T19:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the postfix user write access to /var/spool/postfix/pid, which might allow local users to conduct symlink attacks that overwrite arbitrary files."
      }, {
        "lang" : "es",
        "value" : "El script postfix.postinst en el paquete postfix v2.5.5 de Debian GNU/Linux y Ubuntu permite acceso de escritura al usuario postfix en /var/spool/postfix/pid, permitiendo a usuarios locales dirigir ataques de enlaces simbólicos que sobrescriban ficheros de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postfix:postfix:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894002C8-F3C1-4241-96FE-C088BBD0FCED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:debian:debian_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D47FA7-B5AF-4580-8BA7-8408D98D1F26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22916E8-84BE-444D-9B99-199FE8E0F665"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2011/dsa-2233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/18/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2011/dsa-2233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/18/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-21T19:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passphrase requirement and decrypt the hard drive by reading this variable, deobfuscating the key, and running a cryptsetup luksOpen command."
      }, {
        "lang" : "es",
        "value" : "QNAP TS-239 Pro y TS-639 Pro con firmware v2.1.7 0613, v3.1.0 0627, y v3.1.1 0815 crea una clave de recuperación no documentada y la almacena en la variable ENCK en memoria flash, permitiendo a usuarios locales saltar el requisito de contraseña y desencriptar el disco duro mediante la lectura de esta variable, desofuscando la clave, y ejecutando un comando cryptsetup luksOpen."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:P/A:P",
            "baseScore" : 5.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:qnap:ts-239_pro_turbo_nas:2.1.7_0613:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE9055C-121F-4DB7-8C31-0C25860EB956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:qnap:ts-239_pro_turbo_nas:3.1.0_0627:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD938AD-4FF6-43F7-BDBA-C751DBE670F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:qnap:ts-239_pro_turbo_nas:3.1.1_0815:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3675EC-CB39-4D51-9D38-D921A67F5085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:qnap:ts-639_pro_turbo_nas:2.1.7_0613:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6B1151-66DD-41AC-BCE2-076B72738CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:qnap:ts-639_pro_turbo_nas:3.1.0_0627:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BE092C1-DE91-4DE2-90CB-7A3BD2B84B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:qnap:ts-639_pro_turbo_nas:3.1.1_0815:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF79B187-CD61-45B6-9D71-3C73D9490970"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.qnap.com/viewtopic.php?f=11&t=11214&start=20#p63346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.qnap.com/viewtopic.php?f=12&t=12104&start=10#p63341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506607/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.qnap.com/viewtopic.php?f=11&t=11214&start=20#p63346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.qnap.com/viewtopic.php?f=12&t=12104&start=10#p63341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506607/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-21T19:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service (application crash) via a long tel: URL in the SRC attribute of an IFRAME element."
      }, {
        "lang" : "es",
        "value" : "Apple Safari en iPhone OS 3.0.1 permite a atacantes remotos provocar una denegación de servicio (fin de la aplicación) mediante una URL tel: larga en el atributo \"SRC\" de un elemento IFRAME."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE370CAA-04B3-434E-BD5B-1D87DE596C10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36386",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-21T19:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions before 4.1.2, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls eval on a long string composed of A/ sequences."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de agotamiento de pila en WebKit.dll en WebKit en Apple Safari v3.2.3, y posiblemente otras versiones anteriores a v4.1.2, permite a atacantes remotos provocar una denegación de servicio (fin de la aplicación) mediante código JavaScript que realiza peticiones de evaluación sobre una cadena larga compuesta de secuencias A/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D70D21-2FFC-4006-92AE-CFD7D5AE99CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC87F61-3463-468A-BF0B-070816BBC3CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EAC196-AE43-4787-9AF9-E79E2E1BBA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36EA71E0-63F7-46FF-AF11-792741F27628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E36485-565D-4FAA-A6AD-57DF42D47462"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/43068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-21T19:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-mail servers via a crafted certificate."
      }, {
        "lang" : "es",
        "value" : "iPhone Mail en Apple iPhone OS, y en iPhone OS para iPod touch, no valida los certificados X.509, permitiendo a atacantes hombre-en-el-medio (man-in-the-middle) suplantar servidores de e-mail SSL de su elección mediante un certificado manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DB23F0-7226-4D0B-A3FA-A801F02EBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.1:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "B669868B-F358-4D5B-9D64-4A462F261553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28FB0CB-D636-4F85-B5F7-70EC30053925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.0.2:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "A14B31DE-AA3D-4FA2-A4F4-0A6A51AFA7FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4AEDE82-E317-4066-A34F-BB3BCD3F53E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "4261E5C1-DC93-437E-B84F-A30380AFDC40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.0:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "079BB54C-25FD-4B26-B171-368911960F76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27319629-171F-42AA-A95F-2D71F78097D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.1:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "DF292FED-19A4-4031-9B1F-151C0146F3B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "5183082C-556F-479F-9FC1-42B59BBB840B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.2:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "AAC3FBF0-F128-412D-9FD5-13BB2EB92DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297F9438-0F04-4128-94A8-A504B600929E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "2FFCFEA4-C5E2-4C46-B8C3-ADCDBA4B85EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.3:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "7E7AA027-8CF9-49BD-A000-82880E41D622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8618621-F871-4531-9F6C-7D60F2BF8B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "4FA51920-223B-4DF4-802C-188F5A8B0563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.4:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "4385635D-46F2-4642-9C78-1346DC120492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824DED2D-FA1D-46FC-8252-6E25546DAE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "2C63C36E-1997-4F44-80AD-E665CE46A278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:1.1.5:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "20DAE911-C037-4F10-82A3-EF42D5FB71D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF40CDA4-4716-4815-9ED0-093FE266734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "02BFDD6F-B9C3-42BB-A84A-828193FAA137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.0:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "0A66D6DC-9A48-4BD6-9E01-0D9FF388457C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "CFD4325B-A86A-4C1B-930F-56C17FB6281D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.1:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "C59B8C50-BF5D-4E9A-8E5B-99B34E974B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "2904DEFA-7769-43DB-B3D0-B552AE8F06A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.0.2:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "D4CE4199-BBF5-4F42-8BBC-BD946079C912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A5D868-0016-44AB-80E6-E5DF91F15455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "0AD5106E-CD7C-4952-A9B1-5F72D99276E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "34346F55-4972-427B-8F96-780FA91DB95D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "B7235341-983F-4578-98DC-39BC278A7556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "AE65CA8B-68CB-428C-AC32-6F9100F9E507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "BA5C2D75-4019-45EB-8AF9-A850B5349507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:2.2.1:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "AD136376-331D-494F-9D12-7E631546E8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863383DA-0BC6-4A96-835A-A96128EC0202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0:-:ipodtouch:*:*:*:*:*",
            "matchCriteriaId" : "F07B3FE7-96B3-493A-A230-5642BA11FBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:3.0.1:-:iphone:*:*:*:*:*",
            "matchCriteriaId" : "4E2507AC-FD19-4A97-B91F-E45AF0C6BA4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/506428/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506428/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-21T19:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox v3.6a1, v3.5.2, y versiones anteriores a v2.x y v3.x en Linux usa una ruta predecible al directorio /tmp para los ficheros seleccionados en la ventana de descargas, permitiendo a usuarios locales reemplazar un fichero descargado de su elección al poner un fichero en la localización /tmp antes de que la descarga ocurra, posiblemente relacionado con el componente Archive Manager. NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D956DC-C73B-439F-8D79-8239207CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E2C7E7-56C0-466C-BB08-5EB43922C4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462E135A-5616-46CC-A9C0-5A7A0526ACC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D44634-A0B5-4F05-8983-B08D392EC742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4105171B-9C90-4ABF-B220-A35E7BA9EE40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20985549-DB24-4B69-9D40-208A47AE658E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A13026-416F-4308-8A1B-E989BD769E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612B015E-9F96-4CE6-83E4-23848FD609E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E391619-0967-43E1-8CBC-4D54F72A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544D626-E269-4677-9B05-7DAB23BD103B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C140E-DC15-4A88-AB8A-8AEF9F4B8164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CD049A-5333-4FF7-AD34-6B74E19BADCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0066576D-D66A-4B59-B5C3-471EEBEE8B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60ED6DAA-9194-4829-BC1A-00F04BE7930A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461163C6-4CA8-4BA9-95A1-136E612CBA6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E9D96-1290-44AB-BF9B-E9E4A803F593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D595F649-ECBE-45E0-8AAD-BCBC65A654B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE6E920-9A4C-431B-89EA-683A22F15ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.6:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "B5969D73-8985-4B52-930D-AEF5D2445F1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jbrownsec.blogspot.com/2009/09/vamos-updates.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36649",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytube.net/Zero-Day-Demos-%28Firefox-Vulnerability-Discovered%29-video.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-53.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=514823",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9641",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://jbrownsec.blogspot.com/2009/09/vamos-updates.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytube.net/Zero-Day-Demos-%28Firefox-Vulnerability-Discovered%29-video.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-53.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=514823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-21T19:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blocks/Common/Src/Configuration/Manageability/Adm/AdmContentBuilder.cs in Microsoft patterns & practices Enterprise Library (aka EntLib) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many \\ (backslash) characters followed by a \" (double quote), related to a certain regular expression, aka a \"ReDoS\" vulnerability."
      }, {
        "lang" : "es",
        "value" : "Blocks/Common/Src/Configuration/Manageability/Adm/AdmContentBuilder.cs en Microsoft patterns & practices Enterprise Library (también conocido como EntLib) permite a los atacantes dependientes del contexto provocar una denegación de servicio (consumo de CPU) mediante un cadena de entrada compuesta por muchos caracteres \\ (barra invertida) seguidos de un carácter \" (comillas dobles\"), relacionado con cierta expresión regular, también conocido como vulnerabilidad \"ReDoS\" (Denegación de servicio mediante expresión regular)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:enterprise_library:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9A6699-874A-4240-B138-3D9D790A70EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:enterprise_library:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "755CF81F-C9B7-4AA8-9EA0-167B096A6801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:enterprise_library:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9738E2-E5D1-4082-991D-65CF7A5F49CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506419/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506419/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-21T19:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed in NASD CORE.NET Terelik (aka corenet1) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many alphabetic characters followed by a ! (exclamation point), related to a certain regular expression, aka a \"ReDoS\" vulnerability."
      }, {
        "lang" : "es",
        "value" : "Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs en WinFormsAdvansed en NASD CORE.NET Terelik (también conocido como corenet1) permite a los atacantes dependientes del contexto provocar una denegación de servicio (consumo de CPU) mediante un cadena de entrada compuesta por muchos caracteres alfanuméricos seguidos de un carácter ! (cerrar exclamación), relacionado con cierta expresión regular, también conocido como vulnerabilidad \"ReDoS\" (Denegación de servicio mediante expresión regular)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D42BF5D-CDD5-475C-9D48-8D659C862F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BD2E52-2232-49FA-B0B0-54C487AD3551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11BACB4F-618D-4C8D-B897-4555ABC6AE09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE516BED-63B9-4248-986F-2DC6ADA8E02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B28785AB-4A88-42A2-B4CC-E17BE15155B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F9054C5-76E0-4127-8571-B4EF19C88F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A07BBED0-A3FB-4E8F-AA93-E1B50A4139EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400FD5D4-A3B2-4B72-8CC2-2DAEE8C443DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24610D30-1AA1-4F05-9657-FED5E36B67DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71ACAB79-64A4-42DF-B5E6-DC704DDE6494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D19C42-DD9B-4B7A-B714-2E8D388D8DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E057CC24-6071-4557-8585-2A33C577017C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD04F591-3773-4A6A-8525-817F2CAD6FA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E888FA9-4E5E-492C-8F65-475ACB3312AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5A9E88-4D43-4CEE-BC27-8665C9F22606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55F3D610-59C2-440F-B200-12FB2387028A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23640347-3356-4CF9-8F06-A0D95D47852A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "676F702B-21DF-461A-9088-237449DC2023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620339D2-B472-467C-A0C1-1D7B53A3350C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B94B046-C129-4A5F-9238-4477FBB71937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28007EF9-690D-4AA9-ADB4-674F89AE2E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB5A92D-97FB-4D3A-B551-18A27855F626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4346B8-CB40-4597-B1E7-8419A3C0B83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCE10A5-652A-4047-B8C8-400F404BC85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D2592E-2FDB-4A7A-A0EA-E305B19D4119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595C5309-EF80-41C4-B2F8-EFD171DE15ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4BC782-F0DB-4E45-8226-97C7E75C0C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D850BC-B14C-4FCC-9496-80A994ED0C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4BFE87-9C43-4BB3-A18F-D00AB12C8FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5392D13A-C9EB-45F3-843A-8AA7C3F310D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasd:corenet1:3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86BD8455-2879-4D78-AAE4-F9A5C5ADA8C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506419/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506419/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3277",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-21T19:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DataVault.Tesla/Impl/TypeSystem/AssociationHelper.cs in datavault allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of an [ (open bracket) followed by many commas, related to a certain regular expression, aka a \"ReDoS\" vulnerability."
      }, {
        "lang" : "es",
        "value" : "DataVault.Tesla/Impl/TypeSystem/AssociationHelper.cs en datavault permite a los atacantes dependientes del contexto provocar una denegación de servicio (consumo de CPU) mediante un cadena de entrada compuesta por un [ (abrir corchete) seguido de muchas comas, relacionado con cierta expresión regular, también conocido como vulnerabilidad \"ReDoS\" (Denegación de servicio mediante expresión regular)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xenu_by:datavault:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E6B304-0BE7-42CF-8E1E-3536E4F3C2AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506419/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506419/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-21T19:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 use the rand library function to generate a certain recovery key, which makes it easier for local users to determine this key via a brute-force attack."
      }, {
        "lang" : "es",
        "value" : "El QNAP TS-239 Pro y TS-639 Pro con firmware v2.1.7 0613, v3.1.0 0627, y v3.1.1 0815 emplea la función \"rand\" de la biblioteca para generar ciertos tipos de claves de recuperación, lo que facilita a usuarios locales adivinar esa clave a través de un ataque de fuerza bruta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:ts-239_pro_firmware:2.1.7:build0613:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5C7FE8-D003-4640-9F64-0B2160236F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:ts-239_pro_firmware:3.1.0:build0627:*:*:*:*:*:*",
            "matchCriteriaId" : "CA882F2B-0BEE-4233-AA06-AA926FF178F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:ts-239_pro_firmware:3.1.1:build0815:*:*:*:*:*:*",
            "matchCriteriaId" : "95C06ACE-A307-485E-A929-C6125F817F73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qnap:ts-239_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F035666A-5CFC-43A2-AD57-20A3F0C5E747"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:ts-639_pro_firmware:2.1.7:build0613:*:*:*:*:*:*",
            "matchCriteriaId" : "C7CFDE40-352B-472F-8448-49CA3CA850FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:ts-639_pro_firmware:3.1.0:build0627:*:*:*:*:*:*",
            "matchCriteriaId" : "73D2A5A6-85A0-4DC9-9DFE-AD36D4F85893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:ts-639_pro_firmware:3.1.1:build0815:*:*:*:*:*:*",
            "matchCriteriaId" : "5F574D92-A200-4883-9D79-BB035B857C63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qnap:ts-639_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1E8394-AE01-4838-8348-7E118350C21F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36793",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506607/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36467",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/36793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506607/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-21T19:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create a LUKS partition by using the AES-256 cipher in plain CBC mode, which allows local users to obtain sensitive information via a watermark attack."
      }, {
        "lang" : "es",
        "value" : "El QNAP TS-239 Pro y TS-639 Pro con firmware v2.1.7 0613, v3.1.0 0627, y v3.1.1 0815 crea una partición LUKS empleando el cifrado AES-256 en modo CBC plano, lo que permite a usuarios locales obtener información sensible a través de un ataque \"watermark\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:qnap:ts-239_pro_turbo_nas:2.1.7_0613:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE9055C-121F-4DB7-8C31-0C25860EB956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:qnap:ts-239_pro_turbo_nas:3.1.0_0627:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD938AD-4FF6-43F7-BDBA-C751DBE670F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:qnap:ts-239_pro_turbo_nas:3.1.1_0815:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3675EC-CB39-4D51-9D38-D921A67F5085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:qnap:ts-639_pro_turbo_nas:2.1.7_0613:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6B1151-66DD-41AC-BCE2-076B72738CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:qnap:ts-639_pro_turbo_nas:3.1.0_0627:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BE092C1-DE91-4DE2-90CB-7A3BD2B84B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:qnap:ts-639_pro_turbo_nas:3.1.1_0815:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF79B187-CD61-45B6-9D71-3C73D9490970"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506607/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506607/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-21T19:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in the find_ie function in net/wireless/scan.c in the cfg80211 subsystem in the Linux kernel before 2.6.31.1-rc1 allows remote attackers to cause a denial of service (soft lockup) via malformed packets."
      }, {
        "lang" : "es",
        "value" : "Error de presencia de signo en entero en la función find_ie en net/wireless/scan.c en el subsistema cfg80211 del kernel de linux anterior a v2.6.31.1-rc1, permite a atacantes remotos provocar una denegación de servicio (cuelgue -soft lockup) a través de paquetes mal formados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.31",
            "matchCriteriaId" : "EA80C8C8-30E5-4DC6-B3CC-2BA506FBEC8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fcc6cb0c13555e78c2d47257b6d1b5e59b0c419a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://patchwork.kernel.org/patch/45106/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/stable-review/patch-2.6.31.1-rc1.bz2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/16/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36421",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fcc6cb0c13555e78c2d47257b6d1b5e59b0c419a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://patchwork.kernel.org/patch/45106/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/stable-review/patch-2.6.31.1-rc1.bz2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/16/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This vulnerability was introduced into the Linux kernel in version 2.6.30-rc1 via upstream commit 2a519311, and therefore does not affect users of Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG.",
        "lastModified" : "2009-09-22T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-22T10:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, and webshot, dated before 20090914, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to cookies."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, y webshot, fechado antes de 20090914, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores sin especificar relacionados con las cookies."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpspot:php_\\&_css_bbs:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5463F0FB-CD71-4CDB-894C-5BCDB05129A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpspot:php_bbs:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F85FCFE-A1C9-4B5F-A54F-EE60A2BF51D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpspot:php_bbs_ce:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA3E12B-7C61-4EEF-B7A2-61A07B8ADC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpspot:php_image_capture_bbs:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15014F65-71F5-4BAF-A54D-6709924F328C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpspot:php_rss_builder:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89132DD2-4977-4FC0-B2F7-745A4AA8E8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpspot:webshot:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8B2D23-C212-4FBB-A1F4-056AA7B59D3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN53591199/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000063.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://phpspot.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36783",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN53591199/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000063.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://phpspot.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-22T10:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, and webshot, dated before 20090914, allows remote attackers to read arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, y webshot, fechado antes de 20090914, permite a atacantes remotos leer ficheros arbitrarios a través de vectores inespecíficos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpspot:php_\\&_css_bbs:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5463F0FB-CD71-4CDB-894C-5BCDB05129A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpspot:php_bbs:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F85FCFE-A1C9-4B5F-A54F-EE60A2BF51D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpspot:php_bbs_ce:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA3E12B-7C61-4EEF-B7A2-61A07B8ADC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpspot:php_image_capture_bbs:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15014F65-71F5-4BAF-A54D-6709924F328C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpspot:php_rss_builder:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89132DD2-4977-4FC0-B2F7-745A4AA8E8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpspot:webshot:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8B2D23-C212-4FBB-A1F4-056AA7B59D3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN65914253/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000064.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://phpspot.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36783",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN65914253/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000064.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://phpspot.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-22T10:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an O_EXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the do_open_permission function even when a create fails."
      }, {
        "lang" : "es",
        "value" : "NFSv4 en el kernel de Linux versión 2.6.18, y posiblemente otras versiones, no limpia apropiadamente un inode cuando se produce un fallo de creación de O_EXCL, lo que causa que los archivos se creen con configuraciones no confiables, tales como bits setuid, y posiblemente permite a los usuarios locales alcanzar privilegios, relacionados con la ejecución de la función do_open_permission incluso cuando se produce un fallo en una creación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=81ac95c5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/21/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=524520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1548.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=81ac95c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=524520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1548.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2009-1548.html",
        "lastModified" : "2009-11-04T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-22T10:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header."
      }, {
        "lang" : "es",
        "value" : "lib/thin/connection.rb en el servidor web Thin anterior a v1.2.4 permite determinar la dirección IP del cliente sobre la cabecera X-Forwarded-For, lo que permite a atacantes remotos suplantar la dirección IP y ocultar la actividad a través de una cabecera X-Forwarded-For."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.2",
            "matchCriteriaId" : "DDB8B96B-7544-4ED1-97AF-BED85A6E02A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3722C121-CA76-4BD6-9B17-059C1051BD3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DFE094-2523-47F6-9310-BE48DF205825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA76B41-8699-4AB9-8569-98D792359C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BDC31A-0F16-4817-802B-C603050D7E83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB082342-11F8-479C-B884-0D3E6074A600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5367748-33ED-4AFC-951A-B3B10B9CA94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627C15A0-669D-4E56-9C31-8B8FBF60F3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D1B13B-96DE-4151-BEEC-2D438CBD4B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90B1079-9276-486F-86B8-B7E2FEF49B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8E67F2-6A68-4DF2-BBFC-CD5FB8401CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D151CA6-9C63-489D-B4AC-19F357E75C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47C57AC-1892-40FE-9F03-DAFBAF509976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB06946-318C-4E86-8F73-43E16A9EFEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F03A874-0753-49F6-A9BD-3798929B3C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57048132-7659-444A-B78A-12B199E935B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F00DA27E-EB76-4773-A7DE-14246C24FFFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8B33E0-77F2-405F-8755-02C30509C652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E5A94C-3262-4AA3-90F0-5E7B45E213A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C61B64-0B37-4F7B-8C47-BCA425E09A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macournoyer:thin:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F2E2ACB-9ED2-4712-8A25-DE288DBF27DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://github.com/macournoyer/thin/blob/master/CHANGELOG",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://github.com/macournoyer/thin/commit/7bd027914c5ffd36bb408ef47dc749de3b6e063a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/12/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://github.com/macournoyer/thin/blob/master/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://github.com/macournoyer/thin/commit/7bd027914c5ffd36bb408ef47dc749de3b6e063a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/12/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-22T10:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of service (kernel OOPS and NULL pointer dereference), as demonstrated by using xcdroast to duplicate a CD.  NOTE: this is only exploitable by users who can open the cdrom device."
      }, {
        "lang" : "es",
        "value" : "La función sg_build_indirect en drivers/scsi/sg.c en el kernel de linux v 2.6.28-rc1 a la v2.6.31-rc8 emplea una variable incorrecta cuando accede a una matriz, lo que permite a usuarios locales provocar una denegación de servicio (Kernel OOPS y una deferencia a puntero NULL), como se ha demostrado usando xcdroast para duplicar un CD. NOTA: esto es explotable únicamente por usuarios que pueden abrir la unidad de CD."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kernel:linux_kernel:2.6.28-rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB876AB2-97A5-42DE-AC69-C564513FA837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31-rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C86BC69-06B6-45C7-9821-45D42D44B240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31-rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0353B9-907F-4B89-9104-2F4434159F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31-rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1FF505-4135-4005-BD1A-3AC913FEE20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31-rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D31D04B-1E65-4FD6-AEED-3F365C65FCDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31-rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CFD647-3926-462F-B264-56E136B74F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31-rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE71B9D7-B52E-426A-831D-ADEDC38318E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31-rc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6FFA2CD-0EC9-4FBB-93DC-80736622CFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31-rc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64401A9-58F5-4CB6-B0E2-A3A2B92659EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31-rc10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89137307-D97D-4D8B-9291-21DE1E6C56D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lkml.org/lkml/2009/9/3/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/9/3/107",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/03/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2009/9/3/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/9/3/107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/03/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG. This issue was introduced by upstream commit 10db10d1, and only affected kernels version 2.6.28-rc1 and later.",
        "lastModified" : "2009-09-22T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-22T10:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link (777), which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory."
      }, {
        "lang" : "es",
        "value" : "La función g_file_copy en glib v2.0 establece los permisos del archivo objetivo sobre un enlace simbólico (777), lo que permite a usuarios locales asistidos por el usuario modificar los archivos de otros usuarios, como se ha demostrados usando Nautilus para modificar los permisos del directorio \"home\" de un usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:glib:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "510CF799-7651-4494-A420-6BD7CAF89A22"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_server:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5FEEB4-95BC-47AF-A6EA-FEF4C2AF1A2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39656",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/08/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1001",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/glib2.0/+bug/418135",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=593406",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/08/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/glib2.0/+bug/418135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=593406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue does not affect the versions of glib2 as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
        "lastModified" : "2009-09-23T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-22T10:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service (guest kernel crash) and read or write guest kernel memory via unspecified \"random addresses.\""
      }, {
        "lang" : "es",
        "value" : "La función kvm_emulate_hypercall en el archivo arch/x86/kvm/x86.c en KVM en el kernel de Linux versión 2.6.25-rc1 y otras versiones anteriores a 2.6.31, cuando se ejecuta en sistemas x86, no impide el acceso a hiperllamadas MMU desde el timbre 0, lo que permite a los usuarios del sistema operativo invitado local causar una denegación de servicio (bloqueo del kernel invitado) y leer o escribir la memoria del kernel invitado por medio de \"random addresses” no especificadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.30",
            "matchCriteriaId" : "E8EFD951-8815-4199-9A17-E0AD64F5F8BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2C3D3E-3765-423F-B41B-35096E5154A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=07708c4af1346ab1521b26a202f438366b7bcffd",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://patchwork.kernel.org/patch/38926/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/18/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/21/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/22/8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1465.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=524124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=07708c4af1346ab1521b26a202f438366b7bcffd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://patchwork.kernel.org/patch/38926/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/18/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/21/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/22/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1465.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=524124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/CVE-2009-3290\n\nThis issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG as KVM (Kernel-based Virtual Machine) is only supported in Red Hat Enterprise Linux 5. A future kernel update in Red Hat Enterprise Linux 5 will address this flaw.",
        "lastModified" : "2009-09-22T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-22T10:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validation, which has unknown impact and attack vectors, probably related to an ability to spoof certificates."
      }, {
        "lang" : "es",
        "value" : "La función php_openssl_apply_verification_policy de PHP en versiones anteriores a la v5.2.11 no realiza adecuadamente la validación de un certificado, lo que tiene un impacto y vectores de ataque desconocidos, probablemente relacionados con la posibilidad de suplantar certificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.10",
            "matchCriteriaId" : "AFD586D6-585F-4259-B845-24D7057678F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92647629-083F-4042-8365-4AD2EBC9C1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BE1120-6370-4470-8586-6581EDF3FD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245C601D-0FE7-47E3-8304-6FF45E9567D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691BB8BB-329A-4640-B758-7590C99B5E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BC4CCE-2774-463E-82EA-36CD442D3A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C478024C-2FCD-463F-A75E-E04660AA9DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1851ADE5-C70C-46E0-941A-6ADF7DB5C126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DA3BA2-AF53-4C9D-93FA-0317841595B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B59D6A-7EDA-4C34-81D6-C2557C85D164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBA40B6-8FDF-41AA-8166-F491FF7F3118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74E2B72-A428-4BB3-B6F8-0AF5E487A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945FF149-3446-4905-BCA1-C397E3497B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E446DBD-FEFA-4D22-9C9D-51F61C01E414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8DE728-78E1-4F9F-BC56-CD9B10E61287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E31CC6-9356-4BB7-9F49-320AAF341E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3E7199-8FB7-4930-9C0A-A36A698940B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467BBA06-7E32-474D-BBBB-72B389D0DB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBEC461-D553-41B7-8D85-20B6A933C21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEF2298-98E8-409F-9205-84817CEF947B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFC00BA-D64D-4407-AC69-FDD9FF013943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D80F2A8B-B57F-4970-867A-55E8187C1502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "49965B80-DC27-4864-BDF0-CBBFF16BFD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8212495A-0F2A-4787-93F2-F6618F9A777B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F0F8FC-C57A-4AEA-A59F-41140347318A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B3138-3DCC-4682-B9A8-920E1110700D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FE287FF5-53C6-43E6-9FEB-28CD6185EB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D2937B3-D034-400E-84F5-33833CE3764D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2AF1D9-33B6-4B2C-9269-426B6B720164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B70263-37AA-4539-A286-12038A3792C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF30D7F-353B-4496-9A89-4EF2BB279E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD97DF34-35AB-4979-96E2-B23DC8556A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7EED44-A15E-451F-BF5B-DB0BECA73C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E727CECE-E452-489A-A42F-5A069D6AF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "149A1FB8-593E-412B-8E1C-3E560301D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC144FA-8F84-44C0-B263-B639FEAD20FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "295907B4-C3DE-4021-BE3B-A8826D4379E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B881352D-954E-4FC0-9E42-93D02A3F3089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA68843-158E-463E-B68A-1ACF041C4E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9592B32E-55CD-42D0-901E-8319823BC820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9BF34B5-F74C-4D56-9841-42452D60CB87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD02D837-FD28-4E0F-93F8-25E8D1C84A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88358D1E-BE6F-4CE3-A522-83D1FA4739E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86767200-6C9C-4C3E-B111-0E5BE61E197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00B416D-FF23-4C76-8751-26D305F0FA0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB6CDDD-70D3-4004-BCE0-8C4723076103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A782CA26-9C38-40A8-92AE-D47B14D2FCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892C89E-9389-4452-B7E0-981A763CD426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "635F3CB1-B042-43CC-91AB-746098018D8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127680701405735&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36791",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/40262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/58185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.2.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/releases/5_2_11.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127680701405735&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/40262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/58185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.2.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/releases/5_2_11.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-22T10:30:00.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to \"missing sanity checks around exif processing.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en PHP en versiones anteriores a la v5.2.11 tiene un impacto desconocido y vectores de ataque relacionados con un \"missing sanity checks around exif processing.\" (comprobaciones de validez no encontradas del procesamiento exif.)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.10",
            "matchCriteriaId" : "AFD586D6-585F-4259-B845-24D7057678F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92647629-083F-4042-8365-4AD2EBC9C1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BE1120-6370-4470-8586-6581EDF3FD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245C601D-0FE7-47E3-8304-6FF45E9567D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691BB8BB-329A-4640-B758-7590C99B5E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BC4CCE-2774-463E-82EA-36CD442D3A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C478024C-2FCD-463F-A75E-E04660AA9DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1851ADE5-C70C-46E0-941A-6ADF7DB5C126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DA3BA2-AF53-4C9D-93FA-0317841595B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B59D6A-7EDA-4C34-81D6-C2557C85D164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBA40B6-8FDF-41AA-8166-F491FF7F3118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74E2B72-A428-4BB3-B6F8-0AF5E487A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945FF149-3446-4905-BCA1-C397E3497B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E446DBD-FEFA-4D22-9C9D-51F61C01E414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8DE728-78E1-4F9F-BC56-CD9B10E61287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E31CC6-9356-4BB7-9F49-320AAF341E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3E7199-8FB7-4930-9C0A-A36A698940B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467BBA06-7E32-474D-BBBB-72B389D0DB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBEC461-D553-41B7-8D85-20B6A933C21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEF2298-98E8-409F-9205-84817CEF947B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFC00BA-D64D-4407-AC69-FDD9FF013943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D80F2A8B-B57F-4970-867A-55E8187C1502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "49965B80-DC27-4864-BDF0-CBBFF16BFD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8212495A-0F2A-4787-93F2-F6618F9A777B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F0F8FC-C57A-4AEA-A59F-41140347318A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B3138-3DCC-4682-B9A8-920E1110700D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FE287FF5-53C6-43E6-9FEB-28CD6185EB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D2937B3-D034-400E-84F5-33833CE3764D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2AF1D9-33B6-4B2C-9269-426B6B720164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B70263-37AA-4539-A286-12038A3792C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF30D7F-353B-4496-9A89-4EF2BB279E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD97DF34-35AB-4979-96E2-B23DC8556A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7EED44-A15E-451F-BF5B-DB0BECA73C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E727CECE-E452-489A-A42F-5A069D6AF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "149A1FB8-593E-412B-8E1C-3E560301D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC144FA-8F84-44C0-B263-B639FEAD20FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "295907B4-C3DE-4021-BE3B-A8826D4379E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B881352D-954E-4FC0-9E42-93D02A3F3089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA68843-158E-463E-B68A-1ACF041C4E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9592B32E-55CD-42D0-901E-8319823BC820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9BF34B5-F74C-4D56-9841-42452D60CB87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD02D837-FD28-4E0F-93F8-25E8D1C84A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00B416D-FF23-4C76-8751-26D305F0FA0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A782CA26-9C38-40A8-92AE-D47B14D2FCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892C89E-9389-4452-B7E0-981A763CD426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "635F3CB1-B042-43CC-91AB-746098018D8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127680701405735&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.php.net/php.announce/79",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36791",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37412",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37482",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40262",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/11/20/2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/11/20/3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/58186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.2.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/releases/5_2_11.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/releases/5_3_1.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127680701405735&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.php.net/php.announce/79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/11/20/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/11/20/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/58186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.2.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/releases/5_2_11.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/releases/5_3_1.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-22T10:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the imagecolortransparent function in PHP before 5.2.11 has unknown impact and attack vectors related to an incorrect \"sanity check for the color index.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en la función imagecolortransparent de PHP en versiones anteriores a la v5.2.11 tiene un impacto desconocido y vectores de ataque relacionados con un incorrecto \"sanity check for the color index.\" (comprobación de validez de un índice de color.)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.10",
            "matchCriteriaId" : "AFD586D6-585F-4259-B845-24D7057678F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92647629-083F-4042-8365-4AD2EBC9C1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BE1120-6370-4470-8586-6581EDF3FD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245C601D-0FE7-47E3-8304-6FF45E9567D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691BB8BB-329A-4640-B758-7590C99B5E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BC4CCE-2774-463E-82EA-36CD442D3A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C478024C-2FCD-463F-A75E-E04660AA9DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1851ADE5-C70C-46E0-941A-6ADF7DB5C126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DA3BA2-AF53-4C9D-93FA-0317841595B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B59D6A-7EDA-4C34-81D6-C2557C85D164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBA40B6-8FDF-41AA-8166-F491FF7F3118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74E2B72-A428-4BB3-B6F8-0AF5E487A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945FF149-3446-4905-BCA1-C397E3497B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E446DBD-FEFA-4D22-9C9D-51F61C01E414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8DE728-78E1-4F9F-BC56-CD9B10E61287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E31CC6-9356-4BB7-9F49-320AAF341E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3E7199-8FB7-4930-9C0A-A36A698940B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467BBA06-7E32-474D-BBBB-72B389D0DB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBEC461-D553-41B7-8D85-20B6A933C21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEF2298-98E8-409F-9205-84817CEF947B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFC00BA-D64D-4407-AC69-FDD9FF013943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D80F2A8B-B57F-4970-867A-55E8187C1502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "49965B80-DC27-4864-BDF0-CBBFF16BFD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8212495A-0F2A-4787-93F2-F6618F9A777B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F0F8FC-C57A-4AEA-A59F-41140347318A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B3138-3DCC-4682-B9A8-920E1110700D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FE287FF5-53C6-43E6-9FEB-28CD6185EB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D2937B3-D034-400E-84F5-33833CE3764D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2AF1D9-33B6-4B2C-9269-426B6B720164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B70263-37AA-4539-A286-12038A3792C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF30D7F-353B-4496-9A89-4EF2BB279E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD97DF34-35AB-4979-96E2-B23DC8556A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7EED44-A15E-451F-BF5B-DB0BECA73C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E727CECE-E452-489A-A42F-5A069D6AF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "149A1FB8-593E-412B-8E1C-3E560301D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC144FA-8F84-44C0-B263-B639FEAD20FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "295907B4-C3DE-4021-BE3B-A8826D4379E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B881352D-954E-4FC0-9E42-93D02A3F3089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA68843-158E-463E-B68A-1ACF041C4E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9592B32E-55CD-42D0-901E-8319823BC820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9BF34B5-F74C-4D56-9841-42452D60CB87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD02D837-FD28-4E0F-93F8-25E8D1C84A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00B416D-FF23-4C76-8751-26D305F0FA0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A782CA26-9C38-40A8-92AE-D47B14D2FCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0892C89E-9389-4452-B7E0-981A763CD426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "635F3CB1-B042-43CC-91AB-746098018D8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127680701405735&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36791",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/58187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.2.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/releases/5_2_11.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127680701405735&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/58187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.2.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/releases/5_2_11.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This problem is not a security flaw in the PHP versions 4.3.5 and later. For further details, see: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3293\n\nPHP versions shipped in Red Hat Enterprise Linux 4 and 5 do not need this fix. We do not plan to address this flaw in Red Hat Enterprise Linux 3.",
        "lastModified" : "2009-11-25T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-22T10:30:00.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The popen API function in TSRM/tsrm_win32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, allows context-dependent attackers to cause a denial of service (crash) via a crafted (1) \"e\" or (2) \"er\" string in the second argument (aka mode), possibly related to the _fdopen function in the Microsoft C runtime library. NOTE: this might not cross privilege boundaries except in rare cases in which the mode argument is accessible to an attacker outside of an application that uses the popen function."
      }, {
        "lang" : "es",
        "value" : "La función popen de la API en el archivo TSRM/tsrm_win32.c en PHP anterior a versión 5.2.11 y versión 5.3.x anterior a 5.3.1, cuando se ejecuta en ciertos sistemas operativos de Windows, permite que los atacantes dependiendo del contexto causen una denegación de servicio (bloqueo) mediante una cadena (1) \"e\" o (2) \"er\" en el segundo argumento (también se conoce como modo), posiblemente relacionado a la función _fdopen en la biblioteca runtime de Microsoft C. NOTA: esto podría no cruzar los límites de privilegios, excepto en casos excepcionales en los que el argumento mode es accesible para un atacante fuera de una aplicación que utiliza la función popen."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.11",
            "matchCriteriaId" : "FFD822BB-D59C-4EFB-8E57-668CA6D477A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.1",
            "matchCriteriaId" : "54C23FEC-84BD-4C66-8B70-F24F4C26066F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56B932B-9593-44E2-B610-E4EB2143EB21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.php.net/bug.php?id=44683",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://news.php.net/php.announce/79",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.php.net/viewvc?view=revision&revision=287779",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/20/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/11/20/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/11/20/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.osvdb.org/58188",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.2.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/releases/5_2_11.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/releases/5_3_1.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.php.net/bug.php?id=44683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://news.php.net/php.announce/79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.php.net/viewvc?view=revision&revision=287779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/20/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/11/20/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/11/20/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.osvdb.org/58188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.2.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/releases/5_2_11.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/releases/5_3_1.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of php as shipped with Red Hat Enterprise Linux 3, 4, or 5, and Red Hat Application Stack v2.",
        "lastModified" : "2009-09-24T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:34.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include/header.php in ClearSite 4.50 allows remote attackers to execute arbitrary PHP code via a URL in the cs_base_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en include/header.php en ClearSite v4.50, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro cs_base_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:richrumble:clearsite:4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D1689C-A4DA-4DA3-85ED-36C64104B957"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/511507/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/40457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2702",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/511507/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/40457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in FSphp 0.2.1 allow remote attackers to execute arbitrary PHP code via a URL in the FSPHP_LIB parameter to (1) FSphp.php, (2) navigation.php, and (3) pathwrite.php in lib/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo PHP en FSphp v0.2.1, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro FSPHP_LIB a (1) FSphp.php, (2) navigation.php, y (3) pathwrite.php en lib/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frank_lichtenheld:fsphp:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DE3023A-A2CD-43F4-BCC6-735853607393"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2704",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.110",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in show-cat.php in FanUpdate 2.2.1 allows remote attackers to execute arbitrary SQL commands via the listingid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en show-cat.php en FanUpdate v2.2.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"listingid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fanupdate:fanupdate:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DFDD3F-8A94-4A33-9494-4C363480FFBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36795",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2703",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.140",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.cfm in CF ShopKart 5.4 beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter in a ViewDetails action, a different vector than CVE-2008-6320."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.cfm en CF ShopKart v5.4 beta, permite a atacantes remotos ejecutar comando SQL de su elección a través del parámetro \"itemid\" en una acción ViewDetails. Vector distinto de CVE-2008-6320."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cfshopkart:cf_shopkart:5.4:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF54448-EF83-449D-9FF9-2B8DB81651CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36442",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Zainu 1.0 allows remote attackers to execute arbitrary SQL commands via the album_id parameter in an AlbumSongs action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en  index.php en Zainu v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"album_id\" en una acción AlbumSongs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shalwan:zainu:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "464B51DC-99B0-40E9-AA3C-BAE906EC9657"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36798",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36453",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2701",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3311",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in RSSMediaScript allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en RSSMediaScrip, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"page\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rssmediascript:rssmediascript:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C4CB-D317-4ACA-A145-06B57B24D560"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/rssms-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36740",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/rssms-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in php/init.poll.php in phpPollScript 1.3 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a crafted URL in the include_class parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en php/init.poll.php en phpPollScript v1.3 y anteriores, cuando register_globals están activados, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL manipulada en el parámetro \"include_class\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tomex:phppollscript:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "0FC8B4BB-E034-4169-909A-BD486B3E075E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36730",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2686",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the comp parameter to (1) index.php and (2) editComments.php, and (3) allow remote authenticated administrators to execute arbitrary SQL commands via the id parameter in a comment action to edit.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en FMyClone v2.3, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"comp\" a (1) index.php y (2) editComments.php, y (3) permite a administradores autenticados ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"comment\" a edit.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fmyclone:fmyclone:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1527AFC-08E0-4205-8C8E-00E5789A1D5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36778",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/58183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/58184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ladders.php in Elite Gaming Ladders 3.2 allows remote attackers to execute arbitrary SQL commands via the platform parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en ladders.php en Elite Gaming Ladders v3.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"plattform\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eliteladders:elite_gaming_ladders:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06939231-5AFB-47B6-A62C-7FECD33E0DC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36732",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2685",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attackers to execute arbitrary SQL commands via the Username field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/index.php en  NeLogic Nephp Publisher Enterprise v3.5.9 y v4.5, permite a atacantes remotos ejecutar comandos SQL de su elección a través del campo \"field\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nelogic:nephp_publisher:3.5.9:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "8200FBD5-65E3-460A-9981-24F6D3EC2F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nelogic:nephp_publisher:4.5:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "6044A3E0-275D-442B-9D2E-0E0D6966ADBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36444",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3316",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the JReservation (com_jreservation) component 1.0 and 1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a propertycpanel action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente  JReservation (com_jreservation) v1.0 y v1.5 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"pid\" en una acción propertycpanel a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jforjoomla:com_jreservation:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E4B987-06B6-44DC-B977-52395C67E11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jforjoomla:com_jreservation:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A4B37-3433-405C-8DFE-C271C615E960"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36774",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36446",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in pages/pageHeader.php in OpenSiteAdmin 0.9.7 BETA allows remote attackers to execute arbitrary PHP code via a URL in the path parameter, a different vector than CVE-2008-0648."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en pages/pageHeader.php en OpenSiteAdmin v0.9.7 BETA, permite a atacantes remotos ejecutar código PHP a través de una URL en el parámetro \"path\". Vector distinto de CVE-2008-0648."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thecodeweasel:opensiteadmin:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5152028C-75FC-47A0-A8A3-F9FB68969C08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36445",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the Roland Breedveld Album (com_album) component 1.14 for Joomla! allows remote attackers to access arbitrary directories and have unspecified other impact via a .. (dot dot) in the target parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el componente Roland Breedveld Album (com_album) v1.14 para Joomla!, permite a atacantes remotos  acceder a directorios de su elección y tener otro impacto a través de ..(punto punto) en parámetro \"target\" a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:breedveld:com_album:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D56F7E-A139-4960-95CE-F25FFACF4D99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36441",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sec list action, a different vector than CVE-2006-1018."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en poems.php en DCI-Designs Dawaween v1.03, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"list\". Vector distinto del  CVE-2006-1018."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dimofinf:dawaween:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EACE66EA-9547-4CD7-999B-4D53CF47F8D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/506616/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16909",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506616/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en scrivi.php en Zenas PaoLink(también conocido como Pao-Link) v1.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de PATH_INFO."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zenas:paolink:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DAD8EF-4D6B-44D3-A536-88280B468CC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58166",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/paolink-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36738",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/paolink-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in SaphpLesson 4.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the CLIENT_IP HTTP header."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en SaphpLesson v4.3, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través de la cabecera HTTP CLIENT_IP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saphplesson:saphplesson:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90B486F-DC87-43E1-9CE8-6109267BC2DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36737",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36422",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Siemens Gigaset SE361 WLAN router allows remote attackers to cause a denial of service (device reboot) via a flood of crafted TCP packets to port 1723."
      }, {
        "lang" : "es",
        "value" : "El router Siemens Gigaset SE361 WLAN permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) a través de una inundación de paquetes TCP manipulados al  puerto 1723."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:siemens:gigaset_se361_wlan_router:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65773CEF-E2D9-4EC2-957B-053CFA3227B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36697",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/58199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506414/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36366",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/58199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506414/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini (BAROSmini) 0.32.595 allow remote attackers to execute arbitrary PHP code via a URL in the baros_path parameter to (1) include/common_functions.php, and the main_path parameter to (2) lib_users.php, (3) lib_stats.php, and (4) lib_slots.php in include/lib/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo PHP en BAnner ROtation System mini (BAROSmini) v0.32.595, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en los parámetros: baros_path a(1) include/common_functions.php, y main_path parameter a (2) lib_users.php, (3) lib_stats.php, y (4) lib_slots.php in include/lib/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:robig:barosmini:0.32.595:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAAE119-C1DB-49F1-8A59-B3630254B917"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include/prodler.class.php in ProdLer 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sPath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en include/prodler.class.php en ProdLer v2.0, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro sPath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andres_g_aragoneses:prodler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "C574B33D-DA8E-4161-B3FA-19AE486D5819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andres_g_aragoneses:prodler:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCD1542F-4FC9-4439-B700-7E416754B7E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Focusplus Developments Survey Manager (com_surveymanager) component 1.5.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the stype parameter in an editsurvey action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente Focusplus Developments Survey Manager(com_surveymanager) para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"stype\" en una acción \"editsurvey\" a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:focusdev:com_surveymanager:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A198EB83-2A0D-4FC5-B0D6-37F906428FB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36464",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2705",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in CMScontrol Content Management System 7.x allows remote attackers to execute arbitrary SQL commands via the id_menu parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en CMScontrol Content Management System v7.x, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id_menu."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmscontrol:cmscontrol:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04EE06C-BCA7-403F-AC43-C84BCFC454CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in WX-Guestbook 1.1.208 allow remote attackers to execute arbitrary SQL commands via the (1) QUERY parameter to search.php and (2) USERNAME parameter to login.php.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en WX-Guestbook v1.1.208, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) QUERY  a search.php y (2) USERNAME a login.php. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webilix:wx-guestbook:1.1.208:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C9E73C-DABD-4652-BA46-BCBBE1F628C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36806",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in sign.php in WX-Guestbook 1.1.208 allows remote attackers to inject arbitrary web script or HTML via the sName parameter (aka the name field).  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en sign.php en WX-Guestbook v1.1.208, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"sName\" (también conocido como el campo \"name\"). NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webilix:wx-guestbook:1.1.208:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C9E73C-DABD-4652-BA46-BCBBE1F628C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36806",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Winplot 1.25.0.1 allows user-assisted remote attackers to execute arbitrary code via a crafted Plot2D (.wp2) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Winplot  v1.25.0.1, permite a atacantes remotos asistidos por el usuario ejecutar código de su elección a través de un archivoPlot2D(.wp2) manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exeter:winplot:1.25.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC642C8-B91C-4F6B-B70C-2FBC0A37A061"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36817",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in cP Creator 2.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the tickets parameter in a support ticket action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en cP Creator v2.7.1, cuando magic_quotes_gpc están deshabilitadas, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"tickets\" en una acción \"support tickets\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpecreator:cp_creator:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FADBA17-CCD1-40A0-B1AE-358A0913AC06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in DDL CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the wwwRoot parameter to (1) header.php, (2) submit.php, (3) submitted.php, and (4) autosubmitter/index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo PHP en DDL CMS v1.0, permite a atacantes remotos ejecutar código PHP de su elección a través del  una URL en el parámetro wwwRoot a (1) header.php, (2) submit.php, (3) submitted.php, y (4) autosubmitter/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ddlcms:ddl_cms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A5D1E-5554-41B6-8CB8-10A38B0367F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the JBudgetsMagic (com_jbudgetsmagic) component 0.3.2 through 0.4.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the bid parameter in a mybudget action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el  componente JBudgetsMagic(com_jbudgetsmagic) v0.3.2 a la v0.4.0 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"bid\" en una acción \"mybudget\" a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sopinet:com_jbudgetsmagic:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC79F9E-848C-4CF7-B151-C750C1089D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sopinet:com_jbudgetsmagic:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90DD4827-A24D-4B68-A188-B2688D15445E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sopinet:com_jbudgetsmagic:0.4.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "1046D14B-ADD0-44D1-AD6B-00CD63595762"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36461",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in koesubmit.php in the koeSubmit (com_koesubmit) component 1.0 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en koesubmit.php en el componente koeSubmit (com_koesubmit) v1.0 para Mambo, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A453A9F-12E9-40FC-8C42-D80C780154E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alibasta:com_koesubmit:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A6E2365-B2EA-4138-904A-9BC655AEEE2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36447",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-23T12:08:35.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component (aka JINC or com_jinc) component 0.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a messages action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente Lhacky! Extensions Cave Joomla! Integrated Newsletters Component (también conocido como JINC o com_jinc)JINC or com_jinc)para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su eleccióna través del parámetro \"newsid\" en un acción \"messages\" a index.php.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lhacky:com_jinc:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1573029B-AF02-45B4-8DF7-EA8E4745FC36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36471",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Remote Management Interface (RMI) for MSL Tape Libraries and 1/8 G2 Tape Autoloaders in HP StorageWorks 1/8 G2 Tape Autoloader firmware 2.30 and earlier, MSL2024 Tape Library firmware 4.20 and earlier, MSL4048 Tape Library firmware 6.50 and earlier, and MSL8096 Tape Library firmware 8.90 and earlier allows remote attackers to cause a denial of service via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad no especificada en la Interfaz de Administración Remota (RMI) para MSL Tape Libraries and 1/8 G2 Tape Autoloaders en StorageWorks 1/8 G2 Tape Autoloader versión de firmware 2.30 y anteriores, Tape Library MSL2024 versión de firmware 4.20 y anteriores, MSL4048 Tape Library versión de firmware 6.50 y anteriores, y MSL8096 Tape Library versión de firmware 8.90 y anteriores, de HP, permite a los atacantes remotos causar una denegación de servicio por medio de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 7.8,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:storageworks_1\\/8_g2_tape_autoloader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.30",
            "matchCriteriaId" : "72CAE62D-B7B1-4DC7-AD10-18B27E68BF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:storageworks_msl2024_tape_library:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.20",
            "matchCriteriaId" : "5BC0783B-0D2A-4BEA-8AC2-D0E23A84A961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:storageworks_msl4048_tape_library:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.50",
            "matchCriteriaId" : "B13322F0-91CD-4CC3-A1A7-95E8313679A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:storageworks_msl8096_tape_library:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.90",
            "matchCriteriaId" : "5C06FCD7-20FE-423E-83AD-2F36FF1BEEF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01868405",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36764",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/58131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2662",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01868405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/58131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the TurtuShout component 0.11 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Name field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente TurtuShout v0.11 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del campo Name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:turtus:turtushout:0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3961E64-C6B1-40F6-B014-9B4D7A811866"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3336",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in auction_details.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL commands via the auction_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en auction_details.php en PHP Pro Bid , permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro auction_id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpprobid:php_pro_bid:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DE9365-1CA1-4FA1-932F-FC1C87714BE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36389",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2661",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Freetag (serendipity_event_freetag) plugin before 3.09 for Serendipity (S9Y) allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el complemento reetag (serendipity_event_freetag) anteriores a v3.09 para Serendipity (S9Y), permite a atacantes remotos ejecutar comandos SQL de su elección a través de un parámetro no especificado asociado con la clave METE en una entrada de un blog.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity_event_freetag:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.09",
            "matchCriteriaId" : "54D83768-FCC7-42B2-8A16-6AD030EBE5B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.s9y.org/archives/210-Security-update-for-Freetag-Plugin.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36706",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36376",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://blog.s9y.org/archives/210-Security-update-for-Freetag-Plugin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in EffectMatrix (E.M.) Magic Morph 1.95b allows remote attackers to execute arbitrary code via a long string in a .mor file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en EffectMatrix (E.M.) Magic Morph v1.95b, permite a atacantes remotos ejecutar código de su elección a través de una cadena larga en un fichero .mor"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:effectmatrix:magic_morph:1.95b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "091D7A5A-66D7-445F-87F7-6329F707EB1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36721",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2658",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in McAfee Email and Web Security Appliance 5.1 VMtrial allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.9 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en McAfee Email y Web Security Appliance v5.1 VMtrial permite a los atacantes remotos leer arbitrariamente archivos a través de vectores desconocidos, como se demuestra en un cierto módulo en VulnDisco Pack Professional v8.9 hasta v8.11. NOTA: como en 20090917, esta información no tiene información de la acción. Sin embargo, debido a que el autor VulnDisco Pack es un investigador confiable, se le ha asignado un identificador CVE con fines de seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:email_and_web_security_appliance:5.1:-:vmtrial:*:*:*:*:*",
            "matchCriteriaId" : "F74E6F29-D3AE-4FCD-B87C-4CFCA4795761"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mcafee:email_and_web_security_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400C7DFE-129B-4BDB-8437-933FAAE01A6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36574",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Per http://www.mcafee.com/us/enterprise/products/virtualization_security/email_and_web_security_appliance_virtual.html\r\n\r\nExperience McAfee Email and Web Security Appliance through the power of virtualization\r\n\r\nWe’ve made it easier than ever to evaluate McAfee Email and Web Security Appliance, our email and web security appliance. Thanks to VMware virtualization technology, you can download a free 30-day software trial—with all of the features and functionality of the appliance. Install it on your server and experience uncompromising protection against spam, phishing, viruses, spyware, and more."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in FreeSSHD 1.2.4 allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en FreeSSHD v1.2.4 permite a los atacantes remotos causar una denegación de servicio  através de vectores desconocidos, como se demostró en cierto módulo en VulnDisco Pack Professional v8.11. NOTA como en 20090917, esta información no tiene información de la acción. Sin embargo, debido a que el autor VulnDisco Pack es un investigador confianza, se le ha asignado un identificador CVE con fines de seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freesshd:freesshd:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9257888-498B-4FA3-B7E8-DE36F673E85D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36506",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow on the Linksys WRT54GL wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.10 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el router inalámbrico Linksys WRT54GL permite a los atacantes remotos ejecutar arbitrariamente código a través de vectores no especificados, como se demuestra en cierto módulo en VulnDisco Pack Professional v8.10 hasta v8.11. NOTA: como en 20090917, esta información no tiene información de la acción. Sin embargo, debido a que el autor VulnDisco Pack es un investigador confianza, se le ha asignado un identificador CVE con fines de seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54gl:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74623411-FCF0-4ECA-8D3E-F7CC6DF8AD65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36571",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in frontend/assets/ajax/checkusername.php in the AlphaUserPoints (com_alphauserpoints) component 1.5.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the username2points parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en frontend/assets/ajax/checkusername.php en the AlphaUserPoints (com_alphauserpoints) componente v1.5.2 para Joomla! permite a los atacantes remotos, ejecutar arbitrariamente comandos SQL a través del parámetro username2points."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphaplug:com_alphauserpoints:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F4650-3E21-451F-9401-D305F25C0767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/36383",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2659",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/9654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/9654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in details.asp in HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropId parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en details.asp en HotWeb Rentals, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro PropId."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hotwebscripts:hotweb_rentals:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBD5470-B5E3-41D8-81FB-9E37C1056C90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to cause a denial of service (infinite loop) via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en SAP Crystal Reports Server 2008 en Windows XP permite a los atacantes causar una denegación de servicio (bucle infinito) a través de vectores desconocidos, como se demuestra en un módulo en VulnDisco Pack Professional v8.3 hasta v8.11. NOTA: como en 20090917, esta información no se tiene información de la acción. Sin embargo, debido a que el autor VulnDisco Pack es un investigador de confianza, se le ha asignado un identificador CVE con fines de seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:crystal_reports_server:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86409332-CE42-450B-8824-18663C8ECA75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36583",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica -heap- en SAP Crystal Reports Server 2008, tiene impacto y vectores de ataque desconocidos, como se ha demostrado en determinado módulo de VulnDisco Pack Professional v8.3 hasta v8.11. NOTA: a fecha de 17/09/2009, este aviso no cuenta con más información. Sin embargo, debido a que el autor de VulnDisco Pack es un investigador fiable, se ha decidido asignarle un identificador al CVE para poder realizar un seguimiento del mismo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:crystal_reports_server:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86409332-CE42-450B-8824-18663C8ECA75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36583",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en AP Crystal Reports Server 2008 permite a los atacantes remotos ejecutar arbitrariamente código a través de vectores desconocidos, como se demuestra en ciertos módudos en VulnDisco Pack Professional v8.3 hasta v8.11. NOTA: como 20090917, esta información no tiene información de la acción. Sin embargo, debido a que el autor VulnDisco Pack es un investigador de confianza, se le ha asignado un identificador CVE con fines de seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:crystal_reports_server:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86409332-CE42-450B-8824-18663C8ECA75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36583",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.10 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el router inalámbrico D-Link DIR-400, permite a atacantes remotos ejecutar código de su elección a através de vectores no especificados, como se ha demostrado en determinado módulo de VulnDisco Pack Professional v8.10 hasta v8.11. NOTA: A fecha de 17/09/2009 este aviso no cuenta con más información. Sin embargo, debido a que el autor de VulnDisco Pack en un investigador fiable, le hemos asignado un identificador CVE a este problema para poder hacer un seguimiento del mismo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:dir-400:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C4EF20-5623-45E4-8517-CFEFCF628182"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36454",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/57791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/57791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a cat action to the home component."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en Datavore Gyro v5.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"cid\" en una acción cat contra el componente home."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datavore:gyro:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE15FBF1-22A2-405D-8188-2C10C9D1E93E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a cat action to the home component."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Datavore Gyro v5.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cid en una acción cat en el componente home -inicio-."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datavore:gyro:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE15FBF1-22A2-405D-8188-2C10C9D1E93E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Subdomain Manager module for Drupal have unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades sin especificar en el módulo Subdomain Manager para Drupal con un impacto y vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roshan_shah:subdomain_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "973F48A8-901B-45FF-BE06-AF4DE40E08BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/572852",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/572852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Node Browser module for Drupal have unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades sin especificar en el módulo Node para Drupal con un impacto y vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kristy_frey:node_browser_module:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A4DE59-A334-4762-AD25-51122B52322B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kristy_frey:node_browser_module:5.x-2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CFE68E9-AFE5-4420-AE54-9E3D4AFDEE90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/572852",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/572852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:01.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the quota_by_role (Quota by role) module for Drupal have unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el módulo quota_by_role (Quota by role) de Drupal, tienen impacto y vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndExcluding" : "7.0",
            "matchCriteriaId" : "B1EFC65F-D384-4412-8780-64428B186D66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/572852",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36330",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://drupal.org/node/572852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3353",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:02.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Node2Node module for Drupal have unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades sin especificar en el módulo Node2Node para Drupal con un impacto y vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:steve_lockwood:node2node:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39D4BCFC-C372-47A2-BA6E-7A08D585FF14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/572852",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/572852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3354",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:02.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Rest API module for Drupal have unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el módulo Rest API para Drupal tienen impacto y vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_sterling_hanenkamp:rest_api_module:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD9951C6-D514-4FC0-B841-4A9620C7B52F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/572852",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/572852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:02.063",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inject arbitrary web script or HTML via the s_r parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en profile.php de Datetopia Buy Dating Site v1.0, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro s_r."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datetopia:buy_dating_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2B1E72-192D-4E78-A3FF-43E9383209AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/buydatingsite-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36662",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/buydatingsite-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:02.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to execute arbitrary SQL commands via the show parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Image voting v1.0 permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro show."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plohni:image_voting:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04321387-FE41-45D9-B2C5-65CA5F513C03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36705",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:02.110",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) h_id, (2) id, and (3) rid parameters to longDesc.php, and the h_id parameter to (4) detail.php, (5) detail1.php, (6) detail2.php, (7) detail3.php, (8) detail4.php, (9) detail5.php, (10) detail6.php, (11) detail7.php, and (12) detail8.php, different vectors than CVE-2008-5865, CVE-2008-5874, and CVE-2008-5875."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en el componente Hotel Booking Reservation System (también conocido como HBS o com_hbssearch) para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"h_id\", (2) \"id\", y (3) \"rid\"\r\na longDesc.php; y el parámetro \"h_id\" a (4) detail.php, (5) detail1.php, (6) detail2.php, (7) detail3.php, (8) detail4.php, (9) detail5.php, (10) detail6.php, (11) detail7.php, y (12) detail8.php. Vectores distintos de CVE-2008-5865, CVE-2008-5874 y CVE-2008-5875."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomlahbs:com_hbssearch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10562B5E-A126-4CC2-826A-0D6004B787F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://e-rdc.org/v1/news.php?readmore=142",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33215",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506444/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36380",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://e-rdc.org/v1/news.php?readmore=142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506444/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:02.140",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows remote attackers to execute arbitrary SQL commands via the user_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en  profile.php en Tourism Scripts Adult Portal escort listing permite a los atacantes remoto, ejecutar arbitrariamente comandos SQL a través del parámetro user_id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tourismscripts:adult_portal_escort_listing:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8D4387-0E86-4A51-95FC-49D94D2A5439"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:02.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Match Agency BiZ 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) important parameter to edit_profile.php and (2) pid parameter to report.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Match Agency BiZ v1.0, permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de los parámetros (1) important -importante- de edit_profile.php y (2) pid de report.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datetopia:match_agency_biz:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9289EB2A-5DB2-4440-9BF0-F8CB4F6D6811"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/matchagencybiz-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36672",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/57969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/matchagencybiz-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:02.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Datemill 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) return parameter to photo_view.php, and st parameter to (2) photo_search.php and (3) search.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Datemill v1.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"return\" a photo_view.php y  \"st\" a (2) photo_search.php y(3) search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datemill:datemill:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DC42CF-F8A9-4291-859D-9A6749B15823"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/datemill-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/57990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/57991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/datemill-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/57990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:02.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in PHP-IPNMonitor allows remote attackers to execute arbitrary SQL commands via the maincat_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php de PHP-IPNMonitor, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro maincat_id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_gibbs:php-ipnmonitor:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62D4B471-D938-4E3F-8842-0C2A20DBF057"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:02.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en printnews.php3 en SZNews v2.7, permite a atacantes ejecutar archivos PHP de su elección a través de una URL en el parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sznews:sznews:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E549418-D5B4-483E-A0F9-44704FA2B6F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/sznews-rfi.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36699",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/sznews-rfi.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:02.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the BUEditor module 5.x before 5.x-1.2 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via input to the \"plain textarea editor.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo BUEditor v5.x anteriores a v5.x-1.2 y v6.x anteriores a v6.x-1.4,, un módulo para Drupal, permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de entradas en el \"el área de texto del editor de texto plano\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ufku_bayburt:bueditor:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "434A317B-67BB-4326-AE25-4BA8B3A0CBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ufku_bayburt:bueditor:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19310183-AA17-4039-BD1C-2CCE65D6E821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ufku_bayburt:bueditor:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC85803-94EF-4A8E-843E-EA529858AB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ufku_bayburt:bueditor:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D88290C-CD64-41F6-A967-AC87CABA4D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ufku_bayburt:bueditor:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52125C12-1F62-4B12-8E95-D2594881BE1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ufku_bayburt:bueditor:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "935D8AFD-C3F7-4CDA-8CEC-4924B561876C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ufku_bayburt:bueditor:6.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4809C1FD-7491-4901-B4BF-896FB0DB9962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ufku_bayburt:bueditor:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BC1F135-35A0-46DD-AA47-D3569026D9BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/572850",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36678",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/57870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/572850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/57870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:02.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long response to a PASV command."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en FTPShell Client v 4.1 RC2, permite a servidores FTP remotos ejecutar código de su elección mediante una respuesta larga al comando PASV."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ftpshell:ftpshell:4.1:rc2:client:*:*:*:*:*",
            "matchCriteriaId" : "0C182093-5889-4746-A960-79D919819009"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36628",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/57899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36327",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2604",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/57899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:02.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in add-ons/modules/sysmanager/plugins/install.plugin.php in Aurora CMS 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the AURORA_MODULES_FOLDER parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en add-ons/modules/sysmanager/plugins/install.plugin.php en Aurora CMS v1.0.2, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro AURORA_MODULES_FOLDER."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:traza:aurora:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D04784A-D575-4859-A490-162C1850A2EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:02.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in navigation.php in An image gallery 1.0 allows remote attackers to list arbitrary directories via a .. (dot dot) in the path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en navigation.php en An image gallery v1.0, permite a atacantes remotos listar archivos de su elección a través de ..(punto punto) en el parámetro \"path\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plohni:an_image_gallery:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8D1B26-A292-487B-800D-A273A9418FC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57943",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36680",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:02.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) index.php and (2) main.php, and the (3) show parameter to main.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad múltiple de ejecución de secuencias de comandos en sitios cruzados - XSS en una galería de imágenes v1.0 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comando web o HTML a travé del parámetro path para (1) index.php y (2) main.php, y el parámetro (3) show para main.php NOTA: la procedencia de esta información es desconocida; los detalles ha sido obtenidos únicamente a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plohni:an_image_gallery:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8D1B26-A292-487B-800D-A273A9418FC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36680",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/57944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/57945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:02.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the adult parameter in a showhoteldetails action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el componente Hotel Booking Reservation System (también conocido por HBS o com_hbssearch) para Joomla! permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro adult -adulto- en una acción showhoteldetails en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomlahbs:com_hbssearch:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10562B5E-A126-4CC2-826A-0D6004B787F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://e-rdc.org/v1/news.php?readmore=142",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33215",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506444/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://e-rdc.org/v1/news.php?readmore=142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/33215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506444/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T16:30:02.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then initiating a backup or restore."
      }, {
        "lang" : "es",
        "value" : "CgiUserConfigEdit en BackupP v3.1.0, cuando las claves SSH y Rsync están en uso en un entorno multiusuario, no limita el acceso a los usuarios desde la función CLientNameAlias, lo que permite a usuarios autenticados remotamente la lectura y escritura de archivos sensibles mediante la modificación de ClientNameAlias para que coincida con el de otro sustema, y después iniciando una copia de seguridad o restaurándola."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:backuppc:backuppc:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0509FE0E-E483-4A6B-9653-F1DBDA321DA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36393",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=518412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00694.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00729.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/57236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=518412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00694.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00729.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T18:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Role-Based Access Control (RBAC) in HP HP-UX B.11.23 and B.11.31 allows local users to bypass intended access restrictions via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en control de acceso basado en rol (RBAC) en HP HP-UX vB.11.23 y vB.11.31 permite a los usuarios locales intenta evitar restricciones de acceso a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C73959-3E02-4847-8962-651D652800EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64BBA96-FB3C-46AC-9A29-50EE02714FE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=125364434020838&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36476",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125364434020838&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2817",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T18:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Apple iTunes before 9.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .pls file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Apple iTunes anterior a v9.0.1 permite a los atacantes remotos ejecutar arbitrariamente código o causar una denegación de servicio (caída de la aplicación) a través de un archivo .pls manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:-:mac:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "DCC723BE-361C-450D-A5FD-992A509251A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:-:windows:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "F067C392-850C-4522-B56B-9E2D6B665D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "49DC3DDC-8758-4D28-B2D5-161994C0E669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D88F7A4A-5A12-4D97-B05F-79487082A573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "EEEFF5EC-A455-4B11-9B22-1E79DE3EC45E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.1.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D0E3B53-AFAE-47F1-B7E3-395406819357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A1309426-7C10-4732-AAC7-5A9D0075DF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5C697C09-C952-4A8F-A1AE-06F423AE7D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.1.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5CF3BB89-1AEF-4B00-AF87-C9BAF7E23EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C9D9076A-A8FB-4E1A-8DC4-32D36D8A74C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:1.1.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "46297466-0506-4767-B49F-9914ACDB2A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "389B617F-29D2-4171-B4E0-9E65BBFAF369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "5C912111-DB93-4019-B4D6-06D5873A8538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "699424D3-E59B-448C-8157-282701759851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "696D5986-155D-446C-A5FE-49C0DF1868AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2B16F29E-E502-406E-9F6F-30664C1DBE61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "60639271-2C1D-41BD-BEA4-8D1CDAB9E224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3370179D-5E8A-4036-AA23-252674C6D807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9DF402D2-E1DA-44D6-B1F9-FE35EF5798CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C9A3F04A-2FC3-48F2-B7C3-A159CB14D3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2B71E645-F15B-43FE-931B-819F9ABA89C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "FB9DFC99-4A94-45CF-A999-0D4A5F153D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "A4F5B268-399F-4CEC-9996-01BD55841141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "E90B5E1A-4D90-4252-8E34-649F33F1A088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "BDD9C9F2-5F86-4606-95B3-A8688D9F4B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:2.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "28C2D685-7064-4F75-9100-21212557933A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1D0D1162-36F7-4F7E-94C0-ABB86B9FC4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:3.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF23791B-F73D-4CF4-BAC3-591FF0F0B0C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3E74DB1C-208B-42DE-9A5E-E9010140C5B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "78B0CA16-044C-44D5-B63F-548D2D0EFEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "262CAFD7-07C2-4C71-B2FC-165A88977881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "018AC033-ACF0-496D-96E1-A03CC4162CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "3395F4BA-C317-4F34-8E47-7AB8F9E7BDF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "3CA9634F-A553-4B72-BBA2-AD7EAE4DFA81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A698DDBE-B79B-4F59-AFBC-0A0682B1EF1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9C210688-EA10-4FE2-A0C2-EA0BBDB1FDE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E91D9ACF-2595-4A9A-B581-46F177300B7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC9B5471-F1B1-4E8B-B991-FDE231BA30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9EBF09D5-D19E-4A84-8979-6FC44D2268B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2320B809-DE44-49AA-9C96-196BF39749C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.2.72:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "F2899F21-F01F-4C95-93AA-40C528EE56DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BDD1695A-271B-4832-B4B1-E5A9D7DE4E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D65B8D79-6147-480A-AC94-627D58644D07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "FD00E684-506B-4ED6-B48C-7D565CDA188C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.6:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "9136E8D6-310D-4D4E-A6AC-2F89218B8666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.6.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "FB8D37E9-1419-4DC3-B74D-7919F5F08AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "28519DE2-61CA-4943-9247-9F6BCB0367DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "78A3FEC0-F135-41F9-A260-52157B283B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1E88F87C-D724-4D06-B770-532E04B0AF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "822F3D7E-810F-41B9-823F-D0B54BD1A3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "79591197-B671-46B2-9EB2-03A75A838CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7CC79D8C-A4FF-4584-BE34-D75D17DF1604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "359C82A7-F6FB-4140-BD11-2B38B323933A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.7.1.30:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A2DD1A9D-4AF4-452A-99C2-AE93611C985D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.8:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "8DEABC06-3FF2-4B6A-AAFF-F38B00BA2967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.8.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "5CBA468F-4D1A-4A17-AC00-C7A377766A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.8.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E9B16D5E-9EF4-4253-8E07-75C8E5E0E33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.9:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6514E3F5-3B5D-43BE-A26D-5167B519F3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.9.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F8E95857-BBE4-461B-885D-61B42D5F4D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:4.9.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "CA2B6657-6E0F-4915-ACB9-219F76D8E38A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "23C49853-8616-4769-90BC-B6D85B24A36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C235A75A-0D08-42AD-836A-B550EF6257BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "10A63976-A435-4F6C-8B09-3001CA3EDC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "7C1EC2F5-FBE8-4EC8-9D28-83C736F2DC01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2D6F98F8-0B9B-4CE5-B1B8-305C6740799A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:5.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "B97DF98E-792B-474E-8820-DF88C4B28A94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "8DDAAC1F-03CA-4DCC-9E9B-A68181261BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "5C86DB01-FCCD-47C8-9F6A-51E2A8BBBD0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "97558F66-FA78-454B-B25C-DA2A39CA1A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D5AE8F59-2DF8-403B-BAB9-6465E618897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D1354FF7-467B-4F76-81BB-28901E01ACDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "B3F084A8-A293-4151-80F6-72C14582E31F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "F37B39AB-2D5B-417E-BCEF-29C18D386C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "509D04DE-62F8-4D80-8CAB-95EA149CA8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7426FDD0-F909-48AB-97C9-C4B25C05E6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A1DCEED8-8174-4319-BAA2-E0A70A7EAFC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9F5C3AD7-0C07-4972-B789-EE5D1B098107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.3:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "372C1609-E534-41E0-87CD-C654BBF0B88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "9730866D-DFE9-448F-9D4E-6B21B3942737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E15502B6-B54C-4817-B929-4512E890A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.4:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "03FCF3E7-0649-43B7-90C8-521E90079156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.4.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "E20BC99A-13FC-446C-A27A-6C2D859C172B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "DD300F1B-EE8F-4606-B024-A14CA2EF4D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "265E54E3-A5BC-42F2-B085-400BDD67BEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.5:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "407AD48A-EA07-456F-B46B-24383E416A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "18D9E538-FDF6-4112-9BF9-FFB48785439A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "C5B51908-CB81-492D-A437-D0508ABE05FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9997A5A2-104E-449E-ADF2-79F7C52C8D1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0E826E91-CBBF-48D8-A4AD-7FB6830F3769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2690D789-B1DC-40A5-8CC6-BBB499E9A550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "5B892A2F-6052-41BE-B74F-7A81C7C1C794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "066FC8C7-5A0B-4B2E-A51E-BFB42153FD21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8879A44A-8EFC-4F3B-9187-371EEA971AEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.1.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0D2412E1-745B-4CFC-B075-1960A1410335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BB11F50-AD2A-438B-8028-29AC8AF9AB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "45F36172-97A7-4767-BC9E-8DC0444A8635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F9BD3983-B891-41D2-88A5-25B98F89B5F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.2.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "D0D889C7-320C-4674-834F-93C8B1701EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "63EC82F8-9726-41B5-821E-2782D211F9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "23B4660B-D22B-4AC5-B6F2-87F83A2251A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B0A35E88-2C3D-40B7-9268-F46AB909B198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "7F61B45F-86CA-43F6-BA12-62AB0FBAD352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC37C091-02B8-4B39-9253-52C1008ADEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7E95C92E-ED71-4260-8648-DDBC098A513E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.3.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9F7D1E31-E28F-4EAD-AAE5-01AE478003B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "70A4EEE2-1DD2-4936-8939-4683523670B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "31403D57-0D0F-46D8-8F89-A6CC5B6AAFAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "91FB2868-DDF9-4D33-B78C-2A5180F9D260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "95B58CD1-03CB-4C35-A290-7157941D210D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F7A7BAD1-61DE-4FCE-A2ED-10B7D7837A93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "AEEC5C0E-DDC5-4B28-8C04-DF69C152E1AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A27B736F-317F-4538-AA3B-72D6EF0D2D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A44D692D-C489-4853-91E1-4AF638309A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "2F688163-C543-4D58-BF71-DF50FFB0A112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.4.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "481E736B-0A83-4422-B1D3-4BD0F9565A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3BB09ABD-C1F1-4101-BDC2-FC3E8C422631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.5.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "17DE00AF-2551-4C20-9670-9B39C1E3C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.5.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0C0CB6DE-46C4-4F9D-B8FD-47C01922D2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A7448F89-CC4A-4B18-887F-B47C0B57404C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "9A404797-C734-4A70-BC32-6AED52DD96AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "040B2DB5-8F7D-4272-A0D1-2872B289B125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "4F173E7D-3EEC-4698-B0FE-5CCE6F990829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EA53A8ED-07F9-4882-A253-9E2FDAB731F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "1A957B0E-9A86-40D4-8A39-01895C32838A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "B2943C2E-0DDD-498A-9439-E9394CB06081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1AC8825C-76AD-4640-A5CE-7557DF74133D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.6.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "0B7DBB76-5A86-42A3-8A0A-19D616357619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D41DA19A-4403-40A8-A3DB-01A12FD4F267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "2EFA38A0-EA7C-40C7-B9B7-FE9D9EBB95A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC16747F-9F32-4186-9824-487163276EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "25E7EF0A-D79E-44E3-B0D4-3C6E8F6FD666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7990DED7-1E8B-4787-A057-BFEF14462157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:7.7.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "F2043A3A-3578-42D8-AF54-7C8073CA0DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "317FB35B-18E2-437F-B328-1844D6C75B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C0A6DD25-D4A7-42C4-90AB-005B682B45BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "8524DF4C-9607-42A9-92DF-815F501C2133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7D4903B1-40F3-4137-9F4C-07EC7D208674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0.0:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "E7A71D45-7715-4B1A-BC64-6F6287A324FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "17517493-027E-4844-85DD-D8ABCDEB1BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "0D450451-C7BB-429D-8FFA-C3706303127B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.0.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "5A653FFB-16BF-439D-A03A-1C9FB6B6AB16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "3CA2DDCE-8EB9-4FB8-AD64-4F2C7A1D811B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "891B1042-2F02-4D3A-9F2E-2567B2C0A63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "932EB8E5-5132-487A-B65E-4D3922E1A30F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.1.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "36690CCC-AA84-4328-9BA5-F26556B1EBE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "FBC11A8C-EE81-4BF1-9FC6-4A7D6981BEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.2:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "9CAB77AB-531A-43DD-8353-598941AC4128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "91DA516E-1132-40C9-B6A6-EFB4369EECA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:8.2.1:-:windows:*:*:*:*:*",
            "matchCriteriaId" : "031526F9-4D73-4D0D-90A1-ED6D6B3CA467"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3884",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36478",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Sep/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-24T18:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the (1) iscsiadm and (2) iscsitadm programs in Sun Solaris 10, and OpenSolaris snv_28 through snv_109, allow local users with certain RBAC execution profiles to gain privileges via unknown vectors related to the libima library."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades sin identificar en  los programas (1) iscsiadm y (2) iscsitadm en Sun Solaris 10 y OpenSolaris snv_28 a la snv_109, permite a usuarios locales obtener privilegios a través de vectores desconocidos relacionados con la biblioteca libima."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-119090-33-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-261849-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-119090-33-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-261849-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-25T22:30:06.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the IDoBlog (com_idoblog) component 1.1 build 30 for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter in a profile action to index.php, a different vector than CVE-2008-2627."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente DoBlog (com_idoblog) v1.1 build 30 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"userid\" en una acción \"profile\" de index.php, siendo una vulnerabilidad diferente que CVE-2008-2627."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idojoomla:com_idoblog:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87C1691C-E132-47B7-A368-4B7E4C5BD803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-25T22:30:09.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Plume CMS 1.2.3 allow (1) remote authenticated users to execute arbitrary SQL commands via the m parameter to manager/index.php and (2) remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an edit_link action to manager/tools.php.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Plume CMS v1.2.3 permite (1) a usuarios autenticados remotamente ejecutar comandos SQL de su elección mediante el parámetro \"m\" de manager/index.php y (2) a administradores autenticados remotamente ejecutar comandos SQL de su elección mediante el parámetro \"id\" en una acción \"edit_link\" de manager/tools.php. NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plume-cms:plume_cms:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1B8EA7-E01F-4DAD-8A53-5F190E9854E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36277",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.senseofsecurity.com.au/advisories/SOS-09-006.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/36277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.senseofsecurity.com.au/advisories/SOS-09-006.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-25T22:30:09.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en el módulo Publisher v2.0 para Miniweb permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"historymonth\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intesync:miniweb:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2694BB6-5DEB-48F5-9C62-CBE04F005919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35869",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-25T22:30:09.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script or HTML via the (1) begin parameter and the (2) PATH_INFO."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index.php en el módulo Publisher v2.0 para Miniweb permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante (1) el parámetro \"begin\" y (2) \"PATH_INFO\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intesync:miniweb:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2694BB6-5DEB-48F5-9C62-CBE04F005919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35869",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-25T22:30:16.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1."
      }, {
        "lang" : "es",
        "value" : "login.php en Zenas PaoBacheca Guestbook v2.1, cuando está habilitado \"register_globals\", permite a atacantes remotos saltar la autenticación y obtener acceso de administrador al poner el valor 1 en el parámetro \"login_ok\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zenas:pao-bacheca_guestbook:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29556A62-90D9-41C7-8ADF-E40439A0418E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36023",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9293",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/56757",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52100",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/36023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/56757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-25T22:30:16.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "login.php in Zenas PaoLiber 1.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1."
      }, {
        "lang" : "es",
        "value" : "login.php en Zenas PaoLiber v1.1, cuando está habilitado \"register_globals\", permite a atacantes remotos saltar la autenticación y obtener acceso de administrador al poner el valor 1 en el parámetro \"login_ok\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zenas:paoliber:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90B10C32-3042-4FEB-A8C0-840A1F696936"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36023",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/56758",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/56758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-25T22:30:16.110",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1."
      }, {
        "lang" : "es",
        "value" : "login.php en Zenas PaoLink v1.0, cuando está habilitado \"register_globals\", permite a atacantes remotos saltar la autenticación y obtener acceso de administrador al poner el valor 1 en el parámetro \"login_ok\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zenas:paolink:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DAD8EF-4D6B-44D3-A536-88280B468CC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36023",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/56756",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/56756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-25T22:30:16.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in MaxCMS 3.11.20b, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) is_projectPath parameter to includes/InstantSite/inc.is_root.php; GLOBALS[thCMS_root] parameter to (2) classes/class.Tree.php, (3) includes/inc.thcms_admin_mediamanager.php, and (4) modul/mod.rssreader.php; is_path parameter to (5) class.tasklist.php, (6) class.thcms.php, (7) class.thcms_content.php, (8) class.thcms_modul_parent.php, (9) class.thcms_page.php, and (10) class.thcsm_user.php in classes/; and (11) includes/InstantSite/class.Tree.php; and thCMS_root parameter to (12) classes/class.thcms_modul.php; (13) inc.page_edit_tasklist.php, (14) inc.thcms_admin_overview_backup.php, and (15) inc.thcms_edit_content.php in includes/; and (16) class.thcms_modul_parent_xml.php, (17) mod.cmstranslator.php, (18) mod.download.php, (19) mod.faq.php, (20) mod.guestbook.php, (21) mod.html.php, (22) mod.menu.php, (23) mod.news.php, (24) mod.newsticker.php, (25) mod.rss.php, (26) mod.search.php, (27) mod.sendtofriend.php, (28) mod.sitemap.php, (29) mod.tagdoc.php, (30) mod.template.php, (31) mod.test.php, (32) mod.text.php, (33) mod.upload.php, and (34) mod.users.php in modul/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión de archivos remotos PHP en MaxCMS versión 3.11.20b, cuando register_globals está habilitado, permiten a los atacantes remotos ejecutar código PHP arbitrario por medio de una URL en el (1) parámetro is_projectPath en el archivo includes/InstantSite/inc.is_root.php; parámetro GLOBALS[thCMS_root] en los archivos (2) classes/class.Tree.php, (3) includes/inc.thcms_admin_mediamanager.php, y (4) modul/mod.rssreader.php; parámetro is_path en los archivos (5) class.tasklist.php, (6) class.thcms.php, (7) class.thcms_content.php, (8) class.thcms_modul_parent.php, (9) class.thcms_page.php, y (10) class.thcsm_user.php en classes/; y (11) includes/InstantSite/class.Tree.php; y el parámetro thCMS_root en los archivos (12) clases/class.thcms_modul.php; (13) inc.page_edit_tasklist.php, (14) inc.thcms_admin_overview_backup.php, y (15) inc.thcms_edit_content.php en includes/; y en los archivos (16) class.thcms_modul_parent_xml.php, (17) mod.cmstranslator.php, (18) mod.download.php, (19) mod.faq.php, (20) mod.guestbook.php, (21) mod.html.php, (22) mod.menu.php, (23) mod.news.php, (24) mod.newsticker.php, (25) mod.rss.php, (26) mod.search.php, (27) mod.sendtofriend.php, (28) mod.sitemap.php, (29) mod.tagdoc.php, (30) mod.template.php, (31) mod.test.php, (32) mod.text.php, (33) mod.upload.php, y (34) mod.users.php en modul/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:databay:maxcms:3.11.20b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5750B559-FF5B-4CB4-B2C3-80434B6EEC03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36105",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2136",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-25T22:30:16.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in includes/inc.thcms_admin_dirtree.php in MaxCMS 3.11.20b allows remote attackers to read arbitrary files via directory traversal sequences in the thCMS_root parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en includes/inc.thcms_admin_dirtree.php en MaxCMS v3.11.20b permite a atacantes remotos leer ficheros de su elección mediante secuencias de salto de directorio en el parámetro \"thCMS_root\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:databay:maxcms:3.11.20b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5750B559-FF5B-4CB4-B2C3-80434B6EEC03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36105",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2136",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-25T22:30:16.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/file_manager/special.php in MaxCMS 3.11.20b allows remote attackers to execute arbitrary PHP code via a URL in the fm_includes_special parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en includes/file_manager/special.php en MaxCMS v3.11.20b permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"fm_includes_special\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:databay:maxcms:3.11.20b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5750B559-FF5B-4CB4-B2C3-80434B6EEC03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36105",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2136",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-25T22:30:16.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web script or HTML via the subject field in a ticket."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Kayako SupportSuite v3.50.06 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el campo \"subject\" en un ticket."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:supportsuite:3.50.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92135838-7596-42DD-B04A-B8ABFF790817"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36253",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngenuity.org/wordpress/2009/08/08/ngenuity-ticket-subject-persistent-xss-in-kayako-supportsuite/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505637/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ngenuity.org/wordpress/2009/08/08/ngenuity-ticket-subject-persistent-xss-in-kayako-supportsuite/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505637/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-25T22:30:16.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafted .wav file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Easy Music Player v1.0.0.2 permite a atacantes remotos ejecutar código de su elección mediante un fichero .wav modificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otbcode:easy_music_player:1.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9949B8D9-05C0-48F8-8172-BD4DECEBE493"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36267",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-25T22:30:16.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code via a long string in a .pls playlist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Pirate Radio Destiny Media Player v1.61 permite a atacantes remotos ejecutar código de su elección mediante una cadena larga en un fichero .pls de lista de ejecución."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pirateradio:destiny_media_player:1.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEC1F99-E9C3-4D60-A583-040867D04055"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-25T22:30:16.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in Allomani Mobile 2.5 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en login.php en Allomani Mobile v2.5 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"username\" en una acción de login."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:allomani:mobile:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D69F736F-A006-4B71-86D7-58544841254D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2029",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-25T23:30:02.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and earlier 9.x versions; 8.1.6 and earlier 8.x versions; and possibly 7.1.4 and earlier 7.x versions allows remote attackers to cause a denial of service (application crash) via a PDF file with a large number of [ (open square bracket) characters in the argument to the alert method. NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de consumo de pila en Reader y Acrobat de Adobe versiones 9.1.3, 9.1.2, 9.1.1 y  anteriores a versiones 9.x; versiones 8.1.6 y anteriores a versiones 8.x ; y posiblemente versiones 7.1.4 y anteriores a versiones 7.x, permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) por medio de un archivo PDF con un gran número de caracteres [ (corchete abierto) en el argumento al método de alerta. NOTA: algunos de estos datos fueron obtenidos de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AC8F85CD-8371-4B36-8D6A-8B2CA580631B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "FE88C274-CC72-4341-9BF6-1924054A12FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "507C02CF-7E81-4131-99DE-63E4EEC45F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "47EBEF8E-3C53-41D5-B344-297ED7C432F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "DC0DF265-984D-462D-878E-612783BF0BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0335D33B-20D8-483F-AB5E-E2517F2F900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2341215F-97A7-40B6-B618-7FF022C7CFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D61F0564-59B9-4811-B7FD-BA044C6A94AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9C9A3E43-7334-44B0-BF01-04BB19B6FE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D3E43C1B-D76D-4486-AE7A-943D34D0A92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "F52F86E7-E845-48A5-9CC4-98E6DAA43C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*",
            "matchCriteriaId" : "60B53243-BF52-4028-8345-17636668A830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "CC9D669B-7E9D-4F39-894A-D9438000F2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0D9CA54D-9D60-4064-B6AC-8CED8D064465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "55836D2A-487E-4B94-AC48-75A427D414F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E102FB9C-DE4B-481D-8F21-20143DDE3992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "023C5C61-6629-480E-93AD-5F2691E51AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "0E16B425-B123-4BA3-AC93-5F400ED8F6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C6F47894-50FB-4192-A3CC-D944124F08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "5D6C9969-DFEF-4059-BE92-28969930EACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "EA23452E-F5C7-4756-8245-1F398BA78E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "21113403-CA7D-4082-9516-C672C9A487C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "8F04372D-60A1-4407-8CF1-113262846783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*",
            "matchCriteriaId" : "C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "56691A9A-4C98-4D5F-9734-B225F534CC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "43F1C1B8-20B5-4534-A753-19EC415D0E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "74B6AF0A-DBEA-4EBD-A528-80AE31386375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF485FB-3317-4C89-B636-F22FF19B00BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5849F63A-4E06-411F-95F0-A40B88F0C609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CDBD40-C67F-4F59-88CF-5C0953056420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F234ECA6-375B-493B-A659-F013DAEE5B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5C251D2-4C9B-4029-8BED-0FCAED3B8E89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35148",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2862",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-09-28T19:30:01.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Object Groups for Access Control Lists (ACLs) feature in Cisco IOS 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to bypass intended access restrictions via crafted requests, aka Bug IDs CSCsx07114, CSCsu70214, CSCsw47076, CSCsv48603, CSCsy54122, and CSCsu50252."
      }, {
        "lang" : "es",
        "value" : "Los \"Object Groups\" (grupos de objetos) para la funcionalidad de listas de control de acceso (ACLs) en Cisco IOS v12.2XNB, v12.2XNC, v12.2XND, v12.4MD, v12.4T, v12.4XZ y  v12.4YA permiten a los usuarios remotos evitar las restricciones establecidas a través de peticiones modificadas. También conocido como IDs CSCsx07114, CSCsu70214, CSCsw47076, CSCsv48603, CSCsy54122 y CSCsu50252."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17AA0C3D-7C96-4D2E-91E5-232536245ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D57ACB3-4ADC-4FBE-BA46-395F277B9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2916FA5-1FFF-48FB-A079-693AD3444CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4963A243-74FA-43AD-9645-C9FAD527A6E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C6EACA-35BE-4032-93DA-5F738AEE0F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58338",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18876",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8119.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36495",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022933",
        "source" : "psirt@cisco.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "psirt@cisco.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://osvdb.org/58338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8119.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2863",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-09-28T19:30:01.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the Firewall Authentication Proxy feature in Cisco IOS 12.0 through 12.4 allows remote attackers to bypass authentication, or bypass the consent web page, via a crafted request, aka Bug ID CSCsy15227."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en la función Firewall Authentication Proxy de Cisco IOS v12.0 hasta la v12.4 permite a atacantes remotos evitar la autenticación, o saltarse la página web de la autorización, a través de una solicitud debidamente modificada. Se trata del Bug ID CSCsy15227."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FA075D-4A9E-44EE-90CF-23947C9040EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC17E231-9256-4600-A33B-238E7E83CF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7126E176-D739-4102-8F10-1EEB8C6A219D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A85892-C3AB-4920-A949-A71BD0332D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752C3C6B-910D-4153-A162-DF255F60306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD4A33B-B13E-40C6-B47F-A406ACC6664F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E8AF76-0A1D-4BAE-BF10-D63080352E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E5CC41-1344-4A65-A653-8012ACE2CF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71FB7128-CF11-4903-97D7-418403A03CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A273401-9394-4BC3-879C-DE3EFC09B3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884753D4-3AF0-4723-9D51-26BA7B4CA533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB103ED-B170-4193-84CD-4C59F4D6A10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D55886-268F-4E4D-B00F-8A5D97A73BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E314B0F7-1A27-483E-B3B3-947A5561281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B838C9-E60E-46A3-A5FB-4F67291D0851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F75542-F2C5-4CEB-B655-E0620408A3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC41749-91FC-43DB-A52F-AC3E3A2205C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0912492E-565A-4559-ABB8-D2898F06CF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD6421A-D8C4-4A3E-9497-4AC130CFE597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ira:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2424530B-2353-48F2-A076-0C44AAA4C89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2irc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "113CC627-7381-49DF-B384-CC70FB795EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7111CAE-9279-49DA-B05A-046BB3EFA85F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E186AB2F-8C5B-45E0-9194-BF66DA64F772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32DCDA3-76B6-423C-9AF1-B65F19077909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCE26DD-FE65-4041-AB4D-9C7A16EE175C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE88965B-D148-43EB-9FC6-2EF5E5C917FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D035A35-D53E-4C49-B4E4-F40B85866F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1579A2D-955F-4CC6-9F94-9D40C669D903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05A548B-C443-4C15-B636-64C1F9B9860D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F4B373-490C-463F-B518-89D0CABB852C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sed:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2B4600-550F-4D5D-9BBD-E035025677BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2see:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F42A6D9-8CC3-49AF-AA56-96894CCE5AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sef:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4474AB2-AFF5-46F1-9066-54A4D6FA98C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2seg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D81068C-7E72-4D5E-84CA-5942B9E8AB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85ABE5E-7900-4A9C-A945-48B293EF46B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E166F3-931A-4997-B7B2-F2AD19C6F209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C38FE9-CEC6-4C5C-A4FD-CCD1D50BD040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A892B3F0-5A31-4086-8AB5-F06E68588EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0DA930-86CE-4D17-BD41-9C4E47D8088F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC70491B-F701-4D33-A314-C686469DBD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A672BD-87AE-424D-8735-073BBE9CE164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C033E3-184B-4AC1-B10D-8318FEAF73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A68D177-B028-4025-BD7B-82ACDB2D1E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485ACF9E-1305-4D71-A766-5BE1D748AAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7CCDB53-4F8B-4B90-9929-4E94CF414CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C03B0702-070F-48D5-9CBC-DB36D409A4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C1C831-556D-4634-AA24-6D64943ED275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075CD42D-070A-49BA-90D9-E7925BB41A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746DDC61-3981-4E93-A7EE-C120E0265485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21147732-FA22-4728-B5F2-D115B78A8EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE03B1E-1522-4143-A019-B19E1F605A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B40548F-3914-4227-9E4C-F1B34071C069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B72E-6862-4115-9A0B-574089A94289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB42063-9DB5-42DB-825A-53C6DBB51A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5C90EE-A9C0-461C-9E89-732BFA9BD066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74B6350-C2F8-4786-8E32-2ED6C188A5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E26473-A8EF-44C5-B550-5E0B86D31291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663FE3CE-FA09-46A2-9C0D-2797D9137A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D49D6-0624-41CE-829E-49E7EA679EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059FBAA6-3127-4DF9-99AD-AA3A16317B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0E376F-64E1-4632-9A8E-11DC99FB245F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF440B52-C6AE-4608-BE71-01B354D37BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE72804E-600D-47FA-B3BF-36BD3CF13A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B41182-7AA8-49D1-BAC3-EAF312E43553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11BBB83-147B-4FBF-B263-77FCCFB2D92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C26842-FF50-436F-8DB6-15A70082CD1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574FFD6F-D56C-41DB-A978-E501BA3CA5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11790F38-3720-45CF-9FD4-A8E5867684D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE2282B-6693-4E4B-8662-501EBC14CD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83649EC-61A5-4937-93F4-42D082023382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D8830A0-E816-40C4-8743-A9E0994BA922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332B0446-4D8B-414B-B572-84B45D5643AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B418CFDD-AF36-46F9-B347-B34E72100F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F12741-69FB-46DD-A670-8461492B338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5688D88-A550-43EB-8854-2E132EC71156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FC4904-1F4D-4E10-AF95-911B07827598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC3706F-B00A-405E-917E-7FD5217E0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595DCBA-E6F2-4551-A804-4DBB137F076B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1938D118-C07F-4BEC-8030-947F099BFCB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7414D32-88A1-416E-A717-3F47B6D1BE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B78181E-E1D1-4C25-85DE-CA46BBF21765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1CD80F-E898-41CE-8A86-28C2F48B928A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF610051-1638-4C1B-9864-11E34EFC4DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78260223-50C0-48F8-9A65-AE67489E602C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFED1FFB-899D-4A48-9CCA-0B8737AE1408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883FA166-2973-42BA-842D-28FBDBFEAC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4362045B-7065-4FF9-A977-B3DA7894F831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC27E79D-6B4B-4839-9664-DFE821C45C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4963A243-74FA-43AD-9645-C9FAD527A6E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C6EACA-35BE-4032-93DA-5F738AEE0F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67621EA-25D8-47C2-ADEA-512E38F2FFE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58340",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18882",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8132.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36491",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022935",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53453",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/58340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8132.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2864",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-09-28T19:30:01.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g), 6.x before 6.1(4), 7.0.x before 7.0(2a)su1, and 7.1.x before 7.1(2) allows remote attackers to cause a denial of service (service restart) via malformed SIP messages, aka Bug ID CSCsz95423."
      }, {
        "lang" : "es",
        "value" : "Cisco Unified Communications Manager (también conocido como CUCM, antiguamente como CallManager) v5.x anterior a v5.1(3g), v6.x anterior a v6.1(4), v7.0.x anterior a v7.0(2a)su1 y v7.1.x anterior a v7.1(2) permite a usuarios remotos provocar una denegación del servicio (reinicio del servicio) a través de mensajes SIP malformados. También conocido como Bug ID CSCsz95423."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5865997-F8B2-4ABB-96DF-3AE691A7CE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9211420-9F35-4872-879A-5F7CA29C6299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "163B798C-B207-4CA6-AF8A-5955F5B89A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7DD4B55-4C68-45CD-988E-D470C26E5E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "48C1B081-1FD7-4BBD-84BD-E1E5F80C74FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC32C417-3E61-4892-9A42-C31C6D62F09D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(4a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3841B111-FEFE-4367-AFF0-B7F17D468E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(4c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DE9B3F9-6650-4568-B5FB-C228BD367002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC17139-DB98-4C59-B29B-1B792C67EB97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "949045EF-8CB3-453A-8C4C-9B0B12775396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "569E4CE4-119A-432D-9EE0-01E19DC9E918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.1\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "99495B1F-90E6-4405-AA08-2764D6EB34DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E60E9F-A0F8-4B3C-9DB3-8D5BE3D5EC6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.1\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A8CC01-1C2B-44A1-9CD6-4BD375FA8DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.1\\(2b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "01AA0941-6BDA-4B7E-81C5-D48ADAA3B5E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9BA114-1C07-44BF-9645-DACE14CB9A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.1\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "439FC49D-8860-4D74-B82B-A91F6B6C8DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.1\\(3b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE8E328-D5DD-4E6B-A21C-B6CE6A1784CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.1\\(3c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D47BCC3A-8D11-4BF1-BB22-98EB7A1324DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:6.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F39D409C-BC11-49BB-96D7-15954A524A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:6.0\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "60068FC9-8A85-42E7-A0F8-AAE190E1DD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:6.0\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AD79B32-0F2C-4691-8458-702E68089594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3F383F7-DE21-425D-98BC-2CCB99012659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:6.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20E884C-8F7C-4E29-8701-1CD1F63745D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:6.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E102AF-0603-4B4B-978C-FE76C66E9EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:6.1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C38632E-4519-4A69-ABB8-BD5991F8081D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:6.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BCC243-D4B8-477D-9B68-C90571F57472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1022C151-6EC8-4E8D-85ED-59D51551BDAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "060593BD-ADC1-4282-BC6D-E0D6A2B7C8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "239510AD-8BB0-4515-B1DA-80DE696D25DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "26277C4A-4E27-492C-B18C-AC68D86ADF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0318CF61-B892-4D44-B41A-D630B4AB808C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDA8A78-BA6C-4451-8EAA-B83C3A6C6BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A49932-1E22-4BE0-8195-926D44F65AAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE1B0DD-EA64-493B-86B7-9057EE5033C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "00ECD7C0-7F3C-4021-B949-32141E58687C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CC94003-72B6-45C3-A07E-0A08F1562B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "958A2707-0F1A-4719-BB9F-DC9ED129105A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A8EE9A-458D-4619-B04D-F01A9934DC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "597D9674-F44D-4A31-A2F2-2790ED698A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1\\(2\\)su1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2B7439-8547-41A6-AE6C-6ABCD167890E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1\\(2\\)su1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3EB2A0-6907-4260-BBF1-D8E6E40827FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:6.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE122F76-ECDB-4446-825C-EF02257D8C08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:7.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0907FAF-8334-42C1-B35A-EC6ED89AC110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:7.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB47159-FA07-4317-B562-D7AB7C49E8F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77979322-F060-4DD4-A6F2-B1157664C0FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58344",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/36836",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18883",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8118.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36496",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022931",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2757",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53447",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/58344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8118.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "An unauthenticated, remote attacker could exploit this vulnerability to cause the affected application to fail, resulting in a DoS condition.\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2865",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-09-28T19:30:01.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express (CME) component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka Bug ID CSCsq58779."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la implementación del inicio de sesión de la característica \"Extension Mobility\" del componente \"Unified Communications Manager Express\" (CME) de Cisco IOS v12.4XW, v12.4XY, v12.4XZ y v12.4YA. Permite a usuarios remotos ejecutar código de su elección o provocar una denegación de servicio a través de peticiones HTTP modificadas. También conocido como Bug ID CSCsq58779."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_express:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720EB93A-AE27-470E-B8F8-45D1B6CBE94C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4362045B-7065-4FF9-A977-B3DA7894F831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC27E79D-6B4B-4839-9664-DFE821C45C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4963A243-74FA-43AD-9645-C9FAD527A6E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C6EACA-35BE-4032-93DA-5F738AEE0F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58335",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18884",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8116.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36498",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022932",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2758",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53448",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/58335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8116.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2866",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-09-28T19:30:01.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cisco IOS 12.2 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet, aka Bug ID CSCsz38104."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Cisco IOS v12.2 hasta la v12.4 permite a usuarios remotos provocar una denegación de servicio (recarga del dispositivo) a través de un paquete H.323 modificado. También conocido como Bug ID CSCsz38104."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E314B0F7-1A27-483E-B3B3-947A5561281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B29F111-CBA4-464D-8B25-C2677BA270EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F75542-F2C5-4CEB-B655-E0620408A3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059FBAA6-3127-4DF9-99AD-AA3A16317B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0E376F-64E1-4632-9A8E-11DC99FB245F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF440B52-C6AE-4608-BE71-01B354D37BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B41182-7AA8-49D1-BAC3-EAF312E43553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11BBB83-147B-4FBF-B263-77FCCFB2D92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A31301-AAB0-4744-98B2-695D88798D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEB27CF-46B5-4780-964C-C31193614B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1094F9-7222-4DE0-A368-7421ABA66E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574FFD6F-D56C-41DB-A978-E501BA3CA5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE2282B-6693-4E4B-8662-501EBC14CD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A925BA5C-AB2F-4B73-BA93-55664A319CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332B0446-4D8B-414B-B572-84B45D5643AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B418CFDD-AF36-46F9-B347-B34E72100F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F12741-69FB-46DD-A670-8461492B338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5688D88-A550-43EB-8854-2E132EC71156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FC4904-1F4D-4E10-AF95-911B07827598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618BF54-56DC-40FC-A515-3BFB4366F823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A668D08-14C4-4438-A59C-CE60498BEF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595DCBA-E6F2-4551-A804-4DBB137F076B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DF12B-2A20-4AC5-8EC5-729008D87736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2958873B-A0AB-4EAF-A5CF-8423739FAB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1938D118-C07F-4BEC-8030-947F099BFCB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3870C62F-D086-419C-A0E6-815E9ED5DE3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7414D32-88A1-416E-A717-3F47B6D1BE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544BD924-2CBD-4130-BBD3-5AD084C85FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B78181E-E1D1-4C25-85DE-CA46BBF21765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF610051-1638-4C1B-9864-11E34EFC4DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E39462-4CEE-4C29-8B60-50E05FCF3E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB633E6C-025C-4B31-ABE7-8318C813376B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFED1FFB-899D-4A48-9CCA-0B8737AE1408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883FA166-2973-42BA-842D-28FBDBFEAC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4362045B-7065-4FF9-A977-B3DA7894F831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC27E79D-6B4B-4839-9664-DFE821C45C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4963A243-74FA-43AD-9645-C9FAD527A6E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C6EACA-35BE-4032-93DA-5F738AEE0F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67621EA-25D8-47C2-ADEA-512E38F2FFE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58337",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18885",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811a.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36494",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1022930",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53446",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/58337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811a.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2867",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-09-28T19:30:01.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA, when Zone-Based Policy Firewall SIP Inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted SIP transit packet, aka Bug ID CSCsr18691."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Cisco IOS 1v2.2XNA, v12.2XNB, v12.2XNC, v12.2XND, v12.4T, v12.4XZ y v12.4YA. Cuando la función \"Policy Firewall SIP Inspection\" está activada, permite a usuarios remotos provocar una denegación de servicio (recarga del dispositivo) a través de un paquete de tránsito SIP modificado. También conocido como Bug ID CSCsr18691."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD441B8-CC3C-4571-B095-C70B78BE80E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17AA0C3D-7C96-4D2E-91E5-232536245ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D57ACB3-4ADC-4FBE-BA46-395F277B9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2916FA5-1FFF-48FB-A079-693AD3444CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4963A243-74FA-43AD-9645-C9FAD527A6E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C6EACA-35BE-4032-93DA-5F738AEE0F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67621EA-25D8-47C2-ADEA-512E38F2FFE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18886",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8130.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022930",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7254",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8130.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2868",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-09-28T19:30:01.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when certificate-based authentication is enabled for IKE, allows remote attackers to cause a denial of service (Phase 1 SA exhaustion) via crafted requests, aka Bug IDs CSCsy07555 and CSCee72997."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Cisco IOS v12.2 hasta la v12.4. Cuando la autenticación basada en certificado está activada, permite a usuarios remotos provocar una denegación de servicio (agotamiento de Phase 1 SA) a través de peticiones modificadas. También conocido como aka Bug IDs CSCsy07555 and CSCee72997."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0912492E-565A-4559-ABB8-D2898F06CF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ira:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2424530B-2353-48F2-A076-0C44AAA4C89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2irc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "113CC627-7381-49DF-B384-CC70FB795EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBDC6C0-961B-441D-8C34-AACE0902057E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140C7C99-1B50-431C-B55C-DFF308E7ECF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2scb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65213862-01D0-4B1D-8C76-B19D083BF460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05A548B-C443-4C15-B636-64C1F9B9860D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A892B3F0-5A31-4086-8AB5-F06E68588EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0DA930-86CE-4D17-BD41-9C4E47D8088F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2srd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1AE2B1-BFED-49A3-94EB-E40A1A675BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7CCDB53-4F8B-4B90-9929-4E94CF414CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C03B0702-070F-48D5-9CBC-DB36D409A4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD441B8-CC3C-4571-B095-C70B78BE80E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17AA0C3D-7C96-4D2E-91E5-232536245ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D57ACB3-4ADC-4FBE-BA46-395F277B9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2916FA5-1FFF-48FB-A079-693AD3444CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FC4904-1F4D-4E10-AF95-911B07827598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE195E-084B-4F4C-800D-850165DED48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC3706F-B00A-405E-917E-7FD5217E0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DF12B-2A20-4AC5-8EC5-729008D87736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2958873B-A0AB-4EAF-A5CF-8423739FAB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1938D118-C07F-4BEC-8030-947F099BFCB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544BD924-2CBD-4130-BBD3-5AD084C85FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B78181E-E1D1-4C25-85DE-CA46BBF21765"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18887",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8117.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8117.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2869",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-09-28T19:30:01.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to cause a denial of service (device reload) via a crafted NTPv4 packet, aka Bug IDs CSCsu24505 and CSCsv75948."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Cisco IOS v12.2XNA, v12.2XNB, v12.2XNC, v12.2XND, v12.4MD, v12.4T, v12.4XZ y v12.4YA permite a usuarios remotos provocar una denegación de servicio (recarga del dispositivo) a través de un paquete NTPv4 modificado. También conocido como Bug IDs CSCsu24505 y CSCsv75948."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD441B8-CC3C-4571-B095-C70B78BE80E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17AA0C3D-7C96-4D2E-91E5-232536245ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D57ACB3-4ADC-4FBE-BA46-395F277B9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2916FA5-1FFF-48FB-A079-693AD3444CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4963A243-74FA-43AD-9645-C9FAD527A6E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C6EACA-35BE-4032-93DA-5F738AEE0F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E1421B-2B86-41B2-9288-59780E081337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A5F5FF-6BC4-4A1E-B9F1-BD47096D30B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58342",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18889",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8131.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022930",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6712",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/58342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8131.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2870",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-09-28T19:30:01.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, allows remote attackers to cause a denial of service (device reload) via crafted SIP messages, aka Bug ID CSCsx25880."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Cisco IOS v12.2 hasta la v12.4. Cuando la función \"Cisco Unified Border Element\" esta activada, permite a usuarios remotos provocar una denegación de servicio (recarga del dispositivo) a través de mensajes SIP modificados. También conocido como Bug ID CSCsx25880."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4gc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89B19F2B-1D89-42FC-89A7-737D8109EB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7414D32-88A1-416E-A717-3F47B6D1BE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544BD924-2CBD-4130-BBD3-5AD084C85FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B78181E-E1D1-4C25-85DE-CA46BBF21765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E39462-4CEE-4C29-8B60-50E05FCF3E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB633E6C-025C-4B31-ABE7-8318C813376B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFED1FFB-899D-4A48-9CCA-0B8737AE1408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883FA166-2973-42BA-842D-28FBDBFEAC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4362045B-7065-4FF9-A977-B3DA7894F831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC27E79D-6B4B-4839-9664-DFE821C45C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4963A243-74FA-43AD-9645-C9FAD527A6E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C6EACA-35BE-4032-93DA-5F738AEE0F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18891",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811b.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022930",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811b.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2871",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-09-28T19:30:01.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when SSLVPN sessions, SSH sessions, or IKE encrypted nonces are enabled, allows remote attackers to cause a denial of service (device reload) via a crafted encrypted packet, aka Bug ID CSCsq24002."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Cisco IOS v12.2 y v12.4, cuando estan activadas las sesiones SSLVPN, las sesiones SSH o las \"nonces\" (cadenas de caracteres de un sólo uso) encriptadas IKE, permite a usuarios remotos provocar una denegación de servicio (recarga del dispositivo) a través de un paquete encriptado y modificado, también conocido como Bug ID CSCsq24002."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD441B8-CC3C-4571-B095-C70B78BE80E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17AA0C3D-7C96-4D2E-91E5-232536245ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D57ACB3-4ADC-4FBE-BA46-395F277B9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2916FA5-1FFF-48FB-A079-693AD3444CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7414D32-88A1-416E-A717-3F47B6D1BE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370DC543-AC01-4B91-88C7-60C323E35929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1CD80F-E898-41CE-8A86-28C2F48B928A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF610051-1638-4C1B-9864-11E34EFC4DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78260223-50C0-48F8-9A65-AE67489E602C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA9218D-E7A5-4F98-83E7-2FD6E138D5CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC90BE87-EB54-46F8-A1FD-8F4E553C69F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883FA166-2973-42BA-842D-28FBDBFEAC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4362045B-7065-4FF9-A977-B3DA7894F831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC27E79D-6B4B-4839-9664-DFE821C45C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4963A243-74FA-43AD-9645-C9FAD527A6E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18892",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811c.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022930",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811c.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2872",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-09-28T19:30:01.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via a malformed packet that is not properly handled during switching from one tunnel to a second tunnel, aka Bug IDs CSCsh97579 and CSCsq31776."
      }, {
        "lang" : "es",
        "value" : "Cisco IOS v12.0 hasta la v12.4, cuando están activados los túneles basados en IP y la utilidad \"Cisco Express Forwarding\", permite a atacantes remotos provocar una denegación de servicio (recarga del dispositivo) a través de paquetes malformados que no son apropiadamente tratados durante el cambio de un túnel a un segundo túnel, también conocido como Bug IDs CSCsh97579 y CSCsq31776."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F86F790-6247-42F2-9487-3D60A2842F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12434A88-88C6-4749-981F-E2B4D725F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C398460-3F38-4AA7-A4B1-FD8A01588DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6B0C2F-2FBE-4422-AD30-305100C595CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932C1AC0-0BD1-46DF-A241-AA71BBD785BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEA01D2-B985-4575-AF00-144CE2E3024D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11A2BE-19E7-4148-B3CC-B4956B07273E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E78DEE-1125-4183-A0CD-947B850E956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7F94E8-86FC-456B-A7BB-57953F67F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277BFD67-3EE3-4E79-8D81-35597D168C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B5CC91-144D-4818-871E-E6120A7E1050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1050ACB3-E5B2-4710-910B-F3DF4B49907F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABE71F9-17D4-47C4-A762-18CC8716E477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7977DA9F-41DE-4482-B0CD-896EEEFB5689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADAB898-7728-4C14-B69A-7B8B06AFC894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54424787-34AC-410D-985F-511ADB2BB144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F54F0C-AC91-4CB7-9FEB-257F03547864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A0D017-F26F-4429-891E-C7E1C66B6588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FA075D-4A9E-44EE-90CF-23947C9040EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3DFAEC-4534-4A8D-9886-0723F57C7A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5451772-87D4-42E2-8F48-D137670DA3E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D162976F-87A3-42BF-8C9F-A981B14F4673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43581A57-418A-4A35-ACF2-1380A8DA8A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC17E231-9256-4600-A33B-238E7E83CF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0AB67FC-88F4-42BB-BB90-54521950DE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442972CD-50D3-4C46-AB73-44AED94B9F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19077C39-A27B-4EC3-A882-9AC826E61570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDEF6AED-4477-4AAC-9759-1996B77DFEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9427851-B0DC-4CE6-8BFA-60619D1DC87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D07DD94-0925-4FEE-9565-5F36B9AAF448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3A67F5-05C6-4097-A88E-0A0F165C12EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7126E176-D739-4102-8F10-1EEB8C6A219D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C0554-1A50-4341-AB07-80AA854673D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8C5149-40F8-40C9-9FC3-7E7C68801320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FF39C5-CC37-4573-BB18-36254D38509B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B377A8B9-90F2-41B7-9098-5ABEB621E2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B15FCC-1BB3-41CA-9550-6D55DD381F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A85892-C3AB-4920-A949-A71BD0332D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6330829-9A7B-479D-B38B-BC64148EC172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F1E38-3482-4EAC-8654-EBC004B9344B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BCD9C9-7E6B-42EB-A645-32B3C00CDDEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1gb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34A61768-E18E-4DB0-9EDF-2E36D0F62DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752C3C6B-910D-4153-A162-DF255F60306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297FAD97-60C0-473D-A18D-03657B81B7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD4A33B-B13E-40C6-B47F-A406ACC6664F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E488E6E-87F0-4292-B97B-31087FDB4655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D199CB1-A2A3-4678-9503-C5B61281755C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19952DC6-1186-4754-BB1E-BA1D78A19C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E8AF76-0A1D-4BAE-BF10-D63080352E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B674647-4438-4450-9DCA-25184D4E2682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E5CC41-1344-4A65-A653-8012ACE2CF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71FB7128-CF11-4903-97D7-418403A03CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EFB20A-78E2-4BA1-B87C-BB74E8982D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A273401-9394-4BC3-879C-DE3EFC09B3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DABF911-FCDF-4095-A95D-4BB73628FCA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77886493-C30E-439E-BBB4-3D34A8938378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7813F511-CF6D-487F-9D1C-7A6CF85AD724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677DC4B6-8B3D-4A0D-9934-743FD7494DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E272881F-0804-4190-A21D-3D0B9A774F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F084DA16-24CB-41D1-92B7-C6E0499AAD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA979D75-F60E-45F8-B99C-1402DC8CFCDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884753D4-3AF0-4723-9D51-26BA7B4CA533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF3601D-DF44-4A10-A424-8E97C65A36A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1835410-77EB-46F2-ACF0-379759D4B0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB103ED-B170-4193-84CD-4C59F4D6A10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88DCCDE-6A81-473F-B4FE-95A84F8DF964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D55886-268F-4E4D-B00F-8A5D97A73BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E314B0F7-1A27-483E-B3B3-947A5561281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B838C9-E60E-46A3-A5FB-4F67291D0851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B29F111-CBA4-464D-8B25-C2677BA270EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96C76C5-52BA-45D9-9803-048E770BAA84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B9E2C6-0E23-4AC9-906F-28BBC15868DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F75542-F2C5-4CEB-B655-E0620408A3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC41749-91FC-43DB-A52F-AC3E3A2205C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0195AE-24FD-43B2-892B-F646B8B5ED6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316924D4-10D4-4C98-AF05-DDE1D530A205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11866346-C29A-463D-A18F-528C23DD579E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0912492E-565A-4559-ABB8-D2898F06CF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F44EC8-13BF-4032-9EBA-0D50C6A353BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ira:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2424530B-2353-48F2-A076-0C44AAA4C89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2irc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "113CC627-7381-49DF-B384-CC70FB795EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7111CAE-9279-49DA-B05A-046BB3EFA85F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E186AB2F-8C5B-45E0-9194-BF66DA64F772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32DCDA3-76B6-423C-9AF1-B65F19077909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCE26DD-FE65-4041-AB4D-9C7A16EE175C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE88965B-D148-43EB-9FC6-2EF5E5C917FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37EE8B1F-AA97-459E-9EA0-965A73697243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98E703A-717D-4997-AFBC-CAE4B644025D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B27825D-099A-4733-8D3F-8EF2B050E5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D035A35-D53E-4C49-B4E4-F40B85866F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBDC6C0-961B-441D-8C34-AACE0902057E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1579A2D-955F-4CC6-9F94-9D40C669D903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140C7C99-1B50-431C-B55C-DFF308E7ECF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2scb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65213862-01D0-4B1D-8C76-B19D083BF460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05A548B-C443-4C15-B636-64C1F9B9860D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DC8B40-2093-4D3A-B18B-F95868A36D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2seb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB7E760-8260-4488-B9FB-C741C1763F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F4B373-490C-463F-B518-89D0CABB852C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sed:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2B4600-550F-4D5D-9BBD-E035025677BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2see:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F42A6D9-8CC3-49AF-AA56-96894CCE5AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sef:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4474AB2-AFF5-46F1-9066-54A4D6FA98C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2seg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D81068C-7E72-4D5E-84CA-5942B9E8AB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85ABE5E-7900-4A9C-A945-48B293EF46B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E166F3-931A-4997-B7B2-F2AD19C6F209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A70BEC7-8A69-44B2-9DDA-DFC1A13EB7B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A9400-571E-4955-AB84-C49A4255A5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C38FE9-CEC6-4C5C-A4FD-CCD1D50BD040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A892B3F0-5A31-4086-8AB5-F06E68588EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0DA930-86CE-4D17-BD41-9C4E47D8088F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2srd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1AE2B1-BFED-49A3-94EB-E40A1A675BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ste:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D681CC0E-CD68-4252-B243-C043754954DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC70491B-F701-4D33-A314-C686469DBD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198C24E9-6D45-44FD-B502-D14ACDA99EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sva:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E768F600-19DC-46A5-BDED-3C2497530CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2svd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC263E7-BA6A-41CB-8248-5DDB4404D9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sve:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544835A2-3AB0-4313-A731-54B1123F7498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A672BD-87AE-424D-8735-073BBE9CE164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C033E3-184B-4AC1-B10D-8318FEAF73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A68D177-B028-4025-BD7B-82ACDB2D1E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485ACF9E-1305-4D71-A766-5BE1D748AAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7CCDB53-4F8B-4B90-9929-4E94CF414CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C03B0702-070F-48D5-9CBC-DB36D409A4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09458CD7-D430-4957-8506-FAB2A3E2AA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E709D6B-61DB-4905-B539-B8488D7E2DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C1C831-556D-4634-AA24-6D64943ED275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075CD42D-070A-49BA-90D9-E7925BB41A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4628FDA0-4260-4493-92C9-4574E5EC06A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FA064A-6E1A-4415-84D4-1A33FF667011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21147732-FA22-4728-B5F2-D115B78A8EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE03B1E-1522-4143-A019-B19E1F605A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B40548F-3914-4227-9E4C-F1B34071C069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE49281-0571-49F7-95FF-68B1ACA07537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B72E-6862-4115-9A0B-574089A94289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC38B64C-E246-467F-A185-669497DEA839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB42063-9DB5-42DB-825A-53C6DBB51A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74B6350-C2F8-4786-8E32-2ED6C188A5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E26473-A8EF-44C5-B550-5E0B86D31291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663FE3CE-FA09-46A2-9C0D-2797D9137A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86309E93-F2C9-4334-9A1C-989EFDC99215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D49D6-0624-41CE-829E-49E7EA679EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65318A70-40FF-4BE8-962B-DFCD5C476166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869CEAF7-59D6-4651-8D89-0244D6C430A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059FBAA6-3127-4DF9-99AD-AA3A16317B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0E376F-64E1-4632-9A8E-11DC99FB245F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF440B52-C6AE-4608-BE71-01B354D37BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243BEF5E-F693-450E-B274-FD7CF34B6771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE72804E-600D-47FA-B3BF-36BD3CF13A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B41182-7AA8-49D1-BAC3-EAF312E43553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11BBB83-147B-4FBF-B263-77FCCFB2D92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E84677D-793D-44C5-80E9-FC29C3183278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFA2358-6B79-472D-9092-FF99DC3DF042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A31301-AAB0-4744-98B2-695D88798D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1094F9-7222-4DE0-A368-7421ABA66E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574FFD6F-D56C-41DB-A978-E501BA3CA5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11790F38-3720-45CF-9FD4-A8E5867684D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE2282B-6693-4E4B-8662-501EBC14CD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A925BA5C-AB2F-4B73-BA93-55664A319CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE02B7C-BC2D-433C-B0A8-E60EDD62538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9663D24-0D1D-4F46-961F-9D37D3776E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D8830A0-E816-40C4-8743-A9E0994BA922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40183EF8-BD19-49AD-9E55-7FCCA635327F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E40D5D-F46E-4098-A46A-1A52A343310D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E5138-016A-48EC-A367-3D3285AAFED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C114F1A6-5DFE-408F-B83A-E8B9D4AF9791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jeb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD5C082-9730-466D-A4A8-E4EEE5F3730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF419BD-8474-4F33-9CDD-587E341ABA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332B0446-4D8B-414B-B572-84B45D5643AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE0A39D0-0E87-42E9-B8D3-2010FDCC03D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B418CFDD-AF36-46F9-B347-B34E72100F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F12741-69FB-46DD-A670-8461492B338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FC4904-1F4D-4E10-AF95-911B07827598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A668D08-14C4-4438-A59C-CE60498BEF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC3706F-B00A-405E-917E-7FD5217E0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595DCBA-E6F2-4551-A804-4DBB137F076B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DF12B-2A20-4AC5-8EC5-729008D87736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2958873B-A0AB-4EAF-A5CF-8423739FAB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1938D118-C07F-4BEC-8030-947F099BFCB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB2B390-A39F-4082-BBCB-712BDD95886D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jda:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F782741-0F18-4FBC-9D00-AAABB8BC6A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jdc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA60D334-B2F6-4F34-9EE1-C8F45DB3C441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jdd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD178B67-B9E7-4725-B553-E5ACBCE296D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB11851-BCF8-485B-91F9-6A39B2354826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C61F77-6CDE-4CCA-B2DB-B76C6B5F8152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFE3FC0-79BC-4549-98BA-235A53719F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A28452-000C-4BBB-A34E-1AA63D69925D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mda:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237F6EDD-AB47-4768-9C75-C0B03E23696B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370DC543-AC01-4B91-88C7-60C323E35929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544BD924-2CBD-4130-BBD3-5AD084C85FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B78181E-E1D1-4C25-85DE-CA46BBF21765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1CD80F-E898-41CE-8A86-28C2F48B928A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF610051-1638-4C1B-9864-11E34EFC4DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78260223-50C0-48F8-9A65-AE67489E602C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E39462-4CEE-4C29-8B60-50E05FCF3E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7454AF-7610-4CD3-BD2B-95A6C3283811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB633E6C-025C-4B31-ABE7-8318C813376B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA9218D-E7A5-4F98-83E7-2FD6E138D5CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC90BE87-EB54-46F8-A1FD-8F4E553C69F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFED1FFB-899D-4A48-9CCA-0B8737AE1408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883FA166-2973-42BA-842D-28FBDBFEAC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4362045B-7065-4FF9-A977-B3DA7894F831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC27E79D-6B4B-4839-9664-DFE821C45C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4963A243-74FA-43AD-9645-C9FAD527A6E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C6EACA-35BE-4032-93DA-5F738AEE0F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67621EA-25D8-47C2-ADEA-512E38F2FFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E1421B-2B86-41B2-9288-59780E081337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A5F5FF-6BC4-4A1E-B9F1-BD47096D30B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58333",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18893",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080af8113.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8115.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep09.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022930",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/58333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080af8113.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8115.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2873",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-09-28T19:30:01.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via malformed packets, aka Bug ID CSCsx70889."
      }, {
        "lang" : "es",
        "value" : "Cisco IOS v12.0 hasta 12.4, cuando está habilitada la funcionalidad de túnel basado en IP y el Cisco Express Forwarding, permite a atacantes remotos provocar una denegación de servicio (reinicio del dispositivo) mediante paquetes deformados, también conocido como Bug ID CSCsx70889."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F86F790-6247-42F2-9487-3D60A2842F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12434A88-88C6-4749-981F-E2B4D725F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C398460-3F38-4AA7-A4B1-FD8A01588DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6B0C2F-2FBE-4422-AD30-305100C595CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932C1AC0-0BD1-46DF-A241-AA71BBD785BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEA01D2-B985-4575-AF00-144CE2E3024D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11A2BE-19E7-4148-B3CC-B4956B07273E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E78DEE-1125-4183-A0CD-947B850E956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7F94E8-86FC-456B-A7BB-57953F67F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277BFD67-3EE3-4E79-8D81-35597D168C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B5CC91-144D-4818-871E-E6120A7E1050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1050ACB3-E5B2-4710-910B-F3DF4B49907F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABE71F9-17D4-47C4-A762-18CC8716E477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7977DA9F-41DE-4482-B0CD-896EEEFB5689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADAB898-7728-4C14-B69A-7B8B06AFC894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54424787-34AC-410D-985F-511ADB2BB144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F54F0C-AC91-4CB7-9FEB-257F03547864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A0D017-F26F-4429-891E-C7E1C66B6588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FA075D-4A9E-44EE-90CF-23947C9040EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3DFAEC-4534-4A8D-9886-0723F57C7A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5451772-87D4-42E2-8F48-D137670DA3E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D162976F-87A3-42BF-8C9F-A981B14F4673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43581A57-418A-4A35-ACF2-1380A8DA8A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC17E231-9256-4600-A33B-238E7E83CF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0AB67FC-88F4-42BB-BB90-54521950DE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442972CD-50D3-4C46-AB73-44AED94B9F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19077C39-A27B-4EC3-A882-9AC826E61570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDEF6AED-4477-4AAC-9759-1996B77DFEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9427851-B0DC-4CE6-8BFA-60619D1DC87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D07DD94-0925-4FEE-9565-5F36B9AAF448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3A67F5-05C6-4097-A88E-0A0F165C12EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7126E176-D739-4102-8F10-1EEB8C6A219D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C0554-1A50-4341-AB07-80AA854673D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8C5149-40F8-40C9-9FC3-7E7C68801320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FF39C5-CC37-4573-BB18-36254D38509B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B377A8B9-90F2-41B7-9098-5ABEB621E2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B15FCC-1BB3-41CA-9550-6D55DD381F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A85892-C3AB-4920-A949-A71BD0332D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6330829-9A7B-479D-B38B-BC64148EC172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F1E38-3482-4EAC-8654-EBC004B9344B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BCD9C9-7E6B-42EB-A645-32B3C00CDDEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1gb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34A61768-E18E-4DB0-9EDF-2E36D0F62DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752C3C6B-910D-4153-A162-DF255F60306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297FAD97-60C0-473D-A18D-03657B81B7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD4A33B-B13E-40C6-B47F-A406ACC6664F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E488E6E-87F0-4292-B97B-31087FDB4655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D199CB1-A2A3-4678-9503-C5B61281755C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19952DC6-1186-4754-BB1E-BA1D78A19C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E8AF76-0A1D-4BAE-BF10-D63080352E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B674647-4438-4450-9DCA-25184D4E2682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E5CC41-1344-4A65-A653-8012ACE2CF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71FB7128-CF11-4903-97D7-418403A03CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EFB20A-78E2-4BA1-B87C-BB74E8982D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A273401-9394-4BC3-879C-DE3EFC09B3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DABF911-FCDF-4095-A95D-4BB73628FCA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77886493-C30E-439E-BBB4-3D34A8938378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7813F511-CF6D-487F-9D1C-7A6CF85AD724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677DC4B6-8B3D-4A0D-9934-743FD7494DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E272881F-0804-4190-A21D-3D0B9A774F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F084DA16-24CB-41D1-92B7-C6E0499AAD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA979D75-F60E-45F8-B99C-1402DC8CFCDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884753D4-3AF0-4723-9D51-26BA7B4CA533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF3601D-DF44-4A10-A424-8E97C65A36A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1835410-77EB-46F2-ACF0-379759D4B0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB103ED-B170-4193-84CD-4C59F4D6A10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88DCCDE-6A81-473F-B4FE-95A84F8DF964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D55886-268F-4E4D-B00F-8A5D97A73BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E314B0F7-1A27-483E-B3B3-947A5561281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B838C9-E60E-46A3-A5FB-4F67291D0851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B29F111-CBA4-464D-8B25-C2677BA270EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96C76C5-52BA-45D9-9803-048E770BAA84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B9E2C6-0E23-4AC9-906F-28BBC15868DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F75542-F2C5-4CEB-B655-E0620408A3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC41749-91FC-43DB-A52F-AC3E3A2205C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0195AE-24FD-43B2-892B-F646B8B5ED6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316924D4-10D4-4C98-AF05-DDE1D530A205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11866346-C29A-463D-A18F-528C23DD579E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0912492E-565A-4559-ABB8-D2898F06CF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD6421A-D8C4-4A3E-9497-4AC130CFE597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F44EC8-13BF-4032-9EBA-0D50C6A353BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370EEE74-3DAA-4BB2-9192-66672229DC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF74B28-CD95-4BC6-97D4-D529D30E1509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ira:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2424530B-2353-48F2-A076-0C44AAA4C89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7111CAE-9279-49DA-B05A-046BB3EFA85F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E186AB2F-8C5B-45E0-9194-BF66DA64F772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32DCDA3-76B6-423C-9AF1-B65F19077909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCE26DD-FE65-4041-AB4D-9C7A16EE175C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ixg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE88965B-D148-43EB-9FC6-2EF5E5C917FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98E703A-717D-4997-AFBC-CAE4B644025D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B27825D-099A-4733-8D3F-8EF2B050E5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D035A35-D53E-4C49-B4E4-F40B85866F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBDC6C0-961B-441D-8C34-AACE0902057E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1579A2D-955F-4CC6-9F94-9D40C669D903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140C7C99-1B50-431C-B55C-DFF308E7ECF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2scb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65213862-01D0-4B1D-8C76-B19D083BF460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05A548B-C443-4C15-B636-64C1F9B9860D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DC8B40-2093-4D3A-B18B-F95868A36D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2seb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB7E760-8260-4488-B9FB-C741C1763F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F4B373-490C-463F-B518-89D0CABB852C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sed:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2B4600-550F-4D5D-9BBD-E035025677BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2see:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F42A6D9-8CC3-49AF-AA56-96894CCE5AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sef:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4474AB2-AFF5-46F1-9066-54A4D6FA98C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2seg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D81068C-7E72-4D5E-84CA-5942B9E8AB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85ABE5E-7900-4A9C-A945-48B293EF46B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E166F3-931A-4997-B7B2-F2AD19C6F209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A70BEC7-8A69-44B2-9DDA-DFC1A13EB7B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A9400-571E-4955-AB84-C49A4255A5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C38FE9-CEC6-4C5C-A4FD-CCD1D50BD040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A892B3F0-5A31-4086-8AB5-F06E68588EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0DA930-86CE-4D17-BD41-9C4E47D8088F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2srd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B1AE2B1-BFED-49A3-94EB-E40A1A675BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ste:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D681CC0E-CD68-4252-B243-C043754954DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC70491B-F701-4D33-A314-C686469DBD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198C24E9-6D45-44FD-B502-D14ACDA99EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sva:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E768F600-19DC-46A5-BDED-3C2497530CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2svc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16EF97B1-5150-4E88-B011-DB8F0AAFA9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2svd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC263E7-BA6A-41CB-8248-5DDB4404D9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sve:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544835A2-3AB0-4313-A731-54B1123F7498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEF14D5-1327-4012-913F-DA0E12C4E953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A672BD-87AE-424D-8735-073BBE9CE164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C033E3-184B-4AC1-B10D-8318FEAF73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A68D177-B028-4025-BD7B-82ACDB2D1E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485ACF9E-1305-4D71-A766-5BE1D748AAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7CCDB53-4F8B-4B90-9929-4E94CF414CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C03B0702-070F-48D5-9CBC-DB36D409A4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09458CD7-D430-4957-8506-FAB2A3E2AA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E709D6B-61DB-4905-B539-B8488D7E2DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C1C831-556D-4634-AA24-6D64943ED275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075CD42D-070A-49BA-90D9-E7925BB41A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746DDC61-3981-4E93-A7EE-C120E0265485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4628FDA0-4260-4493-92C9-4574E5EC06A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FA064A-6E1A-4415-84D4-1A33FF667011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21147732-FA22-4728-B5F2-D115B78A8EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D717498-4DF9-4D15-A25B-D777FF460E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD441B8-CC3C-4571-B095-C70B78BE80E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17AA0C3D-7C96-4D2E-91E5-232536245ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE03B1E-1522-4143-A019-B19E1F605A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B40548F-3914-4227-9E4C-F1B34071C069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE49281-0571-49F7-95FF-68B1ACA07537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B72E-6862-4115-9A0B-574089A94289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC38B64C-E246-467F-A185-669497DEA839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB42063-9DB5-42DB-825A-53C6DBB51A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5C90EE-A9C0-461C-9E89-732BFA9BD066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74B6350-C2F8-4786-8E32-2ED6C188A5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E26473-A8EF-44C5-B550-5E0B86D31291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663FE3CE-FA09-46A2-9C0D-2797D9137A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86309E93-F2C9-4334-9A1C-989EFDC99215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D49D6-0624-41CE-829E-49E7EA679EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65318A70-40FF-4BE8-962B-DFCD5C476166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869CEAF7-59D6-4651-8D89-0244D6C430A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059FBAA6-3127-4DF9-99AD-AA3A16317B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0E376F-64E1-4632-9A8E-11DC99FB245F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF440B52-C6AE-4608-BE71-01B354D37BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243BEF5E-F693-450E-B274-FD7CF34B6771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7918C59-1678-4F24-A7C2-68824D1B59A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE72804E-600D-47FA-B3BF-36BD3CF13A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B41182-7AA8-49D1-BAC3-EAF312E43553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11BBB83-147B-4FBF-B263-77FCCFB2D92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E84677D-793D-44C5-80E9-FC29C3183278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFA2358-6B79-472D-9092-FF99DC3DF042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C26842-FF50-436F-8DB6-15A70082CD1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A31301-AAB0-4744-98B2-695D88798D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEB27CF-46B5-4780-964C-C31193614B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1094F9-7222-4DE0-A368-7421ABA66E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574FFD6F-D56C-41DB-A978-E501BA3CA5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11790F38-3720-45CF-9FD4-A8E5867684D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE2282B-6693-4E4B-8662-501EBC14CD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A925BA5C-AB2F-4B73-BA93-55664A319CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE02B7C-BC2D-433C-B0A8-E60EDD62538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9663D24-0D1D-4F46-961F-9D37D3776E90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83649EC-61A5-4937-93F4-42D082023382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D8830A0-E816-40C4-8743-A9E0994BA922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40183EF8-BD19-49AD-9E55-7FCCA635327F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E40D5D-F46E-4098-A46A-1A52A343310D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E5138-016A-48EC-A367-3D3285AAFED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C114F1A6-5DFE-408F-B83A-E8B9D4AF9791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jeb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD5C082-9730-466D-A4A8-E4EEE5F3730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF419BD-8474-4F33-9CDD-587E341ABA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332B0446-4D8B-414B-B572-84B45D5643AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE0A39D0-0E87-42E9-B8D3-2010FDCC03D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D40FB896-E20C-46B1-BF59-FBB42295F9C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B418CFDD-AF36-46F9-B347-B34E72100F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F12741-69FB-46DD-A670-8461492B338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5688D88-A550-43EB-8854-2E132EC71156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FC4904-1F4D-4E10-AF95-911B07827598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE195E-084B-4F4C-800D-850165DED48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618BF54-56DC-40FC-A515-3BFB4366F823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A668D08-14C4-4438-A59C-CE60498BEF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC3706F-B00A-405E-917E-7FD5217E0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595DCBA-E6F2-4551-A804-4DBB137F076B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DF12B-2A20-4AC5-8EC5-729008D87736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2958873B-A0AB-4EAF-A5CF-8423739FAB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1938D118-C07F-4BEC-8030-947F099BFCB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB2B390-A39F-4082-BBCB-712BDD95886D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jda:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F782741-0F18-4FBC-9D00-AAABB8BC6A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB11851-BCF8-485B-91F9-6A39B2354826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C61F77-6CDE-4CCA-B2DB-B76C6B5F8152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFE3FC0-79BC-4549-98BA-235A53719F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jmb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4691CEAD-47F1-4A97-84A4-72B794D3F714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A28452-000C-4BBB-A34E-1AA63D69925D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7414D32-88A1-416E-A717-3F47B6D1BE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370DC543-AC01-4B91-88C7-60C323E35929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "544BD924-2CBD-4130-BBD3-5AD084C85FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B78181E-E1D1-4C25-85DE-CA46BBF21765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1CD80F-E898-41CE-8A86-28C2F48B928A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF610051-1638-4C1B-9864-11E34EFC4DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78260223-50C0-48F8-9A65-AE67489E602C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E39462-4CEE-4C29-8B60-50E05FCF3E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7454AF-7610-4CD3-BD2B-95A6C3283811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB633E6C-025C-4B31-ABE7-8318C813376B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA9218D-E7A5-4F98-83E7-2FD6E138D5CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC90BE87-EB54-46F8-A1FD-8F4E553C69F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFED1FFB-899D-4A48-9CCA-0B8737AE1408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883FA166-2973-42BA-842D-28FBDBFEAC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4362045B-7065-4FF9-A977-B3DA7894F831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC27E79D-6B4B-4839-9664-DFE821C45C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4963A243-74FA-43AD-9645-C9FAD527A6E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C6EACA-35BE-4032-93DA-5F738AEE0F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58334",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18895",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080af8113.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8115.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep09.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022930",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://osvdb.org/58334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=18895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080af8113.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8115.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-28T19:30:01.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in xscreensaver in Sun Solaris 10, and OpenSolaris before snv_112, when Xorg or Xnewt is used and RandR is enabled, allows physically proximate attackers to read a locked screen via unknown vectors related to XRandR resize events."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en xscreensaver de Sun Solaris 10, y OpenSolaris en versiones anteriores a la snv_112, cuando Xorg o Xnewt es utilizado y RandR está activado, permite a atacantes próximos fisicamente leer una pantalla bloqueada a través de vectores de ataque desconocidos relacionados con eventos de dimensionamiento XRandR."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*",
            "versionEndIncluding" : "snv_111",
            "matchCriteriaId" : "A1B3EE79-B099-44AD-A775-386C6E209AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "versionEndIncluding" : "snv_111",
            "matchCriteriaId" : "84F189A5-2C57-433C-B92D-8D0B8C2AA9A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7317C4A1-1365-40DD-A86F-808B64863750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7188371F-AE6E-437D-8F75-DE7049A51000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79D94087-1308-408F-8C73-600B73AD958F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "015968E1-B81E-4242-B4DF-94716179053B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA468ACC-9AE2-4EF6-9B09-CF63092021D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "92262770-06B3-4B68-8DBE-AB6C61135F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "16719C48-5A35-4FEC-BE5F-3EA10A0357CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C4DC58C1-792B-433D-A27B-5731C8414EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4AC63928-38F2-4677-8CBC-2F7DE0EF078F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "438EA608-2748-49E9-9B2A-663C774E627F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B7E3945D-1580-4C68-93E0-E4CF96620C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "32AE7035-EA81-4A9B-A4C3-B85844E24FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "51469BA0-7B46-4E79-9E35-A388AD834B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "948CAA3F-C5B0-434E-A4B1-16600729A17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "49F52449-96AB-45BA-95F6-581F720D1819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FC6243A-A896-4E52-B241-BDEA7486DAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E88850F1-A647-44B3-806A-71FC157D4964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311FC329-D973-4F51-B110-7FF1ED40DFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0288EC6B-C561-475C-9A3D-1ACF395B7326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CBEFF0-7B69-4831-AAC7-C02455D42900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "AF924217-C227-4B90-9781-00561CE9C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "114D9D19-23BC-41AF-9B30-40AB2852E74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F620054A-4D53-443B-8897-B2A5AB928CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FD1FDEB4-E659-41D0-B81E-FC1A1391288E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "218570AD-18C7-440E-A5BD-F16708ED4B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "09162A43-7EF2-464D-AD60-7046456932B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2336F214-18CC-42A5-9DD0-1F1C09959CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A4ECA0D-AB73-4790-945B-98CF6E27B94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "207D2103-58A9-4BF9-81EF-74B264DB1B4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "530E1CDB-3B46-4762-875F-0B1075790204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "8A4F9110-059D-4F6E-9414-762BD6142CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "55888CA5-938A-42D4-9898-93ED1AD88650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F1B245F6-DE46-4D52-98EE-32601FBCD254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5D99E1F3-0341-43A9-9692-2AC812811EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "28F4B989-7F55-467F-AD1A-AB965D31F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "27CA0C51-8331-459A-8256-9E363BE313BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9B6404BC-090E-419B-B10C-D275D5C0BFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "65F861F1-E66D-479D-838D-19D94DF03736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "71FDF1A5-BD49-4E00-979E-3F953265E681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B40B4B4C-34F3-4591-8989-D7D138D54C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "815771B3-541B-41D5-925F-29CB74900668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "14FD3B27-6379-4F5C-9172-2A0494667727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "114D8B9E-BDE9-49E6-9CD3-18B087522577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8275DABB-E792-4134-8418-496109936C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6F61F300-FEB0-42A7-87AE-E99AF2C26827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E249DDE1-EC3B-4A5C-A900-498526173570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36830",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-26-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-249646-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36488",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-26-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-249646-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-28T19:30:01.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in clsetup in the configuration utility in Sun Solaris Cluster 3.2 allows local users to gain privileges via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en clsetup en la utilidad de configuración en Sun Solaris Cluster v3.2 permite a usuarios locales obtener privilegios mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:cluster:3.2:*:solaris_10:*:*:*:*:*",
            "matchCriteriaId" : "D22BB8AF-86E2-4791-9ACF-E088A81CF3ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:cluster:3.2:*:solaris_9:*:*:*:*:*",
            "matchCriteriaId" : "0BDD15FD-58F6-4EE9-9A72-D18A6A7BCCE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36816",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-267148-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-267148-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-28T22:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Tupinambis (com_tupinambis) component 1.0 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the proyecto parameter in a verproyecto action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente Tupinambis (com_tupinambis) v1.0 para Mambo y Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"proyecto\" en una acción \"verproyecto\" de index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onestopjoomla:com_tupinambis:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D656D9-BD5A-4258-A8C7-5392A498298D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A453A9F-12E9-40FC-8C42-D80C780154E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/mambojoomlatupinambis-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36848",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36511",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2730",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/mambojoomlatupinambis-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-28T22:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the variable editor in the Devel module 5.x before 5.x-1.2 and 6.x before 6.x-1.18, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a variable name."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el editor de variables del módulo Devel de Dupral en versiones del módulo v5.x en versiones anteriores a la v5.x-1.2 y v6.x en versiones anteriores a la v6.x-1.18. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de un nombre de variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:5.x-0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "805C8DD9-92C9-4330-A992-AA05B3CF5ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:5.x-0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCD83713-F54C-4A5C-8CA0-5A991195624A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:5.x-0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59EA1E40-36F6-4259-A274-698B206A0215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:5.x-0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946D26A6-E9D7-4A5C-B72F-7D17EA601105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624D23B7-A105-4AAE-9590-8BECB6021DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D204385-0BA3-4A38-B96F-A8F5AD89F90D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D31C9B3F-8B8F-4A70-8454-92A3F6F1C6CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930DAB6D-03EC-4968-AAC7-BE25C145607A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86014F7F-64E9-4A71-A5EE-C50A865237A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A2DD81-8CC4-4275-882E-A1EB446D4ED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C364C73C-6B29-45DA-B49F-721890A4CD99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F92251DA-285D-47EA-B095-A894448104F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02174F14-399E-4048-B096-C383B978650B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C36B68D-51EB-4659-9ACE-0D7EDC83D599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E253C3-91E1-4EBD-B025-DDB559BA2F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C17493B2-2AC2-4F82-83B3-E65B7CEB8911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562CB6C9-20AE-45DF-BDD0-11E5E1D8F474"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDF5408-078A-4052-BC54-F02AD3373F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D1BEEE-BC98-498B-A62B-9D9266728F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A215C8D9-7A67-49B2-8DB9-0FD89772750B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290606EB-0158-4C38-AD02-14D76EB5180A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB4752E-A951-43FC-9139-AD2890E39646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33215327-847E-44DE-88C2-6459E0ED83BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28733076-53A2-466D-9E92-A94D0E129E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "385CC1C1-DCA3-4291-92EA-92D69B9746EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:devel:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC988C5-B667-42BC-B99B-824DB7D20B4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/585952",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36859",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36508",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/585952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-28T22:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the (1) FORUM_ID or (2) CAT_ID parameter.  NOTE: this might overlap CVE-2005-1417."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de inyección SQL en forum.asp de MaxWebPortal permiten a usuarios remotos ejecutar comandos SQL de su elección a través de los parámetros (1) FORUM_ID o (2) CAT_ID.  NOTA: este vulnerabilidad puede solaparse con la CVE-2005-1417."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxwebportal:maxwebportal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73F4583-C060-4BFE-B1B7-302B18B09DB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/maxwebportal-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36480",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/maxwebportal-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-28T22:30:00.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the live preview feature in the Markdown Preview module 6.x for Drupal allows remote attackers to inject arbitrary web script or HTML via \"Markdown input.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la funcionalidad de previsualización en vivo en el módulo Markdown Preview v6.x para Drupal permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante \"Markdown input\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:henriksjokvist:markdown_preview:6.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226FE58D-06EC-45E5-A61C-DB8C5E2E239A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/585790",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/585790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-28T22:30:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the JoomlaFacebook (com_facebook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a student action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente JoomlaFacebook (com_facebook) para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\" en una acción \"student\" de index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:witchakorn_kamolpornwijit:com_facebook:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "719C370F-B94D-4CEE-8F6D-F2E5952CDAB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/joomlafb-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36484",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2731",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/joomlafb-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-28T22:30:00.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Open Source Security Information Management (OSSIM) before 2.1.2 allow remote authenticated users to execute arbitrary SQL commands via the id_document parameter to (1) repository_document.php, (2) repository_links.php, and (3) repository_editdocument.php in repository/; the (4) group parameter to policy/getpolicy.php; the name parameter to (5) host/newhostgroupform.php and (6) net/modifynetform.php; and unspecified other vectors related to the policy menu."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de inyección SQL en Open Source Security Information Management (OSSIM) en versiones anteriores a la v2.1.2 permiten a usuarios remotos autenticados ejecutar comandos SQL de su elección a través de el parámetro \"id_document\" a (1) repository_document.php, (2) repository_links.php, y (3) repository_editdocument.php de repository/; el (4) parámetro \"group\" (grupo) a policy/getpolicy.php; el parámetro \"name\" (nombre) a (5) host/newhostgroupform.php y (6) net/modifynetform.php; y a través de otros vectores de ataque sin especificar relacionados con el menu \"policy\" (políticas)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:ossim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "D331ECC2-2709-4A3E-ACDB-174CA343C082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:ossim:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6078DC17-1842-4C1E-A550-6F00DCC8D246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:ossim:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910427FD-DFC6-452F-8F8D-8235AD0036A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:ossim:2.1:*:32bit:*:*:*:*:*",
            "matchCriteriaId" : "C5EBF296-9BF9-4D0A-A070-BCC085C90D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:ossim:2.1:*:64bit:*:*:*:*:*",
            "matchCriteriaId" : "49206954-EFFF-4B98-9B13-D0F6ED897CF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=155",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36867",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506663/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36504",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506663/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-28T22:30:00.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the option parameter to the default URI (aka the main menu)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Open Source Security Information Management (OSSIM) versiones anteriores a v2.1.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"option\" de la URI por defecto (también conocido como menú principal)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:ossim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "D331ECC2-2709-4A3E-ACDB-174CA343C082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:ossim:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6078DC17-1842-4C1E-A550-6F00DCC8D246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:ossim:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910427FD-DFC6-452F-8F8D-8235AD0036A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=155",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36867",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506663/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36504",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506663/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-28T22:30:00.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to (1) graphs/alarms_events.php or (2) host/draw_tree.php."
      }, {
        "lang" : "es",
        "value" : "Open Source Security Information Management (OSSIM) versiones anteriores a v2.1.2 permite a atacantes remotos saltar la autenticación, y leer gráficas o información de la infraestructura, mediante una petición directa a (1) graphs/alarms_events.php o (2) host/draw_tree.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:ossim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "D331ECC2-2709-4A3E-ACDB-174CA343C082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:ossim:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6078DC17-1842-4C1E-A550-6F00DCC8D246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alienvault:ossim:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910427FD-DFC6-452F-8F8D-8235AD0036A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=155",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36867",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506663/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36504",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506663/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-28T22:30:00.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Meta tags (aka Nodewords) module before 6.x-1.1 for Drupal does not properly follow permissions during assignment of node meta tags, which allows remote attackers to obtain sensitive information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El módulo \"Meta tags\" (también conocido como Nodewords) en versiones anteriores a la v6.x-1.1 para Drupal no respeta apropiadamente los permisos durante la asignación de meta-etiquetas de un nodo, lo que permite a atacantes remotos obtener información confidencial a través de vectores de ataque sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ariel_barreiro:meta_tags:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6A4DC0-C9E7-48DE-B651-0C49F99D7B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ariel_barreiro:meta_tags:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA8D60C-FA65-4A1C-9C25-4CB9945D2D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ariel_barreiro:meta_tags:5.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B8D101-EB07-4F8B-B865-6E76F3C13954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ariel_barreiro:meta_tags:5.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D06D59-E500-463F-B36F-9CA710FF57BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ariel_barreiro:meta_tags:5.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA1D598-96B5-4E74-BB36-6204BBB32EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ariel_barreiro:meta_tags:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1205E96-611F-40B1-B46B-E6F7C67922E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ariel_barreiro:meta_tags:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A416A6F4-CF01-4822-BC00-B808BE4C3794"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/585706",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/585710",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36841",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36506",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/585706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/585710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-28T22:30:00.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Fastball (com_fastball) component 1.1.0 through 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the league parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente Fastball (com_fastball) v1.1.0 a la v1.2 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"league\" al index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastballproductions:com_fastball:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49009EE-60E7-4F9B-9A55-4B7726D15C49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastballproductions:com_fastball:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A6DD7C-8DD1-426C-A67D-C2FA27A73687"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/joomlafastball-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36878",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/joomlafastball-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-28T22:30:00.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in email.php in e107 0.7.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header in a news.1 (aka news to email) action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en email.php en e107 v0.7.16 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de la cabecera HTTP Referer en una acción news.1 (también conocida como noticias (news) a correo (email)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.16",
            "matchCriteriaId" : "358194A8-3BAB-4CA7-9546-C5A598FA911C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C34EB0-7685-4346-81A2-371C1F19F6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB26A2A4-B0DE-4130-AA5F-76D5394A0614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90909932-AD39-4648-8621-5866F0C4AB12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F208E9-3C39-4D00-B1E0-5CD0B315E740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27C7402F-54C9-4FDA-B181-85941DDC7010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "061B1AF2-2BA7-49CB-9F8B-91BF5D5B0BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F77F5E4-8636-41F5-9A80-055CC0FC0346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70AB914E-D616-45D2-A451-1C247B8B6E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA03C1AC-97EA-47ED-9558-A7CA48420AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32695A82-B042-46B7-9CB4-20F3446E0C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6716A040-0CBE-4402-AB2A-1621B1240B0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81627355-AB45-4D47-8DD2-4087E6971EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2DAAA4F-B893-4914-8538-E68DDA211225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B649DDC6-EEE6-47E1-A69A-831E5C2DD58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEEC90E-8640-4786-B014-CAD83EC4F2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E29B9B12-4C94-4A8D-B407-2D288502EFE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CAADA1-1FBB-4983-A942-FC4490CE8D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D7C699-0E92-4D9C-9D8F-87C39A28ACCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C62F8AD-EA30-441E-B97F-EF8DE640DC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F96C30A8-7E56-4806-B8D7-851D75B08738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C22711-AEC4-438F-9B37-64D36B0BDFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E2AA435-E5FC-4555-B582-5C6FFC99327B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A81364B-FB65-4591-ACA3-9D5991F0C30C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDD8B3B-8580-4624-8D77-E3FD97DFF4A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.547_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "437C4251-886C-4E94-B7F6-AE34A0142A76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.548_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D4EE9-0D54-4370-BCBC-3C23481C127B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.549_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11E3F9E-708E-44CB-8FD2-E4961028B732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.551_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F38EB42-437C-4381-B36A-FD3DB78E724E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.552_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC957BA-D96C-41B7-9BD4-2ECD37C9C924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.553_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9E9AC1-5ECD-448F-B72A-1CE8228C2C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6454D949-83A2-4F69-92E1-BBCD84F21BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.554_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC4B3A4-2563-4C06-A484-5C02CD8F7408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC274184-AD8E-4BC2-BC6A-4E64F354BFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E80F85C-61AD-49C0-9EBF-B79F728F6A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE097FC-A525-4599-9FDA-1A011EECE767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.602:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF51B0D-E020-491D-92A9-D2A01A7417AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8692341-8DF2-4943-853A-4AAF1F313914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.604:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75197306-53DB-4C94-959B-C46D3FB1F42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.605:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C5C91C-C1C5-457D-9E09-24C7CACCC280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.606:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB88C92-4F62-471A-8C10-C13C890E764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5585DC36-C65F-4FCA-B26F-E4A7901863E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.608:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7DD56C-66F7-421C-B211-07C7856112C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.609:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E14B108-228D-454F-AF16-9D9086E4C10B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.610:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C91C45-9A96-4E69-8A0A-D619AB45BC08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.611:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7C68F4-9ECD-41A9-B4AE-48F028841428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.612:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B75E28-08DE-4CA2-A60B-FB2F61AEC5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.613:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9AA824A-CEE6-460B-A668-92FC3A822305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.614:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A51FBB3-42CE-40E1-A15D-ADDFBF8E203D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.615:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAC1FD5-ECD1-480C-827E-F1AE8484C4EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.615a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17F613A-6BE1-4B45-8E40-8E44E0EEA756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CB33E9-9AB8-482A-A196-768A2085A49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BD5CAD-0EB8-48F2-AF80-510584A83446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6171:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8CD2A8-C8E8-4A5F-8355-6DF45C9DF45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E294FE-F0A2-45FC-BB67-D988DD89D2AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6173:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9640315B-7F04-4F5A-B213-8FAF509DFF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6174:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA89549A-6CD7-4DDB-A8C8-ADF103F6CDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6175:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF75A192-81C1-4F58-A660-7EFE4F33E58B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36832",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://websecurity.com.ua/3528",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506704/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://websecurity.com.ua/3528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506704/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-28T22:30:01.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service (daemon crash) via an IMAP4 FETCH command."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Code-Crafters Ability Mail Server v2.70, permite a atacantes remotos provocar una denegación de servicio (caída de demonio) a través del comando IMAP4 FETCH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.63",
            "matchCriteriaId" : "F14D49D3-19D9-4AF7-B76E-290F7DF5D8E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5EC297-5A2A-4359-B93C-BF9EDE4D99E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.01b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6FFDB5D-9511-49A5-BA56-27F9E8EDBC88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.02b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EAA589C-28AF-44D7-B520-E15C06A3DBD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.03b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80531858-C703-4C08-BC4A-12B02723C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.04b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F852F1C-E8D7-48E8-92AA-B7CCF5AB3A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.05b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1E6919-5B04-4401-ACA5-F2A71A7483DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EC47A8-37BC-4000-9323-AF81ED9A0699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F19F1B93-0423-4681-8821-9E4A9E3AE6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD744492-6BE6-4E30-8796-23581A344374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE328F78-4C47-49E5-8A15-26475A739229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9036D941-EE6F-4182-A91C-D2871BB5B20C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "488084AA-9C8D-497F-88CF-881480FFA6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8E1AE7-1698-46A6-A377-0646DD124F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA94B27-748C-4DA6-BEB0-FAA29F34A54E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784B5CE3-8D72-4DF6-86AE-5A7FB7EDDF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149A348A-3F37-4853-B885-2EECF303536E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938529F4-31B5-47E9-A8AE-9DA3B25F9D48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C732C79B-E224-420D-B96D-1EB0D2EECE24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16B7A98B-A682-42B5-8CDD-1FE9F4CF74CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627FD5F2-302F-407E-9000-8D5358C9CF98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0004DD62-C64E-4F99-ADE0-EB91AEE1021D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0119286-87F5-4D60-AF54-A0C8F948BF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48993397-4379-48DF-969F-CAE0663C18E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8446A8DB-5344-4087-A54E-9B1D505E6F4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B6FD5A-1C29-4E3B-AB74-FD9600BE7EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC685FC-37CA-4770-9159-B387C02E8EC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA42ACC-27A8-4673-9049-2CA48C00E87E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18C7269-C786-4E19-B96A-0F417500B25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51948C81-145A-434F-ACDA-D2738B65D29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "356004E2-A09E-4FAA-83D4-7402B41F29E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1F7399-24CC-4470-A4FB-BCB7CAF0DDEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-crafters:ability_mail_server:2.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B717A33-965C-4A97-BA06-0A06DC97D31E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36888",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.code-crafters.com/abilitymailserver/updatelog.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.code-crafters.com/abilitymailserver/updatelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-28T22:30:01.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the MyRemote Video Gallery (com_mytube) component 1.0 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter in a videos action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente MyRemote Video Gallery (com_mytube)v1.0 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"user_id\" en una acción \"videos\" a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rick_estrada:com_mytube:1.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F321A99-0789-4628-97D3-9B96C8F02615"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36470",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T15:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, and then sending a request for a predictable filename during a short time window."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de subida de archivos sin restricción en RADactive I-Load anterior a v2008.2.5.0 permite a atacantes remotos ejecutar código de su elección a través subiendo un fichero con una extensión ejecutable, y enviando una petición a un fichero predecible durante una ventana de corta duración."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2008.2.4.0",
            "matchCriteriaId" : "4F139A75-38DA-423B-BF6A-0F72D289C3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE74540D-CEF8-4D69-9B5C-EF65AB75297E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9C87F5-72A5-4067-88B3-AF93063D299E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013704F2-FE79-4576-8A9B-5BF8F57B64B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.6.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5482B06C-8E4E-46CD-B828-33BB9A535EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7C075F-0A1B-4216-B32C-B95CD73442E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E66E491-7785-4371-AE45-DA957D48DC3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E1B949F-5984-4726-B0AA-901A7C9B82C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F93132F-BD03-4731-9EBF-607F0C1E2CD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73C8F452-D278-4B4D-9C35-BF993894DF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A99B631-3142-413E-A00E-2A914A941A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD79EE0A-1603-43C3-BD22-3D3E6E3A542B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10AC750D-2FD5-40B2-807E-3A7693FAB4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A765BE3-9BE1-46B1-8C9C-A274D8AFBEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06A2416-1CD5-4F22-AD19-FADFE6D94997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30F2246-03AB-4A99-B2CB-2B116F70F7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508A871B-64F7-411E-9911-95E51D070D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "556A339D-308F-4B16-8080-2756CC4225FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F277DA-2B18-4CFF-8C0B-03D8B226982D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88B1BC55-4481-4B17-8137-C65D5F4BD651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D573A940-3848-4653-B92A-3D0CA07962E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE4CC98-79E6-4F92-86D8-31902D071556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5222097B-5239-4545-BBC8-9EEDA96372F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574A108B-091A-4061-88A0-3A4AC75737DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344775B7-18C6-4689-A513-C9A9E2F0B7DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C348E59F-085B-481D-A18F-CD9F20AE31F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BBAACD-9D5B-4160-9266-D2C31C19990F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF467CB-26D0-49C8-B0D5-20089E907FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F0EDCD-B278-4B01-9048-5C316AB156AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72C34E7-9E2E-4EB8-B942-9314444A4F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55656D0E-1017-4C5A-BDC4-1182A744035E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83A4E9F-9188-438B-BA04-293460EAAA7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9EFA57-7AB4-4662-94CC-902C71546D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C02639B-16A5-499A-959C-7BA9DC1696D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F506BE-4540-4419-866C-70D67F9B5A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727B9CEA-AE45-4839-83A5-36D845823D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90FBD2D6-A917-4BBF-A215-4B61056EF5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D97E6B5-22B8-47F4-9C4B-61EB3E82FAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCA880C-7A43-42F0-B918-708A52301E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88B8238-3B59-4005-9368-707F0AD6DD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B881471-9471-4C0C-8075-C13039237850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A4543A-1774-4DD2-B7CA-59B373D9A285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302B973C-E014-4A4E-8F5D-558A18DF806E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380F947D-2B8A-4768-B1F4-B04F6CC1E855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93F09B9-FD14-4ABE-A650-1CAE4727FE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221D2428-6648-4B8D-8C38-68ED6480748A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23807",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506555/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506555/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T15:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "npvmgr.exe in BakBone NetVault Backup 8.22 Build 29 allows remote attackers to cause a denial of service (daemon crash) via a packet to (1) TCP or (2) UDP port 20031 with a large value in an unspecified size field, which is not properly handled in a malloc operation.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "npvmgr.exe en BakBone NetVault Backup v8.22 Build 29 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de paquetes (1) TCP o (2) UDP puerto 20031 con un valor largo en un campo de tamaño sin especipicar, que no es manejado adecuadamente en una operación alloc. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bakbone:netvault:8.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33CE5E34-EB90-4283-89EB-48882843846A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36847",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.insight-tech.org/index.php?p=bakbone-netvault-backup-8-22-build-29-remote-dos",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.insight-tech.org/index.php?p=bakbone-netvault-backup-8-22-build-29-remote-dos",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T15:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MP3 Collector 2.3 allows remote attackers to cause a denial of service (application crash) via a long URL in a .m3u playlist file."
      }, {
        "lang" : "es",
        "value" : "MP3 Collector v2.3 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de una URL larga en un fichero de lista de reproducción .m3u."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:collectorz:mp3_collector:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9169BCB3-6B9A-43E3-A8FF-2ADFD6AEE7C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T15:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with __ (underscore underscore) sequences, which are incompatible with an XSS protection mechanism provided by Microsoft ASP.NET."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en RADactive I-Load anterior a v2008.2.5.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de parámetros con nombres que comienzan con secuencias  __ (guión bajo guión bajo)que es incompatible con un mecanismo de protección XSS proporcionado por Microsoft ASP.NET."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2008.r2",
            "matchCriteriaId" : "1DA27D85-9DA0-4882-A1D4-5242AF972523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE74540D-CEF8-4D69-9B5C-EF65AB75297E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9C87F5-72A5-4067-88B3-AF93063D299E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013704F2-FE79-4576-8A9B-5BF8F57B64B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.6.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5482B06C-8E4E-46CD-B828-33BB9A535EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7C075F-0A1B-4216-B32C-B95CD73442E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E66E491-7785-4371-AE45-DA957D48DC3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E1B949F-5984-4726-B0AA-901A7C9B82C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F93132F-BD03-4731-9EBF-607F0C1E2CD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73C8F452-D278-4B4D-9C35-BF993894DF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A99B631-3142-413E-A00E-2A914A941A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD79EE0A-1603-43C3-BD22-3D3E6E3A542B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10AC750D-2FD5-40B2-807E-3A7693FAB4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A765BE3-9BE1-46B1-8C9C-A274D8AFBEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06A2416-1CD5-4F22-AD19-FADFE6D94997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30F2246-03AB-4A99-B2CB-2B116F70F7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508A871B-64F7-411E-9911-95E51D070D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "556A339D-308F-4B16-8080-2756CC4225FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F277DA-2B18-4CFF-8C0B-03D8B226982D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88B1BC55-4481-4B17-8137-C65D5F4BD651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D573A940-3848-4653-B92A-3D0CA07962E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE4CC98-79E6-4F92-86D8-31902D071556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5222097B-5239-4545-BBC8-9EEDA96372F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574A108B-091A-4061-88A0-3A4AC75737DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344775B7-18C6-4689-A513-C9A9E2F0B7DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C348E59F-085B-481D-A18F-CD9F20AE31F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BBAACD-9D5B-4160-9266-D2C31C19990F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF467CB-26D0-49C8-B0D5-20089E907FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F0EDCD-B278-4B01-9048-5C316AB156AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72C34E7-9E2E-4EB8-B942-9314444A4F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55656D0E-1017-4C5A-BDC4-1182A744035E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83A4E9F-9188-438B-BA04-293460EAAA7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9EFA57-7AB4-4662-94CC-902C71546D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C02639B-16A5-499A-959C-7BA9DC1696D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F506BE-4540-4419-866C-70D67F9B5A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727B9CEA-AE45-4839-83A5-36D845823D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90FBD2D6-A917-4BBF-A215-4B61056EF5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D97E6B5-22B8-47F4-9C4B-61EB3E82FAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCA880C-7A43-42F0-B918-708A52301E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88B8238-3B59-4005-9368-707F0AD6DD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B881471-9471-4C0C-8075-C13039237850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A4543A-1774-4DD2-B7CA-59B373D9A285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302B973C-E014-4A4E-8F5D-558A18DF806E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380F947D-2B8A-4768-B1F4-B04F6CC1E855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93F09B9-FD14-4ABE-A650-1CAE4727FE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221D2428-6648-4B8D-8C38-68ED6480748A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B78DDD-E312-47AA-81DB-538AC5B21A69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/23807",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58195",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506555/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/23807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506555/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T15:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to read arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en WebCoreModule.ashx en RADactive I-Load anterior a v2008.2.5.0 permite a atacantes remotos leer ficheros de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2008.2.4.0",
            "matchCriteriaId" : "4F139A75-38DA-423B-BF6A-0F72D289C3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE74540D-CEF8-4D69-9B5C-EF65AB75297E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9C87F5-72A5-4067-88B3-AF93063D299E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013704F2-FE79-4576-8A9B-5BF8F57B64B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.6.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5482B06C-8E4E-46CD-B828-33BB9A535EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7C075F-0A1B-4216-B32C-B95CD73442E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E66E491-7785-4371-AE45-DA957D48DC3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E1B949F-5984-4726-B0AA-901A7C9B82C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F93132F-BD03-4731-9EBF-607F0C1E2CD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73C8F452-D278-4B4D-9C35-BF993894DF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A99B631-3142-413E-A00E-2A914A941A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD79EE0A-1603-43C3-BD22-3D3E6E3A542B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10AC750D-2FD5-40B2-807E-3A7693FAB4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A765BE3-9BE1-46B1-8C9C-A274D8AFBEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06A2416-1CD5-4F22-AD19-FADFE6D94997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30F2246-03AB-4A99-B2CB-2B116F70F7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508A871B-64F7-411E-9911-95E51D070D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "556A339D-308F-4B16-8080-2756CC4225FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F277DA-2B18-4CFF-8C0B-03D8B226982D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88B1BC55-4481-4B17-8137-C65D5F4BD651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D573A940-3848-4653-B92A-3D0CA07962E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE4CC98-79E6-4F92-86D8-31902D071556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5222097B-5239-4545-BBC8-9EEDA96372F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574A108B-091A-4061-88A0-3A4AC75737DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344775B7-18C6-4689-A513-C9A9E2F0B7DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C348E59F-085B-481D-A18F-CD9F20AE31F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BBAACD-9D5B-4160-9266-D2C31C19990F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF467CB-26D0-49C8-B0D5-20089E907FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F0EDCD-B278-4B01-9048-5C316AB156AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72C34E7-9E2E-4EB8-B942-9314444A4F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55656D0E-1017-4C5A-BDC4-1182A744035E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83A4E9F-9188-438B-BA04-293460EAAA7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9EFA57-7AB4-4662-94CC-902C71546D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C02639B-16A5-499A-959C-7BA9DC1696D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F506BE-4540-4419-866C-70D67F9B5A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727B9CEA-AE45-4839-83A5-36D845823D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90FBD2D6-A917-4BBF-A215-4B61056EF5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D97E6B5-22B8-47F4-9C4B-61EB3E82FAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCA880C-7A43-42F0-B918-708A52301E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88B8238-3B59-4005-9368-707F0AD6DD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B881471-9471-4C0C-8075-C13039237850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A4543A-1774-4DD2-B7CA-59B373D9A285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302B973C-E014-4A4E-8F5D-558A18DF806E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380F947D-2B8A-4768-B1F4-B04F6CC1E855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93F09B9-FD14-4ABE-A650-1CAE4727FE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221D2428-6648-4B8D-8C38-68ED6480748A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23807",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506555/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506555/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T15:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathname."
      }, {
        "lang" : "es",
        "value" : "WebCoreModule.ashx en RADactive I-Load anterior a v2008.2.5.0 permite a atacantes remotos obtener información sensible a través de peticiones no especificadas que lanzan respuestas conteniendo el nombre de ruta de la carpeta saved-image."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2008.2.4.0",
            "matchCriteriaId" : "4F139A75-38DA-423B-BF6A-0F72D289C3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE74540D-CEF8-4D69-9B5C-EF65AB75297E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9C87F5-72A5-4067-88B3-AF93063D299E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013704F2-FE79-4576-8A9B-5BF8F57B64B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.6.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5482B06C-8E4E-46CD-B828-33BB9A535EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7C075F-0A1B-4216-B32C-B95CD73442E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E66E491-7785-4371-AE45-DA957D48DC3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E1B949F-5984-4726-B0AA-901A7C9B82C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F93132F-BD03-4731-9EBF-607F0C1E2CD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73C8F452-D278-4B4D-9C35-BF993894DF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A99B631-3142-413E-A00E-2A914A941A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD79EE0A-1603-43C3-BD22-3D3E6E3A542B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10AC750D-2FD5-40B2-807E-3A7693FAB4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A765BE3-9BE1-46B1-8C9C-A274D8AFBEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06A2416-1CD5-4F22-AD19-FADFE6D94997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30F2246-03AB-4A99-B2CB-2B116F70F7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508A871B-64F7-411E-9911-95E51D070D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "556A339D-308F-4B16-8080-2756CC4225FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F277DA-2B18-4CFF-8C0B-03D8B226982D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88B1BC55-4481-4B17-8137-C65D5F4BD651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D573A940-3848-4653-B92A-3D0CA07962E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE4CC98-79E6-4F92-86D8-31902D071556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5222097B-5239-4545-BBC8-9EEDA96372F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574A108B-091A-4061-88A0-3A4AC75737DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344775B7-18C6-4689-A513-C9A9E2F0B7DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C348E59F-085B-481D-A18F-CD9F20AE31F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BBAACD-9D5B-4160-9266-D2C31C19990F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF467CB-26D0-49C8-B0D5-20089E907FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F0EDCD-B278-4B01-9048-5C316AB156AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72C34E7-9E2E-4EB8-B942-9314444A4F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55656D0E-1017-4C5A-BDC4-1182A744035E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83A4E9F-9188-438B-BA04-293460EAAA7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:1.7.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9EFA57-7AB4-4662-94CC-902C71546D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C02639B-16A5-499A-959C-7BA9DC1696D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F506BE-4540-4419-866C-70D67F9B5A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727B9CEA-AE45-4839-83A5-36D845823D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90FBD2D6-A917-4BBF-A215-4B61056EF5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D97E6B5-22B8-47F4-9C4B-61EB3E82FAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCA880C-7A43-42F0-B918-708A52301E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88B8238-3B59-4005-9368-707F0AD6DD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B881471-9471-4C0C-8075-C13039237850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A4543A-1774-4DD2-B7CA-59B373D9A285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302B973C-E014-4A4E-8F5D-558A18DF806E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380F947D-2B8A-4768-B1F4-B04F6CC1E855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93F09B9-FD14-4ABE-A650-1CAE4727FE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radactive:i-load:2008.2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221D2428-6648-4B8D-8C38-68ED6480748A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23807",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506555/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506555/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T18:00:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP ProCurve Identity Driven Manager (IDM) A.02.x through A.02.03 and A.03.x through A.03.00, on Windows Server 2003 with IAS and Windows Server 2008 with NPS, allows local users to gain privileges via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en HP ProCurve Identity Driven Manager (IDM) vA.02.x hasta vA.02.03 y vA.03.x thasta vA.03.00, en Windows Server 2003 con IAS y Windows Server 2008 con NPS, permite a usuarios locales obtener privilegios a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:procurve_identity_driven_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "a.02.03",
            "matchCriteriaId" : "DE902038-73BC-4C6F-8181-71A7EC6B82EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:procurve_identity_driven_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "a.03.00",
            "matchCriteriaId" : "F13F4001-1A2C-433C-AE46-FE6EA1A87984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01798159",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36792",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2707",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01798159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T18:00:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Sender module in HP Remote Graphics Software (RGS) 5.1.3 through 5.2.6 allows remote authenticated users to execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el módulo Sender en HP Remote Graphics Software (RGS) v5.1.3 hasta v5.2.6 permite a usuarios autenticados remotamente ejecutar código de su elección a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD9C41B-6E00-4CF8-B4FC-EBE5293E5F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1406753-ECC8-4556-AE82-C86D3B58F8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89D247E-366C-4E94-BA90-B5EF22EB0545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8895029D-B8E9-4FA6-915E-CC5C28379ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:5.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F8272BD-8CF1-4105-80A1-DDBF5E23F6A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:remote_graphics_software:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAA7B98-509F-4353-AD35-E65D6F42B2B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/506783/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506783/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T18:00:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Quickr 8.1.0 services for WebSphere Portal allow remote attackers to inject arbitrary web script or HTML via the filename of a .odt file in a Lotus Quickr place, related to the Library template."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en IBM Lotus Quickr v8.1.0 servicios para WebSphere Portal permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del nombre de fichero de un fichero .odt en Lotus Quickr place, relacionado con la plantilla Library."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_quickr:8.1.0:*:ibm_webpshere_portal:*:*:*:*:*",
            "matchCriteriaId" : "824834E1-101E-44B3-9260-18776F0E8EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36899",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1LO36646",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21405163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2779",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1LO36646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21405163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T18:00:00.343",
      "lastModified" : "2023-11-07T02:04:26.517",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-2510.  Reason: This candidate is a duplicate of CVE-2009-2510.  Notes: All CVE users should reference CVE-2009-2510 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T18:00:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari, possibly before 4.0.3, on Mac OS X does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."
      }, {
        "lang" : "es",
        "value" : "Apple Safari, posiblemente anterior a v4.0.3, en Mac OS X no maneja adecuadamente un carácter '\\0' en un nombre de dominio de sujeto en el campo Common Name (CN) de un certificado X.509, lo que permite a atacantes hombre-en-el-medio (Man-in-the-middle) suplantar cualquier servidor SSL a través de un certificado manipulado expedido por una Autoridad de Certificación legítima, relacionado con CVE-2009-2408."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "9BD06245-0545-4364-8BB8-0271A041E25D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7F7275FE-C28A-4067-B9EF-BC99E10188DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E2249206-EF91-4168-B7C2-C1DB35CDFA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "641D655F-E210-4795-836C-BBF6D90B92E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8CB4DB96-AD8A-4E62-99DE-00E8A5BB79E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0b1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C1AFF940-B682-4191-9FE9-41910EC9E701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1FC456E7-727C-4932-A0D0-B0D168E8C523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "303E4616-1BB6-4D2D-8437-47F3D1B3C13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "0C79FA5B-7641-4151-9009-19CE34E502A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "40F22441-057B-4EA3-ADF2-8BB9026F8D8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "1185F2FF-3F54-4268-975D-E0EEB81B6674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B9714662-F089-430F-8049-8CF2ACEA2B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "CE1E0640-9B33-493A-9D0E-5CBA39863EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.5:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A927EAF2-D22F-453D-ACDE-5DE654CF9BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "03C2A522-2D71-4909-B86F-DBEE2C703F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "E75B3EAD-A9D3-4497-B3B0-E31E807010A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F837BE0E-9255-41C5-8E49-57090A574A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "4BDF3264-D1BF-4F76-8BC9-FA264B34A324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "826FA9E0-96A2-402A-98A1-7401140F2A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "586ED537-9BB4-4931-8891-E60740983C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "16654582-46DC-4E51-AE72-8C31B1E4FE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "73B23547-9710-44E9-A32A-6320C8E7A780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "30FA25DB-3525-4755-B038-6572B2457CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "EBFEED2C-8822-44EB-9296-82862DB14DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "29C67ABC-DD90-4989-9C20-80F7350CAA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "430E6664-DA03-41D5-A0F6-588DAE4E00C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9BE1D829-A6C9-4B5C-971B-5515FB92061D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "FD35EC3D-01E2-4FA7-95AC-A2E57C652649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "8BC133D1-E120-4B84-85DC-1D528CB77FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "C23C022E-293E-4247-A9AD-2F27C29E92A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "90D8505E-35D2-40A1-9D75-1A023C4DD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "75359A0E-823A-45C5-8C61-ABE225FB939F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "7033FB61-BE7D-4F00-BFBC-2E7B681D1876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1D087ECA-D214-4A6B-8F64-7F8AABB14706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "B4ABDE92-E8A8-431D-BF9C-9A54667A8664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "F8283078-D722-40AC-AF7A-7BC9AD19D051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A38B1A36-9963-4F19-9828-192F5F70F6C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "94956778-7E73-4B42-B7B1-0D11837B8476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "66132AA6-F3EA-408D-9C43-8E6C577C8F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "AC54BF41-2BF6-4604-AEFA-532453AB91E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "D8CFE8E7-B970-4B86-99E9-AC3F8626737C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "5DD711C6-5F41-4889-B818-2DFC9F8065DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.0b:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "FB772DB8-165F-4BDC-95F1-587C2A332741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.1:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "A0E6F326-291D-4FC4-ACEE-02D8AC410E86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0.2:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9ED5F6E2-4E16-405F-8701-81D850A51F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:4.0_beta:-:mac:*:*:*:*:*",
            "matchCriteriaId" : "DC06C0DC-9D59-483C-9043-B446C0A5B4A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.networkworld.com/news/2009/091709-microsoft-ie-security-hole.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36477",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.networkworld.com/news/2009/091709-microsoft-ie-security-hole.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T18:00:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Chrome, possibly 3.0.195.21 and earlier, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Google Chrome, posiblemente v3.0.195.21 y anteriores, no controla correctamente un caracter '\\0' en el nombre de dominio en el campo Common Name (CN) de un certificado X.509 lo cual permite a atacantes hombre-en-el-medio (man-in-the-middle) suplantar servidores SSL a su elección a través de un certificado manipulado expedido por un Autoridad de Certificación legítima , una cuestión relacionada con CVE-2009-2408. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.195.21",
            "matchCriteriaId" : "8B37560A-C9A9-4D6D-AD2A-C050DBD22628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D55D5075-D233-42D6-B1D6-77B7599650EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8FF77A-7802-4963-B532-3F16C7BB012C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73576CF-76EE-42A3-9955-D7991384B8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A4FEB5-11D8-4FFC-972D-A3B991176040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6313614-FC3C-488C-B80B-191797319A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D94F22-37B6-4938-966A-E1830D83FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0F9D75-B10D-468F-84D8-61B6A1230556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173D539E-045E-4429-80C9-5749BECC6CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2052352-FECC-4990-B0F4-A715694AD816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6659833E-E309-4797-84D4-A782237714A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4C0D93-0308-48D4-A953-9398B88E2868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5094C4-1338-4189-B5FD-C9AFFF091D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C0798F-CC7F-4069-810E-B81F8BB77CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F95770-F36F-43C0-986F-5C819648271E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCE1FD3-8D27-4304-97F9-6F9689F2498D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6CA696-49AA-4445-B978-96C1D8CE58DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CFA3BF-6C07-448B-8C83-AD4C524A6577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8497F93-D88A-4FFA-B988-7210608530A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FB50A3-FFDA-4BB9-A2C1-DA6DACC2DAAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F93BC8-FE87-4CEC-B28A-4B0B5A468EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D459C7-2555-42FA-9C68-619E410D7CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CDF938-2998-403F-B343-29B620E05D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F89EA6-B411-4887-90A1-FF3A054424F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D2BA3B-1C69-470C-9C40-001FAE82DDB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3583995C-CD74-401F-905D-65B73CFC4595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A621B1-3186-4CE2-8BCC-916027CC74CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F5223F1-85CD-4DF9-9665-BDF7B554A784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD7AFBA-A9A2-4EE9-B652-78D25EFBB690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B9D6ED9-D5C5-4CA9-84EA-8007F48CF597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7F7897-ECD1-499E-81CD-E224241B6607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7422307-271F-4953-9CA4-C50238D27BAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DCC3490-5B06-4992-8E31-CA46E18607B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F85551-EDB5-4790-8095-EFFA7DEC7F98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/36479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T18:00:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by (1) an OPTIONS request or (2) a crafted GET request, leading to a Message-handling Errors message containing a certain client intranet IP address, aka Bug ID CSCtb82159."
      }, {
        "lang" : "es",
        "value" : "Cisco ACE XML Gateway (AXG) y  ACE Web Application Firewall (WAF), anterior a v6.1, permite  a atacantes remotos obtener información sensible mediante una petición HTTP que carece de manejador. Como ha sido demostrado por (1) una petición OPTIONS o (2) una petición GET manipulada, que dan lugar a mensajes de error del tipo Message-handling Errors y que contienen la dirección IP de determinados clientes de la intranet. También conocido como Bug ID CSCtb82159."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0\\(3\\)",
            "matchCriteriaId" : "EE6B32BA-DF80-4CDD-8524-7E9D12B1B761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_web_application_firewall:6.0\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2069D4D3-526D-4D95-8C6B-0B290B27F9D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_web_application_firewall:6.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E02AA7-7DFC-4F62-AD97-CFBE693FDC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_web_application_firewall:6.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE209A78-EF5A-4C61-82A6-451B950E7490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_xml_gateway:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0\\(3\\)",
            "matchCriteriaId" : "2B805751-8CA7-4F46-BD06-1679DC8F8259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_xml_gateway:6.0\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8886926F-25CE-42CA-A949-DA50558F9A3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_xml_gateway:6.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA26824-6F54-403C-ACD6-2115C93BC1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ace_xml_gateway:6.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3554A382-474E-4C76-89FB-359151959159"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2009/Sep/0369.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.brainoverflow.org/advisories/cisco_ace_xml_gw_ip_disclosure.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_response09186a0080af8965.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Sep/0369.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.brainoverflow.org/advisories/cisco_ace_xml_gw_ip_disclosure.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_response09186a0080af8965.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2905",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-09-29T19:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) or possibly execute arbitrary code via a request to display a crafted text dialog box."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en textbox.c en newt v0.51.5, v0.51.6, y v0.52.2 permite a usuarios locales provocar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código de su elección a través de una petición que muestre un cuadro de diálogo de texto manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedorahosted:newt:0.51.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9369BF6-F195-4923-8238-99D7DD4A6A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedorahosted:newt:0.51.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04B72C6-F85B-4ADE-8C94-77EC372B9CA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedorahosted:newt:0.52.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB4145E-D96A-49AB-BCCA-C60496BE4BFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37922",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/38833",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/n/newt/newt_0.52.2-10+etch1.diff.gz",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100067251",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1894",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36515",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-837-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=523955",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8556",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9664",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1463.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/n/newt/newt_0.52.2-10+etch1.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100067251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-837-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=523955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1463.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T19:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Common Desktop Environment (CDE) in Sun Solaris 10, when Trusted Extensions is enabled, allow local users to execute arbitrary commands or bypass the Mandatory Access Control (MAC) policy via unknown vectors, related to a menu typo and the Style Manager."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Common Desktop Environment (CDE) en Solaris de Sun versión 10, cuando las extensiones de confianza están habilitadas, permiten a los usuarios locales ejecutar comandos arbitrarios u omitir la política de Control de Acceso Obligatorio (MAC) por medio de vectores desconocidos, relacionados con un error tipográfico de menú y el Administrador de Estilos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36822",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-126365-15-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139620-01-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-267488-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2756",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-126365-15-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-139620-01-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-267488-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T19:30:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in profiles/html/simpleSearch.do in IBM Lotus Connections 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos remotos en tistios cruzados (XSS) en profiles/html/simpleSearch.do en  IBM Lotus Connections v2.0.1, permite a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través del parámetro \"name\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_connections:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA241C8-79AC-4D90-A788-4CDA92ECB40A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36849",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024414",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1LO44244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1LO44244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T21:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Informix Dynamic Server (IDS) 10.00 before 10.00.xC11, 11.10 before 11.10.xC4, and 11.50 before 11.50.xC5 allows remote attackers to cause a denial of service (memory corruption, assertion failure, and daemon crash) by sending a long password over a JDBC connection."
      }, {
        "lang" : "es",
        "value" : "IBM Informix Dynamic Server (IDS) v10.00 anterior a v10.00.xC11, v11.10 anterior a v11.10.xC4, y v11.50 anterior a v11.50.xC5 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de demonio) enviando una contraseña larga sobre una conexión JDBC."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1716E256-B186-442F-8C4C-9305E0953081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257DA554-937D-4BA1-9131-2F978C6E5E62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A81C5A16-B696-4A8D-AFD2-1A51B3BE4EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48562C58-0055-4394-9B40-D5730FE6A8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45791C63-A04C-4990-A78D-0529C8E9CC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55991F0F-2770-4367-9850-93504D33580C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9C4B48-B294-4BAF-99EE-7D2E1B024BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461C0E60-9EB5-42EA-835C-B1F5234E8CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DB33A6-1D6E-476A-97E4-8EE60EA43127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809EB926-BCB1-4EEF-B385-5C487B1F8301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3398187-9A9C-4584-A186-01DB36C88219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC21790C-D057-4B11-8D0C-202B71B1E7A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539DE4E7-8531-43E8-AE75-178BFC4324F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429D6E5F-E249-4EA5-B2BB-DDF3B2B20676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:11.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE122FD4-9164-4638-8E98-7670908E392B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:11.50.xc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99EBE74-8437-4DFD-B44A-5BD06B708BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:11.50.xc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E504E6-5293-4255-9FDB-CB115A5719D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:11.50.xc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B96A8DF-88C4-499C-823B-3FB5ECDC9752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:11.50.xc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7697326E-CF54-46E3-9ECF-819F6BF53C1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36853",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC61195",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2786",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC61195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T21:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the expected drops of certain table functions upon a loss of privileges by the functions' definers, which has unspecified impact and remote attack vectors."
      }, {
        "lang" : "es",
        "value" : "IBM DB2 v8 anterior a FP18, v9.1 anterior a FP8, y v9.5 anterior a FP4 no realiza los borrados esperados de ciertas funciones de tabla por una perdida de privilegios por las definiciones de las funciones, lo cual tiene un impacto no especificado y vectores de ataque a distancia."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DE35AE57-E7D6-4CD0-AE86-D414009C361E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp10:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE50207-5779-445A-B3E7-FA548242BD8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp11:*:*:*:*:*:*",
            "matchCriteriaId" : "940D9A1D-DD61-4C78-8ADC-434F78E5626B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp12:*:*:*:*:*:*",
            "matchCriteriaId" : "2185F942-DCEC-4EE4-840E-62C4C6F1D6FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*",
            "matchCriteriaId" : "333F67D2-27CC-4013-B3FA-63BF6F557269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*",
            "matchCriteriaId" : "77D67C50-31B6-4058-9B4D-F06EF8D9B3BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp15:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA59598-F121-491D-BE8C-D7712A3D6E99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp16:*:*:*:*:*:*",
            "matchCriteriaId" : "E0252A93-49D5-4C5E-B774-8400526CA813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp17:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC433D0-58E3-4744-BAB4-421BC5C3F04C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "72FA9A16-8AFD-4D93-95B4-EAB6E6030D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB299EAB-31AA-4BAA-B477-0F909A8418AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD22E1E-F5BC-45D5-98F4-EDEE87D718F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "222C1B84-0C28-451F-BB02-4CB925263312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "08177181-660C-4BF4-9031-74EE89297CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp7:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5FF14E-2971-4F3F-AD25-D00B0FEDA08F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp8:*:*:*:*:*:*",
            "matchCriteriaId" : "19584860-5ADF-4647-AF39-88C236407FAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp9:*:*:*:*:*:*",
            "matchCriteriaId" : "20FE296C-25D0-4689-BAA3-AFCA2C1CC388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF01163-F805-4FC8-9836-462034D1B5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "757E30FB-2EFB-4B3D-9931-17D584D433A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "47455B4A-6E10-417F-9974-B0AA7F3180FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "84156C5B-EFC6-4733-A868-C3C51CFBA7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:*",
            "matchCriteriaId" : "3D511307-1EBB-408B-BCDE-C6BEFCF154C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "58147402-53D5-4F15-862B-EE3DCCD75E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "84C925CD-E753-401F-9EC0-6E3D9861C818"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36890",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC63548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ46658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ46773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ46774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21386689",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21403619",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21426108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21432298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/58477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC63548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ46658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ46773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ46774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21386689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21403619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21426108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21432298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T21:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 8 before FP18, 9.1 before FP8, and 9.5 before FP4 allows remote authenticated users to bypass intended access restrictions, and update, insert, or delete table rows, via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "IBM DB2 8 anterior a FP18, v9.1 anterior a FP8, y v9.5 anterior a FP4 permite a usuarios remotos autenticados eludir las restricciones de acceso, y actualizar, insertar o eliminar filas de la tabla, a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DE35AE57-E7D6-4CD0-AE86-D414009C361E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp10:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE50207-5779-445A-B3E7-FA548242BD8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp11:*:*:*:*:*:*",
            "matchCriteriaId" : "940D9A1D-DD61-4C78-8ADC-434F78E5626B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp12:*:*:*:*:*:*",
            "matchCriteriaId" : "2185F942-DCEC-4EE4-840E-62C4C6F1D6FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*",
            "matchCriteriaId" : "333F67D2-27CC-4013-B3FA-63BF6F557269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*",
            "matchCriteriaId" : "77D67C50-31B6-4058-9B4D-F06EF8D9B3BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp15:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA59598-F121-491D-BE8C-D7712A3D6E99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp16:*:*:*:*:*:*",
            "matchCriteriaId" : "E0252A93-49D5-4C5E-B774-8400526CA813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp17:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC433D0-58E3-4744-BAB4-421BC5C3F04C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "72FA9A16-8AFD-4D93-95B4-EAB6E6030D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB299EAB-31AA-4BAA-B477-0F909A8418AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD22E1E-F5BC-45D5-98F4-EDEE87D718F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "222C1B84-0C28-451F-BB02-4CB925263312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "08177181-660C-4BF4-9031-74EE89297CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp7:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5FF14E-2971-4F3F-AD25-D00B0FEDA08F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp8:*:*:*:*:*:*",
            "matchCriteriaId" : "19584860-5ADF-4647-AF39-88C236407FAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:fp9:*:*:*:*:*:*",
            "matchCriteriaId" : "20FE296C-25D0-4689-BAA3-AFCA2C1CC388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF01163-F805-4FC8-9836-462034D1B5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "757E30FB-2EFB-4B3D-9931-17D584D433A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "47455B4A-6E10-417F-9974-B0AA7F3180FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "84156C5B-EFC6-4733-A868-C3C51CFBA7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:*",
            "matchCriteriaId" : "3D511307-1EBB-408B-BCDE-C6BEFCF154C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "58147402-53D5-4F15-862B-EE3DCCD75E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "84C925CD-E753-401F-9EC0-6E3D9861C818"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36890",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21386689",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21403619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21386689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21403619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T21:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors."
      }, {
        "lang" : "es",
        "value" : "IBM DB2 v9.1 anterior a FP8 no requiere el privilegio SETSESSIONUSER para la sentencia SET SESSION AUTHORIZATION, lo que tiene un impacto y vectores de ataque no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF01163-F805-4FC8-9836-462034D1B5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "757E30FB-2EFB-4B3D-9931-17D584D433A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "47455B4A-6E10-417F-9974-B0AA7F3180FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "84156C5B-EFC6-4733-A868-C3C51CFBA7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:*",
            "matchCriteriaId" : "3D511307-1EBB-408B-BCDE-C6BEFCF154C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36890",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21403619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21403619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T23:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before 2.2.1, do not follow the KeyDescriptor element's Use attribute, which allows remote attackers to use a certificate for both signing and encryption when it is designated for just one purpose, potentially weakening the intended security application of the certificate."
      }, {
        "lang" : "es",
        "value" : "OpenSAML v2.x anterior a v2.2.1 y XMLTooling v1.x anterior a v1.2.1, utilizado por Internet2 Shibboleth Service Provider v2.x anterior a v2.2.1,no siguen el atributo Use del elemento KeyDescriptor, lo cual permite a atacantes remotos utilizar un certificado para la firma y encriptación, cuando esta designado para un solo fin, debilitando potencialmente el propósito de aplicación de seguridad del certificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:opensaml:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "258372E2-533F-46CB-B25A-5ECB3CC2F22F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:opensaml:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1122AD73-8FDD-4387-A237-B493CE0D547E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:opensaml:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0192C838-FD63-4CF7-9BF0-9BAFF101C612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:xmltooling:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D36F93-B9DE-422C-AD73-3D8AA58DB6BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:xmltooling:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5FCBF08-0DD9-4899-B4F5-5D7BFB0B5830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:xmltooling:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5457FF44-CB80-486B-B3B2-D40F34565976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:xmltooling:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C3A371A-AF3E-44E5-8854-C5D61FF5660C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE02AD93-8ED6-46F1-81D8-B70CB9EB79BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CF3BEC-262B-4901-8D73-D8BB1869A166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:1.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EE490F-9E85-44F9-9608-86D4FBDAD331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:1.3f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4515685C-B170-4829-9261-8FAD5C9F1874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC9CB94-188C-4BE2-AD8E-EBBA5BA3731E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E3DA80-673A-47D7-BDE2-0AC112BB6C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "673CCD0B-9202-4EBA-96B2-11A438E8D464"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36855",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36868",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36876",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://shibboleth.internet2.edu/secadv/secadv_20090817a.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1895",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1896",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36516",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugs.internet2.edu/jira/browse/CPPOST-28",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://shibboleth.internet2.edu/secadv/secadv_20090817a.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugs.internet2.edu/jira/browse/CPPOST-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T23:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet2 Shibboleth Service Provider software 1.3.x before 1.3.3 and 2.x before 2.2.1, when using PKIX trust validation, does not properly handle a '\\0' character in the subject or subjectAltName fields of a certificate, which allows remote man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."
      }, {
        "lang" : "es",
        "value" : "El software Internet2 Shibboleth Service Provider v1.3.x anterior a v1.3.3 y v2.x anterior a v2.2.1, cuando se utiliza la validación de confianza PKIX, no controla correctamente un caracter '\\0' en los campos subject o subjectAltName de un certificado, lo cual permite a atacantes remotos hombre-en-el-medio (man-in-the-middle) suplantar servidores SSL a su elección a través de certificados manipulados expedidos por una Autoridad de Certificación, un tema  relacionado con CVE-2009-2408."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE02AD93-8ED6-46F1-81D8-B70CB9EB79BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CF3BEC-262B-4901-8D73-D8BB1869A166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:1.3f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4515685C-B170-4829-9261-8FAD5C9F1874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC9CB94-188C-4BE2-AD8E-EBBA5BA3731E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E3DA80-673A-47D7-BDE2-0AC112BB6C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "673CCD0B-9202-4EBA-96B2-11A438E8D464"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36855",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36861",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36876",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://shibboleth.internet2.edu/secadv/secadv_20090817.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://shibboleth.internet2.edu/secadv/secadv_20090817.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T23:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, and XMLTooling before 1.2.2 as used in Internet2 Shibboleth Service Provider software 2.x before 2.2.1, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed encoded URL."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en OpenSAML anterior a v1.1.3 utilizado en Internet2 Shibboleth Service Provider software v1.3.x anterior a v1.3.4, y XMLTooling anterior a v1.2.2 utilizado en Internet2 Shibboleth Service Provider software v2.x anterior a 2.2.1, permite a atacantes remotos provocar una denegación de servicio y posiblemente ejecutar código de su elección a través de una URL codificada mal formada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE02AD93-8ED6-46F1-81D8-B70CB9EB79BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CF3BEC-262B-4901-8D73-D8BB1869A166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C44598D-2BB6-48AB-81E8-3789D0056B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:1.3f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4515685C-B170-4829-9261-8FAD5C9F1874"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:opensaml:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "619E183F-BAA6-4964-8B58-175856734146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:opensaml:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "759EB34A-48FB-43E8-9030-545E41622371"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:xmltooling:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D36F93-B9DE-422C-AD73-3D8AA58DB6BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:xmltooling:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5FCBF08-0DD9-4899-B4F5-5D7BFB0B5830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:xmltooling:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5457FF44-CB80-486B-B3B2-D40F34565976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:xmltooling:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C3A371A-AF3E-44E5-8854-C5D61FF5660C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:xmltooling:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB54B310-7562-48E3-A514-04D70AF7A28B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC9CB94-188C-4BE2-AD8E-EBBA5BA3731E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E3DA80-673A-47D7-BDE2-0AC112BB6C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:shibboleth-sp:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "673CCD0B-9202-4EBA-96B2-11A438E8D464"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36869",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36870",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://shibboleth.internet2.edu/secadv/secadv_20090826.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://shibboleth.internet2.edu/secadv/secadv_20090826.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T23:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Blackberry Browser in RIM BlackBerry Device Software 4.5.0 before 4.5.0.173, 4.6.0 before 4.6.0.303, 4.6.1 before 4.6.1.309, 4.7.0 before 4.7.0.179, and 4.7.1 before 4.7.1.57 does not properly handle \"hidden\" characters including a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows remote man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."
      }, {
        "lang" : "es",
        "value" : "El Navegador de Blackberry en RIM BlackBerry Device Software v4.5.0 anterior a v4.5.0.173, 4.6.0 anterior a v4.6.0.303, 4.6.1 anterior a v4.6.1.309, 4.7.0 anterior a v4.7.0.179, y 4.7.1 anterior a v4.7.1.57 no maneja apropiadamente caracteres \"ocultos\" incluyendo un carácter '\\0' en un nombre de dominio en el campo nombre común (NC) de un certificado X.509, lo cual permite a atacantes hombre-en-el-medio (man-in-the-middle) remotos suplantar servidores SSL a su elección a través de de un certificado manipulado expedido por una Autoridad de Certificación legítima, un tema relacionado con CVE-2009-2408."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_device_software:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA413B7D-D802-4E3C-A7B6-336A18725F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_device_software:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AA30719-43F4-4E82-BAAE-3BE053AB500A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_device_software:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B0686F-CEE0-49DB-8393-C1100E13AD75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_device_software:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36C6DD2-3695-4D65-B4F5-ADA6C3E69AA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_device_software:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C49F10-787E-4AFB-8830-E6C3645BD2E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36875",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/btsc/viewContent.do?externalId=KB19552",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/btsc/viewContent.do?externalId=KB19552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-29T23:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in (1) src/content/js/connection/sftp.js and (2) src/content/js/connection/controlSocket.js.in in FireFTP Extension 1.0.5 for Firefox allows remote authenticated SFTP users to cause victims to alter permissions, delete, download, or move the wrong file via a filename containing \" (double quotes), which is not properly filtered or encoded when FireFTP constructs the command to send to psftp.exe."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de argumento en (1) src/content/js/connection/sftp.js y (2) src/content/js/connection/controlSocket.js.in en extensión FireFTP v1.0.5 para Firefox permite a usuarios SFTP autenticados remotamente provocar alteraciones de permisos de usuarios, eliminar, descargar, o mover  el fichero erróneo a través de un nombre de fichero que contenga \" (doble comilla), lo que no es filtrado o codificado adecuadamente cuando FireFTP crea el comando de envío a psftp.exe."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nightlight:fireftp:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9727600C-CCB5-4D51-B788-D341259E659C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6A30E-7577-4569-9309-53A0AF7FE3AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36860",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/fireftp105-en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.74%3Br2=1.75%3Bf=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.75%3Br2=1.76%3Bf=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/sftp.js.diff?r1=1.8%3Br2=1.9%3Bf=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36536",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/fireftp105-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.74%3Br2=1.75%3Bf=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.75%3Br2=1.76%3Bf=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/sftp.js.diff?r1=1.8%3Br2=1.9%3Bf=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Bibliography (Biblio) 5.x before 5.x-1.17 and 6.x before 6.x-1.6, a module for Drupal, allows remote attackers, with \"create content displayed by the Bibliography module\" permissions, to inject arbitrary web script or HTML via a title."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos remotos en Bibliography (Biblio) v5.x anterior v5.x-1.17 y v6.x anterior v6.x-1.6, un módulo para Drupal, permite a atacantes remotos, con permisos \"create content displayed by the Bibliography module\", ejecutar código web o HTML de su elección a través de un título."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD83453-158A-4EA6-9B31-6CBF9960BB15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31EDA16F-FE6F-496D-B09F-2990F4AF8F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9ED48E-8461-4674-9F24-B8C72D179D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F23F41C-02F3-4DA3-81DA-4F5579C7E4CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8414F9D4-584F-4B7A-8020-63E1AE226B41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F22DA6A-D72C-40CC-8EED-BE649A29BE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFB1183-4F02-48CB-88DB-99E3DA3D00A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28D56DF2-45FE-4A8E-9D87-0E8C25EA07C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC36595F-79CF-4694-B2EA-EA06CA236C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2769ED5B-A596-4758-9EDB-000B2F4DFDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0651B521-36B5-494E-9DC2-6C8CE5267B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7965614B-DB2B-4C65-AB5B-2FAA2EF4E549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97495850-BE0F-477F-A18F-79B5399F7E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931959BA-0C44-4BF2-A099-FDF07B05B662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2464A305-75EC-46FE-A69A-98ABFC22324B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2450F355-CD0A-4BDA-804D-4EA51DCC4029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3989C860-C412-4A91-B584-F7B09921AE86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AF5118-CDD5-4CA5-9313-470C6C506D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9E7CF2-3334-41FD-B2DA-340D9CC21108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1F0873DC-E2E4-4FA5-9DD9-775D2657A680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3AE0DEEE-453E-4BD0-89D8-9C10DD3FCC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB166C7-5796-4AB1-BA10-1E3AA3F832C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0763ACA3-4C1B-4A91-95D1-3DB6ACAE16D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "5475D821-4A6C-4A62-A92F-C29052F41D4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46596EE-279E-47B0-A47F-C4FF688E04F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8747E464-44C4-46BF-B016-19BD320152E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C66244-92F3-4E05-A861-9C781082C500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC3A93D-812B-4D90-97E0-40EF6434AD81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C275BC9-D6A8-4B95-9772-56B34A5A6BC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE4D9F1-17F5-4D49-A00C-BD61C6199AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C9EC9D-0607-4C9F-AA3A-1AC732B5F8C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B58F51-6EA3-4098-91AB-30271660E693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C66CD23-A4DE-4991-BDFA-E5FDFC326177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD580D94-4404-4873-9F73-BF92D6896BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D8988D-7534-44C3-8D9B-C1CAE8F031DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6470082E-169E-468C-8D9A-C39E4F0B26BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E87EA86-1311-404E-9BF7-2BE1CD3FCBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9003E136-0295-46E6-B9EB-F04F4CE0D3B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8CCBB27-BCF3-4719-B407-BD218685AFD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/534744",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/534752",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/534842",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36083",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35865",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/534744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/534752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/534842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the iCRM Basic (com_icrmbasic) component 1.4.2.31 for Joomla! allows remote attackers to execute arbitrary SQL commands via the p3 parameter to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente iCRM Basic (com_icrmbasic) v1.4.2.31 para Joomla! permite a los atacantes remotos ejecutar comandos SQL a través del parámetro p3 en index.php. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isygen:icrm_basic:1.4.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB63CC1-A2EB-401F-8A1E-BD54AF5FA0C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36892",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A certain interface in the iCRM Basic (com_icrmbasic) component 1.4.2.31 for Joomla! does not require administrative authentication, which has unspecified impact and remote attack vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Ciertas interfaces en el componente iCRM Basic (com_icrmbasic) v1.4.2.31 para Joomla! no requiere autenticación administrativa, lo que tiene un impacto y vectores de ataque no especificados. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isygen:com_icrmbasic:1.4.2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054E90FC-DA5B-431A-9175-5A2E711524FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36892",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TrustPort Antivirus before 2.8.0.2266 and PC Security before 2.0.0.1291 use weak permissions (Everyone: Full Control) for files under %PROGRAMFILES%, which allows local users to gain privileges by replacing executables with Trojan horse programs."
      }, {
        "lang" : "es",
        "value" : "TrustPort Antivirus anterior v2.8.0.2266 y PC Security anterior v2.0.0.1291 usa permisos débiles (Todos: control total) para archivos bajo %PROGRAMFILES%, que permite a usuarios locales obtener privilegios reemplazando ejecutables con programas troyanos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trustport:antivirus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.0.2266",
            "matchCriteriaId" : "A3491438-D727-4570-9F06-2139AF4A7A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trustport:pc_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0.1291",
            "matchCriteriaId" : "4F10BB6D-0F52-4CB1-82BB-1EC91C7DF580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36880",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506751/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustport.com/en/notices/security-update-of-trustport-products",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506751/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustport.com/en/notices/security-update-of-trustport-products",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the Create New Site feature in GlobalSCAPE CuteFTP Professional, Home, and Lite 8.3.3 and 8.3.3.0054 allows user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a site list containing an entry with a long label."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica -heap- en Create New Site feature en GlobalSCAPE CuteFTP Professional, Home, y Lite v8.3.3 y v8.3.3.0054 permite a atacantes remotos asistidos por el usuario causar una denegación de servicio (caída de memoria) o probablemente ejecutar código de su elección a a través de un sitio list contenido en una entrada con una etiqueta larga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalscape:cuteftp:8.3.3:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BCF5D9D6-3D4D-4F79-82E3-57E479D8A81D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalscape:cuteftp:8.3.3:*:lite:*:*:*:*:*",
            "matchCriteriaId" : "1D575E21-8EEB-4E11-BD32-BA5F22A85715"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalscape:cuteftp:8.3.3:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "06059F91-6E14-4825-8202-4E7F357CDC1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalscape:cuteftp:8.3.3.0054:*:home:*:*:*:*:*",
            "matchCriteriaId" : "1F29B63D-9616-4F46-886C-B675C268AAD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalscape:cuteftp:8.3.3.0054:*:lite:*:*:*:*:*",
            "matchCriteriaId" : "CE306528-4AC4-40FA-BD4D-62428CD4724E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalscape:cuteftp:8.3.3.0054:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "0127ED83-D5CF-4CE4-9EF3-4BACF6442282"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36874",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.packetstormsecurity.org/0909-exploits/Dr_IDE-CuteFTP_FTP_8.3.3-PoC.py.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.packetstormsecurity.org/0909-exploits/Dr_IDE-CuteFTP_FTP_8.3.3-PoC.py.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Core FTP 2.1 build 1612 allows user-assisted remote attackers to execute arbitrary code via a long hostname in an FTP server entry in a site backup file.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Core FTP v2.1 build 1612 permite a atacantes remotos asistidos ejecutar código de su elección  a través del un hostname largo en una entrada al servidor FTP en un archivo backup. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coreftp:core_ftp:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE96BE-78EE-474E-A2E4-ECAF508A21DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36872",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0909-exploits/coreftp_local.py.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0909-exploits/coreftp_local.py.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos remotos en sitios cruzados (XSS) en la interface J-Web en Juniper JUNOS v8.5R1.14 y v9.0R1.1 permite a atacantes remotos ejecutar código web o HTML de su elección a través de PATH_INFO en la URI por defecto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:8.5:r1.14:*:*:*:*:*:*",
            "matchCriteriaId" : "4D5C18F9-DAA8-4F1A-8A5E-9A544C607624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:9.0:r1.1:*:*:*:*:*:*",
            "matchCriteriaId" : "1A06F9D6-ED62-4985-9852-A528D63679E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36829",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-08",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36537",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2784",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to (1) the pinghost program, reachable through the diagnose program; or (2) the traceroute program, reachable through the diagnose program; or (3) the probe-limit parameter to the configuration program; the (4) wizard-ids or (5) pager-new-identifier parameter in a firewall-filters action to the configuration program; (6) the cos-physical-interface-name parameter in a cos-physical-interfaces-edit action to the configuration program; the (7) wizard-args or (8) wizard-ids parameter in an snmp action to the configuration program; the (9) username or (10) fullname parameter in a users action to the configuration program; or the (11) certname or (12) certbody parameter in a local-cert (aka https) action to the configuration program."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en (XSS) la interface J-Web en Juniper JUNOS v8.5R1.14 permite a usuarios autenticados remotamente ejecutar código web y HTML de su elección a través del parámetro host en (1) el programa pinghost, accesible a través del programa diagnose; o (2) el programa traceroute, accesible a través del programa diagnose; o (3)el parámetro probe-limit en el programa configuration; los (4) parámetros wizard-ids o (5)parámetro pager-new-identifier en una acción firewall-filters en el programa configuration (6) parámetro the cos-physical-interface-name en una acción cos-physical-interfaces-edit en el programa configuration; los parámetros (7) wizard-args o (8) wizard-ids en una acción snmp en el programa configuration; los parámetros(9) username o (10) fullname en una acción users en el programa configuration; o los parámetros (11) certname o (12) certbody en una acción local-cert (como https) en el programa configuration."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:8.5:r1.14:*:*:*:*:*:*",
            "matchCriteriaId" : "4D5C18F9-DAA8-4F1A-8A5E-9A544C607624"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36829",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-09",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36537",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2784",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via (1) the JEXEC_OUTID parameter in a JEXEC_MODE_RELAY_OUTPUT action to the jexec program; the (2) act, (3) refresh-time, or (4) ifid parameter to scripter.php; (5) the revision parameter in a rollback action to the configuration program; the m[] parameter to the (6) monitor, (7) manage, (8) events, (9) configuration, or (10) alarms program; (11) the m[] parameter to the default URI; (12) the m[] parameter in a browse action to the default URI; (13) the wizard-next parameter in an https action to the configuration program; or the (14) Contact Information, (15) System Description, (16) Local Engine ID, (17) System Location, or (18) System Name Override SNMP parameter, related to the configuration program."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la interface J-Web en Juniper JUNOS v8.5R1.14 permite a usuarios autentificados remotos ejecutar código web o HTML a su elección a través de (1) el parámetro JEXEC_OUTID en una acción EXEC_MODE_RELAY_OUTPUT en el programa jexec; los parámetros (2) act, (3) refresh-time, o (4) ifid en scripter.php; (5) el parámetro revision en una acción rollback en el programa configuration; el parámetro m[] en el(6) monitor, (7) manage, (8) events, (9) configuration, o (10) programa alarms; (11) el parámetro m[] en la URI por defecto; (12) el parámetro m[] en una acción browse en la URI por defecto; (13) el parámetro wizard-next en una acción https en el programa configuración; o (14) Contact Information, (15) System Description, (16) Local Engine ID, (17) System Location, o (18) parámetro System Name Override SNMP , relacionado con el programa configuration program."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:8.5:r1.14:*:*:*:*:*:*",
            "matchCriteriaId" : "4D5C18F9-DAA8-4F1A-8A5E-9A544C607624"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36829",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-10",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36537",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2784",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Bibliography (aka Biblio) module 6.x-1.6 for Drupal allows remote authenticated users, with certain content-creation privileges, to inject arbitrary web script or HTML via the Title field, probably a different vulnerability than CVE-2009-3479."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Bibliography (como Biblio) módulo v6.x-1.6 para Drupal permite a usuarios autentificados remotamente, con ciertos privilegios de creación de contenidos, ejecutar código web o HTML de su elección a través del campo Title, posiblemente una vulnerabilidad diferente que CVE-2009-3479."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ron_jerome:bibliography:6.x-1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093094D5-F095-4708-A74A-CB0E1B810584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2009/Sep/0373.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36834",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Sep/0373.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command."
      }, {
        "lang" : "es",
        "value" : "Adobe Photoshop Elements v8.0 instala Adobe Active File Monitor V8 service con un descriptor de seguridad no seguro, que permite a usuarios locales (1) parar el servicio a través de comando stop, (2) ejecutar comandos de su elección como SYSTEM usando el comando config para modificar la variable binPaht, o (3) reiniciar el servicio a través del comando start."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop_elements:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "218766FE-4F82-4704-BA6A-C0CF1D148DA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.adobe.com/psirt/2009/09/potential_photoshop_elements_8.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://retrogod.altervista.org/9sg_adobe_pe_local.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36895",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506806/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36542",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022963",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2798",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://blogs.adobe.com/psirt/2009/09/potential_photoshop_elements_8.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://retrogod.altervista.org/9sg_adobe_pe_local.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506806/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNU Wget before 1.12 does not properly handle a '\\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."
      }, {
        "lang" : "es",
        "value" : "GNU Wget, en versiones anteriores a la 1.12 no maneja adecuadamente un caracter '\\0' en un nombre de dominio, en el campo Common Name de una certificado X.509, lo cual permite a atacantes hombre-en-el-medio (man-in-the-middle) remotos suplantar servidores SSL a su elección a través de de un certificado manipulado expedido por una Autoridad de Certificación legítima, un tema relacionado con CVE-2009-2408."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.11.4",
            "matchCriteriaId" : "AD0AF9BA-677F-423E-A9B2-0BEBA4A2E86A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50DD71F2-0B3C-4082-950A-CBFA5C601AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26B3B1B6-3985-4479-93B2-14E1AB52F768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC975AA-0F98-4A3A-B3B4-2152156327D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DEDFB88-C435-4FB9-838D-8199690A8F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5BF2616-A99A-4229-A8A6-655155ED5EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A14454E-DDAE-4115-8323-8BB4E17DF208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88CD81A-7804-4316-8581-41689A318D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE0FCE2-ABB9-4943-96AE-C81277014396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDE8FE2E-40EF-4B86-A01E-7777FBDABB59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:1.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E097843-1854-4C5E-BB27-07280EB3EEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:1.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1047974D-7A5D-4533-996B-2B09EC7E8789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C40562DA-2B50-4B30-B0D8-B62913FCC680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:1.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B63798-366A-4778-987D-19307228E13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:1.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90DEBAA0-B537-4EEC-8EA2-E503F26A0496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:1.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC161C5-5247-4A3C-AB56-6562B0A65D21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://addictivecode.org/pipermail/wget-notify/2009-August/001808.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hg.addictivecode.org/wget/mainline/rev/1eab157d3be7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125198917018936&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125369675820512&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://permalink.gmane.org/gmane.comp.web.wget.general/8972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36540",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2498",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=520454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://addictivecode.org/pipermail/wget-notify/2009-August/001808.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://hg.addictivecode.org/wget/mainline/rev/1eab157d3be7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125198917018936&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125369675820512&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://permalink.gmane.org/gmane.comp.web.wget.general/8972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=520454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Kinfusion SportFusion (com_sportfusion) component 0.2.2 through 0.2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid[0] parameter in a teamdetail action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente Kinfusion SportFusion (com_sportfusion) 0.2.2 a 0.2.3 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid[0]\" en una acción teamdetail a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kinfusion:com_sportfusion:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B84A9DC-4539-4B73-AEA5-5021FEB77050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kinfusion:com_sportfusion:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F611837-B532-4D9C-A496-E530A0CDC0C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/joomlasportfusion-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36844",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36481",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/joomlasportfusion-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Loggix Project 9.4.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathToIndex parameter to (1) Calendar.php, (2) Comment.php, (3) Rss.php and (4) Trackback.php in lib/Loggix/Module/; and (5) modules/downloads/lib/LM_Downloads.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Loggix Project v9.4.5 y versiones anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"pathToIndex\" para (1) Calendar.php, (2) Comment.php, (3) Rss.php y (4) Trackback.php en lib/Loggix/Module/; y (5) modules/downloads/lib/LM_Downloads.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gotdns:loggix_project:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.4.5",
            "matchCriteriaId" : "1D465280-C0EF-4A45-A049-EA01FEE7C8A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gotdns:loggix_project:9.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745588B-A0F3-489B-BFC7-A2AF9C932C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gotdns:loggix_project:9.3.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9B9A38-96AF-4B40-8163-80F3B605D71B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Zenas PaoBacheca Guestbook 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) scrivi.php and (2) index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Zenas PaoBacheca Guestbook 2.1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el PATH_INFO para (1) scrivi.php y (2) index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zenas:paobacheca_guestbook:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A08B66F4-4AE7-4D01-A2FE-E26B9A7313BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58163",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/58164",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/paobacheca-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36741",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/58164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/paobacheca-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in T-HTB Manager 0.5, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in a delete_category action, (2) the name parameter in an update_category action, and other vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en index.php en T-HTB Manager v0.5, cuando magic_quotes_gpc está deshabilitado, permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"id\" en una acción delete_category, (2) \"name\" en una acción update_category y otros vectores."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todor_lazarov:t-htb_manager:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923CC654-EB9C-4C28-8EB2-0F7494B6B5E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506386/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506386/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the mag_id parameter, a different vector than CVE-2008-4465."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en view_mag.php en Vastal I-Tech DVD Zone permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"mag_id\", un vector diferente a CVE-2008-4465."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vastal:dvd_zone:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D15DAA3-D29B-4BD4-827E-C77D22EB7DC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://antisecurity.org/dvd-zone-view_mag-phpmag_id-bsqlxss-multiple-remote-vulnerabilities.antisecurity",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36843",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36487",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2735",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://antisecurity.org/dvd-zone-view_mag-phpmag_id-bsqlxss-multiple-remote-vulnerabilities.antisecurity",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to inject arbitrary web script or HTML via the mag_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en view_mag.php en Vastal I-Tech DVD Zone permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"mag_id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vastal:dvd_zone:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D15DAA3-D29B-4BD4-827E-C77D22EB7DC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://antisecurity.org/dvd-zone-view_mag-phpmag_id-bsqlxss-multiple-remote-vulnerabilities.antisecurity",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36843",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36487",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2735",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://antisecurity.org/dvd-zone-view_mag-phpmag_id-bsqlxss-multiple-remote-vulnerabilities.antisecurity",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in view_listing.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en view_listing.php en Vastal I-Tech Agent Zone (alias The Real Estate Script) permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vastal:agent_zone:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14595BF-746C-4A40-8453-C11BA3CD5855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36812",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0909-exploits/realestaterealtors-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0909-exploits/realestaterealtors-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in php/update_article_hits.php in HBcms 1.7 allows remote attackers to execute arbitrary SQL commands via the article_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en php/update_article_hits.php en HBcms 1.7 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"article_id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hbcms:hbcms:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E497F5B4-AEF3-4BC1-A480-FA8CBC41A4B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/hbcms-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36854",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/hbcms-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in employee.aspx in BPowerHouse BPLawyerCaseDocuments 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en employee.aspx en BPowerHouse BPLawyerCaseDocuments 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpowerhouse:bplawyercasedocuments:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A554FF7-83A9-4474-B8DD-7DF3739CD268"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://antisecurity.org/bplawyercasedocument-1-0-mssql-vulnerabilities.antisecurity",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36796",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2733",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://antisecurity.org/bplawyercasedocument-1-0-mssql-vulnerabilities.antisecurity",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in BPowerHouse BPGames 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter to main.php and (2) game_id parameter to game.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en BPowerHouse BPGames 1.0 permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) \"cat_id\" a main.php y (2) \"game_id\" a game.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpowerhouse:bpgames:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E41B437-4E64-4E7E-B5FE-9294DC80D6CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/bpgames-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36828",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2742",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/bpgames-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in students.php in BPowerHouse BPStudents 1.0 allows remote attackers to execute arbitrary SQL commands via the test parameter in a preview action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en students.php en BPowerHouse BPStudents 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"test\" en una acción de previsualizar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpowerhouse:bpstudents:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6E3D85-6277-4D5A-A8E9-BA808F21A034"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/bpstudent-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36826",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/bpstudent-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in music.php in BPowerHouse BPMusic 1.0 allows remote attackers to execute arbitrary SQL commands via the music_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en music.php en BPowerHouse BPMusic v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"music_id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpowerhouse:bpmusic:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "624901E3-5116-43D8-A6BD-CD67CDE4C547"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/bpmusic-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36824",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2740",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/bpmusic-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in search.aspx in BPowerHouse BPHolidayLettings 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) rid and (2) tid parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en search.aspx en BPowerHouse BPHolidayLettings 1.0 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"rid\" y (2) \"tid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpowerhouse:bpholidaylettings:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C3D157-B05F-4125-9A48-5759F0C45520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/bpholidaylettings-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36833",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2744",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/bpholidaylettings-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in offers_buy.php in Alibaba Clone 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en offers_buy.php en Alibaba Clone 3.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alibabaclone:alibaba_clone:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE2C47-1E73-4ECE-8C72-B5004EB84B7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/alibaba30-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36845",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2737",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/alibaba30-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-09-30T15:30:00.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in view_news.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter.  NOTE: the game_id vector is already covered by CVE-2008-4460."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en view_news.php en Vastal I-Tech MMORPG Zone permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"news_id\". NOTA: el vector game_id actualmente está reportado en el CVE-2008-4460."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vastal:mmorpg_zone:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE767A1-0220-49D4-B6CF-C17E0786F86D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/mmorpgzone-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36483",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2734",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/mmorpgzone-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T14:30:01.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in CMSphp 0.21 allow remote attackers to inject arbitrary web script or HTML via the (1) cook_user parameter to index.php and the (2) name parameter to modules.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en CMSphp 0.21 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro (1) cook_user para index.php y el (2) parámetro  name para modules.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jean-michel_wyttenbach:cmsphp:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259A491F-5F57-4E64-A95C-52AEC56451C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36075",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T14:30:01.157",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod_file parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en modules.php en CMSphp 0.21 permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante un .. (punto punto) en el parámetro mod_file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jean-michel_wyttenbach:cmsphp:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259A491F-5F57-4E64-A95C-52AEC56451C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36075",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T14:30:01.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in MUJE CMS 1.0.4.34 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) _class parameter to admin.php and the (2) url parameter to install/install.php; and allow remote authenticated administrators to read arbitrary files via a .. (dot dot) in the (3) _htmlfile parameter to admin.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en MUJE CMS v1.0.4.34 permite a atacantes remotos incluir y ejecutar archivos locales de su elección  a través de .. (punto a punto)en el parámetro (1) _class en admin.php y el parámetro (2) url en install/install.php; y permite a administradores autenticarse remotamente para leer archivos de su elección a traves de .. (punto a punto) en el parámetro (3) _htmlfile en admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fcgphilipp:mujecms:1.0.4.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350FA8BA-F8BD-40E6-9E10-D7436FB1214B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36079",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T14:30:01.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin/admin_index.php in CJ Dynamic Poll PRO 2.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin/admin_index.php en CJ Dynamic Poll PRO 2.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el PATH_INFO."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cj-design:cj_dynamic_poll:2.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "18C2A57A-64FA-45E9-B533-96C02AAE991A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/cjdynamicpoll-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35799",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1983",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/cjdynamicpoll-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T14:30:01.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in viewListing.php in linkSpheric 0.74 Beta 6 allows remote attackers to execute arbitrary SQL commands via the listID parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en viewListing.php en linkSpheric v0.74 Beta v6 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro listID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataspheric:linkspheric:0.74:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "C9966582-DAB3-45C9-A8BD-3F4649ECEF1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T14:30:01.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in justVisual 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the fs_jVroot parameter to (1) sites/site/pages/index.php, (2) sites/test/pages/contact.php, (3) system/pageTemplate.php, and (4) system/utilities.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en justVisual 1.2 permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro fs_jVroot para (1) sites/site/pages/index.php, (2) sites/test/pages/contact.php, (3) system/pageTemplate.php y (4) system/utilities.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fh54:justvisual:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC1920B-4B38-43AB-92F5-E5EC99B99064"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T14:30:01.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in MyWeight 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date parameter to user_addfood.php, info parameter to (2) user_forgot_pwd_form.php and (3) user_login.php, and (4) return parameter to user_login.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en MyWeight 1.0 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) el parámetro date para user_addfood.php, el parámetro info para  (2) user_forgot_pwd_form.php y (3) user_login.php y (4) el parámetro return para user_login.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplemon:myweight:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4174C5BB-F3A1-42FB-8A6C-6A2928224F0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/myweight-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35919",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/myweight-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T14:30:01.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to courses_login.php, the id parameter to (2) news_read.php or (3) lessons_login.php, or (4) the cur parameter in a start action to lessons_login.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Pilot Group (PG) eTraining permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) el parámetro  \"cat_id\" para courses_login.php, el parámetro \"id\" para (2) news_read.php o (3) lessons_login.php, o (4) el parámetro cur en una acción start para lessons_login.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pilotgroup:pg_etraining:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D9CEE2-A536-4F3F-A8E7-87D285CAE881"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/etraining-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35834",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/etraining-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/52072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T14:30:01.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in d.net CMS allow remote attackers to execute arbitrary SQL commands via (1) the page parameter to index.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the (2) edit_id and (3) _p parameter in a news action to dnet_admin/index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en  d.net CMS, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) \"page\" a index.php; y permite a administradores autenticados remotamente ejecutar comandos SQL de su elección a través de los parámetros  (2) \"edit_id\" y (3) \"_p parameter\" en una acción \"news\" a dnet_admin/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marcin_manek:d.net_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C709A1EC-DAB8-4224-A574-74FD3E3FE096"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T14:30:01.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in dnet_admin/index.php in d.net CMS allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the type parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en dnet_admin/index.php en d.net CMS, permite a administradores autenticados remotamente añadir y ejecutar archivos locales de su elección a través de..(punto punto) en el parámetro \"type\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marcin_manek:d.net_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C709A1EC-DAB8-4224-A574-74FD3E3FE096"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0209",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2009-10-01T15:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "PI Server en OSIsoft PI System anterior a v 3.4.380.x no usa adecuadamente el cifrado en el proceso de autenticación por defecto, lo que permite a atacantes remotos leer o modificar información en bases de datos a través de vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_server:*:sp2:32bit_windows:*:*:*:*:*",
            "versionEndIncluding" : "3.4.375.99",
            "matchCriteriaId" : "E537E3DE-CF27-43A7-8429-A668D6A98568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_server:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5184AEE5-6726-459D-A9A1-DB50BE60D4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_server:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929EB927-9953-466A-80EC-9D849A620AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_server:3.4.363.97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE5B6CB-6D07-4B8C-BAE9-E9F153301209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_server:3.4.370:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D00D4FA3-9531-4030-B492-C1F51E12AE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osisoft:pi_server:3.4.375.99:sp2:64bit_windows:*:*:*:*:*",
            "matchCriteriaId" : "E37BC8ED-73BC-4E5A-B4C9-68995D1D2BBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/506826/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506826/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2904",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-01T15:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux (RHEL) 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, related to requirements for directory ownership."
      }, {
        "lang" : "es",
        "value" : "Ciertas modificaciones Ret Hat en ChrootDirectory feature en OpenSSH v4.8, como el usado en sshd en OpenSSH v4.3 en Red Hat Enterprise Linux (RHEL) v5.4 y Fedora v11, permite a usuarios locales obtener privilegios a través de enlaces fuertes en programas setuid que usa una configuración de ficheros con el chroot directory, relacionado con requerimientos para el propietario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7910598E-BEC1-4644-9DE4-D8BE505A4F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B1B209-53B8-48DC-AFFC-BD69D5978A0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB5EDB-520B-4DEF-B06E-65CA13152824"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5:*:server:*:*:*:*:*",
            "matchCriteriaId" : "5833A489-D6DE-4D51-9E74-189CBC2E28CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5:*:client:*:*:*:*:*",
            "matchCriteriaId" : "AF3FB21C-AC0E-4F6C-B68A-9405E57ADCF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443CB3FD-014D-4C37-BB02-03DAA5A3F3C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038214.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/58495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39182",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36552",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=522141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9862",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1470.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038214.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/58495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=522141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1470.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T15:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "gssd en IBM AIX v5.3.x hasta v5.3.9 y v6.1.0 hasta v6.1.2 no maneja adecuadamente las credenciales de caché NFSv4 Kerberos, lo que permite a atacantes locales eludir las restricciones de acceso para el recurso compartido \"Kerberized NFSv4\" a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE57C2-E728-4016-9774-28FB4B0509AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B11497-5622-4759-906A-A93A3E815584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F9CD013-D904-45DF-AD43-493A22D5744B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD518B94-9CD7-4C45-8766-578CF427B4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF417123-CCB6-48AF-A21B-1974173D516B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362CFB2F-817A-4E55-A315-86B6243E3F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53544921-1C1A-4382-99D7-0F3011BA76DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36545",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2788",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T15:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfs_portmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "nfs.ext en IBM AIX v5.3.x hasta v5.3.9 y v6.1.0 hasta v6.1.2 no usa apropiadamente la configuración nfs_portmon, lo que permite a atacantes remotos eludir las restricciones de acceso para NFSv4 compartidos a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE57C2-E728-4016-9774-28FB4B0509AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B11497-5622-4759-906A-A93A3E815584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F9CD013-D904-45DF-AD43-493A22D5744B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD518B94-9CD7-4C45-8766-578CF427B4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF417123-CCB6-48AF-A21B-1974173D516B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362CFB2F-817A-4E55-A315-86B6243E3F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53544921-1C1A-4382-99D7-0F3011BA76DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36544",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2788",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T15:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as used in IBM Rational Robot and Rational Team Concert, allows remote attackers to load arbitrary DLL files via the -vm option, as demonstrated by a reference to a UNC share pathname."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de argumento en iim: manejador URI en IBMIM.exe en IBM Installation Manager v1.3.2 y anteriores, usado en IBM Rational Robot y Rational Team Concert, permite a atacantes remotos cargar librerías DLL de su elección a través de la opción -vm, como queda demostrado por una referencia a una ruta de fichero compartido UNC."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:installation_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.2",
            "matchCriteriaId" : "3FECD493-7B46-4F1C-AC12-D779D31402FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:installation_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "632CE789-4E2F-4B37-A771-57572D7FA9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:installation_manager:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "984D6F98-FB9E-4E14-BA1A-5393A382E61C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:installation_manager:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E47960B-7264-4A44-88D1-F97EE0F43BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:installation_manager:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B5BFEE9-DD95-4860-B8A6-4B6C1EF510EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/9sg_ibm_uri.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36906",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2792",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://retrogod.altervista.org/9sg_ibm_uri.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T15:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_109, allow local users to cause a denial of service (memory consumption) via vectors related to (1) M_DATA, (2) M_PROTO, (3) M_PCPROTO, and (4) M_SIG STREAMS messages."
      }, {
        "lang" : "es",
        "value" : "Múltiples fugas de memoria en el módulo IP en el kernel en Sun Solaris v8 hasta v10, y OpenSolaris anterior snv_109, permite a usuarios locales causar una denegación de servicio (consumo de memoria) a través de vectores relacionados con (1) M_DATA, (2) M_PROTO, (3) M_PCPROTO, y (4) mensajes M_SIG STREAMS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:opensolaris:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "snv_109",
            "matchCriteriaId" : "A8F39E8E-4ADE-48A9-AFB6-67FB99BF2CB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722A52CF-4C6E-44D3-90C4-D2F72A40EF58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F864AD7-53A2-4225-870F-062876CE45DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-44-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263388-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36562",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-44-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-263388-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T15:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in the Your_account module in CMSphp 0.21 allows remote attackers to hijack the authentication of administrators for requests that change an administrator password via the pseudo, pwd, and uid parameters in an admin_info_user_verif action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el módulo Your_account en CMSphp v0.21 permite a atacantes remotos secuestrar la autenticación de administradores para peticiones que cambian el password de administrador a través de los parámetros pseudo, pwd y uid en una acción admin_info_user_verif."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsphp_project:cmsphp:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E180220B-E6A7-4D9A-8B60-62176850E077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/cmsphp-xsrf.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36075",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/cmsphp-xsrf.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T17:00:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Visualization Engine (VE) in IBM Tivoli Composite Application Manager for WebSphere (ITCAM) 6.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en Visualization Engine (VE) en IBM Tivoli Composite Application Manager para WebSphere (ITCAM) v6.1.0 permite a atacantes remotos inyectar código web o HTML a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_composite_application_manager_for_wesbsphere:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "940A1F93-0561-48FD-AE14-CD099EAC1DC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36901",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?rs=71&uid=swg1PK90126",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2797",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?rs=71&uid=swg1PK90126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T17:00:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in aswMon2.sys in avast! Home and Professional for Windows 4.8.1351, and possibly other versions before 4.8.1356, allows local users to cause a denial of service (system crash) and possibly gain privileges via a crafted IOCTL request to IOCTL 0xb2c80018."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en aswMon2.sys en avast! Home y Professional para Windows v4.8.1351, y probablemente otras versiones anteriores v4.8.1356, permite a usuarios locales causar una denegación de servicios (caída sistema) y probablemente obtener privilegios a través de peticiones IOCTL manipuladas en IOCTL 0xb2c80018."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1351:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC6D7AC9-3351-4AE7-B2E3-00AD7C7B2E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1351:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "F398BFA7-75F1-49C5-A306-820C77EEBAE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36858",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.avast.com/eng/avast-4-home_pro-revision-history.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506681/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36507",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2761",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.evilfingers.com/advisory/Advisory/Avast_aswMon2.sys_kernel_memory_corruption_and_Local_Privilege_Escalation.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/58402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.avast.com/eng/avast-4-home_pro-revision-history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506681/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.evilfingers.com/advisory/Advisory/Avast_aswMon2.sys_kernel_memory_corruption_and_Local_Privilege_Escalation.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T17:00:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerability than CVE-2008-1625."
      }, {
        "lang" : "es",
        "value" : "aavmKer4.sys en avast! Home y Professional para Windows anterior v4.8.1356 no proporciona entradas validad en IOCTLs (1) 0xb2d6000c y (2) 0xb2d60034, que permite a usuarios locales obtener privilegios a través de peticiones IOCTL usando direcciones de kernel manipuladas que lanzan una caída de memoria, una vulnerabilidad diferente que CVE-2008-1625."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1351",
            "matchCriteriaId" : "C47AF58C-5BC9-40EC-98F6-48E1B645F4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.7.827:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "33A71A2C-36AC-4F36-9D94-AA824F4DE14C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.7.844:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "62618C12-3EAC-4434-B2A8-D83612F1A05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.7.869:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "B949535B-9771-4AC6-BBDB-8BB3A789A1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.7.1043:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "DC6DA89A-BF71-4031-9B51-E5941FDE5E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.7.1098:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "DB201D49-EB74-4A5D-B641-86C4429E3EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1169:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D8C4E148-EAD0-433C-B0C3-3124B0288CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1195:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1867FC4C-01BC-4FA1-B33F-66CE7D4AD9B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1201:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "79057030-D57C-4DAC-B9F9-FE2CED222481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1227:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "8CE03B00-0277-4738-8DA6-AFD09830B0DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1229:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "921BC39F-E4EC-4B4C-BC7D-8002B7C3A85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1282:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "B03B958E-8FAA-48E4-BD0D-3577B7150284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1290:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "36902F71-4215-40B5-93B5-75A5634D4501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1296:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0F087F04-EF9C-43F0-95F0-36AD5182F02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1335:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1757311C-A432-4056-A480-12713E4E0024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1351",
            "matchCriteriaId" : "2C19547C-2369-4228-80CF-0A07735ED6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.7.827:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF2D8C10-01E4-43D7-93EE-342BA7E9C489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.7.844:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "AAB7888A-E884-4C73-AF10-698C56E080F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.7.1043:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1F7F2957-4422-4891-B573-F68882D7C8E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.7.1098:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC6DE028-27FD-40D7-AD12-F3C648B445E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1169:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC35E740-8BE7-4479-B684-6E304204B358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1195:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "083372F2-D738-4698-97CF-F71748BE4877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1201:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "38BAD92D-F9D8-4295-B9BD-FFB354937ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1227:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0348CFA9-6DC0-4FCE-B6B8-3D0D9086471F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1229:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "03B69989-B458-4624-B40F-37A7FCD11BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1282:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "FA7CEE2D-C92B-45A9-89F0-42A7DFAA7DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1290:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "FDCB885F-8175-41B3-A6A6-1A9A3A239548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1296:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "82039FC7-19D9-471C-A781-87D4CCE807CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1335:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "B6D8AF4B-27E2-4A7B-A474-AF453F6A22F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36858",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.avast.com/eng/avast-4-home_pro-revision-history.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ntinternals.org/ntiadv0904/ntiadv0904.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.avast.com/eng/avast-4-home_pro-revision-history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ntinternals.org/ntiadv0904/ntiadv0904.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-01T17:00:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inesperada en ashWsFtr.dll en avast! Home y Professional para Windows anterior v4.8.1356 tiene un impacto y vectores de ataque no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1351",
            "matchCriteriaId" : "C47AF58C-5BC9-40EC-98F6-48E1B645F4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.7.827:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "33A71A2C-36AC-4F36-9D94-AA824F4DE14C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.7.844:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "62618C12-3EAC-4434-B2A8-D83612F1A05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.7.869:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "B949535B-9771-4AC6-BBDB-8BB3A789A1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.7.1043:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "DC6DA89A-BF71-4031-9B51-E5941FDE5E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.7.1098:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "DB201D49-EB74-4A5D-B641-86C4429E3EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1169:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D8C4E148-EAD0-433C-B0C3-3124B0288CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1195:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1867FC4C-01BC-4FA1-B33F-66CE7D4AD9B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1201:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "79057030-D57C-4DAC-B9F9-FE2CED222481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1227:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "8CE03B00-0277-4738-8DA6-AFD09830B0DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1229:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "921BC39F-E4EC-4B4C-BC7D-8002B7C3A85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1282:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "B03B958E-8FAA-48E4-BD0D-3577B7150284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1290:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "36902F71-4215-40B5-93B5-75A5634D4501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1296:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0F087F04-EF9C-43F0-95F0-36AD5182F02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_home:4.8.1335:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1757311C-A432-4056-A480-12713E4E0024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "4.8.1351",
            "matchCriteriaId" : "2C19547C-2369-4228-80CF-0A07735ED6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.7.827:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "DF2D8C10-01E4-43D7-93EE-342BA7E9C489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.7.844:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "AAB7888A-E884-4C73-AF10-698C56E080F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.7.1043:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1F7F2957-4422-4891-B573-F68882D7C8E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.7.1098:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC6DE028-27FD-40D7-AD12-F3C648B445E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1169:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "FC35E740-8BE7-4479-B684-6E304204B358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1195:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "083372F2-D738-4698-97CF-F71748BE4877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1201:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "38BAD92D-F9D8-4295-B9BD-FFB354937ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1227:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0348CFA9-6DC0-4FCE-B6B8-3D0D9086471F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1229:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "03B69989-B458-4624-B40F-37A7FCD11BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1282:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "FA7CEE2D-C92B-45A9-89F0-42A7DFAA7DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1290:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "FDCB885F-8175-41B3-A6A6-1A9A3A239548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1296:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "82039FC7-19D9-471C-A781-87D4CCE807CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:avast_antivirus_professional:4.8.1335:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "B6D8AF4B-27E2-4A7B-A474-AF453F6A22F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36858",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.avast.com/eng/avast-4-home_pro-revision-history.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.avast.com/eng/avast-4-home_pro-revision-history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-02T19:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to execute arbitrary SQL commands via the uid parameter in a show action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Profile.php en MyMsg v1.0.3 permite a usuarios autenticarse remotamente para ejecutar comandos SQL a su elección a través del parámetro uid en una acción show."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:al4us:mymsg:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1E3A7B-9FA0-47C3-8AD1-DF661238CB97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35753",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55792",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-02T19:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in RadScripts RadBids Gold 4 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a view_forum action, a different vector than CVE-2005-1074."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en RadScripts RadBids Gold v4 permite a atacantes remotos ejecutar comandos de su elección a través del parámetro fid en una acción view_forum, un vector diferente a CVE-2005-1074."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radscripts:radbids:4:*:gold:*:*:*:*:*",
            "matchCriteriaId" : "5A508205-CF66-4676-9CA7-71DFCB14A108"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35827",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-02T19:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in storefront.php in RadScripts RadBids Gold 4 allows remote attackers to inject arbitrary web script or HTML via the mode parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS)en RadScripts RadBids Gold 4 permite a atacantes remotos inyectar código web o HTML de su elección a través del parámetro mode."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radscripts:radbids:4:*:gold:*:*:*:*:*",
            "matchCriteriaId" : "5A508205-CF66-4676-9CA7-71DFCB14A108"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35827",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-02T19:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in vnews.php in Universe CMS 1.0.6 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en vnews.php en Universe CMS permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:universe:universe_cms:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DA7F52-260D-4238-92B8-A11BB04DD17B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/universecms-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35737",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/universecms-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-02T19:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in login.asp (aka the login screen) in LogRover 2.3 and 2.3.3 on Windows allow remote attackers to execute arbitrary SQL commands via the (1) uname and (2) pword parameters.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidad de inyección SQL en login.asp (como login screen) en LogRover v2.3 y v2.3.3 en Windows permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) uname y (2) pword. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logrover:logrover:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F418E0A6-86B0-437D-B791-37D001501126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logrover:logrover:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0062A0DF-24F8-4F5E-898D-DAA0A8D6FF56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35821",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55825",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0907-advisories/DDIVRT-2009-26.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504869/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0907-advisories/DDIVRT-2009-26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504869/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-02T19:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in report.php in Meeting Room Booking System (MRBS) before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the typematch parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en report.php en Meeting Room Booking System (MRBS) anterior v1.4.2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro typematch. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.1",
            "matchCriteriaId" : "5DC04A18-963C-43D0-9E21-73FFE4856193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421AD89F-3ED6-4FFD-9742-FBF0FCAD42DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F980185B-D9DB-4B19-BCDC-9ECC8FA63D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A6D7CF5-DF60-41A6-BE41-B757051FD6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A3EDDCF-F6CD-41CB-8129-BAF968537D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFCD0C65-5C18-400C-BF7C-AF3ABE1168CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9986257-5953-4768-803B-8BF70E6E7523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.8-pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5020393F-EED7-4DDC-9193-BB68232C8606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.8-pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6841D1CE-1BF5-48C0-96DD-83BCB9AFB2FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.8-pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04E6381-CEC9-416B-AD08-A9D7B7C62D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.8-pre4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF34656-302A-49F0-B86E-0D504DA921CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.8-pre5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C7905A-12A1-4E3F-AEC9-21E993C54D42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.8-pre6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F238F274-B07F-4F1F-A890-B52CACB78278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6159F627-20A1-4DFF-AD5C-79436FB20573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFCA2FA-6E92-4FD0-BA51-B77E6DB16557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.9-pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C76758C-E8BD-464F-855D-F2769B67E679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.9-pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE233B81-62D6-4EEF-9FDE-832407138E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE4F300-10ED-4201-922E-E568D0159225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209C7517-46A1-4EC7-8081-D05CE2A9E756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04FDDA28-E37C-4CB0-BE8D-29DD336D7D0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.0-pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C2ACC0-7D3B-4A27-870C-0AEB288C27C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.0-pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F580F4F9-E70F-4CDA-92C7-1D9F68CC4165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B8F4B5-6D12-43C4-B31C-81F2C59470F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.1-pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0CDDF03-F2BD-4C33-BBFC-4CB10E4FA164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.1-pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30FB9DA5-83FB-489B-AF38-86A12871083F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB34BB1-20AD-49EF-BB47-8C359B157EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2-pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC178F37-45DC-4F4E-9D5B-6E96D2A73A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73AF4C98-744A-4556-AB2A-BE240765E04C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.1-pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA7DBEC-2CFD-410D-8768-D0BA06D845B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.1-pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA799F6C-10BF-43BF-A30B-0817C92F8B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07387023-C4AE-46B1-A452-B283AE5DF483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B42C795-0A62-4FCB-B032-61A30AF5FA78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25C8DAD-74AA-49C3-B813-E6A3D38AC69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29EDE276-EC6D-4B95-8C96-CBC1C86E2E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A88A9E7-8BF5-4934-A26C-3D2CE5DC6104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5214C975-36A2-426D-848C-9B9338FC2AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_beranek:meeting_room_booking_system:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30106CC6-D301-4305-A290-E7E190A3FED7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mrbs.sourceforge.net/view_text.php?section=NEWS&file=NEWS",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35469",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mrbs.sourceforge.net/view_text.php?section=NEWS&file=NEWS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/55872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-02T19:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in LionWiki 3.0.3, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php en LionWiki v3.0.3, cuando magic_quotes_gpc es desactivado, permite a atacantes remotos leer archivos de su elección a traves de .. (punto punto) en el parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lionwiki:lionwiki:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35FFAEBC-DD40-44BD-B4D6-02BC87CAE9CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35774",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55801",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-02T19:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in image.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter.  NOTE: the researcher also suggests an analogous PHP remote file inclusion vulnerability, but this may be incorrect."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en image.php en Clear Content v.1.1 permite a atacantes remotos leer archivos a su elección a través .. (punto punto) en el parámetro url. NOTA: algunos investigadores sugieren una vulnerabilidad de inclusión remoto de archivo PHP, pero esto puede ser incorrecto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:allisclear:clear_content:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5769D40D-5E0E-4A62-8352-50064811B18E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/clearcontent-rfilfi.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35726",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55742",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/clearcontent-rfilfi.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-02T19:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in EpicDJSoftware EpicVJ 1.2.8.0 and 1.3.1.2 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a (1) .m3u or (2) .mpl playlist file."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en pila en EpicDJSoftware EpicVJ v1.2.8.0 y v1.3.1.2 permite a atacantes remotos causar una denegación de servicio (caída programa) o probablemente ejecutar código de su elección a través de una cadena larga en (1) archivos de lista .m3u o (2) .mpl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epicdjsoftware:epicvj:1.2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5A47CD-3B49-46FB-9EBD-F3CDFF8C8188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epicdjsoftware:epicvj:1.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B88601-3DF0-451E-A6AC-B8BA884649F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35869",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1955",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-02T19:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in EpicDJSoftware EpicDJ 1.3.9.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a (1) .m3u or (2) .mpl playlist file."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en pila en EpicDJSoftware EpicDJ v1.3.9.1 permite a atacantes remotos causar una denegación de servicio (caída programa) o probablemente ejecutar código de su elección a través de una cadena larga en un (1) .m3u o (2) archivo lista .mpl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epicdjsoftware:epicdj:1.3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17DA0F64-9735-4AB1-9DA2-E359E39BE6E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35878",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1956",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-02T19:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in thumb.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en thumb.php en Clear Contet v1.1 permite a atacantes remotos leer archivos de su elección a través de un .. (punto punto) en el parámetro url. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:allisclear:clear_content:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5769D40D-5E0E-4A62-8352-50064811B18E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35726",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55743",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-02T19:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow remote attackers to inject arbitrary web script or HTML via the (1) cname parameter to subclass.php and the (2) sn parameter to listads.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en YourFreeWorld Ultra Classifieds Pro permite a atacantes remotos ejecutar código web o HTML de su elección a través del parámetro (1) cname en subclass.php y el parámetro (2) sn en listads.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yourfreeworld:ultra_classifieds_pro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99900BD2-E0CA-45B8-B7F4-090EB816695B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/ultraclassifieds-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35857",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1965",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/ultraclassifieds-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-02T19:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in listads.php in YourFreeWorld Ultra Classifieds Pro allows remote attackers to inject arbitrary web script or HTML via the cn parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en listads.php en YourFreeWorld Ultra Classifieds Pro permite a atacantes remotos ejecutar código web o HTML de su elección a través del parámetro cn. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yourfreeworld:ultra_classifieds_pro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99900BD2-E0CA-45B8-B7F4-090EB816695B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35857",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1965",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-02T19:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in CoupleDB.php in PHPGenealogy 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the DataDirectory parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remoto de archivo PHP en PHPGenealogy v2.0 permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro DataDirectory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgenealogy:phpgenealogy:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6600D972-00F6-46F5-B125-2A5E78BE279F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-02T19:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in ls.php in LittleSite (aka LS or LittleSite.php) 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter to index.php.  NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en ls.php en LittleSite (como LS o LittleSite.php) v0.1 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través .. (punto punto) en el parámetro file en index.php. NOTA: en algunas situaciones, esto puede ser ayudado mediante la inclusión remota de fichero mediante el uso del nombre de fichero UNC compartido o un FTP, FTPS, o ssh2.sftp URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kneuro:littlesite.php:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7162F5-BFBD-4711-92C0-4A9F76C97E61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55969",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/ls-lfi.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35907",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/ls-lfi.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-02T19:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9 allows remote attackers to execute arbitrary SQL commands via the user parameter (aka the login name)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en _phenotype/admin/login.php en Phenotype CMS anterior v2.9 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro user (como el nombre login)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8",
            "matchCriteriaId" : "CBF0838A-2FC3-4407-BBFC-1C6D4632B0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12B07C8-92E1-45A6-97C8-ED81A50B7A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D584096C-20F6-48E2-AFED-43C35E0D102F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3DDB99-189F-4239-998E-FB03304F67B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E80761B-1C6C-4E1F-98BD-B4D65BA8ED10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29E323CC-81A8-4997-A89D-7951C51FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDFD819F-5AC0-47F3-A9F7-5E4D02058958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50DE5FF2-DD49-4B5C-B7AF-75824C8AAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F09617-AFBD-4FC7-820B-5A43F2AA9668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13EB4778-9EAB-4E5D-BAE8-75D58A4ECF98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phenotype-cms:phenotype_cms:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C714422D-4A39-4ED7-B244-05F56CEDF7E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35792",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55799",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.phenotype-cms.com/wiki/development-changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.phenotype-cms.com/wiki/development-changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-05T18:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in bootpd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no esperada en bootpd en HP HP-UX vB.11.11, vB.11.23, y vB.11.31 permite a atacantes remotos causar una denegación de servicio a través de vectores no conocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "972D4ABF-2E80-4902-910D-5BD0CBEC9765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C73959-3E02-4847-8962-651D652800EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64BBA96-FB3C-46AC-9A29-50EE02714FE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01866324",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36663",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36395",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2664",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01866324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-05T19:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, which allows attackers with access to the para-virtualized guest console to boot the guest or modify the guest's kernel boot parameters without providing the expected password."
      }, {
        "lang" : "es",
        "value" : "El pyGrub en Xen v3.0.3, v3.3.0, y Xen-3.3.1 no soporta la opción password en grub.conf para las invitaciones \"para-virtualized\", lo que permite a atacantes con acceso a la consola invitada para-virtualized iniciar la invitación o modificar los parámetros de arranque del kernel del invitado sin proporcionar el password esperado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xen:xen:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AFDE72E-1997-48BA-A065-E0DD4ABE6E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xen:xen:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92646AED-BF1E-4471-96A0-1926932AF4C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xen:xen:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5FF923-28A9-406D-B825-8B882408C5E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36908",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/25/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1472.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36523",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://xenbits.xensource.com/xen-unstable.hg?rev/8f783adc0ee3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=525740",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=525740#c0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/25/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1472.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xenbits.xensource.com/xen-unstable.hg?rev/8f783adc0ee3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=525740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=525740#c0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-05T19:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name."
      }, {
        "lang" : "es",
        "value" : "Xerver HTTP Server v4.32 permite a atacantes remotos obtener el código fuente de una página web a través de una petición HTTP con un ::$DATA adicional después del nombre del archivo HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xerver:xerver:4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F63E4FD4-425F-4756-89E7-3439ED68B7AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36681",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-05T19:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DataWizard Technologies FtpXQ FTP Server 3.0 allows remote authenticated users to cause a denial of service (crash) via a long ABOR command."
      }, {
        "lang" : "es",
        "value" : "DataWizard Technologies FtpXQ FTP Server v3.0 permite a usuarios autentificados remotamente cuasar una denegación de servicio (caída) a través del comando largo ABOR."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datawizard:ftpxq_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E458AB1-C815-424B-8FA7-8A45373A4655"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36391",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2655",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-05T19:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en Xerver HTTP Server v4.32 permite a atacantes remotos leer archivos a su elección a través de un nombre de fichero completo con la letra de la unidad en el parámetro currentPath en una acción chooseDirectory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xerver:xerver:4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F63E4FD4-425F-4756-89E7-3439ED68B7AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-05T19:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web script or HTML via the currentPath parameter in a chooseDirectory action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en Xerver HTTP Server v4.32 permite a atacantes remotos inyectar código web o HTML de su elección a través del parámetro currentPath en una acción chooseDirectory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xerver:xerver:4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F63E4FD4-425F-4756-89E7-3439ED68B7AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36681",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36457",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-06T17:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files."
      }, {
        "lang" : "es",
        "value" : "puppetmasterd en puppet v0.24.6 no borra los grupos adicionales cuando cambia a otro usuario, lo que permite a usuarios locales acceder a ficheros restringidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reductivelabs:puppet:0.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B151012D-7B18-4D3F-A342-AB1198158A48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20294CE7-12C8-43CA-A702-5ED2A3044FFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://projects.reductivelabs.com/issues/1806",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=475201",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://puppet.com/security/cve/cve-2009-3564",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://projects.reductivelabs.com/issues/1806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=475201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://puppet.com/security/cve/cve-2009-3564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-3564\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update for Red Hat Enterprise MRG may address this flaw.",
        "lastModified" : "2009-10-08T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-06T20:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the staff control panel, a different vector than CVE-2007-1145."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en modules/tickets/functions_ticketsui.php en Kayako SupportSuite y eSupport v3.60.04 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de vectores sin especificar en el panel de control de plantilla, un vector diferente de CVE-2007-1145."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:esupport:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.60.04",
            "matchCriteriaId" : "F648C9B1-D21E-4B1B-9F72-779B497D73C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:esupport:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC09C97F-C24C-458E-9660-163CA3389065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:esupport:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E050349-5775-4CA5-BD12-B9E48A0CDDB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:esupport:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB479D2B-AA67-47EC-89F7-73CFB4852BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:esupport:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5C16F63-65D9-4644-AC8F-1B18CAC125D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:esupport:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B098914-D522-426C-B54F-4844A2EEDC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:esupport:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207C5C3A-27FF-4EDA-B435-2316492CE84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:esupport:3.00.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80744826-A306-4243-B600-313AF19246C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:esupport:3.00.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C27692-8E90-4E08-A3AE-CA20109D99C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:esupport:3.04.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5C0117-98CA-407A-936B-41EB8E6582B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:supportsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.60.04",
            "matchCriteriaId" : "9CD0DB7E-26CB-4BB7-A133-AAB3F5D1ACAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:supportsuite:3.00.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306A4240-7895-4B3F-B8FC-91F76DAA4ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:supportsuite:3.00.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCD5F81-495F-4433-86BD-2F2AA7696334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:supportsuite:3.10.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9C022D3-42ED-442E-9125-E0EAA8E74705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:supportsuite:3.10.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC5A1D5-8831-4032-92D8-DD490CC28774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:supportsuite:3.11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878901B9-06F2-49ED-A035-1BD86BB5F11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:supportsuite:3.11.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F297ABB-E65C-4BBF-B846-AFCC5A572540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:supportsuite:3.20.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A653BB-E814-4194-B911-CB3F6B69F5A9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kayako:supportsuite:3.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "68CB9C07-C2DC-4186-8B6E-5B902B6261D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kayako:supportsuite:3.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31270F05-C038-4C7D-9592-505FE936A993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:supportsuite:3.50.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92135838-7596-42DD-B04A-B8ABFF790817"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.kayako.com/2009/09/security-bulletin-supportsuite-and-esupport/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36807",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.kayako.com/2009/09/security-bulletin-supportsuite-and-esupport/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-06T20:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Comment RSS 5.x before 5.x-2.2 and 6.x before 6.x-2.2, a module for Drupal, does not properly enforce permissions when a link is added to the RSS feed, which allows remote attackers to obtain the node title and possibly other sensitive content by reading the feed."
      }, {
        "lang" : "es",
        "value" : "El modulo de Drupal, Comment RSS v5.x anteriores a v5.x-2.2 y v6.x anteriores a  v6.x-2.2, no hace cumplir correctamente los permisos cuando un enlace se añade a un feed RSS, lo que permite a atacantes remotos obtener el titulo del nodo y posiblemente mas información sensible mediante la lectura del feed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dave_reid:commentrss:5.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0891335F-6BBE-4517-947A-2D329A4582FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dave_reid:commentrss:6.x-2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9BF285-7CB3-4B6D-B422-74A1746BEC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gabor_hojtsy:commentrss:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725FC7B8-6EA5-4F25-88A3-790B1758467D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gabor_hojtsy:commentrss:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20322FF6-A0D4-4D09-A7B1-06E3456EB91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gabor_hojtsy:commentrss:5.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B37843CC-5550-4807-BFD6-8125788718D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gabor_hojtsy:commentrss:5.x-1.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "19F8DFEF-46C8-4197-A1F4-722A8B6B5029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gabor_hojtsy:commentrss:5.x-2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D753EC-88C3-43D6-8E17-DAAEA378445C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gabor_hojtsy:commentrss:5.x-2.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "94E8ACC7-9719-442F-810A-B76205C4F2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gabor_hojtsy:commentrss:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA997EE-B25C-4C24-B257-ECB13899C323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gabor_hojtsy:commentrss:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E707A50-E544-466C-9D09-A16E47450D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gabor_hojtsy:commentrss:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36C84085-3549-441C-A714-729C8369B232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gabor_hojtsy:commentrss:6.x-2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A672F19-3D97-4372-B038-D8418C1C54FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gabor_hojtsy:commentrss:6.x-2.x:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9DB9CF-4F49-4C36-A16C-983866ADA337"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/579280",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/579290",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/579292",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36787",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/579280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/579290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/579292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-06T20:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in OpenOffice.org (OOo) allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, aka \"Client-side stack overflow exploit.\" NOTE: as of 20091005, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en OpenOffice.org (OOo) permite a atacantes remotos ejecutar código arbitrario a través de vectores sin especificar, como se demuestra con cierto modulo de VulnDisco Pack Professional 8.8, también conocido como \"Exploit de desbordamiento de pila del lado del cliente\". NOTA: A fecha de 05/10/2009 no existe información para ponerlo en marcha. Sin embargo, debido a que el autor de VulnDisco es un autor reputado, lo asignamos un identificador CVE con el fin de realizar un seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openoffice.org:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F30ED14E-EE20-4C26-A8FD-24185D8AEB8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35036",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36285",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022832",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/35036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-06T20:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in OpenOffice.org (OOo) has unspecified impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.9.  NOTE: as of 20091005, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en OpenOffice.org (OOo) tiene impacto y vectores de ataque remotos no especificados, según lo demostrado por cierto módulo en VulnDisco Pack Professional 8.9. NOTA: a partir de 20091005 , esta divulgación no tiene información práctica. Sin embargo, debido a que el autor de VulnDisco Pack es un investigador fiable, al caso se le ha asignado un identificador CVE para fines de seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88C01AD4-CD39-4DAA-BB5A-42094938D9B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-06T20:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in OpenOffice.org (OOo) has unknown impact and client-side attack vector, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, aka \"Client-side exploit.\" NOTE: as of 20091005, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en OpenOffice.org (OOo) tiene un impacto desconocido y vector de ataque del lado del cliente, según lo demostrado por cierto módulo en VulnDisco Pack Professional 8.8, también conocido como \"Client-side exploit.\" NOTA: a partir de 20091005, esta divulgación no tiene información práctica. Sin embargo, debido a que el autor de VulnDisco Pack es un investigador fiable, al caso se le ha asignado un identificador CVE para fines de seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice.org:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88C01AD4-CD39-4DAA-BB5A-42094938D9B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1022832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1022832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-06T20:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenBSD 4.4, 4.5, and 4.6, when running on an i386 kernel, does not properly handle XMM exceptions, which allows local users to cause a denial of service (kernel panic) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "OpenBSD v4.4, v4.5, y v4.6, cuando se ejecuta sobre un kernel i386 no maneja adecuadamente la excepciones XMM, lo que permite a usuarios locales producir una denegación de servicio (kernel panic) a través de vectores inespecíficos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89CA041B-4153-43C7-BA69-D6052F4EBEEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B32BB973-60E5-402B-83FE-547786BC7A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "939CCA87-89B5-4772-BA2B-440C63A5921B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=openbsd-security-announce&m=125474331811594",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36956",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/errata44.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/errata45.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/errata46.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36589",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=openbsd-security-announce&m=125474331811594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/errata44.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/errata45.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/errata46.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorImpact" : "Per: http://marc.info/?l=openbsd-security-announce&m=125474331811594\r\n\r\nXMM exceptions are incorrectly handled in the OpenBSD/i386 kernel, resulting\r\nin a kernel panic that can be triggered by a local user.\r\n\r\nThis issue has been fixed in -current. Source code patches are available for\r\nOpenBSD 4.4, 4.5 and 4.6.\r\n\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-06T20:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de método inseguro en el control ActiveX PDIControl.PDI.1 (PDIControl.dll) v2.2.3160.0 en EMC Captiva PixTools Distributed Imaging v2.2 permite a atacantes remotos crear o sobrescribir ficheros de forma arbitraria a traves de los métodos (1) SetLogFileName y (2) WriteToLog."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:captiva_pixtools_distributed_imaging:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4F21D5-C02D-45CE-BDF6-6BF227DB5BE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36896",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36566",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2808",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-06T20:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tuniac 090517c allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long File1 argument in a .pls playlist file, possibly a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Tuniac 090517c, permite a atacantes remotos provocar una denegación de servicio (caída) o posiblemente ejecutar código de su elección a través de un argumento largo a File1 en un archivo de lista de reproducción  .pls, posibilitando un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tony_million:tuniac:090517c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E9A444-0865-46FD-8E64-55CAEE5BC268"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-06T22:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service (crash) or gain privileges via vectors related to kqueues, which triggers a use after free, leading to a NULL pointer dereference or memory corruption."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en la función Close Pipe (IPC)en FreeBSD v6.3 y v6.4, permite a usuarios locales provocar una denegación de servicio (caída) u obtener  privilegios a través de vectores relacionados con \"kqueues\", lo que provoca una liberación después del uso , aprovechando una deferencia a puntero NULL o una corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F702C46F-CA02-4FA2-B7D6-C61C2C095679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F7F02A-C845-40BF-8490-510A070000F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-09:13.pipe.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506449",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36375",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022982",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/58544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-09:13.pipe.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-07T17:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en DHTRoutingTableDeserializer.cc en aria2 v0.15.3, v1.2.0 y otras versiones, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente la ejecución de código de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6798D1A2-F961-48C5-A2F6-086A3A2DB456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FAE4C8-7F23-4E67-BA06-276BC3A5DE62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://qa.mandriva.com/show_bug.cgi?id=52840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://qa.mandriva.com/show_bug.cgi?id=52840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-07T17:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en la aplicación CookieDum.java  en Mort Bay Jetty v6.1.19 y v6.1.20, permite a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través del parámetro \"Value\" en una petición GET a cookie/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F616992-6D50-457F-B699-D0DCA3D46C33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mortbay:jetty:6.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE13225-F90F-4ABC-87A0-DBE63E91FC18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.coresecurity.com/content/jetty-persistent-xss",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507013/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/content/jetty-persistent-xss",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507013/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2906",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-07T18:30:00.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated users to cause a denial of service (infinite loop) via an unanticipated oplock break notification reply packet."
      }, {
        "lang" : "es",
        "value" : "smbd en Samba v3.0 anterior a v3.0.37, v3.2  anterior a v3.2.15, v3.3  anterior a v3.3.8 y v3.4 anterior a v3.4.2, permite a usuarios autenticados remotamente provocar una denegación de servicio (bucle infinito) a través de un  paquete de notificación de respuesta \"oplock break\" imprevisto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.37",
            "matchCriteriaId" : "5BC40E8A-9CDA-4574-AAF2-792EB0B55B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.15",
            "matchCriteriaId" : "836C7AC0-CAE0-459A-A8A5-AA60DFD693CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndExcluding" : "3.3.8",
            "matchCriteriaId" : "D9C888EF-28BF-44BF-9E47-564B0C3222F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C78E2B3A-10C4-4226-A224-8D4AC792B2F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFCF854-E316-442F-A62F-ACC1CA4E9892"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://news.samba.org/releases/3.0.37/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://news.samba.org/releases/3.2.15/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://news.samba.org/releases/3.3.8/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://news.samba.org/releases/3.4.2/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58519",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://samba.org/samba/security/CVE-2009-2906.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36893",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36918",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36937",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36953",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37428",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0145",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507856/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36573",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022976",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-839-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2810",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53575",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7090",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9944",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://news.samba.org/releases/3.0.37/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://news.samba.org/releases/3.2.15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://news.samba.org/releases/3.3.8/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://news.samba.org/releases/3.4.2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://samba.org/samba/security/CVE-2009-2906.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507856/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-839-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-07T18:30:00.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option."
      }, {
        "lang" : "es",
        "value" : "mount.cifs en Samba v3.0 anterior a v3.0.37, v3.2  anterior a v3.2.15, v3.3  anterior a v3.3.8 y v3.4 anterior a v3.4.2, cuando mount.cifs es instalado con el suid root, no refuerza los permisos adecuadamente, lo que permite a usuarios locales leer parte del archivo de credenciales y obtener la contraseña especificando la ruta al archivo de credenciales y usando la opción --verbose o -v."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.37",
            "matchCriteriaId" : "C0E114F0-973F-47CA-A233-53AC718A97F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.15",
            "matchCriteriaId" : "836C7AC0-CAE0-459A-A8A5-AA60DFD693CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndExcluding" : "3.3.8",
            "matchCriteriaId" : "D9C888EF-28BF-44BF-9E47-564B0C3222F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndExcluding" : "3.4.2",
            "matchCriteriaId" : "D3209E99-C442-4B0E-8EDB-E4EB995AC9C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://news.samba.org/releases/3.0.37/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://news.samba.org/releases/3.2.15/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://news.samba.org/releases/3.3.8/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://news.samba.org/releases/3.4.2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58520",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36893",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36918",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36937",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36953",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.samba.org/samba/security/CVE-2009-2948.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36572",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022975",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-839-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2810",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53574",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10434",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7087",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://news.samba.org/releases/3.0.37/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://news.samba.org/releases/3.2.15/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://news.samba.org/releases/3.3.8/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://news.samba.org/releases/3.4.2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.samba.org/samba/security/CVE-2009-2948.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-839-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-08T15:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table."
      }, {
        "lang" : "es",
        "value" : "incron v0.5.5 no inicializa grupos adicionales cuando ejecuta un proceso desde las incrontabs de usuario, lo que provoca el proceso sea ejecutado con el grupo adicional incrond y permite a los usuarios locales obtener privilegios a través de una tabla incrontab."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inotify:incron:0.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "405D9683-14A6-43B4-9631-A5D85361D5CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://koji.fedoraproject.org/koji/buildinfo?buildID=134880",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://admin.fedoraproject.org/updates/incron-0.5.5-2.el5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://koji.fedoraproject.org/koji/buildinfo?buildID=134880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://admin.fedoraproject.org/updates/incron-0.5.5-2.el5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-08T16:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows remote attackers to execute arbitrary SQL commands via the Cat_ID parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en showcat.php en VS PANEL v7.3.6 permite a los atacantes remoto ejecutar arbitrariamente comandos SQL a través del parámetro Cat_ID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vspanel:vs_panel:7.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D19BDFB5-C850-4D28-8770-C69F59F7A605"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/34848",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/34648",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/8506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/34648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/49990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-08T17:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location."
      }, {
        "lang" : "es",
        "value" : "Dopewars v1.5.12 permite a los atacantes remotos causar una denegación de servicio (fallo de segmentación) a través de un mensaje REQUESTJET con una posición no válida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ben_webb:dopewars:1.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A97ED7-B4FD-49B2-BCE9-9D410F1C5D54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/ChangeLog?view=markup&pathrev=1033",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/src/serverside.c?r1=1023&r2=1033&pathrev=1033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36961",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507012/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36606",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/ChangeLog?view=markup&pathrev=1033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/src/serverside.c?r1=1023&r2=1033&pathrev=1033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507012/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-08T17:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in customer/home.php in Qualiteam X-Cart allows remote attackers to inject arbitrary web script or HTML via the email parameter in a subscribed action, a different vector than CVE-2005-1823."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en customer/home.php en Qualiteam X-Cart permite a los atacantes remoto inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro email en una acción subscribed, un vector diferente a CVE-2005-1823."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qtmsoft:x-cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9271175-73A6-4E39-BA5C-61AEE72F8384"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0910-exploits/X-Cart-submail-XSS.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36601",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0910-exploits/X-Cart-submail-XSS.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-08T17:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Freelancers 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to placebid.php and (2) jobid parameter to post_resume.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Freelancers v1.0 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comando web o HTML a través de (1) el parámetro id para placebid.php y (2) el parámetro jobid para post_resume.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freewebscriptz:freelancers:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14C26CA-9078-4284-85C7-4AE5044F7FB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0907-exploits/freelancers-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35903",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/freelancers-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/55992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-08T17:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in bpost.php in BLOB Blog System before 1.2 allows remote attackers to inject arbitrary web script or HTML via the postid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en bpost.php en BLOB Blog System v1.2 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro postid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blob:blog_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BDD777-48E2-4EF1-A645-C81EA3DB39BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blob:blog_system:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709BCA4A-88DF-44FD-8B9C-4E3AC92F75C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blob:blog_system:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D21DDABA-533C-4809-8B29-6F0E744800A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blob.yewipeya.net/bpost.php?postid=0008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35938",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blob.yewipeya.net/bpost.php?postid=0008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/56261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-08T17:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands via the Cat_ID parameter, a different vector than CVE-2009-3590."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en results.php en VS PANEL v7.5.5 permite a los atacantes remoto ejecutar arbitrariamente comandos SQL a través del parámetro Cat_ID, es un vector diferente a CVE-2009-3590."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vspanel:vs_panel:7.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976B505A-0B76-45E9-8EFB-64BD8637EB65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35953",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/56570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2026",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/56570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-08T17:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JoxTechnology Ajox Poll does not properly restrict access to admin/managepoll.php, which allows remote attackers to bypass authentication and gain administrative access via a direct request."
      }, {
        "lang" : "es",
        "value" : "JoxTechnology Ajox Poll no restringe apropiadamente el acceso a admin/managepoll.php, lo que permite a los atacantes remotos evitar la autenticación y obtener acceso de administración a través de una petición directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joxtechnology:ajox_poll:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F65337-A553-4588-9F0B-F8EEDA3E15EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-08T17:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Digitaldesign CMS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for autoconfig.dd."
      }, {
        "lang" : "es",
        "value" : "Digitaldesign CMS v0.1 guarda información sensible en el directorio web raíz con insuficiente control de acceso, lo que permite a los atacantes remotos descargar el fichero de la base de datos a través de una petición directa a autoconfig.dd."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digitaldesign_cms_project:digitaldesign_cms:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52B7D35A-5E54-446B-83BF-159DA34E1C69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9115",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51676",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-08T17:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in survey_result.php in eCardMAX FormXP 2007 allows remote attackers to inject arbitrary web script or HTML via the sid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en survey_result.php en eCardMAX FormXP 2007 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro sid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecardmax.com:formxp:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB5BA5B-641E-44CC-B129-22A8383904DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/formxp-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35836",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/formxp-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-08T17:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in single_winner1.php in HUBScript 1.0 allows remote attackers to inject arbitrary web script or HTML via the bid_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en single_winner1.php en HUBScript v1.0 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro bid_id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freewebscriptz:hubscript:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DA17AD-8F52-4AAC-A87A-8D2F6F8540BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/hubscript-xssphpinfo.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35895",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/hubscript-xssphpinfo.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-08T17:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HUBScript 1.0 allows remote attackers to obtain configuration information via a direct request to manage/phpinfo.php, which calls the phpinfo function."
      }, {
        "lang" : "es",
        "value" : "HUBScript v1.0 permite a los atacantes remotos obtener información de configuración a través de peticiones directa a manage/phpinfo.php, que llama a la función phpinfo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freewebscriptz:hubscript:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DA17AD-8F52-4AAC-A87A-8D2F6F8540BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/hubscript-xssphpinfo.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35895",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/hubscript-xssphpinfo.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-08T17:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in demo_page.php in Scriptsez Ultimate Poll allows remote attackers to inject arbitrary web script or HTML via the clr parameter in a vote action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en demo_page.php en Scriptsez Ultimate Poll permite a los atacantes inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro clr en una acción vote."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptsez:ultimate_poll:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A59AE2-318A-4D6F-9841-651B7E091DE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55914",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/ultimatepoll-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35834",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/ultimatepoll-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-09T14:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT 8.01 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en la funcionalidad de Registro de llamadas de FrontRange HEAT v8.01 permite a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) UserName y (2) password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frontrange:heat:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CB680E-FF9C-44C6-950D-08248926F578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/heat-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36900",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/heat-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-09T14:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote attackers to cause a denial of service via a long argument to the (1) LIST and (2) NLST commands, a differnt issue than CVE-2008-5626 and CVE-2006-5728."
      }, {
        "lang" : "es",
        "value" : "Dxmsoft XM Easy Personal FTP Server v5.8.0 permite a atacantes remotos provocar una denegación de servicio a través de un argumento demasaido largo discusión a los comandos (1) LIST y (2) NLST. Se trata de un problema diferente al de CVE-2008-5626 y CVE-2006-5728."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dxmsoft:xm_easy_personal_ftp_server:5.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C970FC7F-E24F-4E06-8120-9ACE057739EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0910-exploits/XM-ftp-dos.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36941",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0910-exploits/XM-ftp-dos.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-09T14:30:00.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Soundset (com_soundset) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat_id parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente de Joomla! \"Soundset\" (com_soundset) v1.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro cat_id a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soundset:com_soundset:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F20D59-B58B-445C-96FF-5BB5ACC5468F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0910-exploits/joomlasoundset-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36597",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0910-exploits/joomlasoundset-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-09T14:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the JoomlaCache CB Resume Builder (com_cbresumebuilder) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the group_id parameter in a group_members action to index.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en el componente de Joomla! JoomlaCache Resume CB Builder (com_cbresumebuilder), permite a atacantes remotos ejecutar comandos SQL a través del parámetro group_id en una acción group_members sobre index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomlacache:com_cbresumebuilder:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77852647-BDDC-4649-9491-F7954EF90E13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0910-exploits/joomlacbrb-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36954",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36598",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://packetstormsecurity.org/0910-exploits/joomlacbrb-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-09T14:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InterVations NaviCOPA Web Server 3.01 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name."
      }, {
        "lang" : "es",
        "value" : "InterVations NaviCOPA Web Server v3.01 permite obtener el código fuente de una página web a atacantes remotos a través de una solicitud HTTP con la adición de ::$DATA después del nombre de archivo HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intervations:navicopa_web_server:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C5D193-3446-4A3A-8CB3-54AF5D282B05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/33766",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/58386",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/58386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-09T14:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in emaullinks.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote attackers to inject arbitrary web script or HTML via the moudi parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en emaullinks.php en YABSoft Mega File Hosting Script (alias MFH o MFHS) v1.2 permite a atacantes remotos inyectar HTML o scripts web a través del parámetro moudi. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabsoft:mega_file_hosting_script:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A06E0F8-5235-4C71-9473-C75051AF5C00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/36413",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-09T14:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Service Links 6.x-1.0, a module for Drupal, allows remote authenticated users, with 'administer content types' permissions, to inject arbitrary web script or HTML via unspecified vectors when displaying content type names."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo de Drupal \"Service Links\" v6.x-1.0, permite inyectar HTML o scripts we aleatorios a usuarios remotos autenticados, con permisos para \"administrar tipos de contenido \", a través de vectores no especificados cuando se muestran los nombres de tipo de contenido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apsivam:service_links:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF61CB4-6946-493A-AB36-BF7DBBBE08BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.madirish.net/?article=251",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.madirish.net/?article=251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.madirish.net/?article=251\r\n\r\n\r\nPatch\r\n\r\nApplying the following patch mitigates these threats.\r\n\r\n--- service_links/service_links.module\t2008-02-26 12:01:27.000000000 -0500\r\n+++ service_links/service_links.module\t2009-10-02 06:33:21.000000000 -0400\r\n@@ -35,11 +35,12 @@ function service_links_admin_settings() \r\n     '#title' => t('Where to show the service links'),\r\n     '#description' => t('Set the node types and categories you want to display links for.'),\r\n   );\r\n+  $names = array_map('filter_xss', node_get_types('names'));\r\n   $form['where_to_show_the_links']['service_links_node_types'] = array(\r\n     '#type' => 'checkboxes',\r\n     '#title' => t('Node types'),\r\n     '#default_value' => variable_get('service_links_node_types', array()),\r\n-    '#options' => node_get_types('names'),\r\n+    '#options' => $names,\r\n   );\r\n   if (module_exists('taxonomy')) {\r\n     $form['where_to_show_the_links']['service_links_category_types'] = array(\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-09T14:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in forums/index.php in Power Bulletin Board (PBBoard) 2.0.2 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a new_topic action."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en forums/index.php en Power Bulletin Board (PBBoard) v2.0.2 (y posiblemente versiones anteriores) permite a atacantes remotos inyectar HTML o scripts web a través del parámetro id en una acción new_topic."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pbboard:pbboard:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BEF64F-3D81-48B5-84B4-C9F7FBD67F13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.sec-area.com/?p=141%23more-141&gtlang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506992/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sec-area.com/?p=141%23more-141&gtlang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506992/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-09T14:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Dex 5.x-1.0 and earlier and 6.x-1.0-rc1 and earlier, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo de Drupal \"Dex\" en sus versiones v5.x-1.0 y anteriores y v6.x-1.0-RC1 y anteriores, permite a atacantes remotos inyectar HTML o scripts web aleatorios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_strauss:dex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.x-1.0",
            "matchCriteriaId" : "6EB24706-C26D-4261-AFD3-E5C7C82A8AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_strauss:dex:6.x-1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "022D18EA-B294-492D-9892-40F858966E40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/592394",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/592394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-09T14:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the \"Monitor browsers' feature in Browscap before 5.x-1.1 and 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la opción \"Monitor Browsers\" del módulo de Drupal \"Browscap\" antes de v5.x-1.1 y v6.x-1.1, permite a atacantes remotos inyectar HTML o scripts web a través de la cabecera HTTP User-Agent."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mikeryan:browscap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.x-1.0",
            "matchCriteriaId" : "EA279A02-7B75-4616-9084-E184B1D9BE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mikeryan:browscap:4.7.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BD11BA-AB45-4741-B4C1-B03178862400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mikeryan:browscap:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC919445-9754-4AEE-98E5-490D52B0CE96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mikeryan:browscap:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE23509-BD29-4659-AC28-3BA78F029698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mikeryan:browscap:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F49DB0A-E41D-4322-ABE2-2FD7D4AA9E55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/592262",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/592264",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/592272",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58444",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36912",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/592262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/592264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/592272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-09T14:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Organic Groups (OG) 5.x-7.x before 5.x-7.4, 5.x-8.x before 5.x-8.1, and 6.x-1.x before 6.x-1.4, a module for Drupal, allows remote authenticated users, with create or edit group nodes permissions, to inject arbitrary web script or HTML via the User-Agent HTTP header, a different issue than CVE-2008-3095."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo de Drupal \"Organic Groups (OG)\" en sus versiones v5.x-7.x antes de v5.x-7.4, v5.x-8.x antes de v5.x-8.1, y v6.x-1.x antes de v6.x-1.4, permite inyectar HTML o scripts web a usuarios remotos autenticados, con el permiso \"crear o editar nodos de grupo\",  a través de la cabecera HTTP User-Agent. Se trata de un problema diferente al de CVE-2008-3095."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B90F1F5A-AE01-477D-9C26-F6F1300651D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.0-rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F769B727-9FEE-4B57-ACAC-CA4C86D118C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.0-rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41151443-9846-4961-A255-A8E602BD8577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.0-rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "256EDA03-31F0-4AFC-91C6-3E4B7951C394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.0-rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8CD09A-A0C9-4375-AD57-775EC42742CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.0-rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A19B1B9-1A0C-41D4-9511-AA77A37C87D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1411A6-18E7-4E10-B8A2-E3691654DFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FF0124-BB8D-47C3-A0D9-93EC49808F41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF6197F-1411-47CE-81AF-B14994205DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:5.x-8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878827FB-3379-4685-977E-DCB0110E6229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C30366D-E552-47BA-BE65-592CCDAFFD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75EC00B9-8722-4361-9757-FC90E91C09BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7523E3F8-571C-4CC7-96A9-A4A7323B3EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE30251-B0EA-4A32-BBD3-39FD0F6DDB11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFD1AA9-A5F0-4373-9020-E69324224664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B067F9C-0C3A-4704-915C-69AE6F7705B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE71C59-7C3D-488B-B497-2C8C99FFE750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D58CC3-38E9-48D0-B0DD-49B7A3B3F7B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6829D3FA-E07F-4541-8555-F5D7070519B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7E15C8-6406-48C6-BAD4-EE999D62375E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8565EBF3-3524-4B02-8445-A55A0C24ABE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24763B2D-97C2-4C05-B51E-B674D00D745F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074960A4-8356-419F-87AF-68FA413F1A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A24FF3-0E21-4BE8-81E6-3A830275652F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/592358",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/592410",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/592412",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/592414",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36923",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36558",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/592358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/592410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/592412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/592414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-09T14:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the additional links interface in XML Sitemap 5.x-1.6, a module for Drupal, allows remote authenticated users, with \"administer site configuration\" permission, to inject arbitrary web script or HTML via unspecified vectors, related to link path output."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Ejecución de secuencias de comandos en sitios cruzados(XSS) en la interfaz \"enlaces adicionales\" en el modulo de Drupal \"XML Sitemap\" v5.x-1.6, permite inyectar HTML o scripts web a usuarios remotos autenticados con el permiso \"administrar la configuración del sitio\", a través de vectores no especificados relacionados con la ruta de enlace de salida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:darren_oh:xml_sitemap:5.x-1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AADA67F-6B98-4B7E-86F0-FE4426F610D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/591724",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/591732",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36556",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/591724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/591732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-09T14:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers to create new webroot directories via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el módulo de Drupal \"Boost\" antes de v6.x-1.03, permite a atacantes remotos para crear directorios webroot nuevos a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:316solutions:boost:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.x-1.01",
            "matchCriteriaId" : "C776FC76-983B-417E-8D2D-9C6030EB828B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:316solutions:boost:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "499F1230-CC5E-4E7C-97DB-5A86D2EB201E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:316solutions:boost:6.x-1.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "E733ACBC-95F7-4A9A-B5F6-A2C130FB393E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:316solutions:boost:6.x-1.0-alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCB8ED0-136E-4A8C-9BD5-56AF647C4255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:316solutions:boost:6.x-1.0-alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC5F2A5-2B28-4568-938B-9F45A65D2090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:316solutions:boost:6.x-1.0-alpha3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6028B533-8FEE-480F-A085-C9A378CF192E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:316solutions:boost:6.x-1.0-alpha4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A56D7F3-D21D-44E7-A199-67F62ECABD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:316solutions:boost:6.x-1.0-beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4004B5C-1535-4D09-AB6F-10594705A841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:316solutions:boost:6.x-1.0-beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1B5166-B9DF-4084-8177-3EC5FFC53E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:316solutions:boost:6.x-1.0-rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E97250B2-5A19-43D0-9480-5DC81CB167F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:316solutions:boost:6.x-1.0-rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "215CBCF7-243E-4D42-BB4F-095A0D1C8C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:316solutions:boost:6.x-1.0-rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11099A30-D191-4031-88D5-5EBB5F8D8263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:316solutions:boost:6.x-1.0-rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F0E5BED-0B3F-4BEB-A64E-679C0B8577B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:316solutions:boost:6.x-1.0-rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DA28CF-0CC8-4D1E-8E6A-F3798C4688AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:316solutions:boost:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83E0181-627C-41B6-8819-95DF2E066355"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/592470",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/592490",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36925",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/592470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/592490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-09T14:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to cause a denial of service (server crash) via unspecified vectors related to the \"SITE SET TRANSFERPROGRESS ON\" FTP command."
      }, {
        "lang" : "es",
        "value" : "Rhino Software Serv-U v7.0.0.1 a v8.2.0.3 permite a atacantes remotos causar una denegación de servicio (mediante caída del servidor) a través de vectores no especificados relacionados con el comando FTP \"SITE SET TRANSFERPROGRESS ON\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92DB160E-82FF-4360-970B-9DA8F8C80C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97835C15-FDFA-4483-B8F5-062731E912B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D43FB7-6D9C-46AE-9831-6C1A8CF8146E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE52F36F-FA2F-476C-9F30-5F74DC0F3D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D000B5-04D7-431C-AA2B-BC8D0475A518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C74BAC99-DF37-4AE4-AF48-69C6E855CEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FCBA2E-F6EE-4C52-B2DA-5174EF110DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40D1816-BD4A-4405-8461-07DA732C5CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD3CE83-3E37-464C-A511-CDF7E735E58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243CCCC8-9860-4440-9E80-12668270F330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE008FE-8C8A-4E82-B6EE-93ECBB6A9903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6D6DD1-D98B-46C1-921C-9B045C234377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FC2D20-D01F-43A7-B49D-6FAFB7889C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:7.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEF9A0E-7D4E-42CA-AD6F-B6F18CA3CFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:8.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480EE765-C9AF-495E-810E-4153DC250F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:8.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "955439D8-7449-4E82-9EB5-6379002E6D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:8.0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6B101C-1058-45D7-A0B9-26C616691F04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:8.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EC7360-6AD8-4689-A927-57881C4BF974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:8.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF3956BE-95DE-4656-B987-796053032621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:8.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "391013B0-D304-49AF-9FAB-89E9A4E16686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:8.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4BCC0E-1F1B-4956-BE5D-67FF788652EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:8.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9637A62-B1A9-41D1-905C-DA200DB5A4DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:8.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FE5332-0928-4743-832D-D7E9AB86B5EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:8.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF325569-354C-4C70-A6EC-A8BFF1FF2AB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36873",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.serv-u.com/releasenotes/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.serv-u.com/releasenotes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3656",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-09T14:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Shared Sign-On 5.x and 6.x, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados en el modulo de Drupal Shared Sign-On v5.x y v6.x, permite a atacantes remotos secuestrar la autenticación de los usuarios arbitrarios a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tim_nelson:shared_sign-on:5.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38931259-3FF4-4781-BEF4-0BBCC4D9BE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tim_nelson:shared_sign-on:6.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2E4918-88A5-4771-A554-3717AC5A3CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/592488",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/592488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-09T14:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Session fixation vulnerability in Shared Sign-On 5.x and 6.x, a module for Drupal, allows remote attackers to hijack web sessions via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de fijación de sesión del módulo de Drupal Shared Sign-On 5.x y 6.x, permite a atacantes remotos secuestrar sesiones web a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tim_nelson:shared_sign-on:5.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38931259-3FF4-4781-BEF4-0BBCC4D9BE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tim_nelson:shared_sign-on:6.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2E4918-88A5-4771-A554-3717AC5A3CF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/592488",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/592488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-09T14:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control (sb.dll) in America Online (AOL) 9.5.0.1 allows remote attackers to trigger memory corruption or possibly execute arbitrary code via a malformed argument to the SetSuperBuddy method."
      }, {
        "lang" : "es",
        "value" : "El control ActiveX Sb.SuperBuddy.1 (sb.dll) en America Online (AOL) v9.5.0.1 no gestiona adecuadamente la memoria, lo que permite a atacanates remotos generar una corrupción de memoria o posiblemente ejcutar codigo arbitrario a través de un argumento del método SetSuperBuddy debidamente modificado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:superbuddy_activex_control:9.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A03F9C31-AFF9-4D6E-A7EC-AD9F14B70A78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/9sg_aol_91_superbuddy.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36919",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506889/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36580",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2812",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53614",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6704",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://retrogod.altervista.org/9sg_aol_91_superbuddy.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506889/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3659",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-11T22:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in file/stats.php in BS Counter 2.5.3 allows remote attackers to execute arbitrary SQL commands via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en file/stats.php en BS Counter v2.5.3 permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"page\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanback:bs_counter:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAC9759C-3404-4022-8632-9A2559FFAF76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-11T22:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.  NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivos PHP en libraries/database.php en Efront v3.5.4 y anteriores, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro \"path\". NOTA: esto es sólo una vulnerabilidad cuando el administrador no sigue las recomendaciones de seguridad en la documentación del producto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efrontlearning:efront:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.4",
            "matchCriteriaId" : "136730A5-4699-4292-89DF-AB19E8081FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efrontlearning:efront:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4945EB-C2DC-41FB-8B49-8F27D1EBF19E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efrontlearning:efront:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9648CD63-D34E-4298-8D54-2FF72C257477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efrontlearning:efront:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E993440A-7730-4540-B6BC-5CFC1636FE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efrontlearning:efront:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9A7A13D-A022-49A0-BED7-701D333724B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efrontlearning:efront:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8802C5D3-64CD-4199-ABBC-F5AEE5AFDE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efrontlearning:efront:3.5.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "BD62DC8C-619B-4B61-AFAC-B7F6AFCBEB79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efrontlearning:efront:3.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A230995D-9925-4774-9CFC-4329F756EE36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efrontlearning:efront:3.5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "395AFAEC-9811-4CB8-A105-AB9B9C85DA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efrontlearning:efront:3.5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "E7699ABE-E6AB-490F-9D1E-34F1EE2467B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efrontlearning:efront:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B61AA-BB5B-4B19-8077-0AD5415D4788"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.efrontlearning.net/viewtopic.php?f=1&t=1354&p=7174#p7174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36411",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://forum.efrontlearning.net/viewtopic.php?f=1&t=1354&p=7174#p7174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-11T22:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the DJ-Catalog (com_djcatalog) component for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in a showItem action and (2) cid parameter in a show action to index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en el componente de Joomla! \"DJ-catalog\" (com_djcatalog) permiten a atacantes remotos ejecutar comandos SQL a través de (1) el parámetro \"id\" en una acción de showItem y (2) el parámetro cid en una acción show a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blueconstantmedia:com_djcatalog:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E576D60B-3985-44B8-BB8E-11ABCF47836E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36696",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.design-joomla.eu/joomla-news/dj-catalog-sql-bsql-injection-multiple-vulnerability-fix.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36412",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.design-joomla.eu/joomla-news/dj-catalog-sql-bsql-injection-multiple-vulnerability-fix.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-11T22:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FileCopa FTP Server 5.01 allows remote attackers to cause a denial of service (server hang) via a large number of crafted NOOP commands."
      }, {
        "lang" : "es",
        "value" : "FileCOPA FTP Server v5.01 permite a atacantes remotos causar una denegación de servicio (el servidor se bloquea) a través de un gran número de comandos NOOP modificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filecopa-ftpserver:ftp_server:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB79806B-2673-4FC2-BC3A-CD773C66B2B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/36397.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36773",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36397",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/36397.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-11T22:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in the Host header."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de formato de cadena en la función h_readrequest en http.c en httpdx Web Server v1.4 permite a atacantes remotos causar una denegación de servicio (caída) o ejecutar código arbitrario a través de especificadores de formato de cadena en la cabecera Host."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper:httpdx:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D490B4E8-E863-4856-8031-3E08FBED4E66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://httpdx.sourceforge.net/downloads/changelog.log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36734",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2654",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://httpdx.sourceforge.net/downloads/changelog.log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/58129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-11T22:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to include or execute arbitrary files via a .. (dot dot) in the (1) p and (2) s parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en index.php en Nullam blog v0.1.2 permiten incluir o ejecutar archivos arbitrarios a atacantes remotos a través de un .. (punto punto) en los parámetros (1) p y (2) s."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullam:nullam_blog:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD96C6A6-3B35-4EA0-ABE4-6F026B9A6DA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36648",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/57919",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506380/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/57919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506380/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-11T22:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) i parameter or (2) v parameters in a register action."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en index.php en Nullam blog v0.1.2 permiten a atacantes remotos ejecutar comandos SQL a través de los parámetros 1) \"i\" o (2) \"v\" en una acción de registro."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullam:nullam_blog:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD96C6A6-3B35-4EA0-ABE4-6F026B9A6DA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36648",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/57920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506380/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/57920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506380/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-11T22:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Nullam Blog 0.1.2 allows remote attackers to inject arbitrary web script or HTML via the e parameter in an error action."
      }, {
        "lang" : "es",
        "value" : "Ejecución de comandos en sitios cruzados (XSS) en index.php en Nullam blog v0.1.2 permite a atacantes remotos inyectar HTML o scripts weba través del parámetro \"e\" en una acción de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullam:nullam_blog:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD96C6A6-3B35-4EA0-ABE4-6F026B9A6DA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36648",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/57921",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506380/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/57921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506380/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-11T22:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/index.php in AdsDX 3.05 allows remote attackers to execute arbitrary SQL commands via the Username."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/index.php en AdsDX v3.05 permite a atacantes remotos ejecutar comandos SQL a través del campo nombre de usuario (UserName)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adsdx:adsdx:3.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF838B55-6A65-4B1A-BA15-5F381BFC1C58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-11T22:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ardguest.php in Ardguest 1.8 allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Una ejecución de comandos en sitios cruzados (XSS) en ardguest.php en Ardguest v1.8 permite a atacantes remotos inyectar HTML o scripts web a través del parámetro \"page\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:promosi-web:ardguest:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0183A62A-237D-41E6-A5F6-4A38FF8CF592"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/ardguest-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36630",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/ardguest-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-11T22:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the foobla Suggestions (com_foobla_suggestions) component 1.5.11 for Joomla! allows remote attackers to execute arbitrary SQL commands via the idea_id parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente para Joomla! foobla Suggestions (com_foobla_suggestions) v1.5.11 permite a atacantes remotos ejecutar comandos SQL a través del parámetro idea_id a index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foobla:com_foobla_suggestions:1.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B77BF8D-DF1C-4ED8-9E55-DB5A762AB4EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36425",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-11T22:30:00.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en KSP Sound Player 2009 R2 y R2.1 permite a atacantes remotos ejecutar código arbitrario a través de una cadena larga en un archivo de lista de reproducción .m3u."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ksplayer:ksp_sound_player:2009:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "26BDE165-C0A3-42ED-8ECB-1C7546BB46B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ksplayer:ksp_sound_player:2009:r2.1:*:*:*:*:*:*",
            "matchCriteriaId" : "CE600CD7-7560-4AFC-ADFA-BFB6A044ABEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/57983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36621",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/57983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-13T10:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJet and Color LaserJet printers, and HP Digital Senders, allow remote attackers to inject arbitrary web script or HTML via the (1) Product_URL or (2) Tech_URL parameter in an Apply action to the support_param.html/config script."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Jetdirect y Embedded Web Server (EWS) sobre ciertas HP LaserJet e impresoras Color LaserJet, y HP Digital Senders, permiten a atacantes remotos inyectar código web o HTML a su elección a través de (1) Product_URL o (2)parámetro Tech_URL en una acción Apply en el código support_param.html/config."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:cm8050_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "009EBEE6-1863-4E6B-BB73-8FB1168AD164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:cm8060_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC795DF-7811-461F-8F50-60E00C8EBD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_3000n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2916ED3C-57AF-4DE9-9329-DDA66AD983AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_3600n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0714BB6-5CB9-42FD-B534-A7BF74F83EF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_3800n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388C4301-9BC1-43EB-8C8F-862D5D5916A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4700n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD166E1F-3A57-4293-AF22-373FB2784FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4730_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12F0604C-781B-4E69-A88E-C25492CB163C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_6040_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EDAC0E8-889C-4E76-AC6C-B9A6B0D792FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_cm4730_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E646E2D7-7C65-4A6F-8B51-A6119B512837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_cp3505:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B67E71C7-6B28-4326-AFC9-8CA09532C286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_cp4005n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF8ACEA-FB3F-40EA-81C6-29EF9FCFB302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_cp6015:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5994179E-E492-45D8-95F8-790160D9A0BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:ds_9200c:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "341EE50F-0CD3-401A-B429-3B2EFE285036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:ds_9250c:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA39BF1D-283E-4049-91C9-B93C93432DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2410:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92DD1DA2-7210-4A7E-BD37-5365935C7BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2420:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2505387C-7739-4EFE-8973-459412727674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_2430n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6F7DE2-1A67-4389-99A9-C6796025E000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4240:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23DD9E6F-1F64-4643-B8E5-B3CAB5F961B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4250n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF512AA5-F72B-470F-BA53-8EC6851F2F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4345_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ADF801E-6D02-4CDF-AA6F-9F272D341E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_4350n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ED3264A-7745-4BB7-9D1B-F7D9560788D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_5200n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFA350C-6631-4474-8FFD-D439234D2D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9040_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5352B3B-71D5-464E-B124-6FFC41F41B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9040n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87632290-99A8-4E9F-9FA5-F497DE690837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9050_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDA57B8-2AD5-45EF-9824-E60EBFF71D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_9050n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38237939-9DE0-4CDE-916B-E0F822975773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m3027_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE95CC32-07DA-473D-BDAC-347B137E582A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m3035_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC3DE1F-AA79-4FE8-B634-368BDF14C0B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m4345x_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7995CEA-25BF-45A1-B166-B4A962FCB5CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m5025_mfp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C69873-A989-4B66-8D28-67A260EC7A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m9040_mpf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C793A8D-5C58-481A-A253-4704A7EE29CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_m9050_mpf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E6F181F-3AB7-409D-B32F-8B09B6DDA110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p3005n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D04BDC-9273-4A09-BED4-18E44E99EBCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p4014:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "222D062D-1F47-4E21-9173-A5AFEEF66482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:laserjet_p4515:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A71AB74-7F6B-4B0F-8C52-F12187A6788A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=148",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125493484205823&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36969",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507038/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2850",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dsecrg.com/pages/vul/show.php?id=148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125493484205823&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507038/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-13T10:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other products, does not properly handle errors, which allows remote attackers to cause a denial of service (daemon hang) via unspecified HTTP requests, related to the prefork and event MPMs."
      }, {
        "lang" : "es",
        "value" : "La opción pollset de Solaris en el backend Event Port en poll/unix/port.c en la librería Apache Portable Runtime (APR) anterior v1.3.9, como los usados en Apache HTTP Server atenrior v2.2.14 y otros productos, no manejan adecuadamente los errores, lo que permite a atacantes remotos causar una denegación de servicio (bloqueo del demonio) a través de peticiones HTTP no especificadas, relativas el prefork y eventos MPMs. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.14",
            "matchCriteriaId" : "2979A101-9EC8-4E80-BFFC-7300F94C8453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:portable_runtime:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.9",
            "matchCriteriaId" : "E81FA406-E93A-467B-9822-D9BE0BC73573"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=133355494609819&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022988",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.apache.org/dist/httpd/CHANGES_2.2.14",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36596",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53666",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/bugzilla/show_bug.cgi?id=47645",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=133355494609819&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.apache.org/dist/httpd/CHANGES_2.2.14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.apache.org/bugzilla/show_bug.cgi?id=47645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This flaw does not affect the version of APR shipped in Red Hat Enterprise Linux.\n\nThis flaw affected JBoss Enterprise Web Server running on the Solaris platform. Updated httpd packages are available for download from Customer Support Portal: https://support.redhat.com/jbossnetwork/restricted/listSoftware.html?product=webserver&amp;downloadType=securityPatches&amp;version=1.0.0",
        "lastModified" : "2010-02-23T00:00:00"
      }, {
        "organization" : "Apache",
        "comment" : "Clarification 1: This issue only affects Solaris 10 and OpenSolaris.  Other versions of Solaris and non-Solaris platforms are not affected.\n\n\nClarification 2: This issue only affects 2.2.x versions of Apache HTTP Server, APR 1.1 through 1.3.8.  APR 0.9.x is not affected.",
        "lastModified" : "2010-01-21T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2897",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-13T10:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in hq/web/common/GenericError.jsp in the generic exception handler in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1, 4.0.x before 4.0.3.1, 4.1.x before 4.1.2.1, and 4.2-beta1; Application Management Suite (AMS) 2.0.0.SR3; and tc Server 6.0.20.B allow remote attackers to inject arbitrary web script or HTML via invalid values for numerical parameters, as demonstrated by an uncaught java.lang.NumberFormatException exception resulting from (1) the typeId parameter to mastheadAttach.do, (2) the eid parameter to Resource.do, and (3) the u parameter in a view action to admin/user/UserAdmin.do.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en hq/web/common/GenericError.jsp en el manejador de excepciones en la interface web en SpringSource Hyperic HQ v3.2.x anterior v3.2.6.1, v4.0.x anterior v4.0.3.1, v4.1.x anterior v4.1.2.1, y v4.2-beta1; Application Management Suite (AMS) v2.0.0.SR3; y tc Server v6.0.20.B permite a atacantes remotos ejecutar código web o HTML a su elección a través de valores no validos para los parámetros numéricos, como quedó demostrado en la excepción no capturada java.lang.NumberFormatException resultado del (1) parámetro typeId en mastheadAttach.do, (2) el parámetro eid en Resource.do, y(3) el parámetro u en una acción view en admin/user/UserAdmin.do."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:application_management_suite:2.0.0:sr3:*:*:*:*:*:*",
            "matchCriteriaId" : "2B49CBBA-35CB-42A6-93D5-06C8F203C98B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:3.2:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "E4DEFE03-6FCD-49C5-A0E7-370FEA7CF5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9004-B756-42BE-8918-691AF6F720FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F926074F-8BD2-4A30-B938-CA84E9533CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A3D6A50-33C3-4932-8A10-37BFF8D061E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41519C07-5A0D-48ED-81B5-ABF712A6AB04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44A5F7C5-A739-4887-AE92-721426E404F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7EB2C3-639B-41B6-B23B-BEBE45EE1DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA25CF4-9C98-4FED-A75E-68EF0B9E2C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0EC4F9-11EE-4326-A7C4-681CB451C45E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90F45C4E-F068-44A0-B676-444D913B3719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602855A5-B269-46BD-B68E-DAA49B818A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDBC79C-1930-4474-94EE-1F046539F2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA42759-E3E8-4F6C-9542-FB939D9D2042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FD405E4-D6B2-41AB-AE19-024192E8B25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC192682-AE08-4651-9C29-0753E2F85D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:4.2:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "3754D8A2-B5F6-44A9-BC1D-7A4FE925D070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:tc_server:6.0.20:b:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0FD679-8EB8-4F3D-8310-361E6AAC9299"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://corelabs.coresecurity.com/index.php?module=Wiki&action=view&type=advisory&name=Hyperic_HQ_Multiple_XSS",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://forums.hyperic.com/jiveforums/thread.jspa?messageID=22156&#22156",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://jira.hyperic.com/browse/HHQ-2655",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36935",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/hyperic-hq-vulnerabilities",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/58608",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/58609",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/58610",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506935/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506936/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.springsource.com/security/hyperic-hq",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53658",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://corelabs.coresecurity.com/index.php?module=Wiki&action=view&type=advisory&name=Hyperic_HQ_Multiple_XSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://forums.hyperic.com/jiveforums/thread.jspa?messageID=22156&#22156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jira.hyperic.com/browse/HHQ-2655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/hyperic-hq-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/58608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/58609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/58610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506935/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506936/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.springsource.com/security/hyperic-hq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2898",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-13T10:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Alerts list feature in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1, 4.0.x before 4.0.3.1, 4.1.x before 4.1.2.1, and 4.2-beta1; Application Management Suite (AMS) 2.0.0.SR3; and tc Server 6.0.20.B allows remote authenticated users to inject arbitrary web script or HTML via the Description field.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Ejecución de secuencias de comandos en sitios cruzados(XSS) en el listado de características Alerts en la interface web en SpringSource Hyperic HQ v3.2.x anteirior v3.2.6.1, v4.0.x anterior v4.0.3.1, v4.1.x anterior v4.1.2.1, y v4.2-beta1; Application Management Suite (AMS) v2.0.0.SR3; y tc Server v6.0.20.B permite a usuarios autentificados remotamente inyectar código web o HTML de su elección a través del campo Description. NOTA: algunos de estos detalles son obtenidos de información de terceros. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:application_management_suite:2.0.0:sr3:*:*:*:*:*:*",
            "matchCriteriaId" : "2B49CBBA-35CB-42A6-93D5-06C8F203C98B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:3.2:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "E4DEFE03-6FCD-49C5-A0E7-370FEA7CF5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9004-B756-42BE-8918-691AF6F720FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F926074F-8BD2-4A30-B938-CA84E9533CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A3D6A50-33C3-4932-8A10-37BFF8D061E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41519C07-5A0D-48ED-81B5-ABF712A6AB04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44A5F7C5-A739-4887-AE92-721426E404F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7EB2C3-639B-41B6-B23B-BEBE45EE1DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA25CF4-9C98-4FED-A75E-68EF0B9E2C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0EC4F9-11EE-4326-A7C4-681CB451C45E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90F45C4E-F068-44A0-B676-444D913B3719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602855A5-B269-46BD-B68E-DAA49B818A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDBC79C-1930-4474-94EE-1F046539F2C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA42759-E3E8-4F6C-9542-FB939D9D2042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FD405E4-D6B2-41AB-AE19-024192E8B25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC192682-AE08-4651-9C29-0753E2F85D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:hyperic_hq:4.2:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "3754D8A2-B5F6-44A9-BC1D-7A4FE925D070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:springsource:tc_server:6.0.20:b:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0FD679-8EB8-4F3D-8310-361E6AAC9299"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://corelabs.coresecurity.com/index.php?module=Wiki&action=view&type=advisory&name=Hyperic_HQ_Multiple_XSS",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://jira.hyperic.com/browse/HHQ-3390",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36935",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/hyperic-hq-vulnerabilities",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/58611",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506935/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506950/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.springsource.com/security/hyperic-hq",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53660",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://corelabs.coresecurity.com/index.php?module=Wiki&action=view&type=advisory&name=Hyperic_HQ_Multiple_XSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://jira.hyperic.com/browse/HHQ-3390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.coresecurity.com/content/hyperic-hq-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/58611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506935/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506950/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.springsource.com/security/hyperic-hq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2908",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-13T10:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The d_delete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service (kernel OOPS) and possibly execute arbitrary code via unspecified vectors that cause a \"negative dentry\" and trigger a NULL pointer dereference, as demonstrated via a Mutt temporary directory in an eCryptfs mount."
      }, {
        "lang" : "es",
        "value" : "La función d_delete function en fs/ecryptfs/inode.c en eCryptfs en el kernel de Linux v2.6.31 permite a usuarios locales causar una denegación de servicio (kernel OOPS) y probablemente ejecutar código de su elección a través de vectores no especificados que causa una \"entrada negativa\" y ejecuta una deferencia a puntero NULL, como fue demostrado a través del directorio temporal Mutt en eCryptifs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.31.y.git%3Ba=commit%3Bh=afc2b6932f48f200736d3e36ad66fee0ec733136",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/06/1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36639",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugs.launchpad.net/ecryptfs/+bug/387073",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=527534",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53693",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10216",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6992",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1548.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.31.y.git%3Ba=commit%3Bh=afc2b6932f48f200736d3e36ad66fee0ec733136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-852-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/ecryptfs/+bug/387073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=527534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1548.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG do not include support for eCryptfs, and therefore are not affected by this issue.\n\nIt was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2009-1548.html",
        "lastModified" : "2009-11-04T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3459",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2009-10-13T10:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Un Desbordamiento de búfer en la región heap de la memoria en Adobe Reader y Acrobat versión 7.x anterior a versión 7.1.4, versión 8.x anterior a 8.1.7, y versión 9.x anterior a 9.2, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo PDF creado que desencadena la corrupción de memoria, tal y como fue explotado \"in the wild\" en octubre de 2009. NOTA: algunos de estos detalles se obtienen de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "465F9134-DD86-4F13-8C39-949BE6E7389A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB041EDF-EFF8-4AA6-8D59-411975547534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C05F6A5-0FB3-489B-9B8B-64C569C03D7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AABA4FE3-662B-4956-904D-45086E000890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "998CD79C-458E-46A8-8261-1C40C53D9FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:4.0.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0155FB0B-7FAD-4388-96C8-A8543B4FDFD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "201F059D-33D1-4D9F-9C6F-FC8EB49E4735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B025E795-5713-485E-8A15-EBE4451A1A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B453FA1D-0FE9-4324-9644-E167561926C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDEA946E-B6D2-463B-89D0-F2F37278089E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183B5940-2310-4D2E-99F0-9792A801A442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8BB13E-2732-4F9E-A588-EA1C00893C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FCDCBF-597B-439C-8D8B-2819FC70C567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440B890A-90E9-4456-B92A-856CD17F0C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BD9D8D-39DA-403E-915D-E1B6A46A6BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8976A7DC-1314-4C4A-A7C5-AA789D2DAB9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF485FB-3317-4C89-B636-F22FF19B00BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "840D37C8-F30C-4A91-9B34-39AF1E4E34C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4A65AB-75F1-4F6B-83E4-354E7D1EAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD49BF0-E8BC-4716-8B13-DF39267D9303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71FC1CDB-DF7C-45FF-973D-8C9310121B0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8951B8-0DF2-48C9-9EAC-9EDCCD389958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:4.0.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCCF8E6-2117-4665-AC71-8F05771CDB15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E14042-AF3B-4609-8CFE-6E02B3DF5CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "822D6CAA-4CF7-41BE-B2AC-E7CBAB6229C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73579E5C-BDB2-4F9C-BB87-E3752B9030B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A57B3C8-B127-4A52-AB08-A1B6F7830914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F131F390-EA28-41C2-A054-42E6B070FA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26DE5FE-729C-4C3A-80FB-0FAFC90A8BEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C85609BE-4385-4728-AC7E-4231B45A3CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29BDD58D-3200-48C1-AB30-07808E029061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC93E153-9E21-4012-BFE0-0168488FFC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D445D4-2B00-451B-8744-CCA9F1E1ADA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D60FEC-557F-456B-8F35-170078EC5C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A7B617-FDB3-4F46-AF1F-F9210FB2793B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5D145B-FD5B-430E-8E90-929B00271C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E8FD46-14E2-4D92-8A99-66EC41F38CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BA5B02-F565-4A7F-B9FD-DD08ABF258CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3F0A07-7021-4D04-A8F2-1BCAB474CD2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C1C3A0-B0DF-42E4-A8AC-D93FCB6526D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B5B11C-6E76-4A03-AC05-840EFE2F8504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF8D072-305A-40B9-9E89-D98BDD951346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF52FAE-B6EF-457D-A61A-95B5E31CEF7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A7236C5-85F8-47C5-8A24-D5282F94D77D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "718F2E95-E221-4928-B50F-AB840BBA0E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "123D2B4E-0D05-453C-B598-E41D43FE0E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0109ADA4-6BA0-4299-8043-7CD60DAD6DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F00A8EC-10FC-42B6-BB3E-985C903B91DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BCBFB5-72DF-4B8A-8F4C-E958B4FAFB37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71EB6E18-5764-4916-9ECA-F4E880672217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61151189-E24C-4AB6-BC60-B9AF720E3D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B65F7E5-05A4-45FC-BDC2-670166535721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026B1CF8-28A2-415D-A240-C9DF774BF9DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE16943-CCD8-4A39-832F-F6ED3CF2936B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A1A800-D0CC-4593-A31A-EE308E63B454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.adobe.com/psirt/2009/10/adobe_reader_and_acrobat_issue_1.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=7300",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://secunia.com/advisories/36983",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.iss.net/threats/348.html",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36600",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2851",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53691",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6534",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://blogs.adobe.com/psirt/2009/10/adobe_reader_and_acrobat_issue_1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://isc.sans.org/diary.html?storyid=7300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.iss.net/threats/348.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-13T10:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente arclib en el motor Anti-Virus en CA Anti-Virus para Enterprise (formalmente eTrust Antivirus) v7.1 hasta v8.1; Anti-Virus 2007 (v8) hasta 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) hasta Plus 2009; y otros productos CA permite a atacantes remotos causar una denegación de servicio y ejecutar probablemente código de su elección a través del archivo RAR manipulado que provoca una corrupción de la memoria dinámica, una vulnerabilidad diferente que CVE-2009-3588."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-virus:2007:8:*:*:*:*:*:*",
            "matchCriteriaId" : "C469EBBE-EE96-4CED-BD8C-36461750C6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-virus:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C5E892B-0EE8-4B76-97B8-0BAF17E83F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607CCBDA-7288-4496-A7ED-EF6DED40CA21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:r8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11BCD267-E8CE-4A97-B769-5F4CAF9830D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-virus_sdk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "865B7BD2-3AD1-41CA-842B-47BC4F1426DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:common_services:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2FA702-184A-44FF-8DEA-7811804EE175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:common_services:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D301B65D-A20B-4991-A0D8-DFE3363F162B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A08C715-A351-466D-99EC-006C106A3366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05185A74-8484-419D-A3CE-8603928AF0DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C533CA-ACB7-4C0F-98E2-B5E51E24A554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_integrated_threat_management:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD8D5F0-9606-4BBA-B7F9-ACD089B84DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DDF2EE3-753B-4C7E-84EF-144FA5986A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_secure_content_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69184A5E-4FA9-4896-B6E8-1B9D4D62D099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:internet_security_suite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F30C4FF9-DB76-4B3F-9582-752097B3D521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:internet_security_suite:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "285013A5-E058-4B2B-B8B6-1BFF72388589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:network_and_systems_management:r3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF55705-42ED-4503-8534-FDEA365E84E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:network_and_systems_management:r3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB548763-E1A7-4DB1-BE86-ED5AA1CA81BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:network_and_systems_management:r11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B28429A-F343-4BE8-A94D-5A5AC3F6258C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:network_and_systems_management:r11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF64064-1C35-4888-BBC2-52F68EF9517F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:secure_content_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DADD1E6-3454-4C1E-AD46-82D79CB8F528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:secure_content_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E02DA21-B25B-4626-BFDC-61AA8AF3537E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9C8A1C-0A55-4CA5-9BB6-2D03EFCFE699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFA39E3-A614-4A64-B29C-86D6F12F1557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_network_and_systems_management:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B4434A4-EE82-46A1-9293-345991515369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_network_and_systems_management:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43CD3B48-C978-4FDB-B157-85F3E971446B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:anti-virus:2009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6050CADE-7BAF-45B7-A031-F70558C7CE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:anti-virus_for_the_enterprise:r8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0186ADA-0E20-4E14-B9D5-19CDFC1BD98F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:anti-virus_gateway:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD75FF0F-A36C-40AF-A99E-1596A6A6FE2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:anti-virus_plus:2009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED8CEF9-6AEC-4771-98F7-051E4B3E0848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:arcserve_backup:r11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8275AC1-81C5-4D9F-A61B-1A908BDDE0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:arcserve_for_windows_client_agent:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5603FDAD-A347-4A44-BC45-1ADC44601D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:arcserve_for_windows_server_component:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5086D7CF-EBAB-4E30-98E0-0D276CC1C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:common_services:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FAD043E-3ABE-46D7-AD17-A68858692A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_anti-virus_gateway:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C13B0E1-DCEE-46E5-81A3-C08C07C58B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_anti-virus_sdk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257CC950-F1BB-4D0A-9B05-98A58DB67532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_ez_antivirus:r7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A641A2-4147-4C41-B102-18417ECA9339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_intrusion_detection:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "29FEABEE-DC17-4620-B088-B24249865931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_intrusion_detection:3.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D10B864B-AA39-4702-A42B-F33BAF2D8059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_secure_content_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB54A16-5E56-46FC-A49C-56C98C0B8F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:gateway_security:r8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B44F941C-83DC-4EDA-B258-C35F5EDA819E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:internet_security_suite_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0281F80B-CF9C-482D-B7A9-3B2651BD0567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:internet_security_suite_plus_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F7E184-EA23-487C-83ED-65CF8DD2DB18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:internet_security_suite_plus_2009:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951062B1-C72B-4EAF-BA54-6986434036FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:protection_suites:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C10BA4-B241-4F65-8FA1-AD88266C03B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:protection_suites:r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253A8082-9AE4-4049-A1D0-B7ACB5C2E8D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:protection_suites:r3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC845898-3D77-4793-971E-5E1555ED9CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:threat_manager:8.1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "0115D81C-2CA2-424C-BE4B-0896C9ADA68E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:threat_manager:r8:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "A38801CD-167E-408E-89BD-52BB1B89041B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:threat_manager_total_defense:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6AEE8BC-8D0E-464F-88B7-5C2C2D372AFA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:arcserve_backup:r11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8713893-59CE-486A-9262-E755A8F2D58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:arcserve_backup:r11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8275AC1-81C5-4D9F-A61B-1A908BDDE0F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58691",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36976",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507068/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36653",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022999",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2852",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53697",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://osvdb.org/58691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507068/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-13T10:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en el componente arclib en el motor antivirus en CA Anti-Virus para empresas (anteriormente eTrust Antivirus) desde v7.1 hasta r8.1; Anti-Virus desde 2007 (v8) hasta 2009; eTrust EZ Antivirus r7.1; Internet Security Suite desde 2007 (v3) hasta Plus 2009; y otros productos de CA permite a atacantes remotos producir una denegación de servicio a través de un archivo RAR manipulado que inicia la corrupción de la pila, una vulnerabilidad diferente que CVE-2009-3587."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-virus:2007:8:*:*:*:*:*:*",
            "matchCriteriaId" : "C469EBBE-EE96-4CED-BD8C-36461750C6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-virus:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C5E892B-0EE8-4B76-97B8-0BAF17E83F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607CCBDA-7288-4496-A7ED-EF6DED40CA21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:r8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11BCD267-E8CE-4A97-B769-5F4CAF9830D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:anti-virus_sdk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "865B7BD2-3AD1-41CA-842B-47BC4F1426DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:common_services:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2FA702-184A-44FF-8DEA-7811804EE175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:common_services:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D301B65D-A20B-4991-A0D8-DFE3363F162B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A08C715-A351-466D-99EC-006C106A3366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05185A74-8484-419D-A3CE-8603928AF0DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C533CA-ACB7-4C0F-98E2-B5E51E24A554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_integrated_threat_management:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD8D5F0-9606-4BBA-B7F9-ACD089B84DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DDF2EE3-753B-4C7E-84EF-144FA5986A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_secure_content_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69184A5E-4FA9-4896-B6E8-1B9D4D62D099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:internet_security_suite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F30C4FF9-DB76-4B3F-9582-752097B3D521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:internet_security_suite:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "285013A5-E058-4B2B-B8B6-1BFF72388589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:network_and_systems_management:r3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF55705-42ED-4503-8534-FDEA365E84E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:network_and_systems_management:r3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB548763-E1A7-4DB1-BE86-ED5AA1CA81BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:network_and_systems_management:r11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B28429A-F343-4BE8-A94D-5A5AC3F6258C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:network_and_systems_management:r11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF64064-1C35-4888-BBC2-52F68EF9517F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:secure_content_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DADD1E6-3454-4C1E-AD46-82D79CB8F528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:secure_content_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E02DA21-B25B-4626-BFDC-61AA8AF3537E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9C8A1C-0A55-4CA5-9BB6-2D03EFCFE699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFA39E3-A614-4A64-B29C-86D6F12F1557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_network_and_systems_management:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B4434A4-EE82-46A1-9293-345991515369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_network_and_systems_management:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43CD3B48-C978-4FDB-B157-85F3E971446B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:anti-virus:2009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6050CADE-7BAF-45B7-A031-F70558C7CE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:anti-virus_for_the_enterprise:r8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0186ADA-0E20-4E14-B9D5-19CDFC1BD98F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:anti-virus_gateway:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD75FF0F-A36C-40AF-A99E-1596A6A6FE2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:anti-virus_plus:2009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED8CEF9-6AEC-4771-98F7-051E4B3E0848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:arcserve_for_windows_client_agent:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5603FDAD-A347-4A44-BC45-1ADC44601D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:arcserve_for_windows_server_component:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5086D7CF-EBAB-4E30-98E0-0D276CC1C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:common_services:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FAD043E-3ABE-46D7-AD17-A68858692A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_anti-virus_gateway:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C13B0E1-DCEE-46E5-81A3-C08C07C58B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_anti-virus_sdk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257CC950-F1BB-4D0A-9B05-98A58DB67532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_ez_antivirus:r7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A641A2-4147-4C41-B102-18417ECA9339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_intrusion_detection:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "29FEABEE-DC17-4620-B088-B24249865931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_intrusion_detection:3.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D10B864B-AA39-4702-A42B-F33BAF2D8059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:etrust_secure_content_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB54A16-5E56-46FC-A49C-56C98C0B8F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:gateway_security:r8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B44F941C-83DC-4EDA-B258-C35F5EDA819E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:internet_security_suite_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0281F80B-CF9C-482D-B7A9-3B2651BD0567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:internet_security_suite_plus_2008:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F7E184-EA23-487C-83ED-65CF8DD2DB18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:internet_security_suite_plus_2009:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951062B1-C72B-4EAF-BA54-6986434036FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:protection_suites:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C10BA4-B241-4F65-8FA1-AD88266C03B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:protection_suites:r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253A8082-9AE4-4049-A1D0-B7ACB5C2E8D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:protection_suites:r3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC845898-3D77-4793-971E-5E1555ED9CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:threat_manager:8.1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "0115D81C-2CA2-424C-BE4B-0896C9ADA68E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:threat_manager:r8:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "A38801CD-167E-408E-89BD-52BB1B89041B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:threat_manager_total_defense:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6AEE8BC-8D0E-464F-88B7-5C2C2D372AFA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:arcserve_backup:r12.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0486108C-E36C-4746-919E-C760E10EBAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:arcserve_backup:r12.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2F60F0-E8B8-46E6-932E-DF9F4457B47C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:arcserve_backup:r11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8275AC1-81C5-4D9F-A61B-1A908BDDE0F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:arcserve_backup:r11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8713893-59CE-486A-9262-E755A8F2D58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:arcserve_backup:r11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8275AC1-81C5-4D9F-A61B-1A908BDDE0F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36976",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507068/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36653",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022999",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2852",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53698",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/36976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507068/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3602",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-13T10:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses."
      }, {
        "lang" : "es",
        "value" : "Unbound anterior v1.3.4 no comprueba las firmas para registros NSEC3, lo que permite a atacantes remotos causar una delegación de seguridad para ser descargada a través de suplantación de DNS u otros ataques relativos al DNS conjuntamente con respuestas de delegación manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.3",
            "matchCriteriaId" : "B7158CA2-29DF-4705-96DF-4166D43FB0B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C91D9B3-201C-4090-8AB7-22B3B017C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54DA5D37-9D1E-483D-AD56-FD9B32BE62BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD25EC11-5C51-4072-AFBC-CB6C7173E1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19BD88F4-8CF7-4C02-9A68-0F57A5C221AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBA46C5-4E08-4B9F-897B-05DE3AF9A10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C96D1B54-4C99-4B36-97A5-40D7A3691041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62F9F20-8A6E-4736-A3ED-879BCE4E4F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C42FEA-5001-41D4-8CA3-A25D8CB0A9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B38799-BBFD-42B3-8DF3-1C2957BEE205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ADE80A0-3D9D-4C4E-859B-E0A7EE5A3C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "785E8B09-CC33-4812-923F-3168FA73B814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:0.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F22E5E-185B-411E-BD1A-9F2774F87E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798B325D-4612-493C-BDF3-D09F9AF99C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DF2FEF-AED3-43C3-8877-EB5A724232BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2F7047-5435-4616-8357-B72BB3F9A600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05137329-C056-4E1E-811E-0AF2899E9EE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "850E4420-3B05-4F99-A4C6-AD22E127E7DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A23044-AB7D-4303-804B-11ADC8CF4CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DFA469-124B-4F6A-9D86-2B615CC1F5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D463CB7-2B65-4A4D-8AC2-35F6C51CAC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7701F4B-6FF1-463E-BF6D-6B7EA96DB192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "661E72ED-666D-4532-B503-683E2C84686F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDF5BCB9-1950-4099-8E08-5D1CBF6749FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:unbound:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04981A8D-F3F8-4D83-818B-775E8FE9CE77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58836",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/36996",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37913",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://unbound.net/pipermail/unbound-users/2009-October/000852.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/09/2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/09/3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2875",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/58836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://unbound.net/pipermail/unbound-users/2009-October/000852.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/09/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/09/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-13T10:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted (1) HostSize, and possibly (2) ProtoSize and (3) ServerSize, field that triggers a stack-based buffer overflow involving a crafted HostList field.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de entero en setnet32.exe v3.50.0.13752 en IBM Informix Client SDK v3.0 y v3.50 y Informix Connect Runtime v3.x permite a atacantes remotos ejecutar código a su elección a través de un archivo .nfx con un (1) HostSize manipulado, y probablemente (2) ProtoSize y (3) ServerSize, campo que lanza un desbordamiento de búfer basado en pila incluyendo un campos HostList manipulado. NOTA: algunos de estos detalles fueron obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_client_sdk:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918D0408-FC1C-49AA-A528-08474DDE1D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_client_sdk:3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C08DA2EA-0B5F-4FB8-9AC6-16CAF7CEAB69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_connect_runtime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB963B2-9E8C-4CEB-A832-02F974ED44C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/9sg_ibm_setnet32.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36949",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/58530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2834",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/9sg_ibm_setnet32.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/58530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-13T10:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the VBoxNetAdpCtl configuration tool in Sun VirtualBox 3.0.x before 3.0.8 on Solaris x86, Linux, and Mac OS X allows local users to gain privileges via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la herramienta de configuración VBoxNetAdpCtl en Sun VirtualBox v3.0.x anterior v3.0.8 en Solaris x86, Linux, y Mac OS X permite a usuarios locales obtener privilegios a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:virtualbox:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB28343-0302-4490-AD8C-C0C5F9B0527B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:virtualbox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44193C48-D911-457D-B152-DE36E37AC6E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:virtualbox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D151779F-5C0C-449E-BBEE-32830C03B865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:virtualbox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C043BB9-6FC5-427E-A7E3-B1D883E918A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F8222C41-435E-4017-A8C7-D7AB624A6D05"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:*:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FEEC0C5A-4A6E-403C-B929-D1EC8B0FE2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36929",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1022990",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-268188-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58652",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36604",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.virtualbox.org/wiki/Changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2845",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53671",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/36929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1022990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-268188-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/58652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.virtualbox.org/wiki/Changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3693",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-13T10:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via \\.. (backwards slash dot dot) sequences in the third argument to the MakeHttpRequest method."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el control Vulnerabilidad de salto de directorio en (XUpload.ocx) en HP LoadRunner v9.5 permite a atacantes remotos crear archivos a su elección a través de la secuencia \\.. (barra invertida punto punto) en el tercer argumento en el método MakeHttpRequest."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:persits:xupload:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F151EAF-714D-4E3E-BBCF-26D416865D4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:loadrunner:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C140E6-D09F-4B81-A1E0-F7661855FC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/9sg_hp_loadrunner.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36898",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://retrogod.altervista.org/9sg_hp_loadrunner.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-13T10:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in config/config.php in ezRecipe-Zee 91, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cfg[prePath] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en config/config.php en ezRecipe-Zee v91, cuando register_globals es habilitado, permite a atacantes remotos incluir y ejecutar archivos locales a su elección a través de ..(punto punto) en el parámetro cfg[prePath]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jdtmmsm:ezrecipe-zee:91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA953C8-F6F6-44A9-BC7C-58DD5D624C7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36992",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/expldownload/1/7380/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/expldownload/1/7380/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-13T10:30:00.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a crafted (1) EmailField (email address) or (2) URLField (URL) that triggers a large amount of backtracking in a regular expression."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de complejidad algorítmica en la forma library en Django v1.0 anterior v1.0.4 y v1.1 anterior v1.1.1 permite a atacantes remotos causar una denegación de servicio (consumo CPU( a través de (1) EmailField (dirección email) o (2) URLField (URL)que provoca una gran cantidad de backtracking (vuelta a atrás) en una expresión regular."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9023348-07A7-46E8-B45A-CC19563C5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56846659-96C8-497C-8404-3975E5B6385B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://groups.google.com/group/django-users/browse_thread/thread/15df9e45118dfc51/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36948",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36968",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.djangoproject.com/weblog/2009/oct/09/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/13/6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36655",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2871",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://groups.google.com/group/django-users/browse_thread/thread/15df9e45118dfc51/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.djangoproject.com/weblog/2009/oct/09/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/13/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0090",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obtain unintended access to stack memory, and execute arbitrary code, via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka \"Microsoft .NET Framework Pointer Verification Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft .NET Framework v1.0 SP3, v1.1 SP1, y v2.0 SP1 no valida adecuadamente el código de .NET, lo que permite a atacantes remotos obtener accesos no previstos a la memoria de la pila y ejecutar código arbitrario a través de (1) una aplicación de navegador XAML (XBAP), (2) una aplicación ASP.NET manipulada, o (3) una aplicación .NET Framework manipulada, también conocido como \"Vulnerabilidad de verificación de puntero de Microsoft .NET Framework\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7C684420-1614-4DAE-9BD9-F1FE9102A50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C610747-93E5-4014-8ED2-47F333174832"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A419F50E-F32C-461C-95D0-978C5351FBAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C610747-93E5-4014-8ED2-47F333174832"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33796DB-4523-4F04-B564-ADF030553D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "B2B19826-5516-4899-9599-F95D0A03FBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*",
            "matchCriteriaId" : "4945F25F-2828-4D03-930B-A109BA73E00C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B659D4-6EDD-4A31-A7CC-70B12EBEB4D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C610747-93E5-4014-8ED2-47F333174832"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-061",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5716",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0091",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka \"Microsoft .NET Framework Type Verification Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft .NET Framework v2.0, v2.0 SP1, y v3.5 no cumple adecuadamente con la limitación de igualdad de tipos en un código .NET, lo que permite a atacantes remotos ejecutar código arbitrario a traves de (1) una aplicación XAML del navegador (XABP), (2) una aplicación ASP.NET manipulada o (3) una aplicación .NET Framework manipulada, también conocido como \"Vulnerabilidad de verificación de tipos de .NET\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7C684420-1614-4DAE-9BD9-F1FE9102A50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C610747-93E5-4014-8ED2-47F333174832"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A419F50E-F32C-461C-95D0-978C5351FBAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C610747-93E5-4014-8ED2-47F333174832"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33796DB-4523-4F04-B564-ADF030553D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "B2B19826-5516-4899-9599-F95D0A03FBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*",
            "matchCriteriaId" : "4945F25F-2828-4D03-930B-A109BA73E00C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B659D4-6EDD-4A31-A7CC-70B12EBEB4D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C610747-93E5-4014-8ED2-47F333174832"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-061",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6451",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0555",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:00.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly process Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted audio file that uses the Windows Media Speech codec, aka \"Windows Media Runtime Voice Sample Rate Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows Media Runtime, como se utiliza en DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, y Audio Compression Manager (ACM), no accede correctamente a los ficheros ASF, lo que permite a atacantes remotos ejecutar código arbitrario a través de un fichero de audio manipulado que utiliza el codec Windows Media Speech, también conocido como \"Vulnerabilidad de Windows Media Runtime Voice Sample Rate\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DEC28F-EB69-4B28-AAE9-674DE2C994E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3778BBD3-6C58-46DF-B1EB-ED02513CA8D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DEC28F-EB69-4B28-AAE9-674DE2C994E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6DBB016-22A2-4B12-A1A4-DEE8ABF14B9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61AAD264-CC98-4FB7-BDDD-6920D4AD1B5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "ABBA5D64-4184-4420-B7D0-A4E41359AA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6DBB016-22A2-4B12-A1A4-DEE8ABF14B9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61AAD264-CC98-4FB7-BDDD-6920D4AD1B5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "BAB70FD5-09F3-4215-99C4-299EDE8D26DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "283F5DF4-B68A-4C1D-822A-1C0EB67C2C35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "F8216946-5F76-48B9-91CC-207F657D7D3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "B36BFDA7-596B-45EA-AACE-F8A796CECDBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "06E7E0F7-AA6F-477C-AAA7-C0419CD2F3BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "687E66DB-E5CC-4B13-B9B7-89CC6B49B693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "0161C884-70A5-4AD0-BD80-F0F7B3D8579E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-051",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6407",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1547",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:00.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream header that triggers memory corruption, aka \"Data Stream Header Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad inespecífica en Microsoft Internet Explorer v5.01 SP4, v6, v6 SP1, y v7  permite a atacantes remotos ejecutar código arbitrario a través de cabeceras de flujos de datos manipulados que inician una corrupción de memoria, también conocido como \"Vulnerabilidad de corrupción de cabecera de flujo de datos\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "A1B0FA50-529D-4D33-9B6E-F32AF0A8FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "A1B0FA50-529D-4D33-9B6E-F32AF0A8FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52E757F-9B41-43B4-9D67-3FEDACA71283"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33796DB-4523-4F04-B564-ADF030553D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "B2B19826-5516-4899-9599-F95D0A03FBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*",
            "matchCriteriaId" : "4945F25F-2828-4D03-930B-A109BA73E00C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6454",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2497",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight 2, does not properly handle interfaces, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted Silverlight application, (3) a crafted ASP.NET application, or (4) a crafted .NET Framework application, aka \"Microsoft Silverlight and Microsoft .NET Framework CLR Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "La Rutina de Lenguaje Comun (CLR) en Microsoft .NET Framework v2.0, v2.0 SP1, v2.0 SP2, v3.5, and v3.5 SP1, y Silverlight v2, no gestiona adecuadamente las interfaces, lo que permite a atacantes remotos ejecutar código arbitrario a través de (1) una aplicación manipulada de navegador XAML (XBAP), (2) una aplicación manipulada de Silverlight, (3) una aplicación manipulada de ASP.NET, o (4) una aplicación manipulada de .NET Framework, también conocido como \"Vulnerabilidad de el CLR de Microsoft Silverlight y Microsoft .NET Framework\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7C684420-1614-4DAE-9BD9-F1FE9102A50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C610747-93E5-4014-8ED2-47F333174832"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A419F50E-F32C-461C-95D0-978C5351FBAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C610747-93E5-4014-8ED2-47F333174832"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33796DB-4523-4F04-B564-ADF030553D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "B2B19826-5516-4899-9599-F95D0A03FBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*",
            "matchCriteriaId" : "4945F25F-2828-4D03-930B-A109BA73E00C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B659D4-6EDD-4A31-A7CC-70B12EBEB4D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C610747-93E5-4014-8ED2-47F333174832"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-061",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6510",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2500",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.327",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted WMF image file, aka \"GDI+ WMF Integer Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en GDI+ en Microsoft Internet Explorer v6 SP1, Windows XP SP2 y SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 y SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold y SP3, Office Excel Viewer 2003 Gold y SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, y SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 y SP2, Expression Web, Expression Web 2, Groove 2007 Gold y SP1, Works v8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold y SP1, y Forefront Client Security v1.0 permite a atacantes remotos ejecutar código arbitrario a través de un fichero de imagen WMF, también conocido como \"Vulnerabilidad de desbordamiento de entero GDI+ WMF\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2978BF86-5A1A-438E-B81F-F360D0E30C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EFB032-47F4-4497-B16B-CB9126EAC9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "6881476D-81A2-4DFD-AC77-82A8D08A0568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "86B3074F-1673-4439-8582-F2786D0ED54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "26423C70-4475-4D7E-8CC0-D8CFADE16B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EF6C51-17EA-43E4-84BA-08CE705C2D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "7ADB520B-B847-4855-95B1-6CEA36D66C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "93B86335-EF14-4E4F-B192-2A5323A47D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:itanium:*:*:*:*:*",
            "matchCriteriaId" : "AA80EDC4-4E84-40BE-86D5-1825AFA85390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:x64:*:*:*:*:*",
            "matchCriteriaId" : "0F3BF09C-04D2-4367-BE58-72AD396B4110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "377777D4-0649-4732-9E38-E4074056C561"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:expression_web:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2876FC23-21A0-4F56-B0D9-11187173F7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6761A1C-EC1C-4B00-8126-D58DAB51267A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "08AF794A-435D-4171-9DBB-EB7FAED96DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FA62BE-D804-402D-9BDD-68BC70ECCD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C94F2C-786B-45E4-B80A-FC668D917014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B44889-AEEB-4713-A047-C27B802DB257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2613CE-C469-43AE-A590-87CE1FAADA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_groove:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828A3CB6-EB0A-4CCD-B786-7316564EE40A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_groove:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F646992A-D3B7-4474-8E0B-65B99086D844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B39422-2E91-4F2C-8338-8A9292956260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9C3119-B118-41E2-9622-FD40C6CC4B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "B55849C3-649E-487B-B702-E2F4B25ECAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E647A7B3-7A92-4584-BDA7-81752FF59411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B14AE8E-1BFF-4458-87CC-357957F18F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1889A686-9565-4958-99BB-2EC24ABDF272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7B01AE-F457-45C1-8A37-7ED65CAF8638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EE0CCD-69AD-4705-9BB0-24688F7957F1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:platform_sdk:*:*:redistrutable_gdi\\+:*:*:*:*:*",
            "matchCriteriaId" : "5E9AC6E2-D6C2-48E1-87C5-86470AC622DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "86B3074F-1673-4439-8582-F2786D0ED54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "85959AEB-2FE5-4A25-B298-F8223CE260D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2005:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C30AF-7D70-4FE8-B7D1-F4734F791664"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578221F3-4C20-4A3F-A286-5A4680E8785D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E5DE8B76-FA09-4EA2-9535-758C56C4C099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5967",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2501",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka \"GDI+ PNG Heap Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en GDI+ en Microsoft Internet Explorer v6 SP1, Windows XP SP2 y SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 y SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold y SP3, Office Excel Viewer 2003 Gold y SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, y SP2, Office Compatibility Pack for Word, Excel, y PowerPoint 2007 File Formats SP1 y SP2, Expression Web, Expression Web v2, Groove 2007 Gold y SP1, Works v8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 y SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold y SP1, y Forefront Client Security v1.0 permite a atacantes remotos ejecutar código arbitrario a través de un fichero de imagen PNG manipulado, también conocido como \"Vulnerabilidad de desbordamiento de búfer basado en pila GDI+ PNG\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2978BF86-5A1A-438E-B81F-F360D0E30C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EFB032-47F4-4497-B16B-CB9126EAC9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "6881476D-81A2-4DFD-AC77-82A8D08A0568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "86B3074F-1673-4439-8582-F2786D0ED54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "26423C70-4475-4D7E-8CC0-D8CFADE16B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EF6C51-17EA-43E4-84BA-08CE705C2D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "7ADB520B-B847-4855-95B1-6CEA36D66C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "93B86335-EF14-4E4F-B192-2A5323A47D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:itanium:*:*:*:*:*",
            "matchCriteriaId" : "AA80EDC4-4E84-40BE-86D5-1825AFA85390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:x64:*:*:*:*:*",
            "matchCriteriaId" : "0F3BF09C-04D2-4367-BE58-72AD396B4110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "377777D4-0649-4732-9E38-E4074056C561"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:expression_web:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2876FC23-21A0-4F56-B0D9-11187173F7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6761A1C-EC1C-4B00-8126-D58DAB51267A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "08AF794A-435D-4171-9DBB-EB7FAED96DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FA62BE-D804-402D-9BDD-68BC70ECCD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C94F2C-786B-45E4-B80A-FC668D917014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B44889-AEEB-4713-A047-C27B802DB257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2613CE-C469-43AE-A590-87CE1FAADA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_groove:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828A3CB6-EB0A-4CCD-B786-7316564EE40A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_groove:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F646992A-D3B7-4474-8E0B-65B99086D844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B39422-2E91-4F2C-8338-8A9292956260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9C3119-B118-41E2-9622-FD40C6CC4B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "B55849C3-649E-487B-B702-E2F4B25ECAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E647A7B3-7A92-4584-BDA7-81752FF59411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B14AE8E-1BFF-4458-87CC-357957F18F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1889A686-9565-4958-99BB-2EC24ABDF272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7B01AE-F457-45C1-8A37-7ED65CAF8638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EE0CCD-69AD-4705-9BB0-24688F7957F1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:platform_sdk:*:*:redistrutable_gdi\\+:*:*:*:*:*",
            "matchCriteriaId" : "5E9AC6E2-D6C2-48E1-87C5-86470AC622DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "86B3074F-1673-4439-8582-F2786D0ED54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "85959AEB-2FE5-4A25-B298-F8223CE260D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2005:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C30AF-7D70-4FE8-B7D1-F4734F791664"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578221F3-4C20-4A3F-A286-5A4680E8785D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E5DE8B76-FA09-4EA2-9535-758C56C4C099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5800",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2502",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted TIFF image file, aka \"GDI+ TIFF Buffer Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en GDI+ en Microsoft Internet Explorer v6 SP1, Windows XP SP2 y SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 y SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold y SP3, Office Excel Viewer 2003 Gold y SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, y SP2, Office Compatibility Pack for Word, Excel, y PowerPoint 2007 File Formats SP1 y SP2, Expression Web, Expression Web v2, Groove 2007 Gold y SP1, Works v8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 y SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold y SP1, y Forefront Client Security v1.0 permite a atacantes remotos ejecutar código arbitrario a través de un fichero de imagen TIFF manipulado, también conocido como \"Vulnerabilidad de desbordamiento de búfer GDI+ TIFF\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2978BF86-5A1A-438E-B81F-F360D0E30C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EFB032-47F4-4497-B16B-CB9126EAC9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "6881476D-81A2-4DFD-AC77-82A8D08A0568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "86B3074F-1673-4439-8582-F2786D0ED54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "26423C70-4475-4D7E-8CC0-D8CFADE16B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EF6C51-17EA-43E4-84BA-08CE705C2D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "7ADB520B-B847-4855-95B1-6CEA36D66C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "93B86335-EF14-4E4F-B192-2A5323A47D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:itanium:*:*:*:*:*",
            "matchCriteriaId" : "AA80EDC4-4E84-40BE-86D5-1825AFA85390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:x64:*:*:*:*:*",
            "matchCriteriaId" : "0F3BF09C-04D2-4367-BE58-72AD396B4110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "377777D4-0649-4732-9E38-E4074056C561"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:expression_web:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2876FC23-21A0-4F56-B0D9-11187173F7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6761A1C-EC1C-4B00-8126-D58DAB51267A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "08AF794A-435D-4171-9DBB-EB7FAED96DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FA62BE-D804-402D-9BDD-68BC70ECCD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C94F2C-786B-45E4-B80A-FC668D917014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B44889-AEEB-4713-A047-C27B802DB257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2613CE-C469-43AE-A590-87CE1FAADA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_groove:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828A3CB6-EB0A-4CCD-B786-7316564EE40A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_groove:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F646992A-D3B7-4474-8E0B-65B99086D844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B39422-2E91-4F2C-8338-8A9292956260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9C3119-B118-41E2-9622-FD40C6CC4B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "B55849C3-649E-487B-B702-E2F4B25ECAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E647A7B3-7A92-4584-BDA7-81752FF59411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B14AE8E-1BFF-4458-87CC-357957F18F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1889A686-9565-4958-99BB-2EC24ABDF272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7B01AE-F457-45C1-8A37-7ED65CAF8638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EE0CCD-69AD-4705-9BB0-24688F7957F1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:platform_sdk:*:*:redistrutable_gdi\\+:*:*:*:*:*",
            "matchCriteriaId" : "5E9AC6E2-D6C2-48E1-87C5-86470AC622DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "86B3074F-1673-4439-8582-F2786D0ED54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "85959AEB-2FE5-4A25-B298-F8223CE260D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2005:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C30AF-7D70-4FE8-B7D1-F4734F791664"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578221F3-4C20-4A3F-A286-5A4680E8785D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E5DE8B76-FA09-4EA2-9535-758C56C4C099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5898",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2503",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 does not properly allocate an unspecified buffer, which allows remote attackers to execute arbitrary code via a crafted TIFF image file that triggers memory corruption, aka \"GDI+ TIFF Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "GDI+ en Microsoft Internet Explorer v6 SP1, Windows XP SP2 y SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 y SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold y SP3, Office Excel Viewer 2003 Gold y SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, y SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 y SP2, Expression Web, Expression Web v2, Groove 2007 Gold y SP1, Works v8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 y SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold y SP1, y Forefront Client Security v1.0 no localiza adecuadamente un búfer sin especificar, lo que permite a atacantes remotos ejecutar código arbitrario a través de un fichero de imagen TIFF que inicia una corrupción de memoria, también conocido como \"Vulnerabilidad de corrupción de memoria GDI+ TIFF\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2978BF86-5A1A-438E-B81F-F360D0E30C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EFB032-47F4-4497-B16B-CB9126EAC9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "6881476D-81A2-4DFD-AC77-82A8D08A0568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "86B3074F-1673-4439-8582-F2786D0ED54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "26423C70-4475-4D7E-8CC0-D8CFADE16B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EF6C51-17EA-43E4-84BA-08CE705C2D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "7ADB520B-B847-4855-95B1-6CEA36D66C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "93B86335-EF14-4E4F-B192-2A5323A47D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:itanium:*:*:*:*:*",
            "matchCriteriaId" : "AA80EDC4-4E84-40BE-86D5-1825AFA85390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:x64:*:*:*:*:*",
            "matchCriteriaId" : "0F3BF09C-04D2-4367-BE58-72AD396B4110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "377777D4-0649-4732-9E38-E4074056C561"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:expression_web:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2876FC23-21A0-4F56-B0D9-11187173F7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6761A1C-EC1C-4B00-8126-D58DAB51267A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "08AF794A-435D-4171-9DBB-EB7FAED96DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FA62BE-D804-402D-9BDD-68BC70ECCD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C94F2C-786B-45E4-B80A-FC668D917014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B44889-AEEB-4713-A047-C27B802DB257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2613CE-C469-43AE-A590-87CE1FAADA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_groove:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828A3CB6-EB0A-4CCD-B786-7316564EE40A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_groove:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F646992A-D3B7-4474-8E0B-65B99086D844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B39422-2E91-4F2C-8338-8A9292956260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9C3119-B118-41E2-9622-FD40C6CC4B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "B55849C3-649E-487B-B702-E2F4B25ECAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E647A7B3-7A92-4584-BDA7-81752FF59411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B14AE8E-1BFF-4458-87CC-357957F18F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1889A686-9565-4958-99BB-2EC24ABDF272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7B01AE-F457-45C1-8A37-7ED65CAF8638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EE0CCD-69AD-4705-9BB0-24688F7957F1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:platform_sdk:*:*:redistrutable_gdi\\+:*:*:*:*:*",
            "matchCriteriaId" : "5E9AC6E2-D6C2-48E1-87C5-86470AC622DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "86B3074F-1673-4439-8582-F2786D0ED54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "85959AEB-2FE5-4A25-B298-F8223CE260D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2005:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C30AF-7D70-4FE8-B7D1-F4734F791664"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578221F3-4C20-4A3F-A286-5A4680E8785D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E5DE8B76-FA09-4EA2-9535-758C56C4C099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6491",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2504",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista Gold and SP1, Server 2008 Gold, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allow remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka \"GDI+ .NET API Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de enteros en las API no especificadas en GDI+ en .NET Framework versión 1.1 SP1, .NET Framework versión 2.0 SP1 y SP2, Windows XP SP2 y SP3, Windows Server 2003 SP2, Vista versión Gold y SP1, Server 2008 versión Gold, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 y SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 versión Gold y SP3, Office Excel Viewer 2003 Gold y SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 versión Gold, SP1 y SP2, Office Compatibility Pack for Word, Excel and PowerPoint 2007 File Formats SP1 y SP2, Expression Web, Expression Web 2, Groove 2007 versión Gold y SP1, Works versión 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 y SP3, Report Viewer 2005 SP1, Report Viewer 2008 versión Gold y SP1 y Forefront Client Security versión 1.0, de Microsoft, permiten a los atacantes remotos ejecutar código arbitrario por medio de (1) una aplicación de navegador XAML diseñada (XBAP), (2) una aplicación de ASP.NET diseñada o (3) una aplicación de .NET Framework diseñada, también se conoce como \"GDI+ .NET API Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2978BF86-5A1A-438E-B81F-F360D0E30C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EFB032-47F4-4497-B16B-CB9126EAC9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "6881476D-81A2-4DFD-AC77-82A8D08A0568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "86B3074F-1673-4439-8582-F2786D0ED54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "26423C70-4475-4D7E-8CC0-D8CFADE16B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EF6C51-17EA-43E4-84BA-08CE705C2D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "7ADB520B-B847-4855-95B1-6CEA36D66C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "93B86335-EF14-4E4F-B192-2A5323A47D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:itanium:*:*:*:*:*",
            "matchCriteriaId" : "AA80EDC4-4E84-40BE-86D5-1825AFA85390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:x64:*:*:*:*:*",
            "matchCriteriaId" : "0F3BF09C-04D2-4367-BE58-72AD396B4110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "377777D4-0649-4732-9E38-E4074056C561"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:expression_web:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2876FC23-21A0-4F56-B0D9-11187173F7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6761A1C-EC1C-4B00-8126-D58DAB51267A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "08AF794A-435D-4171-9DBB-EB7FAED96DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FA62BE-D804-402D-9BDD-68BC70ECCD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C94F2C-786B-45E4-B80A-FC668D917014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B44889-AEEB-4713-A047-C27B802DB257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2613CE-C469-43AE-A590-87CE1FAADA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_groove:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828A3CB6-EB0A-4CCD-B786-7316564EE40A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_groove:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F646992A-D3B7-4474-8E0B-65B99086D844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B39422-2E91-4F2C-8338-8A9292956260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9C3119-B118-41E2-9622-FD40C6CC4B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "B55849C3-649E-487B-B702-E2F4B25ECAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E647A7B3-7A92-4584-BDA7-81752FF59411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B14AE8E-1BFF-4458-87CC-357957F18F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1889A686-9565-4958-99BB-2EC24ABDF272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7B01AE-F457-45C1-8A37-7ED65CAF8638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EE0CCD-69AD-4705-9BB0-24688F7957F1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:platform_sdk:*:*:redistrutable_gdi\\+:*:*:*:*:*",
            "matchCriteriaId" : "5E9AC6E2-D6C2-48E1-87C5-86470AC622DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "86B3074F-1673-4439-8582-F2786D0ED54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "85959AEB-2FE5-4A25-B298-F8223CE260D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2005:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C30AF-7D70-4FE8-B7D1-F4734F791664"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578221F3-4C20-4A3F-A286-5A4680E8785D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E5DE8B76-FA09-4EA2-9535-758C56C4C099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6282",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2507",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly process URLs, which allows remote attackers to execute arbitrary programs via unspecified vectors that cause a \"vulnerable binary\" to load and run, aka \"Memory Corruption in Indexing Service Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Cierto control ActiveX en el servicio de indexado de Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP2 no procesa adecuadamente las URLs, lo que permite a atacantes remotos ejecutar programas de forma arbitraria a través de vectores sin especificar que producen un \"binario vulnerable\" para cargar y ejecutar, también conocido como \"Vulnerabilidad de corrupción de memoria en el servicio de indexado\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2978BF86-5A1A-438E-B81F-F360D0E30C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EFB032-47F4-4497-B16B-CB9126EAC9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "6881476D-81A2-4DFD-AC77-82A8D08A0568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-057",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6042",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2510",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, as used by Internet Explorer and other applications, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, aka \"Null Truncation in X.509 Common Name Vulnerability,\" a related issue to CVE-2009-2408."
      }, {
        "lang" : "es",
        "value" : "El componente CryptoAPI en Microsoft Windows 2000 SP4, Windows XP SP2 y SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, y SP2, Windows Server 2008 Gold, SP2, y R2, y Windows 7, tal y como lo utiliza Internet Explorer y otras aplicaciones, no maneja adecuadamente el carácter '\\0' en el campo Nombre Común (CN) un certificado X.509, lo que permite a atacantes man-in-the-middle engañar a servidores SSL a través de un certificado manipulado creado por una autoridad certificadora legitima, también conocido como \"Vulnerabilidad de truncado nulo en el nombre común de X.509\", relacionado con CVE-2009-2408."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2978BF86-5A1A-438E-B81F-F360D0E30C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EFB032-47F4-4497-B16B-CB9126EAC9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "6881476D-81A2-4DFD-AC77-82A8D08A0568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33796DB-4523-4F04-B564-ADF030553D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "B2B19826-5516-4899-9599-F95D0A03FBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*",
            "matchCriteriaId" : "4945F25F-2828-4D03-930B-A109BA73E00C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "2C9B0563-D613-497D-8F2E-515E6DA00CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.networkworld.com/news/2009/073009-more-holes-found-in-webs.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.networkworld.com/news/2009/091709-microsoft-ie-security-hole.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36475",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.wired.com/threatlevel/2009/07/kaminsky/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-056",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5842",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.networkworld.com/news/2009/073009-more-holes-found-in-webs.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.networkworld.com/news/2009/091709-microsoft-ie-security-hole.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.wired.com/threatlevel/2009/07/kaminsky/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2511",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows man-in-the-middle attackers to spoof arbitrary SSL servers and other entities via an X.509 certificate that has a malformed ASN.1 Object Identifier (OID) and was issued by a legitimate Certification Authority, aka \"Integer Overflow in X.509 Object Identifiers Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en el componente CryptoAPI en Microsoft Windows 2000 SP4, Windows XP SP2 y SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, y SP2, Windows Server 2008 Gold, SP2, y R2, y Windows 7 permite a atacantes man-in-the-middle engañar de forma arbitraria a servidores SSL y otras entidades a traves de un certificado X.509 que tiene un identificador de objeto (OID) malformado que fue creado por una certificadora legitima, también conocido como \"Vulnerabilidad de desbordamiento de entero en identificadores de objeto X.509\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33796DB-4523-4F04-B564-ADF030553D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "B2B19826-5516-4899-9599-F95D0A03FBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*",
            "matchCriteriaId" : "4945F25F-2828-4D03-930B-A109BA73E00C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7C684420-1614-4DAE-9BD9-F1FE9102A50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*",
            "matchCriteriaId" : "B8A32637-65EC-42C4-A892-0E599562527C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-056",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6186",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2515",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer underflow in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application that triggers an incorrect truncation of a 64-bit integer to a 32-bit integer, aka \"Windows Kernel Integer Underflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en el kernel en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 Gold y SP2 permite a usuarios locales ganar privilegios a través de una aplicación manipulada que inicia un truncado incorrecto del un entero de 64 bits a un de 32 bits, también conocida como \"Vulnerabilidad de desbordamiento de entero en el kernel de Windows\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "2C9B0563-D613-497D-8F2E-515E6DA00CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F99773-D1AF-4596-856A-CA164D4B68E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional:*:*:*:*:*",
            "matchCriteriaId" : "C29F02ED-85FC-4D22-A6DE-5F9C77ECCD70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:x64:*:*:*:*:*:*",
            "matchCriteriaId" : "59F0770D-0CED-4AEF-95AB-F9F9A4D6FB55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-058",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6506",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2516",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly validate data sent from user mode, which allows local users to gain privileges via a crafted PE .exe file that triggers a NULL pointer dereference during chain traversal, aka \"Windows Kernel NULL Pointer Dereference Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El kernel de Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold y SP1, y Server 2008 Gold no valida apropiadamente los datos enviados desde el modo de usuario, lo que permite a los usuarios locales alcanzar privilegios por medio de un archivo PE.exe creado que desencadena una desreferencia de puntero NULL durante el salto de cadena, también se conoce como \"Windows Kernel NULL Pointer Dereference Vulnerability\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional:*:*:*:*:*",
            "matchCriteriaId" : "C29F02ED-85FC-4D22-A6DE-5F9C77ECCD70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:x64:*:*:*:*:*:*",
            "matchCriteriaId" : "59F0770D-0CED-4AEF-95AB-F9F9A4D6FB55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nsfocus.com/en/advisories/0903.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-058",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6264",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.nsfocus.com/en/advisories/0903.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2517",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Microsoft Windows Server 2003 SP2 does not properly handle unspecified exceptions when an error condition occurs, which allows local users to cause a denial of service (reboot) via a crafted application, aka \"Windows Kernel Exception Handler Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "El kernel en Microsoft Windows Server 2003 SP2 no maneja adecuadamente ciertas excepciones cuando una condición de error se produce, lo que permite a usuarios locales producir una denegación de servicio (reinicio) a través de una aplicación manipulada, también conocido como \"Vulnerabilidad de Excepción del Kernel de Windows\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-058",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6512",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2518",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in GDI+ in Microsoft Office XP SP3 allows remote attackers to execute arbitrary code via an Office document with a bitmap (aka BMP) image that triggers memory corruption, aka \"Office BMP Integer Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en GDI+ in Microsoft Office XP SP3, permite a atacantes remotos ejecutar código de su elección  a través de un documento de Office con una imagen bitmap (también conocida como BPM) que provoca una corrupción de memoria. También conocida como \"Vulnerabilidad Office BMP Integer Overflow\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6430",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2524",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer underflow in the NTLM authentication feature in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service (reboot) via a malformed packet, aka \"Local Security Authority Subsystem Service Integer Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento inferior de entero en la característica de autenticación NTLM en el Servicio del Subsistema de la Autoridad de Seguridad (LSASS) en Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, y SP2, Windows Server 2008 Gold, SP2, y R2, y Windows 7 permite a atacantes remotos producir una denegación de servicio (reinicio) a través de un paquete malformado, también conocido como \"Vulnerabilidad de desbordamiento de entero en LSASS\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2978BF86-5A1A-438E-B81F-F360D0E30C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EFB032-47F4-4497-B16B-CB9126EAC9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "6881476D-81A2-4DFD-AC77-82A8D08A0568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33796DB-4523-4F04-B564-ADF030553D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "B2B19826-5516-4899-9599-F95D0A03FBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*",
            "matchCriteriaId" : "4945F25F-2828-4D03-930B-A109BA73E00C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "2C9B0563-D613-497D-8F2E-515E6DA00CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-059",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6263",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2525",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly initialize unspecified functions within compressed audio files, which allows remote attackers to execute arbitrary code via (1) a crafted media file or (2) crafted streaming content, aka \"Windows Media Runtime Heap Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows Media Runtime, usado en DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder y Audio Compression Manager (ACM), no inicializa adecuadamente funciones que no se han especificado, en los archivos de audio comprimidos, lo que permite a atacantes remotos ejecutar código de su elección  a través (1) de un archivo multimedia manipulado o (2) mediante un contenido de difusión (streaming). También conocida como \"Vulnerabilidad de Windows Media Runtime Heap Corruption\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DEC28F-EB69-4B28-AAE9-674DE2C994E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3778BBD3-6C58-46DF-B1EB-ED02513CA8D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DEC28F-EB69-4B28-AAE9-674DE2C994E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6DBB016-22A2-4B12-A1A4-DEE8ABF14B9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61AAD264-CC98-4FB7-BDDD-6920D4AD1B5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6DBB016-22A2-4B12-A1A4-DEE8ABF14B9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61AAD264-CC98-4FB7-BDDD-6920D4AD1B5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*",
            "matchCriteriaId" : "B8A32637-65EC-42C4-A892-0E599562527C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-051",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6484",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2526",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted packet to the Server service, aka \"SMBv2 Infinite Loop Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows Vista Gold, SP1, y SP2 y Server 2008 Gold y SP2 , no valida adecuadamente algunos campos de los paquetes SMBv2, lo que permite a atacantes remotos producir una denegación de servicio (bucle infinito y cuelgue de sistema) a través de un paquete manipulado al servicio de servidor, también conocido como \"Vulnerabilidad de bucle infinito SMBv2\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32623D48-7000-4C7D-823F-7D2A9841D88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "2C9B0563-D613-497D-8F2E-515E6DA00CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5595",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2527",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via (1) a crafted ASF file or (2) crafted streaming content, aka \"WMP Heap Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en Microsoft Windows Media Player v6.4, permite a atacantes remotos ejecutar código de su elección a través de un archivo ASF manipulado o (2) a través de un contenido para difusión (streaming) manipulado, también conocida como \"Vulnerabilidad de desbordamiento de búfer basado en memoria dinámica (heap) WMP\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:sp4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11AFB73A-1C61-40F1-8415-E4D40BB2699B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377F7D0C-6B44-4B90-BF90-DAF959880C6D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "3461CEA0-6CCF-4AA9-B83A-420E1310C83C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*",
            "matchCriteriaId" : "2D48D876-6A88-4B52-9322-9F019BFA19B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47EBFCC-1828-45AB-BC6D-FB980929A81A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:sp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E69F8C21-5996-4083-A02A-F04AE948CEA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE4EC55-63B7-409E-9E4D-DBC5A36D2F5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-052",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6184",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2528",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka \"Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "GDI+ en Microsoft Office XP SP3 no maneja adecuadamente los objetos mal formados en Office Art Property Tables, lo que permite a atacantes remotos ejecutar código de su elección a través de un documento de Office manipulado que provoca una corrupción de memoria, \"también conocida como vulnerabilidad de corrupción de memoria\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2978BF86-5A1A-438E-B81F-F360D0E30C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EFB032-47F4-4497-B16B-CB9126EAC9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "6881476D-81A2-4DFD-AC77-82A8D08A0568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "86B3074F-1673-4439-8582-F2786D0ED54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "26423C70-4475-4D7E-8CC0-D8CFADE16B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EF6C51-17EA-43E4-84BA-08CE705C2D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "7ADB520B-B847-4855-95B1-6CEA36D66C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "93B86335-EF14-4E4F-B192-2A5323A47D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:itanium:*:*:*:*:*",
            "matchCriteriaId" : "AA80EDC4-4E84-40BE-86D5-1825AFA85390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:x64:*:*:*:*:*",
            "matchCriteriaId" : "0F3BF09C-04D2-4367-BE58-72AD396B4110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "377777D4-0649-4732-9E38-E4074056C561"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:expression_web:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2876FC23-21A0-4F56-B0D9-11187173F7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6761A1C-EC1C-4B00-8126-D58DAB51267A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "08AF794A-435D-4171-9DBB-EB7FAED96DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FA62BE-D804-402D-9BDD-68BC70ECCD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C94F2C-786B-45E4-B80A-FC668D917014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B44889-AEEB-4713-A047-C27B802DB257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2613CE-C469-43AE-A590-87CE1FAADA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_groove:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828A3CB6-EB0A-4CCD-B786-7316564EE40A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_groove:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F646992A-D3B7-4474-8E0B-65B99086D844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B39422-2E91-4F2C-8338-8A9292956260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9C3119-B118-41E2-9622-FD40C6CC4B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "B55849C3-649E-487B-B702-E2F4B25ECAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E647A7B3-7A92-4584-BDA7-81752FF59411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B14AE8E-1BFF-4458-87CC-357957F18F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1889A686-9565-4958-99BB-2EC24ABDF272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7B01AE-F457-45C1-8A37-7ED65CAF8638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EE0CCD-69AD-4705-9BB0-24688F7957F1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:platform_sdk:*:*:redistrutable_gdi\\+:*:*:*:*:*",
            "matchCriteriaId" : "5E9AC6E2-D6C2-48E1-87C5-86470AC622DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "86B3074F-1673-4439-8582-F2786D0ED54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "85959AEB-2FE5-4A25-B298-F8223CE260D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2005:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C30AF-7D70-4FE8-B7D1-F4734F791664"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578221F3-4C20-4A3F-A286-5A4680E8785D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E5DE8B76-FA09-4EA2-9535-758C56C4C099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6426",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2529",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified variables, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka \"HTML Component Handling Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer v5.01 SP4, v6, v6 SP1, v7, y v8  no gestiona adecuadamente la validación de argumentos para un número de variables sin especificar lo que permite a atacantes remotos ejecutar código arbitrario a través de un documentos HTML manipulado, también conocido como \"Vulnerabilidad de gestión de componentes HTML\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "A1B0FA50-529D-4D33-9B6E-F32AF0A8FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "A1B0FA50-529D-4D33-9B6E-F32AF0A8FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52E757F-9B41-43B4-9D67-3FEDACA71283"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33796DB-4523-4F04-B564-ADF030553D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "B2B19826-5516-4899-9599-F95D0A03FBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*",
            "matchCriteriaId" : "4945F25F-2828-4D03-930B-A109BA73E00C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6419",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2530",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka \"Uninitialized Memory Corruption Vulnerability,\" a different vulnerability than CVE-2009-2531."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer v6, v6 SP1, v7, y v8 no gestiona adecuadamente los objetos en memoria, lo que permite a atacantes remotos ejecutar código arbitrario mediante el acceso a un objeto que (1) no ha sido adecuadamente inicializado o (2) es borrado, lo que lleva a una corrupción de memoria, también conocido como \"Vulnerabilidad de memoria no inicializada corrupta\", una vulnerabilidad diferente que CVE-2008-2531."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "A1B0FA50-529D-4D33-9B6E-F32AF0A8FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "A1B0FA50-529D-4D33-9B6E-F32AF0A8FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52E757F-9B41-43B4-9D67-3FEDACA71283"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33796DB-4523-4F04-B564-ADF030553D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "B2B19826-5516-4899-9599-F95D0A03FBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*",
            "matchCriteriaId" : "4945F25F-2828-4D03-930B-A109BA73E00C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6190",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2531",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka \"Uninitialized Memory Corruption Vulnerability,\" a different vulnerability than CVE-2009-2530."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer v6, v6 SP1, v7, y v8, no maneja adecuadamente objetos en memoria lo que permite a atacantes remotos ejecutar codigo arbitrario mediante el acceso a un objeto que (1) no ha sido adecuadamente inicializado, o (2) es borrado, produciendo un corrupcion de memoria, también conocido como \"Vulnerabilidad de corrupción de memoria no inicializada\", una vulnerabilidad diferente que CVE-2009-2530."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "A1B0FA50-529D-4D33-9B6E-F32AF0A8FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "A1B0FA50-529D-4D33-9B6E-F32AF0A8FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52E757F-9B41-43B4-9D67-3FEDACA71283"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33796DB-4523-4F04-B564-ADF030553D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "B2B19826-5516-4899-9599-F95D0A03FBCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*",
            "matchCriteriaId" : "4945F25F-2828-4D03-930B-A109BA73E00C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD560746-0AED-4646-934E-6742888FB6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5766",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2532",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the Server service, aka \"SMBv2 Command Value Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows Vista Gold, SP1, y SP2, Windows Server 2008 Gold y SP2, y Windows 7 RC no gestiona adecuadamente el valor del comando en un paquete de negocio de petición SMB Multiprotocolo, lo que permite a atacantes remotos ejecutar código arbitrario a través de un paquete SMBv2 manipulado al servicio de servidor, también conocido como \"Vulnerabilidad de valor de comando SMBv2\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32623D48-7000-4C7D-823F-7D2A9841D88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "2C9B0563-D613-497D-8F2E-515E6DA00CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6336",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2999",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-14T10:30:01.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The com.android.phone process in Android 1.5 CRBxx allows remote attackers to cause a denial of service (application restart and network disconnection) via an SMS message containing a malformed WAP Push message that triggers an ArrayIndexOutOfBoundsException exception, possibly a related issue to CVE-2009-2656."
      }, {
        "lang" : "es",
        "value" : "El proceso com.android.phone en Android v1.5 CRBxx permite a atacantes remotos producir una denegación de servicio (reinicio de aplicacion y desconexión de red) a través de un mensaje SMS que contenga un mensaje de Push WAP malformado que inicia una excepción ArrayIndexOutOfBoundsException, posiblemente relacionado con CVE-2009-2656."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C354829-6BEB-4C67-972A-60367073753C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=46e23fe762d2143d60589ab6d39c4b47c2c754d1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-014.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506948/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=46e23fe762d2143d60589ab6d39c4b47c2c754d1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506948/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3126",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2009-10-14T10:30:01.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka \"GDI+ PNG Integer Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en GDI+ en Microsoft Internet Explorer v6 SP1, Windows XP SP2 y SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 y SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold y SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, y SP2, Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats SP1 y SP2, Expression Web, Expression Web v2, Groove 2007 Gold y SP1, Works v8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 y SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold y SP1, y Forefront Client Security v1.0 permite a atacantes remotos ejecutar código arbitrario a través de una fichero de imagen PNG manipulada, también conocido como \"Vulnerabilidad de desbordamiento de entero GDI+ PNG\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2978BF86-5A1A-438E-B81F-F360D0E30C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EFB032-47F4-4497-B16B-CB9126EAC9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "6881476D-81A2-4DFD-AC77-82A8D08A0568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*",
            "matchCriteriaId" : "9CFB1A97-8042-4497-A45D-C014B5E240AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "7F9C7616-658D-409D-8B53-AC00DC55602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3852BB02-47A1-40B3-8E32-8D8891A53114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF6AE15-EAC3-4100-A742-211026C79CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F97EB992-2DC1-4E31-A298-072D8313130B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "86B3074F-1673-4439-8582-F2786D0ED54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "26423C70-4475-4D7E-8CC0-D8CFADE16B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:itanium:*:*:*:*:*",
            "matchCriteriaId" : "F7EF6C51-17EA-43E4-84BA-08CE705C2D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp2:x64:*:*:*:*:*",
            "matchCriteriaId" : "7ADB520B-B847-4855-95B1-6CEA36D66C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "93B86335-EF14-4E4F-B192-2A5323A47D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:itanium:*:*:*:*:*",
            "matchCriteriaId" : "AA80EDC4-4E84-40BE-86D5-1825AFA85390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2005:sp3:x64:*:*:*:*:*",
            "matchCriteriaId" : "0F3BF09C-04D2-4367-BE58-72AD396B4110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "377777D4-0649-4732-9E38-E4074056C561"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:expression_web:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2876FC23-21A0-4F56-B0D9-11187173F7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6761A1C-EC1C-4B00-8126-D58DAB51267A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "08AF794A-435D-4171-9DBB-EB7FAED96DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FA62BE-D804-402D-9BDD-68BC70ECCD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C94F2C-786B-45E4-B80A-FC668D917014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B44889-AEEB-4713-A047-C27B802DB257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2613CE-C469-43AE-A590-87CE1FAADA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_groove:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828A3CB6-EB0A-4CCD-B786-7316564EE40A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_groove:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F646992A-D3B7-4474-8E0B-65B99086D844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B39422-2E91-4F2C-8338-8A9292956260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9C3119-B118-41E2-9622-FD40C6CC4B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "B55849C3-649E-487B-B702-E2F4B25ECAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E647A7B3-7A92-4584-BDA7-81752FF59411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B14AE8E-1BFF-4458-87CC-357957F18F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1889A686-9565-4958-99BB-2EC24ABDF272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7B01AE-F457-45C1-8A37-7ED65CAF8638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EE0CCD-69AD-4705-9BB0-24688F7957F1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:platform_sdk:*:*:redistrutable_gdi\\+:*:*:*:*:*",
            "matchCriteriaId" : "5E9AC6E2-D6C2-48E1-87C5-86470AC622DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "86B3074F-1673-4439-8582-F2786D0ED54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*",
            "matchCriteriaId" : "16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "85959AEB-2FE5-4A25-B298-F8223CE260D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2005:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F40C30AF-7D70-4FE8-B7D1-F4734F791664"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578221F3-4C20-4A3F-A286-5A4680E8785D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E5DE8B76-FA09-4EA2-9535-758C56C4C099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6134",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-14T10:30:02.110",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unspecified function in the Dalvik API in Android 1.5 and earlier allows remote attackers to cause a denial of service (system process restart) via a crafted application, possibly a related issue to CVE-2009-2656."
      }, {
        "lang" : "es",
        "value" : "Una función sin especificar en la API de Dalvik en Android v1.5 y anteriores permite a atacantes remotos producir una denegación de servicio (reinicio de sistema) a través de una aplicación manipulada posiblemente un tema relacionado con CVE-2009-2656."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "8406C10C-F61D-4AFB-8DFE-6F6AD09A6D29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=cf4550c3198d6b3d92cdc52707fe70d7cc0caa9f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-014.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506948/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=cf4550c3198d6b3d92cdc52707fe70d7cc0caa9f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506948/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-15T10:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote authenticated users to inject arbitrary web script or HTML via \"external client input\" that triggers crafted error messages."
      }, {
        "lang" : "es",
        "value" : "Ejecución de comandos en sitios cruzados (XSS) en la consola de Symantec SecurityExpressions Audit y Compliance Server v4.1.1, v4.1 y anteriores permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML a través de la \"entrada de clientes externos\" lo cual provoca mensajes de error manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:securityexpressions_audit_and_compliance_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.1",
            "matchCriteriaId" : "0D4E75BA-D9C7-4568-A978-82A304A4BDA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:securityexpressions_audit_and_compliance_server:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5B8408-80B7-4EAC-8439-EB35D7435CB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36972",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/58651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36570",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091006_00",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2849",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/58651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091006_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-15T10:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an error message in a response, related to an \"HTML Injection issue.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Ejecución de secuencias de comandos en sitios cruzados (XSS) en Symantec SecurityExpressions Audit y Compliance Server v4.1.1, v4.1 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores que desencadenan un mensaje de error en una respuesta, relacionada con una \"incidencia de inyección HTML\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:securityexpressions_audit_and_compliance_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.1",
            "matchCriteriaId" : "0D4E75BA-D9C7-4568-A978-82A304A4BDA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:securityexpressions_audit_and_compliance_server:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5B8408-80B7-4EAC-8439-EB35D7435CB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/36972",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/58650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36571",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091006_00",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2849",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/58650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091006_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-15T10:30:01.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en libcsa.a (también conocido como biblioteca del demonio calendario (calendar daemon library)) en IBM AIX v5.x hasta v5.3.10 y v6.x hasta v6.1.3, y VIOS v2.1 y versiones anteriores, permite a atacantes remotos ejecutar código arbitrario a través de una cadena XDR larga en el primer argumento al procedimiento 21 de rpc.cmsd."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "A99FBC6A-75A0-433F-BD5A-ECBFDF1D9BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:vios:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2AB87CE-4A33-4C35-8A5B-FC2696712550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:vios:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "732619AA-7504-4B02-9878-D23D2CD4AEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:vios:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10D42BF-B7FB-4977-B4C2-3FC6B87BBCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:vios:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07D7B5D5-9C6C-4EFD-8433-6A134B824EC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D084700A-713E-48C9-8ED9-A55024552B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB23261-D5A9-4C49-B08E-97A63ED6F84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54254625-FC83-4617-8161-CA1FB3092753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E38D56-80BA-460C-A296-ED7F506E4364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A7DBFF-B11B-47EC-9E52-C12B156739D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B380F93D-5B13-49D0-B130-D45C2849A135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C8004D-639C-47BC-BE3E-CF5F06C1679C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD01F19-4B30-4147-AC48-7F5C64EE80CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104E5C14-6D87-494B-8D60-0443ADDCD31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "0BBBA4A5-D191-41D0-886C-C428F4F6252C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE57C2-E728-4016-9774-28FB4B0509AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE79D7E9-DF50-42FD-A255-FF2A29131946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B11497-5622-4759-906A-A93A3E815584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F9CD013-D904-45DF-AD43-493A22D5744B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "307B47F5-D903-4763-A353-2538AFD6C9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16950BB-11BC-4A40-BB3B-841807BB2546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435340B0-AD02-4174-BC7F-6A7C222A7F6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3_ml03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AEF9658-0479-43E5-99A2-620ED3E018E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFE1A11-6750-4275-B5F7-CFFCD5308D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD518B94-9CD7-4C45-8766-578CF427B4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF417123-CCB6-48AF-A21B-1974173D516B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362CFB2F-817A-4E55-A315-86B6243E3F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53544921-1C1A-4382-99D7-0F3011BA76DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15FF1838-81E0-4AFE-8DEE-505CC7692CE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/cmsd_advisory.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=825",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36978",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ61628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ61717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ62123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ62237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ62569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ62570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ62571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ62572",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ62672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/58726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36615",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2846",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.immunityinc.com/downloads/immpartners/aixcmsd10092009.tar.gz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/cmsd_advisory.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/36978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ61628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ61717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ62123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ62237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ62569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ62570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ62571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ62572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ibm.com/support/docview.wss?uid=isg1IZ62672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/58726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.immunityinc.com/downloads/immpartners/aixcmsd10092009.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Achievo before 1.4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the scheduler title in the scheduler module, and the (2) atksearch[contractnumber], (3) atksearch_AE_customer[customer], (4) atksearchmode[contracttype], and possibly (5) atksearch[contractname] parameters to the Organization Contracts administration page, reachable through dispatch.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Achievo anterior a v1.4.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de (1) el título programador en el módulo planificador, y los parámetros (2) atksearch[contractnumber], (3) atksearch_AE_customer[customer], (4) atksearchmode[contracttype], y posiblemente (5) atksearch[contractname] en la pagina de administración Organization Contracts, accesible a través de dispatch.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.4",
            "matchCriteriaId" : "AF54DB83-0DA5-41B7-89C0-AED8BFB98412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E5D3DE-9D27-47B8-AEBE-0A0100389D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819F0D23-FA81-4558-9F33-B48749269FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3EB2D06-61A0-4000-8C04-FAA86C1F6CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAF7860-994A-4566-926D-5194FC970F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC2E5B0-F4F0-4DFE-A4F6-3F3429B0AC48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.8.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48115CA-3564-4F90-8085-5DA848A81B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.8.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0000135-28EF-4E6E-9E64-85A672B420F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF133D4-427D-46DD-95F5-88E3AC9EEB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93DC3C06-2069-436B-BB29-5EAA412FF165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFF94E2-9071-408A-AAEA-6ABDCDD1CDDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6519E24E-D08B-4176-A21D-6231567CF149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0F696B-60E7-4560-A03D-627993F77279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5639EDD0-DA0B-419E-9DDE-746C1B2AF8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDAF1F0-7498-4F64-B0E4-9542DA7BAEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37FD450-1AF0-4DBF-BECB-73F584F49BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "356CC90D-9078-4943-B97C-4BEA3CBF1EF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3DFF52-2035-43D3-935D-EE6A122A59BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BF2551-8009-40BB-9541-3885C8D93B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D5AEF1-38CE-4B89-A15A-89D9BF3BEA55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "804AC3CE-270F-47EC-B501-75B296A99424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "59B2745F-D0AA-426B-AA95-C2F0D2AA1774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "00D07959-FE90-4907-9BAE-7C72DFD0D3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8633CE2A-7814-4963-BB65-B4499BBA5186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B82CEEC2-19AF-4175-A0E4-0F97F875B192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9C0B0D-5E4A-45BD-9150-90FC615357EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B835A00C-FFEA-4A88-ABD3-1C17A2FDC96F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCA1AFB-11FC-4484-937C-0160C10B21F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF4DC9F-E62B-470F-AD63-818554544769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951EC99D-4FFB-4388-AAF0-84A60A67AC3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D901628D-D446-45EE-B131-EAA04D48A352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119EB712-D1E9-4AFC-A9C2-D33E1FE10F38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37035",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.achievo.org/download/releasenotes/1_4_0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.bonsai-sec.com/blog/index.php/cross-site-scripting-payloads/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bonsai-sec.com/research/vulnerabilities/achievo-multiple-xss-0101.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36661",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.achievo.org/download/releasenotes/1_4_0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.bonsai-sec.com/blog/index.php/cross-site-scripting-payloads/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bonsai-sec.com/research/vulnerabilities/achievo-multiple-xss-0101.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute arbitrary SQL commands via the userid parameter (aka user_id variable) to dispatch.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la función de get_employee en classweekreport.inc en Achievo anterior a v1.4.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro userid (alias variable user_id) en dispatch.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.4",
            "matchCriteriaId" : "AF54DB83-0DA5-41B7-89C0-AED8BFB98412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E5D3DE-9D27-47B8-AEBE-0A0100389D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819F0D23-FA81-4558-9F33-B48749269FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3EB2D06-61A0-4000-8C04-FAA86C1F6CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAF7860-994A-4566-926D-5194FC970F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC2E5B0-F4F0-4DFE-A4F6-3F3429B0AC48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.8.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48115CA-3564-4F90-8085-5DA848A81B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.8.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0000135-28EF-4E6E-9E64-85A672B420F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF133D4-427D-46DD-95F5-88E3AC9EEB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93DC3C06-2069-436B-BB29-5EAA412FF165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFF94E2-9071-408A-AAEA-6ABDCDD1CDDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6519E24E-D08B-4176-A21D-6231567CF149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0F696B-60E7-4560-A03D-627993F77279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5639EDD0-DA0B-419E-9DDE-746C1B2AF8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDAF1F0-7498-4F64-B0E4-9542DA7BAEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37FD450-1AF0-4DBF-BECB-73F584F49BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "356CC90D-9078-4943-B97C-4BEA3CBF1EF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3DFF52-2035-43D3-935D-EE6A122A59BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BF2551-8009-40BB-9541-3885C8D93B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D5AEF1-38CE-4B89-A15A-89D9BF3BEA55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "804AC3CE-270F-47EC-B501-75B296A99424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "59B2745F-D0AA-426B-AA95-C2F0D2AA1774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "00D07959-FE90-4907-9BAE-7C72DFD0D3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8633CE2A-7814-4963-BB65-B4499BBA5186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B82CEEC2-19AF-4175-A0E4-0F97F875B192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9C0B0D-5E4A-45BD-9150-90FC615357EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B835A00C-FFEA-4A88-ABD3-1C17A2FDC96F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCA1AFB-11FC-4484-937C-0160C10B21F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF4DC9F-E62B-470F-AD63-818554544769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951EC99D-4FFB-4388-AAF0-84A60A67AC3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D901628D-D446-45EE-B131-EAA04D48A352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119EB712-D1E9-4AFC-A9C2-D33E1FE10F38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37035",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.achievo.org/download/releasenotes/1_4_0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.bonsai-sec.com/research/vulnerabilities/achievo-sql-injection-0102.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507131/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36660",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.achievo.org/download/releasenotes/1_4_0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.bonsai-sec.com/research/vulnerabilities/achievo-sql-injection-0102.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507131/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2874",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2009-10-16T16:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4) allows remote attackers to cause a denial of service (process crash) via a large number of TCP connections to ports 16200 and 22794, aka Bug ID CSCsy17662."
      }, {
        "lang" : "es",
        "value" : "El proceso TimesTenD en Cisco Unified Presence v1.x, v6.x anterior a v6.0(6), y v7.x anterior a v7.0(4), permite a atacantes remotos causar una denegación de servicio (cuelgue de proceso) a través de un gran número de conexiones TCP a los puertos 16200 y 22794, también conocido como Bug ID CSCsy17662."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_presence_server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F897DA4-E313-45C8-A4FB-52404D6541BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_presence_server:1.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "22B299D9-A18B-41D9-B976-57AFDAA751DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_presence_server:1.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA3BA5D-2CEB-4AAC-8CB4-4A2CDC574076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_presence_server:1.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9465A4F0-44C0-4A43-962E-0CCEADA05533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_presence_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9CEBA2-160F-4303-9C1D-C7BD7E758CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_presence_server:6.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A704B14E-EC47-47E5-8AA1-35E0138B6A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_presence_server:6.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F95246B-7822-4077-BC9C-3E1C0B02C139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_presence_server:6.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D01D8A-9F92-4900-941C-0B481D277D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_presence_server:6.0\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72DE400-8ACA-4D01-8BBE-7F13959F4DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_presence_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1706BFD4-817A-4BA2-8B3B-60CDF1F54A16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_presence_server:7.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9C5872-317C-4A68-8E99-DEB224BAE607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_presence_server:7.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F4FC53-3627-4826-8CFC-BEEBCB8CEC87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37039",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023018",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080afc930.shtml",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36675",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2915",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53772",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "http://secunia.com/advisories/37039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080afc930.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La extensión del núcleo vmx86 en VMware Fusion v2.0.6 anterior a build 196839 no utiliza los permisos de archivo correctos, lo cual permite a los usuarios del sistema operativo anfitrion obtener privilegios en el sistema operativo anfitrión a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.5",
            "matchCriteriaId" : "A8A8DAA7-1031-4F9A-8E53-9F675EF193A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "942B4ED3-A68E-4106-A98B-FA7CD3505140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD1338C-8FC1-40A1-BAE8-B11F4354A0CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC862199-8AA7-4E5E-BA2B-DF5FC9A056BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BDA2CE1-E26E-4347-BD60-2764A19F5E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B503A45-D9F3-414D-9BFA-C58B1E81A39E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E18541B-36B6-40A7-9749-FA47A10379C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55EBD95F-3DF7-49F3-A7AA-47085E0B7C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DA47C9-3D1A-49A7-8976-AE05D6730673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692CC131-5C6C-4AD6-B85C-07DF21168BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617EFBFF-D047-4A0B-ACB6-83B27710F6F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000066.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36928",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2811",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000066.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en la extensión del núcleo vmx86 en VMware Fusion v2.0.6 anterior a build 196839 permite a los usuarios del sistema operativo anfitrión causar una denegación de servicio al sistema operativo anfitrión a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.5",
            "matchCriteriaId" : "A8A8DAA7-1031-4F9A-8E53-9F675EF193A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "942B4ED3-A68E-4106-A98B-FA7CD3505140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD1338C-8FC1-40A1-BAE8-B11F4354A0CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC862199-8AA7-4E5E-BA2B-DF5FC9A056BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BDA2CE1-E26E-4347-BD60-2764A19F5E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B503A45-D9F3-414D-9BFA-C58B1E81A39E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E18541B-36B6-40A7-9749-FA47A10379C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55EBD95F-3DF7-49F3-A7AA-47085E0B7C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DA47C9-3D1A-49A7-8976-AE05D6730673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692CC131-5C6C-4AD6-B85C-07DF21168BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617EFBFF-D047-4A0B-ACB6-83B27710F6F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000066.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36928",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2811",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000066.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1022981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "evaluatorSolution" : "Per: http://lists.vmware.com/pipermail/security-announce/2009/000066.html \r\n\r\nSolution\r\n\r\n   Please review the patch/release notes for your product and version\r\n   and verify the md5sum and/or the sha1sum of your downloaded file.\r\n\r\n   VMware Fusion 2.0.6 (for Intel-based Macs): Download including\r\n   VMware Fusion and a 12 month complimentary subscription to McAfee\r\n   VirusScan Plus 2009\r\n\r\n   md5sum: d35490aa8caa92e21339c95c77314b2f\r\n   sha1sum: 9c41985d754ac718032a47af8a3f98ea28fddb26\r\n\r\n   VMware Fusion 2.0.6 (for Intel-based Macs): Download including only\r\n   VMware Fusion software\r\n\r\n   md5sum: 2e8d39defdffed224c4bab4218cc6659\r\n   sha1sum: 453d54a2f37b257a0aad17c95843305250c7b6ef\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:00.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Ejecución de secuencias de comandos en sitios cruzados (XSS) en phpMyAdmin v2.11.x anterior a v2.11.9.6 y v3.x anterior a v3.2.2.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un nombre de tabla MySQL manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98FF47C-8BA8-40E1-98F5-743CAD5DC52A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "346DF9C7-40BE-44FD-BB5A-23F60616E97F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B00F4D78-34C3-4934-8AFA-B7283388B246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962B49A9-380D-4B19-929B-50793EF621C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC66C23-0133-4A39-B8C0-BCFF6F1E4D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B9F52BC-AC6A-41BB-8276-6176FA068929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA3305E-CBC2-4469-923F-29EDA0402CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC82C85-C9CF-424D-A07A-E841F7AC1904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0549FC5-B8E8-455D-867B-BAF321DE7004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DA6D40-2D3A-4490-B4E6-1367C585ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E351CA2-71DB-4025-8477-24DFE5349195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34AB221E-3DFA-43E4-9DBA-5565F81C0120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB774D1-8B5D-4118-8A5B-D7D14D7DE162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C10F7C9-FAAA-4D05-8CB2-F5CB397F8410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54669C6E-C13B-4602-9CC1-53B24CB897FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "40CE5E7C-A965-492F-AE85-535C3E5F1B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8AAB78-8460-43BB-9326-0395F7496EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2909BBB8-AB67-45DC-BAF0-015CBF97AFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "52F3DA64-2099-4A4F-9F38-F28255F47BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3329598B-BEA5-4119-A558-DAA432239A84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E1F897-861F-4E10-8E05-3C0DD60C7979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8CC1C1E-2B8C-4E59-B5ED-ED2957B46743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA5BCF7D-43FC-459C-8564-F0DCDC301FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA6A75C9-C695-45DF-9526-8DEA506FB21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03246EF4-F805-4C1C-9E6C-D85AFBD2D168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE432385-9FC2-4EB3-9770-4CA9A2979019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFCA67E-49E1-41FF-8B40-0209FF7893FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF4BA83-50C0-4D90-9755-CC99A0FF987E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE588389-7B4F-4949-BB7A-233C6BE31859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E709A6B-B580-414B-8CEE-8FF99F8409C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9AA2E6-CF57-40A1-9A9C-B704D8B009F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE75CBB-4EC2-4B97-9E86-28BB05DEA30C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A26E7D37-FA99-42EA-8E19-ED2343E8E70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A982E152-5A20-4A3A-9A98-6CF9EEF9141A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA11353-1DD1-4593-84E8-1D3CBB2C2166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0C19FB-60DF-440F-9A32-B9C62EBA9836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9716FC40-F759-4D24-9604-7A2DB32A8F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399A4EF5-FBDC-4856-89A5-821011E5E7E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED38B88-A4D2-40B4-A5A8-A9FD1BCAAF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "613C697A-7CFF-4529-BD15-0ED4B753527A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5899F407-1D31-452A-954C-966895ED7D48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFDEFBE-E512-4B0C-BBEC-8FCA29228DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56908EFC-CCA8-4B22-8F8F-FB23C934D6E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "82DFC89B-F989-41C5-87E2-11A259E7F5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21917E9-A820-4A5F-B38B-E3E0F79A380C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400E2D41-CB1F-4E5C-B08D-35294F8D1402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0-beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFAD5F7D-AA93-46B7-996B-B0761143B334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBEBBAAF-BAA7-40E9-A0FF-F8618A3ED2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4AFEEBA-01BA-46D6-86A3-B1B5A8F1B5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F72014B-B168-4FFA-ADDC-86CE84D19681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFFE8553-D8FF-4BA3-9325-A3C366FDFBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "72CD1784-3F48-49B5-A154-61C1F7EC3F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAAA1171-F570-4E4D-B667-2D4C8F8ECDD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:1:*:*:*:*:*:*",
            "matchCriteriaId" : "F0BD3CDF-31C5-4B8A-8314-A5F0F9D28AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "278B4EF3-4331-4334-AB55-EC05C069F48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4943CF80-91E5-42CD-BD51-6CAFC83EA5A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0284F72-2126-4BE8-90CA-82D2E4B3E96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24AEFB1-7070-4F9B-BCDA-60F33C17D536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D735F4-165E-45C9-BF3B-9B618A8E3720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E60F6F-C855-45BF-8840-398FA62626EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F4EDCE1E-436A-4369-A734-7D620F5D89B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98051D18-43E3-47D6-A8D4-AD9F0C8B0A7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "78BC489B-E02E-4C6E-9EA1-EDC926EBA5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0-beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD4EF8B-EA44-46F2-9C28-1D9D1D8BA2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "426ED65D-8B72-4106-A75E-1CB74106DD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDCB1657-8C8F-44FE-8C1D-BF191DE70657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F44A77-1169-4A0D-8864-EB7AF56324AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE0CFF97-8F8B-405D-BA59-B88C1C07A4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3C0B46-3964-4A22-9AD4-4F4C8B4B4790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=288899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freshmeat.net/projects/phpmyadmin/releases/306667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freshmeat.net/projects/phpmyadmin/releases/306669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125553728512853&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125561979001460&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37016",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2899",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=528769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=288899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://freshmeat.net/projects/phpmyadmin/releases/306667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://freshmeat.net/projects/phpmyadmin/releases/306669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125553728512853&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125561979001460&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=528769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:00.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified interface parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la funcionalidad generador de esquema PDF en phpMyAdmin v2.11.x anterior a v2.11.9.6 y v3.x anterior a v3.2.2.1 permite a atacantes remotos ejecutar comandos SQL a su elección a través de parámetros de la interfaz no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98FF47C-8BA8-40E1-98F5-743CAD5DC52A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "346DF9C7-40BE-44FD-BB5A-23F60616E97F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B00F4D78-34C3-4934-8AFA-B7283388B246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962B49A9-380D-4B19-929B-50793EF621C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC66C23-0133-4A39-B8C0-BCFF6F1E4D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B9F52BC-AC6A-41BB-8276-6176FA068929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA3305E-CBC2-4469-923F-29EDA0402CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC82C85-C9CF-424D-A07A-E841F7AC1904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0549FC5-B8E8-455D-867B-BAF321DE7004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DA6D40-2D3A-4490-B4E6-1367C585ED9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E351CA2-71DB-4025-8477-24DFE5349195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34AB221E-3DFA-43E4-9DBA-5565F81C0120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB774D1-8B5D-4118-8A5B-D7D14D7DE162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C10F7C9-FAAA-4D05-8CB2-F5CB397F8410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54669C6E-C13B-4602-9CC1-53B24CB897FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "40CE5E7C-A965-492F-AE85-535C3E5F1B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8AAB78-8460-43BB-9326-0395F7496EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2909BBB8-AB67-45DC-BAF0-015CBF97AFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "52F3DA64-2099-4A4F-9F38-F28255F47BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3329598B-BEA5-4119-A558-DAA432239A84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E1F897-861F-4E10-8E05-3C0DD60C7979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8CC1C1E-2B8C-4E59-B5ED-ED2957B46743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA5BCF7D-43FC-459C-8564-F0DCDC301FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA6A75C9-C695-45DF-9526-8DEA506FB21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03246EF4-F805-4C1C-9E6C-D85AFBD2D168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE432385-9FC2-4EB3-9770-4CA9A2979019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFCA67E-49E1-41FF-8B40-0209FF7893FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF4BA83-50C0-4D90-9755-CC99A0FF987E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE588389-7B4F-4949-BB7A-233C6BE31859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E709A6B-B580-414B-8CEE-8FF99F8409C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9AA2E6-CF57-40A1-9A9C-B704D8B009F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE75CBB-4EC2-4B97-9E86-28BB05DEA30C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A26E7D37-FA99-42EA-8E19-ED2343E8E70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A982E152-5A20-4A3A-9A98-6CF9EEF9141A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA11353-1DD1-4593-84E8-1D3CBB2C2166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0C19FB-60DF-440F-9A32-B9C62EBA9836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9716FC40-F759-4D24-9604-7A2DB32A8F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399A4EF5-FBDC-4856-89A5-821011E5E7E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED38B88-A4D2-40B4-A5A8-A9FD1BCAAF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "613C697A-7CFF-4529-BD15-0ED4B753527A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5899F407-1D31-452A-954C-966895ED7D48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFDEFBE-E512-4B0C-BBEC-8FCA29228DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56908EFC-CCA8-4B22-8F8F-FB23C934D6E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "82DFC89B-F989-41C5-87E2-11A259E7F5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21917E9-A820-4A5F-B38B-E3E0F79A380C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "400E2D41-CB1F-4E5C-B08D-35294F8D1402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0-beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFAD5F7D-AA93-46B7-996B-B0761143B334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBEBBAAF-BAA7-40E9-A0FF-F8618A3ED2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4AFEEBA-01BA-46D6-86A3-B1B5A8F1B5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F72014B-B168-4FFA-ADDC-86CE84D19681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFFE8553-D8FF-4BA3-9325-A3C366FDFBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "72CD1784-3F48-49B5-A154-61C1F7EC3F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAAA1171-F570-4E4D-B667-2D4C8F8ECDD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:1:*:*:*:*:*:*",
            "matchCriteriaId" : "F0BD3CDF-31C5-4B8A-8314-A5F0F9D28AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "278B4EF3-4331-4334-AB55-EC05C069F48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4943CF80-91E5-42CD-BD51-6CAFC83EA5A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0284F72-2126-4BE8-90CA-82D2E4B3E96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24AEFB1-7070-4F9B-BCDA-60F33C17D536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D735F4-165E-45C9-BF3B-9B618A8E3720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E60F6F-C855-45BF-8840-398FA62626EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F4EDCE1E-436A-4369-A734-7D620F5D89B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98051D18-43E3-47D6-A8D4-AD9F0C8B0A7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "78BC489B-E02E-4C6E-9EA1-EDC926EBA5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0-beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD4EF8B-EA44-46F2-9C28-1D9D1D8BA2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "426ED65D-8B72-4106-A75E-1CB74106DD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDCB1657-8C8F-44FE-8C1D-BF191DE70657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F44A77-1169-4A0D-8864-EB7AF56324AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE0CFF97-8F8B-405D-BA59-B88C1C07A4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3C0B46-3964-4A22-9AD4-4F4C8B4B4790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=288899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freshmeat.net/projects/phpmyadmin/releases/306667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freshmeat.net/projects/phpmyadmin/releases/306669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125553728512853&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125561979001460&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37016",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2899",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=528769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=288899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://freshmeat.net/projects/phpmyadmin/releases/306667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://freshmeat.net/projects/phpmyadmin/releases/306669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125553728512853&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125561979001460&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=528769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:00.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the config_atkroot parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de subida de archivos sin restricción en debugger.php en Achievo anterior a v1.4.0 permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro config_atkroot."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.4",
            "matchCriteriaId" : "AF54DB83-0DA5-41B7-89C0-AED8BFB98412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E5D3DE-9D27-47B8-AEBE-0A0100389D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819F0D23-FA81-4558-9F33-B48749269FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3EB2D06-61A0-4000-8C04-FAA86C1F6CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAF7860-994A-4566-926D-5194FC970F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC2E5B0-F4F0-4DFE-A4F6-3F3429B0AC48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC5B27A-4A90-4F8D-A008-21F26907A1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.8.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB73C9C-88A3-4102-9F25-C8EDF8D44B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF133D4-427D-46DD-95F5-88E3AC9EEB60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93DC3C06-2069-436B-BB29-5EAA412FF165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFF94E2-9071-408A-AAEA-6ABDCDD1CDDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6519E24E-D08B-4176-A21D-6231567CF149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0F696B-60E7-4560-A03D-627993F77279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5639EDD0-DA0B-419E-9DDE-746C1B2AF8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDAF1F0-7498-4F64-B0E4-9542DA7BAEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37FD450-1AF0-4DBF-BECB-73F584F49BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "356CC90D-9078-4943-B97C-4BEA3CBF1EF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3DFF52-2035-43D3-935D-EE6A122A59BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BF2551-8009-40BB-9541-3885C8D93B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D5AEF1-38CE-4B89-A15A-89D9BF3BEA55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "804AC3CE-270F-47EC-B501-75B296A99424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "59B2745F-D0AA-426B-AA95-C2F0D2AA1774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "00D07959-FE90-4907-9BAE-7C72DFD0D3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8633CE2A-7814-4963-BB65-B4499BBA5186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B82CEEC2-19AF-4175-A0E4-0F97F875B192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9C0B0D-5E4A-45BD-9150-90FC615357EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B835A00C-FFEA-4A88-ABD3-1C17A2FDC96F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCA1AFB-11FC-4484-937C-0160C10B21F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF4DC9F-E62B-470F-AD63-818554544769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951EC99D-4FFB-4388-AAF0-84A60A67AC3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D901628D-D446-45EE-B131-EAA04D48A352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119EB712-D1E9-4AFC-A9C2-D33E1FE10F38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0909-exploits/achievo134-rfi.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1023017",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.achievo.org/download/releasenotes/1_4_0",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://packetstormsecurity.org/0909-exploits/achievo134-rfi.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1023017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.achievo.org/download/releasenotes/1_4_0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:00.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the ZFS filesystem in Sun Solaris 10, and OpenSolaris snv_100 through snv_117, allows local users to bypass intended limitations of the file_chown_self privilege via certain uses of the chown system call."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el sistema de archivos ZFS en Sun Solaris 10 y OpenSolaris snv_100 hasta snv_117, permite a usuarios locales eludir las limitaciones de permisos de file_chown_self a través de determinados usos de la llamada al sistema chown."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "78B80C92-7EB5-4343-B830-32E8C011E572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "46E4ED9C-F013-48D2-8642-E5BA7599A512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A1E8108D-3CE7-4041-9027-1CA7473389EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B3BBCE23-9F15-45CD-859F-77ED540B51F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "053A0DA6-483C-49BB-BC7A-E624DB2C269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "447212A4-FACD-475E-A62B-60FE6504F63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB694DC0-407A-4555-8B72-DAF3C169DCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "535FF689-13A2-40C6-8706-7782038FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "843246D3-C2DA-454D-916A-AC8905E5134E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "244B7FE4-C485-4993-9810-3433C83A120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37010",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141444-09-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-265908-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2917",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141444-09-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-265908-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "evaluatorComment" : "Per:  http://sunsolve.sun.com/search/document.do?assetkey=1-66-265908-1\r\n\r\n\"Notes:\r\n\r\n1. Solaris 8 and 9 are not impacted by this issue.\r\n\r\n2. OpenSolaris distributions may include additional bug fixes above and beyond the build from which it was derived. The base build can be derived as follows:\r\n\r\n$ uname -v\r\nsnv_86\r\n\r\n3. This issue only affects systems with ZFS file systems where local users have been granted the {PRIV_FILE_CHOWN_SELF} (see chown(2)) privilege which allows them to modify ownership of files where the ownership matches the user's current effective user ID. If the default operating system configuration option '{_POSIX_CHOWN_RESTRICTED}' has been disabled then the 'file_chown_self' privilege is asserted in the inheritable set of all processes unless overridden by policy.conf(4) or user_attr(4).\"",
      "evaluatorImpact" : "Per:  http://sunsolve.sun.com/search/document.do?assetkey=1-66-265908-1\r\n\r\n1. Impact\r\n\r\nA security vulnerability in the ZFS file system in OpenSolaris and Solaris 10 systems with patches 137137-09 (SPARC) or 137138-09 (x86) installed may allow a local unprivileged user with the 'file_chown_self' privilege to take ownership of files belonging to another user."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware ACE 2.6 before 2.6.1 build 227600 and 2.5.x before 2.5.4 build 246459, and VMware Server 2.x allows remote attackers to cause a denial of service (process crash) via a \\x25\\xFF sequence in the USER and PASS commands, related to a \"format string DoS\" issue. NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "VMware Authentication Daemon versión 1.0 en el archivo vmware-authd.exe en el Servicio de Autorización de VMware en VMware Workstation versiones 7.0 anteriores a 7.0.1 build 227600 y versiones 6.5.x anteriores a 6.5.4 build 246459, VMware Player versiones 3.0 anteriores a 3.0.1 build 227600 y versiones 2.5.x anteriores a  2.5.4 build 246459, VMware ACE versiones 2.6 anteriores a 2.6.1 build 227600 y versiones 2.5.x anteriores a 2.5.4 build 246459, y VMware Server versiones 2.x, permite a los atacantes remotos causar una denegación de servicio (bloqueo del proceso) por medio de una secuencia de \\x25\\xFF en los comandos USER y PASS, relacionada con un problema de \"format string DoS\". NOTA: algunos de estos datos fueron obtenidos de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71537AE-346D-4BA9-90E7-EA0AB0CD0886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5674C3DD-F510-4701-ACA8-437576307528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62960B2-91AE-4DD7-8085-9BA6BCB84473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCA2A03-0A31-4290-987A-BE715758BA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB84B42-8C68-4B65-93F9-287B699B7540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87681DB-CBD8-46A6-BD9A-FB621B627B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3997440A-B731-4F26-A90B-BB14A8F93E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE944A70-CB9C-4712-9802-509531396A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "252D2C0B-B89A-4C89-8D6B-6A8E58FCD8DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DA49FA-6657-45B5-BF69-D3A03BA62A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "949C3917-4D7E-4B51-A872-BFBECB4D2CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "656039E8-8082-4208-B046-518D95769B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F747AC1-E163-41A4-BAC7-FDF46F4057D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A115959-9CDA-45ED-9002-BA1A31074E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A2543D5-AE09-4E90-B27E-95075BE4ACBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CFDD84-A482-42C2-B43F-839F4D7F1130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E565F23-AEEE-41A4-80EC-01961AD5560E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8F3BFF-676B-4E2C-98BA-DCA71E49060F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E658DA-56E8-49F0-B486-4EF622B63627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541D77A2-99C5-4CDB-877F-7E83E1E3369E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B53C0A-5A0C-4168-8AD3-F3E957AE8919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3684F0D0-B8BE-442B-AA27-0A485E6BFFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB33DBC9-3B63-457E-A353-B9E7378211AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34F436D4-B7B7-43CB-A2BD-C5E791F7E3C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000090.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36988",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/39215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201209-25.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1022997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.shinnai.net/exploits/abFwcLOuFqmD20yqhYpQ.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.shinnai.net/index.php?mod=02_Forum&group=02_Bugs_and_Exploits&argument=01_Remote&topic=1254924405.ff.php",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.shinnai.net/xplits/TXT_JtYUv6C6j5b6Bw6iIkF4.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2010-0007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000090.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201209-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1022997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.shinnai.net/exploits/abFwcLOuFqmD20yqhYpQ.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.shinnai.net/index.php?mod=02_Forum&group=02_Bugs_and_Exploits&argument=01_Remote&topic=1254924405.ff.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.shinnai.net/xplits/TXT_JtYUv6C6j5b6Bw6iIkF4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2010-0007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:00.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a (1) description or (2) keyword META tag.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de buffer basado en pila en  Meta Content Optimizer in Konae Technologies Alleycode HTML Editor v2.21 permite a atacantes remotos asistidos por usuarios ejecutar código arbitrario mediante un valor largo en un META tag (1) description o (2) keyword. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:konae:alleycode_html_editor:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E300A0-0BFB-4E8A-AB09-3B8018BEB107"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36940",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:00.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a TITLE tag."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Meta Content Optimizer en Konae Technologies Alleycode HTML Editor v2.21 permite a atacantes remotos asistidos por usuarios ejecutar código arbitrario mediante un valor largo en una etiqueta TITLE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:konae:alleycode_html_editor:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E300A0-0BFB-4E8A-AB09-3B8018BEB107"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0910-exploits/alleycode-overflow.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36940",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506987/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/58649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0910-exploits/alleycode-overflow.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/506987/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:00.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username (dbadmin) and password (sq!us3r) for an SSH tunnel, which allows remote attackers to gain privileges via port 8022."
      }, {
        "lang" : "es",
        "value" : "RioRey RIOS v4.6.6 y v4.7.0 utiliza un nombre de usuario (dbadmin) y contraseña (sq!us3r) indocumentados, no modificables para un túnel SSH, que permite a atacantes remotos obtener privilegios a través del puerto 8022."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:riorey:rios:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5AB04E9-061E-446D-8B36-8ABEC77C5F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:riorey:rios:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F257DDA1-109B-4218-9205-381173A9D117"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/58858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0910-exploits/riorey-passwd.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36971",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/58858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0910-exploits/riorey-passwd.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/36971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:01.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de buffer basado en pila en la función h_handlepeer en http.cpp en httpdx v1.4, y posiblemente v1.4.3, permite a atacantes remotos causar una denegación de servicio (cuelgue) y posiblemente ejecutar código arbitrario a través de una solicitud HTTP GET larga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper:httpdx:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D490B4E8-E863-4856-8031-3E08FBED4E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper:httpdx:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2C8BF8-73D0-4F02-B9DB-6211FA68F72D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=125544914512291&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/58714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36991",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.pank4j.com/exploits/httpdxb0f.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507042/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507073/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2874",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125544914512291&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/58714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.pank4j.com/exploits/httpdxb0f.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507042/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507073/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:01.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the (1) user_id parameter to feedback.php; and the item_id parameter to (2) view_full_size.php, (3) classifide_ad.php, and (4) crosspromoteitems.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Ebay Clone 2009 permite a atacantes remotos ejecutar comandos SQL a través de (1) el parámetro user_id a feedback.php; y el parámetro item_id a (2) view_full_size.php, (3) classifide_ad.php, y (4) crosspromoteitems.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ebayclonescript:ebay_clone:2009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB71071D-3A42-4054-BD4F-F45527927962"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35713",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:01.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in fichero.php in MorcegoCMS 1.7.6 and earlier allows remote attackers to execute arbitrary SQL commands via the query string."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en fichero.php en MorcegoCMS v1.7.6 y anteriores permite a atacantes remotos ejecutar comandos SQL a través de la cadena de consulta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:morcego:morcegocms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.6",
            "matchCriteriaId" : "01F6BCC5-5373-4001-AFFC-0F7A677045F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:morcego:morcegocms:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2D6037-7007-42BC-A7E9-2446B5CFC267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:morcego:morcegocms:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "688EB4F8-9D53-4CF7-95C8-690EF0D11E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:morcego:morcegocms:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D49B8EB-B07F-4614-AAE9-78CD1765B371"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35778",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:01.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin_login.php in MCshoutbox 1.1 allows remote attackers to inject arbitrary web script or HTML via the loginerror parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Ejecución de secuencias de comandos en sitios cruzados (XSS) \r\nen admin_login.php en MCshoutbox v1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro loginerror."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maniacomputer:mcshoutbox:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600FE77F-F19F-48D4-8915-1A2C1004643F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35885",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1961",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:01.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in scr_login.php in MCshoutbox 1.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en scr_login.php en MCshoutbox v1.1, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a través de los parámetros (1)username y (2)password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maniacomputer:mcshoutbox:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600FE77F-F19F-48D4-8915-1A2C1004643F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35885",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1961",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:01.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in admin.php in MCshoutbox 1.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in smilies/."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de subida de archivos sin restricción en admin.php en MCshoutbox v1.1 permite a usuarios remotos autenticados ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable, luego accediendo a él a través de una solicitud directa al archivo en smilies/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maniacomputer:mcshoutbox:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600FE77F-F19F-48D4-8915-1A2C1004643F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35885",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:01.140",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in LucVil PatPlayer 3.9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URI in a playlist (.m3u) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en LucVil PatPlayer v3.9 permite a atacantes remotos causar una denegación de servicio (cuelgue) o ejecutar código arbitrario a través de una URI larga en un archivo de lista de reproducción (.m3u)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucvil:patplayer:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B4131-B7F1-4231-9237-6DD67E22C9F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35756",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1860",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:01.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/authenticate.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to execute arbitrary SQL commands via the UserName parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/authenticate.asp en Battle Blog v1.25 y v1.30 build 2 permite a atacantes remotos ejecutar comandos SQL a través del parámetro UserName."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davethewebguy:battle_blog:1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF9E1FE-8D5F-46C8-AA4A-49E74B3A0527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davethewebguy:battle_blog:1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D09AD4-B30F-44C0-A2BF-CE7EEA298A41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://full-discl0sure.blogspot.com/2009/07/battle-blog-sqlhtml-injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35864",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/55991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://full-discl0sure.blogspot.com/2009/07/battle-blog-sqlhtml-injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/55991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T16:30:01.187",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in comment.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to inject arbitrary web script or HTML via a comment."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en comment.asp en Battle Blog v1.25 y v1.30 build 2 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un comentario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davethewebguy:battle_blog:1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF9E1FE-8D5F-46C8-AA4A-49E74B3A0527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davethewebguy:battle_blog:1.30:build2:*:*:*:*:*:*",
            "matchCriteriaId" : "B5477288-6C46-42EC-9898-2A2B8FB338F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://full-discl0sure.blogspot.com/2009/07/battle-blog-sqlhtml-injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35864",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://full-discl0sure.blogspot.com/2009/07/battle-blog-sqlhtml-injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-16T17:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service (crash) via a SIP INVITE request with an empty Call-Info header."
      }, {
        "lang" : "es",
        "value" : "ZoIPer v2.22, y posiblemente otras versiones anteriores a v2.24 Library 5324, permite a atacantes remotos causar una denegación de servicio (cuelgue) a través de una  petición SIP INVITE con una cabecera de información de llamada vacío."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoiper:zoiper:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.22",
            "matchCriteriaId" : "224B7F2A-DC8E-4019-972A-2679D4D7592B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoiper:zoiper:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47444D3-5546-4F3C-ABA7-64A869A622C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoiper:zoiper:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD39882-A6BA-40AC-A412-848FDEF75232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoiper:zoiper:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F07097-B1CA-40BA-875A-18E73B14B931"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0910-exploits/zoiper_dos.py.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37015",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0910-exploits/zoiper_dos.py.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T20:00:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll before 1.0.0.7 in UiTV UiPlayer, as used in BaiduX and other products, allows remote attackers to execute arbitrary code via the filename parameter."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función GetUiDllVersion en el control ActiveX en UiCheck.dll anterior a v1.0.0.7 en UiTV UiPlayer, como el usado en BaiduX y otros productos, permite a atacantes remotos ejecutar código de su elección mediante el parámetro \"filename\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uitv:uiplayer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D89449A-F3FE-4D78-B90F-17D2FD2E4FB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baidu:baidux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F458A7-B7A1-418A-821D-B47CAF84E58D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nsfocus.com/en/advisories/0901.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507236/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nsfocus.com/en/advisories/0901.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507236/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T20:00:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 does not initialize certain (1) tcm__pad1 and (2) tcm__pad2 structure members, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La función tc_fill_tclass en net/sched/sch_api.c del subsistema tc en el kernel de Linux v2.4.x anteriores a la v2.4.37.6 y v2.6.x anteriores a la v2.6.31-rc9 no inicializa un determinado miembro de la estructura (1) tcm__pad1 y (2) tcm__pad2, lo que permite a atacantes locales obtener información confidencial de la memoria del kernel a través de vectores de ataque sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-909"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.37.6",
            "matchCriteriaId" : "9E1FDE50-BE6F-44A9-9A66-C8B0EDB10923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.0",
            "versionEndExcluding" : "2.6.31",
            "matchCriteriaId" : "EDDD2288-DF54-44E9-A60B-A7FFDCCC694F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2887290A-1B43-4DB9-A9D0-B0B56CD78E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4049867A-E3B2-4DC1-8966-0477E6A5D582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A2507858-675B-4DA2-A49E-00DB54700CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0A25EA55-3F1C-440C-A383-0BB9556C9508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "B2665356-4EF5-4543-AD15-67FDB851DCCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "26E7609B-B058-496D-ACDD-7F69FBDE89E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "210BF049-8B3C-4ACC-BF8E-2C3551477602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "1837F32C-80D3-4E10-AE5D-E9F5A11A434E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD6917D-FE03-487F-9F2C-A79B5FCFBC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=096ed17f20affc2db0e307658c69b67433992a7a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16ebb5e0b36ceadc8186f71d68b0c4fa4b6e781b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://patchwork.ozlabs.org/patch/32830/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37084",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.31/ChangeLog-2.6.31-rc9",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:198",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/03/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/05/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/06/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/07/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/17/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/17/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1522.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023073",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=520990",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6757",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9409",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1548.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=096ed17f20affc2db0e307658c69b67433992a7a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16ebb5e0b36ceadc8186f71d68b0c4fa4b6e781b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://patchwork.ozlabs.org/patch/32830/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.31/ChangeLog-2.6.31-rc9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/03/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/05/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/06/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/07/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/17/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/17/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1522.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=520990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1548.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue was addressed in Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1522.html , https://rhn.redhat.com/errata/RHSA-2009-1548 and https://rhn.redhat.com/errata/RHSA-2009-1540 respectively.\n\nIt has been rated as having moderate security impact and is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important or critical impact are addressed.\n\nFor further information about Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/\n",
        "lastModified" : "2009-11-04T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3546",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-19T20:00:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "La función _gdGetColors en el archivo gd_gd.c en PHP versión 5.2.11 y versiones 5.3.x anteriores a 5.3.1, y GD Graphics Library versiones 2.x, no comprueba apropiadamente un determinado miembro de la estructura colorTotal, lo que podría permitir a los atacantes remotos conducir ataques de desbordamiento de búfer o de lectura excesiva de búfer por medio de un archivo GD especialmente diseñado, una vulnerabilidad diferente de CVE-2009-3293. NOTA: algunos de estos datos fueron obtenidos de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgd:gd_graphics_library:2.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83DED10C-5B2F-41A8-887F-E53C9498D620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgd:gd_graphics_library:2.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B236A476-9FB9-46A0-859A-86B6B37F6960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgd:gd_graphics_library:2.0.34:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B5C6F71F-A65F-4AEF-B846-BDBF8C1965A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgd:gd_graphics_library:2.0.34:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB25E18F-7078-458C-B517-D7DCC942BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgd:gd_graphics_library:2.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7EEB86-6942-4A27-9C6A-9CEA73192E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgd:gd_graphics_library:2.0.35:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B928D03E-BABF-4FFB-B068-63A763301D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgd:gd_graphics_library:2.0.35:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "345F2194-D009-45A8-8606-F2DAEC328A3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgd:gd_graphics_library:2.0.35:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB324F6-6271-412C-90D3-B91489200C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgd:gd_graphics_library:2.0.35:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0AC18015-92F0-458A-B27D-BA96645A0FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgd:gd_graphics_library:2.0.35:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE1488F-E22A-460E-B7AF-F9EBB56B188D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgd:gd_graphics_library:2.0.36:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "84E950C3-0FA9-4AA2-9FC2-81F30398073A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDFB7E9-8510-430F-BFBC-FD811D60DC78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF4B938-BB14-4C06-BEE9-10CA755C5DEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=oss-security&m=125562113503923&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37069",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37080",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38055",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.php.net/viewvc?view=revision&revision=289557",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:285",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/11/20/5",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36712",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2929",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2930",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11199",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125562113503923&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.php.net/viewvc?view=revision&revision=289557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/11/20/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3612",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-19T20:00:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcm__pad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors.  NOTE: this issue exists because of an incomplete fix for CVE-2005-4881."
      }, {
        "lang" : "es",
        "value" : "La función tcf_fill_node en net/sched/cls_api.c del subsistema netlink en el kernel de Linux v2.6.x hasta la v2.6.32-rc5, y v2.4.37.6 y anteriores, no inicializa un determinado miembro de la estructura tcm__pad2, lo que puede permitir a usuarios locales obtener información confidencial de la memoria del kernel a través de vectores de ataque sin especificar. NOTA: esta vulnerabilidad existe debido a una solución incompleta de CVE-2005-4881."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.37.6",
            "matchCriteriaId" : "93F6511F-D405-456D-B7B4-3F73EABDFA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.0",
            "versionEndExcluding" : "2.6.32",
            "matchCriteriaId" : "0289F2BE-8029-4F64-961F-07D0857861B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.32:-:*:*:*:*:*:*",
            "matchCriteriaId" : "37B2E2B1-3E39-4DBA-817D-08F34D9F6E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.32:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C85D4E0A-14DA-4884-AF6F-A0F54304430F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.32:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8471AA-44D7-4D19-82B6-C4B999C65F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.32:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "218DE1D1-3843-4076-9AE4-70AA0FD99B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.32:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "2677114B-AF05-42EB-BBC8-FA85CD631C21"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "513797E6-FCE6-4E84-9B66-202541F9601E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "1E496249-23A8-42FC-A109-634A54B5600F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "25CBACD3-AFB7-410D-927F-0C1FF477D396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BEE9CB-F0AF-44B1-B454-1AE2F04D7299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB8A616-865B-4E70-BA2E-BE5F0BA7A351"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad61df918c44316940404891d5082c63e79c256a",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://patchwork.ozlabs.org/patch/35412/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37086",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37909",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:329",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/14/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/14/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/15/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/15/3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1670.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=528868",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10395",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7557",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad61df918c44316940404891d5082c63e79c256a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://patchwork.ozlabs.org/patch/35412/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/14/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/14/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/15/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/15/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1670.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=528868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/CVE-2009-3612\n\nThis issue has been rated as having moderate security impact.\n\nIt was addressed in Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1670.html and https://rhn.redhat.com/errata/RHSA-2009-1540.html respectively.\n\nA future kernel update in Red Hat Enterprise Linux 4 will address this flaw.\n\nThis issue is not planned to be fixed in Red Hat Enterprise Linux 3 due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important or critical impact are addressed.\n\nFor further information about the Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/",
        "lastModified" : "2009-12-17T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3613",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-19T20:00:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service (IOMMU space exhaustion and system crash) by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad swiotlb en el controlador r8169 en drivers/net/r8169.c en el núcleo de Linux anterior a v2.6.27.22 permite a atacantes remotos provocar una denegación de servicio (agotamiento de espacio en la Unidad de Gestión de E/S de memoria y parada del sistema) mediante la utilización de una tramas grandes para una gran cantidad de tráfico de red, como se ha demostrado con un desbordamiento ping."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.27.21",
            "matchCriteriaId" : "45F60110-70D6-45AF-A52C-572DFB4EBB5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F9DBB0-8AF7-42CA-95DD-68A344E9D549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD00664-A27C-4514-A2A4-079E8F9B0251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E336C792-B7A1-4318-8050-DE9F03474CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D0159-1A05-4628-9C1C-360DED0F438C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6654B9-42EB-4C2C-8F71-710D50556180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241FF5F5-516B-4F77-ABAF-787DFEFEC1AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D42BA44-C69B-4170-9867-CABF93CA9BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "085259B8-9D41-42B0-B32B-66B8D365F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A12DE15-E192-4B90-ADB7-A886B3746DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6588E7-F4FA-40F5-8945-FC7B6094376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "AE87E13E-ACF7-4F74-8938-729F3B0D694C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D4965A12-1BBA-4494-A5C1-43E0C0F48C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "12D0C03A-7D30-485F-8431-638918FE9658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA311B8-D32E-4853-9B07-58EAF1019D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F0F679-43C8-426E-A97E-C3B207A3331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2DF2BB-F94A-4692-AFDC-47C42F04081B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ED7CE5-3388-4CB9-AF60-A2AF19611327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACBB194-1D24-464A-B79C-44B8127EAD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.kernel.org/show_bug.cgi?id=9468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=97d477a914b146e7e6722ded21afa79886ae8ccd",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a866bbf6aacf95f849810079442a20be118ce905",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125561712529352&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37909",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.22",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1671.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36706",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=529137",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10209",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7377",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1548.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.kernel.org/show_bug.cgi?id=9468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=97d477a914b146e7e6722ded21afa79886ae8ccd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a866bbf6aacf95f849810079442a20be118ce905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125561712529352&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1671.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=529137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1548.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2979",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 do not properly perform XMP-XML entity expansion, which allows remote attackers to cause a denial of service via a crafted document."
      }, {
        "lang" : "es",
        "value" : "Adobe Reader y Acrobat v9.x anteriores a la v9.2, v8.x anteriores a la v8.1.7 y posiblemente v7.x hasta la v7.1.4 no realizan apropiadamente la expansión de entidades XMP-XML, lo que permite a atacantes remotos provacar una denegación de servicio a través de un documento modificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2980",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 permite a atacantes provocar una denegación de servicio o probablemente ejecutar código de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\"Summary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2981",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 no valida adecuadamente la entrada, pudiendo permitir a atacantes mediante vectores no especificados saltar las restricciones implementadas por Trust Manager."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\n\"Summary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2982",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unspecified certificate in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow remote attackers to conduct a \"social engineering attack\" via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Un certificado sin especificar en Adobe Reader y Acrobat v9.x anteriores a la v9.2, v8.x anteriores a la v8.1.7 y posiblemente v7.x hasta la v7.1.4 puede permitir a atacantes remotos llevar a cabo un \"ataque por ingeniería social\" a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macinto"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2983",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Adobe Reader y Acrobat v9.x anteriores a v9.2, v8.x anteriores a v8.1.7 y posiblemente en v7.x anteriores a v7.1.4 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) o probablemente ejecutar código de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Solution:\r\nPer: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the image decoder in Adobe Acrobat 9.x before 9.2, and possibly 7.x through 7.1.4 and 8.x through 8.1.7, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el decodificador de imagen en Adobe Acrobat v9.x anteriores a v9.2 y posiblemente en v7.x anteriores a v7.1.4 y v8.x anteriores a v8.1.7, permite a atacantes remotos provocar una denegación de servicio o probablemente ejecutar código de su elección mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nThis update resolves an image decoder issue that leads to a Denial of Service (DoS); arbitrary code execution has not been demonstrated, but may be possible. This issue is specific to Acrobat and does not affect Adobe Reader. (CVE-2009-2984).\r\nNOTE: this issue is resolved in the Acrobat 9.2 update."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2996."
      }, {
        "lang" : "es",
        "value" : "Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 permite a atacantes provocar una denegación de servicio (consumo de memoria) o probablemente ejecutar código de su elección mediante vectores no especificados, siendo una vulnerabilidad diferente a CVE-2009-2996."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSummary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basado en memoria dinámica (heap) en Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 podría permitir a atacantes ejecutar código de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix. \r\n\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSummary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2987",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in an ActiveX control in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Windows allows remote attackers to cause a denial of service via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en un control ActiveX en Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 para Windows permite a atacantes remotos provocar una denegación de servicio mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Solution\r\n\r\nPer: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nThis update resolves a remote denial of service issue in the ActiveX control specific to the Windows OS (CVE-2009-2987)."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2988",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which allows attackers to cause a denial of service via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 no valida adecuadamente la entrad, permitiendo a atacantes provocar una denegación de servicio mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E5C4FA4-3786-47AF-BD7D-8E75927EB3AA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5C251D2-4C9B-4029-8BED-0FCAED3B8E89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2989",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en Adobe Acrobat v9.x anteriores a v9.2, v8.x anteriores a v8.1.7 y posiblemente en v7.x anteriores a v7.1.4 podría permitir a atacantes ejecutar código de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nThis update resolves an integer overflow that could potentially lead to code execution. This issue is specific to Acrobat and does not affect Adobe Reader. (CVE-2009-2989).\r\nNOTE: this issue is resolved in the Acrobat 9.2 and 8.1.7 updates."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2990",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Error de indice en vector en Adobe Reader y Acrobat v9.x anteriores a v9.2, v8.x anteriores a v8.1.7 y posiblemente en v7.x anteriores a v7.1.4 podría permitir a atacantes ejecutar código de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSummary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2991",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Mozilla plug-in in Adobe Reader and Acrobat 8.x before 8.1.7, and possibly 7.x before 7.1.4 and 9.x before 9.2, might allow remote attackers to execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el plug-in para Mozilla en Adobe Reader y Acrobat v8.x anteriores a v8.1.7 y posiblemente en v7.x anteriores a v7.1.4 y v9.x anteriores a v9.2, podría permitir a atacantes remotos ejecutar código de su elección mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSummary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2992",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unspecified ActiveX control in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 does not properly validate input, which allows attackers to cause a denial of service via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Un control ActiveX no especificado en Adobe Reader y Acrobat v9.x anteriores a v9.2, v8.x anteriores a v8.1.7 y posiblemente en v7.x anteriores a v7.1.4 no validan adecuadamente la entrada, permitiendo a atacantes provocar una denegación de servicio mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2993",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does not properly implement the (1) Privileged Context and (2) Safe Path restrictions for unspecified JavaScript methods, which allows remote attackers to create arbitrary files, and possibly execute arbitrary code, via the cPath parameter in a crafted PDF file.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "JavaScript en la API de Acrobat de Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 no implementa apropiadamente el (1) \"Privileged Context\" (contexto privilegidado) y (2) restricciones de \"Safe Path\" (ruta segura) para métodos de JavaScript sin especificar. Lo que permite a atacantes remotos crear ficheros de su elección, y posiblemente ejecutar código de su elección, a través del parámetro cPath en un fichero PDF modificado.  NOTA: algunos de estos detalles han sido obtenidos de información de terceras partes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/257117",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/257117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 permite a atacantes ejecutar código de su elección a través de vectores de ataque sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSummary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Adobe Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en Adobe Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7, y v9.x anteriores a v9.2 permite a atacantes provocar una denegación de servicio mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSolution\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nThis update resolves an integer overflow in that leads to a Denial of Service (DoS). This issue is specific to Acrobat and does not affect Adobe Reader. (CVE-2009-2995)."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2985."
      }, {
        "lang" : "es",
        "value" : "Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7, y v9.x anteriores a v9.2 permite a atacantes provocar una denegación de servicio (consumo de memoria) o posiblemente ejecutar código de su elección mediante vectores no especificados, siendo una vulnerabilidad diferente que CVE-2009-2985."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Summary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7, y v9.x anteriores a v9.2 permite a atacantes ejecutar código de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2998",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-19T22:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-3458."
      }, {
        "lang" : "es",
        "value" : "Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7, y v9.x anteriores a v9.2 no valida adecuadamente la entrada, permitiendo a atacantes ejecutar código de su elección mediante vectores no especificados, siendo una vulnerabilidad diferente que CVE-2009-3458."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E5C4FA4-3786-47AF-BD7D-8E75927EB3AA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3458",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2009-10-19T22:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2998."
      }, {
        "lang" : "es",
        "value" : "Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 no validan los datos de entrada apropiadamente, lo que puede permitir a los atacantes ejecutar código de su elección a través de vectores de ataque sin especificar. Es una vulnerabilidad distinta a la CVE-2009-2998."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6499",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.\r\nSeverity rating",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSummary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3460",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2009-10-19T22:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat v9.x anteriores a v9.2, v8.x anteriores a v8.1.7, y posiblemente v7.x anteriores a v7.1.4 permite a los atacantes provocar una denegación de servicio (corrupción de memoria) o probablemente ejecutar código de su elección a través de vectores de ataque sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6550",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nThis update resolves a memory corruption issue that could potentially lead to code execution. This issue is specific to Acrobat and does not affect Adobe Reader. (CVE-2009-3460).\r\nNOTE: this issue is resolved in the Acrobat 9.2 and 8.1.7 updates."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3461",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2009-10-19T22:30:00.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Adobe Acrobat 9.x before 9.2 allows attackers to bypass intended file-extension restrictions via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Adobe Acrobat v9.x anteriores a v9.2 permite a atacantes evitar las restricciones de extensión de archivo previstas a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF485FB-3317-4C89-B636-F22FF19B00BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E5C4FA4-3786-47AF-BD7D-8E75927EB3AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6466",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nThis update resolves an issue that could allow a malicious user to bypass file extension security controls. This issue is specific to Acrobat 9.X."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3462",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2009-10-19T22:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug mode is enabled, allow attackers to execute arbitrary code via unspecified vectors, related to a \"format bug.\""
      }, {
        "lang" : "es",
        "value" : "Adobe Reader y Acrobat v7.x anteriores a v7.1.4, 8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 en Unix, cuando el modo Debug está activado, permite a atacantes ejecutar código de su elección a través de vectores de ataque sin especificar, relacionados con un \"bug\" (error o fallo de diseño) de formato."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "84209F08-D75D-4C02-94E4-5942B244E632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D75174C-EBF9-4117-9E66-80E847012853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B0305A-51D3-4E09-B96C-54B0ED921DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762FE57-837B-4FFA-9813-AC038450EB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0055A38C-E421-40A1-8BC7-11856A20B8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758CC9EE-8929-405B-A845-83BAAECCB2AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1BD70D-7A92-4309-A40C-9BD500997390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AC1961-12F7-456F-9CE4-9AAF116CF141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749FFB51-65D4-4A4B-95F3-742440276897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8665E53-EC1E-4B95-9064-2565BC12113E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F475858-DCE2-4C93-A51A-04718DF17593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88687272-4CD0-42A2-B727-C322ABDE3549"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.1.3",
            "matchCriteriaId" : "93E26221-1DC1-4742-9FD5-54EADCAB70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634396D6-4ED6-4F4D-9458-396373489589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A265869-EF58-428E-B8BB-30CABCBE0A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB421CD-85DE-4495-93B7-46708449AE27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E20936-EE31-4CEB-A710-3165A28BAD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D198253-0E52-4E7F-AA01-CA82B96CD5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F6994B-6969-485B-9286-2592B11A47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC533775-B52E-43F0-BF19-1473BE36232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562772F1-1627-438E-A6B8-7D1AA5536086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C9167-C6D4-4264-9197-50878EDA2D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6429",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://securitytracker.com/id?1023007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-286B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.",
      "evaluatorImpact" : "Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nThis update resolves a Unix-only format bug when running in Debug mode that could lead to arbitrary code execution"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2909",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-20T17:30:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in the ax25_setsockopt function in net/ax25/af_ax25.c in the ax25 subsystem in the Linux kernel before 2.6.31.2 allows local users to cause a denial of service (OOPS) via a crafted optlen value in an SO_BINDTODEVICE operation."
      }, {
        "lang" : "es",
        "value" : "Error de presencia de signo entero en la función ax25_setsockopt en net/ax25/af_ax25.c  en el subsistema ax25 en el kernel de Linux anteriores a 2.6.31.2 permite a usuarios locales producir una denegación de servicio (OOPS) a través de un valor \"optlen\" manipulado en una operación SO_BINDTODEVICE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.31.1",
            "matchCriteriaId" : "024C81CA-BF5B-4699-A209-CA97F64CC586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D42BA44-C69B-4170-9867-CABF93CA9BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "085259B8-9D41-42B0-B32B-66B8D365F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A12DE15-E192-4B90-ADB7-A886B3746DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6588E7-F4FA-40F5-8945-FC7B6094376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "AE87E13E-ACF7-4F74-8938-729F3B0D694C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D4965A12-1BBA-4494-A5C1-43E0C0F48C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACBB194-1D24-464A-B79C-44B8127EAD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0138807-6313-4A3F-AB5A-4B7D4A9BE287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA2227-F259-499D-BF50-5074B1E7DD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A896D0-032C-4467-9D57-E47E8C612704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A415FECF-89CC-4D71-B1BF-6A678D32599D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F77E54-5F4A-4D47-8DE8-097B4BBC7944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752148FC-1594-4108-AE0F-C5145B978454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09546671-E75D-4F50-9D86-DFDDAC9DC5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6964925C-4394-4E82-976B-770A99E74F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8C909E-02D7-4B29-AA68-897BD0200B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA036609-ADD3-4903-AB9D-E8BF81CFC776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F9E122-994B-4276-9FCF-A8E4D2D06D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A15720C-3BDF-4343-B270-2575978293EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5ADCFA-2CD8-4A00-AFEC-B84F7E0015A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EA2EE9B-27FD-49FE-8665-159DABA0E3C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C81C5F8-2224-4D84-B7C0-E18421276AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27430190-EB83-43C5-9584-4F65CF65151A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386B13F-9D7C-45F8-B86A-886384144A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67A63E8-837E-4162-999E-3B3DAAE57C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A701E87D-B807-426E-9CD4-6721DBCABE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F6E506-EC0A-4784-BDA3-B7B5CD938B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFA0277-B491-4BB1-88DC-85362F0A689C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE922924-6496-4D24-94A6-8EDD431A4568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E55450-F6D9-483C-9CC8-E651E5A12AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC40B6DE-09D9-422B-965B-7EB9F6661DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91170B40-4D25-4E40-8F0B-DBC1AE217F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E28B8B9-B832-4D77-BE1A-BB5D8A678678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468745AA-0BE5-4B22-91FA-2FD350BD2F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF208118-3534-47E5-9943-83EF165F1249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "427E3009-A2F2-4ED2-8D1A-14938F639D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://article.gmane.org/gmane.linux.kernel/896907",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=b7058842c940ad2c08dd829b21e5c92ebe3b8758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125494119617994&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37075",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37351",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36635",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=528887",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://article.gmane.org/gmane.linux.kernel/896907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=b7058842c940ad2c08dd829b21e5c92ebe3b8758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125494119617994&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=528887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, or Red Hat Enterprise MRG, as the affected driver is not enabled in these kernels.\n\nThe affected driver is available in Red Hat Enterprise Linux 3, but only if the kernel-unsupported package is installed.\n\nFuture kernel update in Red Hat Enterprise Linux 3 may address this flaw.",
        "lastModified" : "2009-10-22T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2910",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-20T17:30:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 process to 64-bit mode."
      }, {
        "lang" : "es",
        "value" : "arch/x86/ia32/ia32entry.S en el kernel de Linux anteriores a v2.6.31.4 en plataformas x86_64 no limpia adecuadamente ciertos registros del kernel antes de regresar al modo usuario, lo que permite a usuarios locales leer valores del registro desde un proceso anterior mediante el cambio de un proceso ia32 al modo 64-bit"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.31.4",
            "matchCriteriaId" : "DF8153BE-F192-4143-B977-4424F9E592D9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E135846-8959-4D7E-A8E6-07F0EC15F010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "513797E6-FCE6-4E84-9B66-202541F9601E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD2D897-E321-4CED-92E0-11A98B52053C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BEE9CB-F0AF-44B1-B454-1AE2F04D7299"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C029C71B-EB6F-4A45-B138-FE140E100B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD6917D-FE03-487F-9F2C-A79B5FCFBC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/x86/linux-2.6-tip.git%3Ba=commit%3Bh=24e35800cdc4350fc34e2bed37b608a9e13ab3b6",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/10/1/164",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125442304214452&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125444390112831&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125511635004768&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36927",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37075",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37351",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100073666",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.4",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/02/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1671.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36576",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=526788",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10823",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7359",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2010-0046.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2010-0095.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/x86/linux-2.6-tip.git%3Ba=commit%3Bh=24e35800cdc4350fc34e2bed37b608a9e13ab3b6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/10/1/164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125442304214452&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125444390112831&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125511635004768&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/36927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100073666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/02/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1671.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=526788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2010-0046.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2010-0095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/CVE-2009-2910\n\nIt has been rated as having moderate security impact.\n\nIt was addressed in Red Hat Enterprise Linux 4, 5 and Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1671.html , https://rhn.redhat.com/errata/RHSA-2010-0046.html and https://rhn.redhat.com/errata/RHSA-2009-1540.html respectively.\n\nThis issue is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important and critical impact are addressed.\n\nFor further information about Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/",
        "lastModified" : "2010-01-21T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-20T17:30:00.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in tiffread.c in CamlImages 2.2 might allow remote attackers to execute arbitrary code via TIFF images containing large width and height values that trigger heap-based buffer overflows."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de entero en tiffread.c en CamlImages v2.2 permitiría a atacantes remotos ejecutar código arbitrario a través de imágenes TIFF que contengan valores muy grandes de alto y ancho que inician un desbordamiento de búfer basado en pila."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallium.inria:camimages:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F39997-63DB-4596-8743-C0FD5BCA70F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37067",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.2.0-4+lenny3.diff.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.20-8+etch3.diff.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1912",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36713",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.2.0-4+lenny3.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.20-8+etch3.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3615",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-20T17:30:00.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client."
      }, {
        "lang" : "es",
        "value" : "El conponente OSCAR protocol en libpurple en Pidgin v2.6.3 y Adium anterior v1.3.7, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de datos de una lista de contactos manipulada para (1) ICQ y probablemete (2) AIM, como se ha demostrado con el cliente SIM IM."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.6",
            "matchCriteriaId" : "AB1F576D-5609-4C06-BF75-53D7744E26A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D44D7E-116F-488C-8566-F7EA78C847FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8857D0-14C2-49F6-AE8F-287792895776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56022448-6CEE-4DE9-BC5D-F3F401470257"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D4A6BA-AB30-4EFA-BF5E-9212CBF6B141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33448B4-31F3-434F-96D4-934D65BF65FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED8C3F99-1E0C-4FDB-8E76-46CF6CBBA7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B851E0-5D86-4D7F-A1AD-903ADA6A2C52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6DEA45-1C3C-432E-9746-F1C548C8E8AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE2A0AA-BD45-4A8B-BB3C-D69BFDC7E363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6A1C31-EA56-406F-AE65-10F838E4292B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7223E59A-FA39-4D8A-A48D-1ACCF0454703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45233B3A-A3A1-45C0-A9F4-548B076742F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B5D964-9F9C-4EE0-AF9F-4FE64935D8AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FAFC986-0E07-48D7-9B67-66B65CAA9AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA83F88-808F-4D8B-A33D-16994C9074A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3779F8B3-15A9-4FBC-9176-B9B3CAB39DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A75801-F3AD-49E5-B981-6158E9B8F598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adium:adium:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99412CA-98D5-46A9-84FE-0FA1D2FD841F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.2",
            "matchCriteriaId" : "EDDF8BD7-6D64-4894-8CA2-D6953E6833A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC2EBF3-73A7-4542-8E9C-47A4241A224C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF62072D-4956-4FE6-931E-E6EE9C49F3E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6499D8D5-0801-498C-BD4D-508506918CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CC76CD-FF35-4B3A-9F1E-4E5A65963057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E216BC-29E4-4C31-9CF0-DE22C2E84968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD203F7-B983-4FDD-9837-D68D4F388A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8E3CBA-2B33-49EF-9105-8DDBB938F519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AA3282-CA7D-438C-A07C-A63392333630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEEFF420-2868-422B-BD22-9A5749C2398F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B139D83D-7D18-42C7-988C-2070B66CB943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047D9636-BCCE-4956-B5A3-D276F1C2EF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8A794E-E1CB-4F0F-9739-D625E94EA566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64EEEA0-89CE-46BD-B387-A96521E76A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E96AA3-B567-4E97-979A-D97A4F786D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C407C0-99A2-477B-87CF-6BE9F7B367E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBEF0457-39D8-465B-86A7-8DFA44A1F820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E593BFF0-650E-4EDB-BF65-C509C8A807C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39468D5-1378-4441-B927-5C34C85B18AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80012AD-8F49-4287-8AEC-C21AC5774CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB3CF0C-BECE-4685-A370-96424B0A5703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D5BC0FC-2F7D-41BE-83E4-AEDACD71F427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8321D92-B935-4C2A-81B1-5984BFF4FD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pidgin:pidgin:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43679F1D-E48D-483B-A67B-9DB8C641F649"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.pidgin.im/ticket/10481",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://developer.pidgin.im/viewmtn/revision/info/781682333aea0c801d280c3507ee25552a60bfc0",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://developer.pidgin.im/wiki/ChangeLog",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37017",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37072",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:085",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.pidgin.im/news/security/?id=41",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36719",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2949",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2951",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1020",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53807",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18388",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9414",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://developer.pidgin.im/ticket/10481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://developer.pidgin.im/viewmtn/revision/info/781682333aea0c801d280c3507ee25552a60bfc0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://developer.pidgin.im/wiki/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pidgin.im/news/security/?id=41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3617",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-20T17:30:01.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, when logging is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a download URI.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de formato de cadena en la función AbstractCommand::onAbort src/AbstractCommand.cc en aria2 anterior a la v1.6.2, cuando \"loggin\" está activado, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de los especificadores de formato de cadena en una URI de descarga. NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "0408A5B5-1B7B-4984-8634-6FDDA2D73583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C997A75D-C176-4A6A-8997-D6F74BBBDF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "540A0ACA-6E2A-45DF-B3C4-37F1DB6AA1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FDABE1-D6AA-498A-9E75-29D4E2231565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D21ADF-742F-4B5E-BE76-2D79BD090A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3B0EB4-BEE9-4EAA-B347-376C04550098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4F3902-615A-4EDD-BB81-03841E686C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.0\\+1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B371FD0E-49A2-4A74-A047-16AC1FC5FB85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3427790A-846E-4F5D-B28A-3C175AEF6ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.1\\+1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAADBF9-839C-486D-821B-460DCEDAF548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378CD567-A5CD-48E2-BCA6-5E08335685EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.2\\+1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BEF6895-6555-48B2-8FED-2747BAAEB9C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5260D845-B580-49B7-8BEB-8EE3F0919BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.14.0\\+1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "744775BE-7FAF-4FFC-8F68-81C2B6FD71FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19533000-5927-478D-A786-CB63E93948B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F2BDE0-CC4B-4C1C-9FFA-D4E3F5AA37DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.1\\+1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "973F6E89-D2E8-4C92-B534-43248587840D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.1\\+2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC24DE0-7D6B-4284-A73A-E5982B49ACB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C66BAD-4A07-4FAB-9BFF-50FB37D06647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6798D1A2-F961-48C5-A2F6-086A3A2DB456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55F425AA-624E-41A9-83CD-19F913E39C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D3774F-C55C-40B6-A85D-DBD5DAE666C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8315C60-79EF-4484-B54B-2E7E1FEB5FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9ED06F2-8669-4C90-BB22-5DDE01DFD4F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "371FD10B-90BB-417C-A37E-F5C50EFAEF22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1FC3F03-3890-4466-8A0A-B020460B8507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FAE4C8-7F23-4E67-BA06-276BC3A5DE62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6E9CCB-8DCF-41F8-A4DE-5B4D139E719A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0594B76-BE61-451D-8512-B9C81F476372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D248E3DA-D9FF-4A08-9C63-9B72AE946AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBCD24D-B863-4516-A7DD-1264D5D81BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F72DB79-0C01-481A-A442-4489C5C859B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4166DE3D-3019-434F-9EC5-C74057F91F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836C565A-B1EB-4ED1-BCFB-EF60CFE9ED8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4EB136B-45C1-439D-810F-E234267A44EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F49FE022-33DC-4F05-8D64-1E64816E391F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0ECA2A-043C-4C36-9618-E3EAE45AA5CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aria2.svn.sourceforge.net/viewvc/aria2/trunk/NEWS?revision=1586",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://aria2.svn.sourceforge.net/viewvc/aria2/trunk/src/AbstractCommand.cc?r1=1539&r2=1572",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125568632528906&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125572053420493&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/59087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/31732",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2960",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=529342",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://fedorahosted.org/rel-eng/ticket/2495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://aria2.svn.sourceforge.net/viewvc/aria2/trunk/NEWS?revision=1586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://aria2.svn.sourceforge.net/viewvc/aria2/trunk/src/AbstractCommand.cc?r1=1539&r2=1572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125568632528906&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125572053420493&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/59087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/31732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=529342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://fedorahosted.org/rel-eng/ticket/2495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-20T17:30:01.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the ReqWeb Help feature (aka the Web Client Help system) in IBM Rational RequisitePro 7.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the operation parameter to ReqWebHelp/advanced/workingSet.jsp, or the (2) searchWord, (3) maxHits, (4) scopedSearch, or (5) scope parameter to ReqWebHelp/basic/searchView.jsp."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en la característica ReqWeb Help (También conocida como Web Client Help system) en IBM Rational RequisitePro v7.1.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) el parámetro operation a ReqWebHelp/advanced/workingSet.jsp, o (2) searchWord, (3) maxHits, (4) scopedSearch, o el parámetro (5) scope a ReqWebHelp/basic/searchView.jsp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_requisitepro:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "439CCAA6-D94A-484B-A475-56A54BE7E536"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/59088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37052",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK83895",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36721",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2958",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/59088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/59089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK83895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3603",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-21T17:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1188."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función SplashBitmap::SplashBitmap en Xpdf v3.x anterior a v3.02pl4  y Poppler anteior a v0.12.1, podría permitir  a atacantes remotos  la ejecución de código de su elección a través de un documento PDF manipulado que provoca un  un desbordamiento de búfer basado en memoria dinámica (heap). NOTA: algunos detalles han sido obtenidos a partir de información de terceros. Esta vulnerabilidad existe por un corrección incompleta de CVE-2009-1188."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:3.02pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC500DA-7B3F-4CD5-BB0E-B244000CD19D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:3.02pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5D9CEA-0707-46FC-AEC3-9EC540B22BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:3.02pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD38AC59-7518-40FB-BC29-EC64142DE682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D244903F-5407-4C35-AE2C-1A05D3C227D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D4E256-FF91-47BA-B1D4-940FB2D970AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.12.0",
            "matchCriteriaId" : "C16CA37E-F28E-47E6-B77B-4CB0A859F831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3030D6-DE07-418B-AB40-87C85FCA3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3583D56-F653-457A-B1F8-25842A15CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA5DBB-5A80-439E-A135-77CB40772916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A5C43B-3978-4D0A-8166-A99622106781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88294D9-563E-4AB3-9FE6-971F43B052B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A39F672-B238-4B21-A48E-5121771949F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A8D058-224E-467E-AB61-06F90B541F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52995D0-0986-427F-B37D-2F6726EA330D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4427C5-DBF0-4EF9-8B7A-61D56C14E3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91206CA-7EBE-4E64-9A49-D7EC0D051012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD43644-7F02-42AF-8EC3-C326A13E2F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81FE2E6F-44B2-42D5-B986-D1FE2B510968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A605079-3705-4E2C-8F6D-C21B4D875817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABBD590-8092-4920-BBC7-F3ACB9CCC900"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://poppler.freedesktop.org/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37034",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37053",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37054",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37114",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37159",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39938",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1023029",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2028",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2050",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36703",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2924",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2925",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0802",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=526915",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53793",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1504.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://poppler.freedesktop.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=526915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1504.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3604",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-21T17:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función Splash.cc en Xpdf v3.02pl4  y Poppler v0.x, usado en n kdegraphics KPDF y GPdf, no asigna la memoria adecuadamente, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) y probablemente, la ejecución de código de su elección a través de un documento PDF manipulado que provoca un deferencia a puntero nulo o un desbordamiento de búfer basado en memoria dinámica (heap)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gnome:gpdf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A9A98B-5E37-4938-9506-927E0C8FACB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kde:kpdf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41EF2714-DEC9-407F-9D1B-EF2A4D8B4DC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:3.02pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC500DA-7B3F-4CD5-BB0E-B244000CD19D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:3.02pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5D9CEA-0707-46FC-AEC3-9EC540B22BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:3.02pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD38AC59-7518-40FB-BC29-EC64142DE682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A45EAF-B511-4360-A201-D588E7EEB39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D244903F-5407-4C35-AE2C-1A05D3C227D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D4E256-FF91-47BA-B1D4-940FB2D970AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0213390-08FA-4E04-835B-8BE0FC61B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B304657-740A-4F8D-99CD-22E283FEE6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3030D6-DE07-418B-AB40-87C85FCA3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3583D56-F653-457A-B1F8-25842A15CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA5DBB-5A80-439E-A135-77CB40772916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A5C43B-3978-4D0A-8166-A99622106781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88294D9-563E-4AB3-9FE6-971F43B052B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A39F672-B238-4B21-A48E-5121771949F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A8D058-224E-467E-AB61-06F90B541F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52995D0-0986-427F-B37D-2F6726EA330D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4427C5-DBF0-4EF9-8B7A-61D56C14E3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91206CA-7EBE-4E64-9A49-D7EC0D051012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD43644-7F02-42AF-8EC3-C326A13E2F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81FE2E6F-44B2-42D5-B986-D1FE2B510968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A605079-3705-4E2C-8F6D-C21B4D875817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABBD590-8092-4920-BBC7-F3ACB9CCC900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D812D5-BC8B-4907-AA70-F8D7F982A8DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://cgit.freedesktop.org/poppler/poppler/diff/?id=284a928996&id2=75c3466ba2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37023",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37028",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37037",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37042",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37043",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37053",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37077",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37079",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37114",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37159",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39938",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1023029",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://site.pi3.com.pl/adv/xpdf.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2028",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2050",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36703",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2924",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2928",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0802",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=526911",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53795",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10969",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1500.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1501.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1502.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1503.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1512.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cgit.freedesktop.org/poppler/poppler/diff/?id=284a928996&id2=75c3466ba2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://site.pi3.com.pl/adv/xpdf.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=526911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1500.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1501.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1502.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1503.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1512.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3606",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-21T17:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función PSOutputDev::doImageL1Sep en Xpdf v3.02pl4  y Poppler v0.x, usado en n kdegraphics KPDF, podría permitir a atacantes remotos la ejecución de código de su elección a través de un documento PDF manipulado que provoca un desbordamiento de búfer basado en memoria dinámica (heap)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:3.02pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC500DA-7B3F-4CD5-BB0E-B244000CD19D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:3.02pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5D9CEA-0707-46FC-AEC3-9EC540B22BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:3.02pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD38AC59-7518-40FB-BC29-EC64142DE682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D244903F-5407-4C35-AE2C-1A05D3C227D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D4E256-FF91-47BA-B1D4-940FB2D970AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3030D6-DE07-418B-AB40-87C85FCA3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3583D56-F653-457A-B1F8-25842A15CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA5DBB-5A80-439E-A135-77CB40772916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A5C43B-3978-4D0A-8166-A99622106781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88294D9-563E-4AB3-9FE6-971F43B052B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A39F672-B238-4B21-A48E-5121771949F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A8D058-224E-467E-AB61-06F90B541F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52995D0-0986-427F-B37D-2F6726EA330D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4427C5-DBF0-4EF9-8B7A-61D56C14E3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91206CA-7EBE-4E64-9A49-D7EC0D051012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD43644-7F02-42AF-8EC3-C326A13E2F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81FE2E6F-44B2-42D5-B986-D1FE2B510968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A605079-3705-4E2C-8F6D-C21B4D875817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABBD590-8092-4920-BBC7-F3ACB9CCC900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D812D5-BC8B-4907-AA70-F8D7F982A8DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kde:kpdf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41EF2714-DEC9-407F-9D1B-EF2A4D8B4DC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cgit.freedesktop.org/poppler/poppler/diff/poppler/PSOutputDev.cc?id=7b2d314a61",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37023",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37037",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37042",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37043",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37053",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37077",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37159",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39938",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1023029",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2028",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2050",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/5",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/6",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36703",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2924",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2928",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0802",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=526877",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53798",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11289",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7836",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1500.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1501.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1502.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cgit.freedesktop.org/poppler/poppler/diff/poppler/PSOutputDev.cc?id=7b2d314a61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=526877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1500.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1501.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1502.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3607",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-21T17:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "la función create_surface_from_thumbnail_data en glib/poppler-page.cc  en Poppler v0.x, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o posiblemente la ejecución de código de su elección  a través de un documento PDF manipulado que provoca un desbordamiento de búfer basado en memoria dinámica (heap). NOTA: algunos de los detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0213390-08FA-4E04-835B-8BE0FC61B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B304657-740A-4F8D-99CD-22E283FEE6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3030D6-DE07-418B-AB40-87C85FCA3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3583D56-F653-457A-B1F8-25842A15CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA5DBB-5A80-439E-A135-77CB40772916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A5C43B-3978-4D0A-8166-A99622106781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88294D9-563E-4AB3-9FE6-971F43B052B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A39F672-B238-4B21-A48E-5121771949F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A8D058-224E-467E-AB61-06F90B541F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52995D0-0986-427F-B37D-2F6726EA330D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4427C5-DBF0-4EF9-8B7A-61D56C14E3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91206CA-7EBE-4E64-9A49-D7EC0D051012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD43644-7F02-42AF-8EC3-C326A13E2F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81FE2E6F-44B2-42D5-B986-D1FE2B510968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A605079-3705-4E2C-8F6D-C21B4D875817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABBD590-8092-4920-BBC7-F3ACB9CCC900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D812D5-BC8B-4907-AA70-F8D7F982A8DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cgit.freedesktop.org/poppler/poppler/commit/?id=c839b706",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37054",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37114",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37159",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/5",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/6",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36718",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2925",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=526924",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53801",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://cgit.freedesktop.org/poppler/poppler/commit/?id=c839b706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=526924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the version of poppler as shipped with Red Hat Enterprise Linux 5.",
        "lastModified" : "2009-10-23T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3608",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-21T17:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función ObjectStream::ObjectStream  en XRef.cc en Xpdf  y Poppler, usado en GPdf, kdegraphics KPDF, y CUPS pdftopf y teTeX, podría permitir a atacantes remotos ejecutar código de su elección a través de un documento PDF manipulado que provoca un desbordamiento de búfer basado en memoria dinámica (heap)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:3.02pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC500DA-7B3F-4CD5-BB0E-B244000CD19D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:3.02pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5D9CEA-0707-46FC-AEC3-9EC540B22BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:3.02pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD38AC59-7518-40FB-BC29-EC64142DE682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D244903F-5407-4C35-AE2C-1A05D3C227D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D4E256-FF91-47BA-B1D4-940FB2D970AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.12.0",
            "matchCriteriaId" : "C16CA37E-F28E-47E6-B77B-4CB0A859F831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3030D6-DE07-418B-AB40-87C85FCA3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3583D56-F653-457A-B1F8-25842A15CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA5DBB-5A80-439E-A135-77CB40772916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A5C43B-3978-4D0A-8166-A99622106781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88294D9-563E-4AB3-9FE6-971F43B052B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A39F672-B238-4B21-A48E-5121771949F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A8D058-224E-467E-AB61-06F90B541F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52995D0-0986-427F-B37D-2F6726EA330D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4427C5-DBF0-4EF9-8B7A-61D56C14E3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91206CA-7EBE-4E64-9A49-D7EC0D051012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD43644-7F02-42AF-8EC3-C326A13E2F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81FE2E6F-44B2-42D5-B986-D1FE2B510968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A605079-3705-4E2C-8F6D-C21B4D875817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABBD590-8092-4920-BBC7-F3ACB9CCC900"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:glyph_and_cog:pdftops:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1833267E-3B18-4CF8-B996-6226D5439F5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gnome:gpdf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A9A98B-5E37-4938-9506-927E0C8FACB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kde:kpdf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41EF2714-DEC9-407F-9D1B-EF2A4D8B4DC3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:tetex:tetex:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87CCAA71-B817-48A0-81C0-9E4DC4953C9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://poppler.freedesktop.org/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37028",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37034",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37037",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37043",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37053",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37054",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37061",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37077",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37079",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37114",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37159",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39938",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1023029",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2028",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2050",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:334",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-016.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/5",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/6",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36703",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2924",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2925",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2926",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2928",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0802",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=526637",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1501.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1502.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1503.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1504.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1512.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1513.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://poppler.freedesktop.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ocert.org/advisories/ocert-2009-016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/12/01/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=526637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1501.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1502.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1503.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1504.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1512.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1513.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3609",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-21T17:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función ImageStream::ImageStream  en Stream.cc en Xpdf v3.02pl4 y Poppler v0.12.1, usado en GPdf, kdegraphics KPDF, y CUPS pdftops, permite a atacantes remotsos provocar una denegación de servicio (caída de aplicación) a través de un documento PDF manipulado que provoca un deferencia a puntero nulo o un desbordamiento de búfer fuera del límite (over-read)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:3.02pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC500DA-7B3F-4CD5-BB0E-B244000CD19D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:3.02pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5D9CEA-0707-46FC-AEC3-9EC540B22BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foolabs:xpdf:3.02pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD38AC59-7518-40FB-BC29-EC64142DE682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D08CFD-BEE1-4DEE-926D-F4291F88224D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D244903F-5407-4C35-AE2C-1A05D3C227D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glyphandcog:xpdfreader:3.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D4E256-FF91-47BA-B1D4-940FB2D970AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.12.0",
            "matchCriteriaId" : "C16CA37E-F28E-47E6-B77B-4CB0A859F831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3030D6-DE07-418B-AB40-87C85FCA3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3583D56-F653-457A-B1F8-25842A15CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA5DBB-5A80-439E-A135-77CB40772916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A5C43B-3978-4D0A-8166-A99622106781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88294D9-563E-4AB3-9FE6-971F43B052B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A39F672-B238-4B21-A48E-5121771949F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A8D058-224E-467E-AB61-06F90B541F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52995D0-0986-427F-B37D-2F6726EA330D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4427C5-DBF0-4EF9-8B7A-61D56C14E3FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91206CA-7EBE-4E64-9A49-D7EC0D051012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFD43644-7F02-42AF-8EC3-C326A13E2F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81FE2E6F-44B2-42D5-B986-D1FE2B510968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A605079-3705-4E2C-8F6D-C21B4D875817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABBD590-8092-4920-BBC7-F3ACB9CCC900"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:glyph_and_cog:pdftops:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1833267E-3B18-4CF8-B996-6226D5439F5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:gnome:gpdf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A9A98B-5E37-4938-9506-927E0C8FACB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kde:kpdf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41EF2714-DEC9-407F-9D1B-EF2A4D8B4DC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://poppler.freedesktop.org/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37023",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37028",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37034",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37037",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37043",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37054",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37061",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37077",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37079",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37114",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37159",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/39938",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1023029",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2028",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2050",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:334",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0755.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36703",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2924",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2925",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2926",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2928",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0802",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=526893",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53800",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11043",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8134",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1500.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1501.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1502.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1503.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1504.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1512.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1513.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://poppler.freedesktop.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/39938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0755.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=526893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1500.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1501.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1502.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1503.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1504.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1512.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1513.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T16:00:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in client/desktop/default.htm in Boxalino before 09.05.25-0421 allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en client/desktop/default.htm en Boxalino anterior v09.05.25-0421 permite a atacantes remotos leer archivos a su elección a través de .. (punto punto) en el parámetro de la url."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boxalino:boxalino:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77C8B90-CD70-46C7-B732-3B0B7D5257DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.csnc.ch/misc/files/advisories/CVE-2009-1479-Boxalino-Directory_Traversal.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507319/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.csnc.ch/misc/files/advisories/CVE-2009-1479-Boxalino-Directory_Traversal.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507319/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3620",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-22T16:00:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls."
      }, {
        "lang" : "es",
        "value" : "El controlador ATI Rage 128 (también conocido como r128), en el Kernel de Linux anterior a v2.6.31-git11 no verifica de forma adecuada el estado de inicialización del \"Concurrent Command Engine (CCE)\", lo que permite a usuarios locales provocar una denegación de servicio (desreferenciación de puntero nulo y caída del sistema) o posiblemente obtener privilegios a través de llamadas ioctl sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.31.1",
            "matchCriteriaId" : "7C1AF884-1852-4B68-AAC8-91E97CCE1201"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7EBFE35C-E243-43D1-883D-4398D71763CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:mrg_realtime:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A20072-7DB7-4079-9456-E2CE98F888E7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E135846-8959-4D7E-A8E6-07F0EC15F010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0623AA-88D4-4E53-AD50-C9AF8E0B0247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "513797E6-FCE6-4E84-9B66-202541F9601E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "1E496249-23A8-42FC-A109-634A54B5600F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1E7EFF-1CCA-473B-8D5C-30D59C26DC70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:-:*:*:*",
            "matchCriteriaId" : "105187A7-2AFE-46F9-B0A9-F09C7E10BFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:-:*:*:*",
            "matchCriteriaId" : "79A35457-EAA3-4BF9-A4DA-B2E414A75A02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://article.gmane.org/gmane.linux.kernel/892259",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7dc482dfeeeefcfd000d4271c4626937406756d7",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36707",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37909",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.31-git11.log",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:088",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:198",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/19/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/19/3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1670.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1671.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0882.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36824",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=529597",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6763",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9891",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Release Notes" ]
      }, {
        "url" : "http://article.gmane.org/gmane.linux.kernel/892259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7dc482dfeeeefcfd000d4271c4626937406756d7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/36707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.31-git11.log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/19/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/19/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1670.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1671.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0882.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=529597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3621",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-22T16:00:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket."
      }, {
        "lang" : "es",
        "value" : "net/unix/af_unix.c en el kernel de Linux v2.6.31.4 y anteriores permite a usuarios locales causar una denegación de servicio (el servidor se bloquea) creando un socket  abstract-namespace AF_UNIX y realizando una operación de apagado en ese socket, para luego luego realizar una serie de operaciones de conexión en dicho socket."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.31.4",
            "matchCriteriaId" : "D3D7715A-8ED8-48D3-B467-CFC9430B6D45"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0507E91-567A-41D6-A7E5-5088A39F75FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01C8B7E-EB19-40EA-B1D2-9AE5EA536C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "14DF1463-F23F-465F-8A35-D550A7438CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F140C5CF-5141-4F8D-B667-522A698AC632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "02E6A767-B9A5-4054-BE70-286E0A464248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A516C153-239B-4F41-88B4-8B8D4F92115C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vma:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7426B5AC-D0FD-424D-9A1E-0875C2102D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC337BB7-9A45-4406-A783-851F279130EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=77238f2b942b38ab4e7f3aced44084493e4a8675",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/10/19/50",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://patchwork.kernel.org/patch/54678/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37086",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37909",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38017",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:329",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/19/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/19/4",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1670.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1671.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=529626",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6895",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9921",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=77238f2b942b38ab4e7f3aced44084493e4a8675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/10/19/50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://patchwork.kernel.org/patch/54678/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/19/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/19/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1670.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1671.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=529626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-3621\n\nThis issue has been rated as having moderate security impact.\n\nIt was addressed in Red Hat Enterprise Linux 4, 5 and Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1671.html , https://rhn.redhat.com/errata/RHSA-2009-1670.html and https://rhn.redhat.com/errata/RHSA-2009-1540.html respectively.\n\nThis issue is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important or critical impact are addressed.\n\nFor further information about Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/",
        "lastModified" : "2009-12-17T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T16:00:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rep_serv.exe 6.3.1.3 in the server in EMC RepliStor allows remote attackers to cause a denial of service via a crafted packet to TCP port 7144."
      }, {
        "lang" : "es",
        "value" : "rep_serv.exe v6.3.1.3 en el servidor en EMC RepliStor permite a atacantes remotos causar una denegación de servicio a través del un paquete manipulado al puerto TCP 7144."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:replistor:6.3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DA5667-D435-4100-87ED-537C3F8232F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/9sg_emc_repli_crash.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507322/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36738",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/9sg_emc_repli_crash.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507322/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T16:00:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the help pages in IBM Rational AppScan Enterprise Edition 5.5.0.2 allows remote attackers to inject arbitrary web script or HTML via the query string."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la página de ayuda en IBM Rational AppScan Enterprise Edition v5.5.0.2 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de la cadena de consulta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_appscan:5.5.0.2:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "ED2603F1-AA5C-4CCA-A4E7-B53661864CFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37093",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK97516",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024704",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2974",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PK97516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2911",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-22T16:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records."
      }, {
        "lang" : "es",
        "value" : "SystemTap 1.0, cuando se utiliza la opción \"--unprivileged\", no restringe adecuadamente ciertos tamaños de datos, lo que permite a usuarios locales (1) producir una denegación de servicio o ganar privilegios a través de una operación de impresión con un gran numero de argumentos que inicia un desbordamiento de ka pila del kernel, (2) producir una denegación de servicio a través de expresión DWARF manipuladas que inician un desbordamiento de la pila del kernel, o (3) producir una denegación de servicio (bucle infinito) a través de vectores que inician la creación de grandes tablas relacionadas con las entradas \"Entry Common Information\" (CIE) y \"Call Frame Instruction\" (CFI)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemtap:systemtap:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C36C437-D28D-452A-BAF0-4A618A61920B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gcc.gnu.org/bugzilla/show_bug.cgi?id=41633",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37167",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sources.redhat.com/bugzilla/show_bug.cgi?id=10750",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/21/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36778",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2989",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=529175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00627.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00793.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://gcc.gnu.org/bugzilla/show_bug.cgi?id=41633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sources.redhat.com/bugzilla/show_bug.cgi?id=10750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/21/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=529175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00627.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00793.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T16:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings."
      }, {
        "lang" : "es",
        "value" : "El módulo pygresql v3.8.1 y v4.0 para Python no soporta de forma adecuada la función PQescapeStringConn, lo que podría permitir a atacantes remotos aprovechas cuestiones de escape incluidas en las codificaciones de carácter multibyte."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pygresql:pygresql:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9238A143-989E-4628-B839-813DF98E08CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pygresql:pygresql:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9EA913-63D0-430E-8E72-9EB9DF7F6CF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C18D8AC-D77C-44CD-B5DF-AF6E3F3851CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37046",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ubuntu.com/usn/usn-870-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/59028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://ubuntu.com/usn/usn-870-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/59028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T16:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mysql-ocaml bindings 1.0.4 for MySQL do not properly support the mysql_real_escape_string function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings."
      }, {
        "lang" : "es",
        "value" : "El mysql-ocaml bindings v1.0.4 para MySQL no soporta adecuadamente la función mysql_real_escape_string, lo que puede permitir a atacantes remotos elevar vulnerabilidades de escape incluyendo codificaciones de caracteres multibyte."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql-ocaml:mysql-ocaml:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED10CEF-B0EB-4164-9061-EFA0F97497AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA450156-3EEF-4F22-8F28-2E0A55C81FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37047",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/59030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/59030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T16:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for PostgreSQL libpq do not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings."
      }, {
        "lang" : "es",
        "value" : "Los vínculos Postgresql-ocaml v1.5.4, v1.7.0, y v1.12.1 para la librería libpq para PostgreSQL no soporta de forma adecuada la función PQescapeStringConn, lo que podría permitir a atacantes remotos aprovechas cuestiones de escape incluidas en las codificaciones de carácter multibyte."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocaml:postgresql-ocaml:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C296D974-BD89-49F3-BDF5-AC3C785C8A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocaml:postgresql-ocaml:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66272BD6-9D54-453B-A9E4-4C55815867DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocaml:postgresql-ocaml:1.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65D298B6-EE75-4B8A-92DE-197727DBF00B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5A47A8B-5F2B-42B1-A8F6-ACDBEA4D8485"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37048",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1909",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/59029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/59029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T16:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276 and CVE-2009-2711."
      }, {
        "lang" : "es",
        "value" : "XScreenSaver de Sun Solaris 10, cuando la característica de accesibilidad está habilitada, permite a atacantes cercanos físicamente obtener información sensible leyendo las ventanas emergentes que se muestran incluso con el monitor bloqueado. Se trata de una vulnerabilidad diferente de CVE-2009-1276 y CVE-2009-2711."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-29-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-268288-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-29-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-268288-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T17:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in TBmnetCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the content parameter.  NOTE: this was originally reported for tbmnet.php, but that program does not exist in the TBmnetCMS 1.0 distribution."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en TBmnetCMS v1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través del parámetro \"content\". NOTA: Esta vulnerabilidad fue originalmente reportada por tbmnet.php, pero ese programa ya no existe en la distribución de TBmnetCMS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tbmnet:tbmnetcms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C13B18B-7B8A-4CD8-84E0-2CBE34FB7A69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0910-exploits/tbmnetcms-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/32462",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36733",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0910-exploits/tbmnetcms-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/32462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T17:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allow remote attackers to inject arbitrary web script or HTML via the (1) FileName, (2) IsolatedMessageID, (3) ServerName, (4) Dictionary, (5) Scoring, and (6) MessagePart parameters to web/msgList/viewmsg/actions/msgAnalyse.asp; the (7) Queue, (8) FileName, (9) IsolatedMessageID, and (10) ServerName parameters to actions/msgForwardToRiskFilter.asp and viewHeaders.asp in web/msgList/viewmsg/; and (11) the subject in an e-mail message that is held in a Queue."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Web Administrator en Websense Personal Email Manager v7.1 anteriores a Hotfix v4 y Email Security v7.1 anteriores a Hotfix v4 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de los parámetros (1) FileName, (2) IsolatedMessageID, (3) ServerName, (4) Dictionary, (5) Scoring, y (6) MessagePart parameters to web/msgList/viewmsg/actions/msgAnalyse.asp; the (7) Queue, (8) FileName, (9) IsolatedMessageID, and (10) ServerName para actions/msgForwardToRiskFilter.asp y viewHeaders.asp en web/msgList/viewmsg/; y (11) el asunto en un mensaje de correo electrónico que se mantiene en una Queue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:websense:personal_email_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6950059E-09FD-4CE8-ABAE-396590138D63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:websense:websense_email_security:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098603E7-B186-451E-ACC6-113185D2D7DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.websense.com/display/4/kb/article.aspx?aid=4786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sotiriu.de/adv/NSOADV-2009-003.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507330/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36741",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2987",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://kb.websense.com/display/4/kb/article.aspx?aid=4786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sotiriu.de/adv/NSOADV-2009-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507330/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T17:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service (crash) by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a response."
      }, {
        "lang" : "es",
        "value" : "El Web Administrator service (STEMWADM.EXE) en Websense Personal Email Manager v7.1 anterior Hotfix v4 y Email Security v7.1 anterior Hotfix v4 permite a atacantes remotos causar una denegación de servicio (caída) enviando una petición HTTP GET en el puerto TCP 8181 y cerrando el socket antes de que el servicio pueda enviar la respuesta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:websense:email_security:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89437E13-AB86-465A-97A7-67076408552F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:websense:personal_email_manager:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6950059E-09FD-4CE8-ABAE-396590138D63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.websense.com/article.aspx?article=4786&p=12",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://kb.websense.com/display/4/kb/article.aspx?aid=4786",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sotiriu.de/adv/NSOADV-2009-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507329/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36740",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2987",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://kb.websense.com/article.aspx?article=4786&p=12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://kb.websense.com/display/4/kb/article.aspx?aid=4786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sotiriu.de/adv/NSOADV-2009-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507329/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T17:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in read.php in ToyLog 0.1 allows remote attackers to execute arbitrary SQL commands via the idm parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en read.php en ToyLog v0.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"idm\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:santostefano_giovanni:toylog:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F620BC7C-3FB5-44D9-96A2-44B1A274967B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35791",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T17:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web script or HTML via the genres_parent parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en home.php de Opial v1.0, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro genres_parent."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opial:opial:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17DD783-6541-487C-A2D7-5A3AC3142023"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35641",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T17:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in home.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the genres_parent parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en home.php en Opial v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro genres_parent."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opial:opial:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17DD783-6541-487C-A2D7-5A3AC3142023"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35641",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T17:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in Opial 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension as a User Image, then accessing it via a request to the file in userimages, related to register.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de subida de archivos sin restricción en Opial v1.0, permite a atacantes remotos ejecutar código de su elección subiendo un archivo con una extensión ejecutable como \"User Image\" y posteriormente accediendo a él a través de una petición del archivo en \"userimages\". Relacionado con register.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opial:opial:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17DD783-6541-487C-A2D7-5A3AC3142023"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/35677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35641",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T17:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in phpBMS 0.96 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to modules/bms/invoices_discount_ajax.php, (2) f parameter to dbgraphic.php, and (3) tid parameter in a show action to advancedsearch.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en phpBMS v0.96 permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de el parámetro (1) id para modules/bms/invoices_discount_ajax.php, (2) f para  dbgraphic.php, y (3) parámetro tid en una acción show para advancedsearch.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kreotek:phpbms:0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F66ED14-9F1C-4DBD-A67C-E2CC9BFF2797"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T17:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpBMS 0.96 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php and (2) modules\\base\\myaccount.php; and the PATH_INFO to (3) modules_view.php, (4) tabledefs_options.php, and (5) adminsettings.php in phpbms\\modules\\base\\."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en phpBMS v0.96 permite a atacantes remotos inyectar código web o HTML a su elección a través de PATH_INFO en(1) index.php y (2) modules\\base\\myaccount.php; y  PATH_INFO en (3) modules_view.php, (4) tabledefs_options.php, y (5) adminsettings.php en phpbms\\modules\\base\\."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kreotek:phpbms:0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F66ED14-9F1C-4DBD-A67C-E2CC9BFF2797"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T17:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.php, (3) the show action in advancedsearch.php, and (4) choicelist.php, which reveals the installation path in an error message."
      }, {
        "lang" : "es",
        "value" : "phpBMS v0.96 permite a atacantes remotos obtener información sensible a través de peticiones directas en (1) footer.php, (2) header.php, (3) la acción show en advancedsearch.php, y (4) choicelist.php, lo que revela la ruta de instalación en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kreotek:phpbms:0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F66ED14-9F1C-4DBD-A67C-E2CC9BFF2797"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T17:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to config/edituser.php; (2) location, (3) sessionid, and (4) vmname parameters to console.php; (5) vmrefid and (6) vmname parameters to forcerestart.php; and (7) vmname and (8) vmrefid parameters to forcesd.php.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en en el XenServer Resource Kit de Citrix XenCenterWeb, permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través de (1) el parámetro username de config/edituser.php; (2) los parámetros location, (3) sessionid y (4) vmname de console.php; (5) los parámetros vmrefid y (6) vmname de forcerestart.php; y (7) los parámetros vmname (8) vmrefid de forcesd.php.\r\nNOTA: Algunos de estos detalles han sido obtenidos de fuentes externas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xencenterweb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA67DCE8-9246-467B-872C-FF9518EF94CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1022520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504764",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35592",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1814",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1022520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T17:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en ogin.php en sample code en XenServer Resource Kit en Citrix XenCenterWeb permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro username. NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xencenterweb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA67DCE8-9246-467B-872C-FF9518EF94CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1022520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504764",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35592",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1814",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1022520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T17:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote attackers to hijack the authentication of administrators for (1) requests that change the password via the username parameter to config/changepw.php or (2) stop a virtual machine via the stop_vmname parameter to hardstopvm.php.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en sample code en el XenServer Resource Kit en Citrix XenCenterWeb en  Citrix XenCenterWeb, permite a atacantes remotos secuestras la autenticación de los administradores para (1) peticiones que modifican la contraseña mediante el parámetro \"username\" en config/changepw.php o (2)parar una máquina virtual mediante el parámetro stop_vmname en hardstopvm.php. NOTA: algunos detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xencenterweb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "017F01DD-E95A-4073-9AA1-69A55786ABA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1022520",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9106",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504764",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35592",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1814",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51576",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1022520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-22T17:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Static code injection vulnerability in config/writeconfig.php in the sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to inject arbitrary PHP code into include/config.ini.php via the pool1 parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático en config/writeconfig.php en el código de muestra en XenServer Resource Kit en Citrix XenCenterWeb permite a los atacantes remotos inyectar arbitrariamente código PHP en include/config.ini.php a través del parámetro pool1. NOTA: alguna de estos detalles han sido obtenidos de información de terceros"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:xencenterweb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA67DCE8-9246-467B-872C-FF9518EF94CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1022520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504764",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35592",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1814",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1022520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/504764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1007",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Data Mining component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality, integrity, and availability, related to SYS.DMP_SYS."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Data Mining de Oracle Database v10.2.0.4, permite a usuarios autenticados en remoto comprometer la confidencialidad, integridad y disponibilidad. Está relacionado con SYS.DMP_SYS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC251D-9313-4A54-9623-51DC0AEC46FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36750",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1018",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LTRIC (WMSYS.LTRIC)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especficada en el componente Workspace Manager en Oracle Database v10.2.0.4 permite a usuarios autentificados remotamente afectar la confidencialidad e integridad, relacionado con SYS.LTRIC (WMSYS.LTRIC)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC251D-9313-4A54-9623-51DC0AEC46FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/59112",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36765",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/59112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1964",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente Workspace Manager en  Oracle Database  v10.2.0.4, permite a usuarios autenticados remotamente  comprometer la confidencialidad e integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC251D-9313-4A54-9623-51DC0AEC46FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/59115",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36755",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/59115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1965",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Net Foundation Layer component in Oracle Database 9.2.0.8 and 10.1.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Foundation Layer en Oracle Database v9.2.0.8 y v10.1.0.5 permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432A3020-9977-4A10-9CDA-3A71E83F63F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36760",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ],
      "evaluatorImpact" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html\r\n\r\nThis vulnerability only affects the Windows platform."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1971",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.7 allows remote authenticated users to affect integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Data Pump en Oracle Database v10.1.0.5, v10.2.0.3, y v11.1.0.7 permite a los usuarios remotos autenticados comprometer la integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED41086B-840A-4B39-B249-461A4B00B57B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEDE937-C3D7-421C-9F70-F546AB823E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36754",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1972",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to DBMS_SYS_SQL and DBMS_SQL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Auditing de Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5, v10.2.0.4 y v11.1.0.7 , permite a usuarios autenticados en remoto comprometer la integridad. Está relacionado con DBMS_SYS_SQL y DBMS_SQL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432A3020-9977-4A10-9CDA-3A71E83F63F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C10722-4CC7-4C06-8DBC-4D96307DB41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC251D-9313-4A54-9623-51DC0AEC46FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEDE937-C3D7-421C-9F70-F546AB823E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36758",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1979",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2009 CPU.  Oracle has not commented on claims from an independent researcher that this is related to improper validation of the AUTH_SESSKEY parameter length that leads to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Network Authentication en Oracle Database v10.1.0.5 y v10.2.0.4 permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores no conocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC251D-9313-4A54-9623-51DC0AEC46FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.conus.info/node/28",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://osvdb.org/59110",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507598/100/0/threaded",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36747",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://blogs.conus.info/node/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/59110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507598/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ],
      "evaluatorImpact" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html\r\n\r\n# The CVSS Base Score is 10.0 only for Windows. For Linux, Unix and other platforms, the CVSS Base Score is 7.5, and the impacts for Confidentiality, Integrity and Availability are Partial+."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1985",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente Network Authentication en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5 y v10.2.0.4, permite a atacantes remotos  comprometer la confidencialidad, disponibilidad  e integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432A3020-9977-4A10-9CDA-3A71E83F63F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C10722-4CC7-4C06-8DBC-4D96307DB41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC251D-9313-4A54-9623-51DC0AEC46FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/59111",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36745",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/59111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ],
      "evaluatorImpact" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html\r\n\r\n\"The CVSS Base Score is 10.0 only for Windows. For Linux, Unix and other platforms, the CVSS Base Score is 7.5, and the impacts for Confidentiality, Integrity and Availability are Partial+.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1990",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Business Intelligence Enterprise Edition component in Oracle Application Server 10.1.3.4.1 allows local users to affect confidentiality via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Business Intelligence Enterprise Edition en Oracle Application Server v10.1.3.4.1 permite a usuarios locales afectar la confidencialidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC710DC-5B41-4DE4-9D75-D467E1245093"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/59117",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/37099",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36749",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023058",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/59117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1991",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC.  NOTE: the previous information was obtained from the October 2009 CPU.  Oracle has not commented on claims from an established researcher that this is for multiple SQL injection vulnerabilities via the (1) idx_owner or (2) idx_name parameters to the create_tables procedure."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Text en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5, y v10.2.0.4 permite a los usuarios remotos autenticados comprometer la confidencialidad e integridad, relativo a CTXSYS.DRVXTABC."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432A3020-9977-4A10-9CDA-3A71E83F63F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C10722-4CC7-4C06-8DBC-4D96307DB41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC251D-9313-4A54-9623-51DC0AEC46FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/59113",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36748",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/59113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1992",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Core RDBMS en Oracle Database v9.2.0.8, v10.1.0.5 y v10.2.0.4, permite a atacantes remotos comprometer la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432A3020-9977-4A10-9CDA-3A71E83F63F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC251D-9313-4A54-9623-51DC0AEC46FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36742",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ],
      "evaluatorImpact" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html\r\n\r\nThis vulnerability only affects the Windows platform.\r\n\r\nThe following Oracle Database Server vulnerability included in this Critical Patch Update affects client-only installations: CVE-2009-1992."
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1993",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Application Express component in Oracle Database 3.0.1 allows remote authenticated users to affect confidentiality and integrity, related to FLOWS_030000.WWV_EXECUTE_IMMEDIATE."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente Application Express en Oracle Database v3.0.1, permite a usuarios autenticados remotamente comprometer la confidencialidad e integridad. Relacionado con el FLOWS_030000.WWV_EXECUTE_IMMEDIATE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A8C4BDA-F35D-416B-8C19-BE75DE4CF664"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36759",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ],
      "evaluatorImpact" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html\r\n\r\n\"Overview of Oracle Application Express\r\n\r\nOracle Application Express is a rapid web application development tool for the Oracle Database. In Oracle Database releases up to and including 10g Release 2, Oracle Application Express was separately installed from a Companion CD supplied with the Oracle Database CD set or from a package downloaded from an Oracle web site. If you have not installed Oracle Application Express from the companion CD or from a packaged download from an Oracle web site, no further action is required. From Oracle Database 11g onwards, Oracle Application Express is included in the default installation of the Oracle Database.\r\n\r\nIf you have Oracle Application Express installed in an Oracle Database home, then refer to Critical Patch Update October 2009 Patch Availability Document for Oracle Products, My Oracle Support Note 881382.1 for the version to be installed. \""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1994",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability, related to MDSYS.PRVT_CMT_CBK."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Spatial en Oracle Database v10.1.0.5 permite a usuarios autentificados remotamente afecta la confidencialidad, integridad y disponibilidad, relacionado con MDSYS.PRVT_CMT_CBK."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36744",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1995",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_AQ_INV."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente Advanced Queuing en Oracle Database v10.2.0.4 y v11.1.0.7, permite a usuarios autenticados remotamente comprometer la confidencialidad e integridad. Relacionado con el SYS.DBMS_AQ_INV."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC251D-9313-4A54-9623-51DC0AEC46FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEDE937-C3D7-421C-9F70-F546AB823E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/59109",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36752",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/59109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1997",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Authentication component in Oracle Database 10.2.0.3 and 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Authentication en Oracle Database v10.2.0.3 y v11.1.0.7 permite a atacantes remotos afectar la confidencialidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED41086B-840A-4B39-B249-461A4B00B57B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEDE937-C3D7-421C-9F70-F546AB823E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36751",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1998",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Communications Order and Service Management component in Oracle Industry Applications 2.8.0, 6.2.0, 6.3.0, and 6.3.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Communications Order y Service Management de Oracle Industry Applications v2.8.0, v6.2.0, v6.3.0 y v6.3.1, permite a usuarios autenticados en remoto comprometer la confidencialidad e integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:industry_applications:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54AFA253-F629-4207-99CA-3E2C26C4D24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:industry_applications:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DF6C0B-AEE7-48C5-807F-07384B86C794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:industry_applications:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE52D3AB-5E7A-4A35-96EE-28C351DDDA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:industry_applications:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BC9765-896C-4898-AEC8-787A0E77B810"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/59114",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36775",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023060",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/59114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1999",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Business Intelligence Enterprise Edition component in unspecified Oracle Application Server versions allows remote attackers to affect integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Intelligence Enterprise Edition en versiones no específicas en Oracle Application Server permite a los atacantes remotos comprometer la integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD38E99A-864A-4E99-B6A5-12AACDA822E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/59118",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/37099",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36746",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023058",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/59118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ],
      "evaluatorImpact" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html\r\n\r\n\"Fixed in all supported versions. No patch provided in this Critical Patch Update.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2000",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente   Authentication en Oracle Database v10.1.0.7, permite a atacantes remotos comprometer la confidencialidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEDE937-C3D7-421C-9F70-F546AB823E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36756",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2001",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.657",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the PL/SQL component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente PL/SQL en Oracle Database v10.2.0.4 y 11.1.0.7 permite a los usuarios remotos autenticados comprometer la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC251D-9313-4A54-9623-51DC0AEC46FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEDE937-C3D7-421C-9F70-F546AB823E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36743",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://secunia.com/advisories/37027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2002",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8.1.6, 9.2.3, 10.0.1, 10.2.1, and 10.3.1.0.0 allows remote attackers to affect integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente  WebLogic Portal en BEA Product Suite v8.1.6, v9.2.3, v10.0.1, v10.2.1, y v10.3.1.0.0 permite a atacantes remotos afectar en la integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AE14A8-253D-4093-8856-0D686CDF6EE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0ABBCC-A586-490D-A9ED-2A641E197F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E81EB8-8581-45F2-BE9B-05E97B2DF4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9BD10E5-868A-47F3-88F4-21902B6E803B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.3.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2B7E0E-66C1-4F01-AB1B-05050DF7C047"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36774",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023062",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3392",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Agile Engineering Data Management (EDM) component in Oracle E-Business Suite 6.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Agile Engineering Data Management (EDM) de Oracle E-Business Suite v6.1.0.0, permite a atacantes remotos comprometer la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B2807F-60F1-4E10-9BCA-37D679D3BCFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36770",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023059",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3393",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente en Oracle E-Business Suite v11.5.10.2 permite a atacantes remotos afectar la integridad a través de vectores no conocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36757",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023059",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3395",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the AutoVue component in Oracle E-Business Suite 19.3.2 allows remote attackers to affect availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no específica en el componente AutoVue en Oracle E-Business Suite v19.3.2 permite a a atacantes remotos afectar a la disponibilidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:19.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDD06C9-BC1B-48F8-87EC-3015A75A32B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36761",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023059",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3396",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.780",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2.3, 10.0.1, and 10.3 allows remote attackers to affect integrity, related to WLS Console."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente WebLogic Server en BEA Product Suite v9.0, v9.1, v9.2.3, v10.0.1 y v10.3, permite a atacantes remotos comprometer la integridad. Relacionado con el WLS Console."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09215858-8A4F-4595-98DD-39027EC6CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0ABBCC-A586-490D-A9ED-2A641E197F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E81EB8-8581-45F2-BE9B-05E97B2DF4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36766",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023062",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3397",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Application Object Library en Oracle E-Business Suite v12.0.6 y v12.1.1 permite a los atacantes remotos comprometer la confidencialidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADF7F7A-BE8A-4C98-AA90-66FFF7715049"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36762",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023059",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3399",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0.6 and 8.1.5 allows remote attackers to affect integrity, related to WLS Console."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente WebLogic Server de BEA Product Suite v7.0.6 y v8.1.5 , permite a atacantes remotos comprometer la integridad. Está relacionado con WLS Console."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "899E4712-E866-45FD-9667-4220D499A5F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36769",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023062",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3400",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Advanced Benefits component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente Oracle Advanced Benefits en Oracle E-Business Suite v11.5.10.2, v12.0.6 y v12.1.1, permite a usuarios autenticados remotamente comprometer la  confidencialidad e integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADF7F7A-BE8A-4C98-AA90-66FFF7715049"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36767",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023059",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3401",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows local users to affect confidentiality via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Applications Technology Stack de Oracle E-Business Suite v11.5.10.2, v12.0.6 y v12.1.1, permite a usuarios locales comprometer la confidencialidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADF7F7A-BE8A-4C98-AA90-66FFF7715049"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36768",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023059",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3402",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote authenticated users to affect confidentiality via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente Applications Framework en Oracle E-Business Suite v11.5.10.2, v12.0.6 y v12.1.1, permite a usuarios autenticados remotamente comprometer la  confidencialidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:12.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADF7F7A-BE8A-4C98-AA90-66FFF7715049"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36764",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023059",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3403",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.4: JRE/JDK, 1.4.2, 5, and, and 6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: this issue subsumes CVE-2009-2670, CVE-2009-2671, CVE-2009-2672, CVE-2009-2673, CVE-2009-2674, CVE-2009-2675, and CVE-2009-2676."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente JRockit en BEA Product Suite R27.6.4: JRE/JDK, v1.4.2, 5, y, y v6 permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos. NOTA: Esta vulnerabilidad influye CVE-2009-2670, CVE-2009-2671, CVE-2009-2672, CVE-2009-2673, CVE-2009-2674, CVE-2009-2675, y CVE-2009-2676."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bea_product_suite:r27.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9D26D0-4E96-4874-8491-11735D0CB613"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ],
      "evaluatorImpact" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html\r\n\r\n\"Sun MicroSystems released a Security Alert in August 2009 to address multiple vulnerabilities affecting the Sun Java Runtime Environment. Oracle CVE-2009-3403 refers to the advisories that were applicable to JRockit from the Sun Alert. The CVSS score of this vulnerability CVE# reflects the highest among those fixed in JRockit. The score is calculated by National Vulnerability Database (NVD), not Oracle. The complete list of all advisories addressed in JRockit under CVE-2009-3403 is as follows: CVE-2009-2670, CVE-2009-2671, CVE-2009-2672, CVE-2009-2673, CVE-2009-2674, CVE-2009-2675, CVE-2009-2676.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3404",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.920",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the PeopleSoft PeopleTools & Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.23 allows remote authenticated users to affect integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente PeopleSoft PeopleTools & Enterprise Portal en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne v8.49.23, permite a usuarios autenticados remotamente comprometer la  integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F9B181-59A5-41B3-A10C-6ACA81FFF346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38E95031-1BFB-48A0-A367-796FB0C43A3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36773",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023061",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3405",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.1.4 allows remote authenticated users to affect integrity and availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente JD Edwards Tools de Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne v8.98.1.4, permite a usuarios autenticados en remoto comprometer la integridad y disponibilidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 4.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.98.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768E4605-1871-435B-8FB6-DDFBD17355CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.98.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E4D5EA-6AE3-4F81-AFD0-CBB8E25C02E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36772",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023061",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3406",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:00.967",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.2.1 allows remote authenticated users to affect confidentiality via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente JD Edwards Tools en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne v8.98.2.1 permite a usuarios autentificados remotamente afectar la confidencialidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.98.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DB2A4D7-4E33-42DC-ABA1-7F0C035974ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.98.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C73108-878A-45F1-A764-A19CE936E221"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36771",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023061",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3407",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:01.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2009-0974 and CVE-2009-0983."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Portal en Oracle Application Server 10.1.2.3 y 10.1.4.2 permite a atacantes remotos afectar la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-0974 y CVE-2009-0983."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C617ED-3D8C-4B64-A56A-30BDE6E9B8D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAFAB607-303D-4E51-B586-59E6B452BC16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/59116",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://secunia.com/advisories/37099",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36753",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023058",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://osvdb.org/59116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3408",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:01.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente Oracle Application Object Library en Oracle E-Business Suite v11.5.10, permite a atacantes remotos comprometer la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B1BE09-4A96-41A3-AA1D-74533F396998"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023059",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3409",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2009-10-22T18:30:01.030",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the PeopleSoft Enterprise HCM (TAM) component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 9.0 Bundle 10 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente PeopleSoft Enterprise HCM (TAM) de Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne v9.0 Bundle 10, permite a usuarios autenticados en remoto comprometer la confidencialidad y la integridad a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:9.0:bundle10:*:*:*:*:*:*",
            "matchCriteriaId" : "F04181E3-4D46-475F-B639-8CD206B1F793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:9.0:bundle10:*:*:*:*:*:*",
            "matchCriteriaId" : "1962EB4D-FA1A-4646-B8F4-8F4982C5FB3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36776",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.securitytracker.com/id?1023061",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-294A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1297",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2009-10-23T18:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iscsi_discovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise (SLE) 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file that has a predictable name."
      }, {
        "lang" : "es",
        "value" : "iscsi_discovery en open-iscsi en SUSE openSUSE versión 10.3 hasta la 11.1 y SUSE Linux Enterprise (SLE) versión 10 SP2 y 11, y otros sistemas operativos, permite a los usuarios locales sobrescribir archivos arbitrarios por medio de un ataque de enlace simbólico (symlink) en un archivo temporal no especificado que tiene un nombre predecible."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:suse_linux:10:sp2:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "3DC820C5-6283-4EB7-A5C7-B28EFEFC3926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:suse_linux:11:-:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "BB545D91-1C4C-4692-B01A-B8DAE4A958BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B68DF-1440-4587-8458-9C5F4D1E43F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "security@ubuntu.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:109",
        "source" : "security@ubuntu.com"
      }, {
        "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0241",
        "source" : "security@ubuntu.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-23T18:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via (1) a crafted Content-Length HTTP header or (2) a large HTTP request, related to an integer overflow that triggers a heap-based buffer overflow.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-0840."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamiento de búfer basados en memoria dinámica en la función readPostBody en cgiutil.c de mapserv en MapServer v4.x hasta v4.10.4 y v5.x anteriores a v5.4.2, permite a atacantes remotos ejecutar código de su elección a través de (1) una cabecera de HTTP \"Content-Length\" manipulada o (2) una petición HTTP larga, relacionado con un desbordamiento de entero que provoca una desbordamiento de búfer basado en memoria dinámica. NOTA: Esta vulnerabilidad existe por un corrección incompleta de CVE-2009-0840."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7362D32E-07AF-4DFB-A7EE-B92A2949FCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16812C55-8E9F-4035-92E6-D2C7AF4F5B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C11F257-809F-4F7C-B5B1-5D407B983DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFFE501-B4E0-4352-8C8D-44531E8A6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "426DC6E0-2DA2-4815-B08B-EE2CF20AE3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBEE70D8-0EC2-4855-81C8-9FECCD9C16BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE55464C-FD27-47BF-9941-26EE7968BF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A6111-3A73-4033-8333-4929A6A22CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4F9152-4BA9-4742-9041-9707BB4B505F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F27BB1D-165E-4414-AB9B-5BBDF4268F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9305883D-8626-448C-8B1A-074158F518DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "04D30449-7EEB-42C4-9F11-4E6EE39C18F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE53FF73-329B-4384-B636-2F4050778FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B52B92DB-535F-45B7-AF32-B97216A4C4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.8.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C410FF2E-E1C6-4238-94ED-3EC6389C961D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279DE3C1-7BEB-43A4-A91B-06D3A53C30A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "279EDC4E-87CC-48ED-B735-84F96DC5796E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "53AB964F-61BD-4EC5-8469-7DB371154455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "C27C5F5A-6B68-4723-809B-C482238F9647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "43CFB610-77A2-436E-ADD0-C0D647AF56DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED26BFDF-0C8C-4BEF-BB2D-FA7ADB95AFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2E86BD-2358-46D5-BBB5-147168001578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6257B30-61DC-4838-92E6-D9938224BFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:4.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F28AEC9-4A65-4C66-90B2-4B3B83B2C91D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C661B582-E2F6-4E91-A47C-E91CCB0ECF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E60110D-1CED-47BE-8565-FE858BEFF44B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "8B061F26-EF3F-48CC-A974-5B49A622C5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "0870B801-E121-47D8-9C88-B01C7AB6ED3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F320C0-1A33-4768-9BB1-09C6554A9C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "81C28558-F40D-48B9-B98C-F30709C89AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "DCEF61F4-F4CE-4E33-A67C-17B1D0185BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "65E266D2-C1F2-4400-9E41-AEB2F116C733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9161B916-5EED-46C4-8E0C-515A0B6D2902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9689CB4-A70C-42D7-91E0-68057D9D4779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6767A7E5-7A2C-452D-A6EB-9C61B43DC39B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "119B427D-87AC-4DD8-AD13-B8CFC847A947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "57221C0B-EE09-4EB6-AE21-3C31393EB922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "74EEC8BC-A00F-4DCF-B787-5B95699DBD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9030BE8-663A-4F46-B255-0AEBFD790DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A456E60-8073-4726-AC77-573DCA877FAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6832D8-7E2B-457A-ABBC-09761DD73ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "38513CAF-212E-495E-844F-09554FAC0B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "20037250-ACD8-4425-898E-A5E857E3D159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.4.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "6173ECB3-07D7-43D7-8B0A-C524C5E9F231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "753D71D6-4535-475D-96F1-42217F9ADE22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "517783AC-5678-48B9-A3FE-BEDCE1176651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "577E45A9-D259-4DD3-803F-459640673865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203F6A08-17BF-4F82-82C5-E0653C2100F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E939104D-9765-4DBF-AA1D-97EBBE515972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umn:mapserver:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "93188DA2-4137-4291-9FDC-469D933C9602"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security.debian.org/pool/updates/main/m/mapserver/mapserver_4.10.0-5.1+etch4.diff.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://security.debian.org/pool/updates/main/m/mapserver/mapserver_5.0.3-3+lenny4.diff.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://trac.osgeo.org/mapserver/browser/tags/rel-5-4-2/mapserver/HISTORY.TXT",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trac.osgeo.org/mapserver/ticket/2943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/01/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/01/6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/m/mapserver/mapserver_4.10.0-5.1+etch4.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://security.debian.org/pool/updates/main/m/mapserver/mapserver_5.0.3-3+lenny4.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://trac.osgeo.org/mapserver/browser/tags/rel-5-4-2/mapserver/HISTORY.TXT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trac.osgeo.org/mapserver/ticket/2943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/01/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/07/01/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3616",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-23T18:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establishing a connection from a VNC client and then (1) disconnecting during data transfer, (2) sending a message using incorrect integer data types, or (3) using the Fuzzy Screen Mode protocol, related to double free vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de uso anterior a la liberación en vnc.c del servidor VNC en QEMU v0.10.6 y anteriores, permite a usuarios del sistema anfitrión ejecutar código de su elección en el sistema hospedado, estableciendo una conexión desde el cliente VNC y a continuación (1) desconectando durante la transferencia de datos, (2) enviando un mensaje utilizando tipos de datos enteros incorrectos, o (3) utilizando el protocolo Fuzzy Screen Mode, relativo a una doble liberación de vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.6",
            "matchCriteriaId" : "27270035-8337-4B8E-8305-951D7063F2D1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.savannah.gnu.org/cgit/qemu.git/commit/?id=198a0039c5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/qemu.git/commit/?id=753b405331",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=qemu-devel&m=124324043812915",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHEA-2009-1272.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/16/5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/16/8",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36716",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=501131",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=505641",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=508567",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/qemu.git/commit/?id=198a0039c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/qemu.git/commit/?id=753b405331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=qemu-devel&m=124324043812915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHEA-2009-1272.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/16/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/16/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=501131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=505641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=508567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3622",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-23T18:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Algorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote attackers to cause a denial of service (CPU consumption and server hang) via a long title parameter in conjunction with a charset parameter composed of many comma-separated \"UTF-8\" substrings, related to the mb_convert_encoding function in PHP."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de complejidad algorítmica en wp-trackback.php en WordPress anteriores a v2.8.5 permite a atacantes remotos provocar una denegación de servicio (Consumo de CPU y cuelgue del servidor) a través de un valor largo en el parámetro \"title\" en conjunción con un parámetro \"charset\" compuesto por muchas subcadenas \"UTF-8\" separadas por coma, está relacionado con la función mb_convert_encoding en PHP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.4",
            "matchCriteriaId" : "62D2F1D6-CDAE-4870-8C54-319811E9A93C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://codes.zerial.org/php/wp-trackbacks_dos.phps",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125612393329041&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125614592004825&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rooibo.wordpress.com/2009/10/17/agujero-de-seguridad-en-wordpress/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Oct/263",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37088",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security-sh3ll.blogspot.com/2009/10/wordpress-resource-exhaustion-denial-of.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023072",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://wordpress.org/development/2009/10/wordpress-2-8-5-hardening-release/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/59077",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2986",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=530056",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53884",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://codes.zerial.org/php/wp-trackbacks_dos.phps",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125612393329041&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125614592004825&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://rooibo.wordpress.com/2009/10/17/agujero-de-seguridad-en-wordpress/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Oct/263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security-sh3ll.blogspot.com/2009/10/wordpress-resource-exhaustion-denial-of.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://wordpress.org/development/2009/10/wordpress-2-8-5-hardening-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/59077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=530056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-23T19:30:00.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mutt_ssl.c in mutt 1.5.19 and 1.5.20, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."
      }, {
        "lang" : "es",
        "value" : "mutt_ssl.c en mutt 1.5.19 y 1.5.20, cuando usa OenSSL, no maneja de forma adecuada el caracter  '\\0' en un nombre de dominio, dentro del campo sujeto del Common Name (CN) en los certificados X.509, lo que permite a atacantes man-in-the-middle, espíar servidores SSL de su elección a través de certificados manipulados concedidos por Autoridades Certificadoras, esta relacionado con CVE-2009-2408."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.5.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89C33B31-B9BC-4E43-8221-219380B4B682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.5.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "591AA471-643C-49FB-8922-F91774946177"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDA1CA86-1405-4C25-9BC2-5A5E6A76B911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.mutt.org/trac/changeset/6016:dc09812e63a3/mutt_ssl.c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125198917018936&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125369675820512&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.mutt.org/trac/changeset/6016:dc09812e63a3/mutt_ssl.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125198917018936&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125369675820512&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of mutt as shipped with Red Hat Enterprise Linux 3, 4, or 5.\n",
        "lastModified" : "2009-10-26T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-23T19:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mutt_ssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate."
      }, {
        "lang" : "es",
        "value" : "En el archivo mutt_ssl.c en mutt versión 1.5.16 y otras versiones anteriores a 1.5.19, cuando es usado OpenSSL, no comprueba el nombre de dominio en el campo Common Name (CN) de un certificado X.509, que permite a los atacantes de tipo man-in-the-middle falsificar servidores SSL por medio de un certificado válido arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5.16",
            "versionEndExcluding" : "1.5.19",
            "matchCriteriaId" : "7A318134-FDFF-4D07-9DCD-7C7F04148552"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDA1CA86-1405-4C25-9BC2-5A5E6A76B911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.mutt.org/trac/ticket/3087",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125198917018936&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/26/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://dev.mutt.org/trac/ticket/3087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125198917018936&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/26/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-3766\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact, a future update may address this flaw.",
        "lastModified" : "2009-11-26T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-23T19:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."
      }, {
        "lang" : "es",
        "value" : "libraries/libldap/tls_o.c en OpenLDAP, cuando se usa OpenSSL, no maneja de forma adecuada el caracter  '\\0' en un nombre de dominio, dentro del campo sujeto del Common Name (CN) en los certificados X.509, lo\r\nque permite a atacantes man-in-the-middle, espíar servidores SSL de su elección a través de certificados manipulados concedidos por Autoridades Certificadoras, esta relacionado con CVE-2009-2408.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.18",
            "matchCriteriaId" : "1479E6E9-32C0-437A-97D0-896D354BCF46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDA1CA86-1405-4C25-9BC2-5A5E6A76B911"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.6.2",
            "matchCriteriaId" : "8333C974-DF5B-4098-A766-EB8D875817F5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB5EDB-520B-4DEF-B06E-65CA13152824"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036138.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125198917018936&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125369675820512&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38769",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40677",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201406-36.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openldap.org/devel/cvsweb.cgi/libraries/libldap/tls_o.c.diff?r1=1.8&r2=1.11&f=h",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0543.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2011-0896.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3056",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1858",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11178",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7274",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036138.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125198917018936&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125369675820512&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201406-36.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openldap.org/devel/cvsweb.cgi/libraries/libldap/tls_o.c.diff?r1=1.8&r2=1.11&f=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0543.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2011-0896.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3767\n\nThis issue was addressed in the openldap packages as shipped with Red Hat Enterprise Linux 5 and 4 via: https://rhn.redhat.com/errata/RHSA-2010-0198.html and https://rhn.redhat.com/errata/RHSA-2010-0543.html respectively.\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact, a future openldap update may address this flaw in Red Hat Enterprise Linux 3.",
        "lastModified" : "2010-07-20T00:00:00"
      }, {
        "organization" : "OpenLDAP",
        "comment" : "OpenLDAP reported this issue and published a patch for it on 2009-07-30. The patch was included in OpenLDAP 2.4.18 which was released on 2009-09-06. The current release of OpenLDAP is available from the following location:\n\nhttp://www.openldap.org/software/download/",
        "lastModified" : "2009-10-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3611",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-26T16:30:00.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "common/snapshots.py in Back In Time (aka backintime) 0.9.26 changes certain permissions to 0777 before deleting the files in an old backup snapshot, which allows local users to obtain sensitive information by reading these files, or interfere with backup integrity by modifying files that are shared across snapshots."
      }, {
        "lang" : "es",
        "value" : "common/snapshots.py en Back In Time (también conocido como backintime) v0.9.26 cambia ciertos permisos al valor 0777 antes de eliminar los ficheros en una copia de seguridad antigua de un punto de restauración, lo que permite a usuarios locales obtener información sensible mediante la lectura de esos ficheros, o interferir con la integridad de la copia de seguridad modificando ficheros que están compartidos a través de puntos de restauración.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:le-web:backintime:0.9.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A8AFD9-1CE5-4985-911E-648A7206B365"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB5EDB-520B-4DEF-B06E-65CA13152824"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543785",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=289047",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://ftp.debian.org/debian/pool/main/b/backintime/backintime_0.9.26-3.diff.gz",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125553645511436&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125554894700336&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/backintime/+bug/434256",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=520210",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00821.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00823.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=289047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://ftp.debian.org/debian/pool/main/b/backintime/backintime_0.9.26-3.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125553645511436&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125554894700336&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/backintime/+bug/434256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=520210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00821.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00823.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3625",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-26T16:30:00.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in www/index.php in Sahana 0.6.2.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en www/index.php en Sahana v0.6.2.2, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) en el parámetro mod."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sahana:sahana:0.6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7010EC-FC88-4F06-B7EB-2D361BA54DA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sahana.cvs.sourceforge.net/viewvc/sahana/sahana-phase2/www/index.php?r1=1.83&r2=1.84",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_name=5d9043b70910191044l4bb0178fs563a5128a0f5db01%40mail.gmail.com&forum_name=sahana-maindev",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/22/3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/22/6",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36826",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=530255",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://fedorahosted.org/rel-eng/ticket/2635",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sahana.cvs.sourceforge.net/viewvc/sahana/sahana-phase2/www/index.php?r1=1.83&r2=1.84",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_name=5d9043b70910191044l4bb0178fs563a5128a0f5db01%40mail.gmail.com&forum_name=sahana-maindev",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/22/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/22/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=530255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://fedorahosted.org/rel-eng/ticket/2635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-26T17:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Moodle Course List 6.x before 6.x-1.2, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Moodle Course List v6.x anteriores a v6.x-1.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adam_gerson:moodle_courselist:6.x-1.2:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "87DA686A-DCF9-4195-80BD-6D48B1E122BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adam_gerson:moodle_courselist:6.x-1.2:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "88DF37C4-2FC0-43CF-BB70-391304590477"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/610986",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/59100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37126",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36787",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3001",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/610986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/59100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-26T17:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in vCard 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the addition of the theme_vcard function to a theme and the use of default content."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo para Drupal vCard v5.x anteriores a v5.x-1.4 y v6.x anteriores a v6.x-1.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados, relativos a añadir la función theme_vcard."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_auditor:vcard:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68E24484-76FB-47A3-BA11-AB184EF0132C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_auditor:vcard:5.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D46E1985-7447-45AB-A134-873ACC037745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_auditor:vcard:5.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3DDF905-F7F8-406C-B0C8-AC8C2C7F35B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_auditor:vcard:5.x-1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A49EFFA-FE52-45F6-87B0-20FBDEC2506A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_auditor:vcard:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C7798D-100B-492C-B8E4-45832E9858F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_auditor:vcard:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4039EB8-B9E2-4A9F-93AE-2B6C8CF9F54F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_auditor:vcard:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5ED742A-5E9D-4ABD-ADCA-FA19294FA8F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_auditor:vcard:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DE2004-2E0B-4F5D-9A8D-471105CA1C54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_auditor:vcard:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB8891E-ADE2-4D6A-8EBE-A14044CCAC59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/610416",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/610420",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/610996",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37127",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3002",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/610416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/610420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/610996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-26T17:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Abuse 5.x before 5.x-2.1 and 6.x before 6.x-1.1-alpha1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Abuse v5.x anteriores a v5.x-2.1 y v6.x anteriores a v6.x-1.1-alpha1, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de véctores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ashok_modi:abuse:5.x-1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "3E1DAD14-7289-4D27-95A9-48A2531B2A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ashok_modi:abuse:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBF43A6-9FAD-4646-913F-9572220493C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ashok_modi:abuse:5.x-2.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43207B8E-B1B7-40B8-80C2-30B82FFD5CB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/610784",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/610900",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/611078",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37129",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36791",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/610784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/610900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/611078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-26T17:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The filefield_file_download function in FileField 6.x-3.1, a module for Drupal, does not properly check node-access permissions for Drupal core private files, which allows remote attackers to access unauthorized files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La función filefield_file_download en módulo de Drupal, FileField v6.x-3.1, no comprueba de forma adecuada los permisos de acceso al nodo para los ficheros privados del núcleo, lo que permite a los atacantes remotos acceder a ficheros no autorizados a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quicksketch:filefield:6.x-3.1:*:*:*:*:drupal:*:*",
            "matchCriteriaId" : "5157C153-BECD-4169-BCF7-FB8B6D99FB98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/files/issues/filefield-node-access-fix-516104-3.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/516104",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://drupal.org/node/609874",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://drupal.org/node/611128",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37130",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36792",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53897",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://drupal.org/files/issues/filefield-node-access-fix-516104-3.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/516104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://drupal.org/node/609874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://drupal.org/node/611128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-26T17:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Userpoints 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with \"View own userpoints\" permissions to read the userpoint data of arbitrary users via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el módulo para drupal Userpoints v6.x anteriores a 6.x-1.1, permite a usuarios remotos autenticado, con permisos \"View own userpoints\", leer los datos de puntos de usuario de usuarios de su elección a través de vectores de ataque desconocidos.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2bits:userpoints:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D003179B-E321-467C-962E-9D57DEBB2EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2bits:userpoints:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E44176-5E7E-4BA3-B6C5-32932BE70691"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/610818",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/610828",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/59124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37123",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36786",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2998",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/610818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/610828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/59124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-26T17:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vector."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo para Drupal Simplenews Statistics v6.x anteriores a v6.x-2.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del un vector no especificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E5DB81-4CAD-4A99-9470-2CE3844BD69D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2B09EB-73C8-42C9-A997-BA259C32CE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3AA66A-3888-499B-86E9-5C78C89306FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3DAFA9-41B8-46D9-BD3F-AA9B5F0CF6FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/590098",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/611002",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37128",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36790",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/590098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/611002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-26T17:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open redirect vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de redirección abierta en el módulo para drupal Simplenews Statistics v6.x anteriores a v6.x-2.0, permite a atacantes remotos redireccionar a usuarios a sitios web de su elección y llevar a cabo ataques de phishing a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E5DB81-4CAD-4A99-9470-2CE3844BD69D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2B09EB-73C8-42C9-A997-BA259C32CE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3AA66A-3888-499B-86E9-5C78C89306FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3DAFA9-41B8-46D9-BD3F-AA9B5F0CF6FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/590098",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/611002",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37128",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36790",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/590098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/611002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-26T17:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allow remote attackers to hijack the authentication of arbitrary users via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en el módulo de Drupal Simplenews Statistics v6.x anteriores a v6.x-2.0, permite a atacantes remotos secuestras la autenticación de usuarios de su elección a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E5DB81-4CAD-4A99-9470-2CE3844BD69D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2B09EB-73C8-42C9-A997-BA259C32CE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3AA66A-3888-499B-86E9-5C78C89306FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E3DAFA9-41B8-46D9-BD3F-AA9B5F0CF6FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/590098",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/611002",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37128",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36790",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/590098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/611002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-26T17:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Organic Groups (OG) Vocabulary 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the group title."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de tipo cross-site scripting (XSS) en Organic Groups (OG) Vocabulary versiones 5.x anteriores a 5.x-1.1 y versiones 6.x anteriores a 6.x-1.1, un módulo para Drupal, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del título group."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:og_vocab:5.x-1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DD25E2-9A5F-47B8-B3AC-EAC2A2038D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moshe_weitzman:og_vocab:5.x-1.x-dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E3FF10-3656-426F-BBB1-35D103BEE915"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/605094",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/610948",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/621960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/623674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37125",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36784",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3000",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/605094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/610948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/621960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://drupal.org/node/623674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/59129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/59673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-26T17:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "files.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal attacks and read arbitrary files via the file parameter with \"logs/\" in between two . (dot) characters, which is filtered into a \"../\" sequence."
      }, {
        "lang" : "es",
        "value" : "files.php en Vivvo CMS v4.1.5.1 permite a atacates remotos a conducir ataques de directorio transversal y leer ficheros de su elección a través del parámetro \"file\" con \"logs/\" entre dos caracteres . (punto), que es filtrado en una secuencia \"../\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vivvo:vivvo:4.1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C77B153E-144B-4502-8AA8-03517C217DA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37117",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507358/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36783",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-75.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507358/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-75.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-26T17:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmuser (aka Username) parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en OpenDocMan v1.2.5, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro frmuser (también conocido como Username)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendocman:opendocman:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E59FF8B-094D-4C8E-A8F5-D6177D4924CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/59301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/30750",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0910-exploits/opendocman-sqlxss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36777",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/30750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0910-exploits/opendocman-sqlxss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-26T17:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in OpenDocMan 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the last_message parameter to (1) add.php, (2) toBePublished.php, (3) index.php, and (4) admin.php; the PATH_INFO to the default URI to (5) category.php, (6) department.php, (7) profile.php, (8) rejects.php, (9) search.php, (10) toBePublished.php, (11) user.php, and (12) view_file.php; and (13) the caller parameter in a Modify User action to user.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en OpenDocMan v1.2.5, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"last_message\" sobre (1) add.php, (2) toBePublished.php, (3) index.php, y (4) admin.php; el parámetro PATH_INFO sobre la dirección Web por defecto (5) category.php, (6) department.php, (7) profile.php, (8) rejects.php, (9) search.php, (10) toBePublished.php, (11) user.php, y (12) view_file.php; y (13) el parámetro caller en una acción Modify User sobre user.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendocman:opendocman:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E59FF8B-094D-4C8E-A8F5-D6177D4924CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/59302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/30750",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0910-exploits/opendocman-sqlxss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36777",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/59303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/59304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/59305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/59306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/59307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/59308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/59309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/59310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/59311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/59312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/30750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0910-exploits/opendocman-sqlxss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-26T17:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in FormMax (formerly AcroForm) evaluation 3.5 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FormMax import (.aim) file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en FormMax (formalmente AcroForm) Evalucación v3.5 ,permite a atacantes remotos causar una denegación de servicio o posiblemente ejecutar código arbitrario a través de fichero de importación FormMax (.aim). NOTA: la procedencia de esta información es desconocida, los detalles se han obtenido de información de terceros.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutepdf:formmax:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB60568-4735-450E-B807-1FB4F819E735"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/59079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/36943",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/36943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-27T16:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmpass (aka Password) parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en OpenDocMan v1.2.5 permite a atacantes remotos ejecutar comandos SQL de su elección a a través del parámetro frmpass (como Password). NOTA: la procedencia de esta información es desconocida, los detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendocman:opendocman:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E59FF8B-094D-4C8E-A8F5-D6177D4924CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/30750",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-27T16:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Amiro.CMS 5.4.0.0 and earlier allows remote attackers to obtain sensitive information via an invalid loginname (\"%%%\") to _admin/index.php, which reveals the installation path and other information in an error message."
      }, {
        "lang" : "es",
        "value" : "Amiro.CMS 5.4.0.0 y versiones anteriores permite a atacantes remotos obtener información sensible mediante un loginname (\"%%%\") no válido a _admin/index.php, el cual revela la ruta de la instalación y otra información adicional en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.0.0",
            "matchCriteriaId" : "8958D062-7F6B-497C-A273-12F537EE47B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:4.0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A538289B-F340-423F-B7D9-93E804B7F700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:4.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F45D39D-2C50-405D-8F0C-5F0BD1FA293E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:4.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7047B7B0-C8F1-49D0-9C38-AFF4CA220BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:4.2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEC5CC9B-6DD1-4474-AD17-F210762ECAF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:4.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA4D3C52-71E2-4F66-855E-49455A84A4AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F270541-3537-42AB-BDEA-CE2C4EE3D906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80D6D34B-B6E8-4DD4-9FE7-815FD34E2017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35FBCDB4-F23D-4CFC-B39B-F76AED4E4EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8378F96-4665-4F21-8434-18E0C77B704F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38E7DE1-D454-4AEE-BFFE-5F4B0D60791E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFB18D0-1757-4CB0-9A94-FABF66C55F5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0910-exploits/ONSEC-09-005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.onsec.ru/vuln?id=12",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2967",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0910-exploits/ONSEC-09-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.onsec.ru/vuln?id=12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-27T16:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Amiro.CMS 5.4.0.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the status_message parameter to (1) /news, (2) /comment, (3) /forum, (4) /blog, and (5) /tags; the status_message parameter to (6) forum.php, (7) discussion.php, (8) guestbook.php, (9) blog.php, (10) news.php, (11) srv_updates.php, (12) srv_backups.php, (13) srv_twist_prevention.php, (14) srv_tags.php, (15) srv_tags_reindex.php, (16) google_sitemap.php, (17) sitemap_history.php, (18) srv_options.php, (19) locales.php and (20) plugins_wizard.php in _admin/; a crafted IMG BBcode tag in the message body of a (21) forum, (22) guestbook, or (23) comment; (24) the content of an avatar file, which is not properly handled by Internet Explorer; and (25) the loginname parameter (aka username) in _admin/index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en Amiro.CMS v5.4.0.0 y anteriores permite a atacantes remotos inyectar código web o HMTL a su elección a través del parámetro status_message en (1) /news, (2) /comment, (3) /forum, (4) /blog, y(5) /tags; el parámetro status_message en (6) forum.php, (7) discussion.php, (8) guestbook.php, (9) blog.php, (10) news.php, (11) srv_updates.php, (12) srv_backups.php, (13) srv_twist_prevention.php, (14) srv_tags.php, (15) srv_tags_reindex.php, (16) google_sitemap.php, (17) sitemap_history.php, (18) srv_options.php, (19) locales.php y(20) plugins_wizard.php en _admin/; una etiqueta manipulada IMG BBcode en el cuerpo del mensaje de (21) forum, (22) guestbook, o (23) comment; (24) el contenido de un archivo avatar, que no es manejado adecuadamente por Internet Explorer; y (25) el parámetro loginname (como username) en _admin/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.0.0",
            "matchCriteriaId" : "8958D062-7F6B-497C-A273-12F537EE47B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:4.0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A538289B-F340-423F-B7D9-93E804B7F700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:4.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F45D39D-2C50-405D-8F0C-5F0BD1FA293E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:4.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7047B7B0-C8F1-49D0-9C38-AFF4CA220BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:4.2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEC5CC9B-6DD1-4474-AD17-F210762ECAF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:4.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA4D3C52-71E2-4F66-855E-49455A84A4AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F270541-3537-42AB-BDEA-CE2C4EE3D906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80D6D34B-B6E8-4DD4-9FE7-815FD34E2017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35FBCDB4-F23D-4CFC-B39B-F76AED4E4EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8378F96-4665-4F21-8434-18E0C77B704F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38E7DE1-D454-4AEE-BFFE-5F4B0D60791E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirocms:amiro.cms:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFB18D0-1757-4CB0-9A94-FABF66C55F5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0910-exploits/ONSEC-09-004.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.onsec.ru/vuln?id=11",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2967",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0910-exploits/ONSEC-09-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.onsec.ru/vuln?id=11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-27T16:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via (1) the pid parameter, which is not properly handled by the store function in modules/forum/class/class.forumposts.php, or (2) the topic_id parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en modules/forum/post.php en RunCMS 2M1 permiten a atacantes remotos autenticados ejecutar comandos SQL de su elección mediante (1) el parámetro \"pid\", el cual no es manejado de manera adecuada por la función store en modules/forum/class/class.forumposts.php o (2) el parámetro \"topic_id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:2m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F681F8-9CD1-41E1-BEED-40DA847C4126"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/9sg_runcms_store_sql.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37137",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://retrogod.altervista.org/9sg_runcms_store_sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-27T16:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a denial of service (application crash) via a long certificate signature."
      }, {
        "lang" : "es",
        "value" : "gpg2.exe en Gpg4win v2.0.1, como el usado en KDE Kleopatra v2.0.11, permite a atacantes remotos causar una denegación de servicio (caída de programa) a través de una firma certificada larga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kde-apps:kleopatra:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528A6E9B-F2DC-46CE-9B02-7EBE9BE4E6CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpg4win:gpg4win:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320392D3-2B1B-4EA2-B779-AA0FCBE0D6ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.packetstormsecurity.com/0910-exploits/gpg2kleo-dos.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36781",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.packetstormsecurity.com/0910-exploits/gpg2kleo-dos.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-27T16:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in feedback_js.php in DedeCMS 5.1 allows remote attackers to execute arbitrary SQL commands via the arcurl parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en feedback_js.php en DedeCMS v5.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro arcurl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dedecms:dedecms:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF6F35C-B193-4FCA-9020-A6ADA6AD857C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/507109/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507109/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-27T16:30:00.453",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in MixVibes 7.043 Pro allows remote attackers to cause a denial of service (crash) via a long string in a .vib file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de buffer basado en pila en MixVibes v7.043 Pro permite a atacantes causar una denegación de servicio (caída) a través de una cadena larga en un archivo .vib."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mixvibes:mixvibes:7.043:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "2AAFCD77-51BD-49E9-A3FC-D3B9253D3D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-27T16:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MixSense DJ Studio 1.0.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string in an .mp3 playlist file."
      }, {
        "lang" : "es",
        "value" : "MixSense DJ Studio v1.0.0.1 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) y posiblemente ejecutar código de su elección mediante una cadena larga en un archivo de lista de reproducción .mp3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kramware:mixsense_dj_studio:1.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA10061-040A-48A3-9264-E689B8A468CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-27T16:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acoustica MP3 Audio Mixer 1.0 and possibly 2.471 allows remote attackers to cause a denial of service (crash) via a long string in a .sgp playlist file."
      }, {
        "lang" : "es",
        "value" : "Acoustica MP3 Audio Mixer v1.0 y probablemente v2.471 permite a atacantes remotos causar una denegación de servicio (caída) a través de una cadena larga en un archivo de lista de reproducción .sgp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acoustica:mp3_audio_mixer:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D55A78-E943-47A2-9165-68AFF9A4413C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acoustica:mp3_audio_mixer:2.471:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819DAFF2-EB85-4267-A81F-45DBB7B3B697"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1958",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-27T16:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Acoustica MP3 Audio Mixer 2.471 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long string in a .M3U playlist file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en Acoustica MP3 Audio Mixer v2.471 permite a atacantes remotos causar una denegación de servicio (caída) o ejecutar código a través de una cadena larga en un archivo de lista .M3U"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acoustica:mp3_audio_mixer:2.471:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819DAFF2-EB85-4267-A81F-45DBB7B3B697"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35902",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1958",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-27T16:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Music Tag Editor 1.61 build 212 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Music Tag Editor v1.61 build 212 permite a atacantes remotos ejecutar código de su elección mediante un fichero MP3 con una etiqueta ID3 larga. NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:assistanttools:music_tag_editor:1.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B58A1C4-906F-4C42-8DD6-1A1FD15C42B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://liquidworm.blogspot.com/2009/07/music-tag-editor-161-build-212-remote.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/55861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35828",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://liquidworm.blogspot.com/2009/07/music-tag-editor-161-build-212-remote.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/55861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-27T16:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in OtsAV DJ trial version 1.85.64.0, Radio trial version 1.85.64.0, TV trial version 1.85.64.0, and Free version 1.77.001 allows remote attackers to execute arbitrary code via a long playlist in an Ots File List (.ofl) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en OtsAV DJ trial v1.85.64.0, Radio trial v1.85.64.0, TV trial v1.85.64.0, y Free version v1.77.001 permite a atacantes remotos ejecutar código de su elección a través de una lista de reproducción larga en un archivo Ots File List (.ofl)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otslabs:otsav_dj:1.85.64.0:trial:*:*:*:*:*:*",
            "matchCriteriaId" : "AE9E5886-CD61-4BC0-B0B5-7AAA45E672DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otslabs:otsav_radio:1.85.64.0:trial:*:*:*:*:*:*",
            "matchCriteriaId" : "E667490D-3F79-4065-A170-5404E856114D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otslabs:otsav_tv:1.85.64.0:trial:*:*:*:*:*:*",
            "matchCriteriaId" : "82092AA4-4D7B-4A3C-9821-95BE314EEBCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/otsav-overflow.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35738",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1861",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/otsav-overflow.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-27T16:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via the (1) forum parameter to modules/forum/post.php and possibly (2) forum_id variable to modules/forum/class/class.permissions.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en RunCMS 2M1, permite a usuarios autenticados remotamente ejecutar comandos SQL de su elección a través del parámetro (1) \"forum\" en modules/forum/post.php y de la variable (2)\"forum_id\" a modules/forum/class/class.permissions.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:2m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F681F8-9CD1-41E1-BEED-40DA847C4126"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/9sg_runcms_forum_sql.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37137",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://retrogod.altervista.org/9sg_runcms_forum_sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-27T16:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Static code injection vulnerability in RunCMS 2M1 allows remote authenticated administrators to execute arbitrary PHP code via the \"Filter/Banning\" feature, as demonstrated by modifying modules/system/cache/bademails.php using the \"Prohibited: Emails\" action, and other unspecified filters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático en RunCMS 2M1 permite a usuarios autenticados remotamente ejecutar código PHP de su elección a través de la característica \"Filter/Banning\", como se ha demostrado modificando modules/system/cache/bademails.php empleando la acción the \"Prohibited: Emails\" y otros filtros no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:2m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F681F8-9CD1-41E1-BEED-40DA847C4126"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/9sg_runcms_forum_sql.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/9sg_runcms_forum_sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-27T16:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RunCMS 2M1, when running with certain error_reporting levels, allows remote attackers to obtain sensitive information via (1) the op[] parameter to modules/contact/index.php or (2) uid[] parameter to userinfo.php, which leaks the installation path in an error message when these parameters are used in a call to the preg_match function."
      }, {
        "lang" : "es",
        "value" : "RunCMS 2M1, cuando se ejecuta con determinados niveles de weeoe_reporting, permite a atacantes remotos obtener información sensible a través de los parámetros (1) op[] a modules/contact/index.php o de (2) uid[] a userinfo.php, que muestra  la ruta de instalación en un mensaje de error cuando éstos parámetros son usados en una llamada a la función preg_match."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:2m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F681F8-9CD1-41E1-BEED-40DA847C4126"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/9sg_runcms_forum_sql.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/9sg_runcms_forum_sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3816",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-28T10:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connections 2.5.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en las páginas Activities en el subsistema Mobile  en IBM Lotus Connections v2.5.0.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_connections:2.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4AD737-9C81-471B-B144-46354AE51E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37106",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024303",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1LO43637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24024303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1LO43637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3817",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-28T10:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in doc/releasenote.php in the BookLibrary (com_booklibrary) component 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter, a different vector than CVE-2009-2637.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivos PHP en doc/releasenote.php en el componente BookLibrary (com_booklibrary) v1.0 para Joomla! permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path, un vector diferente que CVE-2009-2637. NOTA: la procedencia de esta información es desconocida, los detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ordasoft:com_booklibrary:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B801CB-333F-44C6-8DD7-3600C9AF5C2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/36732",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36732/exploit",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2969",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36732/exploit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3818",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-28T10:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the session handling feature in freeCap CAPTCHA (sr_freecap) extension 1.2.0 and earlier for TYPO3 has unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la característica session handling en freeCap CAPTCHA (sr_freecap) extension v1.2.0 y anteriores para TYPO3 tiene un impacto desconocido y vectores atacantes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "2B33C20A-46EF-4FB6-888F-0E92E31006E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "790A1625-537C-4FBB-BCAC-46F4A32F4888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613F12BA-4366-4993-8E5F-01C26B572D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB79D86-0400-4AE9-8B0E-805C33BDAA32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CC3BA3-F385-4AAA-AF3C-095BEDE284BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308D7BF4-B342-4900-B352-17666B3D6D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33273E4-0DC6-41FF-906E-A9F7E578E400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01FD68AD-DADF-4407-86FA-80D19A604E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01EA86C4-A70C-46BF-9A76-21D0DFF9AD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02BB3A9-0F36-4EA0-BFF0-66F6F5248D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDEF1362-E8C7-4FB3-AA07-C0E6480D77E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E43279-701A-492D-B6A7-028114ECE8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B92C37-FC72-48CA-89C9-D9CA1C9C0E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16AC96CB-8EB6-422A-9432-371C978535F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9223DD6A-CD9F-4EC5-8B0F-9CCE888F3A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:0.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC48FC36-81A3-44B8-9265-92C0C4B85AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC4A79C-CC5B-4A2A-8049-B4B28D89FE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3837FB-06B2-4FA5-AFDA-AC31F904254F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "383B783E-10BF-493B-9405-19B4573161FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF5BDFBD-9F3A-4EA0-AC09-6235D2E0C9D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF69BC8-E68A-44C0-B12D-D3DC5AC85B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ADBBC0F-B2F3-4218-9409-EC2A3C21925B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A7CDD5C-1EA1-4F0F-B1B6-4AD505BBAA71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stanislas_rolland:sr_freecap:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0754949-41FA-41E0-8EE1-64E87A6142F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37094",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-28T10:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Random Images (maag_randomimage) extension 1.6.4 and earlier for TYPO3 allows remote attackers to execute arbitrary shell commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en the Random Images (maag_randomimage) extension v1.6.4 y anteriores para TYPO3 permite a atacantes remotos ejecutar comandos de shell a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.4",
            "matchCriteriaId" : "18A420CC-4277-48B2-9A66-6DDAC9044EF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95424F48-8382-4CB2-8646-B4728DCE69FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "170E0D7E-9604-4A0C-829E-BCC4ACBC060F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "283B2C4F-B621-439F-803E-65BA70628662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED37F65-7DC9-4BDE-B263-A438D17D8DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC9A56F4-8AA3-4D34-8AB1-57598BE75046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D49B8DB2-64A4-41FE-B58C-B4306272C30B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02063A7-37EC-4EE4-B125-98D217B7E9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE27643-45FF-4CF0-B371-E44555F19E61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BAC3B6-293E-4069-8F1C-C6D0EEDAC050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7071023B-6A06-4BF9-A09E-7780D0E7492E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63728811-B095-4D78-837F-48090556FA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA50B1AE-62BD-47A9-B5E5-B23FF8BC66A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6C1383-D6BF-4974-BCB2-1508B676F1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0264710-9DED-4CF7-9853-4216CEE4FF58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A038C7D8-B875-4657-A178-3741240835B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1526A5-9A7D-4EC7-870E-5E14736E5401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652CE8EA-395C-4CF9-894F-D65FA8BD9C27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D7BFCD-A90A-4FAA-84E6-82D4DA2F668F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD1EF4C-A164-47FB-9CC3-1FA8C2053C54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C23F763-5691-42F1-97E7-6EF90E5C627D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E85939C-2F7D-4651-8A14-D223A099EBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C38576-EC47-434D-8C1B-0E9188EA7A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B80DE17-8604-4F20-BA02-012A636D7D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B7DC02-697C-4130-ABBA-75BE2716D491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D50E566B-D9C0-402B-B83D-69DE2247EF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16B2B61-2D71-46C9-B38E-32403E39A1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8825D1E-2694-4BF4-A58F-C625C0D0B453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A2B8DE-4516-4F91-A56E-E621F76C3F00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6F8600-1F08-460E-B021-77F8D3209FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793D2B07-3B1D-4E47-9086-A5D5DEB9B1C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D37AE0A4-21BA-47FD-BD83-3A5E9B93969B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDA7AC1-54D1-4F24-A131-221AD172AF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDAE991-4697-4981-ACF0-1A6B512A5B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB2AD0D-44BE-4F38-9290-CA4DD7FC373A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77F4DE7-F986-44F4-A9C8-AE72D6D9A353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C5203A-0BA9-4091-BE77-0297A16502BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AF0510-4807-4554-A6CE-AB3D2018CED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:urs_maag:maag_randomimage:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "229CC6E7-4B2A-4C28-A820-68DDCC23D727"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37095",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-28T10:30:00.827",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Flagbit Filebase (fb_filebase) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en the Flagbit Filebase (fb_filebase) extension v0.1.0 para TYPO3 permite a atacantes remotos ejecutar comandos SQL a su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flagbit:fb_filebase:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9777DA57-CE8E-42D0-865C-46D0C32C2DE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-28T10:30:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Apache Solr Search (solr) extension v1.0.0 para TYPO3 permite a atacantes remotos inyectar código web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF45D7B-17B0-46C2-8AE1-587F7E9DE22A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3822",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-28T10:30:00.877",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat (com_ajaxchat) component 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path] parameter to tests/ajcuser.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de subida de archivos sin restricción en el componente Fiji Web Design Ajax Chat (com_ajaxchat) v1.0 para Joomla! permite a atacantes remotos ejecutar código PHP de su elección a través de URL en el parámetro GLOBALS[mosConfig_absolute_path] en tests/ajcuser.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fijiwebdesign:com_ajaxchat:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01DB091-BCBF-4C91-8D0C-7D7DED729AC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37087",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0910-exploits/joomlaajaxchat-rfi.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36731",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2968",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0910-exploits/joomlaajaxchat-rfi.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/2968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3823",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-28T10:30:00.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magic_quotes_gpc is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the GLOBALS[page] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en myhtml.php en Mobilelib GOLD v3.0, cuando magic_quotes_gpc es activado, permite a atacantes remotos leer archivos de su elección a través de .. (punto punto) en el parámetro GLOBALS[page]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ac4p:mobilelib_gold:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67BDB377-BF02-4DC4-A8ED-1F372398D117"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3824",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-28T10:30:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in include/processor.php in Greenwood PHP Content Manager 0.3.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the content_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en include/processor.php en Greenwood PHP Content Manager v0.3.2 permite a atacantes remotos incluir y ejecutar archivos locales a través de .. (punto punto) en el parámetro content_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michael_j_greenwood:php_content_manager:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95725FF0-4D9D-4BA7-BF46-E3B3A92D402E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3825",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-28T10:30:00.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in GenCMS 2006 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) p parameter to show.php and the (2) Template parameter to admin/pages/SiteNew.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en GenCMS 2006 permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de .. (punto punto) en el (1) parámetro p en show.php y el (2) parámetro Template en admin/pages/SiteNew.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomas_graber:gencms:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFD8E71-103B-4246-8D1F-9A85A3611E2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3639",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-28T14:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, which allows remote attackers to bypass intended client-hostname restrictions via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."
      }, {
        "lang" : "es",
        "value" : "El módulo mod_tls en ProFTPD anterior v1.3.2b, y v1.3.3 anterior v1.3.3rc2, cuando la opción dNSNameRequired TLS es activada, no maneja adecuadamente el caracter '/0' en un nombre de dominio, dentro del campo Subject Alternative Name de un certificado cliente X.509, lo que permite a atacantes remotos eludir las restricciones cliente-hostname a través de un certificado manipulado concedido por una Autoridad Certificadora legítima, esta relacionado con CVE-2009-2408."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd:proftpd:*:a:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.2",
            "matchCriteriaId" : "8ADC9F57-ADAE-4620-97ED-EBF96BEBF3A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd:proftpd:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0629F25F-B9C6-4FC7-B67E-E6B38E59E60B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd:proftpd:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "185E727C-E4DB-4713-866D-957D20838D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd:proftpd:1.3.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B43EDB7-7B67-43E0-AAE9-F8120C6E607C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd:proftpd:1.3.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F615B39A-5E30-454B-B851-14C5735578E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd:proftpd:1.3.2:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5884F593-C977-4AFC-9428-6A915D962C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proftpd:proftpd:1.3.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29FBDF30-0E17-46DA-8548-DEE5E3CD9EAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.proftpd.org/show_bug.cgi?id=3275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125630966510672&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125632960508211&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37131",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37219",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1925",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:288",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36804",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=530719",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53936",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00642.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00649.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.proftpd.org/show_bug.cgi?id=3275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125630966510672&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125632960508211&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=530719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00642.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00649.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3641",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-28T14:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol."
      }, {
        "lang" : "es",
        "value" : "Snort anterior v.2.8.5.1, cuando la opción -v es activada, permite a atacantes remotos causar una denegación de servicio (caída aplicación) a través de un paquete Ipv6 manipulado que usa el protocolo (1) TCP o (2)ICMP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.3.5",
            "matchCriteriaId" : "22D46C54-E778-4B2F-83ED-FE2F5BDB21A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB5D24B-44B7-4BA1-B988-BBB3342F0C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB872377-FADD-4603-8B5E-B07FB623303F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D3E0FE-0557-4B8F-A97B-1FBE6030C8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1FB45D9-AD03-43F0-8349-48E22BEB4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E91565-395C-49C3-9EFA-8C9102542FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F219B8B-4B47-41AB-838C-D0CAA9C1E700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:1.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76ADDBD4-6870-4B3A-9113-FF74F91FA60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7F86C7-1A9D-4B7B-B928-4CCA836B898B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "117FE0B7-B508-4394-8CB3-9511D89DD011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F14606E-17DC-472F-AC73-C2EB809DA6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C55576D9-78CE-4A7E-8671-E1D680823090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9B0FA051-0F54-4555-BEE3-902A0C6AE7BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29313843-C4EB-4EF7-99C9-F8D79D8DF1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E9711-C9BB-4351-A6C3-0DDB26BC4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:2.6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8F630B-DD44-4095-B90D-2D18CD321580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:2.6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE956C2B-8647-497B-A4C1-05A526629B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634BE41F-E9DF-4C32-8604-F607745EBF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:2.7_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C41D0F1-BDB9-4F50-81CF-F5DF07770DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E1A93B0-6B57-4D7C-8CEB-A90435502A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:2.8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F2D004-B87F-4EA4-A798-1991B5BD632E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80841CC2-D80D-4961-A995-81D6B7684733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:2.8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A17D59E1-7B1D-4401-AE39-949331320E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:2.8.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B443015A-8E47-478C-8567-D56095D6B015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:2.8.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394CC663-F87F-4100-ABDD-BA92B3AE7567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:2.8.3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8309F3D-16B2-4061-B08A-E5A6F06E9623"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dl.snort.org/snort-current/release_notes_2851.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125649553414700&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Oct/299",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37135",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023076",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://vrt-sourcefire.blogspot.com/2009/10/snort-2851-release.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/25/5",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/59159",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36795",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3014",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=530863",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53912",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://dl.snort.org/snort-current/release_notes_2851.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125649553414700&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Oct/299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://vrt-sourcefire.blogspot.com/2009/10/snort-2851-release.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/25/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/59159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=530863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-28T14:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service (application hang or loss of blocking functionality) via a long URL with many / (slash) characters, related to \"emergency mode.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búffer en squidGuard v1.3 y v1.4 permite a atacantes remotos causar una denegación de servicio (cuelgue de aplicación o pérdida de la funcionalidad de bloqueo) a través de una URL larga con muchos caracteres / car(barra), relacionado con \"modo emergencia\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squidguard:squidguard:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "505E2348-620E-442D-A636-1CE1792A77C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squidguard:squidguard:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A13B1EC-6F1F-4A9A-A9AC-65548B3E27B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37107",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/59163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507440/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36800",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091015",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3013",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/59163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507440/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-28T14:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamiento de búfer en squidGuard v1.4 permite a atacantes remotos eludir el bloqueo de URL a través de una URL larga, referido a (1)relaciones entre el tamaño de cierto búfer en squidGuard y el tamaño de cierto búfer en Squid y (2) una redirección URL que contiene información sobre las petición URL original."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squidguard:squidguard:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A13B1EC-6F1F-4A9A-A9AC-65548B3E27B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37107",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/59164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507440/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36800",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091019",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3013",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2010/dsa-2040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/59164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507440/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-1563",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2009-10-29T14:30:00.687",
      "lastModified" : "2023-11-07T02:03:56.927",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-0689.  Reason: This candidate is a duplicate of CVE-2009-0689.  Certain codebase relationships were not originally clear.  Notes: All CVE users should reference CVE-2009-0689 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-29T14:30:00.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anteriores a v3.0.15, y v3.5.x anteriores a v3.5.4, permite a atacantes remotos leer la historia de un formulario mediante la falsificación de los eventos de teclado y ratón, que la característica de auto completado rellena los campos del formulario, en un formulario de ataque con entradas del historial."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D595F649-ECBE-45E0-8AAD-BCBC65A654B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE6E920-9A4C-431B-89EA-683A22F15ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-52.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=511615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-52.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=511615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-29T14:30:00.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by creating JavaScript web-workers recursively."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de uso después de la liberación en Mozilla Firefox v3.5.x anteriores a v3.5.4 permite a atacantes remotos producir una denegación de servicio (caída de aplicación) o posiblemente ejecutar código arbitrario mediante la creación de web-workers de JavaScript recursivos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD09DE40-8C9B-41EA-B372-9E4E4830E8F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-54.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=514554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-54.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=514554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-29T14:30:00.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anteriores a v3.0.15 y v3.5.x anteriores a v3.5.4, y SeaMonkey anteriores a v2.0, permite a atacantes remotos ejecutar código arbitrario a través de un expresión regular manipulada en un fichero de autoconfiguración de proxy."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D595F649-ECBE-45E0-8AAD-BCBC65A654B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.10",
            "matchCriteriaId" : "78D4B6BB-B349-47FC-A13E-8C4C95D9959B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4A97B6E1-EABA-4977-A3FC-64DF0392AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D33486-4956-4E2C-BA16-FA269A9D02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFFBC58-ACD2-449D-B010-5026D6022F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EED5D2-EC40-4253-991B-0C746FBEF6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F73092C-1458-4278-A30D-C0F89B1F82F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB559BD-4BF7-417F-962F-B8971FF1614B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DD17EC-99EB-46C1-98E9-16A2EDB8E224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-55.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=500644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-55.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=500644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-29T14:30:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en el parseador de imágenes GIF en Mozilla Firefox anteriores a v3.0.15 y v3.5.x anteriores a v3.5.4, y SeaMonkey anteriores a v2.0, permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D595F649-ECBE-45E0-8AAD-BCBC65A654B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE6E920-9A4C-431B-89EA-683A22F15ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.10",
            "matchCriteriaId" : "78D4B6BB-B349-47FC-A13E-8C4C95D9959B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4A97B6E1-EABA-4977-A3FC-64DF0392AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D33486-4956-4E2C-BA16-FA269A9D02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFFBC58-ACD2-449D-B010-5026D6022F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EED5D2-EC40-4253-991B-0C746FBEF6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F73092C-1458-4278-A30D-C0F89B1F82F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB559BD-4BF7-417F-962F-B8971FF1614B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DD17EC-99EB-46C1-98E9-16A2EDB8E224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-56.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=511689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-56.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=511689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-29T14:30:00.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via unspecified method calls, related to \"doubly-wrapped objects.\""
      }, {
        "lang" : "es",
        "value" : "La función XPCVariant::VariantDataToJS en la implementacion XPCOM en Mozilla Firefox v3.0.x anteriores a v3.0.15 y v3.5.x anteriores a v3.5.4  no aplica adecuadamente las restricciones previstas en la interacción entre código del chrome y objetos procedentes de paginas web remotas, lo que permite a atacantes remotos ejecutar JavaScript arbitrario con privilegios chrome a través de métodos de llama sin especificar, relacionado con \"objetos doubly-wrapped\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D595F649-ECBE-45E0-8AAD-BCBC65A654B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-57.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=505988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-57.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=505988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-29T14:30:00.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function."
      }, {
        "lang" : "es",
        "value" : "content/html/document/src/nsHTMLDocument.cpp en Mozilla Firefox v3.0.x anteriores a v3.0.15 y v3.5.x anteriores a v3.5.4  permite a atacantes remotos ayudados por un usuario evitar la politica \"Same Origin\" y leer contenido arbitrario a través de la función document.getSelection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412DF091-7604-4110-87A0-3488116A97E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "13AAF607-AEEE-4FAF-BE63-73B1D951EF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D595F649-ECBE-45E0-8AAD-BCBC65A654B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-61.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=503226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-61.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=503226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-29T14:30:00.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anteriores a v3.0.15 y v3.5.x anteriores a v3.5.4, y SeaMonkey anteriores a v2.0, no maneja adecuadamente una anulación de carácter Unicode \"right-to-left\" (también conocido como RLO o U+202E) en un nombre de fichero de descarga, lo que permite a atacantes remotos falsificar las extensiones de fichero a través de un nombre de fichero manipulado como se demuestra en una extensión no ejecutable de un fichero ejecutable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "20139741-10B1-4E4B-8D5F-A715042049C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D595F649-ECBE-45E0-8AAD-BCBC65A654B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.10",
            "matchCriteriaId" : "78D4B6BB-B349-47FC-A13E-8C4C95D9959B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "4A97B6E1-EABA-4977-A3FC-64DF0392AA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D33486-4956-4E2C-BA16-FA269A9D02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381313EF-DF84-4F66-9962-DE8F45029D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0228476-14E4-443C-BBAE-2C9CD8594DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A803A500-DCE2-44FC-ABEB-A90A1D39D85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022274DE-5251-49C9-B6E5-1D8CEDC34E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F84CB7-93F7-4912-BC87-497867B96491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "8992E9C6-09B3-492E-B7DA-899D5238EC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40270FBD-744A-49D9-9FFA-1DCD897210D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E01097-F60A-4FB2-BA47-84A267EE87D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F65732F-317B-49A2-B9B0-FA1102B8B45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB430F19-069A-43FD-9097-586D4449D327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6D7528-E591-48A6-8165-BE42F8EBF6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA710423-0075-44B8-9DCB-6380FA974486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD15752-A253-47B1-BCE0-B55B84B47C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B39A9D-44A4-4D7F-9004-C44066BBE277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203EC52-2126-4227-AF3B-23857E5BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951567B-8402-42EA-AE33-EBA9235A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A94198-7EBF-4D8A-A99A-A32A8561FF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFFBC58-ACD2-449D-B010-5026D6022F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EED5D2-EC40-4253-991B-0C746FBEF6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F73092C-1458-4278-A30D-C0F89B1F82F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB559BD-4BF7-417F-962F-B8971FF1614B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DD17EC-99EB-46C1-98E9-16A2EDB8E224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/38977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-62.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-915-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=511521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-62.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-915-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=511521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-29T14:30:01.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in liboggz before cf5feeaab69b05e24, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades sin especificar en liboggz anteriores a cf5feeaab69b05e24, tal y como es utilizado en Mozilla Firefox v3.5.x anteriores a v3.5.4, permite a atacantes remotos producir una denegación de servicio (caída de aplicación) y posiblemente ejecutar código arbitrario a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042716.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-63.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=512327",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=515376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042716.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-63.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=512327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=515376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-29T14:30:01.017",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The oggplay_data_handle_theora_frame function in media/liboggplay/src/liboggplay/oggplay_data.c in liboggplay, as used in Mozilla Firefox 3.5.x before 3.5.4, attempts to reuse an earlier frame data structure upon encountering a decoding error for the first frame, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a crafted .ogg video file."
      }, {
        "lang" : "es",
        "value" : "La función oggplay_data_handle_theora_frame en media/liboggplay/src/liboggplay/oggplay_data.c en liboggplay, tal y como se utiliza en Mozilla Firefox v3.5.x anteriores a v3.5.4, intenta reutilizar un frame de estructura de datos cuando encuentra un error de decodificado para el primer frame, lo que permite a atacantes remotos producir una denegación de servicio (desreferencia a puntero NULL y caída de aplicación) o posiblemente ejecutar código arbitrario a través de un fichero de vídeo manipulado .ogg."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-63.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=500311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-63.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=500311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-29T14:30:01.047",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.  NOTE: this might overlap CVE-2009-2663."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades inespecíficas en libvorbis, tal y como se utiizan en Mozilla Firefox v3.5.x anteriores a v3.5.4, lo que permitiría a atacantes remotos producir una denegación de servicio (caída de aplicación)o posiblemente la ejecución de código arbitrario a través de vectores desconocidos. NOTA: Esta vulnerabilidad se solaparía con CVE-2009-2663."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-63.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1561.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-861-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=499512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=500254",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=501279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=507167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=515889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00369.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-63.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1561.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-861-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=499512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=500254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=501279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=507167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=515889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00369.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-29T14:30:01.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades inespecíficas en el motor del navegador en Mozilla Firefox v3.0.x anteriores a v3.0.15  y v3.5.x anteriores a v3.5.4 permite a atacantes remotos producir una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente la ejecución de código arbitrario a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D595F649-ECBE-45E0-8AAD-BCBC65A654B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE6E920-9A4C-431B-89EA-683A22F15ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-64.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=454872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=489925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=497013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=508927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=509244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=509602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=514776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=522030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-64.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=454872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=489925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=497013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=508927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=509244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=509602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=514776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=522030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-29T14:30:01.093",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades inespecíficas en el motor del navegador Moxilla Firefox v3.5.x anteriores a v3.5.4 lo que permitiría a atacantes remotos producir una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código arbitrario a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-64.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=502168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=503196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=508057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=513394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=516709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-64.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=502168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=503196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=508057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=513394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=516709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-29T14:30:01.127",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "layout/base/nsCSSFrameConstructor.cpp en el motor del navegador en Mozilla Firefox v3.0.x anteriores a v3.0.15 no maneja adecuadamente los frames, lo que permite a atacantes remotos producir una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código arbitrario a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63DF3D65-C992-44CF-89B4-893526C6242E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9024117-2E8B-4240-9E21-CC501F3879B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52624B41-AB34-40AD-8709-D9646B618AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917E9856-9556-4FD6-A834-858F8837A6B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBD74D-930C-4D80-A91B-0D61347BAA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2E696-883D-4DE5-8B79-D8E5D9470253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E04FD9-38E8-462D-82C2-729F7F7F0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB21291-B9F3-445E-A9E9-EA1822083DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D595F649-ECBE-45E0-8AAD-BCBC65A654B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE6E920-9A4C-431B-89EA-683A22F15ACD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-64.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=514960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-64.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=514960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-29T14:30:01.140",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades inespecíficas en el motor JavaScript en Mozilla Firefox v3.5.x anteriores a 3.5.4 permite a atacantes remotos producir una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código arbitrario a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031E8624-5161-43AF-AF19-6BAB5A94FDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54186D4A-C6F0-44AD-94FB-73B4346ABB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-64.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=510987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=518675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-64.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=510987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=518675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3626",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-29T14:30:01.170",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Perl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a UTF-8 character with a large, invalid codepoint, which is not properly handled during a regular-expression match."
      }, {
        "lang" : "es",
        "value" : "Perl v5.10.1 permite a atacantes dependientes de contexto producir una denegación de servicio (caida de aplicación) a través de un carácter UTF-8 con un codepoint largo invalido, lo que no es adecuadamente gestionado cuando se produce una coincidencia de expresiones regulares."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perl:perl:5.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D67E248-C0B8-4713-9D9A-47097885A2C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://perl5.git.perl.org/perl.git/commit/0abd0d78a73da1c4d13b1c700526b7e5d03b32d4",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rt.perl.org/rt3/Public/Bug/Display.html?id=69973",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rt.perl.org/rt3/Ticket/Attachment/617489/295383/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37144",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/23/8",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/59283",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36812",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3023",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53939",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6225",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://perl5.git.perl.org/perl.git/commit/0abd0d78a73da1c4d13b1c700526b7e5d03b32d4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rt.perl.org/rt3/Public/Bug/Display.html?id=69973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rt.perl.org/rt3/Ticket/Attachment/617489/295383/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/23/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/59283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of perl as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
        "lastModified" : "2009-10-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3627",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-29T14:30:01.203",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite loop) via an incomplete SGML numeric character reference, which triggers generation of an invalid UTF-8 character."
      }, {
        "lang" : "es",
        "value" : "La función decode_entities en util.c en HTML-Parser anteriores a v3.63 permite a atacantes dependientes de contexto causar una denegación de servicio (bucle infinito) a través de una referencia a un carácter numérico SGML, lo que inicia la generación de un carácter UTF-8 invalido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:derrick_oswald:html-parser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.54",
            "matchCriteriaId" : "584FAFFA-0414-4349-975B-2E904D38B860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:derrick_oswald:html-parser:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E67465-54D2-4AA2-BB67-603B1D49083F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:derrick_oswald:html-parser:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FE25CE-94D5-4A61-B034-346BEC994A3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:derrick_oswald:html-parser:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B96867-60F7-4109-BD82-7A2278C5C349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:derrick_oswald:html-parser:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D32366-FFD9-452F-BD80-557AB3615E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:derrick_oswald:html-parser:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC159D89-ED63-4807-B408-20B62E5CC384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:derrick_oswald:html-parser:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281FF9B4-1940-4750-B284-01BE9076D32B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:derrick_oswald:html-parser:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FF2B73-3FA0-4A24-ABDB-329453F08AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:derrick_oswald:html-parser:1.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92AF09B1-9199-446B-B578-43027372E32A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:derrick_oswald:html-parser:1.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D803A4BE-CD19-4495-8048-6F56FB52836B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://github.com/gisle/html-parser/commit/b9aae1e43eb2c8e989510187cff0ba3e996f9a4c",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37155",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/23/9",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36807",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3022",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=530604",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6225",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://github.com/gisle/html-parser/commit/b9aae1e43eb2c8e989510187cff0ba3e996f9a4c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/23/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=530604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue does not affect Red Hat Enterprise Linux 3, 4, or 5.\n\nThis flaw can only lead to a denial of service if perl-HTML-Parser is used in conjunction with perl 5.10.1. If perl-HTML-Parser is used with earlier versions of perl, this flaw does not lead to a denial of service.",
        "lastModified" : "2009-11-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3638",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-29T14:30:01.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the kvm_dev_ioctl_get_supported_cpuid function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.31.4 allows local users to have an unspecified impact via a KVM_GET_SUPPORTED_CPUID request to the kvm_arch_dev_ioctl function."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función kvm_dev_ioctl_get_supported_cpuid en arch/x86/kvm/x86.c en el subsistema KVM en el kernel de Linux anteriores a v2.6.31.4 permite  a usuarios locales conseguir un impacto desconocido a través de una petición KVM_GET_SUPPORTED_CPUID a la función kvm_arch_dev_ioctl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.31.3",
            "matchCriteriaId" : "13FE8DEC-E0B0-4912-BDBF-19F2DDC0BD3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACBB194-1D24-464A-B79C-44B8127EAD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0138807-6313-4A3F-AB5A-4B7D4A9BE287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA2227-F259-499D-BF50-5074B1E7DD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A896D0-032C-4467-9D57-E47E8C612704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A415FECF-89CC-4D71-B1BF-6A678D32599D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F77E54-5F4A-4D47-8DE8-097B4BBC7944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752148FC-1594-4108-AE0F-C5145B978454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09546671-E75D-4F50-9D86-DFDDAC9DC5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6964925C-4394-4E82-976B-770A99E74F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8C909E-02D7-4B29-AA68-897BD0200B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27430190-EB83-43C5-9584-4F65CF65151A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386B13F-9D7C-45F8-B86A-886384144A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67A63E8-837E-4162-999E-3B3DAAE57C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A701E87D-B807-426E-9CD4-6721DBCABE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F6E506-EC0A-4784-BDA3-B7B5CD938B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFA0277-B491-4BB1-88DC-85362F0A689C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE922924-6496-4D24-94A6-8EDD431A4568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E55450-F6D9-483C-9CC8-E651E5A12AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC40B6DE-09D9-422B-965B-7EB9F6661DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91170B40-4D25-4E40-8F0B-DBC1AE217F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E28B8B9-B832-4D77-BE1A-BB5D8A678678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468745AA-0BE5-4B22-91FA-2FD350BD2F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF208118-3534-47E5-9943-83EF165F1249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "427E3009-A2F2-4ED2-8D1A-14938F639D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3151BF-4BEE-4415-ABA2-E6D40673E591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1037E899-6DB3-423D-9AD0-FE79A67E9681"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6a54435560efdab1a08f429a954df4d6c740bddf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125628917011048&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125632898507373&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.4",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc4",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:329",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36803",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=530515",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53934",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6a54435560efdab1a08f429a954df4d6c740bddf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125628917011048&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125632898507373&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=530515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of KVM as shipped with Red Hat Enterprise Linux 5. KVM is only supported on AMD64/x86_64 architecture on Red Hat Enterprise Linux 5.",
        "lastModified" : "2009-10-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3640",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-29T14:30:01.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The update_cr8_intercept function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc1 does not properly handle the absence of an Advanced Programmable Interrupt Controller (APIC), which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via a call to the kvm_vcpu_ioctl function."
      }, {
        "lang" : "es",
        "value" : "La función update_cr8_intercept en arch/x86/kvm/x86.c en el subsistema KVM en el kernel de Linux anteriores v2.6.32-rc1 no gestiona adecuadamente la ausencia del \"Advanced Programmable Interrupt Controller (APIC)\", lo que permite a usuarios locales producir una denegación de servicio (desreferencia a puntero nulo y caída del sistema) o posiblemente conseguir privilegios a través de una llamada a la funcion kvm_vcpu_ioctl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:rc8:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.31",
            "matchCriteriaId" : "9E10CEA2-5392-4E77-9A17-A66448508C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACBB194-1D24-464A-B79C-44B8127EAD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0138807-6313-4A3F-AB5A-4B7D4A9BE287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA2227-F259-499D-BF50-5074B1E7DD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A896D0-032C-4467-9D57-E47E8C612704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A415FECF-89CC-4D71-B1BF-6A678D32599D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F77E54-5F4A-4D47-8DE8-097B4BBC7944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752148FC-1594-4108-AE0F-C5145B978454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09546671-E75D-4F50-9D86-DFDDAC9DC5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6964925C-4394-4E82-976B-770A99E74F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8C909E-02D7-4B29-AA68-897BD0200B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27430190-EB83-43C5-9584-4F65CF65151A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386B13F-9D7C-45F8-B86A-886384144A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67A63E8-837E-4162-999E-3B3DAAE57C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A701E87D-B807-426E-9CD4-6721DBCABE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F6E506-EC0A-4784-BDA3-B7B5CD938B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFA0277-B491-4BB1-88DC-85362F0A689C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE922924-6496-4D24-94A6-8EDD431A4568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E55450-F6D9-483C-9CC8-E651E5A12AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "45273823-29EA-44DE-8444-3933402C5793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "88F60E74-09DB-4D4A-B922-4A46EED0EC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E242D3DE-D1DC-406A-BCC3-C4380B7EC369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc4:x86_32:*:*:*:*:*",
            "matchCriteriaId" : "06EFB3F7-2EAE-4A56-A9A1-E8C734E6B91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8598D6E5-0C5C-4A31-841A-C12801DB7D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "59800B0A-477B-42F8-A58A-5144F455AE01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc7-git6:*:*:*:*:*:*",
            "matchCriteriaId" : "F166BF6B-BFB0-4206-BD59-179701572F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC40B6DE-09D9-422B-965B-7EB9F6661DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91170B40-4D25-4E40-8F0B-DBC1AE217F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E28B8B9-B832-4D77-BE1A-BB5D8A678678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468745AA-0BE5-4B22-91FA-2FD350BD2F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF208118-3534-47E5-9943-83EF165F1249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "427E3009-A2F2-4ED2-8D1A-14938F639D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4049867A-E3B2-4DC1-8966-0477E6A5D582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A2507858-675B-4DA2-A49E-00DB54700CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0A25EA55-3F1C-440C-A383-0BB9556C9508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "B2665356-4EF5-4543-AD15-67FDB851DCCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "26E7609B-B058-496D-ACDD-7F69FBDE89E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "210BF049-8B3C-4ACC-BF8E-2C3551477602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3151BF-4BEE-4415-ABA2-E6D40673E591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1037E899-6DB3-423D-9AD0-FE79A67E9681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4DD2F05-F990-417A-BD6D-CD9A7EB2BD55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0634D7FE-7685-4669-8EF9-54E99683D28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EEEB962-0E8D-402B-989E-96875453C609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0042D9C4-7081-4DC2-A5B5-2649374B44F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=88c808fd42b53a7e01a2ac3253ef31fef74cb5af",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125626965020571&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125640417219385&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36805",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53947",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=88c808fd42b53a7e01a2ac3253ef31fef74cb5af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125626965020571&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125640417219385&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of KVM as shipped with Red Hat Enterprise Linux 5 as it does not contain the patch that introduced this vulnerability (upstream commit f0a3602c).",
        "lastModified" : "2009-10-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-30T19:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface for Everfocus EDR1600 DVR allows remote attackers to bypass authentication and access live cams via certain vectors."
      }, {
        "lang" : "es",
        "value" : "La interfaz web para Everfocus EDR1600 DVR permite a atacantes remotos evitar la autenticación y acceder a imágenes en vivo de cámaras a través de ciertos vectores."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:everfocus:edr1600:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A46F996-F30A-45BD-AD30-40E9574BA048"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2009/Oct/293",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37108",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/59139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507373/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Oct/293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/59139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507373/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3549",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-30T20:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "packet-paltalk.c in the Paltalk dissector in Wireshark 1.2.0 through 1.2.2, on SPARC and certain other platforms, allows remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace."
      }, {
        "lang" : "es",
        "value" : "packet-paltalk.c en el analizador Paltalk en Wireshark desde v1.2.0 hasta v1.2.2, en SPARC y algunas otras plataformas, permite a atacantes remotos producir una denegación de servicio (caída de aplicación) a través de un fichero que almacena la ruta de un paquete manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CB9265-B7A4-4EB4-9C20-F747F3786C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0059BA2-86B2-4DA5-A6C1-7248D07BB37C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sun:sparc:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727D196F-786C-4C50-BF72-BE9E14A243EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37175",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37409",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36846",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3061",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-07.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3689",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54016",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6391",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 3, 4, or 5.\n",
        "lastModified" : "2009-11-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3550",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-30T20:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a file that records a malformed packet trace.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "El analizador DCERPC/NT en Wireshark desde v0.10.10 hasta v1.0.9 y desde v1.2.0 hasta  v1.2.2 permite a atacantes remotos producir una denegación de servicio (desreferencia a puntero NULL y caída de aplicación) a través de un fichero que almacena la ruta de un paquete manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA01FEEE-E5D1-4C19-B25E-1039FA72555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F90C98-DF9D-49F0-A026-C20C7CA0A034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4F19A6-98D5-4B6A-8AF0-D88561D50296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4D8B98-A542-4269-90C1-14FFBE9F4A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A353A2B8-A801-44C6-AFEF-19982E33975C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7FCA21-A695-46EA-A669-DF3FA3F7B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87BA063-BF1D-4103-973A-6E490A1CA4EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D8CE9A-4CE0-4DA8-9EBA-3B7CEBCDFEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090B987C-9880-4221-BC4C-8D53A8801649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06828062-5F31-4532-9E24-34F29CE30218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738F4F0-41C6-48CF-8233-C94D79DCA807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E88C1647-8B05-421E-AA1F-25F9B248D761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17808311-AC2A-428A-BB8B-B08549C5DAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978C483C-A6F7-456F-9488-833D520D4A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB94CE6-03D3-43C3-B765-AC36961CD83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FADA30-FD98-42F3-80F1-E8794C77AC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3F8A55-10DE-4197-9F9D-5F6570A94860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F1728E-ED97-4203-90D1-9E81E96BD7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5629542-FD8E-4C7B-B396-BC76FB462083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC077D96-1BBB-4F69-8C3A-F36CE3F3C668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CB9265-B7A4-4EB4-9C20-F747F3786C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0059BA2-86B2-4DA5-A6C1-7248D07BB37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C13C7D5-D344-45D2-9FF0-2C3388C94584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37175",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37409",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37477",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1942",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36846",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3061",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.0.10.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-07.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-08.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54017",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10103",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.0.10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2010-0360.html",
        "lastModified" : "2010-04-20T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3551",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-30T20:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the dissect_negprot_response function in packet-smb.c in the SMB dissector in Wireshark 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Error de superación de límite (Off-by-one) en la función dissect_negprot_response en packet-smb.c en \"SMB dissector\" en Wireshark desde v1.2.0 hasta v1.2.2 permite a atacantes remotos producir una denegación de servicio (caída de aplicación) a través de un fichero que archiva la traza de un paquete manipulado. NOTA: Algunos de los detalles se obtuvieron de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CB9265-B7A4-4EB4-9C20-F747F3786C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0059BA2-86B2-4DA5-A6C1-7248D07BB37C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37175",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37409",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/36846",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3061",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-07.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54018",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2009-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
        "lastModified" : "2009-11-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3623",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-30T20:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The lookup_cb_cred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel before 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTH_NULL authentication flavor, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an NFSv4 mount request."
      }, {
        "lang" : "es",
        "value" : "La función lookup_cb_cred en fs/nfsd/nfs4callback.c en el subsistema nfsd4 en el kernel de Linux en versiones anteriores v2.6.31.2 intenta acceder a la cache de credenciales incluso cuando un cliente especifica la autenticación AUTH_NULL, lo que permite a atacantes remotos producir una denegación de servicio (desreferencia a un puntero NULL y una caída de sistema) a través de una petición de montado de NFSv4."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.31.1",
            "matchCriteriaId" : "024C81CA-BF5B-4699-A209-CA97F64CC586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACBB194-1D24-464A-B79C-44B8127EAD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0138807-6313-4A3F-AB5A-4B7D4A9BE287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA2227-F259-499D-BF50-5074B1E7DD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A896D0-032C-4467-9D57-E47E8C612704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A415FECF-89CC-4D71-B1BF-6A678D32599D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F77E54-5F4A-4D47-8DE8-097B4BBC7944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752148FC-1594-4108-AE0F-C5145B978454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09546671-E75D-4F50-9D86-DFDDAC9DC5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6964925C-4394-4E82-976B-770A99E74F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8C909E-02D7-4B29-AA68-897BD0200B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27430190-EB83-43C5-9584-4F65CF65151A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386B13F-9D7C-45F8-B86A-886384144A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67A63E8-837E-4162-999E-3B3DAAE57C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A701E87D-B807-426E-9CD4-6721DBCABE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F6E506-EC0A-4784-BDA3-B7B5CD938B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFA0277-B491-4BB1-88DC-85362F0A689C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE922924-6496-4D24-94A6-8EDD431A4568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E55450-F6D9-483C-9CC8-E651E5A12AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC40B6DE-09D9-422B-965B-7EB9F6661DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91170B40-4D25-4E40-8F0B-DBC1AE217F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E28B8B9-B832-4D77-BE1A-BB5D8A678678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468745AA-0BE5-4B22-91FA-2FD350BD2F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF208118-3534-47E5-9943-83EF165F1249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "427E3009-A2F2-4ED2-8D1A-14938F639D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=80fc015bdfe1f5b870c1e1ee02d78e709523fee7",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=886e3b7fe6054230c89ae078a09565ed183ecc73",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125618753029631&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125624036516377&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=530269",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=80fc015bdfe1f5b870c1e1ee02d78e709523fee7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=886e3b7fe6054230c89ae078a09565ed183ecc73",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125618753029631&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125624036516377&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=530269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, or Red Hat Enterprise MRG. Those versions do not include the upstream patch that introduced this vulnerability.",
        "lastModified" : "2009-11-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3722",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-10-30T20:30:00.377",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level (CPL) before accessing a debug register, which allows guest OS users to cause a denial of service (trap) on the host OS via a crafted application."
      }, {
        "lang" : "es",
        "value" : "La función handle_dr en arch/x86/kvm/vmx.c en el subsistema KVM en el kernel de Linux en versiones anteriores a v2.6.31.1 no comprueba adecuadamente el Current Privilege Level (CPL, Nivel de Privilegios Actual) antes de acceder a un registro de depuración, lo que permite a un usuario invitado del sistema operativo obtener una denegación de servicio (trampa) en el sistema operativo hospedador a través de aplicaciones manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.31",
            "matchCriteriaId" : "EA80C8C8-30E5-4DC6-B3CC-2BA506FBEC8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACBB194-1D24-464A-B79C-44B8127EAD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0138807-6313-4A3F-AB5A-4B7D4A9BE287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA2227-F259-499D-BF50-5074B1E7DD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A896D0-032C-4467-9D57-E47E8C612704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A415FECF-89CC-4D71-B1BF-6A678D32599D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F77E54-5F4A-4D47-8DE8-097B4BBC7944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752148FC-1594-4108-AE0F-C5145B978454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09546671-E75D-4F50-9D86-DFDDAC9DC5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6964925C-4394-4E82-976B-770A99E74F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8C909E-02D7-4B29-AA68-897BD0200B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27430190-EB83-43C5-9584-4F65CF65151A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386B13F-9D7C-45F8-B86A-886384144A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67A63E8-837E-4162-999E-3B3DAAE57C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A701E87D-B807-426E-9CD4-6721DBCABE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F6E506-EC0A-4784-BDA3-B7B5CD938B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFA0277-B491-4BB1-88DC-85362F0A689C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE922924-6496-4D24-94A6-8EDD431A4568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E55450-F6D9-483C-9CC8-E651E5A12AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC40B6DE-09D9-422B-965B-7EB9F6661DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91170B40-4D25-4E40-8F0B-DBC1AE217F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E28B8B9-B832-4D77-BE1A-BB5D8A678678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468745AA-0BE5-4B22-91FA-2FD350BD2F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF208118-3534-47E5-9943-83EF165F1249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "427E3009-A2F2-4ED2-8D1A-14938F639D2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0a79b009525b160081d75cef5dbf45817956acf2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125678631403558&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125680666827148&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.9",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:198",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0126.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/37221",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=531660",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9892",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0a79b009525b160081d75cef5dbf45817956acf2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125678631403558&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125680666827148&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0126.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/37221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=531660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3722\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact, a future update will address this flaw.",
        "lastModified" : "2010-02-11T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-30T20:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted erf file, related to an \"unsigned integer wrap vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en wiretap/erf.c en Wireshark en versiones anteriores a v1.2.2 permite a atacantes remotos ejecutar código arbitrario o producir una denegación de servicio (caída de aplicación) a través de un fichero erf manipulado, relacionado con la vulnerabilidad \" sobreescritura de entero sin asignar\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "AFC3D4B5-FACD-45D1-9037-EDD6B3DCA875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8ED0A8C-174C-4889-9B00-51B1E720B575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9053B950-143E-4941-9C58-A57D9F1FF78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD279A0-5BA7-4D86-B975-2E76B4B2D85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA052598-2E72-4568-B783-8B01382736DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.8.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C934EF8B-1B73-412E-9874-E1AC0223506B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD509BD0-3E90-47E5-97DA-F8814002EDF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8E63FC-A3AA-455E-8AA7-E3577468F022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DFC6BB8-5A74-4F6A-AFC8-959623D4236F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B432986-F5AE-4506-B584-3B4E943A9C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60178790-62CC-41A9-8B5A-78CF49069E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41535173-00D3-4E52-9441-D7ED44BE9B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3017F8E8-F28D-46E0-A256-0121BAD588A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589FBD3D-FFE4-4BB3-B5F9-7FF949212AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3283D8D0-0714-48CC-94C4-B5FA6C913A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA01FEEE-E5D1-4C19-B25E-1039FA72555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F90C98-DF9D-49F0-A026-C20C7CA0A034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4F19A6-98D5-4B6A-8AF0-D88561D50296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4D8B98-A542-4269-90C1-14FFBE9F4A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A353A2B8-A801-44C6-AFEF-19982E33975C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7FCA21-A695-46EA-A669-DF3FA3F7B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87BA063-BF1D-4103-973A-6E490A1CA4EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D8CE9A-4CE0-4DA8-9EBA-3B7CEBCDFEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090B987C-9880-4221-BC4C-8D53A8801649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06828062-5F31-4532-9E24-34F29CE30218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738F4F0-41C6-48CF-8233-C94D79DCA807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E88C1647-8B05-421E-AA1F-25F9B248D761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E7F73-0E2A-442C-9B76-679A2AD03052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF374E8-36A3-43AA-B86C-092F5B244841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C422E5-3252-48C2-B4FF-E32AA5463D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C43A78-E578-4B1C-8E33-24529E973E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1074B30-F2E6-47CD-8491-29163811E07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB52B779-7A2D-43E0-9F12-C65053002EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A85B028-7384-403A-817C-B5001F02A8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801B1795-3DC4-4BE3-A693-37B6BD116B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA611B86-AB5C-4CA1-9620-6F5532F4C819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17808311-AC2A-428A-BB8B-B08549C5DAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978C483C-A6F7-456F-9488-833D520D4A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB94CE6-03D3-43C3-B765-AC36961CD83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FADA30-FD98-42F3-80F1-E8794C77AC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3F8A55-10DE-4197-9F9D-5F6570A94860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F1728E-ED97-4203-90D1-9E81E96BD7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5629542-FD8E-4C7B-B396-BC76FB462083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC077D96-1BBB-4F69-8C3A-F36CE3F3C668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CB9265-B7A4-4EB4-9C20-F747F3786C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://anonsvn.wireshark.org/viewvc/trunk/wiretap/erf.c?view=markup&pathrev=29364",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/676492",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://anonsvn.wireshark.org/viewvc/trunk/wiretap/erf.c?view=markup&pathrev=29364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/676492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2010-0360.html",
        "lastModified" : "2010-04-20T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-30T20:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers to read ASP.NET source code via pathnames in the SourceUrl and Source parameters to _layouts/download.aspx."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad \"descarga\" en Team Services en Microsoft Office SharePoint Server 2007 v12.0.0.4518 y v12.0.0.6219 permite a atacantes remotos leer fuentes de ASP.NET a través de nombres de rutas en los parámetros SourceUrl y Source a _layouts/download.aspx."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "864B622E-B522-4791-AC82-0711130544BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.microsoft.com/kb/976829",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507419/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36817",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.microsoft.com/kb/976829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507419/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-30T20:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted domain name."
      }, {
        "lang" : "es",
        "value" : "Opera v10.01 permite a atacantes remotos ejecutar código arbitrario o producir una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un nombre de dominio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.01",
            "matchCriteriaId" : "CA8D2696-1A5F-4437-A08E-4374F47894C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37182",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/1001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/unix/1001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/1001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/support/kb/view/938/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/59357",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36850",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3073",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54020",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6574",
        "source" : "cve@mitre.org",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "http://secunia.com/advisories/37182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/mac/1001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/unix/1001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/1001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/support/kb/view/938/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/59357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-10-30T20:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site."
      }, {
        "lang" : "es",
        "value" : "Opera en versiones anteriores a v10.01 corriendo sobre Windows no previene el uso de fuentes web en el renderizado de la interfaz de usuario, lo que permite a atacantes remotos falsificar el campo \"dirección\" a través de una pagina web manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.01",
            "matchCriteriaId" : "CA8D2696-1A5F-4437-A08E-4374F47894C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37182",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/1001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/support/kb/view/940/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/59359",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36850",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3073",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54022",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6384",
        "source" : "cve@mitre.org",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "http://secunia.com/advisories/37182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/1001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/support/kb/view/940/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/59359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-02T15:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0, when Virtual-8086 mode is used, do not properly set the exception code upon a page fault (aka #PF) exception, which allows guest OS users to gain privileges on the guest OS by specifying a crafted value for the cs register."
      }, {
        "lang" : "es",
        "value" : "VMware Workstation v6.5.x anteriores a v6.5.3 build 185404, VMware Player v2.5.x anteriores a v2.5.3 build 185404, VMware ACE v2.5.x anteriores a v2.5.3 build 185404, VMware Server v1.x anteriores a v1.0.10 build 203137 and v2.x anteriores a v2.0.2 build 203138, VMware Fusion v2.x anteriores a v2.0.6 build 196839, VMware ESXi v3.5 y v4.0, y VMware ESX v2.5.5, v3.0.3, v3.5 y v4.0, cuando el modo Virtual-8086 es usado, no asigna adecuadamente el código de excepción para una excepción de fallo de página (también conocido como #PF), lo que permite a usuarios del SO anfitrión obtener privilegios en el SO anfitrión especificando un valor modificado para el registro cs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71537AE-346D-4BA9-90E7-EA0AB0CD0886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5674C3DD-F510-4701-ACA8-437576307528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:ace:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62960B2-91AE-4DD7-8085-9BA6BCB84473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:esx:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B037838B-072E-4676-9E5D-86F5BC207512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:esx:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6F7416-E694-4EC9-9FE5-0C24448ECB34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:esx:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5ECA1B-7415-4390-8018-670F2C3CDF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:esx:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "889DE9BE-886F-4BEF-A794-5B5DE73D2322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD59C463-F352-4F6C-853F-415E3FB4ABDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:esxi:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDAA7C8-8F2F-4037-A517-2C1EDB70B203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E18541B-36B6-40A7-9749-FA47A10379C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55EBD95F-3DF7-49F3-A7AA-47085E0B7C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DA47C9-3D1A-49A7-8976-AE05D6730673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692CC131-5C6C-4AD6-B85C-07DF21168BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617EFBFF-D047-4A0B-ACB6-83B27710F6F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1D0DF91-17E8-45D4-B625-737FE50C23CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE944A70-CB9C-4712-9802-509531396A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "252D2C0B-B89A-4C89-8D6B-6A8E58FCD8DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DA49FA-6657-45B5-BF69-D3A03BA62A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EC33AB-E92A-4AA8-A523-C341133BB515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53197903-0614-4460-8944-C1B5257D71A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F037B05F-6F92-4BE1-B672-F677CBEFD075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DD6D27-1335-44EF-8B69-A9163A67BC2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFEAE8-0118-4548-A6EA-E90FA8FE7AF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42049891-38B7-4BB7-8DA5-A87169E2D958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07139DF7-C36B-4FED-8558-7FA49BE0BCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0D7307-5946-45DC-88D3-6BC72EF50184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89699BB6-9E41-41DC-B597-B45CA05313A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9D09AC-7D9B-4150-86BC-19F44F6F2CA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2786E370-6108-4695-B0A8-9F19D8E3C0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2AAA6D-A31D-43A7-AB2F-FBF9815A9745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CFDD84-A482-42C2-B43F-839F4D7F1130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8F3BFF-676B-4E2C-98BA-DCA71E49060F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E658DA-56E8-49F0-B486-4EF622B63627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541D77A2-99C5-4CDB-877F-7E83E1E3369E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000069.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37172",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201209-25.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507523/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507539/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36841",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3062",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000069.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201209-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507523/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507539/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3605",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-11-02T15:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, related to (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc, and (7) SplashOutputDev.cc in poppler/; and (8) SplashBitmap.cc, (9) Splash.cc, and (10) SplashFTFont.cc in splash/.  NOTE: this may overlap CVE-2009-0791."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de entero en Poppler v0.10.5 y anteriores permiten a usuarios remotos provocar una denegación de servicio (caida de la aplicación) o probablemente ejecutar código de su elección a través de un fichero PDF modificado. Relacionado con (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc y (7) SplashOutputDev.cc en poppler/; y (8) SplashBitmap.cc, (9) Splash.cc y (10) SplashFTFont.cc en splash/.  NOTA: esta vulnerabilidad se puede sobrelapar con CVE-2009-0791."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.5",
            "matchCriteriaId" : "E0299F4A-A027-430C-9A53-AFEF9022960C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23EBF88-10DE-4EA6-9F0E-F33C88541F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F75CFD-3523-4017-992C-4FA6406D49F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB116A19-6436-40BE-B5C6-32C22D888B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4C1429-593B-47B6-AC84-832F2296FAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18240BA6-3390-4925-AC25-DA4C42397CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3090A142-2240-4A8D-A122-C037931A277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD63240-4599-4212-8AF2-7C4089CA9D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1259C59E-517F-40BE-8BA6-01AB76257C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576152B4-9ACD-4C4E-B423-4A5EF44332D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322F9E62-6A74-4805-8F6B-9C61739B2D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51C453F-6A87-49FB-83F6-22316F28161F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F532F0-6653-4275-A85A-BD9A9A611E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255102DA-A2C0-4795-9539-B4CBD587554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B06F1-772A-4A12-A7B9-EA220ED96D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B779800A-FF4B-47DD-B56F-77D10D6A335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0213390-08FA-4E04-835B-8BE0FC61B464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B304657-740A-4F8D-99CD-22E283FEE6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "178680C2-DB1B-4250-9B6E-6ADABA60DE44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA9036F-92DA-45C2-9FBC-DE03444D34F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6855B98-DAA2-4850-A765-2F4D6D93A424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4743EC55-B61D-4C1A-9ED7-060268F2DB27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4454E-3D2B-4582-B5E5-0317A6417654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96402B67-A7A8-44E3-914E-A10A69FAD735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C608C8-F382-4D6B-A638-98763C1CBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22287102-80B1-4E1F-85E4-488B020A51E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3030D6-DE07-418B-AB40-87C85FCA3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3583D56-F653-457A-B1F8-25842A15CB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA5DBB-5A80-439E-A135-77CB40772916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A5C43B-3978-4D0A-8166-A99622106781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6323ED7A-6FE8-4885-B743-3E2F82ECA08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D3345C-2D35-413C-B6F9-C308BC7C2AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D3618D-A183-4B09-9CA2-8D622C3486DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88294D9-563E-4AB3-9FE6-971F43B052B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A39F672-B238-4B21-A48E-5121771949F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A5D199-E952-44B5-B5E5-170040FA813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349B4B75-32E2-49FB-9606-8B057AFA2E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A8D058-224E-467E-AB61-06F90B541F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C47EDD-2212-4259-8229-FF05E1A7B5AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cgit.freedesktop.org/poppler/poppler/commit/?id=284a92899602daa4a7f429e61849e794569310b5",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://cgit.freedesktop.org/poppler/poppler/commit/?id=7b2d314a61fd0e12f47c62996cb49ec0d1ba747a",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb22f812b31858e519411f57747d39bd8",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37114",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:334",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugs.launchpad.net/bugs/cve/2009-3605",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=491840",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://launchpad.net/ubuntu/+archive/primary/+files/poppler_0.10.5-1ubuntu2.4.diff.gz",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://launchpad.net/ubuntu/+archive/primary/+files/poppler_0.8.7-1ubuntu0.4.diff.gz",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7731",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://cgit.freedesktop.org/poppler/poppler/commit/?id=284a92899602daa4a7f429e61849e794569310b5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cgit.freedesktop.org/poppler/poppler/commit/?id=7b2d314a61fd0e12f47c62996cb49ec0d1ba747a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb22f812b31858e519411f57747d39bd8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-850-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.launchpad.net/bugs/cve/2009-3605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=491840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/ubuntu/+archive/primary/+files/poppler_0.10.5-1ubuntu2.4.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/ubuntu/+archive/primary/+files/poppler_0.8.7-1ubuntu0.4.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3624",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-11-02T15:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The get_instantiation_keyring function in security/keys/keyctl.c in the KEYS subsystem in the Linux kernel before 2.6.32-rc5 does not properly maintain the reference count of a keyring, which allows local users to gain privileges or cause a denial of service (OOPS) via vectors involving calls to this function without specifying a keyring by ID, as demonstrated by a series of keyctl request2 and keyctl list commands."
      }, {
        "lang" : "es",
        "value" : "La función get_instantiation_keyring de security/keys/keyctl.c en el subsistema KEYS del kernel de Linux en versiones anteriores a la v2.6.32-rc5 no mantiene apropiadamente la cuenta de referencias de un \"keyring\", lo que permite a usuarios locales obtener privilegios o provocar una denegación de servicio (OOPS) a través de vectores de ataque que involucran llamadas a esta función sin especificar un \"keyring\" por ID, como se ha demostrado por series de \"keyctl request2\" y comandos \"keyctl list\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux:kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760FDC9-BB79-4299-8A6D-482085EE5BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux:kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56EEB157-5037-4EAD-8625-35B91B167111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:rc4:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.32",
            "matchCriteriaId" : "9856A8C4-B306-4E06-81F8-540F92D7CD4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC560CC-F785-42D5-A25B-1BA02E7AC464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241FF5F5-516B-4F77-ABAF-787DFEFEC1AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC36074C-C310-4341-8B3C-BB34E572BF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCC155A-C68C-44A8-8C44-7979C9889C34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "040EBFDA-7F8D-428F-BB69-BB1B52BB868B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E703D2-8CC9-421A-9728-75E8FCFB4FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D25556CC-C522-4C79-99DD-9A7329697B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338BB401-8831-4094-9186-2B3CFA5903D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E32E6BA-AFEF-44A8-B230-87DD043BB222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69E575B-BD1A-4E50-8D6F-131D5E08058E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F6269B-5F6B-4413-B14D-7AE5442E4CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D1246-F975-4411-A58B-343ED90485FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6554469E-F6AE-4EB0-880E-CBFD196FEE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20367B0-F722-4442-8B59-ABB0FEDB8CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A98A70-51E3-4556-8DC4-DD09CF370D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EE3B0-3CC2-4AC2-86A0-2DF34205E707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC547EB-9308-4477-8256-A0E04B42D6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6940324-0383-4510-BA55-770E0A6B80B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480F035A-A59D-4113-A246-DF108BB2F591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D39E29-B2A0-4075-84AF-994C27AB0A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19879317-B067-45DA-B497-21EBDDDC2521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D220C745-28AD-4D04-B2D2-A090D229206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AF8895-7BF8-458E-B2BB-68699AABC023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA768A9D-6C63-405E-9D14-5D68F8E93A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF495E58-DA6C-402D-B381-4929CB8A502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591301C-C30F-44AC-90F0-709A18AA96E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610A93BB-70E3-4BF1-83E8-8A7388477F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821BD11F-3C6A-4424-BC9B-DFD786248B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F55A024-9F8E-44F8-A0D8-696BC232524A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84595143-3B04-4CE8-81C0-28EEEC58CD0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ABFA33-8FA1-488E-A9BD-1593F495F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50B422D1-6C6E-4359-A169-3EED78A1CF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F19064-CFBF-4B3C-A0A1-CE62265CD592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB759752-DC19-4750-838B-056063EFDC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A43C95-8569-40BE-9E5B-F9B3D0B9D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99662904-E5E3-4E81-B199-39707EAEB652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615BDD1D-36AA-4976-909B-F0F66BF1090C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8A26D6-1BDA-45F0-8F7C-F95986050E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A3EDF2-09D7-4116-AE46-D86E4B9602AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B179CF1D-084D-4B21-956F-E55AC6BDE026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1B4877-286A-44B5-9C5C-0403F75B2BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432CA976-6EFA-4D34-B5EA-CD772D067F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E476195-657E-416E-BC16-44A18B06A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A55028-B8F9-4AD2-AE57-A80D561F3C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70460F6C-D6C0-4C1A-B13E-368705EAF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F26BA18-08AD-45FE-9F83-25CCB2E27270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBFF148-3EDA-4216-910B-8930D8C443C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648C63F7-EA1D-4F2E-B8AF-1F380C83E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1697B855-4834-4633-A5C8-C1F7F13ACE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE75F-9145-4B9A-A6D8-E488C5326145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF566DA-0F04-48DA-AA40-565979C55328"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5990C6C2-2F66-4C4D-8224-74163865F410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23AD176-3B99-4593-BCBD-13C1E579A13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DFD7F-8919-4245-8480-7B272F591271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83C60AF-50A9-480E-860D-45E80AC0A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8D42BA44-C69B-4170-9867-CABF93CA9BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140380C-71BD-464F-AE53-1814C2653056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18EC0A7-8616-4039-B98B-E1216E035B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FB141B-FA2A-435D-8937-83FC0669CB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59131C8-F66A-4380-9F6E-3FC14C7C8562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5421616-4BF5-4269-8996-C3D2BA6AE2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FC6CE2-8717-4558-A309-A441D322F00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BE336-7BB2-47C0-AED5-3DEA706C206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE87D1BC-A72D-42D2-A93C-67A5823BEB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAC2E9D-0E82-4866-9046-ADD448418198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "760FB32D-9795-4B29-B79A-A32B5E70F7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5881A78C-D162-4DE5-8353-2BB1EC1F428B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D81D2-1A89-4E61-A90C-5E8BB880310B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F2047A-5F17-4B59-9075-41A5DC5C1CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9887E-2466-4C73-A8E1-2117492F9EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE5B27-2EF0-464E-8F14-5E809D84D389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815B2EE8-136F-44E4-997D-5F93A54775DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13673DF5-09B1-40C8-AC54-A447DE8AB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "085259B8-9D41-42B0-B32B-66B8D365F106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A12DE15-E192-4B90-ADB7-A886B3746DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6588E7-F4FA-40F5-8945-FC7B6094376E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "AE87E13E-ACF7-4F74-8938-729F3B0D694C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D4965A12-1BBA-4494-A5C1-43E0C0F48C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52152F5A-1833-4490-A373-9C547B90B0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64A095E-5E97-445E-B435-F09983CC0E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE92406-DBF3-463E-8A51-F9679E851FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60D19B-ED9B-443C-9D49-002ABD381119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "264C61EE-64F6-43AD-B54F-7D683C29E64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0149408A-30F6-4EDF-8B3B-CBAB884CE758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71295664-89EC-4BB3-9F86-B1DDA20FAC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BE853A-BA6F-4A70-B166-E34441F0B7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85064FDF-4B62-43BF-B36C-F659D739BC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEADC505-FF44-4D45-8EA6-B23A1C4564D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "388414A1-C9B4-41BA-AD35-6501A463A095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE3C807-5C9B-4B71-868B-DF17ECB1514F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "FDBA01DD-C129-48F1-800B-838418F4A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "185F1EF8-04EB-43ED-B909-8BDF60F23E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B6847C-873B-4BE1-852D-239115E59BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF41209E-D27F-4642-A405-90E822A41897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "3483FAFA-353C-498F-AF68-8F5B84A0F30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F59FD9-46E5-4F63-80A0-091AD44D1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428844A5-E020-4AE9-8012-9AEDFCB7C32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "6B11A9E1-9D90-46DC-81B5-17A137205AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C9D70D-A552-48D6-9497-EE07EB5649D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "07EEC559-9240-46BE-9057-0F17D1F61F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "BBBC127F-D67E-43FE-BCFE-606C200084F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DC79CF-A504-4232-9F66-B5DCD0213DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "42B18945-EE09-4E6B-8C11-E382E5F8F850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4273-0935-4232-BBFD-A850855CAC5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16F2182-C489-4CA9-A56B-01463148D16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630A56D3-7A82-44DE-8888-2EB8CD1C24A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4EF7A7-6E96-43B4-8287-368098ABBFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91995-A084-422A-A544-30B0B4D75E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45F4429-5A9C-4E8B-96EE-CCF19776CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "12D0C03A-7D30-485F-8431-638918FE9658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFCAF09-BB20-424C-8648-014C0F71F8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A74970C-5EEA-47A7-A62D-AF98F4D1228F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA56669-B09E-42C2-9591-245C46909A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D08D180-23F7-456F-98CA-26B53C678D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3C363-49C9-4869-83B5-76C14100BFF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856FE78A-29B5-4411-98A0-4B0281C17EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA311B8-D32E-4853-9B07-58EAF1019D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F0F679-43C8-426E-A97E-C3B207A3331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA40BC48-D6B5-4424-B306-F99E85EBBCB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2DF2BB-F94A-4692-AFDC-47C42F04081B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "BB286B42-E739-46CD-BC96-972CFFAECB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "7636014B-CC2A-43A3-9C9A-04B26AEB06D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*",
            "matchCriteriaId" : "A4ED7CE5-3388-4CB9-AF60-A2AF19611327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11795F8E-7ACD-4597-9194-FC7241DCE057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954A701-1671-4080-B1E6-47E0208FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D06512-EAF0-48C6-98F0-066E63FF07EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75B48F1-623A-4B96-9E08-4AA2DE748490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACBB194-1D24-464A-B79C-44B8127EAD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83E5F269-7711-447D-B798-0F5478E36299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0138807-6313-4A3F-AB5A-4B7D4A9BE287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BA2227-F259-499D-BF50-5074B1E7DD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A896D0-032C-4467-9D57-E47E8C612704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A415FECF-89CC-4D71-B1BF-6A678D32599D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F77E54-5F4A-4D47-8DE8-097B4BBC7944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752148FC-1594-4108-AE0F-C5145B978454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09546671-E75D-4F50-9D86-DFDDAC9DC5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6964925C-4394-4E82-976B-770A99E74F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8C909E-02D7-4B29-AA68-897BD0200B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA036609-ADD3-4903-AB9D-E8BF81CFC776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F9E122-994B-4276-9FCF-A8E4D2D06D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A15720C-3BDF-4343-B270-2575978293EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5ADCFA-2CD8-4A00-AFEC-B84F7E0015A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EA2EE9B-27FD-49FE-8665-159DABA0E3C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.27.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C81C5F8-2224-4D84-B7C0-E18421276AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BD805F-08EB-42EC-BC54-26A7278E5089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:git7:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEBA0F6-5453-4993-932B-BB8941DCC5CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3463B83B-E46F-456E-98BA-801C59AEB337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "05FD0767-03F3-416C-AB6D-6BC4A12220B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8452D554-8DEB-4265-839C-6B40CCFB56B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "94F445F9-57A5-4453-BB5D-290349C04A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "62C97D20-4152-47C4-B21B-8206CF49E20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217715A5-E69D-45C0-B8E4-5681528C651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87AD66C-4321-4459-8556-3B0BA38C493A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A347E0-9C0B-4674-9363-3C36DA27AC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3975EC77-D33D-4167-91BE-08237C3EE9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0F2534-C267-43D9-8365-C00CD979B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27430190-EB83-43C5-9584-4F65CF65151A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386B13F-9D7C-45F8-B86A-886384144A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:git1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F95AB2-319C-4BDE-8D34-9FBE69A2FB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D48FD9D7-E775-4E26-AEBF-01A09C404D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "89EA3CF3-0AB7-4648-96BA-25E978D2C8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc2_git7:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4DB179-F78F-4D36-A47D-557FB1B945DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29:rc8-kk:*:*:*:*:*:*",
            "matchCriteriaId" : "23859759-4748-4A03-9D78-083C77CFF4AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67A63E8-837E-4162-999E-3B3DAAE57C96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A701E87D-B807-426E-9CD4-6721DBCABE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F6E506-EC0A-4784-BDA3-B7B5CD938B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFA0277-B491-4BB1-88DC-85362F0A689C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE922924-6496-4D24-94A6-8EDD431A4568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5FC0A9-A78A-4D09-BDCC-208AFC899824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.29.rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBFC9DD-B7C2-4FB2-A8F6-29FF50EFAAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E55450-F6D9-483C-9CC8-E651E5A12AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "45273823-29EA-44DE-8444-3933402C5793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "88F60E74-09DB-4D4A-B922-4A46EED0EC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E242D3DE-D1DC-406A-BCC3-C4380B7EC369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc4:x86_32:*:*:*:*:*",
            "matchCriteriaId" : "06EFB3F7-2EAE-4A56-A9A1-E8C734E6B91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8598D6E5-0C5C-4A31-841A-C12801DB7D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "59800B0A-477B-42F8-A58A-5144F455AE01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30:rc7-git6:*:*:*:*:*:*",
            "matchCriteriaId" : "F166BF6B-BFB0-4206-BD59-179701572F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC40B6DE-09D9-422B-965B-7EB9F6661DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91170B40-4D25-4E40-8F0B-DBC1AE217F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E28B8B9-B832-4D77-BE1A-BB5D8A678678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468745AA-0BE5-4B22-91FA-2FD350BD2F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF208118-3534-47E5-9943-83EF165F1249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "427E3009-A2F2-4ED2-8D1A-14938F639D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4049867A-E3B2-4DC1-8966-0477E6A5D582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A2507858-675B-4DA2-A49E-00DB54700CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0A25EA55-3F1C-440C-A383-0BB9556C9508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "B2665356-4EF5-4543-AD15-67FDB851DCCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "26E7609B-B058-496D-ACDD-7F69FBDE89E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "210BF049-8B3C-4ACC-BF8E-2C3551477602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "1837F32C-80D3-4E10-AE5D-E9F5A11A434E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3151BF-4BEE-4415-ABA2-E6D40673E591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1037E899-6DB3-423D-9AD0-FE79A67E9681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4DD2F05-F990-417A-BD6D-CD9A7EB2BD55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0634D7FE-7685-4669-8EF9-54E99683D28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EEEB962-0E8D-402B-989E-96875453C609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.31.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0042D9C4-7081-4DC2-A5B5-2649374B44F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.32:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C85D4E0A-14DA-4884-AF6F-A0F54304430F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.32:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "218DE1D1-3843-4076-9AE4-70AA0FD99B3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=21279cfa107af07ef985539ac0de2152b9cba5f5",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125619420905341&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125624091417161&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37086",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38017",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://twitter.com/spendergrsec/statuses/4916661870",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=21279cfa107af07ef985539ac0de2152b9cba5f5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125619420905341&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125624091417161&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://twitter.com/spendergrsec/statuses/4916661870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, or Red Hat Enterprise MRG. Those versions do not include the upstream patch that introduced this vulnerability.",
        "lastModified" : "2009-11-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3628",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-11-02T15:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to determine an encryption key via crafted input to a tt_content form element."
      }, {
        "lang" : "es",
        "value" : "El subcomponente Backend de TYPO3 v4.0.13 y anteriores, v4.1.x anteriores a v4.1.13, v4.2.x anteriores a v4.2.10 y v4.3.x anteriores a v4.3beta2 permite a atacantes remotos autenticados determinar la clave de encriptación a través de una entrada modificada al elemento de formulario tt_content."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.12",
            "matchCriteriaId" : "9297C028-4875-4370-8A47-E5BB4DC04A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8B51D2-B985-405E-8D87-1572D5096F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AB9DE7-3AB0-4B5B-9825-486111386852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D954FE3D-B766-4D39-B0CA-31A24EDB362C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AE3831-400B-4974-9C69-6787CF03433A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66333A00-5D7D-4467-9495-79D715EBAB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E7C6DF-C63B-4B16-9107-3C15490951D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEAD468-F39F-4B92-9ABD-F43C636B1145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6154F853-6DAF-4A34-8019-CB5BA87CCA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CF0EA5-E984-40BE-BA90-1C85568A0525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395C04FB-3390-4E97-B2F1-BEF9C42F15E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.3.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349BDDAD-35AE-44B6-9623-1ABAAFA16D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C553D36B-B446-4D63-B37F-FA32D1E5A524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.5.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33152254-3B0B-4413-90F3-72A8B1ADDBD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.6.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78413B61-AAB7-485D-BD24-C8A6D7631281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53B002D-18FD-4C6A-97C0-AA9C83ABD382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3885B69F-B9C0-488F-8775-E8E801418E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6EAF89-59F9-4D06-A7AE-175816BB7E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3390E31-A149-4D83-94D2-63AF63D02A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.8.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF63F45-3E42-4DD6-ABD3-BA67D04C8A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EAE65C-1E17-48CD-B48C-E0BC09FB6596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501A9157-044A-4856-8092-418D7329EED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA47174-9BC4-4B74-8618-6A7B0773553B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A13146E-EC04-4354-9123-BC7CB292C66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F27B173-8D10-47F7-8450-F8808A918295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1FAD0A-6B98-476B-BCD2-361996CA1C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE992D57-AF82-4BF0-96E8-98110C0AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9A484F-C34D-4885-8125-D9C8725EEB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCB2DE6-4407-4E40-8574-9C813183565B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19647A4-C422-42D0-863B-5B6E0B08BFAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C842A284-8360-4DE4-8D05-8082D0A0AA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A4600DD-C9CA-4D71-BD31-12FE40A14D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "273F2E33-0655-46DE-9397-E16658B4BD8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F7039-4117-4D53-ABE8-99C10518D351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161E310F-F2D8-40B3-8390-8C52ACDD0B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D69530-AE74-4012-B522-01D0B6B01662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5514D17F-95A5-48C5-9F91-554F8D3C3DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46E35EC-FF7B-4510-A5F2-FC230B7477B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A671ED2-91AA-4447-8996-A8A16FE753A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4219A367-8431-4A72-AF73-ED2A853B14E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F10D45-FA29-4534-8789-201D194C46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878A3B3A-91B6-4EB3-995C-46CEF6FE4343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B3DD65-A811-47DD-ADC6-015EE9BC2A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E06499-FC41-4B7F-B76E-37FA423F17C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93919E9-B3E8-483E-A701-D87570127207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDEAF6A-8A99-4872-98CC-12BD54515B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8185B9-D244-43B3-9DF1-FF137A2108DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFAD319-DDFC-499F-86AB-141FBE435F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E068CC16-6995-40C6-BA24-9CA334C4CABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DF36E3-785F-4515-8999-BF48A255907F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F143436A-848B-443F-95E2-B20BC2403CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B21D3-7955-450F-8357-A37905B963B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386C2885-7543-43F0-9680-B57898C4F118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "231CD899-2DC5-42CD-A4F9-4D00C2C11159"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53917",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3629",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-11-02T15:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el subcomponente Backend de TYPO3 v4.0.13 y anteriores, v4.1.x anteriores a v4.1.13, v4.2.x anteriores a v4.2.10 y v4.3.x anteriores a v4.3beta2. Permiten a usuarios remotos autenticados inyectar codigo de script web o código HTML a través de vectores de ataque sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.13",
            "matchCriteriaId" : "8684CAE0-A8FB-493D-BC2B-25FF092EE93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EAE65C-1E17-48CD-B48C-E0BC09FB6596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501A9157-044A-4856-8092-418D7329EED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA47174-9BC4-4B74-8618-6A7B0773553B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A13146E-EC04-4354-9123-BC7CB292C66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F27B173-8D10-47F7-8450-F8808A918295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1FAD0A-6B98-476B-BCD2-361996CA1C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE992D57-AF82-4BF0-96E8-98110C0AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9A484F-C34D-4885-8125-D9C8725EEB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCB2DE6-4407-4E40-8574-9C813183565B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19647A4-C422-42D0-863B-5B6E0B08BFAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C842A284-8360-4DE4-8D05-8082D0A0AA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A4600DD-C9CA-4D71-BD31-12FE40A14D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71C92B1F-20A4-4354-A85D-F9B96DA09970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2DAA1-356C-4C77-B673-6F5F5817352E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E28432FD-6A1B-479F-866E-7F6F762C2207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "273F2E33-0655-46DE-9397-E16658B4BD8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F7039-4117-4D53-ABE8-99C10518D351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161E310F-F2D8-40B3-8390-8C52ACDD0B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D69530-AE74-4012-B522-01D0B6B01662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5514D17F-95A5-48C5-9F91-554F8D3C3DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46E35EC-FF7B-4510-A5F2-FC230B7477B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A671ED2-91AA-4447-8996-A8A16FE753A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4219A367-8431-4A72-AF73-ED2A853B14E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F10D45-FA29-4534-8789-201D194C46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878A3B3A-91B6-4EB3-995C-46CEF6FE4343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B3DD65-A811-47DD-ADC6-015EE9BC2A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E06499-FC41-4B7F-B76E-37FA423F17C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93919E9-B3E8-483E-A701-D87570127207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDEAF6A-8A99-4872-98CC-12BD54515B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8185B9-D244-43B3-9DF1-FF137A2108DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFAD319-DDFC-499F-86AB-141FBE435F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E068CC16-6995-40C6-BA24-9CA334C4CABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DF36E3-785F-4515-8999-BF48A255907F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F143436A-848B-443F-95E2-B20BC2403CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B21D3-7955-450F-8357-A37905B963B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386C2885-7543-43F0-9680-B57898C4F118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "231CD899-2DC5-42CD-A4F9-4D00C2C11159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFC7A20-5CC0-4B64-93C6-609D44FE3874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720AF20D-C44C-48B2-9627-BA49A330F89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD4EC2E-A886-4FF3-9A20-54BFBA35C10E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125633199111438&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53918",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125633199111438&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3630",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-11-02T15:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to place arbitrary web sites in TYPO3 backend framesets via crafted parameters, related to a \"frame hijacking\" issue."
      }, {
        "lang" : "es",
        "value" : "El subcomponente Backend de TYPO3 v4.0.13 y anteriores, v4.1.x anteriores a v4.1.13, v4.2.x anteriores a v4.2.10 y v4.3.x anteriores a v4.3beta2 permite a usuarios autenticados remotos situar sitios web de su elección en los \"framesets\" (conjuntos de marcos) de backend a través de parámetros modificados, relacionado con un asunto de \"frame hijacking\" (secuestro de marco)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.12",
            "matchCriteriaId" : "9297C028-4875-4370-8A47-E5BB4DC04A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8B51D2-B985-405E-8D87-1572D5096F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AB9DE7-3AB0-4B5B-9825-486111386852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D954FE3D-B766-4D39-B0CA-31A24EDB362C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AE3831-400B-4974-9C69-6787CF03433A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66333A00-5D7D-4467-9495-79D715EBAB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E7C6DF-C63B-4B16-9107-3C15490951D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEAD468-F39F-4B92-9ABD-F43C636B1145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6154F853-6DAF-4A34-8019-CB5BA87CCA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CF0EA5-E984-40BE-BA90-1C85568A0525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395C04FB-3390-4E97-B2F1-BEF9C42F15E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.3.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349BDDAD-35AE-44B6-9623-1ABAAFA16D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C553D36B-B446-4D63-B37F-FA32D1E5A524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.5.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33152254-3B0B-4413-90F3-72A8B1ADDBD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.6.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78413B61-AAB7-485D-BD24-C8A6D7631281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53B002D-18FD-4C6A-97C0-AA9C83ABD382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3885B69F-B9C0-488F-8775-E8E801418E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6EAF89-59F9-4D06-A7AE-175816BB7E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3390E31-A149-4D83-94D2-63AF63D02A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.8.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF63F45-3E42-4DD6-ABD3-BA67D04C8A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EAE65C-1E17-48CD-B48C-E0BC09FB6596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501A9157-044A-4856-8092-418D7329EED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA47174-9BC4-4B74-8618-6A7B0773553B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A13146E-EC04-4354-9123-BC7CB292C66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F27B173-8D10-47F7-8450-F8808A918295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1FAD0A-6B98-476B-BCD2-361996CA1C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE992D57-AF82-4BF0-96E8-98110C0AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9A484F-C34D-4885-8125-D9C8725EEB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCB2DE6-4407-4E40-8574-9C813183565B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19647A4-C422-42D0-863B-5B6E0B08BFAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C842A284-8360-4DE4-8D05-8082D0A0AA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A4600DD-C9CA-4D71-BD31-12FE40A14D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "273F2E33-0655-46DE-9397-E16658B4BD8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F7039-4117-4D53-ABE8-99C10518D351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161E310F-F2D8-40B3-8390-8C52ACDD0B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D69530-AE74-4012-B522-01D0B6B01662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5514D17F-95A5-48C5-9F91-554F8D3C3DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46E35EC-FF7B-4510-A5F2-FC230B7477B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A671ED2-91AA-4447-8996-A8A16FE753A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4219A367-8431-4A72-AF73-ED2A853B14E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F10D45-FA29-4534-8789-201D194C46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878A3B3A-91B6-4EB3-995C-46CEF6FE4343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B3DD65-A811-47DD-ADC6-015EE9BC2A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E06499-FC41-4B7F-B76E-37FA423F17C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93919E9-B3E8-483E-A701-D87570127207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDEAF6A-8A99-4872-98CC-12BD54515B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8185B9-D244-43B3-9DF1-FF137A2108DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFAD319-DDFC-499F-86AB-141FBE435F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E068CC16-6995-40C6-BA24-9CA334C4CABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DF36E3-785F-4515-8999-BF48A255907F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F143436A-848B-443F-95E2-B20BC2403CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B21D3-7955-450F-8357-A37905B963B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386C2885-7543-43F0-9680-B57898C4F118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "231CD899-2DC5-42CD-A4F9-4D00C2C11159"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53920",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3631",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-11-02T15:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2, when the DAM extension or ftp upload is enabled, allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename."
      }, {
        "lang" : "es",
        "value" : "El subcomponente Backend de TYPO3 v4.0.13 y anteriores, v4.1.x anteriores a v4.1.13, v4.2.x anteriores a v4.2.10 y v4.3.x anteriores a v4.3beta2, cuando la extensión DAM o la subida por ftp está activada, permite a usuarios autenticados remotos ejecutar comandos de su elección a través metacaracteres de shell en un nombre de fichero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.12",
            "matchCriteriaId" : "9297C028-4875-4370-8A47-E5BB4DC04A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8B51D2-B985-405E-8D87-1572D5096F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AB9DE7-3AB0-4B5B-9825-486111386852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D954FE3D-B766-4D39-B0CA-31A24EDB362C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AE3831-400B-4974-9C69-6787CF03433A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66333A00-5D7D-4467-9495-79D715EBAB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E7C6DF-C63B-4B16-9107-3C15490951D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEAD468-F39F-4B92-9ABD-F43C636B1145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6154F853-6DAF-4A34-8019-CB5BA87CCA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CF0EA5-E984-40BE-BA90-1C85568A0525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395C04FB-3390-4E97-B2F1-BEF9C42F15E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.3.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349BDDAD-35AE-44B6-9623-1ABAAFA16D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C553D36B-B446-4D63-B37F-FA32D1E5A524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.5.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33152254-3B0B-4413-90F3-72A8B1ADDBD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.6.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78413B61-AAB7-485D-BD24-C8A6D7631281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53B002D-18FD-4C6A-97C0-AA9C83ABD382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3885B69F-B9C0-488F-8775-E8E801418E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6EAF89-59F9-4D06-A7AE-175816BB7E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3390E31-A149-4D83-94D2-63AF63D02A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.8.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF63F45-3E42-4DD6-ABD3-BA67D04C8A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EAE65C-1E17-48CD-B48C-E0BC09FB6596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501A9157-044A-4856-8092-418D7329EED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA47174-9BC4-4B74-8618-6A7B0773553B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A13146E-EC04-4354-9123-BC7CB292C66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F27B173-8D10-47F7-8450-F8808A918295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1FAD0A-6B98-476B-BCD2-361996CA1C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE992D57-AF82-4BF0-96E8-98110C0AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9A484F-C34D-4885-8125-D9C8725EEB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCB2DE6-4407-4E40-8574-9C813183565B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19647A4-C422-42D0-863B-5B6E0B08BFAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C842A284-8360-4DE4-8D05-8082D0A0AA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A4600DD-C9CA-4D71-BD31-12FE40A14D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "273F2E33-0655-46DE-9397-E16658B4BD8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F7039-4117-4D53-ABE8-99C10518D351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161E310F-F2D8-40B3-8390-8C52ACDD0B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D69530-AE74-4012-B522-01D0B6B01662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5514D17F-95A5-48C5-9F91-554F8D3C3DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46E35EC-FF7B-4510-A5F2-FC230B7477B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A671ED2-91AA-4447-8996-A8A16FE753A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4219A367-8431-4A72-AF73-ED2A853B14E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F10D45-FA29-4534-8789-201D194C46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878A3B3A-91B6-4EB3-995C-46CEF6FE4343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B3DD65-A811-47DD-ADC6-015EE9BC2A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E06499-FC41-4B7F-B76E-37FA423F17C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93919E9-B3E8-483E-A701-D87570127207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDEAF6A-8A99-4872-98CC-12BD54515B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8185B9-D244-43B3-9DF1-FF137A2108DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFAD319-DDFC-499F-86AB-141FBE435F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E068CC16-6995-40C6-BA24-9CA334C4CABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DF36E3-785F-4515-8999-BF48A255907F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F143436A-848B-443F-95E2-B20BC2403CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B21D3-7955-450F-8357-A37905B963B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386C2885-7543-43F0-9680-B57898C4F118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "231CD899-2DC5-42CD-A4F9-4D00C2C11159"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53923",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3632",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-11-02T15:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the traditional frontend editing feature in the Frontend Editing subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la funcionalidad de edición del \"frontend\" (portal de usuario) tradicional del subcomponente \"Frontend Editing\" (edición del portal de usuario) de TYPO3 v4.0.13 y anteriores, v4.1.x anteriores a v4.1.13, v4.2.x anteriores a v4.2.10 y v4.3.x anteriores a v4.3beta2. Permite a usuarios remotos ejecutar comandos SQL de su elección a través parámetros sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.13",
            "matchCriteriaId" : "8684CAE0-A8FB-493D-BC2B-25FF092EE93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EAE65C-1E17-48CD-B48C-E0BC09FB6596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501A9157-044A-4856-8092-418D7329EED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA47174-9BC4-4B74-8618-6A7B0773553B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A13146E-EC04-4354-9123-BC7CB292C66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F27B173-8D10-47F7-8450-F8808A918295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1FAD0A-6B98-476B-BCD2-361996CA1C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE992D57-AF82-4BF0-96E8-98110C0AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9A484F-C34D-4885-8125-D9C8725EEB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCB2DE6-4407-4E40-8574-9C813183565B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19647A4-C422-42D0-863B-5B6E0B08BFAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C842A284-8360-4DE4-8D05-8082D0A0AA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A4600DD-C9CA-4D71-BD31-12FE40A14D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71C92B1F-20A4-4354-A85D-F9B96DA09970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF2DAA1-356C-4C77-B673-6F5F5817352E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E28432FD-6A1B-479F-866E-7F6F762C2207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "273F2E33-0655-46DE-9397-E16658B4BD8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F7039-4117-4D53-ABE8-99C10518D351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161E310F-F2D8-40B3-8390-8C52ACDD0B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D69530-AE74-4012-B522-01D0B6B01662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5514D17F-95A5-48C5-9F91-554F8D3C3DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46E35EC-FF7B-4510-A5F2-FC230B7477B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A671ED2-91AA-4447-8996-A8A16FE753A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4219A367-8431-4A72-AF73-ED2A853B14E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F10D45-FA29-4534-8789-201D194C46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878A3B3A-91B6-4EB3-995C-46CEF6FE4343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B3DD65-A811-47DD-ADC6-015EE9BC2A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E06499-FC41-4B7F-B76E-37FA423F17C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93919E9-B3E8-483E-A701-D87570127207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDEAF6A-8A99-4872-98CC-12BD54515B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8185B9-D244-43B3-9DF1-FF137A2108DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFAD319-DDFC-499F-86AB-141FBE435F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E068CC16-6995-40C6-BA24-9CA334C4CABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DF36E3-785F-4515-8999-BF48A255907F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F143436A-848B-443F-95E2-B20BC2403CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B21D3-7955-450F-8357-A37905B963B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386C2885-7543-43F0-9680-B57898C4F118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "231CD899-2DC5-42CD-A4F9-4D00C2C11159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFC7A20-5CC0-4B64-93C6-609D44FE3874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720AF20D-C44C-48B2-9627-BA49A330F89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD4EC2E-A886-4FF3-9A20-54BFBA35C10E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53924",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3633",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-11-02T15:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the sanitizing algorithm."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función de API t3lib_div::quoteJSvalue en TYPO3 v4.0.13 y anteriores, v4.1.x anteriores a v4.1.13, v4.2.x anteriores a v4.2.10 y v4.3.x anteriores a v4.3beta2. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de vectores de ataque sin especificar relacionados con el algoritmo de sanitización."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.12",
            "matchCriteriaId" : "9297C028-4875-4370-8A47-E5BB4DC04A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8B51D2-B985-405E-8D87-1572D5096F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AB9DE7-3AB0-4B5B-9825-486111386852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D954FE3D-B766-4D39-B0CA-31A24EDB362C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AE3831-400B-4974-9C69-6787CF03433A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66333A00-5D7D-4467-9495-79D715EBAB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E7C6DF-C63B-4B16-9107-3C15490951D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEAD468-F39F-4B92-9ABD-F43C636B1145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6154F853-6DAF-4A34-8019-CB5BA87CCA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CF0EA5-E984-40BE-BA90-1C85568A0525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395C04FB-3390-4E97-B2F1-BEF9C42F15E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.3.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349BDDAD-35AE-44B6-9623-1ABAAFA16D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C553D36B-B446-4D63-B37F-FA32D1E5A524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.5.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33152254-3B0B-4413-90F3-72A8B1ADDBD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.6.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78413B61-AAB7-485D-BD24-C8A6D7631281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53B002D-18FD-4C6A-97C0-AA9C83ABD382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3885B69F-B9C0-488F-8775-E8E801418E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6EAF89-59F9-4D06-A7AE-175816BB7E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3390E31-A149-4D83-94D2-63AF63D02A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.8.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF63F45-3E42-4DD6-ABD3-BA67D04C8A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EAE65C-1E17-48CD-B48C-E0BC09FB6596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501A9157-044A-4856-8092-418D7329EED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA47174-9BC4-4B74-8618-6A7B0773553B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A13146E-EC04-4354-9123-BC7CB292C66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F27B173-8D10-47F7-8450-F8808A918295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1FAD0A-6B98-476B-BCD2-361996CA1C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE992D57-AF82-4BF0-96E8-98110C0AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9A484F-C34D-4885-8125-D9C8725EEB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCB2DE6-4407-4E40-8574-9C813183565B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19647A4-C422-42D0-863B-5B6E0B08BFAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C842A284-8360-4DE4-8D05-8082D0A0AA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A4600DD-C9CA-4D71-BD31-12FE40A14D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "273F2E33-0655-46DE-9397-E16658B4BD8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F7039-4117-4D53-ABE8-99C10518D351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161E310F-F2D8-40B3-8390-8C52ACDD0B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D69530-AE74-4012-B522-01D0B6B01662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5514D17F-95A5-48C5-9F91-554F8D3C3DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46E35EC-FF7B-4510-A5F2-FC230B7477B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A671ED2-91AA-4447-8996-A8A16FE753A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4219A367-8431-4A72-AF73-ED2A853B14E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F10D45-FA29-4534-8789-201D194C46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878A3B3A-91B6-4EB3-995C-46CEF6FE4343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B3DD65-A811-47DD-ADC6-015EE9BC2A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E06499-FC41-4B7F-B76E-37FA423F17C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93919E9-B3E8-483E-A701-D87570127207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDEAF6A-8A99-4872-98CC-12BD54515B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8185B9-D244-43B3-9DF1-FF137A2108DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFAD319-DDFC-499F-86AB-141FBE435F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E068CC16-6995-40C6-BA24-9CA334C4CABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DF36E3-785F-4515-8999-BF48A255907F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F143436A-848B-443F-95E2-B20BC2403CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B21D3-7955-450F-8357-A37905B963B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386C2885-7543-43F0-9680-B57898C4F118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "231CD899-2DC5-42CD-A4F9-4D00C2C11159"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125633199111438&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53925",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125633199111438&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3634",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-11-02T15:30:00.750",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Frontend Login Box (aka felogin) subcomponent in TYPO3 4.2.0 through 4.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el subcomponente \"Frontend Login Box\" (también conocido como felogin) de TYPO3 v4.2.0 hasta la v4.2.6 permite a usuarios remotos inyectar codigo de script web o código HTML a través de parámetros sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93919E9-B3E8-483E-A701-D87570127207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDEAF6A-8A99-4872-98CC-12BD54515B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFAD319-DDFC-499F-86AB-141FBE435F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E068CC16-6995-40C6-BA24-9CA334C4CABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125633199111438&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53926",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125633199111438&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3635",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-11-02T15:30:00.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to gain access by using only the password's md5 hash as a credential."
      }, {
        "lang" : "es",
        "value" : "El subcomponente \"Install Tool\" (herramienta de instalación) en TYPO3 v4.0.13 y anteriores, v4.1.x anteriores a v4.1.13, v4.2.x anteriores a v4.2.10 y v4.3.x anteriores a v4.3beta2 permite a usuarios remotos obtener acceso usando únicamente el hash md5 como credencial."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.12",
            "matchCriteriaId" : "9297C028-4875-4370-8A47-E5BB4DC04A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8B51D2-B985-405E-8D87-1572D5096F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AB9DE7-3AB0-4B5B-9825-486111386852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D954FE3D-B766-4D39-B0CA-31A24EDB362C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AE3831-400B-4974-9C69-6787CF03433A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66333A00-5D7D-4467-9495-79D715EBAB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E7C6DF-C63B-4B16-9107-3C15490951D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEAD468-F39F-4B92-9ABD-F43C636B1145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6154F853-6DAF-4A34-8019-CB5BA87CCA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CF0EA5-E984-40BE-BA90-1C85568A0525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395C04FB-3390-4E97-B2F1-BEF9C42F15E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.3.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349BDDAD-35AE-44B6-9623-1ABAAFA16D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C553D36B-B446-4D63-B37F-FA32D1E5A524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.5.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33152254-3B0B-4413-90F3-72A8B1ADDBD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.6.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78413B61-AAB7-485D-BD24-C8A6D7631281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53B002D-18FD-4C6A-97C0-AA9C83ABD382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3885B69F-B9C0-488F-8775-E8E801418E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6EAF89-59F9-4D06-A7AE-175816BB7E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3390E31-A149-4D83-94D2-63AF63D02A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.8.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF63F45-3E42-4DD6-ABD3-BA67D04C8A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EAE65C-1E17-48CD-B48C-E0BC09FB6596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501A9157-044A-4856-8092-418D7329EED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA47174-9BC4-4B74-8618-6A7B0773553B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A13146E-EC04-4354-9123-BC7CB292C66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F27B173-8D10-47F7-8450-F8808A918295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1FAD0A-6B98-476B-BCD2-361996CA1C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE992D57-AF82-4BF0-96E8-98110C0AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9A484F-C34D-4885-8125-D9C8725EEB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCB2DE6-4407-4E40-8574-9C813183565B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19647A4-C422-42D0-863B-5B6E0B08BFAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C842A284-8360-4DE4-8D05-8082D0A0AA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A4600DD-C9CA-4D71-BD31-12FE40A14D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "273F2E33-0655-46DE-9397-E16658B4BD8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F7039-4117-4D53-ABE8-99C10518D351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161E310F-F2D8-40B3-8390-8C52ACDD0B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D69530-AE74-4012-B522-01D0B6B01662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5514D17F-95A5-48C5-9F91-554F8D3C3DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46E35EC-FF7B-4510-A5F2-FC230B7477B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A671ED2-91AA-4447-8996-A8A16FE753A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4219A367-8431-4A72-AF73-ED2A853B14E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F10D45-FA29-4534-8789-201D194C46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878A3B3A-91B6-4EB3-995C-46CEF6FE4343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B3DD65-A811-47DD-ADC6-015EE9BC2A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E06499-FC41-4B7F-B76E-37FA423F17C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93919E9-B3E8-483E-A701-D87570127207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDEAF6A-8A99-4872-98CC-12BD54515B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8185B9-D244-43B3-9DF1-FF137A2108DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFAD319-DDFC-499F-86AB-141FBE435F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E068CC16-6995-40C6-BA24-9CA334C4CABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DF36E3-785F-4515-8999-BF48A255907F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F143436A-848B-443F-95E2-B20BC2403CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B21D3-7955-450F-8357-A37905B963B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386C2885-7543-43F0-9680-B57898C4F118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "231CD899-2DC5-42CD-A4F9-4D00C2C11159"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53928",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3636",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-11-02T15:30:00.797",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el subcomponente \"Install Tool\" (herramienta de instalación) en TYPO3 v4.0.13 y anteriores, v4.1.x anteriores a v4.1.13, v4.2.x anteriores a v4.2.10 y v4.3.x anteriores a v4.3beta2. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de parámetros sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.12",
            "matchCriteriaId" : "9297C028-4875-4370-8A47-E5BB4DC04A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8B51D2-B985-405E-8D87-1572D5096F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AB9DE7-3AB0-4B5B-9825-486111386852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D954FE3D-B766-4D39-B0CA-31A24EDB362C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AE3831-400B-4974-9C69-6787CF03433A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66333A00-5D7D-4467-9495-79D715EBAB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E7C6DF-C63B-4B16-9107-3C15490951D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEAD468-F39F-4B92-9ABD-F43C636B1145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6154F853-6DAF-4A34-8019-CB5BA87CCA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CF0EA5-E984-40BE-BA90-1C85568A0525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395C04FB-3390-4E97-B2F1-BEF9C42F15E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.3.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349BDDAD-35AE-44B6-9623-1ABAAFA16D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C553D36B-B446-4D63-B37F-FA32D1E5A524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.5.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33152254-3B0B-4413-90F3-72A8B1ADDBD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.6.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78413B61-AAB7-485D-BD24-C8A6D7631281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53B002D-18FD-4C6A-97C0-AA9C83ABD382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3885B69F-B9C0-488F-8775-E8E801418E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6EAF89-59F9-4D06-A7AE-175816BB7E17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3390E31-A149-4D83-94D2-63AF63D02A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.8.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF63F45-3E42-4DD6-ABD3-BA67D04C8A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EAE65C-1E17-48CD-B48C-E0BC09FB6596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501A9157-044A-4856-8092-418D7329EED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA47174-9BC4-4B74-8618-6A7B0773553B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A13146E-EC04-4354-9123-BC7CB292C66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F27B173-8D10-47F7-8450-F8808A918295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1FAD0A-6B98-476B-BCD2-361996CA1C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE992D57-AF82-4BF0-96E8-98110C0AEBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9A484F-C34D-4885-8125-D9C8725EEB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCB2DE6-4407-4E40-8574-9C813183565B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19647A4-C422-42D0-863B-5B6E0B08BFAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C842A284-8360-4DE4-8D05-8082D0A0AA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A4600DD-C9CA-4D71-BD31-12FE40A14D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "273F2E33-0655-46DE-9397-E16658B4BD8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F7039-4117-4D53-ABE8-99C10518D351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161E310F-F2D8-40B3-8390-8C52ACDD0B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96D69530-AE74-4012-B522-01D0B6B01662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5514D17F-95A5-48C5-9F91-554F8D3C3DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46E35EC-FF7B-4510-A5F2-FC230B7477B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A671ED2-91AA-4447-8996-A8A16FE753A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4219A367-8431-4A72-AF73-ED2A853B14E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F10D45-FA29-4534-8789-201D194C46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "878A3B3A-91B6-4EB3-995C-46CEF6FE4343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B3DD65-A811-47DD-ADC6-015EE9BC2A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E06499-FC41-4B7F-B76E-37FA423F17C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93919E9-B3E8-483E-A701-D87570127207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDEAF6A-8A99-4872-98CC-12BD54515B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8185B9-D244-43B3-9DF1-FF137A2108DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFAD319-DDFC-499F-86AB-141FBE435F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E068CC16-6995-40C6-BA24-9CA334C4CABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DF36E3-785F-4515-8999-BF48A255907F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F143436A-848B-443F-95E2-B20BC2403CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B21D3-7955-450F-8357-A37905B963B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386C2885-7543-43F0-9680-B57898C4F118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "231CD899-2DC5-42CD-A4F9-4D00C2C11159"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125633199111438&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53929",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125632856206736&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125633199111438&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-02T15:30:00.813",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en VMware Server v1.x anteriores a v1.0.10 build 203137 y v2.x anteriores a v2.0.2 build 203138 en Linux, VMware ESXi v3.5 y VMware ESX v3.0.3 y v3.5 permite a atacantes remotos leer ficheros de su elección a través de vectores de ataque sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:esx:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6F7416-E694-4EC9-9FE5-0C24448ECB34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:esx:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5ECA1B-7415-4390-8018-670F2C3CDF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD59C463-F352-4F6C-853F-415E3FB4ABDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EC33AB-E92A-4AA8-A523-C341133BB515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53197903-0614-4460-8944-C1B5257D71A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.1_build_29996:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB051A5C-5F66-4732-949A-48B0FDE4AFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F037B05F-6F92-4BE1-B672-F677CBEFD075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DD6D27-1335-44EF-8B69-A9163A67BC2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFEAE8-0118-4548-A6EA-E90FA8FE7AF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.4_build_56528:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87489138-7756-453C-A149-F2C4F95EFF9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42049891-38B7-4BB7-8DA5-A87169E2D958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07139DF7-C36B-4FED-8558-7FA49BE0BCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0D7307-5946-45DC-88D3-6BC72EF50184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89699BB6-9E41-41DC-B597-B45CA05313A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9D09AC-7D9B-4150-86BC-19F44F6F2CA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A2543D5-AE09-4E90-B27E-95075BE4ACBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CFDD84-A482-42C2-B43F-839F4D7F1130"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000069.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37186",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201209-25.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023088",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1023089",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507523/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36842",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3062",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2009/000069.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201209-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1023089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507523/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2009-0015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-02T15:30:00.843",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web script or HTML via the album parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de TFTgallery 0.13 permite a usuarios remotos inyectar codigo de script web o código HTML a través del parámetro album."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tftgallery:tftgallery:0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D73A995-05FA-408D-8B8C-576F5D9F717C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0910-exploits/tftgallery-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37156",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0910-exploits/tftgallery-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-02T15:30:00.860",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Photoblog (com_photoblog) component alpha 3 and alpha 3a for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in a blogs action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente Photoblog (com_photoblog) alpha 3 y alpha 3a de Joomla! permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro \"category\" (categoría) en una acción de blogs en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webguerilla:com_photoblog:alpha_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C88072-FD07-4D06-9A52-003AD79C1F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webguerilla:com_photoblog:alpha_3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B24B17AB-515A-4CEA-BD72-056EB5192B12"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0910-exploits/joomlaphotoblog-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36809",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0910-exploits/joomlaphotoblog-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-02T15:30:00.890",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the JShop (com_jshop) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a product action to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el componente JShop (com_jshop) de Joomla! permite a usuarios remotos ejecutar comandos SQL de su elección a través de el parámetro pid en una acción \"product\" (producto) en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whorl_ltd:jshop:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B61A9741-FA7C-454A-B28C-5F3F96E1EA66"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45D1087-8182-43A1-81BD-B0D5A535EC98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.packetstormsecurity.org/0910-exploits/joomlajshop-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36808",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.packetstormsecurity.org/0910-exploits/joomlajshop-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-02T15:30:00.907",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ArubaOS 3.3.1.x, 3.3.2.x, RN 3.1.x, 3.4.x, and 3.3.2.x-FIPS on the Aruba Mobility Controller allows remote attackers to cause a denial of service (Access Point crash) via a malformed 802.11 Association Request management frame."
      }, {
        "lang" : "es",
        "value" : "ArubaOS v3.3.1.x, v3.3.2.x, RN v3.1.x, v3.4.x y v3.3.2.x-FIPS en \"Aruba Mobility Controller\" (controlador de movilidad de Aruba) permite a atacantes remotos provocar una denegación de servicio (caída del punto de acceso) a través de \"Association Request management frame\" (paquetes de gestión de peticiones de asociación) 802.11  malformados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:3.1.1:rn:*:*:*:*:*:*",
            "matchCriteriaId" : "A929FE47-A479-49B8-A7DC-C6B72C95B7FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:3.3.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79BFC0F-08A2-49CE-BA64-249093C2BFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:3.3.1.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DEE617-601D-45A0-A866-2A7CCD83D132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:3.3.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61B7E81A-1CFC-44BF-9C29-E802E19554B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:3.3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF90F10B-64EA-4BFB-991F-11BD3192E2AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:3.3.2.14:fips:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6024D5-4D55-4716-B788-92E406C84F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F41F28B-202A-4853-BE79-922CBE65E117"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:arubanetworks:aruba_mobility_controller:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEC5D17-929C-4814-A021-3AC9251F6EA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37085",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/support/alerts/aid-102609.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3051",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/support/alerts/aid-102609.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-02T15:30:00.937",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error message."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Eureka Email v2.2q, permite a los servidores POP3 ejecutar código de su elección a través de un mensaje de error largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eureka-email:eureka_email:2.2q:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A052449D-B80D-40B7-A623-5F1EEA7B6CF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/59262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37132",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0910-exploits/eurekamc-dos.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507376/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/508126/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3025",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0910-exploits/eurekamc-dos.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507376/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/508126/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-02T15:30:00.953",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Pegasus Mail (PMail) 4.41 and possibly 4.51 allows remote POP3 servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long error message."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Pegasus Mail(PMail) v4.41 y posiblemente v4.51, permite a los servidores POP3 remotos provocar una denegación de servicio (caída de aplicación) o posiblemente la ejecución de código a través  de un mensaje de error largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmail:pegasus_mail:4.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "125E04B4-22B4-483A-8FCA-CB87520BFE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmail:pegasus_mail:4.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B663E49-6FB0-4A5D-9D10-E50E898BC516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/59261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37134",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0910-exploits/pegasusmc-dos.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507377/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36797",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023075",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3026",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/exploits/Pegasus_Mail_POP3_Message_Handling_Remote_Buffer_Overflow_Exploit_3026233.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/59261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/0910-exploits/pegasusmc-dos.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507377/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/exploits/Pegasus_Mail_POP3_Message_Handling_Remote_Buffer_Overflow_Exploit_3026233.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-02T15:30:00.983",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv_37 through snv_125, might allow remote attackers to execute arbitrary code by leveraging access to the X server."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en la configuración de Solaris Trusted Extensions Policy en  Sun Solaris 10 y Opensolaris snv_37 a la snv_125, podría permitir a atacantes remotos ejecutar código de su elección aprovechando el acceso al sevidor X."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2BE4A7FC-6112-4879-B083-19CC70DC6B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "DE882906-FF9D-492A-BDB7-237575D5E278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "977AA6F7-F821-4229-B413-276231366899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9E644312-D55A-427F-BE4C-9AD280CC73F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EF568362-9967-4ACB-A880-163A2E14D99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD456A40-4017-4509-A4B0-44FBB3443645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F9456E55-1587-4BBF-A073-601D34E0CDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8163CA38-BF92-4F02-85EA-E6EFD5A500F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6043F9A0-5FA1-4101-8452-E7A8652FE79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3CDC9FF7-5FC1-4473-920F-37105009BF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6789ECB3-925F-4E16-9213-12FE3EB191CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9D309DD1-37A6-49BC-B8DB-6260D47DDD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28CBB9C9-54DB-4259-9D9F-C617E23C4221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FC09D568-2B1E-46A2-9029-B3850E5A1167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96E164AF-3346-4FF3-875A-5EA239F50BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D3B05762-2B56-41A1-B424-54A5CFFEC47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4B2E7E54-2268-4C54-9363-C2D363D3A447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "51AB0746-66E6-4FF5-9CB2-42E29A01C961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D1A9DCF7-F469-4D77-966F-3721F377D80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3D028821-CA38-48C4-9324-222526AC8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB558-9390-4AAE-A66D-E3DA537E3115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "411B33D1-F55D-42C0-9046-040ABC42E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0491828F-8BB7-4463-AEE7-BFA0C574B6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CE4D5683-259F-449E-B1C7-2BD81CC4805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "42B7F288-2D35-4988-97B0-C529485033C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "F276AFE2-B501-4355-9716-9D1A75AD09CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8ADE7EBB-8014-459F-A189-9D902BEE1FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "FF3DEB74-D65C-427A-8907-6044238E8C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A7A2D975-A03A-494A-8CFE-2D8932906C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5B3DB52A-595F-4A50-98D5-DF308471B823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B3BBCE23-9F15-45CD-859F-77ED540B51F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "053A0DA6-483C-49BB-BC7A-E624DB2C269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "447212A4-FACD-475E-A62B-60FE6504F63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB694DC0-407A-4555-8B72-DAF3C169DCE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "535FF689-13A2-40C6-8706-7782038FDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "843246D3-C2DA-454D-916A-AC8905E5134E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "244B7FE4-C485-4993-9810-3433C83A120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BE586AB9-9D46-4BC2-8092-51482F297410"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A0CE1A06-2588-47AA-81F8-E3655F915C33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5972E930-76E2-40FD-8E7F-74E012D34E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_123:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A5991C3F-29F6-462F-A34E-2446E357A220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_124:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "9C93BA4F-D07C-494C-B320-F34B8DED05C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_125:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "28AC2702-9612-427E-90FC-F513F2C4A8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9D15E371-4317-4882-BA09-F8CABB632C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "9500D5B2-DA1D-4082-83E4-92715D7F2D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BF7D0B02-7E5C-4760-96B2-902C680B897C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF68EA11-632F-4710-8CC7-192AF1BD7BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5994A4EE-3808-4863-B771-36864E202679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E977D01C-9C4B-411F-844E-7464147A12D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A37177FE-FB56-4BCB-88BA-B91963DA19EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BE640F29-CD64-44DD-9561-E205C5C241C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0FE35481-4580-4208-A6FA-7A0429D73793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "84652D52-B89B-4127-9670-5FCDBBDE8053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CE51773E-C93C-4549-907A-5AF380F24B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D98D67BD-6C94-4E77-B6AC-3199C281A1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "914CF995-B18B-43D2-AA9D-B486E768AFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "922EE565-E3C2-44BA-9970-224FF874AE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F8E26C9E-F87E-4484-89B9-42471F8410B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7A54DEC9-4F04-4E0A-B253-8822F114DCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "447E9E9E-5B19-4261-8B70-F63EAE61DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2B4A015E-802F-4440-AF10-683B5E0586B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04D12F3A-4C47-4B49-B3DE-484C1EE466E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5BE8232A-2464-449A-A7B6-D44447AA9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6061C499-21A8-4EC4-B5AD-F6E876B15C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "677C89EB-1575-46B6-A07C-C8BAA829F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "59679597-3883-4D20-A6E6-0C1CB0BAB3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A799B071-D0A6-47C4-80DF-75AB9ADD2916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "58A9EC84-8FD4-455F-95DE-FBFD67A1441E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "264D137D-0B78-4F47-AA9F-427D535A1AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7D970B1B-44C6-443B-9029-D7182782BD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "698744C6-2A65-478B-A846-099E6C86D0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "78B80C92-7EB5-4343-B830-32E8C011E572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "46E4ED9C-F013-48D2-8642-E5BA7599A512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A1E8108D-3CE7-4041-9027-1CA7473389EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "E8585133-1F25-494A-8859-87B1D93305A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_121:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "3D01EACB-9DB4-4940-A1F2-40474B24AEFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_122:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D1BBB436-9F7A-4E2D-908B-D57A531B1B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_123:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "45B5E359-6FF2-4029-AB6A-3C906DE6AF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_124:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "09B35C0E-6CBA-4B6B-BCD2-F5CC0BF8CF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_125:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B9F20F1D-6414-42C4-83B6-2CC7DD91059C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37184",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270969-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3070",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270969-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-03T16:30:10.077",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server (NS) 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris Deployment Solution 6.9 SP3, and Symantec Management Platform (SMP) 7.0 before SP3 allows remote attackers to execute arbitrary code via a long string in the second argument."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el método BrowseAndSaveFile  en el control ActiveX ConsoleUtilities v6.0.0.1846 en AeXNSConsoleUtilities.dll en Symantec Altiris Notification Server (NS) v6.0 anterior a R12, Deployment Server 6.8 and 6.9 in Symantec Altiris Deployment Solution v6.9 SP3, y Symantec Management Platform (SMP) v7.0 anterior a SP3, permite a atacantes remotos ejecutar código de su elección a través de una cadena larga en el segundo argumento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0002047-0965-4086-A5E6-AEC02200B6CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD29C7F-B147-4CDE-8AC3-FCA6CA15C464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC0FB60-BF58-455B-B5D1-97EDF2D6D0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACB4D1D-08D2-424B-B4F6-13FCDF034833"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_management_platform:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B538F1-CB05-495B-A3F3-24395A1F3B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_management_platform:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "755E4F35-FEAB-488D-825B-C23AF31F03A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_notification_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68AF67FB-5FC8-4EAA-AF09-35D4740B967F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_notification_server:6.0:*:sp1:*:*:*:*:*",
            "matchCriteriaId" : "214688D3-0653-4FDD-89C3-25E62BA050F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_notification_server:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C13D2DE-7EA0-4963-BA60-5D01E037D954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8D085BB2-1012-4386-AEE9-31870673BF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E187D85-9F75-4749-9682-29F66D919E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_notification_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C048C7FD-700F-4388-A1ED-16A6ECB31B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:altiris_notification_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "EB49276E-A0B9-4E74-9A45-928BC6A99E3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sotiriu.de/adv/NSOADV-2009-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507625/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36698",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091102_00",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3117",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.altiris.com/article.asp?article=49389&p=1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.altiris.com/article.asp?article=49568&p=1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sotiriu.de/adv/NSOADV-2009-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507625/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091102_00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.altiris.com/article.asp?article=49389&p=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.altiris.com/article.asp?article=49568&p=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-03T16:30:12.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote authenticated institution administrators to reset a site administrator password via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Mahara anterior a v1.0.13, y v1.1.x anterior a v1.1.7, permite a administradores \"institution\" autenticados remotamente restablecer las contraseñas de los administradores del sitio web a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.12",
            "matchCriteriaId" : "075F7F07-0600-4536-ACDC-B7E3CDA68842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B49D797-AF1B-4F7E-A71D-AABD0F802912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18048333-3E64-4AB4-9F20-2B1B8E7AB9FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68167317-977B-48EE-9320-2A4539A93B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB25DF09-D88F-4633-9956-D64E3497153F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32430EE-5F2B-4936-A297-2DF55CC22937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC0259C-E628-4BBA-9D97-41A130B1E741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "974F2D63-488C-41D7-A627-BF9B085A8D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26420D4-20D8-4D6D-88B5-C74F39B88720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321475F4-1548-4FD1-BED9-12D944388FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA6F03B-F449-424E-A856-5BE5FB98814F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFDC009-9CEB-450C-8704-CA73B147F220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831676A2-1A33-4605-A5F4-97FAC8A1BB18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "84652E40-1C88-438D-BCA1-4FF4C069F9AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "08F53776-5F58-4C20-8FE7-9DF06F1704A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D55D2C-E6E5-44A4-831A-3EAE5C1568CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "79228F92-00A8-4B74-A914-11BDF9641F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "9EEB3BF7-C4D3-4BB8-893F-B0FE252F0405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE91ED4-EA2A-4402-813C-1A2E5B10EA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "F7FB1F02-A03F-45E5-8D26-C007C10EE97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A09C63AC-15A8-4722-B18E-98A86EC8A856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "62452677-EE4C-4E5E-9DD2-D11C4211DA54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDC6F32-24C0-4B5E-8338-FF85B0BBF801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92848F08-EBFC-4579-A088-EC15D0B3EE48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97D8A87-390E-45AC-B1B0-CFD63C7F07E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894C07CE-BDF4-4652-9591-6DB6877582F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D278FD-9892-4B8F-BB0C-9E2323F7B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6537E2-0A45-4CFB-82A4-5BF25E59C8DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eduforge.org/frs/shownotes.php?release_id=546",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://eduforge.org/frs/shownotes.php?release_id=547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mahara.org/interaction/forum/topic.php?id=1169",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37217",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37218",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/59584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36893",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3101",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://eduforge.org/frs/shownotes.php?release_id=546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://eduforge.org/frs/shownotes.php?release_id=547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mahara.org/interaction/forum/topic.php?id=1169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/59584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3299",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-03T16:30:12.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the resume blocktype in Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en el resume blocktype en Mahara anterior a v1.0.13, y v1.1.x anterior a v1.1.7, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.12",
            "matchCriteriaId" : "075F7F07-0600-4536-ACDC-B7E3CDA68842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32430EE-5F2B-4936-A297-2DF55CC22937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26420D4-20D8-4D6D-88B5-C74F39B88720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA6F03B-F449-424E-A856-5BE5FB98814F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFDC009-9CEB-450C-8704-CA73B147F220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831676A2-1A33-4605-A5F4-97FAC8A1BB18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "84652E40-1C88-438D-BCA1-4FF4C069F9AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "08F53776-5F58-4C20-8FE7-9DF06F1704A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D55D2C-E6E5-44A4-831A-3EAE5C1568CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "79228F92-00A8-4B74-A914-11BDF9641F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "9EEB3BF7-C4D3-4BB8-893F-B0FE252F0405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE91ED4-EA2A-4402-813C-1A2E5B10EA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "F7FB1F02-A03F-45E5-8D26-C007C10EE97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A09C63AC-15A8-4722-B18E-98A86EC8A856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "62452677-EE4C-4E5E-9DD2-D11C4211DA54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDC6F32-24C0-4B5E-8338-FF85B0BBF801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92848F08-EBFC-4579-A088-EC15D0B3EE48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97D8A87-390E-45AC-B1B0-CFD63C7F07E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894C07CE-BDF4-4652-9591-6DB6877582F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D278FD-9892-4B8F-BB0C-9E2323F7B9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6537E2-0A45-4CFB-82A4-5BF25E59C8DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eduforge.org/frs/shownotes.php?release_id=546",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://eduforge.org/frs/shownotes.php?release_id=547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mahara.org/interaction/forum/topic.php?id=1170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37217",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37218",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/59583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36892",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3101",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://eduforge.org/frs/shownotes.php?release_id=546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://eduforge.org/frs/shownotes.php?release_id=547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mahara.org/interaction/forum/topic.php?id=1170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/59583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3720",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-11-03T16:30:12.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625."
      }, {
        "lang" : "es",
        "value" : "La función updatePosition en lib/xmltok_impl.c en libexpat en Expat v2.0.1, usado en  Python, PyXML, w3c-libwww, ay otros programas, permite a atacantes dependientes de contexto, provocar una denegación de servicio (caída de aplicación) a través de un documento XML con una secuencia de caracteres UTF-8 manipulada que provoca un desbordamiento de búfer fuera de límite (over-read). Vulnerabilidad distinta de CVE-2009-2625."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libexpat_project:libexpat:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7036CC4-4CF6-4D3F-B5B4-09D879A55F8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:a_m_kuchling:pyxml:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F56B0C2E-698D-40DC-875B-DF384DEE996F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C18D8AC-D77C-44CD-B5DF-AF6E3F3851CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.35",
            "versionEndExcluding" : "2.0.64",
            "matchCriteriaId" : "838655CB-43E7-4BDA-A80C-2314C9870717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.17",
            "matchCriteriaId" : "91F58140-8FBA-4733-9E2B-493BC9E5B284"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?r1=1.13&r2=1.15&view=patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?view=log",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051228.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051247.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051367.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051405.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051442.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://mail.python.org/pipermail/expat-bugs/2009-January/002781.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130168502603566&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37324",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37537",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37925",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38050",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38231",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38832",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/39478",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/41701",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/42326",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/42338",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/43300",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1990430&group_id=10127&atid=110127",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-273630-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://svn.python.org/view?view=rev&revision=74429",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:211",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:212",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:215",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:217",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:218",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:219",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:220",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/21/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/26/3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/26/4",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/27/6",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/06/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/22/5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/22/9",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/23/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/23/6",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/26/3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/28/3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2011-0896.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023160",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-890-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-890-6",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0896",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1107",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3035",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3053",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3061",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0359",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=280615",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=531697",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11019",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12719",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7112",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00370.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00413.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01274.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?r1=1.13&r2=1.15&view=patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051228.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051247.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051367.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051405.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051442.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://mail.python.org/pipermail/expat-bugs/2009-January/002781.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130168502603566&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/37925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/39478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/41701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/42326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/42338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/43300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1990430&group_id=10127&atid=110127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-273630-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://svn.python.org/view?view=rev&revision=74429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/26/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/26/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/08/27/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/09/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/22/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/22/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/23/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/23/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/26/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/10/28/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2011-0896.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-890-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-890-6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=280615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=531697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00370.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00413.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01274.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3720\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact in Python, a future update may address this flaw. If a system has PyXML installed, Python will use PyXML for expat-related functions and is then not vulnerable to the issue.",
        "lastModified" : "2010-03-05T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-03T16:30:12.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trusted Extensions in Sun Solaris 10 interferes with the operation of the xscreensaver-demo command for the XScreenSaver application, which makes it easier for physically proximate attackers to access an unattended workstation for which the intended screen locking did not occur, related to the \"restart daemon.\""
      }, {
        "lang" : "es",
        "value" : "Trusted Extensions en Sun Solaris 10 interfiere con la operación del comando xscreensaver-demo para la aplicación XScreenSaver, lo que facilita a atacantes próximos físicamente acceder a una estación desatendida en la que el bloqueo de pantalla no ha sido efectivo. Relacionado con \"restart daemon (reinicio del demonio)\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-28-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270809-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-28-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270809-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-03T16:30:12.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, related to the \"updated version of XML4J 4.4.17.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el componente XML IBM Runtimes para Java Technology v5.0.0 anterior a SR10, tiene un impacto y vectores de ataque desconocidos, relacionados con la \"versión actualizada de XML4J v4.4.17.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:runtimes_for_java_technology:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.0",
            "matchCriteriaId" : "9AC3E130-4F91-4F38-9ACC-E6F7789ED5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37210",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ63920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3106",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ63920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-0306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-04T15:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion (RIM) BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el control ActiveX Intellisync en lnresobject.dll in BlackBerry Desktop Manager en Research In Motion (RIM) BlackBerry Desktop Software anterior a v5.0.1, permite a atacantes remotos ejecutar código de su elección a través de una página web manipulada. NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_desktop_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0",
            "matchCriteriaId" : "47D9027A-74CC-4A39-8D62-2C545F6DB6E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes_intellisync:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CDBB123-E92F-43D7-9F9C-442D66216D1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB19701",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3133",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB19701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3463",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2009-11-04T15:30:00.500",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Error de indexación de array en Adobe Shockwave Player anterior a v11.5.2.602, permite a atacantes remotos ejecutar código de su elección a través de un contenido Shockwave manipulado en un sitios web. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.5.1.601",
            "matchCriteriaId" : "E2616516-18CA-4F56-803F-8CD3DBC56006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA5643BC-12F8-4F05-A363-9FC97EF1DD0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085FA7DD-8048-4768-816C-82828022FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0DC258D-1C2B-4A7F-AD80-6C88A7A78A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966A8542-E5E1-468F-989E-47F71123A426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC1BCC0-B24B-4CFC-B3B9-FA3B0D968CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFDAAB3-CC22-4604-80B3-4A54CCEFD29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77F1733-6755-44E7-8ECC-CFB397FC79A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC55CB2C-4DBC-4D16-96A7-FB3316A21D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F5982F-35BD-49A0-9DBE-774816136D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18289BB-6568-4671-BC70-C8744DD2E0C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.0.0.456:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF19CBB1-F047-4472-A19D-48A147396383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61B9485-2A42-4C95-9A10-3F1102E4EBBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.596:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FEEF7E-B477-485A-B9BC-98F6D1A2B10B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023123",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-16.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36905",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3134",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54118",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5677",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://securitytracker.com/id?1023123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3464",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2009-11-04T15:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an \"invalid pointer vulnerability,\" a different issue than CVE-2009-3465.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Adobe Shockwave Player anerior a v11.5.2.602, permite a atacantes remotos ejecutar código de su elección a través  un contenido Shockwave manipulado en una página web. Relacionado con la \"vulnerabilidad de puntero inválido. Cuestión distinta de CVE-2009-3465. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.5.1.601",
            "matchCriteriaId" : "E2616516-18CA-4F56-803F-8CD3DBC56006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA5643BC-12F8-4F05-A363-9FC97EF1DD0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085FA7DD-8048-4768-816C-82828022FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0DC258D-1C2B-4A7F-AD80-6C88A7A78A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966A8542-E5E1-468F-989E-47F71123A426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC1BCC0-B24B-4CFC-B3B9-FA3B0D968CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFDAAB3-CC22-4604-80B3-4A54CCEFD29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77F1733-6755-44E7-8ECC-CFB397FC79A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC55CB2C-4DBC-4D16-96A7-FB3316A21D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F5982F-35BD-49A0-9DBE-774816136D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18289BB-6568-4671-BC70-C8744DD2E0C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.0.0.456:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF19CBB1-F047-4472-A19D-48A147396383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61B9485-2A42-4C95-9A10-3F1102E4EBBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.596:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FEEF7E-B477-485A-B9BC-98F6D1A2B10B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023123",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-16.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36905",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3134",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54119",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6394",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://securitytracker.com/id?1023123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3465",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2009-11-04T15:30:00.593",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an \"invalid pointer vulnerability,\" a different issue than CVE-2009-3464.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Adobe Shockwave Player anerior a v11.5.2.602, permite a atacantes remotos ejecutar código de su elección a través  un contenido Shockwave manipulado en una página web. Relacionado con la \"vulnerabilidad de puntero inválido. Cuestión distinta de CVE-2009-3464. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.5.1.601",
            "matchCriteriaId" : "E2616516-18CA-4F56-803F-8CD3DBC56006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA5643BC-12F8-4F05-A363-9FC97EF1DD0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085FA7DD-8048-4768-816C-82828022FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0DC258D-1C2B-4A7F-AD80-6C88A7A78A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966A8542-E5E1-468F-989E-47F71123A426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC1BCC0-B24B-4CFC-B3B9-FA3B0D968CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFDAAB3-CC22-4604-80B3-4A54CCEFD29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77F1733-6755-44E7-8ECC-CFB397FC79A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC55CB2C-4DBC-4D16-96A7-FB3316A21D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F5982F-35BD-49A0-9DBE-774816136D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18289BB-6568-4671-BC70-C8744DD2E0C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.0.0.456:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF19CBB1-F047-4472-A19D-48A147396383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61B9485-2A42-4C95-9A10-3F1102E4EBBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.596:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FEEF7E-B477-485A-B9BC-98F6D1A2B10B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023123",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-16.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36905",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3134",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54120",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5722",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://securitytracker.com/id?1023123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3466",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2009-11-04T15:30:00.627",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an \"invalid string length vulnerability.\" NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Adobe Shockwave Player anterior a v11.5.2.602, permite a atacantes remotos ejecutar código de su elección a través de una página web manipulada que provoca una corrupción de memoria. Relacionado con la \"vulnerabilidad de longitud de cadena inválida\". NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.5.1.601",
            "matchCriteriaId" : "E2616516-18CA-4F56-803F-8CD3DBC56006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA5643BC-12F8-4F05-A363-9FC97EF1DD0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085FA7DD-8048-4768-816C-82828022FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0DC258D-1C2B-4A7F-AD80-6C88A7A78A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966A8542-E5E1-468F-989E-47F71123A426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC1BCC0-B24B-4CFC-B3B9-FA3B0D968CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFDAAB3-CC22-4604-80B3-4A54CCEFD29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77F1733-6755-44E7-8ECC-CFB397FC79A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC55CB2C-4DBC-4D16-96A7-FB3316A21D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F5982F-35BD-49A0-9DBE-774816136D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18289BB-6568-4671-BC70-C8744DD2E0C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.0.0.456:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF19CBB1-F047-4472-A19D-48A147396383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61B9485-2A42-4C95-9A10-3F1102E4EBBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.596:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FEEF7E-B477-485A-B9BC-98F6D1A2B10B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023123",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-16.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36905",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3134",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54121",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6395",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "http://securitytracker.com/id?1023123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb09-16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3547",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-11-04T15:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname."
      }, {
        "lang" : "es",
        "value" : "Múltiples condiciones de carrera en fs/pipe.c en el kernel de Linux anteriores a  v2.6.32-rc6 permite a usuarios locales producir una denegación de servicio )desreferencia a puntero NULL y caída del sistema) o conseguir privilegios mediante la apertura de un canal anónimo en la ruta /proc/*/fd/."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-672"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.31.14",
            "matchCriteriaId" : "BEC4349F-7F67-435F-8909-94648A0E8F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.32:-:*:*:*:*:*:*",
            "matchCriteriaId" : "37B2E2B1-3E39-4DBA-817D-08F34D9F6E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.32:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "C85D4E0A-14DA-4884-AF6F-A0F54304430F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.32:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8471AA-44D7-4D19-82B6-C4B999C65F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.32:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "218DE1D1-3843-4076-9AE4-70AA0FD99B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.32:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "2677114B-AF05-42EB-BBC8-FA85CD631C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.32:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8D64E1-A700-4D9E-9063-EC3CFC1A6D98"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5595E484-647C-4F85-94AB-5A4D55CD766B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B42AB65-443B-4655-BAEA-4EB4A43D9509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01C8B7E-EB19-40EA-B1D2-9AE5EA536C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "14DF1463-F23F-465F-8A35-D550A7438CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "02E6A767-B9A5-4054-BE70-286E0A464248"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0507E91-567A-41D6-A7E5-5088A39F75FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vma:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7426B5AC-D0FD-424D-9A1E-0875C2102D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC337BB7-9A45-4406-A783-851F279130EE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:mrg_realtime:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A20072-7DB7-4079-9456-E2CE98F888E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F2976D5-83A5-4A52-A1E6-D0E17F23FD62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD6917D-FE03-487F-9F2C-A79B5FCFBC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397313C3-6BF5-4A87-90B3-55678E807171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FE6DAA-4702-409A-98B6-DE13B12805A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B5DCF29-6830-45FF-BC88-17E2249C653D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad3960243e55320d74195fb85c975e0a8cc4466c",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/10/14/184",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/10/21/42",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125724568017045&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37351",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38017",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc6",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:329",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1672.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/512019/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36901",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=530490",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11513",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7608",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9327",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1541.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1548.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1550.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad3960243e55320d74195fb85c975e0a8cc4466c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/10/14/184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://lkml.org/lkml/2009/10/21/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125724568017045&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/38834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1672.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/512019/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=530490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1540.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1541.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1548.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-1550.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-04T15:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before 5.5.2.2, and 6.1 before 6.1.0.2, and TSM Express 5.3.3.0 through 5.3.6.6, allows remote attackers to execute arbitrary code via crafted data in a TCP packet."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región stack de la memoria en el planificador del demonio de aceptación de cliente (CAD) en el cliente en Tivoli Storage Manager (TSM) versiones 5.3 anteriores a 5.3.6.7, versiones 5.4 anteriores a 5.4.3, versiones 5.5 anteriores a 5.5.2.2, y versiones 6.1 anteriores a 6.1.0.2, y TSM Express versiones 5.3.3.0 hasta 5.3.6.6, de IBM, permite a los atacantes remotos ejecutar código arbitrario por medio de datos especialmente diseñados en un paquete TCP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2585495-DB97-429F-87AC-4C4E92DE305D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801CCEC1-8DED-41C4-B6D2-38E4BEC74EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A263333E-DB86-41BE-A508-731079429E62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5F0611-DD8F-42A2-AFD7-1BCBD38BAB4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25121FC4-9EE2-44AE-BEB3-02C3AB38DB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FCB242-C35B-4CDB-AE62-3CA5D312586B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70016926-5776-4A04-8D55-5CA12D1DA9B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:*:express:*:*:*:*:*",
            "matchCriteriaId" : "594F4C0E-BAF1-4B28-A21C-8608E1365592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930B5AE2-CA47-47D7-96DE-F2B9F70337C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:*:express:*:*:*:*:*",
            "matchCriteriaId" : "F1898001-E7E8-4B77-96DD-3B4FE70CF4CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5:*:express:*:*:*:*:*",
            "matchCriteriaId" : "2EA1B92E-A7C9-4AEA-A180-2DC766DC5A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FAA5227-C1F5-48C1-A207-096F228E305E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6:*:express:*:*:*:*:*",
            "matchCriteriaId" : "91D9B30D-F3CF-4E43-BF8E-A16CA3138AEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74B38E6A-86AA-4C35-AF3F-7F77DF647235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "271A29AC-0890-495D-8DF7-2530CEAF6C2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43BE5332-C982-440A-A7AA-03B83415B444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E095D6-D6C9-4E21-9CBA-508D043C4286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD434E9-6D0E-4FDB-A39A-D9FAC7E825C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F74B9A-D31E-43E3-8A29-BFD09A9442F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.6:*:express:*:*:*:*:*",
            "matchCriteriaId" : "E6252B18-7599-4401-AFDC-28C241D8DFC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E968D1-8198-4686-BFDD-8499CB435B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A8E0C4-8509-4372-99C7-CFBA2100AEBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBC191E-0CE6-4D9C-A75B-E3484AC3B4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0ADAA69-B258-4666-9AB7-7965429EA497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4722BA-186A-4999-965E-ED5FA72D4BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FF105A-6B8E-4849-875F-FD87EC9291E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EC7D2D-4B0A-4CDF-A523-85ABEF05D211"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/32534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/secunia_research/2008-51/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC61036",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21405562",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507654/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3132",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/32534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2008-51/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC61036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21405562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507654/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-04T15:30:00.703",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the traditional client scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7 and 5.4 before 5.4.2 allows remote attackers to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en traditional client scheduler en the client en IBM Tivoli Storage Manager (TSM) v5.3 anteriores a v5.3.6.7 y v5.4 anteriores a v5.4.2"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2585495-DB97-429F-87AC-4C4E92DE305D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801CCEC1-8DED-41C4-B6D2-38E4BEC74EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A263333E-DB86-41BE-A508-731079429E62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5F0611-DD8F-42A2-AFD7-1BCBD38BAB4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25121FC4-9EE2-44AE-BEB3-02C3AB38DB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FCB242-C35B-4CDB-AE62-3CA5D312586B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70016926-5776-4A04-8D55-5CA12D1DA9B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930B5AE2-CA47-47D7-96DE-F2B9F70337C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FAA5227-C1F5-48C1-A207-096F228E305E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74B38E6A-86AA-4C35-AF3F-7F77DF647235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "271A29AC-0890-495D-8DF7-2530CEAF6C2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43BE5332-C982-440A-A7AA-03B83415B444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E095D6-D6C9-4E21-9CBA-508D043C4286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD434E9-6D0E-4FDB-A39A-D9FAC7E825C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F74B9A-D31E-43E3-8A29-BFD09A9442F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E968D1-8198-4686-BFDD-8499CB435B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A8E0C4-8509-4372-99C7-CFBA2100AEBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0ADAA69-B258-4666-9AB7-7965429EA497"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/32534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC61058",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21405562",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3132",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/32534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC61058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21405562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-04T15:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the (1) UNIX and (2) Linux backup-archive clients, and the (3) OS/400 API client, in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.6, 5.4 before 5.4.2, and 5.5 before 5.5.1, when the MAILPROG option is enabled, allow attackers to read, modify, or delete arbitrary files via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades sin especificar en (1) UNIX y (2) clientes Linux backup-archive, y (3)el cliente API de OS/400, en IBM Tivoli Storage Manager (TSM) v5.3 anteriores a v5.3.6.6, v5.4 anteriores a v5.4.2, y v5.5 anteriores a v5.5.1,"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2585495-DB97-429F-87AC-4C4E92DE305D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801CCEC1-8DED-41C4-B6D2-38E4BEC74EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A263333E-DB86-41BE-A508-731079429E62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5F0611-DD8F-42A2-AFD7-1BCBD38BAB4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25121FC4-9EE2-44AE-BEB3-02C3AB38DB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93FCB242-C35B-4CDB-AE62-3CA5D312586B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70016926-5776-4A04-8D55-5CA12D1DA9B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930B5AE2-CA47-47D7-96DE-F2B9F70337C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FAA5227-C1F5-48C1-A207-096F228E305E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74B38E6A-86AA-4C35-AF3F-7F77DF647235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "271A29AC-0890-495D-8DF7-2530CEAF6C2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43BE5332-C982-440A-A7AA-03B83415B444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E095D6-D6C9-4E21-9CBA-508D043C4286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD434E9-6D0E-4FDB-A39A-D9FAC7E825C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E968D1-8198-4686-BFDD-8499CB435B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A8E0C4-8509-4372-99C7-CFBA2100AEBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0ADAA69-B258-4666-9AB7-7965429EA497"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/32534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC54489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21405562",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3132",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/32534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC54489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21405562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-04T17:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the default URI in news/ in Twilight CMS before 4.1 allows remote attackers to inject arbitrary web script or HTML via the calendar parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la URI por defecto en news/ en Twilight CMS anterior a v4.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"calendar\". NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twilightcms:twilight_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1",
            "matchCriteriaId" : "FD2EDB3E-152E-430F-8F2B-E6257B198CC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://onsec.ru/vuln?id=10",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37204",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://onsec.ru/vuln?id=10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-04T17:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Softonic International SciTE 1.72 allows user-assisted remote attackers to cause a denial of service (application crash) via a Ruby (.rb) file containing a long string, which triggers the crash when a scroll bar is used."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Softonic International SciTE v1.72, permite a atacantes asistidos por el usuario provocar una denegación de servicio (caída de aplicación) a través de un archivo Ruby (.rb) que contiene una cadena larga, que lanza la caída cuando se usa la barra de desplazamiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softonic:scite:1.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366B8246-47C8-40CB-BEEB-09C452C1DAF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-04T17:30:00.267",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in GejoSoft allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI in photos/tags."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en GejoSoft , permite a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través de PATH_INFO hacia la  URI por defecto en photos/tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gejosoft:gejosoft:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC6E84E-8378-4504-98AD-BCFF7193E9DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/56061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/gejosoft-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35921",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1968",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/56061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0907-exploits/gejosoft-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/35921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-04T17:30:00.297",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in eEye Retina WiFi Scanner 1.0.8.68, as used in Retina Network Security Scanner 5.10.14, allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a .rws file with a long RWS010 entry."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Retina WiFi Scanner v1.0.8.68, usado en Retina Network Security Scanner v5.10.14, permite a atacantes asistidos por el usuario provocar una denegación de servicio (caída de aplicación) o la ejecución de código de su elección a través de un archivo .rws con una entrada RWS010 larga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eeye:retina_wifi_scanner:1.0.8.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9676A2D-D668-4BDD-A3EE-D32402A69C63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eeye:retina_network_security_scanner:5.10.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DC06A8E-9FE4-4706-8A8C-9398B5986260"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.eeye.com/html/advisories/published/AD20090710.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35786",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35624",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1862",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.eeye.com/html/advisories/published/AD20090710.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploit-db.com/exploits/9114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1022534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-04T17:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to create or overwrite arbitrary files via the (1) CreateFolder and (2) Copy methods.  NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de método inseguro en Idefense Labs COMRaider, permite a atacantes remotos crear y sobrescribir archivos de su elección a través de los métodos (1) CreateFolder y (2) Copy. NOTA: es podría ser una vulnerabilidad en determinadas configuraciones inseguras de Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idefense:comraider:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7547411E-9F98-4F38-BED1-F72F5BEEAC83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.juniper.net/security/auto/vulnerabilities/vuln35725.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505042/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/35725",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.juniper.net/security/auto/vulnerabilities/vuln35725.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/505042/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/35725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-04T17:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions before 10.8.9, allows local users to execute arbitrary code via a long string in a (1) TREENAME or (2) GROUPNAME Policy file (spd)."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en SafeNet SoftRemote v10.8.5 (Build 2) y v10.3.5 (Build 6), y posiblemente otras versiones anteriores a v10.8.9, permite a usuarios locales ejecutar código de su elección a través de una cadena larga en (1) TREENAME o (2) un archivo GROUPNAME Policy (spd)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.8",
            "matchCriteriaId" : "2CCC5416-CA6C-4EF9-8C74-6B688FF300A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E58D092-7AEE-4930-BA65-6ABDCEA81941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B27AA9E6-544A-485F-9E44-9F66937AFCA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F911EB9-18A7-4B47-B8F1-A6E1A076D47B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C67DB6B-7FCB-400B-B269-0C0F710DC3CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B5B449-9A76-4D62-9B1F-1D108D0ABCA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C0C428-F15F-40BF-9353-F0890D2F8733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:10.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1457398-B204-4997-8091-EC943C4E1D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:10.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4525CF5B-5F19-4B0F-A068-B5D0557474F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:10.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC36359D-D57D-4CA0-B858-944593461DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:10.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA9352-5194-4F72-94DB-10696EA6E9D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:10.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B977AD44-76F4-4D43-9B06-D52046721AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:10.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E33DCCE-9DD2-4210-97AF-DB315F0731BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:10.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AD55BE4-6F19-4151-9E67-2813271A8BAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:10.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09148530-C268-443C-B44B-C9A8E8E6BABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safenet-inc:softremote:10.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3545344C-30AB-4697-B969-3908C9A7435D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/507593/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1023117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.senseofsecurity.com.au/advisories/SOS-09-008",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3108",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507593/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1023117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.senseofsecurity.com.au/advisories/SOS-09-008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-04T18:30:00.217",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NDSD process in Novell eDirectory 8.7.3 before 8.7.3.10 ftf2 and eDirectory 8.8 before 8.8.5 ftf1 does not properly handle certain LDAP search requests, which allows remote attackers to cause a denial of service (application hang) via a search request with a NULL BaseDN value."
      }, {
        "lang" : "es",
        "value" : "El proceso NDSD en Novell eDirectory v8.7.3 anterior a v8.7.3.10 ftf2 y eDirectory v8.8 anterior a v8.8.5 ftf1 no maneja adecuadamente ciertas peticiones de búsqueda de LDAP, lo que permite a atacantes remoto provocar una denegación de servicio (cuelgue de aplicación) a través de una petición de búsqueda con valor BaseDN NULL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "029ADE6D-6761-4196-847C-A0EFB3A06341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3:sp2:windows:*:*:*:*:*",
            "matchCriteriaId" : "15E2B599-2B96-4ED3-B2D9-E4D6909A1F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3:sp3:windows:*:*:*:*:*",
            "matchCriteriaId" : "9DAFE77C-4AB9-4865-B673-C32EAB3ABB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3:sp4:windows:*:*:*:*:*",
            "matchCriteriaId" : "5FC5947C-15F7-4BF0-9C0A-F2817F4BB7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3:sp5:windows:*:*:*:*:*",
            "matchCriteriaId" : "2A57D5D2-F490-4A33-AFAF-A66CE7988F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3:sp6:windows:*:*:*:*:*",
            "matchCriteriaId" : "1694F7CA-0E7B-4DC6-9B74-FCCE8B81F048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3:sp7:windows:*:*:*:*:*",
            "matchCriteriaId" : "042CF2E0-CE2C-4939-899A-F193127A28B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3:sp8:windows:*:*:*:*:*",
            "matchCriteriaId" : "2A7E430B-DD25-4BE7-8495-B4FD8EB60F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3:sp9:windows:*:*:*:*:*",
            "matchCriteriaId" : "142A95E7-009C-4A54-AA04-97C7120C228E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8D4976-BAE9-4A83-9DF6-9436C54E8413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A626A123-E33A-445F-93A2-8FA3B2E3E53A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7548D05-AD2B-46C3-9036-366585FFCB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "03D34570-657E-48D5-B778-9510C3D0FF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EA7ED79-2E4E-4BE0-B167-31BB6311A506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "FC9CE828-3461-4A32-8DD6-ED8BDA0298FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "A78EBF3A-4073-41D2-BD52-E598318D4996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13882AD-D700-4B95-9BB2-B3E0D104B227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FDCB14-9380-42C3-A6EE-3E6AEA3F52F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7004721",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3120",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-075/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/support/viewContent.do?externalId=7004721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-075/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "Per: http://www.novell.com/support/viewContent.do?externalId=7004721\r\n\r\n\"Resolution\r\n\r\nThis vulnerability is resolved in eDirectory 8.8.5 ftf1 and eDirectory 8.7.3.10 ftf2.\r\n\r\nTo resolve this problem, apply eDirectory 8.8.5 ftf1 or newer for eDirectory 8.8.X and eDirectory 8.7.3.10 ftf2 for eDirectory 8.7.3.X.  Patches are available at http://download.novell.com\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-04T18:30:00.233",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the gxmim1.dll ActiveX control in Novell Groupwise Client 7.0.3.1294 allows remote attackers to cause a denial of service (application crash) via a long argument to the SetFontFace method."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el control ActiveX  gxmim1.dll en Novell Groupwise Client v7.0.3.1294 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un argumento largo al método SetFontFace."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0.3.1294:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2345235C-F02E-42D7-8D90-013970BFC73E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.exploit-db.com/exploits/9683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/9683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-05T16:30:00.250",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java Update functionality in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22 and JDK and JRE 6 before Update 17, when a non-English version of Windows is used, does not retrieve available new JRE versions, which allows remote attackers to leverage vulnerabilities in older releases of this software, aka Bug Id 6869694."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad Java Update en Java Runtime Environment (JRE) en Sun Java SE en JDK y JRE v5.0 anteriores Update 22 y JDK y JRE v6 before Update 17, cuando una versión no inglesa de Windows es utilizada, no recupera nuevas versiones JRE disponibles, lo que permite a los atacantes remotos aprovechar vulnerabilidades de anteriores actualizaciones de este software, también conocido como Bud Id 6869694."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2AADA633-EB11-49A0-8E40-66589034F03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "B120F7D9-7C1E-4716-B2FA-2990D449F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "CD61E49F-2A46-4107-BB3F-527079983306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "D900AAE0-6032-4096-AFC2-3D43C55C6C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "88B0958C-744C-4946-908C-09D2A5FAB120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2D8D09-3F18-4E73-81CF-BB589BB8AEC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD24779-988F-4EC1-AC19-77186B68229E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1E860E-98F2-48FF-B8B3-54D4B58BF81F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE548B-DD0C-4C58-98CA-5B803F04F9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "505A8F40-7758-412F-8895-FA1B00BE6B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*",
            "matchCriteriaId" : "212F4A5F-87E3-4C62-BA21-46CBBCD8D26A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8E9AA0-8907-4B1A-86A1-08568195217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0754AFDC-2F1C-4C06-AB46-457B5E610029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DA4242-30D9-44C8-9D0D-877348FFA22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "C61C6043-99D0-4F36-AF84-1A5F90B895EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD30DAEB-4893-41CF-A455-B69C463B9337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*",
            "matchCriteriaId" : "21D6CE7E-A036-496C-8E08-A87F62B5290A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5F6E90-A942-4468-B763-9606CE073A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "B0ADF941-5E90-498D-A2E2-7DBCF5358D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "0819F015-FF7B-4C8F-B195-4CB54070BAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CB2234-B196-4F41-9FE9-A1896A57E575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "572A693C-1EEE-4A6C-BA42-B4FB4B28D0FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "7A59AF0A-5335-4650-88DB-5B261FE5E308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "0B955A34-DCD3-42E2-BC37-88F348EE31F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "A819CA7F-6AA9-4CB0-8577-7F8C751825DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "374CA7F2-A5CE-43A3-8317-EEC605127B98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF2748E-1A9A-4988-91B7-A3A8D2B06CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "E2868B56-7CFA-4E49-9EDC-8A5E4F9D4861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCADCB6-E972-429E-AAA6-44857094AF9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A86AD5C2-32D1-4C85-A643-A7FF7F46B4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "F79C6897-18C1-43CF-AA05-C73AD57F01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "9919D091-73D7-465A-80FF-F37D6CAF9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "02565D6F-4CB2-4671-A4EF-3169BCFA6154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "452A3E51-9EAC-451D-BA04-A1E7B7D917EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "55231B6B-9298-4363-9B5A-14C2DA7B1F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "E42CF0F7-418C-4BB6-9B73-FA3B9171D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "A5467E9D-07D8-4BEB-84D5-A3136C133519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*",
            "matchCriteriaId" : "B83B2CE1-45D7-47AD-BC0A-6EC74D5F8F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*",
            "matchCriteriaId" : "8A32F326-EA92-43CD-930E-E527B60CDD3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "04344167-530E-4A4D-90EF-74C684943DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E0373B-201D-408F-9234-A7EFE8B4970D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "44051CFE-D15D-4416-A123-F3E49C67A9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "F296ACF3-1373-429D-B991-8B5BA704A7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B863420B-DE16-416A-9640-1A1340A9B855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "724C972F-74FE-4044-BBC4-7E0E61FC9002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE909DE-E55A-4BD3-A5BF-ADE407432193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAC04D2-68FD-4793-A8E7-4690A543D7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "B6339EF9-97AC-4675-9971-7435A4B31432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1626F8-26F4-4EC5-A486-98808372425F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1BFE3B-3773-426B-9E69-250249E059C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "46621D4B-CA2B-4EAC-884E-9CC9486F2F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "37FED4C9-7501-4DF3-B05E-0B460CBB2D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "6958538A-0C2E-460F-A130-70515AFBB6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB1D4B3-54E6-455D-9238-B185DB012A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "360EF765-0C3A-4A13-9DA3-48928BB978E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE651B3-3320-48E7-BDD5-74D3C609162C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "2F435AA3-B716-4B3B-8873-3646E18CA600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "4773DE1C-50EF-4561-B480-74C6BD64D449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2B5C85-D6EE-4C0B-9228-A724D6C780C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "60D59062-997B-44F1-95C6-619823F138A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-269868-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-269868-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-05T16:30:00.280",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The launch method in the Deployment Toolkit plugin in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 6 before Update 17 allows remote attackers to execute arbitrary commands via a crafted web page, aka Bug Id 6869752."
      }, {
        "lang" : "es",
        "value" : "El método launch en el plugin Deployment Toolkit en Java Runtime Environment (JRE) en Sun Java SE en JDK y JRE 6 anteriores a Update 17 permite a los atacantes remotos ejecutar arbitrariamente comandos a través de una página web manipulada, también conocido como Bug Id 6869752."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD30DAEB-4893-41CF-A455-B69C463B9337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*",
            "matchCriteriaId" : "21D6CE7E-A036-496C-8E08-A87F62B5290A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5F6E90-A942-4468-B763-9606CE073A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "B0ADF941-5E90-498D-A2E2-7DBCF5358D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "0819F015-FF7B-4C8F-B195-4CB54070BAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CB2234-B196-4F41-9FE9-A1896A57E575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "572A693C-1EEE-4A6C-BA42-B4FB4B28D0FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "7A59AF0A-5335-4650-88DB-5B261FE5E308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "0B955A34-DCD3-42E2-BC37-88F348EE31F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "A819CA7F-6AA9-4CB0-8577-7F8C751825DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "374CA7F2-A5CE-43A3-8317-EEC605127B98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF2748E-1A9A-4988-91B7-A3A8D2B06CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "E2868B56-7CFA-4E49-9EDC-8A5E4F9D4861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCADCB6-E972-429E-AAA6-44857094AF9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A86AD5C2-32D1-4C85-A643-A7FF7F46B4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "F79C6897-18C1-43CF-AA05-C73AD57F01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "B6339EF9-97AC-4675-9971-7435A4B31432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1626F8-26F4-4EC5-A486-98808372425F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1BFE3B-3773-426B-9E69-250249E059C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "46621D4B-CA2B-4EAC-884E-9CC9486F2F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "37FED4C9-7501-4DF3-B05E-0B460CBB2D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "6958538A-0C2E-460F-A130-70515AFBB6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB1D4B3-54E6-455D-9238-B185DB012A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "360EF765-0C3A-4A13-9DA3-48928BB978E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE651B3-3320-48E7-BDD5-74D3C609162C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "2F435AA3-B716-4B3B-8873-3646E18CA600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "4773DE1C-50EF-4561-B480-74C6BD64D449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2B5C85-D6EE-4C0B-9228-A724D6C780C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "60D59062-997B-44F1-95C6-619823F138A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-269869-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-269869-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-05T16:30:00.313",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly use security model permissions when removing installer extensions, which allows remote attackers to execute arbitrary code by modifying a certain JNLP file to have a URL field that points to an unintended trusted application, aka Bug Id 6872824."
      }, {
        "lang" : "es",
        "value" : "Java Web Start Installer en Sun Java SE en JDK y JRE 6 anteriores a Update 17 no usa adecuadamente los permisos del modelo de seguridad cuando borra las extensiones del instalador, lo que permite a los atacantes remotos ejecutar arbitrariamente código modificando ciertos archivos JNLP que tienen un campo URL que apunta a una aplicación no confiable, también conocido como Bug Id 6872824."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "F20FDD9F-FF45-48BC-9207-54FB02E76071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA326F5-894A-4B01-BCA3-B126DA81CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "228AB7B4-4BA4-43D4-B562-D438884DB152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD5C688-2103-4D60-979E-D9BE69A989C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "21421215-F722-4207-A2E5-E2DF4B29859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E9224-3D12-47E2-8E69-7B682284CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "77BCD102-59A4-45A6-ADEF-CAB7F70E2377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AADBB4F9-E43E-428B-9979-F47A15696C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA21490-E253-4BDC-9BA8-5D068BE35189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "81C2C04D-D4BA-4C87-9609-C53AA63BFF19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-269870-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-09-077/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-269870-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-09-077/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-05T16:30:00.343",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a long file: URL in an argument, aka Bug Id 6854303."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función HsbParser.getSoundBank en Sun Java SE en JDK y JRE 5.0 anteriores a Update 22, JDK y JRE 6 anteriores a Update 17, SDK y JRE v1.3.x anteriores a v1.3.1_27, y SDK y JRE v1.4.x anteriores a v1.4.2_24 permite a los atacantes remotos ejecutar arbitrariamente código a través de un un archivo largo: URL en un argumento, también conocido como Id 6854303."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "8198F493-0447-4A87-9F16-5B6CB3572E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "645BBE6D-BA5E-4D93-9152-759A2355013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE694C9-940A-4899-844C-AC63412FA295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9476DD-9B56-4811-A248-711C25181F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "68D34082-2948-4D95-B43F-FBD59E2F3D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E01C07-4921-47CC-9AFC-D3B461D0B78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "7532E7D4-2F62-4DA0-B905-F95A0A735CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF93193-889E-4F44-ADEB-E89E56DE6C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "68C19440-4172-4539-8E38-09DBCB1752E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC000EC-9717-47DA-B182-6C8CD3970F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "115083C5-811F-47BA-8549-3BDFF9CA0740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "51337B8C-78F2-4207-998E-A3FC591F538B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "48193108-CD9F-476E-A7D2-E0796F659BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A80299-783A-4FBA-9EBF-5913942949A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "76A4F852-0240-44D6-9BD5-FE79DEF16438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E5943-5CC3-4736-85E8-FE7CC4F38735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C228E00-0F5C-41D2-8BD0-46AF682AE842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "0329E813-B2C8-4C84-BCAF-2D54C4AE0472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3C40E1-7005-4F83-B347-177BEC9EE339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "C79BDB6E-442B-41F1-A025-C17648A81FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "F20FDD9F-FF45-48BC-9207-54FB02E76071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA326F5-894A-4B01-BCA3-B126DA81CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "228AB7B4-4BA4-43D4-B562-D438884DB152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD5C688-2103-4D60-979E-D9BE69A989C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "21421215-F722-4207-A2E5-E2DF4B29859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E9224-3D12-47E2-8E69-7B682284CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "77BCD102-59A4-45A6-ADEF-CAB7F70E2377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6127E-A40D-437D-B57B-0D7F57D08559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "28AE4411-45D1-4978-BA61-334AD04FF8FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "479EB097-495A-4730-AF51-F2C0064EBA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "5024BE9F-CE32-4099-A646-F3EC5DB6F63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9FB72A-C55F-4878-89D5-375FDA08163B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "485F5ED3-062D-4A8E-AA34-9DC95D0D9646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "124364C5-0616-4C7A-A78F-08FABAA785CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7307A5-6F20-44FD-9D09-8FB76E444500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7F3992-0C15-4371-BE14-0D2046B3976E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "C5759CBC-D910-407D-83DF-A77FBDC8555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E45DE8A-477B-4BF7-893B-D11DDEE82E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDBD68A-771C-44FD-96A3-3AE189DE2591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBD21F3-AC92-4154-948E-509FB8E097F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AADBB4F9-E43E-428B-9979-F47A15696C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA21490-E253-4BDC-9BA8-5D068BE35189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "81C2C04D-D4BA-4C87-9609-C53AA63BFF19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB48B161-C239-4BB5-8667-7ACA5A5437F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83629616-1814-4858-B09F-79BEA82D6F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8F351-F900-436E-A726-55AE31FBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76B79C6-ADD0-4992-A4BD-423A0AD38714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D3F7F-30B9-4EB8-90FC-66A2A067A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722B704B-A422-4163-AD48-F30CA4A07002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05784DC-626B-4D8D-A4DF-A42AC87131DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA35E80-9E0E-4A26-B631-A61542BE4739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9E7C8-0418-4733-A496-61CCFD638859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6566CE32-E042-424A-893B-C8A9E26E2869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695F707-12E8-4BA4-BBE1-C21CB7213A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E691333-0434-4808-9ED4-E82C6EC2FD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7A538-FF2E-4622-8479-781AB73CBA45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469B74F2-4B89-42B8-8638-731E92D463B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA460D9A-662F-4861-9835-3D3116FB9488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E49A68E-0886-4AED-8FF4-9455914BFE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94B0A27-60D3-42F5-9DF6-75F481C2460D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89E95205-DB64-44AD-81A4-B77BD7595AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0875E34D-8544-49B9-BAD9-8191CC103A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E772B9-8E41-476F-81F5-87B41F1827A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9643B49-FC4B-4AD4-90AC-939DDAA96518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A04480-92DF-49AD-9B36-7F1FCB29DE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF93A34-0535-4289-B12C-A1E1E22C13D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC85B851-FEC7-4299-9EC5-D8A69E16B89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2978CF34-D48B-4ED2-A0C1-3CFAA5867223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477C310B-50AD-4D40-8EDB-4A80F0BF321D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1F526-6B28-47A3-8D2C-06CA067E9164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F09D9E-B04B-477E-86E6-E1B1F9650973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F929C59-9602-4962-95B4-4165D66E5935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B76949-9282-44D0-8075-74E482CE9A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B072DD-FC4F-4E07-9837-0E16017CA4AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86408019-1B53-4AA8-9F05-47EBD0466EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F47561-F59C-4904-8E05-D8A9629405A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB067445-8EA5-460F-B625-C21251E5A8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C075BC-607E-47A1-A32D-B912D2FA03BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007175B8-48DB-46BE-B971-FB57B6A33723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496901D5-014D-4920-A343-91A56F6FEFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D18FBC-4C9B-4722-90AB-028D281654F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BC114-592C-43FE-B227-EF41C494DC98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F4E031-CE92-48C4-BECC-7C1190DB477A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34710306-D6CF-4D07-84BF-71A8839BE416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B93DC8-6375-4B41-B9BC-F22F592C56B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16AD9E9E-D6BD-4FCD-B857-F5013033200F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BF46A9-8E4A-4583-B35F-052FD481DF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B351BB-6CA6-4CEF-9F5D-ED47774FC676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21300F7C-6904-456C-949D-C0AFA630F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776FA44E-6277-4236-A872-103E7DDE5040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA40FCD-1D34-4C47-908F-697433236153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63267A02-DCE2-4B86-B370-B90F03C7E341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00639A84-BD03-4BD9-A655-F806693DBC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2AE42E-0E25-468F-A8CB-03991F356338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14824B23-FF9F-4D6D-9D02-12B79BE346A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E015A65-708E-45B9-B66A-2D0F09638FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6493744C-A69D-4377-937E-85E7F5535EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86BA5FB-A611-458E-8E37-4D4927D04D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09019B1-B873-41CE-951E-4777F324729C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03949794-A1DD-420F-A468-8F00AEA7B69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4209A0-E73F-4B5A-9925-B5D20F879455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB8516D-03C4-478D-AFE2-824867FDC739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82AED17-FEC3-47D0-A395-26ACD07FBE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9630BC7B-9039-4FA6-86F8-5274783F3EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC39C819-9439-4029-8377-F6D58B3DFDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053DEF6-1317-4DA8-91D7-E1970DA62351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0605FF-3DDC-4F3A-8171-F3A447E9C292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801FF3B4-0729-4710-BFC2-4B078029944F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A411676-6666-4B54-A008-443B9B42F670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F69BEE4-CB4B-436A-9838-13239B368CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11AC1050-38AF-49F4-A40C-AAF9710204AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA939E8-8747-4532-B6B4-6E83824C7067"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*",
            "matchCriteriaId" : "CB9A3291-3F2C-40E9-81D3-D148002E1782"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "8198F493-0447-4A87-9F16-5B6CB3572E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "645BBE6D-BA5E-4D93-9152-759A2355013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE694C9-940A-4899-844C-AC63412FA295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9476DD-9B56-4811-A248-711C25181F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "68D34082-2948-4D95-B43F-FBD59E2F3D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E01C07-4921-47CC-9AFC-D3B461D0B78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "7532E7D4-2F62-4DA0-B905-F95A0A735CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF93193-889E-4F44-ADEB-E89E56DE6C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "68C19440-4172-4539-8E38-09DBCB1752E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC000EC-9717-47DA-B182-6C8CD3970F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "115083C5-811F-47BA-8549-3BDFF9CA0740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "51337B8C-78F2-4207-998E-A3FC591F538B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "48193108-CD9F-476E-A7D2-E0796F659BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A80299-783A-4FBA-9EBF-5913942949A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "76A4F852-0240-44D6-9BD5-FE79DEF16438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E5943-5CC3-4736-85E8-FE7CC4F38735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C228E00-0F5C-41D2-8BD0-46AF682AE842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "0329E813-B2C8-4C84-BCAF-2D54C4AE0472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3C40E1-7005-4F83-B347-177BEC9EE339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "C79BDB6E-442B-41F1-A025-C17648A81FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "F20FDD9F-FF45-48BC-9207-54FB02E76071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA326F5-894A-4B01-BCA3-B126DA81CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "228AB7B4-4BA4-43D4-B562-D438884DB152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD5C688-2103-4D60-979E-D9BE69A989C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "21421215-F722-4207-A2E5-E2DF4B29859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E9224-3D12-47E2-8E69-7B682284CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "77BCD102-59A4-45A6-ADEF-CAB7F70E2377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A472AF-049D-4D63-841C-1EF737E8D64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB48B161-C239-4BB5-8667-7ACA5A5437F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83629616-1814-4858-B09F-79BEA82D6F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8F351-F900-436E-A726-55AE31FBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76B79C6-ADD0-4992-A4BD-423A0AD38714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D3F7F-30B9-4EB8-90FC-66A2A067A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722B704B-A422-4163-AD48-F30CA4A07002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05784DC-626B-4D8D-A4DF-A42AC87131DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA35E80-9E0E-4A26-B631-A61542BE4739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9E7C8-0418-4733-A496-61CCFD638859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6566CE32-E042-424A-893B-C8A9E26E2869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6127E-A40D-437D-B57B-0D7F57D08559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "28AE4411-45D1-4978-BA61-334AD04FF8FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "479EB097-495A-4730-AF51-F2C0064EBA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "5024BE9F-CE32-4099-A646-F3EC5DB6F63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9FB72A-C55F-4878-89D5-375FDA08163B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "485F5ED3-062D-4A8E-AA34-9DC95D0D9646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "124364C5-0616-4C7A-A78F-08FABAA785CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7307A5-6F20-44FD-9D09-8FB76E444500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7F3992-0C15-4371-BE14-0D2046B3976E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "C5759CBC-D910-407D-83DF-A77FBDC8555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E45DE8A-477B-4BF7-893B-D11DDEE82E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDBD68A-771C-44FD-96A3-3AE189DE2591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBD21F3-AC92-4154-948E-509FB8E097F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AADBB4F9-E43E-428B-9979-F47A15696C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA21490-E253-4BDC-9BA8-5D068BE35189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "81C2C04D-D4BA-4C87-9609-C53AA63BFF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695F707-12E8-4BA4-BBE1-C21CB7213A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E691333-0434-4808-9ED4-E82C6EC2FD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7A538-FF2E-4622-8479-781AB73CBA45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023132",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-09-076/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-09-076/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-05T16:30:00.360",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 does not properly parse color profiles, which allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862970."
      }, {
        "lang" : "es",
        "value" : "Sun Java SE en JDK y JRE 5.0 anteriores a Update 22, JDK y JRE 6 anteriores a Update 17, SDK y JRE v1.3.x anteriores a v1.3.1_27, y SDK y JRE v1.4.x anteriores a v1.4.2_24 no analiza adecuadamente el perfil color, lo que permite a los atacantes remotos obtener privilegios a través de un archivo de imagen manipulado también conocido como Bud Id 6862970."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "8198F493-0447-4A87-9F16-5B6CB3572E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "645BBE6D-BA5E-4D93-9152-759A2355013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE694C9-940A-4899-844C-AC63412FA295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9476DD-9B56-4811-A248-711C25181F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "68D34082-2948-4D95-B43F-FBD59E2F3D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E01C07-4921-47CC-9AFC-D3B461D0B78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "7532E7D4-2F62-4DA0-B905-F95A0A735CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF93193-889E-4F44-ADEB-E89E56DE6C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "68C19440-4172-4539-8E38-09DBCB1752E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC000EC-9717-47DA-B182-6C8CD3970F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "115083C5-811F-47BA-8549-3BDFF9CA0740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "51337B8C-78F2-4207-998E-A3FC591F538B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "48193108-CD9F-476E-A7D2-E0796F659BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A80299-783A-4FBA-9EBF-5913942949A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "76A4F852-0240-44D6-9BD5-FE79DEF16438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E5943-5CC3-4736-85E8-FE7CC4F38735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C228E00-0F5C-41D2-8BD0-46AF682AE842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "0329E813-B2C8-4C84-BCAF-2D54C4AE0472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3C40E1-7005-4F83-B347-177BEC9EE339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "C79BDB6E-442B-41F1-A025-C17648A81FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "F20FDD9F-FF45-48BC-9207-54FB02E76071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA326F5-894A-4B01-BCA3-B126DA81CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "228AB7B4-4BA4-43D4-B562-D438884DB152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD5C688-2103-4D60-979E-D9BE69A989C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "21421215-F722-4207-A2E5-E2DF4B29859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E9224-3D12-47E2-8E69-7B682284CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "77BCD102-59A4-45A6-ADEF-CAB7F70E2377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6127E-A40D-437D-B57B-0D7F57D08559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "28AE4411-45D1-4978-BA61-334AD04FF8FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "479EB097-495A-4730-AF51-F2C0064EBA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "5024BE9F-CE32-4099-A646-F3EC5DB6F63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9FB72A-C55F-4878-89D5-375FDA08163B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "485F5ED3-062D-4A8E-AA34-9DC95D0D9646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "124364C5-0616-4C7A-A78F-08FABAA785CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7307A5-6F20-44FD-9D09-8FB76E444500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7F3992-0C15-4371-BE14-0D2046B3976E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "C5759CBC-D910-407D-83DF-A77FBDC8555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E45DE8A-477B-4BF7-893B-D11DDEE82E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDBD68A-771C-44FD-96A3-3AE189DE2591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBD21F3-AC92-4154-948E-509FB8E097F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AADBB4F9-E43E-428B-9979-F47A15696C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA21490-E253-4BDC-9BA8-5D068BE35189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "81C2C04D-D4BA-4C87-9609-C53AA63BFF19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB48B161-C239-4BB5-8667-7ACA5A5437F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83629616-1814-4858-B09F-79BEA82D6F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8F351-F900-436E-A726-55AE31FBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76B79C6-ADD0-4992-A4BD-423A0AD38714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D3F7F-30B9-4EB8-90FC-66A2A067A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722B704B-A422-4163-AD48-F30CA4A07002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05784DC-626B-4D8D-A4DF-A42AC87131DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA35E80-9E0E-4A26-B631-A61542BE4739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9E7C8-0418-4733-A496-61CCFD638859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6566CE32-E042-424A-893B-C8A9E26E2869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695F707-12E8-4BA4-BBE1-C21CB7213A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E691333-0434-4808-9ED4-E82C6EC2FD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7A538-FF2E-4622-8479-781AB73CBA45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469B74F2-4B89-42B8-8638-731E92D463B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA460D9A-662F-4861-9835-3D3116FB9488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E49A68E-0886-4AED-8FF4-9455914BFE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94B0A27-60D3-42F5-9DF6-75F481C2460D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89E95205-DB64-44AD-81A4-B77BD7595AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0875E34D-8544-49B9-BAD9-8191CC103A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E772B9-8E41-476F-81F5-87B41F1827A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9643B49-FC4B-4AD4-90AC-939DDAA96518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A04480-92DF-49AD-9B36-7F1FCB29DE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF93A34-0535-4289-B12C-A1E1E22C13D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC85B851-FEC7-4299-9EC5-D8A69E16B89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2978CF34-D48B-4ED2-A0C1-3CFAA5867223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477C310B-50AD-4D40-8EDB-4A80F0BF321D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1F526-6B28-47A3-8D2C-06CA067E9164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F09D9E-B04B-477E-86E6-E1B1F9650973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F929C59-9602-4962-95B4-4165D66E5935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B76949-9282-44D0-8075-74E482CE9A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B072DD-FC4F-4E07-9837-0E16017CA4AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86408019-1B53-4AA8-9F05-47EBD0466EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F47561-F59C-4904-8E05-D8A9629405A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB067445-8EA5-460F-B625-C21251E5A8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C075BC-607E-47A1-A32D-B912D2FA03BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007175B8-48DB-46BE-B971-FB57B6A33723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496901D5-014D-4920-A343-91A56F6FEFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D18FBC-4C9B-4722-90AB-028D281654F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BC114-592C-43FE-B227-EF41C494DC98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F4E031-CE92-48C4-BECC-7C1190DB477A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34710306-D6CF-4D07-84BF-71A8839BE416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B93DC8-6375-4B41-B9BC-F22F592C56B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16AD9E9E-D6BD-4FCD-B857-F5013033200F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BF46A9-8E4A-4583-B35F-052FD481DF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B351BB-6CA6-4CEF-9F5D-ED47774FC676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21300F7C-6904-456C-949D-C0AFA630F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776FA44E-6277-4236-A872-103E7DDE5040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA40FCD-1D34-4C47-908F-697433236153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63267A02-DCE2-4B86-B370-B90F03C7E341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00639A84-BD03-4BD9-A655-F806693DBC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2AE42E-0E25-468F-A8CB-03991F356338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14824B23-FF9F-4D6D-9D02-12B79BE346A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E015A65-708E-45B9-B66A-2D0F09638FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6493744C-A69D-4377-937E-85E7F5535EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86BA5FB-A611-458E-8E37-4D4927D04D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09019B1-B873-41CE-951E-4777F324729C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03949794-A1DD-420F-A468-8F00AEA7B69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4209A0-E73F-4B5A-9925-B5D20F879455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB8516D-03C4-478D-AFE2-824867FDC739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82AED17-FEC3-47D0-A395-26ACD07FBE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9630BC7B-9039-4FA6-86F8-5274783F3EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC39C819-9439-4029-8377-F6D58B3DFDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053DEF6-1317-4DA8-91D7-E1970DA62351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0605FF-3DDC-4F3A-8171-F3A447E9C292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801FF3B4-0729-4710-BFC2-4B078029944F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A411676-6666-4B54-A008-443B9B42F670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F69BEE4-CB4B-436A-9838-13239B368CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11AC1050-38AF-49F4-A40C-AAF9710204AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA939E8-8747-4532-B6B4-6E83824C7067"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*",
            "matchCriteriaId" : "CB9A3291-3F2C-40E9-81D3-D148002E1782"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "8198F493-0447-4A87-9F16-5B6CB3572E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "645BBE6D-BA5E-4D93-9152-759A2355013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE694C9-940A-4899-844C-AC63412FA295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9476DD-9B56-4811-A248-711C25181F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "68D34082-2948-4D95-B43F-FBD59E2F3D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E01C07-4921-47CC-9AFC-D3B461D0B78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "7532E7D4-2F62-4DA0-B905-F95A0A735CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF93193-889E-4F44-ADEB-E89E56DE6C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "68C19440-4172-4539-8E38-09DBCB1752E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC000EC-9717-47DA-B182-6C8CD3970F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "115083C5-811F-47BA-8549-3BDFF9CA0740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "51337B8C-78F2-4207-998E-A3FC591F538B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "48193108-CD9F-476E-A7D2-E0796F659BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A80299-783A-4FBA-9EBF-5913942949A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "76A4F852-0240-44D6-9BD5-FE79DEF16438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E5943-5CC3-4736-85E8-FE7CC4F38735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C228E00-0F5C-41D2-8BD0-46AF682AE842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "0329E813-B2C8-4C84-BCAF-2D54C4AE0472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3C40E1-7005-4F83-B347-177BEC9EE339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "C79BDB6E-442B-41F1-A025-C17648A81FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "F20FDD9F-FF45-48BC-9207-54FB02E76071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA326F5-894A-4B01-BCA3-B126DA81CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "228AB7B4-4BA4-43D4-B562-D438884DB152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD5C688-2103-4D60-979E-D9BE69A989C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "21421215-F722-4207-A2E5-E2DF4B29859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E9224-3D12-47E2-8E69-7B682284CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "77BCD102-59A4-45A6-ADEF-CAB7F70E2377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A472AF-049D-4D63-841C-1EF737E8D64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB48B161-C239-4BB5-8667-7ACA5A5437F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83629616-1814-4858-B09F-79BEA82D6F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8F351-F900-436E-A726-55AE31FBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76B79C6-ADD0-4992-A4BD-423A0AD38714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D3F7F-30B9-4EB8-90FC-66A2A067A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722B704B-A422-4163-AD48-F30CA4A07002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05784DC-626B-4D8D-A4DF-A42AC87131DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA35E80-9E0E-4A26-B631-A61542BE4739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9E7C8-0418-4733-A496-61CCFD638859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6566CE32-E042-424A-893B-C8A9E26E2869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6127E-A40D-437D-B57B-0D7F57D08559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "28AE4411-45D1-4978-BA61-334AD04FF8FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "479EB097-495A-4730-AF51-F2C0064EBA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "5024BE9F-CE32-4099-A646-F3EC5DB6F63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9FB72A-C55F-4878-89D5-375FDA08163B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "485F5ED3-062D-4A8E-AA34-9DC95D0D9646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "124364C5-0616-4C7A-A78F-08FABAA785CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7307A5-6F20-44FD-9D09-8FB76E444500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7F3992-0C15-4371-BE14-0D2046B3976E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "C5759CBC-D910-407D-83DF-A77FBDC8555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E45DE8A-477B-4BF7-893B-D11DDEE82E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDBD68A-771C-44FD-96A3-3AE189DE2591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBD21F3-AC92-4154-948E-509FB8E097F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AADBB4F9-E43E-428B-9979-F47A15696C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA21490-E253-4BDC-9BA8-5D068BE35189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "81C2C04D-D4BA-4C87-9609-C53AA63BFF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695F707-12E8-4BA4-BBE1-C21CB7213A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E691333-0434-4808-9ED4-E82C6EC2FD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7A538-FF2E-4622-8479-781AB73CBA45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-05T16:30:00.390",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función setDiffICM en Abstract Window Toolkit (AWT) en Java Runtime Environment (JRE) en Sun Java SE en JDK y JRE v5.0 anteriores a Update 22, JDK y JRE 6 anteriores a Update 17, SDK y JRE v1.3.x anteriores a v1.3.1_27, y SDK y JRE v1.4.x anteriores a v1.4.2_24 permite a los atacantes remotos ejecutar arbitrariamente código a través de argumentos manipulados, también conocido como Id 6872357."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "8198F493-0447-4A87-9F16-5B6CB3572E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "645BBE6D-BA5E-4D93-9152-759A2355013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE694C9-940A-4899-844C-AC63412FA295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9476DD-9B56-4811-A248-711C25181F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "68D34082-2948-4D95-B43F-FBD59E2F3D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E01C07-4921-47CC-9AFC-D3B461D0B78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "7532E7D4-2F62-4DA0-B905-F95A0A735CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF93193-889E-4F44-ADEB-E89E56DE6C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "68C19440-4172-4539-8E38-09DBCB1752E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC000EC-9717-47DA-B182-6C8CD3970F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "115083C5-811F-47BA-8549-3BDFF9CA0740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "51337B8C-78F2-4207-998E-A3FC591F538B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "48193108-CD9F-476E-A7D2-E0796F659BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A80299-783A-4FBA-9EBF-5913942949A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "76A4F852-0240-44D6-9BD5-FE79DEF16438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E5943-5CC3-4736-85E8-FE7CC4F38735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C228E00-0F5C-41D2-8BD0-46AF682AE842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "0329E813-B2C8-4C84-BCAF-2D54C4AE0472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3C40E1-7005-4F83-B347-177BEC9EE339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "C79BDB6E-442B-41F1-A025-C17648A81FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "F20FDD9F-FF45-48BC-9207-54FB02E76071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA326F5-894A-4B01-BCA3-B126DA81CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "228AB7B4-4BA4-43D4-B562-D438884DB152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD5C688-2103-4D60-979E-D9BE69A989C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "21421215-F722-4207-A2E5-E2DF4B29859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E9224-3D12-47E2-8E69-7B682284CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "77BCD102-59A4-45A6-ADEF-CAB7F70E2377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6127E-A40D-437D-B57B-0D7F57D08559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "28AE4411-45D1-4978-BA61-334AD04FF8FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "479EB097-495A-4730-AF51-F2C0064EBA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "5024BE9F-CE32-4099-A646-F3EC5DB6F63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9FB72A-C55F-4878-89D5-375FDA08163B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "485F5ED3-062D-4A8E-AA34-9DC95D0D9646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "124364C5-0616-4C7A-A78F-08FABAA785CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7307A5-6F20-44FD-9D09-8FB76E444500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7F3992-0C15-4371-BE14-0D2046B3976E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "C5759CBC-D910-407D-83DF-A77FBDC8555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E45DE8A-477B-4BF7-893B-D11DDEE82E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDBD68A-771C-44FD-96A3-3AE189DE2591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBD21F3-AC92-4154-948E-509FB8E097F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AADBB4F9-E43E-428B-9979-F47A15696C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA21490-E253-4BDC-9BA8-5D068BE35189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "81C2C04D-D4BA-4C87-9609-C53AA63BFF19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB48B161-C239-4BB5-8667-7ACA5A5437F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83629616-1814-4858-B09F-79BEA82D6F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8F351-F900-436E-A726-55AE31FBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76B79C6-ADD0-4992-A4BD-423A0AD38714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D3F7F-30B9-4EB8-90FC-66A2A067A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722B704B-A422-4163-AD48-F30CA4A07002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05784DC-626B-4D8D-A4DF-A42AC87131DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA35E80-9E0E-4A26-B631-A61542BE4739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9E7C8-0418-4733-A496-61CCFD638859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6566CE32-E042-424A-893B-C8A9E26E2869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695F707-12E8-4BA4-BBE1-C21CB7213A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E691333-0434-4808-9ED4-E82C6EC2FD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7A538-FF2E-4622-8479-781AB73CBA45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469B74F2-4B89-42B8-8638-731E92D463B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA460D9A-662F-4861-9835-3D3116FB9488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E49A68E-0886-4AED-8FF4-9455914BFE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94B0A27-60D3-42F5-9DF6-75F481C2460D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89E95205-DB64-44AD-81A4-B77BD7595AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0875E34D-8544-49B9-BAD9-8191CC103A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E772B9-8E41-476F-81F5-87B41F1827A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9643B49-FC4B-4AD4-90AC-939DDAA96518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A04480-92DF-49AD-9B36-7F1FCB29DE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF93A34-0535-4289-B12C-A1E1E22C13D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC85B851-FEC7-4299-9EC5-D8A69E16B89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2978CF34-D48B-4ED2-A0C1-3CFAA5867223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477C310B-50AD-4D40-8EDB-4A80F0BF321D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1F526-6B28-47A3-8D2C-06CA067E9164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F09D9E-B04B-477E-86E6-E1B1F9650973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F929C59-9602-4962-95B4-4165D66E5935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B76949-9282-44D0-8075-74E482CE9A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B072DD-FC4F-4E07-9837-0E16017CA4AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86408019-1B53-4AA8-9F05-47EBD0466EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F47561-F59C-4904-8E05-D8A9629405A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB067445-8EA5-460F-B625-C21251E5A8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C075BC-607E-47A1-A32D-B912D2FA03BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007175B8-48DB-46BE-B971-FB57B6A33723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496901D5-014D-4920-A343-91A56F6FEFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D18FBC-4C9B-4722-90AB-028D281654F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BC114-592C-43FE-B227-EF41C494DC98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F4E031-CE92-48C4-BECC-7C1190DB477A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34710306-D6CF-4D07-84BF-71A8839BE416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B93DC8-6375-4B41-B9BC-F22F592C56B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16AD9E9E-D6BD-4FCD-B857-F5013033200F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BF46A9-8E4A-4583-B35F-052FD481DF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B351BB-6CA6-4CEF-9F5D-ED47774FC676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21300F7C-6904-456C-949D-C0AFA630F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776FA44E-6277-4236-A872-103E7DDE5040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA40FCD-1D34-4C47-908F-697433236153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63267A02-DCE2-4B86-B370-B90F03C7E341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00639A84-BD03-4BD9-A655-F806693DBC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2AE42E-0E25-468F-A8CB-03991F356338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14824B23-FF9F-4D6D-9D02-12B79BE346A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E015A65-708E-45B9-B66A-2D0F09638FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6493744C-A69D-4377-937E-85E7F5535EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86BA5FB-A611-458E-8E37-4D4927D04D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09019B1-B873-41CE-951E-4777F324729C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03949794-A1DD-420F-A468-8F00AEA7B69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4209A0-E73F-4B5A-9925-B5D20F879455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB8516D-03C4-478D-AFE2-824867FDC739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82AED17-FEC3-47D0-A395-26ACD07FBE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9630BC7B-9039-4FA6-86F8-5274783F3EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC39C819-9439-4029-8377-F6D58B3DFDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053DEF6-1317-4DA8-91D7-E1970DA62351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0605FF-3DDC-4F3A-8171-F3A447E9C292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801FF3B4-0729-4710-BFC2-4B078029944F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A411676-6666-4B54-A008-443B9B42F670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F69BEE4-CB4B-436A-9838-13239B368CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11AC1050-38AF-49F4-A40C-AAF9710204AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA939E8-8747-4532-B6B4-6E83824C7067"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*",
            "matchCriteriaId" : "CB9A3291-3F2C-40E9-81D3-D148002E1782"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "8198F493-0447-4A87-9F16-5B6CB3572E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "645BBE6D-BA5E-4D93-9152-759A2355013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE694C9-940A-4899-844C-AC63412FA295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9476DD-9B56-4811-A248-711C25181F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "68D34082-2948-4D95-B43F-FBD59E2F3D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E01C07-4921-47CC-9AFC-D3B461D0B78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "7532E7D4-2F62-4DA0-B905-F95A0A735CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF93193-889E-4F44-ADEB-E89E56DE6C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "68C19440-4172-4539-8E38-09DBCB1752E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC000EC-9717-47DA-B182-6C8CD3970F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "115083C5-811F-47BA-8549-3BDFF9CA0740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "51337B8C-78F2-4207-998E-A3FC591F538B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "48193108-CD9F-476E-A7D2-E0796F659BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A80299-783A-4FBA-9EBF-5913942949A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "76A4F852-0240-44D6-9BD5-FE79DEF16438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E5943-5CC3-4736-85E8-FE7CC4F38735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C228E00-0F5C-41D2-8BD0-46AF682AE842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "0329E813-B2C8-4C84-BCAF-2D54C4AE0472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3C40E1-7005-4F83-B347-177BEC9EE339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "C79BDB6E-442B-41F1-A025-C17648A81FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "F20FDD9F-FF45-48BC-9207-54FB02E76071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA326F5-894A-4B01-BCA3-B126DA81CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "228AB7B4-4BA4-43D4-B562-D438884DB152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD5C688-2103-4D60-979E-D9BE69A989C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "21421215-F722-4207-A2E5-E2DF4B29859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E9224-3D12-47E2-8E69-7B682284CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "77BCD102-59A4-45A6-ADEF-CAB7F70E2377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A472AF-049D-4D63-841C-1EF737E8D64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB48B161-C239-4BB5-8667-7ACA5A5437F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83629616-1814-4858-B09F-79BEA82D6F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8F351-F900-436E-A726-55AE31FBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76B79C6-ADD0-4992-A4BD-423A0AD38714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D3F7F-30B9-4EB8-90FC-66A2A067A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722B704B-A422-4163-AD48-F30CA4A07002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05784DC-626B-4D8D-A4DF-A42AC87131DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA35E80-9E0E-4A26-B631-A61542BE4739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9E7C8-0418-4733-A496-61CCFD638859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6566CE32-E042-424A-893B-C8A9E26E2869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6127E-A40D-437D-B57B-0D7F57D08559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "28AE4411-45D1-4978-BA61-334AD04FF8FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "479EB097-495A-4730-AF51-F2C0064EBA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "5024BE9F-CE32-4099-A646-F3EC5DB6F63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9FB72A-C55F-4878-89D5-375FDA08163B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "485F5ED3-062D-4A8E-AA34-9DC95D0D9646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "124364C5-0616-4C7A-A78F-08FABAA785CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7307A5-6F20-44FD-9D09-8FB76E444500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7F3992-0C15-4371-BE14-0D2046B3976E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "C5759CBC-D910-407D-83DF-A77FBDC8555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E45DE8A-477B-4BF7-893B-D11DDEE82E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDBD68A-771C-44FD-96A3-3AE189DE2591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBD21F3-AC92-4154-948E-509FB8E097F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AADBB4F9-E43E-428B-9979-F47A15696C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA21490-E253-4BDC-9BA8-5D068BE35189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "81C2C04D-D4BA-4C87-9609-C53AA63BFF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695F707-12E8-4BA4-BBE1-C21CB7213A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E691333-0434-4808-9ED4-E82C6EC2FD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7A538-FF2E-4622-8479-781AB73CBA45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-09-078/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-09-078/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-05T16:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en la función setBytePixels en Abstract Window Toolkit (AWT) en Java Runtime Environment (JRE) en Sun Java SE en JDK y JRE v5.0 anteriores a Update 22, JDK y JRE 6 anteriores a Update 17, SDK y JRE v1.3.x  anteriores a v1.3.1_27, y SDK y JRE v1.4.x anteriores a v1.4.2_24 permite a los atacantes remotos ejecutar arbitrariamente código a través de argumentos manipulados, también conocido como Id 6872358."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "8198F493-0447-4A87-9F16-5B6CB3572E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "645BBE6D-BA5E-4D93-9152-759A2355013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE694C9-940A-4899-844C-AC63412FA295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9476DD-9B56-4811-A248-711C25181F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "68D34082-2948-4D95-B43F-FBD59E2F3D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E01C07-4921-47CC-9AFC-D3B461D0B78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "7532E7D4-2F62-4DA0-B905-F95A0A735CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF93193-889E-4F44-ADEB-E89E56DE6C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "68C19440-4172-4539-8E38-09DBCB1752E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC000EC-9717-47DA-B182-6C8CD3970F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "115083C5-811F-47BA-8549-3BDFF9CA0740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "51337B8C-78F2-4207-998E-A3FC591F538B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "48193108-CD9F-476E-A7D2-E0796F659BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A80299-783A-4FBA-9EBF-5913942949A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "76A4F852-0240-44D6-9BD5-FE79DEF16438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E5943-5CC3-4736-85E8-FE7CC4F38735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C228E00-0F5C-41D2-8BD0-46AF682AE842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "0329E813-B2C8-4C84-BCAF-2D54C4AE0472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3C40E1-7005-4F83-B347-177BEC9EE339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "C79BDB6E-442B-41F1-A025-C17648A81FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "F20FDD9F-FF45-48BC-9207-54FB02E76071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA326F5-894A-4B01-BCA3-B126DA81CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "228AB7B4-4BA4-43D4-B562-D438884DB152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD5C688-2103-4D60-979E-D9BE69A989C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "21421215-F722-4207-A2E5-E2DF4B29859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E9224-3D12-47E2-8E69-7B682284CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "77BCD102-59A4-45A6-ADEF-CAB7F70E2377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6127E-A40D-437D-B57B-0D7F57D08559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "28AE4411-45D1-4978-BA61-334AD04FF8FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "479EB097-495A-4730-AF51-F2C0064EBA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "5024BE9F-CE32-4099-A646-F3EC5DB6F63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9FB72A-C55F-4878-89D5-375FDA08163B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "485F5ED3-062D-4A8E-AA34-9DC95D0D9646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "124364C5-0616-4C7A-A78F-08FABAA785CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7307A5-6F20-44FD-9D09-8FB76E444500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7F3992-0C15-4371-BE14-0D2046B3976E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "C5759CBC-D910-407D-83DF-A77FBDC8555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E45DE8A-477B-4BF7-893B-D11DDEE82E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDBD68A-771C-44FD-96A3-3AE189DE2591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBD21F3-AC92-4154-948E-509FB8E097F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AADBB4F9-E43E-428B-9979-F47A15696C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA21490-E253-4BDC-9BA8-5D068BE35189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "81C2C04D-D4BA-4C87-9609-C53AA63BFF19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB48B161-C239-4BB5-8667-7ACA5A5437F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83629616-1814-4858-B09F-79BEA82D6F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8F351-F900-436E-A726-55AE31FBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76B79C6-ADD0-4992-A4BD-423A0AD38714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D3F7F-30B9-4EB8-90FC-66A2A067A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722B704B-A422-4163-AD48-F30CA4A07002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05784DC-626B-4D8D-A4DF-A42AC87131DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA35E80-9E0E-4A26-B631-A61542BE4739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9E7C8-0418-4733-A496-61CCFD638859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6566CE32-E042-424A-893B-C8A9E26E2869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695F707-12E8-4BA4-BBE1-C21CB7213A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E691333-0434-4808-9ED4-E82C6EC2FD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7A538-FF2E-4622-8479-781AB73CBA45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469B74F2-4B89-42B8-8638-731E92D463B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA460D9A-662F-4861-9835-3D3116FB9488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E49A68E-0886-4AED-8FF4-9455914BFE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94B0A27-60D3-42F5-9DF6-75F481C2460D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89E95205-DB64-44AD-81A4-B77BD7595AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0875E34D-8544-49B9-BAD9-8191CC103A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E772B9-8E41-476F-81F5-87B41F1827A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9643B49-FC4B-4AD4-90AC-939DDAA96518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A04480-92DF-49AD-9B36-7F1FCB29DE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF93A34-0535-4289-B12C-A1E1E22C13D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC85B851-FEC7-4299-9EC5-D8A69E16B89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2978CF34-D48B-4ED2-A0C1-3CFAA5867223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477C310B-50AD-4D40-8EDB-4A80F0BF321D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1F526-6B28-47A3-8D2C-06CA067E9164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F09D9E-B04B-477E-86E6-E1B1F9650973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F929C59-9602-4962-95B4-4165D66E5935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B76949-9282-44D0-8075-74E482CE9A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B072DD-FC4F-4E07-9837-0E16017CA4AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86408019-1B53-4AA8-9F05-47EBD0466EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F47561-F59C-4904-8E05-D8A9629405A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB067445-8EA5-460F-B625-C21251E5A8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C075BC-607E-47A1-A32D-B912D2FA03BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007175B8-48DB-46BE-B971-FB57B6A33723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496901D5-014D-4920-A343-91A56F6FEFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D18FBC-4C9B-4722-90AB-028D281654F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BC114-592C-43FE-B227-EF41C494DC98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F4E031-CE92-48C4-BECC-7C1190DB477A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34710306-D6CF-4D07-84BF-71A8839BE416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B93DC8-6375-4B41-B9BC-F22F592C56B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16AD9E9E-D6BD-4FCD-B857-F5013033200F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BF46A9-8E4A-4583-B35F-052FD481DF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B351BB-6CA6-4CEF-9F5D-ED47774FC676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21300F7C-6904-456C-949D-C0AFA630F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776FA44E-6277-4236-A872-103E7DDE5040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA40FCD-1D34-4C47-908F-697433236153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63267A02-DCE2-4B86-B370-B90F03C7E341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00639A84-BD03-4BD9-A655-F806693DBC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2AE42E-0E25-468F-A8CB-03991F356338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14824B23-FF9F-4D6D-9D02-12B79BE346A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E015A65-708E-45B9-B66A-2D0F09638FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6493744C-A69D-4377-937E-85E7F5535EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86BA5FB-A611-458E-8E37-4D4927D04D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09019B1-B873-41CE-951E-4777F324729C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03949794-A1DD-420F-A468-8F00AEA7B69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4209A0-E73F-4B5A-9925-B5D20F879455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB8516D-03C4-478D-AFE2-824867FDC739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82AED17-FEC3-47D0-A395-26ACD07FBE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9630BC7B-9039-4FA6-86F8-5274783F3EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC39C819-9439-4029-8377-F6D58B3DFDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053DEF6-1317-4DA8-91D7-E1970DA62351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0605FF-3DDC-4F3A-8171-F3A447E9C292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801FF3B4-0729-4710-BFC2-4B078029944F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A411676-6666-4B54-A008-443B9B42F670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F69BEE4-CB4B-436A-9838-13239B368CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11AC1050-38AF-49F4-A40C-AAF9710204AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA939E8-8747-4532-B6B4-6E83824C7067"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*",
            "matchCriteriaId" : "CB9A3291-3F2C-40E9-81D3-D148002E1782"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "8198F493-0447-4A87-9F16-5B6CB3572E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "645BBE6D-BA5E-4D93-9152-759A2355013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE694C9-940A-4899-844C-AC63412FA295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9476DD-9B56-4811-A248-711C25181F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "68D34082-2948-4D95-B43F-FBD59E2F3D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E01C07-4921-47CC-9AFC-D3B461D0B78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "7532E7D4-2F62-4DA0-B905-F95A0A735CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF93193-889E-4F44-ADEB-E89E56DE6C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "68C19440-4172-4539-8E38-09DBCB1752E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC000EC-9717-47DA-B182-6C8CD3970F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "115083C5-811F-47BA-8549-3BDFF9CA0740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "51337B8C-78F2-4207-998E-A3FC591F538B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "48193108-CD9F-476E-A7D2-E0796F659BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A80299-783A-4FBA-9EBF-5913942949A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "76A4F852-0240-44D6-9BD5-FE79DEF16438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E5943-5CC3-4736-85E8-FE7CC4F38735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C228E00-0F5C-41D2-8BD0-46AF682AE842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "0329E813-B2C8-4C84-BCAF-2D54C4AE0472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3C40E1-7005-4F83-B347-177BEC9EE339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "C79BDB6E-442B-41F1-A025-C17648A81FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "F20FDD9F-FF45-48BC-9207-54FB02E76071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA326F5-894A-4B01-BCA3-B126DA81CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "228AB7B4-4BA4-43D4-B562-D438884DB152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD5C688-2103-4D60-979E-D9BE69A989C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "21421215-F722-4207-A2E5-E2DF4B29859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E9224-3D12-47E2-8E69-7B682284CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "77BCD102-59A4-45A6-ADEF-CAB7F70E2377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A472AF-049D-4D63-841C-1EF737E8D64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB48B161-C239-4BB5-8667-7ACA5A5437F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83629616-1814-4858-B09F-79BEA82D6F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8F351-F900-436E-A726-55AE31FBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76B79C6-ADD0-4992-A4BD-423A0AD38714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D3F7F-30B9-4EB8-90FC-66A2A067A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722B704B-A422-4163-AD48-F30CA4A07002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05784DC-626B-4D8D-A4DF-A42AC87131DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA35E80-9E0E-4A26-B631-A61542BE4739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9E7C8-0418-4733-A496-61CCFD638859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6566CE32-E042-424A-893B-C8A9E26E2869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6127E-A40D-437D-B57B-0D7F57D08559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "28AE4411-45D1-4978-BA61-334AD04FF8FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "479EB097-495A-4730-AF51-F2C0064EBA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "5024BE9F-CE32-4099-A646-F3EC5DB6F63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9FB72A-C55F-4878-89D5-375FDA08163B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "485F5ED3-062D-4A8E-AA34-9DC95D0D9646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "124364C5-0616-4C7A-A78F-08FABAA785CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7307A5-6F20-44FD-9D09-8FB76E444500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7F3992-0C15-4371-BE14-0D2046B3976E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "C5759CBC-D910-407D-83DF-A77FBDC8555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E45DE8A-477B-4BF7-893B-D11DDEE82E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDBD68A-771C-44FD-96A3-3AE189DE2591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBD21F3-AC92-4154-948E-509FB8E097F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AADBB4F9-E43E-428B-9979-F47A15696C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA21490-E253-4BDC-9BA8-5D068BE35189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "81C2C04D-D4BA-4C87-9609-C53AA63BFF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695F707-12E8-4BA4-BBE1-C21CB7213A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E691333-0434-4808-9ED4-E82C6EC2FD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7A538-FF2E-4622-8479-781AB73CBA45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-09-079/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-09-079/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-05T16:30:00.437",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862969."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el JPEG JFIF Decoder en Sun Java SE en JDK y JRE v5.0 anteriores a Update 22, JDK y JRE 6 anteriores a Update 17, SDK y JRE v1.3.x anteriores a v1.3.1_27, y SDK y JRE v1.4.x anteriores a v1.4.2_24 permite a los atacantes remotos obtener privilegios a través de una archivo de imagen manipulado, también conocido como Id 6862969."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "8198F493-0447-4A87-9F16-5B6CB3572E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "645BBE6D-BA5E-4D93-9152-759A2355013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE694C9-940A-4899-844C-AC63412FA295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9476DD-9B56-4811-A248-711C25181F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "68D34082-2948-4D95-B43F-FBD59E2F3D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E01C07-4921-47CC-9AFC-D3B461D0B78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "7532E7D4-2F62-4DA0-B905-F95A0A735CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF93193-889E-4F44-ADEB-E89E56DE6C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "68C19440-4172-4539-8E38-09DBCB1752E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC000EC-9717-47DA-B182-6C8CD3970F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "115083C5-811F-47BA-8549-3BDFF9CA0740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "51337B8C-78F2-4207-998E-A3FC591F538B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "48193108-CD9F-476E-A7D2-E0796F659BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A80299-783A-4FBA-9EBF-5913942949A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "76A4F852-0240-44D6-9BD5-FE79DEF16438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E5943-5CC3-4736-85E8-FE7CC4F38735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C228E00-0F5C-41D2-8BD0-46AF682AE842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "0329E813-B2C8-4C84-BCAF-2D54C4AE0472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3C40E1-7005-4F83-B347-177BEC9EE339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "C79BDB6E-442B-41F1-A025-C17648A81FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "F20FDD9F-FF45-48BC-9207-54FB02E76071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA326F5-894A-4B01-BCA3-B126DA81CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "228AB7B4-4BA4-43D4-B562-D438884DB152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD5C688-2103-4D60-979E-D9BE69A989C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "21421215-F722-4207-A2E5-E2DF4B29859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E9224-3D12-47E2-8E69-7B682284CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "77BCD102-59A4-45A6-ADEF-CAB7F70E2377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6127E-A40D-437D-B57B-0D7F57D08559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "28AE4411-45D1-4978-BA61-334AD04FF8FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "479EB097-495A-4730-AF51-F2C0064EBA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "5024BE9F-CE32-4099-A646-F3EC5DB6F63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9FB72A-C55F-4878-89D5-375FDA08163B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "485F5ED3-062D-4A8E-AA34-9DC95D0D9646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "124364C5-0616-4C7A-A78F-08FABAA785CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7307A5-6F20-44FD-9D09-8FB76E444500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7F3992-0C15-4371-BE14-0D2046B3976E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "C5759CBC-D910-407D-83DF-A77FBDC8555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E45DE8A-477B-4BF7-893B-D11DDEE82E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDBD68A-771C-44FD-96A3-3AE189DE2591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBD21F3-AC92-4154-948E-509FB8E097F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AADBB4F9-E43E-428B-9979-F47A15696C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA21490-E253-4BDC-9BA8-5D068BE35189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "81C2C04D-D4BA-4C87-9609-C53AA63BFF19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB48B161-C239-4BB5-8667-7ACA5A5437F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83629616-1814-4858-B09F-79BEA82D6F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8F351-F900-436E-A726-55AE31FBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76B79C6-ADD0-4992-A4BD-423A0AD38714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D3F7F-30B9-4EB8-90FC-66A2A067A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722B704B-A422-4163-AD48-F30CA4A07002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05784DC-626B-4D8D-A4DF-A42AC87131DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA35E80-9E0E-4A26-B631-A61542BE4739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9E7C8-0418-4733-A496-61CCFD638859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6566CE32-E042-424A-893B-C8A9E26E2869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695F707-12E8-4BA4-BBE1-C21CB7213A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E691333-0434-4808-9ED4-E82C6EC2FD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7A538-FF2E-4622-8479-781AB73CBA45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469B74F2-4B89-42B8-8638-731E92D463B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA460D9A-662F-4861-9835-3D3116FB9488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E49A68E-0886-4AED-8FF4-9455914BFE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94B0A27-60D3-42F5-9DF6-75F481C2460D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89E95205-DB64-44AD-81A4-B77BD7595AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0875E34D-8544-49B9-BAD9-8191CC103A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E772B9-8E41-476F-81F5-87B41F1827A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9643B49-FC4B-4AD4-90AC-939DDAA96518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A04480-92DF-49AD-9B36-7F1FCB29DE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF93A34-0535-4289-B12C-A1E1E22C13D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC85B851-FEC7-4299-9EC5-D8A69E16B89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2978CF34-D48B-4ED2-A0C1-3CFAA5867223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477C310B-50AD-4D40-8EDB-4A80F0BF321D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1F526-6B28-47A3-8D2C-06CA067E9164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F09D9E-B04B-477E-86E6-E1B1F9650973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F929C59-9602-4962-95B4-4165D66E5935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B76949-9282-44D0-8075-74E482CE9A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B072DD-FC4F-4E07-9837-0E16017CA4AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86408019-1B53-4AA8-9F05-47EBD0466EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F47561-F59C-4904-8E05-D8A9629405A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB067445-8EA5-460F-B625-C21251E5A8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C075BC-607E-47A1-A32D-B912D2FA03BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007175B8-48DB-46BE-B971-FB57B6A33723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496901D5-014D-4920-A343-91A56F6FEFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D18FBC-4C9B-4722-90AB-028D281654F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BC114-592C-43FE-B227-EF41C494DC98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F4E031-CE92-48C4-BECC-7C1190DB477A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34710306-D6CF-4D07-84BF-71A8839BE416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B93DC8-6375-4B41-B9BC-F22F592C56B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16AD9E9E-D6BD-4FCD-B857-F5013033200F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BF46A9-8E4A-4583-B35F-052FD481DF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B351BB-6CA6-4CEF-9F5D-ED47774FC676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21300F7C-6904-456C-949D-C0AFA630F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776FA44E-6277-4236-A872-103E7DDE5040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA40FCD-1D34-4C47-908F-697433236153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63267A02-DCE2-4B86-B370-B90F03C7E341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00639A84-BD03-4BD9-A655-F806693DBC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2AE42E-0E25-468F-A8CB-03991F356338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14824B23-FF9F-4D6D-9D02-12B79BE346A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E015A65-708E-45B9-B66A-2D0F09638FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6493744C-A69D-4377-937E-85E7F5535EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86BA5FB-A611-458E-8E37-4D4927D04D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09019B1-B873-41CE-951E-4777F324729C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03949794-A1DD-420F-A468-8F00AEA7B69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4209A0-E73F-4B5A-9925-B5D20F879455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB8516D-03C4-478D-AFE2-824867FDC739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82AED17-FEC3-47D0-A395-26ACD07FBE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9630BC7B-9039-4FA6-86F8-5274783F3EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC39C819-9439-4029-8377-F6D58B3DFDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053DEF6-1317-4DA8-91D7-E1970DA62351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0605FF-3DDC-4F3A-8171-F3A447E9C292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801FF3B4-0729-4710-BFC2-4B078029944F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A411676-6666-4B54-A008-443B9B42F670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F69BEE4-CB4B-436A-9838-13239B368CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11AC1050-38AF-49F4-A40C-AAF9710204AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA939E8-8747-4532-B6B4-6E83824C7067"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*",
            "matchCriteriaId" : "CB9A3291-3F2C-40E9-81D3-D148002E1782"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "8198F493-0447-4A87-9F16-5B6CB3572E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "645BBE6D-BA5E-4D93-9152-759A2355013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE694C9-940A-4899-844C-AC63412FA295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9476DD-9B56-4811-A248-711C25181F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "68D34082-2948-4D95-B43F-FBD59E2F3D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E01C07-4921-47CC-9AFC-D3B461D0B78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "7532E7D4-2F62-4DA0-B905-F95A0A735CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF93193-889E-4F44-ADEB-E89E56DE6C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "68C19440-4172-4539-8E38-09DBCB1752E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC000EC-9717-47DA-B182-6C8CD3970F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "115083C5-811F-47BA-8549-3BDFF9CA0740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "51337B8C-78F2-4207-998E-A3FC591F538B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "48193108-CD9F-476E-A7D2-E0796F659BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A80299-783A-4FBA-9EBF-5913942949A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "76A4F852-0240-44D6-9BD5-FE79DEF16438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E5943-5CC3-4736-85E8-FE7CC4F38735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C228E00-0F5C-41D2-8BD0-46AF682AE842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "0329E813-B2C8-4C84-BCAF-2D54C4AE0472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3C40E1-7005-4F83-B347-177BEC9EE339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "C79BDB6E-442B-41F1-A025-C17648A81FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "F20FDD9F-FF45-48BC-9207-54FB02E76071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA326F5-894A-4B01-BCA3-B126DA81CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "228AB7B4-4BA4-43D4-B562-D438884DB152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD5C688-2103-4D60-979E-D9BE69A989C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "21421215-F722-4207-A2E5-E2DF4B29859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E9224-3D12-47E2-8E69-7B682284CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "77BCD102-59A4-45A6-ADEF-CAB7F70E2377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A472AF-049D-4D63-841C-1EF737E8D64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB48B161-C239-4BB5-8667-7ACA5A5437F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83629616-1814-4858-B09F-79BEA82D6F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8F351-F900-436E-A726-55AE31FBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76B79C6-ADD0-4992-A4BD-423A0AD38714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D3F7F-30B9-4EB8-90FC-66A2A067A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722B704B-A422-4163-AD48-F30CA4A07002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05784DC-626B-4D8D-A4DF-A42AC87131DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA35E80-9E0E-4A26-B631-A61542BE4739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9E7C8-0418-4733-A496-61CCFD638859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6566CE32-E042-424A-893B-C8A9E26E2869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6127E-A40D-437D-B57B-0D7F57D08559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "28AE4411-45D1-4978-BA61-334AD04FF8FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "479EB097-495A-4730-AF51-F2C0064EBA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "5024BE9F-CE32-4099-A646-F3EC5DB6F63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9FB72A-C55F-4878-89D5-375FDA08163B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "485F5ED3-062D-4A8E-AA34-9DC95D0D9646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "124364C5-0616-4C7A-A78F-08FABAA785CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7307A5-6F20-44FD-9D09-8FB76E444500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7F3992-0C15-4371-BE14-0D2046B3976E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "C5759CBC-D910-407D-83DF-A77FBDC8555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E45DE8A-477B-4BF7-893B-D11DDEE82E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDBD68A-771C-44FD-96A3-3AE189DE2591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBD21F3-AC92-4154-948E-509FB8E097F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AADBB4F9-E43E-428B-9979-F47A15696C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA21490-E253-4BDC-9BA8-5D068BE35189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "81C2C04D-D4BA-4C87-9609-C53AA63BFF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695F707-12E8-4BA4-BBE1-C21CB7213A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E691333-0434-4808-9ED4-E82C6EC2FD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7A538-FF2E-4622-8479-781AB73CBA45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-05T16:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a \"quantization problem,\" aka Bug Id 6862968."
      }, {
        "lang" : "es",
        "value" : "El JPEG Image Writer en Sun Java SE en JDK y JRE v5.0 anteriores a Update 22, JDK y JRE 6 anteriores a Update 17, y SDK y JRE v1.4.x anteriores a v1.4.2_24 permite a los atacantes remotos obtener privilegios a través de un archivo de imagen manipulado, relativo a \"problemas de cuantificación\", también conocido como Bug 6862968."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "8198F493-0447-4A87-9F16-5B6CB3572E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "645BBE6D-BA5E-4D93-9152-759A2355013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE694C9-940A-4899-844C-AC63412FA295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9476DD-9B56-4811-A248-711C25181F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "68D34082-2948-4D95-B43F-FBD59E2F3D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E01C07-4921-47CC-9AFC-D3B461D0B78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "7532E7D4-2F62-4DA0-B905-F95A0A735CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF93193-889E-4F44-ADEB-E89E56DE6C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "68C19440-4172-4539-8E38-09DBCB1752E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC000EC-9717-47DA-B182-6C8CD3970F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "115083C5-811F-47BA-8549-3BDFF9CA0740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "51337B8C-78F2-4207-998E-A3FC591F538B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "48193108-CD9F-476E-A7D2-E0796F659BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A80299-783A-4FBA-9EBF-5913942949A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "76A4F852-0240-44D6-9BD5-FE79DEF16438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E5943-5CC3-4736-85E8-FE7CC4F38735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C228E00-0F5C-41D2-8BD0-46AF682AE842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "0329E813-B2C8-4C84-BCAF-2D54C4AE0472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3C40E1-7005-4F83-B347-177BEC9EE339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "C79BDB6E-442B-41F1-A025-C17648A81FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "F20FDD9F-FF45-48BC-9207-54FB02E76071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA326F5-894A-4B01-BCA3-B126DA81CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "228AB7B4-4BA4-43D4-B562-D438884DB152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD5C688-2103-4D60-979E-D9BE69A989C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "21421215-F722-4207-A2E5-E2DF4B29859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E9224-3D12-47E2-8E69-7B682284CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "77BCD102-59A4-45A6-ADEF-CAB7F70E2377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6127E-A40D-437D-B57B-0D7F57D08559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "28AE4411-45D1-4978-BA61-334AD04FF8FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "479EB097-495A-4730-AF51-F2C0064EBA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "5024BE9F-CE32-4099-A646-F3EC5DB6F63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9FB72A-C55F-4878-89D5-375FDA08163B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "485F5ED3-062D-4A8E-AA34-9DC95D0D9646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "124364C5-0616-4C7A-A78F-08FABAA785CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7307A5-6F20-44FD-9D09-8FB76E444500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7F3992-0C15-4371-BE14-0D2046B3976E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "C5759CBC-D910-407D-83DF-A77FBDC8555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E45DE8A-477B-4BF7-893B-D11DDEE82E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDBD68A-771C-44FD-96A3-3AE189DE2591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBD21F3-AC92-4154-948E-509FB8E097F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AADBB4F9-E43E-428B-9979-F47A15696C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA21490-E253-4BDC-9BA8-5D068BE35189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "81C2C04D-D4BA-4C87-9609-C53AA63BFF19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB48B161-C239-4BB5-8667-7ACA5A5437F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83629616-1814-4858-B09F-79BEA82D6F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8F351-F900-436E-A726-55AE31FBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76B79C6-ADD0-4992-A4BD-423A0AD38714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D3F7F-30B9-4EB8-90FC-66A2A067A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722B704B-A422-4163-AD48-F30CA4A07002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05784DC-626B-4D8D-A4DF-A42AC87131DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA35E80-9E0E-4A26-B631-A61542BE4739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9E7C8-0418-4733-A496-61CCFD638859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6566CE32-E042-424A-893B-C8A9E26E2869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695F707-12E8-4BA4-BBE1-C21CB7213A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E691333-0434-4808-9ED4-E82C6EC2FD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7A538-FF2E-4622-8479-781AB73CBA45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469B74F2-4B89-42B8-8638-731E92D463B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA460D9A-662F-4861-9835-3D3116FB9488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E49A68E-0886-4AED-8FF4-9455914BFE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94B0A27-60D3-42F5-9DF6-75F481C2460D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89E95205-DB64-44AD-81A4-B77BD7595AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0875E34D-8544-49B9-BAD9-8191CC103A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E772B9-8E41-476F-81F5-87B41F1827A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9643B49-FC4B-4AD4-90AC-939DDAA96518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A04480-92DF-49AD-9B36-7F1FCB29DE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF93A34-0535-4289-B12C-A1E1E22C13D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC85B851-FEC7-4299-9EC5-D8A69E16B89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2978CF34-D48B-4ED2-A0C1-3CFAA5867223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477C310B-50AD-4D40-8EDB-4A80F0BF321D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1F526-6B28-47A3-8D2C-06CA067E9164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F09D9E-B04B-477E-86E6-E1B1F9650973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F929C59-9602-4962-95B4-4165D66E5935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B76949-9282-44D0-8075-74E482CE9A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B072DD-FC4F-4E07-9837-0E16017CA4AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86408019-1B53-4AA8-9F05-47EBD0466EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F47561-F59C-4904-8E05-D8A9629405A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB067445-8EA5-460F-B625-C21251E5A8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C075BC-607E-47A1-A32D-B912D2FA03BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007175B8-48DB-46BE-B971-FB57B6A33723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496901D5-014D-4920-A343-91A56F6FEFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D18FBC-4C9B-4722-90AB-028D281654F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BC114-592C-43FE-B227-EF41C494DC98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F4E031-CE92-48C4-BECC-7C1190DB477A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34710306-D6CF-4D07-84BF-71A8839BE416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B93DC8-6375-4B41-B9BC-F22F592C56B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16AD9E9E-D6BD-4FCD-B857-F5013033200F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BF46A9-8E4A-4583-B35F-052FD481DF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B351BB-6CA6-4CEF-9F5D-ED47774FC676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21300F7C-6904-456C-949D-C0AFA630F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776FA44E-6277-4236-A872-103E7DDE5040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA40FCD-1D34-4C47-908F-697433236153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63267A02-DCE2-4B86-B370-B90F03C7E341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00639A84-BD03-4BD9-A655-F806693DBC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2AE42E-0E25-468F-A8CB-03991F356338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14824B23-FF9F-4D6D-9D02-12B79BE346A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E015A65-708E-45B9-B66A-2D0F09638FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6493744C-A69D-4377-937E-85E7F5535EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86BA5FB-A611-458E-8E37-4D4927D04D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09019B1-B873-41CE-951E-4777F324729C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03949794-A1DD-420F-A468-8F00AEA7B69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4209A0-E73F-4B5A-9925-B5D20F879455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB8516D-03C4-478D-AFE2-824867FDC739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82AED17-FEC3-47D0-A395-26ACD07FBE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9630BC7B-9039-4FA6-86F8-5274783F3EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC39C819-9439-4029-8377-F6D58B3DFDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053DEF6-1317-4DA8-91D7-E1970DA62351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0605FF-3DDC-4F3A-8171-F3A447E9C292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801FF3B4-0729-4710-BFC2-4B078029944F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A411676-6666-4B54-A008-443B9B42F670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F69BEE4-CB4B-436A-9838-13239B368CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11AC1050-38AF-49F4-A40C-AAF9710204AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA939E8-8747-4532-B6B4-6E83824C7067"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*",
            "matchCriteriaId" : "CB9A3291-3F2C-40E9-81D3-D148002E1782"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "8198F493-0447-4A87-9F16-5B6CB3572E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "645BBE6D-BA5E-4D93-9152-759A2355013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE694C9-940A-4899-844C-AC63412FA295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9476DD-9B56-4811-A248-711C25181F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "68D34082-2948-4D95-B43F-FBD59E2F3D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E01C07-4921-47CC-9AFC-D3B461D0B78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "7532E7D4-2F62-4DA0-B905-F95A0A735CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF93193-889E-4F44-ADEB-E89E56DE6C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "68C19440-4172-4539-8E38-09DBCB1752E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC000EC-9717-47DA-B182-6C8CD3970F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "115083C5-811F-47BA-8549-3BDFF9CA0740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "51337B8C-78F2-4207-998E-A3FC591F538B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "48193108-CD9F-476E-A7D2-E0796F659BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A80299-783A-4FBA-9EBF-5913942949A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "76A4F852-0240-44D6-9BD5-FE79DEF16438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E5943-5CC3-4736-85E8-FE7CC4F38735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C228E00-0F5C-41D2-8BD0-46AF682AE842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "0329E813-B2C8-4C84-BCAF-2D54C4AE0472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3C40E1-7005-4F83-B347-177BEC9EE339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "C79BDB6E-442B-41F1-A025-C17648A81FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "F20FDD9F-FF45-48BC-9207-54FB02E76071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA326F5-894A-4B01-BCA3-B126DA81CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "228AB7B4-4BA4-43D4-B562-D438884DB152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD5C688-2103-4D60-979E-D9BE69A989C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "21421215-F722-4207-A2E5-E2DF4B29859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E9224-3D12-47E2-8E69-7B682284CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "77BCD102-59A4-45A6-ADEF-CAB7F70E2377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A472AF-049D-4D63-841C-1EF737E8D64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB48B161-C239-4BB5-8667-7ACA5A5437F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83629616-1814-4858-B09F-79BEA82D6F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8F351-F900-436E-A726-55AE31FBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76B79C6-ADD0-4992-A4BD-423A0AD38714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D3F7F-30B9-4EB8-90FC-66A2A067A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722B704B-A422-4163-AD48-F30CA4A07002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05784DC-626B-4D8D-A4DF-A42AC87131DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA35E80-9E0E-4A26-B631-A61542BE4739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9E7C8-0418-4733-A496-61CCFD638859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6566CE32-E042-424A-893B-C8A9E26E2869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6127E-A40D-437D-B57B-0D7F57D08559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "28AE4411-45D1-4978-BA61-334AD04FF8FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "479EB097-495A-4730-AF51-F2C0064EBA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "5024BE9F-CE32-4099-A646-F3EC5DB6F63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9FB72A-C55F-4878-89D5-375FDA08163B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "485F5ED3-062D-4A8E-AA34-9DC95D0D9646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "124364C5-0616-4C7A-A78F-08FABAA785CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7307A5-6F20-44FD-9D09-8FB76E444500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7F3992-0C15-4371-BE14-0D2046B3976E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "C5759CBC-D910-407D-83DF-A77FBDC8555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E45DE8A-477B-4BF7-893B-D11DDEE82E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDBD68A-771C-44FD-96A3-3AE189DE2591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBD21F3-AC92-4154-948E-509FB8E097F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AADBB4F9-E43E-428B-9979-F47A15696C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA21490-E253-4BDC-9BA8-5D068BE35189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "81C2C04D-D4BA-4C87-9609-C53AA63BFF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695F707-12E8-4BA4-BBE1-C21CB7213A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E691333-0434-4808-9ED4-E82C6EC2FD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7A538-FF2E-4622-8479-781AB73CBA45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-05T16:30:00.483",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la implementacion JPEGImageReader en el componente ImageI/O en Sun Java SE en JDK y JRE v5.0 anteriores a Update 22, JDK y JRE 6 anteriores a Update 17, y SDK y JRE v1.4.x anteriores a v1.4.2_24 permite a los atacantes remotos ejecutar arbitrariamente código a través de submuestra de dimensión larga en un archivo JPEG que lanza un desbordamiento de búfer basado en memoria dinámica, también conocido como Id 6874643."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "8198F493-0447-4A87-9F16-5B6CB3572E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "645BBE6D-BA5E-4D93-9152-759A2355013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE694C9-940A-4899-844C-AC63412FA295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9476DD-9B56-4811-A248-711C25181F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "68D34082-2948-4D95-B43F-FBD59E2F3D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E01C07-4921-47CC-9AFC-D3B461D0B78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "7532E7D4-2F62-4DA0-B905-F95A0A735CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF93193-889E-4F44-ADEB-E89E56DE6C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "68C19440-4172-4539-8E38-09DBCB1752E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC000EC-9717-47DA-B182-6C8CD3970F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "115083C5-811F-47BA-8549-3BDFF9CA0740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "51337B8C-78F2-4207-998E-A3FC591F538B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "48193108-CD9F-476E-A7D2-E0796F659BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A80299-783A-4FBA-9EBF-5913942949A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "76A4F852-0240-44D6-9BD5-FE79DEF16438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E5943-5CC3-4736-85E8-FE7CC4F38735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C228E00-0F5C-41D2-8BD0-46AF682AE842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "0329E813-B2C8-4C84-BCAF-2D54C4AE0472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3C40E1-7005-4F83-B347-177BEC9EE339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "C79BDB6E-442B-41F1-A025-C17648A81FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "F20FDD9F-FF45-48BC-9207-54FB02E76071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA326F5-894A-4B01-BCA3-B126DA81CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "228AB7B4-4BA4-43D4-B562-D438884DB152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD5C688-2103-4D60-979E-D9BE69A989C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "21421215-F722-4207-A2E5-E2DF4B29859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E9224-3D12-47E2-8E69-7B682284CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "77BCD102-59A4-45A6-ADEF-CAB7F70E2377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6127E-A40D-437D-B57B-0D7F57D08559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "28AE4411-45D1-4978-BA61-334AD04FF8FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "479EB097-495A-4730-AF51-F2C0064EBA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "5024BE9F-CE32-4099-A646-F3EC5DB6F63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9FB72A-C55F-4878-89D5-375FDA08163B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "485F5ED3-062D-4A8E-AA34-9DC95D0D9646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "124364C5-0616-4C7A-A78F-08FABAA785CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7307A5-6F20-44FD-9D09-8FB76E444500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7F3992-0C15-4371-BE14-0D2046B3976E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "C5759CBC-D910-407D-83DF-A77FBDC8555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E45DE8A-477B-4BF7-893B-D11DDEE82E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDBD68A-771C-44FD-96A3-3AE189DE2591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBD21F3-AC92-4154-948E-509FB8E097F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AADBB4F9-E43E-428B-9979-F47A15696C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA21490-E253-4BDC-9BA8-5D068BE35189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "81C2C04D-D4BA-4C87-9609-C53AA63BFF19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB48B161-C239-4BB5-8667-7ACA5A5437F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83629616-1814-4858-B09F-79BEA82D6F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8F351-F900-436E-A726-55AE31FBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76B79C6-ADD0-4992-A4BD-423A0AD38714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D3F7F-30B9-4EB8-90FC-66A2A067A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722B704B-A422-4163-AD48-F30CA4A07002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05784DC-626B-4D8D-A4DF-A42AC87131DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA35E80-9E0E-4A26-B631-A61542BE4739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9E7C8-0418-4733-A496-61CCFD638859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6566CE32-E042-424A-893B-C8A9E26E2869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695F707-12E8-4BA4-BBE1-C21CB7213A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E691333-0434-4808-9ED4-E82C6EC2FD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7A538-FF2E-4622-8479-781AB73CBA45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469B74F2-4B89-42B8-8638-731E92D463B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA460D9A-662F-4861-9835-3D3116FB9488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E49A68E-0886-4AED-8FF4-9455914BFE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94B0A27-60D3-42F5-9DF6-75F481C2460D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89E95205-DB64-44AD-81A4-B77BD7595AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0875E34D-8544-49B9-BAD9-8191CC103A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E772B9-8E41-476F-81F5-87B41F1827A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9643B49-FC4B-4AD4-90AC-939DDAA96518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A04480-92DF-49AD-9B36-7F1FCB29DE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF93A34-0535-4289-B12C-A1E1E22C13D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC85B851-FEC7-4299-9EC5-D8A69E16B89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2978CF34-D48B-4ED2-A0C1-3CFAA5867223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477C310B-50AD-4D40-8EDB-4A80F0BF321D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1F526-6B28-47A3-8D2C-06CA067E9164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F09D9E-B04B-477E-86E6-E1B1F9650973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F929C59-9602-4962-95B4-4165D66E5935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B76949-9282-44D0-8075-74E482CE9A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B072DD-FC4F-4E07-9837-0E16017CA4AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86408019-1B53-4AA8-9F05-47EBD0466EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F47561-F59C-4904-8E05-D8A9629405A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB067445-8EA5-460F-B625-C21251E5A8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C075BC-607E-47A1-A32D-B912D2FA03BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007175B8-48DB-46BE-B971-FB57B6A33723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496901D5-014D-4920-A343-91A56F6FEFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D18FBC-4C9B-4722-90AB-028D281654F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BC114-592C-43FE-B227-EF41C494DC98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F4E031-CE92-48C4-BECC-7C1190DB477A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34710306-D6CF-4D07-84BF-71A8839BE416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B93DC8-6375-4B41-B9BC-F22F592C56B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16AD9E9E-D6BD-4FCD-B857-F5013033200F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BF46A9-8E4A-4583-B35F-052FD481DF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B351BB-6CA6-4CEF-9F5D-ED47774FC676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21300F7C-6904-456C-949D-C0AFA630F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776FA44E-6277-4236-A872-103E7DDE5040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA40FCD-1D34-4C47-908F-697433236153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63267A02-DCE2-4B86-B370-B90F03C7E341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00639A84-BD03-4BD9-A655-F806693DBC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2AE42E-0E25-468F-A8CB-03991F356338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14824B23-FF9F-4D6D-9D02-12B79BE346A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E015A65-708E-45B9-B66A-2D0F09638FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6493744C-A69D-4377-937E-85E7F5535EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86BA5FB-A611-458E-8E37-4D4927D04D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09019B1-B873-41CE-951E-4777F324729C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03949794-A1DD-420F-A468-8F00AEA7B69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4209A0-E73F-4B5A-9925-B5D20F879455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB8516D-03C4-478D-AFE2-824867FDC739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82AED17-FEC3-47D0-A395-26ACD07FBE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9630BC7B-9039-4FA6-86F8-5274783F3EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC39C819-9439-4029-8377-F6D58B3DFDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053DEF6-1317-4DA8-91D7-E1970DA62351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0605FF-3DDC-4F3A-8171-F3A447E9C292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801FF3B4-0729-4710-BFC2-4B078029944F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A411676-6666-4B54-A008-443B9B42F670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F69BEE4-CB4B-436A-9838-13239B368CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11AC1050-38AF-49F4-A40C-AAF9710204AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA939E8-8747-4532-B6B4-6E83824C7067"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*",
            "matchCriteriaId" : "CB9A3291-3F2C-40E9-81D3-D148002E1782"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "8198F493-0447-4A87-9F16-5B6CB3572E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "645BBE6D-BA5E-4D93-9152-759A2355013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE694C9-940A-4899-844C-AC63412FA295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9476DD-9B56-4811-A248-711C25181F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "68D34082-2948-4D95-B43F-FBD59E2F3D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E01C07-4921-47CC-9AFC-D3B461D0B78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "7532E7D4-2F62-4DA0-B905-F95A0A735CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF93193-889E-4F44-ADEB-E89E56DE6C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "68C19440-4172-4539-8E38-09DBCB1752E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC000EC-9717-47DA-B182-6C8CD3970F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "115083C5-811F-47BA-8549-3BDFF9CA0740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "51337B8C-78F2-4207-998E-A3FC591F538B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "48193108-CD9F-476E-A7D2-E0796F659BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A80299-783A-4FBA-9EBF-5913942949A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "76A4F852-0240-44D6-9BD5-FE79DEF16438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "F57E5943-5CC3-4736-85E8-FE7CC4F38735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C228E00-0F5C-41D2-8BD0-46AF682AE842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "0329E813-B2C8-4C84-BCAF-2D54C4AE0472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3C40E1-7005-4F83-B347-177BEC9EE339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "C79BDB6E-442B-41F1-A025-C17648A81FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "722A93D8-B5BC-42F3-92A2-E424F61269A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "775F2611-F11C-4B84-8F40-0D034B81BF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "F20FDD9F-FF45-48BC-9207-54FB02E76071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA326F5-894A-4B01-BCA3-B126DA81CA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "228AB7B4-4BA4-43D4-B562-D438884DB152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD5C688-2103-4D60-979E-D9BE69A989C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "21421215-F722-4207-A2E5-E2DF4B29859B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "D98175BF-B084-4FA5-899D-9E80DC3923EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "820632CE-F8DF-47EE-B716-7530E60008B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "E9412098-0353-4F7B-9245-010557E6C651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E9224-3D12-47E2-8E69-7B682284CDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "77BCD102-59A4-45A6-ADEF-CAB7F70E2377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A472AF-049D-4D63-841C-1EF737E8D64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB48B161-C239-4BB5-8667-7ACA5A5437F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83629616-1814-4858-B09F-79BEA82D6F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8F351-F900-436E-A726-55AE31FBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76B79C6-ADD0-4992-A4BD-423A0AD38714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D3F7F-30B9-4EB8-90FC-66A2A067A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722B704B-A422-4163-AD48-F30CA4A07002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05784DC-626B-4D8D-A4DF-A42AC87131DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA35E80-9E0E-4A26-B631-A61542BE4739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9E7C8-0418-4733-A496-61CCFD638859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6566CE32-E042-424A-893B-C8A9E26E2869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "14E6127E-A40D-437D-B57B-0D7F57D08559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "28AE4411-45D1-4978-BA61-334AD04FF8FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "479EB097-495A-4730-AF51-F2C0064EBA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "5024BE9F-CE32-4099-A646-F3EC5DB6F63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9FB72A-C55F-4878-89D5-375FDA08163B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "485F5ED3-062D-4A8E-AA34-9DC95D0D9646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "124364C5-0616-4C7A-A78F-08FABAA785CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7307A5-6F20-44FD-9D09-8FB76E444500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7F3992-0C15-4371-BE14-0D2046B3976E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "C5759CBC-D910-407D-83DF-A77FBDC8555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E45DE8A-477B-4BF7-893B-D11DDEE82E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDBD68A-771C-44FD-96A3-3AE189DE2591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBD21F3-AC92-4154-948E-509FB8E097F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "AADBB4F9-E43E-428B-9979-F47A15696C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "A99DAB4C-272B-4C91-BC70-7729E1152590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA21490-E253-4BDC-9BA8-5D068BE35189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "81C2C04D-D4BA-4C87-9609-C53AA63BFF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695F707-12E8-4BA4-BBE1-C21CB7213A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E691333-0434-4808-9ED4-E82C6EC2FD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7A538-FF2E-4622-8479-781AB73CBA45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-09-080/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1023132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://zerodayinitiative.com/advisories/ZDI-09-080/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Per: http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1\r\n\r\nResolution\r\n\r\nCR 6854303, 6862970, 6872357, 6872358, and 6862969 are addressed in the following releases:\r\n\r\nJava SE for Windows, Solaris, and Linux:\r\n\r\n    * JDK and JRE 6 Update 17 or later\r\n    * JDK and JRE 5.0 Update 22 or later\r\n\r\nJava SE for Solaris:\r\n\r\n    * SDK and JRE 1.4.2_24 or later\r\n\r\nJava SE for Windows:\r\n\r\n    * SDK and JRE 1.3.1_27 or later\r\n\r\nJava SE for Business for Windows, Solaris and Linux:\r\n\r\n    * JDK and JRE 6 Update 17 or later\r\n    * JDK and JRE 5.0 Update 22 or later\r\n    * SDK and JRE 1.4.2_24 or later\r\n\r\nThe issues described in CR 6874643 and 6862968 are addressed in the following releases:\r\n\r\nJava SE for Windows, Solaris, and Linux:\r\n\r\n    * JDK and JRE 6 Update 17 or later\r\n    * JDK and JRE 5.0 Update 22 or later\r\n\r\nJava SE for Solaris:\r\n\r\n    * SDK and JRE 1.4.2_24 or later\r\n\r\nJava SE for Business for Windows, Solaris and Linux:\r\n\r\n    * JDK and JRE 6 Update 17 or later\r\n    * JDK and JRE 5.0 Update 22 or later\r\n    * SDK and JRE 1.4.2_24 or later\r\n\r\nJava SE releases are available at:\r\n\r\nJDK and JRE 6 Update 17:\r\n\r\n    * http://java.sun.com/javase/downloads/index.jsp\r\n\r\nJRE 6 Update 17:\r\n\r\n    * http://java.com/\r\n    * Through the Java Update tool for Microsoft Windows users\r\n\r\nJDK 6 Update 17 for Solaris is available in the following patches:\r\n\r\n    * Java SE 6: update 17 (as delivered in patch 125136-18)\r\n    * Java SE 6: update 17 (as delivered in patch 125137-18 (64bit))\r\n    * Java SE 6_x86: update 17 (as delivered in patch 125138-18)\r\n    * Java SE 6_x86: update 17 (as delivered in patch 125139-18 (64bit))\r\n\r\nJDK and JRE 5.0 Update 22:\r\n\r\n    * http://java.sun.com/javase/downloads/index_jdk5.jsp\r\n\r\nJDK 5.0 Update 22 for Solaris is available in the following patches:\r\n\r\n    * J2SE 5.0: update 22 (as delivered in patch 118666-24)\r\n    * J2SE 5.0: update 22 (as delivered in patch 118667-24 (64bit))\r\n    * J2SE 5.0_x86: update 22 (as delivered in patch 118668-24)\r\n    * J2SE 5.0_x86: update 22 (as delivered in patch 118669-24 (64bit))\r\n\r\nJava SE for Business releases are available at:\r\n\r\n    * http://www.sun.com/software/javaseforbusiness/getit_download.jsp\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-05T16:30:00.517",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to \"timing attack vulnerabilities,\" aka Bug Id 6863503."
      }, {
        "lang" : "es",
        "value" : "La función MessageDigest.isEqual en Java Runtime Environment (JRE) en Sun Java SE en JDK y JRE v5.0 anteriores a Update 22, JDK y JRE 6 anteriores a Update 17, SDK y JRE v1.3.x anteriores a v1.3.1_27, y SDK y JRE v1.4.x anteriores a v1.4.2_24 permite a los atacantes remotos falsificar la firma digital basada en HMAC, y posiblemente evitar la autenticación, a través de vectores no especificados relativos a \"vulnerabilidades de ataque de temporización\" también conocido como Bud Id 6863503."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2AADA633-EB11-49A0-8E40-66589034F03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "B120F7D9-7C1E-4716-B2FA-2990D449F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "CD61E49F-2A46-4107-BB3F-527079983306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "D900AAE0-6032-4096-AFC2-3D43C55C6C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "88B0958C-744C-4946-908C-09D2A5FAB120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2D8D09-3F18-4E73-81CF-BB589BB8AEC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD24779-988F-4EC1-AC19-77186B68229E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1E860E-98F2-48FF-B8B3-54D4B58BF81F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE548B-DD0C-4C58-98CA-5B803F04F9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "505A8F40-7758-412F-8895-FA1B00BE6B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*",
            "matchCriteriaId" : "212F4A5F-87E3-4C62-BA21-46CBBCD8D26A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8E9AA0-8907-4B1A-86A1-08568195217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0754AFDC-2F1C-4C06-AB46-457B5E610029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DA4242-30D9-44C8-9D0D-877348FFA22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "C61C6043-99D0-4F36-AF84-1A5F90B895EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD30DAEB-4893-41CF-A455-B69C463B9337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5F6E90-A942-4468-B763-9606CE073A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "B0ADF941-5E90-498D-A2E2-7DBCF5358D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "0819F015-FF7B-4C8F-B195-4CB54070BAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CB2234-B196-4F41-9FE9-A1896A57E575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "572A693C-1EEE-4A6C-BA42-B4FB4B28D0FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "7A59AF0A-5335-4650-88DB-5B261FE5E308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "0B955A34-DCD3-42E2-BC37-88F348EE31F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "A819CA7F-6AA9-4CB0-8577-7F8C751825DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "374CA7F2-A5CE-43A3-8317-EEC605127B98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF2748E-1A9A-4988-91B7-A3A8D2B06CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "E2868B56-7CFA-4E49-9EDC-8A5E4F9D4861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCADCB6-E972-429E-AAA6-44857094AF9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A86AD5C2-32D1-4C85-A643-A7FF7F46B4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "F79C6897-18C1-43CF-AA05-C73AD57F01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB48B161-C239-4BB5-8667-7ACA5A5437F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83629616-1814-4858-B09F-79BEA82D6F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8F351-F900-436E-A726-55AE31FBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76B79C6-ADD0-4992-A4BD-423A0AD38714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D3F7F-30B9-4EB8-90FC-66A2A067A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722B704B-A422-4163-AD48-F30CA4A07002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05784DC-626B-4D8D-A4DF-A42AC87131DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA35E80-9E0E-4A26-B631-A61542BE4739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9E7C8-0418-4733-A496-61CCFD638859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6566CE32-E042-424A-893B-C8A9E26E2869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B760192E-7193-4FEF-8FFA-680AC89D45A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "9919D091-73D7-465A-80FF-F37D6CAF9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "02565D6F-4CB2-4671-A4EF-3169BCFA6154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "452A3E51-9EAC-451D-BA04-A1E7B7D917EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "55231B6B-9298-4363-9B5A-14C2DA7B1F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "E42CF0F7-418C-4BB6-9B73-FA3B9171D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "A5467E9D-07D8-4BEB-84D5-A3136C133519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*",
            "matchCriteriaId" : "B83B2CE1-45D7-47AD-BC0A-6EC74D5F8F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*",
            "matchCriteriaId" : "8A32F326-EA92-43CD-930E-E527B60CDD3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "04344167-530E-4A4D-90EF-74C684943DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E0373B-201D-408F-9234-A7EFE8B4970D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "44051CFE-D15D-4416-A123-F3E49C67A9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "F296ACF3-1373-429D-B991-8B5BA704A7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B863420B-DE16-416A-9640-1A1340A9B855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "724C972F-74FE-4044-BBC4-7E0E61FC9002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE909DE-E55A-4BD3-A5BF-ADE407432193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAC04D2-68FD-4793-A8E7-4690A543D7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "B6339EF9-97AC-4675-9971-7435A4B31432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1626F8-26F4-4EC5-A486-98808372425F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1BFE3B-3773-426B-9E69-250249E059C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "46621D4B-CA2B-4EAC-884E-9CC9486F2F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "37FED4C9-7501-4DF3-B05E-0B460CBB2D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "6958538A-0C2E-460F-A130-70515AFBB6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB1D4B3-54E6-455D-9238-B185DB012A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "360EF765-0C3A-4A13-9DA3-48928BB978E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE651B3-3320-48E7-BDD5-74D3C609162C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "2F435AA3-B716-4B3B-8873-3646E18CA600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "4773DE1C-50EF-4561-B480-74C6BD64D449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2B5C85-D6EE-4C0B-9228-A724D6C780C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "60D59062-997B-44F1-95C6-619823F138A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695F707-12E8-4BA4-BBE1-C21CB7213A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E691333-0434-4808-9ED4-E82C6EC2FD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7A538-FF2E-4622-8479-781AB73CBA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD491CD3-5763-4698-8893-2D5F5609BD89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155AD4FB-E527-4103-BCEF-801B653DEA37"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469B74F2-4B89-42B8-8638-731E92D463B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA460D9A-662F-4861-9835-3D3116FB9488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E49A68E-0886-4AED-8FF4-9455914BFE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94B0A27-60D3-42F5-9DF6-75F481C2460D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89E95205-DB64-44AD-81A4-B77BD7595AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0875E34D-8544-49B9-BAD9-8191CC103A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E772B9-8E41-476F-81F5-87B41F1827A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9643B49-FC4B-4AD4-90AC-939DDAA96518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A04480-92DF-49AD-9B36-7F1FCB29DE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF93A34-0535-4289-B12C-A1E1E22C13D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC85B851-FEC7-4299-9EC5-D8A69E16B89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2978CF34-D48B-4ED2-A0C1-3CFAA5867223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477C310B-50AD-4D40-8EDB-4A80F0BF321D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1F526-6B28-47A3-8D2C-06CA067E9164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F09D9E-B04B-477E-86E6-E1B1F9650973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F929C59-9602-4962-95B4-4165D66E5935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B76949-9282-44D0-8075-74E482CE9A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B072DD-FC4F-4E07-9837-0E16017CA4AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86408019-1B53-4AA8-9F05-47EBD0466EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F47561-F59C-4904-8E05-D8A9629405A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB067445-8EA5-460F-B625-C21251E5A8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C075BC-607E-47A1-A32D-B912D2FA03BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007175B8-48DB-46BE-B971-FB57B6A33723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496901D5-014D-4920-A343-91A56F6FEFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D18FBC-4C9B-4722-90AB-028D281654F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BC114-592C-43FE-B227-EF41C494DC98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F4E031-CE92-48C4-BECC-7C1190DB477A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34710306-D6CF-4D07-84BF-71A8839BE416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B93DC8-6375-4B41-B9BC-F22F592C56B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16AD9E9E-D6BD-4FCD-B857-F5013033200F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BF46A9-8E4A-4583-B35F-052FD481DF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B351BB-6CA6-4CEF-9F5D-ED47774FC676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21300F7C-6904-456C-949D-C0AFA630F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776FA44E-6277-4236-A872-103E7DDE5040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA40FCD-1D34-4C47-908F-697433236153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63267A02-DCE2-4B86-B370-B90F03C7E341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00639A84-BD03-4BD9-A655-F806693DBC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2AE42E-0E25-468F-A8CB-03991F356338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14824B23-FF9F-4D6D-9D02-12B79BE346A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E015A65-708E-45B9-B66A-2D0F09638FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6493744C-A69D-4377-937E-85E7F5535EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86BA5FB-A611-458E-8E37-4D4927D04D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09019B1-B873-41CE-951E-4777F324729C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03949794-A1DD-420F-A468-8F00AEA7B69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4209A0-E73F-4B5A-9925-B5D20F879455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB8516D-03C4-478D-AFE2-824867FDC739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82AED17-FEC3-47D0-A395-26ACD07FBE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9630BC7B-9039-4FA6-86F8-5274783F3EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC39C819-9439-4029-8377-F6D58B3DFDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053DEF6-1317-4DA8-91D7-E1970DA62351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0605FF-3DDC-4F3A-8171-F3A447E9C292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801FF3B4-0729-4710-BFC2-4B078029944F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A411676-6666-4B54-A008-443B9B42F670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F69BEE4-CB4B-436A-9838-13239B368CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11AC1050-38AF-49F4-A40C-AAF9710204AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA939E8-8747-4532-B6B4-6E83824C7067"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270475-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270475-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-05T16:30:00.530",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Sun Java SE en JDK y JRE v5.0 anteriores a Update 22, JDK y JRE v6 anteriores a Update 17, SDK y JRE v1.3.x anteriores a v1.3.1_27, y SDK y JRE v1.4.x anteriores a v1.4.2_2 permite a los atacantes remotos causar una denegación de servicio (consumo de memoria) a través de datos codificados DER manipulado, que no decodifica apropiadamente por el analizador de entrada ASN.1 DER, también conocido como Id 6864911."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2AADA633-EB11-49A0-8E40-66589034F03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "B120F7D9-7C1E-4716-B2FA-2990D449F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "CD61E49F-2A46-4107-BB3F-527079983306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "D900AAE0-6032-4096-AFC2-3D43C55C6C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "88B0958C-744C-4946-908C-09D2A5FAB120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2D8D09-3F18-4E73-81CF-BB589BB8AEC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD24779-988F-4EC1-AC19-77186B68229E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1E860E-98F2-48FF-B8B3-54D4B58BF81F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE548B-DD0C-4C58-98CA-5B803F04F9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "505A8F40-7758-412F-8895-FA1B00BE6B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*",
            "matchCriteriaId" : "212F4A5F-87E3-4C62-BA21-46CBBCD8D26A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8E9AA0-8907-4B1A-86A1-08568195217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0754AFDC-2F1C-4C06-AB46-457B5E610029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DA4242-30D9-44C8-9D0D-877348FFA22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "C61C6043-99D0-4F36-AF84-1A5F90B895EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD30DAEB-4893-41CF-A455-B69C463B9337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5F6E90-A942-4468-B763-9606CE073A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "B0ADF941-5E90-498D-A2E2-7DBCF5358D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "0819F015-FF7B-4C8F-B195-4CB54070BAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CB2234-B196-4F41-9FE9-A1896A57E575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "572A693C-1EEE-4A6C-BA42-B4FB4B28D0FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "7A59AF0A-5335-4650-88DB-5B261FE5E308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "0B955A34-DCD3-42E2-BC37-88F348EE31F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "A819CA7F-6AA9-4CB0-8577-7F8C751825DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "374CA7F2-A5CE-43A3-8317-EEC605127B98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF2748E-1A9A-4988-91B7-A3A8D2B06CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "E2868B56-7CFA-4E49-9EDC-8A5E4F9D4861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCADCB6-E972-429E-AAA6-44857094AF9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A86AD5C2-32D1-4C85-A643-A7FF7F46B4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "F79C6897-18C1-43CF-AA05-C73AD57F01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB48B161-C239-4BB5-8667-7ACA5A5437F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83629616-1814-4858-B09F-79BEA82D6F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8F351-F900-436E-A726-55AE31FBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76B79C6-ADD0-4992-A4BD-423A0AD38714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D3F7F-30B9-4EB8-90FC-66A2A067A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722B704B-A422-4163-AD48-F30CA4A07002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05784DC-626B-4D8D-A4DF-A42AC87131DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA35E80-9E0E-4A26-B631-A61542BE4739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9E7C8-0418-4733-A496-61CCFD638859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6566CE32-E042-424A-893B-C8A9E26E2869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B760192E-7193-4FEF-8FFA-680AC89D45A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "9919D091-73D7-465A-80FF-F37D6CAF9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "02565D6F-4CB2-4671-A4EF-3169BCFA6154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "452A3E51-9EAC-451D-BA04-A1E7B7D917EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "55231B6B-9298-4363-9B5A-14C2DA7B1F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "E42CF0F7-418C-4BB6-9B73-FA3B9171D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "A5467E9D-07D8-4BEB-84D5-A3136C133519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*",
            "matchCriteriaId" : "B83B2CE1-45D7-47AD-BC0A-6EC74D5F8F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*",
            "matchCriteriaId" : "8A32F326-EA92-43CD-930E-E527B60CDD3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "04344167-530E-4A4D-90EF-74C684943DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E0373B-201D-408F-9234-A7EFE8B4970D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "44051CFE-D15D-4416-A123-F3E49C67A9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "F296ACF3-1373-429D-B991-8B5BA704A7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B863420B-DE16-416A-9640-1A1340A9B855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "724C972F-74FE-4044-BBC4-7E0E61FC9002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE909DE-E55A-4BD3-A5BF-ADE407432193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAC04D2-68FD-4793-A8E7-4690A543D7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "B6339EF9-97AC-4675-9971-7435A4B31432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1626F8-26F4-4EC5-A486-98808372425F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1BFE3B-3773-426B-9E69-250249E059C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "46621D4B-CA2B-4EAC-884E-9CC9486F2F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "37FED4C9-7501-4DF3-B05E-0B460CBB2D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "6958538A-0C2E-460F-A130-70515AFBB6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB1D4B3-54E6-455D-9238-B185DB012A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "360EF765-0C3A-4A13-9DA3-48928BB978E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE651B3-3320-48E7-BDD5-74D3C609162C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "2F435AA3-B716-4B3B-8873-3646E18CA600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "4773DE1C-50EF-4561-B480-74C6BD64D449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2B5C85-D6EE-4C0B-9228-A724D6C780C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "60D59062-997B-44F1-95C6-619823F138A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695F707-12E8-4BA4-BBE1-C21CB7213A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E691333-0434-4808-9ED4-E82C6EC2FD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7A538-FF2E-4622-8479-781AB73CBA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD491CD3-5763-4698-8893-2D5F5609BD89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155AD4FB-E527-4103-BCEF-801B653DEA37"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469B74F2-4B89-42B8-8638-731E92D463B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA460D9A-662F-4861-9835-3D3116FB9488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E49A68E-0886-4AED-8FF4-9455914BFE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94B0A27-60D3-42F5-9DF6-75F481C2460D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89E95205-DB64-44AD-81A4-B77BD7595AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0875E34D-8544-49B9-BAD9-8191CC103A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E772B9-8E41-476F-81F5-87B41F1827A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9643B49-FC4B-4AD4-90AC-939DDAA96518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A04480-92DF-49AD-9B36-7F1FCB29DE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF93A34-0535-4289-B12C-A1E1E22C13D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC85B851-FEC7-4299-9EC5-D8A69E16B89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2978CF34-D48B-4ED2-A0C1-3CFAA5867223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477C310B-50AD-4D40-8EDB-4A80F0BF321D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1F526-6B28-47A3-8D2C-06CA067E9164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F09D9E-B04B-477E-86E6-E1B1F9650973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F929C59-9602-4962-95B4-4165D66E5935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B76949-9282-44D0-8075-74E482CE9A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B072DD-FC4F-4E07-9837-0E16017CA4AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86408019-1B53-4AA8-9F05-47EBD0466EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F47561-F59C-4904-8E05-D8A9629405A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB067445-8EA5-460F-B625-C21251E5A8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C075BC-607E-47A1-A32D-B912D2FA03BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007175B8-48DB-46BE-B971-FB57B6A33723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496901D5-014D-4920-A343-91A56F6FEFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D18FBC-4C9B-4722-90AB-028D281654F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BC114-592C-43FE-B227-EF41C494DC98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F4E031-CE92-48C4-BECC-7C1190DB477A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34710306-D6CF-4D07-84BF-71A8839BE416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B93DC8-6375-4B41-B9BC-F22F592C56B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16AD9E9E-D6BD-4FCD-B857-F5013033200F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BF46A9-8E4A-4583-B35F-052FD481DF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B351BB-6CA6-4CEF-9F5D-ED47774FC676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21300F7C-6904-456C-949D-C0AFA630F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776FA44E-6277-4236-A872-103E7DDE5040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA40FCD-1D34-4C47-908F-697433236153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63267A02-DCE2-4B86-B370-B90F03C7E341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00639A84-BD03-4BD9-A655-F806693DBC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2AE42E-0E25-468F-A8CB-03991F356338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14824B23-FF9F-4D6D-9D02-12B79BE346A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E015A65-708E-45B9-B66A-2D0F09638FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6493744C-A69D-4377-937E-85E7F5535EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86BA5FB-A611-458E-8E37-4D4927D04D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09019B1-B873-41CE-951E-4777F324729C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03949794-A1DD-420F-A468-8F00AEA7B69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4209A0-E73F-4B5A-9925-B5D20F879455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB8516D-03C4-478D-AFE2-824867FDC739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82AED17-FEC3-47D0-A395-26ACD07FBE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9630BC7B-9039-4FA6-86F8-5274783F3EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC39C819-9439-4029-8377-F6D58B3DFDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053DEF6-1317-4DA8-91D7-E1970DA62351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0605FF-3DDC-4F3A-8171-F3A447E9C292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801FF3B4-0729-4710-BFC2-4B078029944F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A411676-6666-4B54-A008-443B9B42F670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F69BEE4-CB4B-436A-9838-13239B368CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11AC1050-38AF-49F4-A40C-AAF9710204AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA939E8-8747-4532-B6B4-6E83824C7067"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270476-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270476-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-05T16:30:00.563",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Sun Java SE en JDK y JRE v5.0 anteriores a Update 22, JDK y JRE v6 anteriores a Update 17, SDK y JRE v1.3.x anteriores a v1.3.1_27, y SDK y JRE v1.4.x anteriores a v1.4.2_24 permite a los atacantes remotos causar una denegación de servicio (corrupción de memoria) a través de una cabecera manipulada HTTP, que no está propiamente analizado por el analizador de entrada ASN.1 DER también conocido como Id 6864911."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "2AADA633-EB11-49A0-8E40-66589034F03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "B120F7D9-7C1E-4716-B2FA-2990D449F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "CD61E49F-2A46-4107-BB3F-527079983306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "D900AAE0-6032-4096-AFC2-3D43C55C6C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "88B0958C-744C-4946-908C-09D2A5FAB120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2D8D09-3F18-4E73-81CF-BB589BB8AEC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD24779-988F-4EC1-AC19-77186B68229E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1E860E-98F2-48FF-B8B3-54D4B58BF81F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE548B-DD0C-4C58-98CA-5B803F04F9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "505A8F40-7758-412F-8895-FA1B00BE6B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*",
            "matchCriteriaId" : "212F4A5F-87E3-4C62-BA21-46CBBCD8D26A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8E9AA0-8907-4B1A-86A1-08568195217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0754AFDC-2F1C-4C06-AB46-457B5E610029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DA4242-30D9-44C8-9D0D-877348FFA22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "C61C6043-99D0-4F36-AF84-1A5F90B895EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD30DAEB-4893-41CF-A455-B69C463B9337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5F6E90-A942-4468-B763-9606CE073A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "B0ADF941-5E90-498D-A2E2-7DBCF5358D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "0819F015-FF7B-4C8F-B195-4CB54070BAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CB2234-B196-4F41-9FE9-A1896A57E575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "572A693C-1EEE-4A6C-BA42-B4FB4B28D0FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "7A59AF0A-5335-4650-88DB-5B261FE5E308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "0B955A34-DCD3-42E2-BC37-88F348EE31F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "A819CA7F-6AA9-4CB0-8577-7F8C751825DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "374CA7F2-A5CE-43A3-8317-EEC605127B98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF2748E-1A9A-4988-91B7-A3A8D2B06CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "E2868B56-7CFA-4E49-9EDC-8A5E4F9D4861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCADCB6-E972-429E-AAA6-44857094AF9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A86AD5C2-32D1-4C85-A643-A7FF7F46B4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.6.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "F79C6897-18C1-43CF-AA05-C73AD57F01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB48B161-C239-4BB5-8667-7ACA5A5437F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83629616-1814-4858-B09F-79BEA82D6F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E8F351-F900-436E-A726-55AE31FBF832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76B79C6-ADD0-4992-A4BD-423A0AD38714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D3F7F-30B9-4EB8-90FC-66A2A067A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722B704B-A422-4163-AD48-F30CA4A07002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05784DC-626B-4D8D-A4DF-A42AC87131DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5187B1-CB86-48E8-A595-9FCFD9822C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C660DE4-543A-4E9B-825D-CD099D08CBD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "318719C9-7B01-4021-B2EF-8341254DFE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E64B6-77DA-44BC-B646-AE01041B1830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA35E80-9E0E-4A26-B631-A61542BE4739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED9E7C8-0418-4733-A496-61CCFD638859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6566CE32-E042-424A-893B-C8A9E26E2869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B760192E-7193-4FEF-8FFA-680AC89D45A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "9919D091-73D7-465A-80FF-F37D6CAF9F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "02565D6F-4CB2-4671-A4EF-3169BCFA6154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "452A3E51-9EAC-451D-BA04-A1E7B7D917EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "55231B6B-9298-4363-9B5A-14C2DA7B1F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "E42CF0F7-418C-4BB6-9B73-FA3B9171D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "A5467E9D-07D8-4BEB-84D5-A3136C133519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*",
            "matchCriteriaId" : "B83B2CE1-45D7-47AD-BC0A-6EC74D5F8F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*",
            "matchCriteriaId" : "8A32F326-EA92-43CD-930E-E527B60CDD3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "04344167-530E-4A4D-90EF-74C684943DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E0373B-201D-408F-9234-A7EFE8B4970D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "44051CFE-D15D-4416-A123-F3E49C67A9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "F296ACF3-1373-429D-B991-8B5BA704A7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B863420B-DE16-416A-9640-1A1340A9B855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "724C972F-74FE-4044-BBC4-7E0E61FC9002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE909DE-E55A-4BD3-A5BF-ADE407432193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAC04D2-68FD-4793-A8E7-4690A543D7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "09027C19-D442-446F-B7A8-21DB6787CF43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC6C13-4B37-48E5-8199-A702A944D5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "B6339EF9-97AC-4675-9971-7435A4B31432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1626F8-26F4-4EC5-A486-98808372425F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1BFE3B-3773-426B-9E69-250249E059C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "46621D4B-CA2B-4EAC-884E-9CC9486F2F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "37FED4C9-7501-4DF3-B05E-0B460CBB2D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "6958538A-0C2E-460F-A130-70515AFBB6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB1D4B3-54E6-455D-9238-B185DB012A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "360EF765-0C3A-4A13-9DA3-48928BB978E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE651B3-3320-48E7-BDD5-74D3C609162C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "2F435AA3-B716-4B3B-8873-3646E18CA600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "4773DE1C-50EF-4561-B480-74C6BD64D449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2B5C85-D6EE-4C0B-9228-A724D6C780C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.6.0:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "60D59062-997B-44F1-95C6-619823F138A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4E34FD-D927-42BB-8A16-031D77CB4B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A3D49A-BE20-47BF-A85F-122357BAB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45DB5D3-7F35-4531-9A82-24EB50034787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4695F707-12E8-4BA4-BBE1-C21CB7213A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F64FBC-DC97-4FE3-A235-18B87945AF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85048406-9051-4E69-94A8-5C449F3B89E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C88DD7-0B46-4405-BD35-60D27E2DBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49B997-95D3-4DA4-A353-DB41AD461C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F70EF76-ED5F-4835-8252-FE613604FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E691333-0434-4808-9ED4-E82C6EC2FD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7A538-FF2E-4622-8479-781AB73CBA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD491CD3-5763-4698-8893-2D5F5609BD89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155AD4FB-E527-4103-BCEF-801B653DEA37"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469B74F2-4B89-42B8-8638-731E92D463B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA460D9A-662F-4861-9835-3D3116FB9488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E49A68E-0886-4AED-8FF4-9455914BFE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94B0A27-60D3-42F5-9DF6-75F481C2460D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89E95205-DB64-44AD-81A4-B77BD7595AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0875E34D-8544-49B9-BAD9-8191CC103A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E772B9-8E41-476F-81F5-87B41F1827A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9643B49-FC4B-4AD4-90AC-939DDAA96518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A04480-92DF-49AD-9B36-7F1FCB29DE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF93A34-0535-4289-B12C-A1E1E22C13D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC85B851-FEC7-4299-9EC5-D8A69E16B89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2978CF34-D48B-4ED2-A0C1-3CFAA5867223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477C310B-50AD-4D40-8EDB-4A80F0BF321D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1F526-6B28-47A3-8D2C-06CA067E9164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F09D9E-B04B-477E-86E6-E1B1F9650973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F929C59-9602-4962-95B4-4165D66E5935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B76949-9282-44D0-8075-74E482CE9A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B072DD-FC4F-4E07-9837-0E16017CA4AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86408019-1B53-4AA8-9F05-47EBD0466EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F47561-F59C-4904-8E05-D8A9629405A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB067445-8EA5-460F-B625-C21251E5A8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C075BC-607E-47A1-A32D-B912D2FA03BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007175B8-48DB-46BE-B971-FB57B6A33723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496901D5-014D-4920-A343-91A56F6FEFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D18FBC-4C9B-4722-90AB-028D281654F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BC114-592C-43FE-B227-EF41C494DC98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F4E031-CE92-48C4-BECC-7C1190DB477A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34710306-D6CF-4D07-84BF-71A8839BE416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B93DC8-6375-4B41-B9BC-F22F592C56B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16AD9E9E-D6BD-4FCD-B857-F5013033200F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BF46A9-8E4A-4583-B35F-052FD481DF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B351BB-6CA6-4CEF-9F5D-ED47774FC676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21300F7C-6904-456C-949D-C0AFA630F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776FA44E-6277-4236-A872-103E7DDE5040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA40FCD-1D34-4C47-908F-697433236153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63267A02-DCE2-4B86-B370-B90F03C7E341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00639A84-BD03-4BD9-A655-F806693DBC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2AE42E-0E25-468F-A8CB-03991F356338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14824B23-FF9F-4D6D-9D02-12B79BE346A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E015A65-708E-45B9-B66A-2D0F09638FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6493744C-A69D-4377-937E-85E7F5535EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86BA5FB-A611-458E-8E37-4D4927D04D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09019B1-B873-41CE-951E-4777F324729C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03949794-A1DD-420F-A468-8F00AEA7B69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4209A0-E73F-4B5A-9925-B5D20F879455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB8516D-03C4-478D-AFE2-824867FDC739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82AED17-FEC3-47D0-A395-26ACD07FBE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9630BC7B-9039-4FA6-86F8-5274783F3EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC39C819-9439-4029-8377-F6D58B3DFDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053DEF6-1317-4DA8-91D7-E1970DA62351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0605FF-3DDC-4F3A-8171-F3A447E9C292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801FF3B4-0729-4710-BFC2-4B078029944F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A411676-6666-4B54-A008-443B9B42F670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F69BEE4-CB4B-436A-9838-13239B368CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11AC1050-38AF-49F4-A40C-AAF9710204AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA939E8-8747-4532-B6B4-6E83824C7067"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270476-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://java.sun.com/javase/6/webnotes/6u17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126566824131534&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=131593453929393&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200911-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-270476-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1694.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-05T16:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Sun Java System Web Server 7.0 Update 6 has unspecified impact and remote attack vectors, as demonstrated by the vd_sjws module in VulnDisco Pack Professional 8.12.  NOTE: as of 20091105, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Sun Java System Web Server v7.0 Update 6 con impacto no especificado y vectores de ataque remoto, como se demuestra por el módulo vd_sjws en VulnDisco Pack Professional v8.12.  NOTA: a la fecha 05/11/2009, no hay ninguna información para utilizar esta vulnerabilidad. Sin embargo debido a que el autor de VulnDisco es un investigador reputado, se ha asignado un identificador CVE con el fin de hacerle un seguimiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:intevydis:vulndisco_pack:8.12:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "C3F52543-008F-4734-B729-932FC554A57B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:7.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E1A63C-F6C0-475C-BC3A-AC223E766614"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37115",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.h-online.com/security/news/item/Alleged-critical-vulnerability-in-Sun-Java-System-Web-Server-839598.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.intevydis.com/blog/?p=79",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/59497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3024",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://intevydis.com/vd-list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.h-online.com/security/news/item/Alleged-critical-vulnerability-in-Sun-Java-System-Web-Server-839598.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.intevydis.com/blog/?p=79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/59497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-2685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-06T15:30:00.420",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el formulario de login en el servidor de gestión web en HP Power Manager permite a atacantes remotos ejecutar código de su elección mediante la variable \"Login\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:power_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F088CA39-C40B-4C1A-9009-23B3AFF0CC07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=125744000032141&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37276",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/59684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507708/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3154",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-081/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125744000032141&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/59684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507708/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-09-081/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-06T15:30:00.467",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Identity Provider (IdP) 1.3.x before 1.3.4 and 2.x before 2.1.5, and the Service Provider 1.3.x before 1.3.5 and 2.x before 2.3, in Internet2 Middleware Initiative Shibboleth allow remote attackers to inject arbitrary web script or HTML via URLs that are encountered in redirections, and appear in automatically generated forms."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Identity Provider (IdP) v1.3.x anteriores a v1.3.4 y v2.x anteriores a v2.1.5, y el Service Provider v1.3.x anteriores a v1.3.5 y v2.x anteriores a v2.3, en Internet2 Middleware Initiative Shibboleth permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante URLs que se encuentran en redirecciones, y aparecen en formularios generados automáticamente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:identity_provider:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F4FDCC-6F62-46B3-BDE4-47E97C42A8BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:identity_provider:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E506CFD-FA07-4AF2-B5D0-E2445CE8E187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:identity_provider:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD4C302-0D8A-4D87-A221-AEA7860AFBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:identity_provider:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79E5936-403C-4B39-BF9E-D2CE37BF0FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:identity_provider:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E860B355-440B-42B0-8529-E61B5906EDCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:identity_provider:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "983E964B-7EED-4CD7-9008-65CF4F7F9267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:identity_provider:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEDD8A8-7178-4147-8AF8-E01DFDE3695C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:identity_provider:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381F5C77-56C3-4423-BEDD-03D6D9A36904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:identity_provider:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "439E3E35-657A-4DF2-8448-6A83C24E38AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:service_provider:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FBF9D0E-7284-48A3-86B8-13B939A0122C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:service_provider:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B580FD0A-623A-4B8B-9FF2-521761C7DAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:service_provider:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "383415FC-3B9D-435E-B492-D906E8C2B9E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:service_provider:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DC9602-44EB-433D-99BB-2BA487E1B441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:service_provider:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1747D4-FD56-4635-8C0C-CC56C95A09E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:service_provider:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F800773B-4EC2-4409-856D-4827A9FDEEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet2:service_provider:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23335793-69A9-44C3-9EC9-2D5486B7010D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37237",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://shibboleth.internet2.edu/secadv/secadv_20091104.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3150",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://shibboleth.internet2.edu/secadv/secadv_20091104.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3725",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-11-06T15:30:00.547",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN capability for certain interaction with the (1) uvesafb, (2) pohmelfs, (3) dst, or (4) dm subsystem, which allows local users to bypass intended access restrictions and gain privileges via calls to functions in these subsystems."
      }, {
        "lang" : "es",
        "value" : "La capa de conector en el kernel Linux versiones anteriores a v2.6.31.5 no requiere de la capacidad CAP_SYS_ADMIN para ciertas interacciones de los subsistemas (1) uvesafb, (2) pohmelfs, (3) dst, o (4) dm, permitiendo a usuarios locales saltar las restricciones de acceso implementadas y obtener privilegios mediante peticiones a las funciones en esos subsistemas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.31.5",
            "matchCriteriaId" : "61EA5B82-D1EB-4D3D-B82C-3A6CD1FB4938"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-kernel&m=125449888416314&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125715484511380&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125716192622235&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://patchwork.kernel.org/patch/51382/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://patchwork.kernel.org/patch/51383/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://patchwork.kernel.org/patch/51384/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://patchwork.kernel.org/patch/51387/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37113",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38905",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://xorl.wordpress.com/2009/10/31/linux-kernel-multiple-capabilities-missing-checks/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=125449888416314&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125715484511380&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=oss-security&m=125716192622235&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://patchwork.kernel.org/patch/51382/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://patchwork.kernel.org/patch/51383/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://patchwork.kernel.org/patch/51384/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://patchwork.kernel.org/patch/51387/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-864-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://xorl.wordpress.com/2009/10/31/linux-kernel-multiple-capabilities-missing-checks/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG, as they do not include the upstream change introducing this flaw.",
        "lastModified" : "2009-11-09T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-06T15:30:00.577",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains Python statements in the onLoad action of a ScriptLink SDNA."
      }, {
        "lang" : "es",
        "value" : "Blender v2.34, v2.35a, v2.40, y v2.49b permite a atacantes remotos ejecutar código de su elección mediante un fichero .blend que contenga sentencias Python en la acción onLoad de un ScriptLink SDNA."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A214D9E1-F17A-40B7-808B-DE9B0D360BA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.35a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "273D8F34-0D65-43FD-9016-70521608147A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15012DB5-DB78-49BC-9FA3-CC765690848E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blender:blender:2.49b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35E21838-A0E0-4CEC-A96A-971D9DA70694"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.coresecurity.com/content/blender-scripting-injection",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507706/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/content/blender-scripting-injection",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507706/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-06T15:30:00.610",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the Sockets Direct Protocol (SDP) driver in Sun Solaris 10, and OpenSolaris snv_57 through snv_94, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Fallo de memoria en el controlador de Sockets Direct Protocol (SDP) en Sun Solaris v10, y OpenSolaris snv_57 hasta snv_94, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "15B2F895-CBFB-4E19-AF7E-7011EB0A372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "311F14F7-EE01-4525-8C58-8BF650246026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "BC339789-4DC4-4A82-A1BE-CE59AC0D657F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CF7C1C94-48A4-4F46-A337-92EB7B8C6837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "14C63D62-F6D4-4616-AF05-5E3387D63BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6624E8DE-696A-402C-9088-CFE8ECC086BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "04B5A32E-3D42-4500-A2BE-7ADFF3903386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "244EBFE7-05DD-4BBB-9793-310D71AC1721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "325EF996-AB8D-48CE-9A59-D338C823D927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0EC8063A-1266-4443-B404-BB9C4D265B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "424C989F-99C8-4337-AF15-4A51329938DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "059880C5-B7FF-492D-97CA-FBC174FF8BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AC08000-2E71-465A-85F0-1AB8D1A51762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C5D58609-62CB-446F-995E-FD334B89F6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "1B0F8F99-99B0-4A01-884B-442CEF8D061A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0CCE3456-0BA0-4303-B7CE-22B63EE86F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A4027F7E-F867-4DC7-BA53-08D7B36E13F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "906228D3-2561-45C0-A79D-BAAC9F1AD7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BE4DE93-D189-4528-89DA-17E9325457E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "C4D46760-1924-4713-963E-E4A9AD085394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B579204A-62EB-4D86-A22B-0726B9CB88DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "636FD13F-0A30-4B03-8AEC-ED225FC71251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "B0593352-A568-4DDA-B1B8-77FA6DC93B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5299CAB1-9819-4AE4-9429-8CA32F692C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "460EE9E9-27BA-4C8B-9F06-BBA648105720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "CD673F9F-442E-4997-A0E3-D4B595D16B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "0BEADEEA-4D63-4E69-BFEE-02205150F909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "54DA5312-D935-444E-8154-514C5BD6E3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "FF6EFE12-51AD-4879-9529-B7EA425059C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7FBA68F0-4577-46F5-A754-D365B6EFF872"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "A6442F9F-E16E-4146-BA6D-92BBCB71EC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4D10B1B2-698B-4F02-9392-682AF78EC633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B69EECEC-86DB-4F35-9204-B0931ABC28DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CFC0C58B-980F-4C65-97BF-67C9E731BA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "B0F7D5DE-0491-47F6-834A-0FA208213010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8071BF6A-789C-4DB7-8247-B86EA34DB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "EECE627D-3AE8-4207-87A8-F95746F693F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E6950900-2293-4DA0-89E8-DAFABBF423DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "AB4764E7-E772-45BC-896B-C7BE287A8EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "5686A925-4978-4883-8DC1-978B09DC9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B81B14-84C8-468A-AE11-30C4CB85E6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "8CC54F69-E96A-482F-B43D-2E3A7EC90E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "CDC656B7-529A-4963-955D-301A11CF5D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "506769C9-D306-4EEC-BE2E-6E501CBE90BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "7AD5054B-18D8-44AE-AA4F-A07D12A63E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4BAD68C2-4AA2-4346-B279-51206E0651FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "96F3D4B3-7828-40EB-BD67-A3CD5B210787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C166F9F7-E8AB-4BA1-AEB6-1E7964976801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "12B6730F-6CF1-4990-953F-1CC76D78B618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "03B96DE7-70BD-4CD8-9574-8C024E51E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "C29B1192-D709-48FB-816C-B4F30460E957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "46D8D5D1-8855-4116-99B3-EA1F78FDEF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "999FFE1D-D7D4-476B-8A46-9D0179DB570B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "2B14945C-350A-4895-92C1-932208533F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "513D435B-D28B-4833-88E6-A1A8743177F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4126C6C9-90AB-470E-AF83-4ED1FDD90511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "3275E47F-5A4B-4843-A07C-82DEE852672C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "58017DDC-63B3-458C-9803-4683211A4C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "6692EE63-A76B-47C3-BC0D-7C15CA6FE013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BA1E27E5-FE20-42FA-9A61-A7174E705EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "65A32803-580D-4D07-B39B-2159258CBA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "13B51612-3BD6-449F-AD63-D01F8D05B269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1023124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141444-09-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264730-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36904",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3130",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1023124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141444-09-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-264730-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-06T15:30:00.640",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.1 on AIX allows remote attackers to modify the operating-system configuration via packets to the godm port (6177/tcp)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Cluster Management en IBM PowerHA v5.4, v5.4.1, v5.5, y v6.1 para AIX permite a atacantes remotos modificar la configuración del sistema operativo mediante paquetes al puerto godm (6177/tcp)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:C/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:powerha:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1904B9C-9B5D-4DC0-BB28-B1F2A26F57D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:powerha:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0D2EE2-F958-4A9C-A456-A1530778806A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:powerha:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C182BCB6-4981-4B1F-8B8C-3C889E16E440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:powerha:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCEED45-2F67-4633-ACA0-DA801D586FFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/haport_advisory.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37267",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ61323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ61325",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ62630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36931",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3153",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aix.software.ibm.com/aix/efixes/security/haport_advisory.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ61323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ61325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ62630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-06T15:30:00.670",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web script or HTML via the UserGUID parameter to home/index.asp and other unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en e-Courier CMS permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"UserGUID\" en home/index.asp y otros vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecouriersoftware:e-courirer_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F041FA1F-936C-4FCB-9016-C59B7E7136AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0911-exploits/ecourier-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37240",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.org/0911-exploits/ecourier-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3902",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-06T15:30:00.687",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /\\.. (slash backslash dot dot) in the URL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en Cherokee Web Server v0.5.4 y anteriores para Windows permite a atacantes remotos leer ficheros de su elección mediante una secuencia de caracteres /\\.. (barra barra invertida punto punto) en la URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherokee:cherokee_httpd:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E22471-59B6-428F-92A2-8078DBF94803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freetexthost.com/ncyss3plli",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://osvdb.org/59588",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pocoftheday.blogspot.com/2009/10/cherokee-web-server-054-directory.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37183",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36874",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freetexthost.com/ncyss3plli",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://osvdb.org/59588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pocoftheday.blogspot.com/2009/10/cherokee-web-server-054-directory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/37183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-06T15:30:00.717",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in jspui/index.jsp in ManageEngine Netflow Analyzer 7.5 build 7500 allow remote attackers to inject arbitrary web script or HTML via the (1) view and (2) section parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en jspui/index.jsp en ManageEngine Netflow Analyzer v7.5 build 7500 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) \"view\" y (2) \"section\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:manageengine:netflow_analyzer:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E188E0-5508-4D42-B277-34D7482045FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/55772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35105",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/55772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/35630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-06T15:30:00.733",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "classes/session/cc_admin_session.php in CubeCart 4.3.4 does not properly restrict administrative access permissions, which allows remote attackers to bypass restrictions and gain administrative access via a HTTP request that contains an empty (1) sessID (ccAdmin cookie), (2) X_CLUSTER_CLIENT_IP header, or (3) User-Agent header."
      }, {
        "lang" : "es",
        "value" : "classes/session/cc_admin_session.php en CubeCart v4.3.4 no maneja adecuadamente las restricciones de permiso de acceso administrativo, permitiendo a atacantes remotos saltar las restricciones y obtener acceso administrativo mediante una petición HTTP que contenga un (1) sessID (ccAdmin cookie), (2) una cabecera X_CLUSTER_CLIENT_IP , o (3) una cabecera User-Agent vacios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cubecart:cubecart:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB338F50-5ECB-46B6-A8A5-30F2E8DA7390"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.cubecart.com/index.php?showtopic=39691?read=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.cubecart.com/index.php?showtopic=39748",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37197",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.acunetix.com/blog/websecuritynews/cubecart-4-session-management-bypass-leads-to-administrator-access/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507594/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/36882",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023120",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3113",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.cubecart.com/index.php?showtopic=39691?read=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forums.cubecart.com/index.php?showtopic=39748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/37197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.acunetix.com/blog/websecuritynews/cubecart-4-session-management-bypass-leads-to-administrator-access/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507594/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/36882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2009-11-06T15:30:00.767",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web script or HTML via the UserGUID parameter to (1) Wizard_tracking.asp, (2) wizard_oe2.asp, (3) your-register.asp, (4) main-whyregister.asp, and (5) your.asp in home/, and other unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en e-Courier CMS permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"UserGUID\" de (1) Wizard_tracking.asp, (2) wizard_oe2.asp, (3) your-register.asp, (4) main-whyregister.asp, y (5) your.asp en home/, y otros vectores no especificados. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecouriersoftware:e-courirer_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F041FA1F-936C-4FCB-9016-C59B7E7136AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/37240",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2009-3555",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2009-11-09T17:30:00.407",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a \"plaintext injection\" attack, aka the \"Project Mogul\" issue."
      }, {
        "lang" : "es",
        "value" : "El protocolo TLS y el protocolo SSL v3.0 y posiblemente versiones anteriores, tal y como se usa en Microsoft Internet Information Services (IIS) v7.0, mod_ssl en el servidor HTTP Apache v2.2.14 y anteriores, OpenSSL antes de v0.9.8l, GnuTLS v2.8.5 y anteriores, Mozilla Network Security Services (NSS) v3.12.4 y anteriores, y otros productos, no asocia apropiadamente la renegociación del Handshake SSL en una conexión existente, lo que permite ataques man-in-the-middle en los que el atacante inserta datos en sesiones HTTPS, y posiblemente otro tipo de sesiones protegidas por SSL o TLS, enviando una petición de autenticación que es procesada retroactivamente por un servidor en un contexto post-renegociación. Se trata de un ataque de \"inyección de texto plano\", también conocido como el problema del \"Proyecto Mogul\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.14",
            "matchCriteriaId" : "F1BD8600-0EF7-4612-B5C4-E327C0828479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.5",
            "matchCriteriaId" : "38090AC3-C511-4C40-91A5-084CBEC11F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:nss:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.12.4",
            "matchCriteriaId" : "285433B6-03F9-495E-BACA-AA47A014411C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.8k",
            "matchCriteriaId" : "EB35F63F-7856-42EE-87A6-7EC7F10C2032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:1.0:*:openvms:*:*:*:*:*",
            "matchCriteriaId" : "718F8E8D-0940-4055-A948-96D25C79323B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4747CC68-FAF4-482F-929A-9DA6C24CB663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87614B58-24AB-49FB-9C84-E8DDBA16353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C757774-08E7-40AA-B532-6F705C8F7639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036E8A89-7A16-411F-9D31-676313BB7244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F59A04-14CF-49E2-9973-645477EA09DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BB5EDB-520B-4DEF-B06E-65CA13152824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E44669D7-6C1E-4844-B78A-73E253A7CC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D59BD0-43DE-4E58-A057-640AB98359A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE52846-24EC-4068-B788-EC7F915FFF11"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.1.0",
            "versionEndIncluding" : "0.8.22",
            "matchCriteriaId" : "06B2E3E1-C2E0-4A4E-A84D-93C456E868E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2013-11/0120.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blogs.iss.net/archive/sslmitmiscsrf.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://blogs.sun.com/security/entry/vulnerability_in_tls_protocol_during",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://clicky.me/tlsvuln",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://extendedsubset.com/?p=8",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://extendedsubset.com/Renegotiating_TLS.pdf",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01945686",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02436041",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://kbase.redhat.com/faq/docs/DOC-20491",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039957.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.gnu.org/archive/html/gnutls-devel/2009-11/msg00029.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00009.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=apache-httpd-announce&m=125755783724966&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126150535619567&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127128920008563&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127419602507642&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127557596201693&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=132077688910227&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=133469267822771&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=142660345230545&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=cryptography&m=125752275331877&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openbsd.org/errata45.html#010_openssl",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openbsd.org/errata46.html#004_openssl",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/60521",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/60972",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/62210",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/65202",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Nov/139",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37291",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37292",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37320",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37383",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37399",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37453",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37501",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37504",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37604",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37640",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37656",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37675",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37859",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38003",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38020",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38056",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38241",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38484",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38687",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38781",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39127",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39136",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39242",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39243",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39278",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39292",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39317",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39461",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39500",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39628",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39632",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39713",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39819",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40070",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40545",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40747",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40866",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/41480",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/41490",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/41818",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/41967",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/41972",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42377",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42379",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42467",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42724",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42733",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42808",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42811",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42816",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43308",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/44183",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/44954",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/48577",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200912-01.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201203-22.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023148",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.597446",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-273350-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-273029-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274990-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021653.1-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021752.1-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4004",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4170",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4171",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100070150",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100081611",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100114315",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100114327",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.citrix.com/article/CTX123359",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.zeus.com/zws/news/2010/01/13/zws_4_3r5_released",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sysoev.ru/nginx/patch.cve-2009-3555.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://tomcat.apache.org/native-doc/miscellaneous/changelog-1.1.x.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://ubuntu.com/usn/usn-923-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0155",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC67848",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC68054",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC68055",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21426108",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21432298",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24006386",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24025312",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PM00675&apar=only",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.arubanetworks.com/support/alerts/aid-020810.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.betanews.com/article/1257452450",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b01d1d.shtml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1934",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2011/dsa-2141",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2015/dsa-3253",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ietf.org/mail-archive/web/tls/current/msg03928.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ietf.org/mail-archive/web/tls/current/msg03948.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ingate.com/Relnote.php?ver=481",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/120541",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.links.org/?p=780",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.links.org/?p=786",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.links.org/?p=789",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:076",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:089",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-22.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openoffice.org/security/cves/CVE-2009-3555.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openssl.org/news/secadv_20091111.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/11/05/3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/11/05/5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/11/06/3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/11/07/3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/11/20/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2009/11/23/10",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/unix/1060/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.opera.com/support/search/view/944/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.proftpd.org/docs/RELEASE_NOTES-1.3.2c",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0119.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0130.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0155.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0165.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0167.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0337.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0338.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0339.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0768.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0770.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0786.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0807.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0865.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0986.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2010-0987.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2011-0880.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securegoose.org/2009/11/tls-renegotiation-vulnerability-cve.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507952/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/508075/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/508130/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/515055/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/522176",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/36935",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023163",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023204",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023205",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023206",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023207",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023208",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023209",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023210",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023211",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023212",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023213",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023214",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023215",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023217",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023218",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023219",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023224",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023243",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023270",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023271",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023272",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023273",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023274",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023275",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023411",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023426",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023427",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1023428",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1024789",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.tombom.co.uk/blog/?p=85",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-1010-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-927-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-927-4",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/USN-927-5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA10-222A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA10-287A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2010-0019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3164",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3165",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3205",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3220",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3310",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3313",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3353",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3354",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3484",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3521",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/3587",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0086",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0173",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0748",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0848",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0916",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0933",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0982",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0994",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1054",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1107",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1191",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1350",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1639",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1673",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1793",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/2010",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/2745",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3069",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3086",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/3126",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0032",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2011/0086",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=526689",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=545755",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=533125",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-049",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54158",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.bluecoat.com/index?page=content&id=SA50",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10088",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11578",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11617",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7315",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7478",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7973",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8366",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8535",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.f5.com/kb/en-us/solutions/public/10000/700/sol10737.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://svn.resiprocate.org/rep/ietf-drafts/ekr/draft-rescorla-tls-renegotiate.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00428.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00442.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00449.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00634.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00645.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00944.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01020.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01029.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2013-11/0120.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blogs.iss.net/archive/sslmitmiscsrf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://blogs.sun.com/security/entry/vulnerability_in_tls_protocol_during",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://clicky.me/tlsvuln",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://extendedsubset.com/?p=8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://extendedsubset.com/Renegotiating_TLS.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01945686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02436041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://kbase.redhat.com/faq/docs/DOC-20491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039957.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.gnu.org/archive/html/gnutls-devel/2009-11/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=apache-httpd-announce&m=125755783724966&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=126150535619567&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127128920008563&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127419602507642&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=127557596201693&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=132077688910227&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=133469267822771&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=142660345230545&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=cryptography&m=125752275331877&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openbsd.org/errata45.html#010_openssl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openbsd.org/errata46.html#004_openssl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://osvdb.org/60521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/60972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/62210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://osvdb.org/65202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2009/Nov/139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/37859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/38781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/39819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/40866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/41480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/41490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/41818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/41967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/41972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/42816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/43308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/44183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/44954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/48577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200912-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201203-22.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1023148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.597446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-273350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-273029-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274990-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021653.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021752.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100070150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100081611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100114315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/css/P8/documents/100114327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.citrix.com/article/CTX123359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.zeus.com/zws/news/2010/01/13/zws_4_3r5_released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sysoev.ru/nginx/patch.cve-2009-3555.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://tomcat.apache.org/native-doc/miscellaneous/changelog-1.1.x.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://ubuntu.com/usn/usn-923-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2009-0155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC67848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC68054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC68055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21426108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21432298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24006386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg24025312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, 